Privacy Statement

Thank you for your interest in our homepage and our company. Although we take every care to check the contents of external links to other websites, we cannot accept liability for them.
For us it is important to protect your personal data collected, processed and used during your visit to our website. Your data is protected as stipulated by statutory provisions. Below please find information on what data is collected during your visit to our homepage and how it is used:

1: Name and address of the controller

The person responsible for the purposes of the General Data Protection Regulation and other data protection provisions is:

CTI-Service
Customer Technology Industrial-Service
Wambachring 4
54597 Olzheim

Owner:
Marco Mergen

2: Definitions
Data protection law has special terminology that we also use in this privacy policy in accordance with the legal definitions of the European General Data Protection Regulation. Therefore, in this privacy statement, the term

“Personal data”
any information relating to an identified or identifiable natural person (“data subject”);

“Affected Person”
any identified or identifiable natural person whose personal data is being processed; a natural person is regarded as identifiable, which can be identified directly or indirectly, in particular by association with an identifier such as a name, an identification number, location data, an online identifier or one or more special features, the expression of the physical , physiological, genetic, mental, economic, cultural or social identity of this natural person;

“Processing”
any process or series of operations related to personal data such as collection, organization, ordering, storage, adaptation or modification, reading, querying, use, disclosure, performed with or without the aid of automated procedures by transmission, dissemination or any other form of provision, matching or linking, restriction, erasure or destruction;

“Limitation of processing
the marking of stored personal data in order to limit their future processing;

“Profiling”
any type of automated processing of personal data that involves the use of such personal data to evaluate certain personal aspects relating to a natural person, in particular aspects relating to job performance, economic situation, health, personal preferences, interests To analyze or predict the reliability, behavior, whereabouts or location of this natural person; as a company committed to privacy, we do not use any form of profiling;

“Pseudonyms”
the processing of personal data in such a way that personal data can no longer be attributed to a specific data subject without the need for additional information, provided that such additional information is kept separate and subject to technical and organizational measures to ensure that the personal data are not identified or identifiable natural person;

“File System”
Any structured collection of personalized records that belong to specific criteria, regardless of whether that collection is centralized, decentralized or geo-referenced; “Responsible” (or “controller”)
the natural or legal person, public authority, or other body with which the processing of personal data is consistent; The conditions and the relationship between the rights and the Member States are set at a certain level.

‘Processor’
the natural or legal person, public authority, or other body that, alone or in concert with others, decides on the purposes and means of processing personal data; where the purposes and means of such processing are determined by Union law or the law of the Member States, the controller or the specific criteria of his appointment may be provided for under Union or national law;

‘Processor’
a natural or legal person, public authority, agency or other body that processes personal data on behalf of the controller;

“Receiver”
a natural or legal person, public authority, agency or other body to which personal data are disclosed, whether or not it is a third party. However, authorities which may receive personal data under Union or national law in connection with a particular mission are not considered to be recipients; the processing of such data by the said authorities shall be in accordance with the applicable data protection rules in accordance with the purposes of the processing;

“Third”
a natural or legal person, public authority, body or body other than the data subject, the controller, the processor and the persons authorized under the direct responsibility of the controller or processor to process the personal data;

“Consent”
the person concerned, voluntarily in the particular case, in an informed and unambiguous manner in the form of a statement or other unambiguous confirmatory act by which the data subject indicates that he / she agrees to the processing of the personal data concerning him / her

“Violation of the protection of personal data”

a breach of security that results in destruction, loss or alteration, whether unintentional or unlawful, or unauthorized disclosure of or access to personal data that has been transmitted, stored or otherwise processed;

“cross-border processing”
processing of personal data carried out in the context of the activities of branches of a controller or processor in the Union in more than one Member State, where the controller or processor is established in more than one Member State, or
processing of personal data carried out as part of the activities of a single establishment of a controller or processor in the Union but which has or may have a significant impact on data subjects in more than one Member State;

“authoritative and reasonable objection

an objection to whether there is a breach of this Regulation, or whether the intended action is against the controller or processor in accordance with this Regulation, which clearly sets out the scope of the risks involved in the draft decision the fundamental rights and freedoms of data subjects and, where appropriate, the free movement of personal data in the Union.

  1. Legal basis of data processing

The processing of personal data by us takes place on the basis of the provisions of the European General Data Protection Regulation (DSGVO) and the German Federal Data Protection Act (BDSG):

  • For processing operations where we obtain consent for a particular processing purpose, processing is based on Article 6 (1) (a) of the General Data Protection Regulation.
  • Insofar as the processing of personal data is necessary for the performance of a contract of which the data subject is the party (such as in the delivery of goods or the provision of other services or services) or for the implementation of pre-contractual measures (e.g. inquiries about our products or services) the processing is based on Article 6 (1) (b) of the basic Data Protection Regulation.
  • To the extent that processing of personal data is required by our legal obligation, such as compliance with tax obligations or commercial retention requirements, processing will be based on Article 6 (1) (c) of the General Data Protection Regulation.
  • The processing of personal data required to safeguard the legitimate interests of our company or a third party is based on Article 6 (1) (f) of the General Data Protection Regulation, unless the interests or fundamental rights and freedoms of the data subject, including the Protection of personal data require, outweigh. Such legitimate interest also represents the performance of our business for the benefit of all of our employees and our shareholders.
  • The provision of personal data may be required for legal (commercial or taxation) reasons or may be necessary for the purpose of contract execution. If such data (such as information about a contracting party) is not made available for processing, we cannot conclude a corresponding contract.
  1. Log files

On our Internet server, as on another web server also, a log file is kept. This log file stores records that contain:

  • The IP address you are traveling on the Internet with and the Internet service provider you use
  • Date and time of each access to our website
  • The exact URL of each web page you visit
  • The data you requested from the server
  • general information about the web browser used by you when accessing the website (in particular the browser type and version) and operating system, as well as
  • partly the website from which you came to our internet site (the so-called “referrer”)

be recorded. This information will be provided by us:

  • for the correct delivery of the respective website
  • for statistical purposes
  • to further improve our internet presence and to optimize the advertising contained therein
  • to permanently ensure the functionality and integrity of our information technology systems, including security in the event of attacks on our information technology systems, and
  • in the event of an attack on our information technology systems to provide the necessary information to law enforcement agencies

needed and used.

These data are collected anonymously and stored separately from all personal data provided to us by an affected person. In particular, we do not assign a logged IP address to a specific person.

5. Cookies and usage profiles
Within the legal provisions we can

• provide user-friendly services that would not be possible without the cookie setting
• as part of a Web shop to remember the items that you have placed in the (virtual) shopping cart
• as part of a login you have made as a user (login)
• for purposes of advertising, market research as well as
• improve our services and internet offers

to evaluate user profiles under a pseudonym, but only if you have not made use of your legal right to object to this use of your data. Some of our services require that we use so-called cookies.

Cookies are small amounts of data (text files) that your Internet browser stores on your computer. Cookies can store information about your visit to our website, which allows us to recognize your browser and distinguish it from the browsers of other data subjects.

Most browsers are set by default to accept cookies. However, you can reconfigure your browser at any time in such a way that it rejects cookies or asks for confirmation beforehand. If you refuse cookies, however, this may mean that not all offers and functions of this website work or can be used without disruption.

  1. Internal visitor statistics

This website uses Google Analytics, a web analytics service provided by Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA (“Google”). Google Analytics uses so-called “cookies”, text files that are stored on your computer and that allow an analysis of the use of the website by you. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. However, in the event of activation of IP anonymization on this website, your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the US and shortened there.

On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services related to website activity and internet usage to the website operator. The IP address provided by Google Analytics as part of Google Analytics will not be merged with other Google data. You can prevent the storage of cookies by a corresponding setting of your browser software; however, please note that if you do this, you may not be able to use all the features of this website to the fullest extent possible. In addition, you may prevent the collection by Google of the data generated by the cookie and related to your use of the website (including your IP address) as well as the processing of this data by Google by using the link below

http://tools.google.com/dlpage/gaoptout?hl=de

Download and install the available browser plugin. An opt-out cookie will be set which prevents the future collection of your data when you visit this website.

For more information about Terms of Use and Privacy, please visit:

http: //www.google.com/analytics/terms/en.html or https://www.google.com/intl/en/policies/.

We point out that on this website Google Analytics has been extended by the code “anonymizeIp” to ensure an anonymous collection of IP addresses (so-called IP-Masking).

As an alternative to the browser add-on or within browsers on mobile devices, please click on the following hyperlink, Disable Google Analytics to prevent future detection by Google Analytics within this website: (The opt Out only works in the browser and only for these Domain)

  1. E-mail and contact forms

If you send us an e-mail or contact us via a contact form, the personal data transmitted to us voluntarily for the purpose of processing or contacting us will be automatically stored and, if necessary, processed. This includes – as far as stated by you – in particular the name, your address or e-mail address, your telephone number as well as other information voluntarily provided by you. In addition, when you contact us via a form provided on this website, the IP address used by you will also be saved. Basically, we use the resulting personal data only to the extent required to process your inquiries and orders. A transfer of these data to third parties will not take place, unless we are legally obliged to do so.

  1. Commenting on social networks

If you use the social networking commentary and redirection features offered on this website (LinkedIn, Facebook), these networks collect visitor data that we have no control over to transmit, process, store or use. You can avoid this by not using these features.

The corresponding functions of Facebook & Co. are only activated when you press the respective button on our site. By default, the corresponding features are disabled with us.

By clicking on the corresponding function button, you leave our website and are redirected to the respective social network. We have no influence on the data collection that takes place there, and we cannot provide any information about this. If you want to bypass the data collection through these networks, do not click on the respective button.

  1. Tracking as a result of the use of third party offers

On some of our websites, we use services offered by other companies. The use of these services is required in these cases for the operation or the design of the website and takes place in this respect within the scope of our legitimate interests within the meaning of Article 6 paragraph 1 sentence 1 letter f) of the General Data Protection Regulation on the operation or further development of the respective website.

9.1. Integration of YouTube videos
We have included YouTube videos on some of our websites, which are stored on http://www.YouTube.com and are directly playable from our website. The YouTube site is owned by YouTube LLC, 901 Cherry Ave. San Bruno, CA 94066, USA, a subsidiary of Google LLC. These are all incorporated in the “extended privacy mode”, i. that you do not transfer data about you as a user to YouTube if you are not playing the videos. Only when you play the videos, the following data will be transmitted. We have no influence on this data transfer.
By visiting the website, YouTube receives the information that you have accessed the corresponding sub-page of our website. In addition, the data referred to in section 4 of this privacy policy will be transmitted. This happens regardless of whether YouTube provides a user account that you are logged in to, or if there is no user account. When you’re logged in to Google, your data will be assigned directly to your account. If you do not wish to associate with your profile on YouTube, you must log out before activating the button. YouTube stores your data as usage profiles and uses them for purposes of advertising, market research and / or custom design of its website. Such an evaluation is done in particular (even for users who are not logged in) to provide appropriate advertising and to inform other users of the social network about their activities on our website. You have a right to object to the creation of these User Profiles, and you must be directed to YouTube to use them.

For more information on the purpose and scope of your data collection and processing through YouTube, please refer to Google’s Privacy Policy.

There you will also find more information about your rights and settings options to protect your privacy: https://policies.google.com/privacy?hl=en&gl=de. Google also processes your personal information in the United States and has complied with the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US Framework.

9.2. Integration of Google Maps

On some of our websites we use the offer of Google Maps. This allows us to show you interactive maps directly in the website and allow you to conveniently use the map feature.

By visiting the website, Google receives the information that you have accessed the corresponding subpage of our website. In addition, the data referred to in section 4 of this privacy policy will be transmitted. This is done regardless of whether Google provides a user account that you are logged in to, or if there is no user account. When you’re logged in to Google, your data will be assigned directly to your account. If you do not wish to be associated with your profile on Google, you must log out before activating the button. Google stores your data as usage profiles and uses them for purposes of advertising, market research and / or tailor-made website design. Such an evaluation is done in particular (even for users who are not logged in) to provide appropriate advertising and to inform other users of the social network about their activities on our website. You have a right of objection to the formation of these user profiles, and you must comply with this to Google.

For more information on the purpose and scope of your data collection and processing, please refer to the provider’s privacy policy at https://policies.google.com/privacy?hl=en&gl=en. There you will also find further information about your rights and settings options for the protection of your privacy. Google also processes your personal information in the US and has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US Framework.

9.3. Use of Google AdWords Conversions
We use the service of Google AdWords to use our advertising materials (so-called Google AdWords) on external websites to make our services aware. In relation to the data of the advertising campaigns, we can determine how successful the individual advertising measures are. We are interested in showing you advertisements that are of interest to you, to make our website more interesting to you and to achieve a fair calculation of advertising costs.
These advertising materials are supplied by Google via so-called “ad servers”. To do this, we use ad server cookies, which measure certain performance metrics such as ads or user clicks. If you access our website through a Google ad, Google AdWords will store a cookie on your PC. These cookies usually lose their validity after 30 days and are not intended to identify you personally. This cookie will typically use the unique cookie ID, number of ad impressions per placement (Frequency), last impression (relevant to post-view conversions), and opt-out information (mark that the user does not) as analysis values more would like to be addressed) saved. These cookies allow Google to recognize your Internet browser. If a user visits certain pages of an AdWords customer’s website and the cookie stored on their computer has not expired, Google and the customer will be able to detect that the user clicked on the ad and was redirected to that page. Each AdWords customer is assigned a different cookie. Cookies cannot be tracked via the websites of AdWords customers. We ourselves do not collect and process any personal data in the advertising measures. We receive only statistical evaluations provided by Google. Based on these evaluations, we can identify which of the advertising measures used are particularly effective. We do not receive any further data from the use of the advertising material, in particular we cannot identify the users on the basis of this information.
Due to the marketing tools used, your browser automatically establishes a direct connection to the Google server. We have no control over the extent and the further use of the data, which are raised by the employment of this tool by Google and inform you therefore according to our knowledge level: By the incorporation of AdWords conversion Google receives the information that you the appropriate part of our Internet appearance or click on an ad from us. If you are registered with a service provided by Google, Google may associate the visit with your account. Even if you are not registered with Google or have not logged in, there is a chance that the provider will find and store your IP address.

You can prevent participation in this tracking process in several ways:
by setting your browser software accordingly, in particular, the suppression of third party cookies will prevent you from receiving any third party advertisements;
By deactivating conversion tracking cookies by setting your browser to block cookies from the domain “www.googleadservices.com”, https://www.google.com/settings/ads, these settings will be deleted if you delete your cookies;
by opting out of the interest-based ads of the providers that are part of the About Ads self-regulatory campaign through the link http://optout.aboutads.info/?c=2&lang=EN, which will be deleted when you use your cookies Clear;
through permanent deactivation in your browsers Firefox, Internet Explorer or Google Chrome under the link https://support.google.com/ads/answer/7395996. We point out that in this case you may not be able to use all the features of this offer in full.
The use of Google AdWords is within the scope of our legitimate interest in the economic operation of our web sites. The legal basis for the processing of your data is Article 6 paragraph 1 sentence 1 letter f of the GDPR. For more information about privacy at Google, please visit https://policies.google.com/privacy?hl=en and https://services.google.com/sitestats.html. Alternatively, you can visit the Network Advertising Initiative (NAI) web site at http://www.networkadvertising.org. Google has submitted to the EU-US Privacy Shield (https://www.privacyshield.gov/EU-US Framework).

  1. Registration
    On our website we offer partly the possibility of registration. This registration takes place under specification of personal data, which we query in the form provided for this purpose. In addition, the IP address used by you as well as the date and time of the submission of the registration form are recorded. These personal data are used by us for internal use, for the purpose of communicating with you, for handling existing or future contractual relationships (e.g. orders), for protecting our technical system and for preventing misuse and, if applicable, for transfer to one or more processors (such as e.g. postal, parcel and payment service providers) are collected and stored.
    As a registered person, you can change or delete your personal data given at registration at any time, provided this does not conflict with any legal regulations – such as statutory storage regulations. You can also receive information from us at any time as to which personal data about you as the data subject is stored.

    11. Duration of storage, deletion and blocking of personal data
    Personal data of data subjects shall be processed or stored by the controller only for the period of time necessary to achieve the purpose of the storage, subject to other legal provisions. Another decisive criterion for the duration of the storage of personal data is the respective statutory retention period.
    This means that data of our customers are always stored as long as the customer relationship exists. After the end of the business relationship, there may still be a commercial or tax-related retention obligation of six or ten years; Data that is subject to such a statutory retention obligation will only be deleted after expiry of this period.
    After elimination of the storage purposes and expiration of existing statutory retention periods, the personal data will be blocked or deleted by the controller even without a corresponding request from the data subject in accordance with statutory provisions and requirements.

  2. Transport encryption
    We use SSL transport encryption on this site. This serves i.a. the protection of confidential content, such as inquiries to us. You can tell from the address bar of your browser, which always starts with “https: //” and confirms the existing transport encryption with a green lock symbol, that the connection is indeed encrypted.

12. Data processing in job applications
If personal data are transmitted to us via a corresponding application form on the website or by e-mail in the context of job applications for the purpose of processing the application process, the following also applies:
In the event that an employment contract is concluded with the job applicant, we will save the personal data transmitted to us for the purpose of the employment relationship.
Otherwise, we will automatically delete the personal data transmitted to us two months after the cancellation, as far as no other legitimate interests of the controller are opposed. Such a legitimate interest contrary to the cancellation may be, for example, a duty of documentation and proof required for breach of the General Equal Treatment Act or a defense of the law in a lawsuit brought against or threatened by the job applicant.

13. Your rights as an affected person
In what follows, we describe the rights that each person subject to the processing of personal data has vis-à-vis the controller. If you wish to exercise any of these rights, you can contact the controller at any time. We recommend that you communicate your request either in writing or by e-mail to info@cti-service.de.
Any person concerned with the processing of personal data shall have the right of acknowledgment, i.e. the right of acknowledgment, to the controller. the right to ask the person responsible for confirmation of the processing of personal data concerning them; the right to information, i. in the case of the processing of personal data, a right to information about such personal data and to the following information: the processing purposes; the categories of personal data being processed; the recipients or categories of recipients to whom the personal data have been disclosed or are still being disclosed, in particular to recipients in third countries or to international organizations; if possible, the planned duration for which the personal data are stored or, if this is not possible, the criteria for determining that duration; the existence of a right to rectification or erasure of the personal data concerning them, or to the restriction of processing by the controller or a right to object to such processing; the existence of a right of appeal to a supervisory authority; if the personal data are not collected from the data subject, all available information on the source of the data; the existence of automated decision-making including profiling in accordance with Article 22 (1) and (4) of the General Data Protection Regulation and – at least in these cases – meaningful information about the logic involved, and the scope and intended impact of such processing on the data subject.

(Note: we do not use profiling or other automated decision-making methods.). In the case of transfer of personal data to a third country or to an international organization, the right to be informed about the appropriate guarantees under Article 46 of the GDPR in connection with the transfer; the right to make available,

a copy of the personal data is the subject of the processing. For all other copies requested by the data subject, the person responsible may request an appropriate fee based on the administrative costs. If the data subject files the application electronically, the information must be provided in a standard electronic format, unless otherwise stated. This right to receive a copy must not prejudice the rights and freedoms of others; the right to correction, i. the correction of incorrect personal data concerning them. The completion of personal data, including by means of a supplementary declaration; the right to be erased (“right to be forgotten”); The personal data are for the purpose of which it is collected or processed in any other way, no longer necessary. The data subject withdraws the consent on which the processing is based, in accordance with Article 6 (1) (a) or Article 9 (2) (a) of the GDPR and lacks an alternative legal basis for processing. The data subject objects to the processing in accordance with Article 21 (2) of the General Data Protection Regulation.

The personal data were processed unlawfully. The erasure of personal data is necessary to fulfill a legal obligation under Union or national law. The personal data were collected in relation to information society services offered in accordance with Article 8 (1).

If the controller has made the personal data publicly available and is required to erase it in accordance with paragraph 1, taking into account the technology available and the implementation costs, he shall take appropriate measures, including technical ones, to inform data controllers who processes the personal data to inform that an affected person has requested that they delete all links to such personal data or copies or replications of such personal data. This does not apply if processing is required to exercise the right to freedom of expression and information; to fulfill a legal obligation required by the law of the Union or of the Member States to which the controller is subject, or to carry out a task of public interest or in the exercise of official authority conferred on the controller; for reasons of public interest in the field of public health as referred to in Article 9 (2) (h) and (i) and Article 9 (3) of the General Data Protection Regulation; for archival purposes of public interest, for scientific or historical research purposes or for statistical purposes, in accordance with Article 89 (1) of the General Data Protection Regulation, where that law is likely to render impossible or seriously prejudicial to the achievement of the objectives of that processing, or to the exercise, pursuit or defense of legal claims.
the right to restriction of processing, i. the right of a person concerned by the processing of personal data to require the controller to delete personal data concerning him or her without delay, and the controller is obliged to delete personal data immediately if one of the following is true: the accuracy of the personal data for a period of time allowing the controller to verify the accuracy of the personal data, processing is unlawful and the data subject refuses to delete the personal data and, instead, to restrict the use of the personal data demands; the controller no longer needs the personal data for the purposes of the processing, but the data subject requires them to assert, exercise or defend legal claims; or
the data subject has objected to the processing referred to in Article 21 (1) of the General Data Protection Regulation until such time as it has been established that the legitimate grounds of the controller prevail over those of the data subject. If processing has been restricted hereafter, such personal data may be used.

An affected person who has restricted processing will be notified by the controller before the restriction is lifted. the right to data portability, i. the right of the person concerned by the processing of personal data to receive personal data relating to him / her provided to a controller in a structured, common and machine-readable format, and has the right to transfer that data to another person without hindrance the person who provided the personal data, if the processing is based on a consent under Article 6 (1) (a) or Article 9 (2) (a) of the General Data Protection Regulation or a contract pursuant to Article 6 (1) (b) of the General Data Protection Regulation and processing is by automated means.

In exercising their right to data portability, the data subject has the right to obtain the personal data to be transferred directly from one controller to another responsible party where technically feasible. This right must not affect the rights and freedoms of others. The exercise of this right of data transferability is without prejudice to the right of cancellation (“right to be forgotten”). This right does not apply to processing necessary for the performance of a task in the public interest or in the exercise of official authority delegated to the controller. the right to contradict, i. the right of the person subject to the processing of personal data, for reasons arising from his particular situation, to object at any time to the processing of personal data concerning him or her pursuant to Article 6 (1) (e) or (f) of the General Data Protection Regulation; this also applies to profiling based on these provisions. The controller no longer processes the personal data unless he can demonstrate compelling legitimate grounds for processing that outweigh the interests, rights and freedoms of the data subject, or the processing is for the purpose of enforcing, pursuing or defending legal claims. When personal data are processed to operate direct mail, the data subject has the right to object at any time to the processing of personal data concerning him or her for the purposes of such advertising; this also applies to profiling insofar as it is associated with such direct mail. If the data subject objects to processing for direct marketing purposes, the personal data will no longer be processed for these purposes. Regardless of Directive 2002/58 / EC, the data subject may, in the context of the use of information society services, exercise his right to object through automated procedures using technical specifications.

The data subject has the right, for reasons arising from his particular situation, to object to the processing of personal data relating to him for scientific or historical research purposes or for statistical purposes under Article 89 (1) of the General Data Protection Regulation unless the processing is necessary to fulfill a public interest task the right not to be subjected to an automated decision on a case-by-case basis (including profiling) which has legal effect or similarly appreciably affects it. This shall not apply where the decision to conclude a contract between the data subject and the controller is necessary, authorized by Union or Member State legislation to which the controller is subject, and this legislation provides for reasonable safeguards freedom and the legitimate interests of the data subject or with the express consent of the data subject. In the cases referred to in points (a) and (c) above, the controller shall take appropriate measures to safeguard the rights and freedoms and legitimate interests of the data subject, including at least the right to obtain the intervention of a person by the controller Statement of one’s own position and to contest the decision. Automated decisions must not be based on specific categories of personal data unless the data subject has consented or the processing on the basis of Union law or the law of a Member State that is proportionate to the objective pursued preserves the essence of the right to privacy and appropriate and specific measures to safeguard the fundamental rights and interests of the data subject are required for reasons of significant public interest.