Data protection regulations
1. General note and mandatory information
Thank you for visiting our website. Compliance with data protection regulations is of the utmost importance to us. When you use this website, various personal data is collected. Personal data is data that can be used to identify you personally. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this is done.
2. Legal basis of the processing
The following applies with regard to the legal basis for processing your personal data.
If you have consented to data processing, we process your personal data based on Art. 6 para. 1 lit. a GDPR. In the event of express consent to the transfer of personal data to third countries, data processing is also carried out on the basis of Art. 49 para. 1 lit. a GDPR. If you have consented to the storage of cookies or access to information in your end device (e.g. via device fingerprinting), the data processing is also carried out on the basis of Section 25 (1) TTDSG. Consent can be revoked at any time. If your data is required for the fulfilment of a contract or for the implementation of pre-contractual measures, we process your data on the basis of Art. 6 para. 1 lit. b GDPR. Furthermore, we process your data on the basis of Art. 6 para. 1 lit. c GDPR if this is necessary to fulfil a legal obligation. Data processing may also be carried out on the basis of our legitimate interest in accordance with Art. 6 para. 1 lit. f GDPR. Information on the relevant legal bases in each individual case is provided in the following paragraphs of this privacy policy.
3. Responsible body
The controller within the meaning of the GDPR and other applicable data protection regulations (in particular BDSG and TTDSG) for data processing processes on this website (hereinafter “we”) is
SMABTP Germany GmbH
Im Zollhafen 24
50678 Köln
Tel: 0049 221 47448841
E-Mail: [email protected]
4. Rights of the data subject
If you are a data subject within the meaning of Art. 4 No. 1 GDPR, you have the following rights with regard to the processing of your personal data under the GDPR. You can find the legal text of the rights listed below at https://www.bfdi.bund.de/SharedDocs/Publikationen/Infobroschueren/INFO6.html
Right to confirmation and information
Under the conditions of Art. 15 GDPR, you have the right to request confirmation as to whether personal data concerning you is being processed and to obtain information free of charge at any time from the controller responsible for about the personal data stored about you and a copy of this information.
Right to rectification
Under the conditions of Art. 16 GDPR, you have the right to demand the immediate rectification of inaccurate personal data concerning you. You also have the right to request the completion of incomplete personal data, including by means of a supplementary declaration, taking into account the purposes of the processing.
Right to erasure
Under the conditions of Art. 17 GDPR, you have the right to obtain from us the erasure of personal data concerning you without undue delay where one of the grounds specified in Art. 17 GDPR applies and insofar as the processing is not necessary.
Right to restriction of processing
Under the conditions of Art. 18 GDPR, you have the right to demand the restriction of processing if one of the conditions specified in Art. 18 GDPR applies.
Right to data portability
Under the conditions of Art. 20 GDPR, you have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and you have the right to transmit those data to another controller without hindrance from us, provided that the other conditions of Art. 20 GDPR are met.
Right to withdraw consent
In accordance with Art. 7 para. 3 GDPR, you have the right to withdraw your consent to the processing of personal data at any time with effect for the future. Please send your cancellation to the contact details given above.
Right to object
Under the conditions of Art. 21 GDPR, you have the right to object at any time to the processing of personal data concerning you. If the conditions for an effective objection are met, we may no longer process the data.
Right to lodge a complaint with a supervisory authority
In accordance with Art. 77 GDPR, you have the right – without prejudice to any other administrative or judicial remedy – to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes the provisions of the GDPR.
The competent supervisory authority in North Rhine-Westphalia is State Commissioner for Data Protection and Freedom of Information
North Rhine-Westphalia
Kavalleriestraße 2 – 4
40213 Düsseldorf
If you would like to exercise your right of cancellation or objection, simply send an e-mail to
[email protected]
5. Hosting
This website is hosted by an external service provider (hoster).
Type and scope of processing
The personal data collected on this website is stored on the hoster’s servers. This may include IP addresses, contact requests, meta and communication data, contract data, contact details, names, website accesses and other data generated via a website.
Purpose and legal basis
The hoster is used for the purpose of fulfilling the contract with our potential and existing customers (Art. 6 para. 1 lit. b GDPR) and in the interest of the most reliable presentation of our website by a professional provider (Art. 6 para. 1 lit. f GDPR). Our hoster will only process your data to the extent necessary to fulfil its performance obligations and follow our instructions with regard to this data. If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information in the user’s terminal device (e.g. device fingerprinting) within the meaning of the TTDSG. Consent can be revoked at any time.
Data is also passed on if we are authorized or obliged to pass on data due to legal provisions and/or official or court orders. In particular, this may involve the provision of information for the purposes of criminal prosecution, security or the enforcement of intellectual property rights.
We use the following hoster
Cloudflare
Order processing
We have concluded a data processing agreement (DPA) for the use of the above-mentioned service. This is a contract prescribed by data protection law, which ensures that the hoster processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.
6. SSL or TLS encryption
For security reasons and to protect the transmission of confidential content that you send to us as the site operator, our website uses SSL or TLS encryption (Secure Sockets Layer/Transport Layer Security). This means that data that you transmit via this website cannot be read by third parties. You can recognize an encrypted connection by the “https://” address line of your browser and the lock symbol in the browser line.
7. Data collection on this website
7.1 Logfiles
Every time you visit our website, your browser automatically sends certain information to the website server, which then stores it in a log file. This includes, for example, information about
1. the type and version of the browser you are using
2. the (mobile) operating system you are using
3. the website from which you came to the current page,
4. the host name (IP address) of your (mobile) device and
5. the time at which the request was made,
6. the internet service provider of the accessing (mobile) device.”
“We also use the information transmitted by your browser to our servers in anonymized form – i.e. without it being possible to draw any conclusions about you – to analyze and improve our services. In this way, we can, for example, detect possible errors or determine on which days and at which times our services are particularly heavily used.
When using the aforementioned data, we do not draw any conclusions about you as the data subject. We only need the data to correctly deliver and optimize the content of our website, to ensure the functionality of our systems and technology and to provide law enforcement authorities with the information necessary for criminal prosecution.
This anonymously collected data, and information is therefore analyzed by us both statistically and with the aim of increasing data protection and data security in our company in order to ultimately ensure an optimal level of protection for the personal data processed by us.
The data of the server log files are stored separately from all personal data provided by you.
7.2 Cookies
Our website uses cookies. These are small text files that your web browser stores on your end device.
Cookies help us to make our website more user-friendly, effective and secure. Some cookies are “session cookies”. Such cookies are deleted automatically at the end of your browser session. Other cookies remain on your end device until you delete them yourself. Such cookies help us to recognize you when you return to our website.
With a modern web browser, you can monitor, restrict or prevent the setting of cookies. Many web browsers can be configured so that cookies are deleted automatically when the program is closed. Deactivating cookies may result in limited functionality of our website. The setting of cookies, which are necessary for the performance of electronic communication processes, or the provision of certain functions desired by you, takes place on the basis of Art. 6 para. 1 lit. f GDPR. As the operator of this website, we have a legitimate interest in the storage of cookies for the technically error-free and smooth provision of our services. If other cookies are set (e.g. for analysis functions), these are treated separately in this privacy policy.
If consent to the storage of cookies and comparable recognition technologies has been requested, the processing is carried out exclusively on the basis of this consent (Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG); consent can be revoked at any time.
7.3 Google Tag Manager
We use the Google Tag Manager. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Type and scope of processing
Google Tag Manager is a tool that can be used to integrate tracking or statistical tools and other technologies on our website and enables us to control the integration of services on our website. Google Tag Manager itself does not create any user profiles, does not store any cookies and does not carry out any independent analyses. It is only used to manage and display the tools integrated via it. However, Google Tag Manager records your IP address, which may also be transferred to Google’s parent company in the United States
Purpose and legal basis
Google Tag Manager is used on the basis of Art. 6 para. 1 lit. f GDPR. We have a legitimate interest in the fast and uncomplicated integration and management of various tools on our website. If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information in the user’s terminal device (e.g. device fingerprinting) within the meaning of the TTDSG. Consent can be revoked at any time.
The provider is certified in accordance with the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the USA, which is intended to ensure compliance with European data protection standards for data processing in the USA. Every company certified under the DPF undertakes to comply with these data protection standards. Further information on this can be found at the following link:
Storage period
The specific storage period of the processed data cannot be influenced by us, but is determined by Google Ireland Limited. Further information can be found in the privacy policy for Google Fonts (https://policies.google.com/privacy).
7.4 Google Maps
This site uses the map service Google Maps. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
Type and scope of processing
To use the functions of Google Maps, it is necessary to save your IP address. This information is usually transmitted to a Google server in the USA and stored there. We have no influence on this data transfer. If Google Maps is activated, Google may use Google Fonts for the purpose of standardizing the display of fonts. When you call up Google Maps, your browser loads the required web fonts into your browser cache in order to display texts and fonts correctly.
Purpose and legal basis
The use of Google Maps is in the interest of an appealing presentation of our online offers and to
make it easy to find the places we have indicated on the website. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR. If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information in the user’s terminal device (e.g. device fingerprinting) within the meaning of the TTDSG. Consent can be revoked at any time.
Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found at the following link: https://privacy.google.com/businesses/gdprcontrollerterms/ and https://privacy.google.com/businesses/gdprcontrollerterms/sccs/
You can find more information on the handling of user data in Google’s privacy policy (https://policies.google.com/privacy?hl=de). The company is certified in accordance with the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the USA that is intended to ensure compliance with European data protection standards for data processing in the USA. Every company certified under the DPF undertakes to comply with these data protection standards. Further information on this can be found at the following link: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt000000001L5AAI&status=Active
Storage period
The specific storage period of the processed data cannot be influenced by us, but is determined by Google Ireland Limited. Further information can be found in the privacy policy for Google Fonts (https://policies.google.com/privacy).
7.5 Google fonts
Type and scope of processing
We use Google Fonts from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, as a service to provide fonts for our online offering. To obtain these fonts, you establish a connection to servers of Google Ireland Limited, whereby your IP address is transmitted.
Purpose and legal basis
If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information in the user’s terminal device (e.g. device fingerprinting) within the meaning of the TTDSG. Consent can be revoked at any time.
Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found at the following link: https://privacy.google.com/businesses/gdprcontrollerterms/ and https://privacy.google.com/businesses/gdprcontrollerterms/sccs/
You can find more information on the handling of user data in Google’s privacy policy (https://policies.google.com/privacy?hl=de). The company is certified in accordance with the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the USA that is intended to ensure compliance with European data protection standards for data processing in the USA. Every company certified under the DPF undertakes to comply with these data protection standards. Further information on this can be found at the following link: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt000000001L5AAI&status=Active
Storage period
The specific storage period of the processed data cannot be influenced by us, but is determined by Google Ireland Limited. Further information can be found in the privacy policy for Google Fonts (https://policies.google.com/privacy).
8.6 YouTube videos
Type and scope of processing
We have integrated YouTube Video on our website. YouTube Video is a component of the video platform of YouTube, LLC, where users can upload content, share it over the Internet and obtain detailed statistics from YouTube Video enables us to integrate content from this platform into our website.
YouTube Video uses cookies and other browser technologies to evaluate user behavior, recognize users and create user profiles. This information is used, among other things, to analyze the activity of the content viewed and to create reports. If a user is registered with YouTube, LLC, YouTube Video can assign the videos played to the profile.
When you access this content, you establish a connection to the servers of YouTube, LLC, Google Ireland Limited, Gordon House, Barrow Street Dublin 4 Ireland, whereby your IP address and possibly browser data such as your user agent are transmitted. The YouTube server is informed which of ourpages you have visited. If you are logged into your YouTube account, you enable YouTube to assign your surfing behavior directly to your personal profile. You can prevent this by logging out of your YouTube account.
We use YouTube in extended data protection mode. According to YouTube, this mode means that YouTube does not store any information about visitors to this website before they watch the video. However, the transfer of data to YouTube partners is not necessarily excluded by the extended data protection mode. For example, YouTube establishes a connection to the Google DoubleClick network regardless of whether you watch a video.
Purpose and legal basis
If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information in the user’s terminal device (e.g. device fingerprinting) within the meaning of the TTDSG. Consent can be revoked at any time.
Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found at the following link: https://privacy.google.com/businesses/gdprcontrollerterms/ and https://privacy.google.com/businesses/gdprcontrollerterms/sccs/
You can find more information on the handling of user data in Google’s privacy policy (https://policies.google.com/privacy?hl=de). The company is certified in accordance with the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the USA that is intended to ensure compliance with European data protection standards for data processing in the USA. Every company certified under the DPF undertakes to comply with these data protection standards. Further information on this can be found at the following link: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt000000001L5AAI&status=Active
Storage period
The specific storage period of the processed data cannot be influenced by us, but is determined by YouTube, LLC. Further information can be found in the privacy policy for YouTube Video (https://policies.google.com/privacy).
8. References and external links
When accessing websites linked to from this website, you may again be asked for information such as your name, address, email address, browser properties, etc. This privacy policy does not regulate the collection of data. This data protection declaration does not regulate the collection, transfer or handling of personal data by third parties.
Third-party service providers may have different and separate provisions regarding the collection, processing and use of personal data. It is therefore advisable to inform yourself on the websites of Third parties about their personal data handling practices before entering personal data.