You can print or save this document by using the standard functions of your Internet Browser service program (= Browser: there usually "File" -> "Save As").
Data protection at InterRed
Data protection is a matter of trust, and your trust is important to us. The data processing of InterRed GmbH, represented by Dr. André Klahold, Daniela Klahold, Klaus Schuster, Dr. Marcus von Harlessem (hereinafter also referred to as "we" or "us") as the data controller within the meaning of Art. 4 No. 7 GDPR is naturally based on the legal provisions.
These data usage instructions inform visitors and customers about data collection, processing and use during visits, possible registration and conclusion of contract, as well as about objection, revocation and other rights to which you as the person affected by the collection and use of data are entitled.
I. What do we do with your personal data?
1. What is personal data?
Personal data is all information relating to an identified or identifiable natural person (hereinafter called "data subject"). Identifiability does not necessarily require mentioning a name. Indirect identifiability is also sufficient, e.g. by allocation to an identification number, to location data, to online identification or to one or more special characteristics. Basically, it's about your identity. This, for example, includes your name, but also your telephone number, your address and other data that you provide us with.
Many of the legal principles for our data processing can be found in the European General Data Protection Regulation (GDPR), its text and the corresponding recitals, which you can find here. In the following notes, we refer to appropriate regulations as the respective legal basis of our processing.
2. Use of data for contract processing and internal organisation
- Contract initiation and processing
If you make an enquiry with us or conclude a contract with us, we require and process certain data, such as details of the intended or completed project, your address, as well as details and contact details of contact persons and other affected parties within the scope of the project for pre-contractual examination, contract processing and any subsequent warranty or guarantee processing (see as a basis Art. 6 Para. 1 Sentence 1 lit b, GDPR). Within the scope of contract processing, the service providers we use hereby receive the necessary data depending on requirements and scope of the order. We cannot fulfil our contractual obligations without appropriate information.
In addition, commercial and tax law obliges us to archive data from completed transactions for the duration of the statutory retention periods. The legal basis for the corresponding use of data is Art. 6 Para. 1 lit. c, GDPR.
- Processing in the corporate structure
Within the framework of our corporate structure, we process your data in our IT systems and, where necessary, transfer data from customers, interested parties, suppliers and personnel to authorities, such as financial administrations and consultants (tax consultants, lawyers, auditors) in accordance with our interests in legally compliant and economic company management.
The legal basis is Art. 6 Para. 1 lit. c and f GDPR.
In this context, we analyse data on all corporate and business processes for corporate management and market research purposes. As far as no necessity arises from the specific purpose, the data will be largely anonymised or at least pseudonymously evaluated and at best detached from persons before being made accessible to third parties. The legal basis is Art. 6 Para. 1 lit. c and f GDPR.
- Outsourced IT and hosting
We use IT software and hosting services from service providers as part of the provision of services and the fulfilment of your requests and our contractual obligations on the basis of our interests in efficient and secure company and contract execution. Your data on your interests, concerns, orders and visits or perceptions of our services are also processed using the services of these service providers. We use Boreus Rechenzentrum GmbH, Zur Schwedenschanze 2, 18435 Stralsund, Germany for our hosting.
As far as required by law and not already covered by regulations on professional secrecy, we have contractually secured our access and the secure and confidential treatment of your data in cases of order processing
The legal basis is Art. 6 Para. 1 lit. f GDPR, if applicable in conjunction with Art. 28 GDPR (conclusion of order processing contract).
3. Data storage
The above data will be stored by us.
If you contact us using our contact options (e.g. by email or telephone), we will save your name and contact details as well as your request. The data will be used to process your request and to communicate with you. We use your email to be able to answer you by email (legal basis Art. 6 Para. 1 sentence 1 lit b, GDPR). If you have questions about specific orders or if you want us to do something for you personally, we need your real name. For general questions, you can also enter a pseudonym. The data will be deleted as soon as your request has been fully dealt with and there are no other requirements to store it.
5. Use of data for advertising
We are interested in maintaining our customer relationship with you, acquiring new customers, reactivating old customers and providing our customers with information and offers. In order to safeguard these legitimate interests, we process your data on the basis of Art. 6 Para. 1 lit. f, GDPR (also with the help of service providers) in order for us to send you information and personalised offers and to improve our information and offers. We may also provide for your separate consent to be obtained outside this document and, in such cases, base our use of data on Art. 6 Para. 1 lit a GDPR.
Please refer to our further information on our data processing in this context in the following advertising measures and our information on the use of profiles under II. Section 2.
For your right of objection and revocation against the following data uses for advertising purposes, see I. Section 6.
We use the following data on the basis of the aforementioned legal basis without asking you separately for your consent.
- Postal advertising
We use your first and last name, your postal address and - if we have received this additional information from you - your title, academic degree, date of birth and your job, industry or business name to send you offers and information about our company and our services and products by letter post, if, following an evaluation of the data provided under II. Section 2 we expect this information to be in your interest.
We only implement the following uses after we have asked you for your consent beyond this declaration.
Art. 6 I lit. a, GDPR serves our company as a legal basis for processing operations through which we obtain consent for a specific processing purpose.
Accepting this information does not constitute your consent to the corresponding use of your data for advertising purposes.
- Email advertising with separate consent
If you have registered separately for our newsletter, your email address and, if necessary, other personal data that you have voluntarily provided to us during registration (e.g. your name to address you), will be used for our own advertising purposes and possibly in the newsletter included advertising partner offers.
- Use of your data when visiting our pages
If we collect or have collected data with the help of web analysis tools and use web advertising tools, we will inform you in detail under II. Data collection when visiting our pages.
Here you will also learn how you can use your right of objection and what technical possibilities are available to you to counter data collection.
6. Right of objection to and revocation of advertising
You may, of course, object to the use of your data for advertising purposes (see I. Section 5) at any time - even if this use is permitted by law without your consent - by informal notice to us or revoke a granted consent. Objection and revocation bring about a stop of future use in each case. Any use prior to the assertion of your rights remains unaffected. Of course, we do not charge any separate costs for an objection or revocation. (There are no further costs, apart from the transmission costs according to the basic rates of your provider if you notify us by email in particular). Simply send your objection or revocation using one of the contact options listed at the end of this document.
Through our advertising emails and newsletter, you will in each case receive information with an address or a link to cancel this information.
Please note that in individual cases you may still receive advertising despite objection or revocation. Despite using reasonable effort or comparable other measure not all advertising ordered can be stopped before its next dispatch.
Your means of objection also extend to profiling (Profiling, cf. term in II. Section. 3) and the use of data collected in the context of data collection when visiting our website. We explain the technical possibilities of exercising your right of objection and of preventing the collection of data in detail in the information about the used web tools under II. Section 3. "Details on web analytics and advertising". As far as you exercise your right of objection, we no longer process the collected data for these purposes.
For more information on your rights, see V. What rights do I have.
7. Use of data for your application
If you apply to us, we use and transmit the data you provide for the purpose of evaluating your application documents. After receipt of your application, your application data will be reviewed by the personnel department. Suitable applications will then be forwarded internally to the department managers responsible for the respective open position and potentially to the management. Then the further procedure will be coordinated. As a matter of principle, only those persons within the company who need your data for the proper course of our application procedure have access to it. Your data will not be automatically supplemented from other sources (e.g. social networks, credit information).
We store your data for the duration of the application process and for a maximum of three months from notification of a binding decision on your application, unless an employment contract is concluded. Longer storage is only possible with your express consent (legal basis Art. 6 I lit. a GDPR) if we have to comply with a legal requirement (legal basis Art. 6 I lit. c GDPR) or if there are justified reasons, e.g. if claims are raised against the non-consideration of your application (legal basis also here Art. 6 Para. 1 Sentence 1 lit b, GDPR). After this time has elapsed, your data will be deleted or stored only in archiving systems without direct access possibilities, as far as legally prescribed for commercial and tax archiving purposes.
8. Deletion and blocking
Your personal data will be stored until the specified purposes have been achieved or as long as we have a legitimate interest in storing it.
The data is then deleted unless otherwise agreed upon with you or unless statutory obligations for archiving exist (e.g. due to commercial or tax law). If archiving is initiated by law, the data is blocked for other access. After the legal retention periods have expired, these files are deleted and destroyed in accordance with data protection regulations as part of regular actions.
If you have consented to the collection, processing and use of your data, we will store and use your data for an indefinite period until the purpose for which you have consented to is revoked or ceases to apply. Thereafter, your consent and the processing data will be archived until the statute of limitations (usually three years) for legal defence purposes (legal basis Art. 17 Para. 3 lit. e, GDPR).
If you no longer wish to receive advertising from us, we will use your name, address and, if applicable, your email address for blocking purposes in similar lists where we compare our advertising measures so that you will no longer receive any more advertising. Deletion in this sense means first of all that your data will be blocked especially for advertising and marketing activities in our systems (legal basis Art. 6 Para. 1 lit. f, GDPR). Where necessary, the data will continue to be processed for purposes other than advertising, e.g. within the framework of contract implementation and, where applicable, warranty as well as commercial law and tax law documentation (legal basis Art. 6 Para. 1 lit b and c, GDPR).
If you wish to register a deletion instead of blocking, despite the possible consequences in individual cases, so that you continue to receive advertising, please let us know.
9. Live chat
Technical information and data protection
We offer you the opportunity to communicate directly with us in real time on our website via direct messages (chat) and to ask us questions, for example, about our company, products or offers. You can enter your question in the field provided in the chat and start the conversation (the "chat"). You can also use a pseudonym.
If the chat is offline, the chat connection interrupted or similar, you have the possibility to send us an email with your request. We will use your email address for a corresponding answer (see our contact details above).
The content of the exchanged messages ("chat history") is only stored in our database for a period of three months (to be called up for queries and for internal evaluation) and then deleted.
If you use our chat function, we only receive - apart from your entries - access data without personal reference such as the country of origin, the website from which the chat function was used, search terms via which a visitor has accessed our site, the page from which he came, if applicable, provider, IP address, browser, screen resolution, number of visits, last visit. This data is also not linked to your person.
The access data without personal reference is stored by means of a cookie and transferred to our server. (More information on cookies can be found under II.). We use this information to analyse and improve our offer.
Userlike stores the chat logs, in which the following information is logged and evaluates them completely anonymously for statistical purposes. For further information on data treatment, please contact our service provider Userlike at www.userlike.com/de/terms.
10. Google Fonts
Our website uses Google Fonts. This is a service provided by Google Ireland Limited ("Google"), a company incorporated and operated under the laws of Ireland (registration number: 368047) and located at Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google Fonts is used without authentication and no cookies are sent to the Google Fonts API. Google states that it only records the use of CSS and the fonts used and stores this data securely. Google has joined the Privacy Shield, so that Google guarantees compliance with EU data protection standards.
II. Data collection during visits to our pages
1. Technical information and cookies
You can visit our website without entering any personal information. When you visit our websites, even if, for example, this happens via a link in a newsletter or an advertisement, certain data will nevertheless be recorded and stored in so-called log files. Even if the visit takes place via newsletter links or advertisement links on the Internet, only access data without direct personal reference will be collected, e.g.
- the website from which we are visited
- the page that is called or the name of a requested file
- type and version of your browser,
- time and date of access
- the operating system on which the browser is running
- the name of your internet service provider
- the Internet address of the accessing party (IP address)
- Products and content in which the visitor is interested and the degree of interest, such as duration, frequency, interaction with forms, navigation elements and links
We cannot draw a conclusion on your person using this data and a combination of the above data with data of your person is also not made without your consent, unless it concerns the prosecution of violations and attacks on our systems.
Although the IP address is made available by our hoster, it is overwritten with an "x" after 7 days for data protection reasons and thus made anonymous.
If we integrate third-party content (e.g. embedded films or other information) on our pages, they will receive your IP address for this purpose alone, since otherwise the content cannot be delivered to your browser.
Many cookies are automatically deleted from your hard drive after the browser session has ended (this also includes session cookies). However, there are also cookies that remain stored with you for a long period. The expiry time is set to a time in the future for your convenience. When you visit our site again, automatic detection will find that you have visited us before and which inputs and settings you prefer. Some of these cookies are used to display information specifically tailored to your interests on our website or the websites of our partners.
Cookies, which guarantee functions without which you could not use this website as intended, are only used by us or our service providers and their contents are not made accessible to third parties. We place such consent-free cookies on the basis of Art. 6 Para. 1 lit. b GDPR, as far as they are necessary for the execution of the contract or your request for service. We use other cookies, based on our interest in adapting our offer to your needs and optimising our business management (legal basis Art. 6 Para. 1 lit. f, GDPR).
Most of these cookies are deleted at the end of the session. Cookies that store important settings or serve your requirements, such as a cookie that stores whether or not you have given your consent to cookies or cookies for other convenience and special functions, may be stored for longer. The duration is limited to a maximum of 12 months.
We have also planned longer periods until deletion for such cookies and comparable techniques, which provide us with statistical data that help us to improve our offers and if possible to present you only those contents and offers that correspond to your presumed interests. We do not refer back to your person and do not collect your IP address, so that it is not possible for us to refer back to you in this respect.
The data may include:
- the frequency of page or product calls
- the flow of visitors to our website
- measuring which offers are most interesting in our advertising emails and newsletters
- the assignment of purchases to an advertising partner or to advertisements.
For additional information on the use of profiles, please refer to our notes under II. Section 2.
We have listed an overview of some of the cookies we use here:
This cookie is used to restore the session of the current chat when the current browser window is reloaded or when a page changes.
This cookie contains all session information and stores non-sensitive user profile data and any contact data entered by the user in the chat.
Please note the following general information on your technical means for objection.
- Your technical means of objection
Regardless of the duration set, you can manually delete cookies in your browser. In some browser settings, the acceptance of cookies is preset without restrictions. In the security settings of your browser, you can allow or block temporary and permanent cookies independently. Apart from browser settings that generally deactivate the automatic setting of cookies, you can also deactivate cookies by setting your browser so that cookies are blocked by a certain domain, e.g. "googleadservices.com". This setting then prevents the implementation of relevant services that place cookies from this domain.
Some web services use opt-out cookies. The cookie to be set by you (hereinafter referred to as the "blocking cookie") indicates to a web analysis service, for example, that you do not wish any data to be collected. We have listed separately the means of placing a blocking cookie in the web services we use under II. Section 3. Google allows e.g. corresponding settings at https://myaccount.google.com/intro. Opportunities for many other networks to make advertising settings are available at http://www.youronlinechoices.com/de/praferenzmanagement/ or under http://optout.aboutads.info/ and or http://optout.networkadvertising.org concerning information on many advertising measures and how to deselect these.
If you are using a mobile device, you can enable the "No ad tracking" (iOS) or "Disable personalised advertising" (Android) setting on the device with the appropriate operating system. This is to prevent the Advertising-ID (a non-personal device ID) from being used to provide interest-driven advertising.
If you use the option in your browser to delete all cookies, remember that you may have to make the appropriate settings or set blocking cookies again.
Accepting cookies is not a prerequisite for visiting our website. However, if you do not accept or disable cookies, certain options (e.g. services, purchase options, shopping cart storage and information) may not be available to you on our site, and some websites may not be displayed correctly.
2. Use of profiles
The law recognises the formation of automated data collections about a person under the term profiling. Profiling, according to Art. 4 Section 4, GDPR is any kind of automated processing of personal data where this personal data is used to analyse or predict certain personal aspects relating to a natural person, in particular, to analyse or predict aspects relating to the performance of work, economic situation, health, personal preferences, interests, reliability, behaviour, whereabouts or change of location of this natural person.
We do not use profiles, not even for advertising selections.
3. Details on web analytics and advertising.
We use the Userlike live chat, see also point 9. Live chat.
We would, of course, like you to find us on account of our contents. On the other hand, we would like to make sure you don't have to see so much irrelevant advertising on the Internet in the long term. We, therefore, use service providers who support us in advertising and control. These service providers offer so-called retargeting tools that store anonymous data of viewed content, place them in cookies on your computer and evaluate them. The evaluation can also take place when visiting other pages so that advertising in line with your past interests for our products is also made available to you with advertising banners on other pages. It only collects anonymous data, therefore no data associated with your person (no names or addresses), i.e. technical information such as the advertising frequency and the date of advertising media, the browser used or even the installed operating system. At no time is personal data disclosed on pages where our advertising is being displayed. Insofar as IP addresses are used, these are shortened so that inference on your person is not possible for us.
We have explained the general options via browser settings to delete or prevent cookies to you above under "II. 1. Cookies".
If an opt-out cookie is deleted, you can no longer find out whether an opt-out has taken place or not. In this case, the opt-out process must be repeated.
4. Right of objection and revocation for user profiles and cookies
If you have any questions regarding the technical means of objection listed above or our other protective measures, please do not hesitate to contact us. (Contact details see below).
5. Social media
We provide links to social media such as Facebook, Twitter, Pinterest and other related services. We have limited the possibility for you to set links to our offers there to the mere linking to these services, so that only you can determine whether these services receive data about your interests. We do not use social plugins, i.e. programs that often transfer data to the social services when a page is visited.
III. How do we protect your personal data?
General protective measures
The law calls for the creation of an adequate level of data protection by companies. Among other things, the respective risk for data, the probability of occurrence, state of the art and the costs must be harmonised. We have provided appropriate technical and organisational measures to ensure the security of your data and its processing in accordance with legal requirements. If you have any security concerns while entering data or any other questions or suggestions, just contact our customer service or our data protection officer. Further contact details are listed at the end of these notes.
Your personal data is securely encrypted when you place an order and log in to your personal account. We use an SSL (Secure Socket Layer) coding system during this process. We secure our website and other systems using technical and organisational measures against loss, destruction, access, modification and the processing of your data by unauthorised persons. You should keep your access information confidential and close the browser window when you have finished your session with us, especially if you share your computer with others.
IV. What rights do I have?
You can claim certain rights by law as a person affected by data processing.
1. The right of confirmation and information
According to Art. 15, GDPR, you have the right to request confirmation from us as to whether personal data concerning you will be processed. If we process such data, you have a right to free information about your data that is stored. The information includes details of
- the processing purposes;
- the categories of personal data being processed;
- the recipients or categories of recipients to whom the personal data have been or are still being disclosed, in particular recipients in third countries or international organisations;
- if possible, the planned duration for which the personal data will be stored or, if this is not possible, the criteria for determining this period;
- the existence of a right of rectification or deletion of personal data concerning them or of a restriction on processing by the person responsible or of a right to oppose such processing;
- the existence of a right of appeal to a supervisory authority;
- if the personal data is not collected from the data subject: all available information about the origin of the data;
- the existence of automated decision-making, including profiling, in accordance with Article 22 Para.1 and 4, GDPR and - at least in these cases - meaningful information on the logic involved and the scope and intended effects of such processing for the data subject.
Furthermore, the data subject has a right of access to information as to whether personal data has been transferred to a third country or to an international organisation. If this is the case, the data subject, in addition, has the right to obtain information about the appropriate guarantees in connection with the transfer. If you have any questions regarding the collection, processing or use of personal data, information or other assertion of your rights, simply contact us using the contact data listed at the end of these notes.
2. The right of rectification
You have a right of rectification and/or completion with respect to the responsible party if the personal data processed concerning you is incorrect or incomplete. The person responsible has to make the correction immediately.
3. The right of objection
You have the right to object to the processing of personal data concerning you at any time, which is carried out in accordance with Art. 6 Para. 1 lit. e or lit. f, GDPR; the same applies to profiling based on these provisions (see term II. Section 2).
In the event of an objection to data processing for direct advertising (Art. 21 Para. 2, GDPR), this processing will be terminated as soon as possible after receipt of the objection (see also I. Section 6 for further details).
An objection to other processing (Art. 21 Para. 1, GDPR) on the basis of Art. 6 Para. 1 lit. e or lit. f, GDPR (e.g., identity and credit check) can only take place for reasons relating to your particular situation, whereby compelling legitimate reasons may justify further processing by us.
Granted consents can be revoked. (contact details see below) There are no extra costs (except transmission costs according to the basic rates of your provider).
Revocation and objection of consent act for the future. The legality of data processing in the past remains unaffected.
4. The right of deletion ("right to be forgotten")
a) Requirements for deletion
- You have the right to request the deletion of your personal data. Please note that a right to immediate deletion (Art. 17, GDPR) ("right to be forgotten") only exists if one of the following reasons applies:
- The personal data is no longer necessary for the purposes for which they were collected or otherwise processed.
- You revoke your consent on which the processing pursuant to Art. 6 Para. 1 lit. a, GDPR or Art. 9 Para. 2 lit. a, GDPR is based, and there is no other legal basis for processing.
- You submit an objection to the processing according to Art. 21 Para. 1, GDPR, and there are no overriding legitimate grounds for processing, or you submit an objection according to Art. 21 Para. 2, GDPR against processing for direct marketing purposes.
- The personal data concerning your person have been unlawfully processed.
- The erasing of personal data is required to comply with legal obligations according to Union law or the laws of the Member States to which the person responsible is subject.
- The personal data concerning you has been collected in relation to services offered by information society services according to Art. 8 Para. 1, GDPR.
b) Further right to be forgotten
If we have made personal data public that concerns you and if we are obliged to delete it according to Art. 17 Para. 1, GDPR, we will take appropriate measures, including technical measures, taking into account the available technology and the implementation costs, to inform data processors who process the personal data that you as the data subject have requested the deletion of all links to this personal data or of copies or replications of this personal data.
c) Exceptions to deletion
Please note that in addition to the preceding requirements, these exceptions can justify your deletion request being rejected:
The right to deletion does not exist insofar as the processing is necessary
- to exercise the right of freedom of expression and information;
- for the performance of a legal obligation required for processing under the law of the Union or of the Member States to which the person responsible is subject or for the performance of a task in the public interest or in the exercise of official authority conferred to the person responsible;
- for reasons of public interest in the field of public health in accordance with Art. 9 Para. 2 lit. h and i, as well as Art. 9 Para. 3, GDPR;
- for archiving purposes in the interest of public, scientific or historical research purposes or for statistical purposes in accordance with Art. 89 Para. 1, GDPR, where the right of cancellation is likely to render the objectives of such processing impossible or seriously affected, or
- to assert, exercise or defend legal claims.
5. The right of restriction of processing
You have the right to restrict processing if you dispute the accuracy of personal data for a period that allows us to verify the accuracy of personal data or if, in the event of unlawful processing, you refuse to delete the data and instead request that the use of personal data be restricted. You also have this right when we no longer need the data, and you will need this personal data to claim, exercise or defend legal claims. After all, you can claim this right, if you object to processing according to Art. 21 Para. 1, GDPR and it is not yet clear whether the legitimate reasons of the person responsible outweigh your reasons.
Where processing has been restricted, such data may be processed only with your consent or for the purpose of asserting, exercising or defending rights or protecting the rights of another natural or legal person or on grounds of an important public interest of the Union or of a Member State. The possibility of continued storage shall remain unaffected. If the restriction of processing has been restricted in accordance with the above conditions, you will be informed by us before the restriction has been lifted.
6. The right of data portability
You also have the right to data transferability of the data disclosed to us by you that we have processed on the basis of an effective consent or whose processing was necessary to enter into or fulfil an effective contract in a "structured, current and machine-readable format". You also have the right to request direct transmission to another person responsible, insofar as this is technically feasible.
The law only applies as far as the rights and liberties of other persons are not affected.
7. Assertion of your rights
If you have any questions or to assert your rights, please contact our customer service (see contact details below).
You can also contact our data protection officer. The latter is responsible in cases of complaint. You can reach our data protection officer via the following email: %foo%datenschutz#repat#interred#repdot#de
In addition, if we do not treat your concerns adequately from your point of view, you have (without prejudice to any other administrative or judicial remedy), amongst others the right of appeal to the data protection supervisory authority, in particular in the Member State of your place of residence, employment or the place of the alleged infringement.
Siegen Office (operational branch)
Eiserfelder Straße 316
Haiger Office (company head office)
telephone: +49 271 30377-0
fax: +49 271 30377-77
Authorized to represent company in capacity as managers: Dr. André Klahold, Daniela Klahold, Klaus Schuster, Dr. Marcus von Harlessem
Registration court: Wetzlar District Court
registration number: HRB 3604
Contact data protection officer:
Eiserfelder Straße 316
Telefon: +49 271 30377-0