A. Person responsible
The controller pursuant to Art. 4 (7) GDPR is
Alfons & alfreda AG
Erkrather Straße 230
40233 Düsseldorf
E-Mail: Aa@Alfons-alfreda.com
represented by the board members Friedrich Weil and Volker Busse
B. Data processing when contacting us outside the website, including applications
(1) If you contact us outside of our website, e.g. by letter, fax, telephone or e-mail, the data you provide (e.g. surname, first name, address) and the information provided, together with any other personal data contained therein, will be processed for the purpose of contacting you and processing your request.
(2) The legal basis for the processing of personal data is Art. 6 para. 1 lit. b GDPR (in the case of an application in conjunction with Section 26 para. 1 BDSG), provided that your request is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of the inquiries addressed to us (Art. 6 para. 1 lit. f GDPR) or on any consent (Art. 6 para. 1 lit. a GDPR).
(3) The sent data will remain with us until you ask us to delete it or the purpose for data storage no longer applies. In case of rejection during an application procedure you’re in, we will regularly store your personal data for up to six months after the rejection. This retention serves in particular as evidence in the event of a legal dispute. If it becomes necessary to retain the data after the six-month period has expired (e.g. due to an impending or pending legal dispute), the data will only be deleted when the purpose for further retention no longer applies. Further storage takes place if this is required by law, in particular to comply with statutory retention obligations or if we have a legitimate interest in further storage.
C. Data processing via our website
1. hosting of the website
Our websites are hosted by an external service provider. This means that, in principle, all personal data processed in accordance with the following provisions that is collected on the website is stored on the service provider's servers. This may include IP addresses, contact requests, meta and communication data, contract data, contact details, names, website accesses and other data generated via our website. The purpose of the respective data storage and the legal basis can be found in the following provisions. We use IONOS SE, Elgendorfer Str. 57, 56410 Montabaur (domain) and united-domains AG, Gautinger Strasse 10, 82319 Starnberg (web space) as external service providers. The service providers act as our processors in accordance with our instructions.
The personal data is processed exclusively on servers in the EU.
2. processing of personal data when you visit our website
When you use our website for informational purposes, i.e. merely to view it without registering and without you providing us with any other information, we process the personal data that your browser transmits to our server. The data described below is technically necessary for us to display our website to you and to ensure its stability and security and must therefore be processed by us. The legal basis is Art. 6 para. 1 sentence 1 lit. f DS-GVO:
3. Other functions and offers on our website
(1) In addition to the purely informational use of our website, we offer various services that you can use if interested and use other common functions for analyzing or marketing our offers, which are presented in more detail below. To do this, you will usually have to provide further personal data, or we will process such further data that we use to carry out the respective services. The data processing principles mentioned before apply to all data processing purposes described here.
(2) In some cases, we use external service providers to process your data. These are carefully selected by us, are bound by our instructions and are regularly checked.
(3) Furthermore, we may pass on your personal data to third parties if we offer participation in promotions, competitions, the conclusion of contracts or similar services together with partners. Depending on the service, your data may also be collected by the partners on their own responsibility. You can find more information when you provide your data or below in the description of the respective offers. (4) If our service providers or partners are based in a country outside the European Economic Area (EEA), we will inform you of the consequences of this in the description of the offer.
4. Use of cookies
(1) In addition to the above-mentioned data, we use technical aids for various functions when you use our website, in particular cookies that can be stored on your end device. When you visit our website and at any time thereafter, you have the choice of whether you generally allow cookies to be set or which individual additional functions you would like to select. You can make changes in your browser settings or via our Consent Manager. In the following, we will first describe cookies from a technical point of view (2) before we go into more detail about your individual options by describing technically necessary cookies (3) and cookies that you can voluntarily deselect or deactivate (4).
(2) Cookies are text files or information in a database that are stored on your hard drive and assigned to the browser you are using, so that certain information can be sent to the location that sets the cookie. Cookies cannot execute programs or transmit viruses to your computer; instead, they are used primarily to make the website faster and more user-friendly. This website uses the following types of cookies, whose functionality and legal basis we will explain below:
(3) Mandatory functions that are technically necessary to display the website: The technical structure of the website requires us to use techniques, in particular cookies. Without these techniques, our website cannot be displayed (completely correctly) or the support functions could not be enabled. These are generally transient cookies that are deleted at the end of your website visit, at the latest when you close your browser. You cannot deselect these cookies if you wish to use our website. The individual cookies can be seen in the Consent Manager. The legal basis for this processing is Art. 6 (1) 1st sentence f) GDPR.
(4) Optional cookies when you give your consent: We only set various cookies after you have given your consent, which you can select via the Consent Manager when you first visit our website. The functions are only activated if you give your consent and can be used in particular to enable us to analyze and improve visits to our website, to make it easier for you to use our website via different browsers or end devices, to recognize you when you visit our website again or to place advertising (including, where applicable, to tailor advertising to your interests, to measure the effectiveness of advertisements or to show interest-based advertising). The legal basis for this processing is Art. 6 (1) 1 lit. a GDPR. You may revoke your consent at any time without affecting the lawfulness of the processing carried out until the revocation.
Optional cookies include:
a) Google Analytics
On our website, we use the web tracking service “Google Analytics”, which is provided by Google Ireland Limited; Gordon House, Barrow Street, Dublin 4, Ireland. We use this service to enable the analysis of your user interactions on websites and in apps and to improve our offering and make it more interesting for you as a user based on the statistics and reports obtained. The cookies that are specifically set for this collect data about the device/browser, IP addresses and website or app activities. In addition, your IP addresses are recorded to ensure the security of the service and to provide us, as the website operator, with information about the country, region or city from which the respective user originates (“so-called IP location determination”). For your protection, we use an anonymization function (“IP masking”), i.e. Google shortens the IP addresses within the EU/EEA by the last octet.
Google acts as a processor and a corresponding data processing agreement is in place. The information generated by the cookie and the (usually abbreviated) IP addresses regarding your use of this website are usually transmitted to a Google server in the United States and processed there. According to its own statements, Google complies with all data protection laws applicable to international data transfers. We have also agreed so-called standard contractual clauses with Google, the purpose of which is to maintain an adequate level of data protection in the third country.
The legal basis for the collection and further processing of the information (which is carried out for a maximum of 14 months) is your consent (Art. 6 para. 1 sentence 1 lit. a DS-GVO). You may revoke your consent at any time without affecting the lawfulness of the processing up to the point of revocation. In apps, you can reset the advertising ID in the Android or iOS settings. The easiest way to withdraw your consent is to use our Consent Manager or to install the Google browser add-on, which can be accessed via the following link: tools.google.com/dlpage/gaoptout?hl=de.
For more information about the scope of Google Analytics, please visit marketingplatform.google.com/about/analytics/terms/de/. Information on data processing when using Google Analytics is provided by Google at the following link: support.google.com/analytics/answer/6004245?hl=de. General information on data processing, which Google says also applies to Google Analytics, can be found in Google's privacy policy at www.google.de/intl/de/policies/privacy/. Retention period for data in Google Analytics: 2 months
5. Contact via the website, including applications
(1) When you contact us by email or using a contact form, we store the data you provide (your email address, name, telephone number if applicable, company and any other personal data you provide) in order to answer your questions and address your concerns.
(2) The processing of these data is carried out on the basis of Art. 6 (1) lit. b GDPR (in the case of an application in conjunction with § 26 (1) BDSG), provided that your request is related to the fulfillment of a contract or is required for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of the requests addressed to us (Art. 6 para. 1 lit. f DS-GVO) or on any consent obtained (Art. 6 para. 1 lit. a DS-GVO).
The data entered by you in the contact form will remain with us until you request us to delete it, revoke your consent to store it or the purpose for storing the data no longer applies. In the event that you take part in an application process and we reject your application, we will regularly store your personal data for up to six months after the rejection. In particular, the storage serves as evidence in the event of a legal dispute. Should it become necessary to store the data after the six-month period has expired (e.g. due to an impending or pending legal dispute), the data will only be deleted when the purpose for further storage no longer applies.
Further storage will take place if this is required by law, in particular to comply with legal storage obligations or if we have a legitimate interest in further storage.
(3) If we wish to use contracted service providers for individual functions of our offer or use your data for advertising purposes, we will always carefully select and monitor these service providers and inform you in detail about the respective processes below. We will also state the specified criteria for the storage period.
6. social media plug-ins
(1) We currently use the following social media plug-ins: LinkedIn, Xing and Youtube, which are only loaded if you have previously activated the function by giving your consent. We use the plug-ins to offer you the opportunity to interact with social networks and other users. The legal basis for the use of the plug-ins is Art. 6 (1) 1 lit. a GDPR, i.e. the integration only takes place after your consent.
(2) The plug-in provider stores the data collected about you as a user profile and uses it for the purposes of advertising, market research and/or the needs-based design of its website. Such an analysis is carried out in particular (even for users who are not logged in) to display customized advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, but to exercise this right, you must contact the respective plug-in provider. The data transfer occurs regardless of whether you have an account with the plug-in provider and are logged in there. If you are logged in with the plug-in provider, the data collected by us will be directly assigned to your account with the plug-in provider. If you click the activated button and, for example, link the page, the plug-in provider will also store this information in your user account and publicly share it with your contacts. We recommend that you regularly log out after using a social network, especially before activating the button, as this will help you to avoid being assigned to your profile with the plug-in provider.
(3) The information collected is stored on the providers' servers, and in the case of international providers, also outside Europe. In such cases, the provider has, according to its own information, agreed to comply with the applicable data protection laws when transferring data internationally. We have agreed so-called standard contractual clauses with the providers, the purpose of which is to ensure an adequate level of data protection in the third country.
(4) You can revoke your consent at any time without affecting the lawfulness of the processing up to the revocation. The easiest way to revoke your consent is to use our Consent Manager or the functions of the social media providers.
(5) Further information on the purpose and scope of the data collection and its processing by the plug-in provider can be found in the following data protection declarations of these providers. These also provide further information about your rights in this regard and settings options for protecting your privacy. Addresses of the respective plug-in providers and URL of the respective data protection notices:
D. Use of a video conferencing system
(1) As part of establishing contact, we may conduct video conferences with you. For this purpose, we use the “Microsoft Teams” tool from Microsoft (Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, United States) as our video conferencing system. Further information on data processing by the provider of the video conferencing system we use can be found at https://privacy.microsoft.com/de-de/privacystatement.
(2) When using our video conferencing system, the data you provide before or during an “online meeting” is processed: User information: username, display name, email address (optional), profile picture; meeting metadata: meeting ID, participant IP addresses, service data for the respective session and systems used, telephone numbers, location, name of the meeting and, if applicable, password of the organizer; chat, audio and video data: In order for audio and video transmission to take place, the application needs access to your microphone and video camera. You can mute or turn them off yourself at any time via the respective application. Any text entries you make in the chat are also processed, e.g. to record the results of an online meeting. For recordings (optional or only with the consent of all participants): MP4 file of all video, audio and presentation recordings, text file of the online meeting chat. If “online meetings” are to be recorded, we will inform you transparently in advance and, if necessary, ask for your consent. Your consent is voluntary. You can revoke it at any time with effect for the future. The recording will be stopped as soon as you revoke your consent. To participate in an online meeting or enter the meeting room, you must at least provide your name (or pseudonym).
(3) The purposes and legal bases for data processing when conducting online meetings are the same as for making contact. You can revoke any consent you have given at any time with effect for the future.
(4) The data you provide will be transferred to a third country or an international organization if participants in the “online meeting” are located in a third country. In this case, the data is routed via Internet servers that are located outside the EU. The data is encrypted during transmission over the Internet and thus protected from unauthorized access by third parties.
(5) The personal data is processed exclusively on Microsoft servers in the EU. However, a transfer to a third country cannot be ruled out because we use the video conferencing system of a provider whose corporate headquarters are in the United States. An adequate level of data protection is guaranteed by the conclusion of the so-called standard contractual clauses, which are centrally prescribed by the EU Commission. This agreement was made between the provider and us.
E. Data processing for our social media presence
(1) We have various presences on social media platforms. We operate these presences with the following providers:
(2) We use the technical platform and services of the providers for these information services. We would like to point out that you use our social media platforms and their functions at your own risk. This applies in particular to the use of interactive functions (e.g. commenting, sharing, rating). When you visit our sites, the social media platform providers collect, among other things, your IP address and other information that is stored on your device in the form of cookies. This information is used to provide us, as the account operator, with statistical information about your interaction with us.
(3) The data collected about you in this context is processed by the platforms and may be transferred to countries outside the European Union, in particular the USA. All of the aforementioned providers maintain an appropriate level of data protection and we have concluded standard data protection clauses with the companies (with the exception of Xing, as this provider is based within the EU). We do not know how the social media platforms use the data from your visit to our account and interaction with our posts for their own purposes, how long this data is stored and whether data is passed on to third parties. The data processing may differ depending on whether you are registered with the social network and logged in or visiting the site as a non-registered and/or non-logged-in user. When you access a post or the account, the IP address assigned to your device is transmitted to the social media platform provider. If you are currently logged in as a user, a cookie on your device can be used to track how you have moved around the web. Buttons embedded in websites enable the platforms to record your visits to these websites and to assign them to your respective profile. Based on this data, content or advertising can be tailored to you. If you want to avoid this, you should log out or disable the “stay signed in” feature, delete the cookies on your device, and restart your browser.
(4) As the provider of the information service, we only process the data from your use of our service that you provide to us and that requires interaction. For example, if you ask a question that we can only answer by email, we will store your information in accordance with the general principles of our data processing, which we describe in this data protection declaration. The legal basis for the processing of your data on the social media platform is Art. 6 (1) sentence 1 point f GDPR.
(5) To exercise your rights as a data subject, you can contact either us or the provider of the social media platform. If one party is not responsible for answering or the information must be obtained from the other party, we or the provider will forward your request to the respective partner. Please contact the operator of the social media platform directly if you have any questions about the creation of profiles or the processing of your data when using the website. If you have any questions about the processing of your interaction with us on our site, please write to us using the contact details provided above.
(6) The information that the social media platform receives and how it is used is described by the providers in their data protection declarations (see links above under paragraph 1). There you will also find information about how to contact us and how to adjust the settings for advertisements.
F. Data deletion and storage period
(1) Insofar as no explicit storage period is specified below, your personal data will be deleted or blocked as soon as the purpose or legal basis for the storage no longer applies. Your data is generally only stored on our servers in Germany.
(2) However, storage may take place beyond the specified time in the event of a (threatened) legal dispute with you or other legal proceedings, or if storage is provided for by legal regulations to which we are subject as the controller (e.g. Section 257 of the German Commercial Code (HGB), Section 147 of the German Tax Code (AO)). When the retention period prescribed by law expires, the personal data will be blocked or deleted, unless further retention by us is necessary and there is a legal basis for this.
G. Data security
We use appropriate technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or against unauthorized access by third parties (e.g. TSL encryption for our website ), taking into account the state of the art, the costs of implementation and the nature, scope, context and purposes of processing as well as the risks of an accidental loss or unauthorized access, disclosure, alteration or destruction (including the likelihood and the consequences of such an event) for the data subject. Our security measures are continuously improved in line with technological developments.
We will be happy to provide you with more detailed information on request. Please use the contact details above.
H. Cooperation with processors, transfer of personal data to third parties and disclosure to third parties.
(1) As with any large company, we also use external domestic and foreign service providers (e.g. in the areas of IT, logistics, telecommunications, sales and marketing) to carry out our business transactions. These service providers only act as processors in accordance with our instructions and have been contractually obliged to comply with data protection regulations in accordance with Art. 28 GDPR.
If we forward your personal data to our subsidiaries or our subsidiaries forward your personal data to us (e.g. for advertising purposes), this is done on the basis of existing order processing relationships.
(2) The following categories of recipients, who are usually processors, may have access to your personal data:
(3) Your personal data will not be transferred to third parties for purposes other than those listed. We will only transfer your personal data to third parties if:
I. No automated decision-making (including profiling)
We have no intention of using personal data collected from you for automated decision-making (including profiling).
J. Your rights
(1) You can assert your rights as a data subject with regard to your processed personal data at any time using the contact details provided in this data protection notice. As a data subject, you have the right
(2) If you have given your consent to the processing of your data, you can revoke it at any time. Such a revocation influences the permissibility of the processing of your personal data after you have given it to us. The permissibility of the processing of your data up to the time of your revocation remains unaffected.
(3) Insofar as we base the processing of your personal data on the weighing of interests, you may object to the processing. This is the case if the processing is not necessary, in particular, to fulfill a contract with you, which we describe in the following description of the functions. When exercising such an objection, we ask you to explain the reasons why we should not process your personal data in the way we have done. In the event of your objection, we will examine the situation and will either discontinue or adjust the data processing or point out to you our compelling legitimate grounds for continuing the processing.
(4) Of course, you can object to the processing of your personal data for advertising and data analysis purposes at any time. You can best exercise your right to object to advertising using the contact details provided above.
K. Changes to the data protection information
(As part of the further development of data protection law and technological or organizational changes, our data protection notices are regularly reviewed for the need for adjustments or additions. You will be informed of any changes in particular on our German website at https://www.alfons-alfreda.com/. This data protection notice is dated June 2024.
For more Information please contact
Erkrather Str. 230, 40233 Düsseldorf
+49 (0)211 97 63 41 90, Aa@Alfons-alfreda.com
Discover
