1. An overview of data protection
The operators of this website take the protection of your personal data very seriously. We keep your personal data confidential in accordance with data protection laws, as well as this data privacy statement.
Please note that the transfer of data on the internet (e.g. when communicating by e-mail) can be subject to security risks. Complete protection of your data against third-party access is not possible.
Data collection on our website
Who is responsible for the data collection on this website?
The data collected on this website are processed by the website operator. The operator's contact details can be found in the website's required legal notice.
How do we collect your data?
Some data are collected when you provide it to us. This could, for example, be data you enter on a contact form.Other data are collected automatically by our IT systems when you visit the website. These data are primarily technical data such as the browser and operating system you are using or when you accessed the page. These data are collected automatically as soon as you enter our website.
What do we use your data for?
We will use the above-mentioned data for the following purposes:
- Ensuring a smooth connection and comfortable use of this website,
- Evaluating system security and stability,
- Managing our contractual relationship and contract preparation,
- Conducting a check against sanction and anti-terror lists, if legally required,
- Other administrative purposes
What rights do you have regarding your data?
You have the right:
- to request information about your personal data processed by us, free of charge, pursuant to article 15 DSGVO. In particular, you may request information about the purposes of processing such data, the category of personal information, the categories of receivers to which your data has been or will be revealed, the planned storage duration, the existence of a right to correction, deletion, processing limitation or objection, the existence of a right to legal remedy, the origin of your data, if they were not collected at our location, as well as the existence of an automated decision-making process, including profiling and significant information about their details;
- to demand the correction or completion of your incorrect personal data stored by us, pursuant to article 16 DSGVO;
- to demand the deletion of your personal data stored by us, unless the processing of such data is necessary to exercise the right to free expression and information, for the purpose of fulfilling a legal requirement, for reasons of public interest or for the purpose of exercising or defending legal rights, pursuant to article 17 DSGVO;
- to demand, according to article 18 DSGVO, the limitation of the processing of your personal data, if you dispute their correctness, they have been processed illegally, but you oppose their deletion and we no longer need them, but you need them for the purpose of exercising or defending legal rights, or you have objected to their processing pursuant to article 21 DSGVO;
- to demand receiving personal data you have provided to us in a structured, common and machine-readable format or request the transmission to another authorized person, pursuant to article 20 DSGVO;
- to revoke your consent at any time, pursuant to article 7 (3) DSGVO. As a result, we are no longer allowed to continue the processing of data based on your original consent, and
- to lodge a complaint with a regulatory authority, pursuant to article 77 DSGVO. Usually, you can lodge your complaint with the authority of your normal residence or place of work (data privacy officer of the state), or the authority responsible for the location of our company.
You can contact us at any time at the address given in the imprint if you have any further questions on the subject of data protection.
2. General information and mandatory information
Please note that data transmitted via the internet (e.g. via email communication) may be subject to security breaches. Complete protection of your data from third-party access is not possible.
Notice concerning the party responsible for this website
The party responsible for processing data on this website is:
Telefon: 036602 338-0
Fax: 036602 338-11
The responsible party is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data (names, email addresses, etc.).
Revocation of your consent to the processing of your data
Many data processing operations are only possible with your express consent. You may revoke your consent at any time with future effect. An informal email making this request is sufficient. The data processed before we receive your request may still be legally processed.
Right to file complaints with regulatory authorities
If there has been a breach of data protection legislation, the person affected may file a complaint with the competent regulatory authorities. The competent regulatory authority for matters related to data protection legislation is the data protection officer of the German state in which our company is headquartered. A list of data protection officers and their contact details can be found at the following link: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.
Right to data portability
Your personal data will not be passed on to third parties for reasons other than those detailed below. We only pass on your personal data to third parties, if:
- you have given your express consent pursuant to article 6, paragraph. 1 (1) a DSGVO,
- the transfer is necessary for the purpose of exercising or defending legal rights and there is no reason to assume that you have a predominant and protectable interest in not having your data transferred, according to article 6, paragraph 1 (1) f DSGVO,
- there is a legal duty for the transfer of such data pursuant to article 6, paragraph 1 (1) c DSGVO, and
- it is legally permissible and necessary in order to conduct contractual matters with you, pursuant to article 6, paragraph 1 (1) b DSGVO.
You have the right to have data which we process based on your consent or in fulfillment of a contract automatically delivered to yourself or to a third party in a standard, machine-readable format. If you require the direct transfer of data to another responsible party, this will only be done to the extent technically feasible.
SSL or TLS encryption
This site uses SSL or TLS encryption for security reasons and for the protection of the transmission of confidential content, such as the inquiries you send to us as the site operator. You can recognize an encrypted connection in your browser's address line when it changes from "http://" to "https://" and the lock icon is displayed in your browser's address bar.
If SSL or TLS encryption is activated, the data you transfer to us cannot be read by third parties.
We also employ suitable technical and organizational safety measures to protect your data against accidental or deliberate manipulation, partial or complete loss, destruction or unauthorized third-party access. Our safety measures are continuously improved according to technological development.
Information, blocking, deletion
As permitted by law, you have the right to be provided at any time with information free of charge about any of your personal data that is stored as well as its origin, the recipient and the purpose for which it has been processed. You also have the right to have this data corrected, blocked or deleted. You can contact us at any time using the address given in our legal notice if you have further questions on the topic of personal data.
Opposition to promotional emails
We hereby expressly prohibit the use of contact data published in the context of website legal notice requirements with regard to sending promotional and informational materials not expressly requested. The website operator reserves the right to take specific legal action if unsolicited advertising material, such as email spam, is received.
3. Data protection officer
Statutory data protection officer
We have appointed a data protection officer for our company.
Telefon: 036602 338-0
Fax: 036602 338-11
4. Data collection on our website
Most of the cookies we use are so-called "session cookies." They are automatically deleted after your visit. Other cookies remain in your device's memory until you delete them. These cookies make it possible to recognize your browser when you next visit the site.
Server log files
The website provider automatically collects and stores information that your browser automatically transmits to us in "server log files". These are:
- Browser type and browser version
- Operating system used
- Referrer URL
- Host name of the accessing computer
- Time of the server request
- IP address
These data will not be combined with data from other sources.
The basis for data processing is Art. 6 (1) (f) DSGVO, which allows the processing of data to fulfill a contract or for measures preliminary to a contract. Our legitimate interest follows from the purposes of data collection listed above.
Should you send us questions via the contact form, we will collect the data entered on the form, including the contact details you provide, to answer your question and any follow-up questions. We do not share this information without your permission.
We will, therefore, process any data you enter onto the contact form only with your consent, as outlined in article 6 (1)(a) DSGVO. You may revoke your consent at any time. An informal email making this request is sufficient. The data processed before we receive your request may still be legally processed.
We will retain the data you provide on the contact form until you request its deletion, revoke your consent for its storage, or the purpose for its storage no longer exists (e.g. after fulfilling your request). Any mandatory statutory provisions, especially those regarding mandatory data retention periods, remain unaffected by this provision.
If you send us inquiries by callback service, your details from the form, including the contact data you provided there, will be stored for the purpose of processing the inquiry and in the event of follow-up questions. We will not pass on this data without your consent.
The processing of the data entered in the callback service is thus carried out exclusively on the basis of your consent (Art. 6 para. 1 lit. a DSGVO). You can revoke this consent at any time. All you need to do is send us an e-mail. The legality of the data processing processes carried out up to the revocation remains unaffected by the revocation.
The data entered by you in the callback service remain with us until you request us to delete, your consent for storage revoked or the purpose for data storage no longer applies (e.g. after your request has been processed). Mandatory statutory provisions - in particular retention periods - remain unaffected.
5. Social media
Our site uses functions from the LinkedIn network. The service is provided by LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA.
Each time one of our pages containing LinkedIn features is accessed, your browser establishes a direct connection to the LinkedIn servers. LinkedIn is informed that you have visited our web pages from your IP address. If you use the LinkedIn “Recommend” button and are logged into your LinkedIn account, it is possible for LinkedIn to associate your visit to our website to your user account. We would like to point out that, as the provider of these pages, we have no knowledge of the content of the data transmitted or how it will be used by LinkedIn.
6. Analytics and advertising
This website uses Google Analytics, a web analytics service. It is operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Google Analytics uses so-called "cookies". These are text files that are stored on your computer and that allow an analysis of the use of the website by you. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there.
Google Analytics cookies are stored based on Art. 6 (1) (f) DSGVO. The website operator has a legitimate interest in analyzing user behavior to optimize both its website and its advertising effort.
We have activated the IP anonymization feature on this website. Your IP address will be shortened by Google within the European Union or other parties to the Agreement on the European Economic Area prior to transmission to the United States. Only in exceptional cases is the full IP address sent to a Google server in the US and shortened there. Google will use this information on behalf of the operator of this website to evaluate your use of the website, to compile reports on website activity, and to provide other services regarding website activity and Internet usage for the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with any other data held by Google.
You can prevent these cookies from being stored by selecting the appropriate settings in your browser. However, we wish to point out that doing so may means you will not be able to enjoy the full functionality of this website. You can also prevent the data generated by cookies about your use of the website (incl. your IP-address) from being passed to Google, and the processing of these data by Google, by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en.
Objecting to the collection of data
You can prevent the collection of your data by Google Analytics by clicking on the following link. An opt-out cookie will be set to prevent your data from being collected on future visits to this site: Disable Google Analytics.
Outsourced data processing
We have entered into an agreement with Google for the outsourcing of our data processing and fully implement the strict requirements of the German data protection authorities when using Google Analytics.
Demographic data collection by Google Analytics
This website uses Google Analytics' demographic features. This allows reports to be generated containing statements about the age, gender, and interests of site visitors. This data comes from interest-based advertising from Google and third-party visitor data. This collected data cannot be attributed to any specific individual person. You can disable this feature at any time by adjusting the ads settings in your Google account or you can forbid the collection of your data by Google Analytics as described in the section "Refusal of data collection".
Google Analytics Remarketing
Our websites use the features of Google Analytics Remarketing combined with the cross-device capabilities of Google AdWords and DoubleClick. This service is provided by Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA.
This feature makes it possible to link target audiences for promotional marketing created with Google Analytics Remarketing to the cross-device capabilities of Google AdWords and Google DoubleClick. This allows advertising to be displayed based on your personal interests, identified based on your previous usage and surfing behavior on one device (e.g. your mobile phone), on other devices (such as a tablet or computer).
Once you have given your consent, Google will associate your web and app browsing history with your Google Account for this purpose. That way, any device that signs in to your Google account can use the same personalized promotional messaging.
To support this feature, Google Analytics collects Google-authenticated IDs of users that are temporarily linked to our Google Analytics data to define and create audiences for cross-device ad promotion.
You can permanently opt out of cross-device remarketing/targeting by turning off personalized advertising in your Google Account; follow this link: https://www.google.com/settings/ads/onweb/.
The aggregation of the data collected in your Google Account data is based solely on your consent, which you may give or withdraw from Google as per article 6 (1) (a) DSGVO. For data collection operations not merged into your Google account (for example, because you do not have a Google account or have objected to the merge), the collection of data is based on article 6 (1) (f) DSGVO. The website operator has a legitimate interest in analyzing anonymous user behavior for promotional purposes.
Google AdWords and Google Conversion Tracking
This website uses Google AdWords. AdWords is an online advertising program from Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, United States ("Google").
As part of Google AdWords, we use so-called conversion tracking. When you click on an ad served by Google, a conversion tracking cookie is set. Cookies are small text files that your internet browser stores on your computer. These cookies expire after 30 days and are not used for personal identification of the user. Should the user visit certain pages of the website and the cookie has not yet expired, Google and the website can tell that the user clicked on the ad and proceeded to that page.
Each Google AdWords advertiser has a different cookie. Thus, cookies cannot be tracked using the website of an AdWords advertiser. The information obtained using the conversion cookie is used to create conversion statistics for the AdWords advertisers who have opted for conversion tracking. Customers are told the total number of users who clicked on their ad and were redirected to a conversion tracking tag page. However, advertisers do not obtain any information that can be used to personally identify users. If you do not want to participate in tracking, you can opt-out by easily disabling the Google Conversion Tracking cookie by changing your browser settings. In doing so, you will not be included in the conversion tracking statistics.
Conversion cookies are stored based on article 6 (1) (f) DSGVO. The website operator has a legitimate interest in analyzing user behavior to optimize both its website and its advertising effort.
7. Plugins and tools
Our website uses plugins from YouTube, which is operated by Google. The operator of the pages is YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA.
If you visit one of our pages featuring a YouTube plugin, a connection to the YouTube servers is established. Here the YouTube server is informed about which of our pages you have visited.
If you are logged in to your YouTube account, YouTube allows you to associate your browsing behavior directly with your personal profile. You can prevent this by logging out of your YouTube account.
YouTube is used to help make our website appealing. This constitutes a justified interest pursuant to Art. 6 (1) (f) DSGVO.
Further information about handling user data, can be found in the data protection declaration of YouTube under https://www.google.de/intl/de/policies/privacy.
8. Country-specific Regulations
The following rules apply for users based in the Russian Federation:
The services detailed herein are not intended for citizens of the Russian Federation, who are based in Russia. If you are a Russian citizen based in Russia, we hereby inform you that any personal data you enter through the services are entered at your own risk and are your responsibility; you give your express consent that CETONI GmbH may record your personal data and process such data in the USA and other countries and that CETONI GmbH can not be made responsible for any non-compliance with the laws of the Russian Federation.
The following rules apply to users based in the People’s Republic of China:
The services detailed herein are not intended for citizens of the People’s Republic of China, who are based in China. If you are a Chinese citizen based in the P.R.C., we hereby inform you that any personal data you enter through the services are entered at your own risk and are your responsibility; you give your express consent that CETONI GmbH may record your personal data and process such data in the USA and other countries and that CETONI GmbH can not be made responsible for any non-compliance with the laws of the P.R.C.
The following rules apply to users based in the USA:
People from certain geographic regions (including the United States) may experience limited access to the contents of this website. CETONI GmbH does not claim that the website or its content is accessible or appropriate outside of this region. Access to this website may be illegal for certain people or in certain countries. If you access this website in violation of such legal regulations, you do so on your own initiative and are responsible for the compliance with current laws.
The “Shine the Light” law, enacted by the State of California, allows California residents to request certain information regarding what personal data CETONI GmbH passes on to third parties for direct marketing purposes.
If you would like to receive additional information under the “Shine the Light” law, please contact us as described above or send your request to the address provided with the title “California Shine the Light Request”, so we are able to relate to your question in the proper way. We will need your postal address, your place of residence and your e-mail address, in order to send you a reply.
9. Currentness and Modification of this Data Privacy Statement
This data privacy statement is current and valid, and was last updated in May 2018.
Due to the development of our website and offers, or due to changes in legal requirements, it may become necessary to modify this data privacy statement. The updated and current data privacy statement can be accessed and printed at any time at the following link: www.cetoni.de/en/data-protection-declaration.