Data protection declaration

The following information is to inform you about the collection of personal data with use of our website as well as the functions provided hereon. Personal data means all data related to you personally, e.g. name, address, e-mail addresses, user behaviour.

 

1. Name and Contact Data of the Data Processing Controller as well as the Company Data Protection Officer

This data protection notice applies for data processing by:

Data Processing Controller:

Picavi GmbH
represented by the Managing Director, Mr. Jens Harig
Kaiserstraße 100
52134 Herzogenrath

(hereinafter referred to as: Picavi),

E-mail:                        info@picavi.com
Telephone:                 +49 24 07 55 29 6 – 0
Fax:                            +49 24 07 55 29 6 – 90

 

Picavi’s Company Data Protection Officer can be contacted at
Dipl.-Ing. Thomas Käfer M.Sc.
Elchenrather Weide 20
52146 Würselen

or under datenschutzbeauftragter@picavi.com.

 

2. Collection and Storage of Personal Data as well as the Type, Purpose and Use Thereof  

a. Upon Visiting the Website

If you use the website www.picavi.com purely for information purposes, e.g. if you do not register or otherwise transmit information to us, information is automatically transferred to our website server through the browser used on your end device. This information is temporarily stored in a so-called log file.

The following information is collected in this way without any action on your part and stored until automatic deletion thereof:

  • IP address of the inquiring computer,
  • date and time of the access,
  • time zone difference from Greenwich Mean Time (GMT),
  • name and URL of the accessed file,
  • access status/HTTP status code,
  • the respective quantity of data transmitted
  • website from which the access took place (referrer URL),
  • the browser used,
  • the operating system of your computer and its interface,
  • the name of your Internet access provider as well as
  • the language and browser software version.
  • The named data is processed by us for the following purposes:
  • guarantee of a smooth connection of the website,
  • guarantee of comfortable use of our website,
  • evaluation of the system security and stability as well as
  • additional administrative purposes.

The legal basis for data processing is Art. 6, para. 1, lit. f of the General Data Protection Regulation (GDPR). Our legitimate interest follows from the above-listed data processing purposes. In no case do we use the collected data for the purpose of making conclusions about your identity.

In addition, with a visit to our website, cookies as well as analytical services are used. In this context, we differentiate between technically necessary cookies and such which serve statistical purposes and optimisation. The latter shall only be used when you have consented thereto. You can find more details hereto under Nos. 4 and 5 of this Data Protection Declaration.

 

b. Upon Registration for Our Newsletter

Insofar as you have expressly given your consent in accordance with Art. para. 6, para. 1, lit. a GDPR, we will use your e-mail address to send you our Newsletter at regular intervals. For receipt of the Newsletter, details of your e-mail address are sufficient. The provision of additional separately marked data is voluntary and shall be used to be able to address you personally.

You may unsubscribe to the Newsletter at any time, for example, by clicking on the link at the end of each Newsletter. Alternatively, you can also send your unsubscribe request at any time to info@picavi.com per e-mail.

We use “MailChimp” to send our newsletters. “MailChimp” is a newsletter mailing platform of the US provider Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA.

The e-mail addresses of our newsletter recipients, together with the other data described in connection with this information are saved on MailChimp’s servers in the USA. MailChimp uses this information to send and evaluate newsletters on our behalf. Furthermore, according to its own information, MailChimp can use these data for optimising or improving its own services, e.g. for technically optimising the sending and presentation of newsletters or for commercial purposes in order to determine the recipient’s country of origin. However, MailChimp does not use our newsletter recipient’s data for the purpose of it writing to them itself and it does not pass on these data to third parties. MailChimp has agreed to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. Furthermore, we have concluded a “Data Processing Agreement” with MailChimp. In this Agreement, MailChimp has agreed to protect our users’ data, to process them on our behalf in accordance with its privacy policy and, in particular, not to pass them on to third parties. MailChimp’s data protection provisions can be found at https://mailchimp.com/legal/privacy/.

 

c. Upon Use of Our Contact Form

We offer you the possibility of contacting us with any questions of any kind you may have on the form made available on the website. In this context, you must provide us with a valid e-mail address so that we know from whom the inquiry has come and to enable us to respond thereto. Other information can be provided voluntarily.

Data processing for the purpose of contacting us takes place in accordance with Art. 6, para. 1, lit. a GDPR on the basis of your voluntarily issued consent.

The personal data collected by us for use of the contact form shall be automatically deleted after the inquiries made by you are processed.

 

3. Transfer of Data

No transfer of your personal data to third parties takes place other than for the purposes listed in the following.

We transfer your personal data to third parties only:

  • if you have given your express consent thereto according to Art. 6, para. 1, lit. a GDPR,
  • if transfer according to Art. 6, para. 1, lit. f GDPR is necessary for the claim, exercise or defence of legal claims and no grounds exist for presumption that you have an overriding interest requiring protection and non-transfer of your data,
  • in the cases that transfer is necessary for compliance with a legal obligation according to Art. 6, para. 1, lit. c GDPR as well as
  • this is legally permissible and necessary for the performance of a contract with you according to Art. 6, para. 1, lit. b GDPR.

 

4. Cookies

We use cookies on our website. Cookies are small files which your browser automatically creates and stores on your end device (laptop, tablet, Smartphone, etc.) when you visit our website. Cookies do not cause any damage to your computer and contain no viruses, trojans or other malware.

Information is stored in the cookies resulting respectively in connection with the specifically used end device. However, this does not mean that we obtain direct knowledge of your identity hereby.

On the one hand, use of cookies serves to structure the use of our offer for you in a more pleasurable manner. Thus, we use so-called session cookies in order to establish that you have already visited individual pages of our website. These are automatically deleted when you leave our site.

In addition, we also use temporary cookies which are stored for a certain fixed time on your end device to optimize user-friendliness. If you visit our website again in order to use our services, the fact that you have already visited us is automatically recognised as well as also which entries and settings you have made so that these do not have to be input again.

On the other hand, we use cookies to compile statistical data related to the use of our website and for the purpose of evaluating the optimisation of our offerings for you (cf. No. 5). During your next visit to our website, these cookies make it possible for us to automatically recognise that you were already on our site. These cookies are automatically deleted after a respectively defined time.

The data processed by cookies are necessary for the named purpose of protecting our legitimate interest as well as the third party according to Art. 6, para. 1, lit. f GDPR.

Most browsers accept cookies automatically. However, you can configure your browser so that no cookies are stored on your computer or that a message always appears before a new cookie is stored. Complete deactivation of cookies however may cause that you may not be able to use all functions of our website.

 

5. Analysis Tools 

The following listed tracking measures used by us are undertaken on the basis of Art. 6, para. 1, lit. f GDPR. With use of the tracking measures implemented, we want to ensure meeting user preferences and continual optimisation of our website. On the other hand, we use the tracking measures in order to collect statistical information related to the use of our website and for the purpose of assessing the optimisation of our offerings for you. These interests are deemed to be legitimate within the meaning of the afore-mentioned legal provision.

The respective data processing purpose and data categories are indicated in the tracking tool.

a. Google Analytics

For the purpose of meeting user preferences and continual optimisation of our pages, we use Google Analytics, a web analysis service provided by Google Inc. (https://www.google.de/intl/de/about/) (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter “Google”). In this connection, pseudonymised user profiles are compiled and cookies (cf. under No. 4) are used. The information created by the cookie related to your use of this website such as

  • browser type/version,
  • operating system used,
  • referrer URL (of the previous page you visited),
  • host name of accessing computer (IP address),
  • time of the server inquiry,

are transferred to a Google server in the USA and stored there. The information is used for the purpose of evaluating website use, to compile reports related to website activities and to provide additional services connected with website and Internet use for purposes of market research and user-friendly configuration of this website. Where applicable, this information may also be transferred to third parties when prescribed by law or insofar as third parties process this data on behalf of Google. In no case will Google combine your IP address with other Google data. IP addresses shall be made anonymous so that an identification of the user is not possible (IP masking).

You can prevent installation of cookies by respectively setting your browser software; we point out however that in this case you may not be able to use the full functionality of this website.

Furthermore, you can prevent Google’s collection of data created by the cookie and its use of the data referring to the website (including your IP address) as well as the processing of this data by Google by downloading and installing the browser add-on available under

(https://tools.google.com/dlpage/gaoptout?hl=de).

Alternatively to the browser add-in, in particular with browsers on mobile end devices, you can prevent collection by Google Analytics by clicking on this link.  An opt-out cookie shall be set so that future collection of your data with visits to this website is prevented. The opt-out cookie applies only in this browser and only for our website and is stored on your device. If you delete the cookies in this browser, you must reset the opt-out cookie anew.

You can find further information related to data protection in connection with Google Analytics under Google Analytics Support

(https://support.google.com/analytics/answer/6004245?hl=de).

 

b. Google AdWords Conversion Tracking

Furthermore, in order to statistically record the use of our website and for the purpose of optimising our website for you, we use Google Conversion Tracking. When you click on Google advertising on our website, a cookie (cf. No. 4) is placed by Google AdWords on your computer.

These cookies lose their validity after 30 days and are not used for personal identification. If the user visits certain pages of the website of the AdWords customer and the cookie has not yet expired, Google and the customer can detect that the user has clicked on the ad and has been forwarded to this page.

Every AdWords customer receives a different cookie. Therefore, there is no possibility of cookies being traced back via the websites of AdWords customers. The information obtained using the conversion cookie is used to generate conversion statistics for AdWords customers that have decided in favour of conversion tracking. The AdWords customer learns the total number of users that have clicked on the ad and have been forwarded to a page provided with a Conversion Tracking Tag. However, they do not receive any information that can be used for personally identifying users.

If you do not wish to participate in tracking, you can also refuse the installation of cookies necessary herefor – for instance, by a browser setting which generally deactivates the automatic installation of cookies. You can also deactivate cookies for Conversion Tracking by setting your browser software that cookies from the domain “www.googleadservices.com” are blocked. You can find Google’s privacy policy information related to Conversion Tracking at (https://services.google.com/sitestats/de.html).

 

6. Social Media Plug-ins

a. We currently use the following social media plug-ins: Facebook, Twitter, Xing and LinkedIn. In this context, we use the so-called “two-click solution”. This means that basically no personal data is given to the provider of the plug-ins when you first visit our website. You can recognise the plug-in provider by the markings in the box over its first letter or the logo. We give you the option of communicating directly with the plug-in provider using the button. Only when you click on the marked field and thus activate it, will the plug-in provider receive the information that you have pulled up the corresponding website for our online offerings. The personal data mentioned above in No. 2.a. of this Declaration will also be transmitted. According to the respective providers of Facebook and Xing in Germany, the IP address is immediately anonymised after it is collected by these two providers. So, by activating the plug-in, you are sending personal data to the corresponding plug-in provider, where it is then stored (with US-American providers, it is stored in the USA). Since the plug-in provider collects data mainly through cookies, we recommend that you delete all cookies in your browser in the security settings before clicking on the greyed-out boxes.

b. We do not have any influence over the data collected and data processing procedures and we are not aware of the full extent of data collection, purposes of data processing, and storage periods. Similarly, we do not have any information on the deletion of data collected by the plug-in providers.

c. Plug-in providers store the data collected about you as a user profile and use such for purposes of advertising, market research, and/or for use-friendly configuration of their websites. Such usage serves particularly (even for users who are not logged in) the purpose of showing customised needs-based advertising and in order to inform other social network users of your activities on our website. You have the right to deny permission for such a user profile to be formed, but in order to assert this right you must contact the corresponding plug-in provider. Through plug-ins, we offer you the opportunity to interact with social networks and other users in order to enhance our offerings and structure and be able to make them more interesting for you as a user. The legal basis of the use of the plug-in is Art. 6, para. 1, lit. f GDPR.

d. Data is transferred regardless of whether you have an account with the plug-in provider and whether you are logged in or not. If you are logged in with the plug-in provider, the data we have collected from you is assigned directly to your existing account with the plug-in provider. If you click on the activated button and, e.g. link to the page, the plug-in provider will also store this information in your user account and publicly share it with your contacts. We recommend regularly logging out of your social networks after using them, especially before activating the button since this will you allow you to avoid assignment to your profile through the plug-in provider.

e. For further information on the purpose and scope of data collection and its processing by the plug-in provider, see the following data protection declaration of this provider. There you will also receive further information on your privacy rights and setting options for protecting your privacy.

f. Addresses of the respective plug-in providers and URLs with their data protection policies:

i. Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA; http://www.facebook.com/policy.php; further information on data collection: http://www.facebook.com/help/186325668085084, http://www.facebook.com/about/privacy/your-info-on-other#applications as well as http://www.facebook.com/about/privacy/your-info#everyoneinfo. Facebook has agreed to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

ii. Twitter, Inc., 1355 Market St, Suite 900, San Francisco, California 94103, USA; https://twitter.com/privacy. Twitter has agreed to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

iii. Xing AG, Gänsemarkt 43, 20354 Hamburg, DE; http://www.xing.com/privacy.

iv. LinkedIn Corporation, 2029 Stierlin Court, Mountain View, California 94043, USA; http://www.linkedin.com/legal/privacy-policy. LinkedIn has agreed to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

 

7. YouTube Videos

a. We have integrated YouTube videos into our online offerings that are stored on http://www.YouTube.com and can be played directly from our website. These are all integrated in “Extended Data Protection Mode”, meaning that no data about you as a user is transmitted to YouTube if you do not play the videos. Only when you play the videos will the data described in No. 2 above be transmitted. We have no influence on this data transmission.

b. Through your visit to the website, YouTube will be informed that you pulled up the corresponding subpage of our website. The data mentioned above under No. 2.a. of this Declaration is also transmitted. This will occur regardless of whether YouTube makes a user account available through which you are logged in or if there is no user account at all. If you are logged into Google, your data will be directly assigned to your account. If you don’t want the information assigned directly to your profile with YouTube, you will have to log out before activating the button. YouTube stores your data as a usage profile and uses it for advertising, market research, and/or user-friendly configuration of its website. Such usage serves particularly (also for users who are not logged in) the purpose of providing customised needs-based advertising and in order to inform other users of the social network of your activities on our website. You have the right to deny permission for such a user profile to be formed, but in order to assert this right you must contact YouTube.

c. Further information on the purpose and scope of data collection and its processing through YouTube can be found in the Data Protection Declaration. There you will also receive further information on your rights and setting options for protecting your privacy: https://www.google.de/intl/de/policies/privacy. Google also processes your personal data in the USA and has agreed to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

 

8. Google Maps

a. We use the services of Google Maps on this website. This allows us to display interactive maps directly on the website and enables you to comfortably use the map function.

b. Through your visit to the website, Google will be informed that you pulled up the corresponding subpage of our website. The data mentioned above under No. 2.a. of this Declaration is also transmitted. This will occur regardless of whether Google makes a user account available through which you are logged in or if there is no user account at all. If you are logged into Google, your data will be directly assigned to your account. If you don’t want the information assigned directly to your profile with Google, you will have to log out before activating the button. Google stores your data as a usage profile and uses it for advertising, market research, and/or user-friendly configuration of its website. Such usage serves particularly (also for users who are not logged in) the purpose of providing customised needs-based advertising and in order to inform other users of the social network of your activities on our website. You have the right to deny permission for such a user profile to be formed, but in order to assert this right you must contact Google.

c. For further information on the purpose and scope of data collection and its processing by the plug-in provider, please refer to the provider’s data protection declaration. There you will also find further information on your rights and options for privacy protection: http://www.google.de/intl/de/policies/privacy. Google also processes your personal data in the USA and has agreed to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

 

9. reCAPTCHA

In order to protect your submissions by means of our contact form, we use the reCAPTCHA service of Google Inc. (Google). This query serves to distinguish whether the corresponding input is of human origin or is created improperly by automated machine processing. The query includes the sending of the IP address and, where applicable, other data required by Google for the reCAPTCHA service to Google. For this purpose, your input is communicated to and used by Google. In the case of the activation of the IP anonymisation on this website, your IP address is previously truncated by Google within member states of the European Union or in other states which are party to the agreement on the European Economic Area. Only in exceptional cases is a full IP address transmitted to a Google server in the USA and truncated there. On behalf of the operator of this website, Google will use this information to evaluate your use of this service. The IP address provided from your browser within the framework of reCaptcha is not merged with any other data from Google. This data collection is subject to the deviating data protection regulations of Google. For more information about Google’s privacy policy, please visit: https://www.google.com/intl/de/policies/privacy/.

 

10. Rights of Persons Affected

You have the right:

  • according to Art. 15 GDPR, to obtain information related to your personal data processed by us. In particular, you can obtain information related to the purposes of the processing, categories of personal data concerned, categories of recipients to whom the personal data have been or will be disclosed, the envisaged period for which the personal data will be stored, the existence of the right to request the correction, deletion, restriction of processing or objection or the right to lodge a complaint, where the personal data are not collected by us, information as to their source, as well as regarding the existence of automated decision-making including profiling and, where applicable, meaningful information to the details thereof;
  • according to Art. 16 GDPR, to obtain without undue delay the correction of your inaccurate personal data or to have incomplete personal data completed which is stored with us;
  • according to Art. 17 GDPR, to obtain the deletion of your personal data stored with us insofar as the processing is not necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defence of legal claims;
  • according to Art. 18 GDPR, to obtain restriction of the processing of your personal data insofar as the accuracy of the personal data is contested by you, the processing is unlawful, you oppose the deletion of the personal data and we no longer require the data, you require such however for the establishment, exercise or defence of legal claims or you have filed an objection to processing according to Art. 21 GDPR;
  • according to Art. 20 GDPR, to receive the personal data provided by you to us in a structured, commonly used and machine-readable format and have the right to transmit this data to another controller;
  • according to Art. 7, para. 3 GDPR, to revoke your consent once given to us at any time. This has the consequence that we no longer may continue with data processing for which this consent was based and
  • according to Art. 77 GDPR, to lodge a complaint with a supervisory authority. As a rule, in this respect you can contact the supervisory authority of your habitual residence, place of work or place of our company seat.

 

11. Right to Object

Insofar as your personal data is processed on the basis of legitimate interests according to Art. 6, para. 1, lit. f GDPR, you have the right to file an objection according to Art. 21 GDPR against the processing of your personal data, insofar as reasons exist relating to your particular situation or the objection is against direct marketing. In the latter case, you have a general right to object that shall be implemented by us without statement of a particular situation.

If you would like to exercise your right of revocation or objection, an e-mail addressed to datenschutzbeauftragter@picavi.com shall suffice.

 

12. Data Security

During your website visit, we use the widely used SSL procedure (Secure Socket Layer) in connection with the respectively highest level of encryption supported by your browser. As a rule, this is 256-bit encryption. In the case that your browser does not support 256-bit encryption, we rely then instead on 128-bit v3 technology. You can determine that an individual page of our website is transmitted encrypted by the display of an icon showing a closed key or lock symbol in the address or the lower status bar of your browser.

We also use appropriate technical and organizational security measures in order to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or unauthorised access by third parties. Our security measures are improved on a continuous basis in accordance with technological developments.

 

13. Up-to-Date Validity and Amendment of the Data Protection Declaration

This Data Protection Declaration is currently valid in the version dated May 2018.

It can become necessary to amend this Data Protection Declaration as a result of further developments of our website and offerings or due to amended laws or, respectively, public authority requirements. The respectively current Data Protection Declaration can be accessed by you at any time on the website under https://picavi.com/en/data-protection/ and printed out.