Contact us

Privacy policy for website operators in accordance with the requirements of the GDPR

We are pleased that you are visiting our website and thank you for your interest in our company and our first-class services and products (collectively: our “Services”). Data protection and data security when using our website are very important to us. We would therefore like to take this opportunity to inform you which of your personal data we collect when you visit our website and for what purposes it is used.

As changes to the law or changes to our internal company processes may make it necessary to adapt this privacy policy, we ask you to read this privacy policy regularly. The privacy policy can be accessed, saved and printed at any time under Privacy Policy.

§ 1 RESPONSIBILITY AND SCOPE OF APPLICATION

The controller within the meaning of the EU General Data Protection Regulation (hereinafter: GDPR) and other national data protection laws of the member states as well as other data protection regulations is

schalk&friends GmbH
Lindwurmstraße 124
80337 Munich
Phone: +49 (89) 44 23 58-0
E-mail: info@schalk-and-friends.de

This privacy policy applies to the website of schalk&friends GmbH, which can be accessed under the domain www.schalk-and-friends.de as well as the various subdomains and associated domains (hereinafter referred to as “our website”).

§ 2 DATA PROTECTION OFFICER

The external data protection officer of the controller is

Robert Faußner, M.A.
Data Protection Officer
c/o HEUSSEN Rechtsanwaltsgesellschaft mbH
Brienner Straße 9 / Amiraplatz
80333 Munich
Tel: +49 89 290 97 0
Fax: +49 89 290 97 200
E-mail: datenschutzbeauftragter@heussen-law.de

§ 3 PRINCIPLES OF DATA PROCESSING

Personal data is any information relating to an identified or identifiable natural person. This includes, for example, information such as your name, age, address, telephone number, date of birth, email address, IP address or user behaviour. Information for which we cannot (or can only with disproportionate effort) establish a link to your person, e.g. by anonymising the information, is not personal data. The processing of personal data (e.g. the collection, retrieval, use, storage or transmission) always requires a legal basis or your consent. Processed personal data will be deleted as soon as the purpose of the processing has been achieved and there are no longer any statutory retention obligations to be complied with.

If we process your personal data for the provision of certain services, we will inform you below about the specific processes, the scope and purpose of the data processing, the legal basis for the processing and the respective storage period.

§ 4 INDIVIDUAL PROCESSING OPERATIONS

1) Provision and use of the website

Type and scope of data processing When you access and use our website, we collect the personal data that your browser automatically transmits to our server. This information is temporarily stored in a so-called log file. When you use our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure stability and security:

  • IP address of the requesting computer
  • Date and time of access
  • Name and URL of the retrieved file
  • Website from which the access is made (referrer URL)
  • the browser used and, if applicable, the operating system of your computer, as well as the name of your access provider

Legal basis
Art. 6 para. 1 lit. f GDPR serves as the legal basis for the aforementioned data processing. The processing of the aforementioned data is necessary for the provision of a website and thus serves to safeguard a legitimate interest of our company.

Storage period
The data will be deleted as soon as it is no longer required to display the website. The collection of data for the provision of the website and the storage of data in log files is absolutely necessary for the operation of the website. Consequently, the user has no option to object. Further storage may take place in individual cases if this is required by law.

2) Newsletter

Type and scope of data processing
You have the option of subscribing to a free newsletter on our website. In order to be able to send you the newsletter regularly, we need the following information from you:

  • E-mail address

Your data will not be passed on to third parties in connection with the newsletter dispatch. We use the so-called double opt-in procedure for sending the newsletter, i.e. we will only send you the newsletter if you first confirm your registration via a confirmation e-mail sent to you for this purpose by means of a link contained therein. This is to ensure that only you, as the owner of the e-mail address provided, can register for the newsletter. Your confirmation must be made promptly after receipt of the confirmation e-mail, otherwise your newsletter registration will be automatically deleted from our database.

Legal basis
The processing of your e-mail address for the newsletter mailing is based on Art. 6 para. 1 lit. a GDPR on the following voluntarily provided by you

Declaration of consent:
Declaration of consent: By entering my data and clicking the “Send” button, I declare my consent to the processing of my e-mail address for regular newsletter mailings. I can unsubscribe from the newsletter service at any time by clicking on the corresponding link at the end of the newsletter. I have read the current privacy policy and accept it. I can withdraw my consent to the collection of personal data collected during the registration process at any time by contacting info@schalk-and-friends.de.

You can revoke your consent to the use of your personal data at any time with effect for the future by sending an e-mail to the e-mail address stated above under § 1 or to the data protection officer (see § 2 above)

Storage period
Your e-mail address will be stored for as long as you have subscribed to the newsletter. After you unsubscribe from the newsletter, your e-mail address will be deleted. Further storage may take place in individual cases if this is required by law.

3) Contact form

Type and scope of data processing
On our website, we offer you the opportunity to contact us via a form provided. As part of the process of sending your enquiry via the contact form, reference is made to this privacy policy to obtain your consent. If you make use of the contact form, the following personal data will be processed by you:

  • First name: *
  • Surname: *
  • E-mail: *
  • Telephone number: *
  • Message: *

Legal basis
The data processing described above (see § 4 4. a.) for the purpose of establishing contact is carried out in accordance with Art. 6 para. 1 lit. a GDPR on the basis of the declaration of consent voluntarily given by you below:

By entering my data and clicking the “Send enquiry” button, I declare my consent to the processing of my e-mail address, my name and customer number for the purpose of responding to my contact enquiry. I have read the current privacy policy and accept it. I can revoke this consent at any time with effect for the future by contacting info@schalk-and-friends.de.

You can revoke your consent to the use of your personal data at any time with effect for the future by sending an e-mail to the e-mail address stated above under § 1 or to the data protection officer (see above under § 2).

Storage period
As soon as your enquiry has been dealt with and the matter in question has been finally clarified, your personal data processed via the contact form will be deleted. Further storage may take place in individual cases if this is required by law.

4) Contact options on our website

On our website you can contact us by e-mail in the following ways:

  • Advice and support: info@schalk-and-friends.de
  • Accounting: accounting@schalk-and-friends.de

Type and scope of data processing
Every website visitor can send their enquiry to these e-mail addresses. The relevant specialist departments process the enquiries by e-mail. Our data collection is limited to the e-mail address of the e-mail account you use to contact us and any personal data you provide when contacting us.

Legal basis
The permissibility of data collection is based on Art. 6 para. 1 lit. f) GDPR, as there is a similar interest in establishing contact and communication between you and our company as well as a legitimate company interest in processing the above-mentioned data in order to be able to process your request.

Storage period
The duration of storage of the above-mentioned data depends on the background of your contact. Your data will be deleted regularly if the purpose of the communication no longer applies and storage is no longer necessary (e.g. after your request has been processed).

§ 5 DISCLOSURE OF DATA

We only pass on your personal data to third parties if:

  • you have given your express consent to this in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR
  • this is legally permissible and necessary for the fulfilment of a contractual relationship with you in accordance with Art. 6 para. 1 sentence 1 lit. b GDPR
  • there is a legal obligation for the disclosure pursuant to Art. 6 para. 1 sentence 1 lit. c GDPR
  • the disclosure pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR is necessary for the protection of legitimate company interests, as well as for the assertion, exercise or defence of legal claims and there is no reason to assume that you have an overriding interest worthy of protection in not disclosing your data.

§ 6 USE OF COOKIES

Type and scope of data processing
We use cookies on our website. Cookies are small files that are sent by us to the browser of your end device and stored there when you visit our website. Some functions of our website cannot be offered without the use of technically necessary cookies. Other cookies, however, enable us to carry out various analyses. For example, cookies are able to recognise the browser you use when you visit our website again and to transmit various information to us. With the help of cookies, we can make our website more user-friendly and effective for you, for example by tracking your use of our website and determining your preferred settings (e.g. country and language settings). If third parties process information via cookies, they collect the information directly via your browser. Cookies do not cause any damage to your end device. They cannot execute programmes or contain viruses. Various types of cookies are used on our website, the type and function of which are explained in more detail below.

Type 1: Transient cookies
Transient cookies are used on our website, which are automatically deleted as soon as you close your browser. This type of cookie makes it possible to record your session ID. This allows various requests from your browser to be assigned to a common session and enables us to recognise your end device when you visit the website at a later date.

Type 2: Persistent cookies
Persistent cookies are used on our website. Persistent cookies are cookies that are stored in your browser for a longer period of time and transmit information to us. The respective storage period differs depending on the cookie. You can delete persistent cookies yourself via your browser settings.

Function 1: Required cookies
These cookies are required for technical reasons so that you can visit our website and use the functions we offer. This relates, for example, to the following applications Website tracking (order process). These cookies also contribute to the secure and compliant use of the website.

Function 2: Performance-related cookies
These cookies enable us to analyse website usage and improve the performance and functionality of our website. For example, information is collected about how our website is used by visitors, which pages are accessed most frequently or whether error messages are displayed on certain pages.

Function 3: Cookies for marketing and social media
Advertising cookies (third-party provider) make it possible to show you various offers that match your interests. These cookies can be used to record the web activities of users over a longer period of time. You may recognise the cookies on different devices you use. The following third-party providers receive personal data via cookies integrated on our website:

  • Google Analytics
  • Bing
  • CrazyEgg
  • LinkedIn
  • Adwords Conversion Tag

Furthermore, certain cookies make it possible to establish a connection to your social networks and to share content from our website within your networks.

Legal basis
Due to the described purposes of use (see § 6. a.), the legal basis for the processing of personal data using cookies is Art. 6 para. 1 lit. f GDPR. If you have given us your consent to the use of cookies on the basis of a notice (“cookie banner”) provided by us on the website, the lawfulness of the use is additionally governed by Art. 6 para. 1 sentence 1 lit. a GDPR.

Storage period
As soon as the data transmitted to us via the cookies is no longer required to fulfil the purposes described above, this information is deleted. Further storage may take place in individual cases if this is required by law. Configuration of browser settings Most browsers are set to accept cookies by default. However, you can configure your browser so that it only accepts certain cookies or no cookies at all. However, we would like to point out that you may no longer be able to use all the functions of our website if cookies are deactivated by your browser settings on our website. You can also delete cookies already stored in your browser via your browser settings. It is also possible to set your browser to notify you before cookies are stored. As the various browsers may differ in their respective functions, we ask you to use the respective help menu of your browser for the configuration options. If you would like a comprehensive overview of all third-party access to your Internet browser, we recommend that you install specially developed plug-ins.

§ 7 TRACKING AND ANALYSIS TOOLS

We use tracking and analysis tools to ensure the continuous optimisation and needs-based design of our website. With the help of tracking measures, it is also possible for us to statistically record the use of our website by visitors and to further develop our online offer for you with the help of the knowledge gained. Based on these interests, the use of the tracking and analysis tools described below is justified in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR. If you have given us your consent to the use of cookies on the basis of a notice (“cookie banner”) provided by us on the website, the legality of the use is also based on Art. 6 para. 1 sentence 1 lit. a GDPR. The following description of the tracking and analysis tools also shows the respective processing purposes and the data processed. You can change your selection of tracking and analysis tools in the cookie settings at any time and thus activate them.

1) Google Analytics

This website uses Google Analytics, a web analytics service provided by Google Inc, 1600 Amphitheatre Parkway, Mountainview, CA 94043 USA (“Google”). Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyse how users use the site.

The information generated by these cookies, for example about the time, place and frequency of your use of this website, is usually transferred to a Google server in the USA and stored there. When using Google Analytics, it cannot be ruled out that the cookies set by Google Analytics may also collect other personal data in addition to the IP address. Please note that Google may transfer this information to third parties where required to do so by law, or where such third parties process the information on Google’s behalf.

Google will use the information generated by cookies on behalf of the operator of this website to analyse your use of the website, to compile reports on website activity and to provide other services related to website activity and internet usage to the website operator. According to Google, the IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

You can generally prevent the storage of cookies by selecting the appropriate settings in your browser software. However, we would like to point out that in this case you may not be able to use all functions of this website to their full extent.

It cannot be ruled out that the cookies set by Google Analytics may collect other personal data in addition to the IP address. In order to prevent information about your use of the website from being collected by Google Analytics and transmitted to Google Analytics, you can, in addition to the above-mentioned option of deactivating tracking cookies, download and install a plugin for your browser at the following link: http://tools.google.com/dlpage/gaoptout?hl=de. This plugin prevents information about your visit to the website from being transmitted to Google Analytics. Other analyses are not prevented by this plugin.

In order to ensure the best possible protection of your personal data, Google Analytics has been extended on this website by the code “anonymiseIp”. This code causes the last 8 bits of the IP addresses to be deleted and your IP address is thus anonymised (so-called IP masking). Your IP address will be shortened by Google before transmission within member states of the European Union or in other contracting states of the Agreement on the European Economic Area and thus anonymised. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and truncated there.

2) Google AdWords

We use the technology “Google AdWords” and specifically conversion tracking. Google Conversion Tracking is an analysis service of Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. If you click on an advert placed by Google, a cookie for conversion tracking is stored on your PC. The cookies are valid for 30 days and are not used for personal identification. If you visit certain pages of our website when the cookie has not yet expired, Google and we can recognise that you have clicked on a specific ad and have been redirected to this page. Google AdWords customers each receive a different cookie. It is therefore not possible to track cookies via the websites of AdWords customers.

The data collected with the help of the conversion cookie is used to create conversion statistics for AdWords customers who use conversion tracking. The customers find out the number of users who have clicked on their advert and were then forwarded to a page with a conversion tracking tag. However, they do not receive any information that can be used to personally identify users. If you do not wish to participate in conversion tracking, you can prevent this by making the appropriate setting in your browser, e.g. by generally preventing the installation of cookies. You can also deactivate cookies for conversion tracking by setting your browser so that only cookies from the web address “googleadservices.com” are blocked.

3) Google Remarketing

We use the “Google Remarketing” technology from Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google Remarketing is used to display adverts to users who have already visited our websites and online services and are interested in a particular offer. This allows targeted and interest-based adverts to be displayed on our website within the Google advertising network. Google Remarketing uses cookies for this analysis. This allows our visitors to be recognised as soon as they access websites within the Google advertising network. Within the Google advertising network, targeted and interest-based adverts can be displayed based on the websites of the Google advertising network previously visited by the visitor (which also use Google’s remarketing function). If you do not wish to receive targeted, interest-based advertising, you can deactivate the use of cookies by Google for these purposes via the link: https://www.google.de/settings/ads deactivate.

4) Google Ads Conversion Tracking

This website uses tools for “online marketing” from Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. This serves to recognise that a visitor has come across our website via a Google advertisement. Google uses cookies that are stored on your computer and enable your use of the website to be analysed. The cookies for so-called “conversion tracking” are set when you click on an advert placed by Google. These cookies lose their validity after 30 days and are not used for personal identification. If you wish to prevent “conversion tracking”, you can set your browser to block cookies from the domain “googleadservices.com“. You can also exercise your right to opt-out. If you would like to learn more about these methods or would like to know what options you have to prevent this information from being used by Google, click here: https://www.google.com/settings/u/0/ads/authenticated

5) LinkedIn conversion tracking

We use the re-targeting tool LinkedIn Conversion Tracking from LinkedIn Ireland, Wilton Plaza, Wilton Place, Dublin 2, Ireland (“LinkedIn”). For this purpose, the LinkedIn Insight Tag is integrated on the website of the online trade fair, which enables LinkedIn to collect statistical, pseudonymous data about your visit and use of our website and to provide us with corresponding aggregated statistics on this basis. In addition, this information is used to show you interest-specific and relevant offers and recommendations after you have shown an interest in certain services, information and offers at the online trade fair. The relevant information is stored in a cookie. You can prevent the storage of cookies by changing your browser settings. Alternatively, you can object to this form of data processing by using the following link to set an opt-out cookie that will remain on your device until you delete the cookies. This option is available to both LinkedIn members and non-members: Notes on LinkedIn Conversion Tracking Further information can also be found in LinkedIn’s privacy policy.

6) CrazyEgg.com

This site uses the CrazyEgg.com tracking tool to record randomly selected individual visits (only with anonymised IP addresses). This tracking tool uses cookies to analyse how you use the website (e.g. which content is clicked on). A usage profile is visualised for this purpose. No personal data is collected, processed or used when you use this tool. Only user profiles are created when pseudonyms are used. You can object to the collection, processing and recording of data generated by CrazyEgg.com at any time by following the instructions at http://www.crazyegg.com/opt-out. Further information on data protection at CrazyEgg.com can be found at http://www.crazyegg.com/privacy.

7) Bing

Bing Conversion Tracking from Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA – can store a temporary cookie on your computer when you click on one of our adverts on Bing or on selected websites in the Bing advertising network. If you then reach one of our conversion pages, Microsoft Bing and we will recognise that you have previously clicked on the ad. This is used to create conversion statistics, i.e. to record how many users reach a conversion page after clicking on an advert, i.e. complete an order process. You can find information on this and a way to prevent information on your use of the website from being collected by Bing Ads and transmitted to Microsoft, in addition to the above-mentioned option of deactivating tracking cookies, at the following link: http://choice.microsoft.com/de.

8) Hubspot

We use the HubSpot software for marketing automation on our website. For this purpose, HubSpot places a cookie on your computer to collect the following data: Information about the computer you are using and your visit to our website, your IP address, your location, the browser you are using, referral source and the length of your visit to our website. HubSpot stores this data on its own company server. If you register for one of our offers via a web form, contact information such as your name, e-mail address, company name, address and telephone number will be collected and stored. We use your data for this purpose: for statistical evaluations, to ensure the smooth operation of our online offer, its continuous optimisation and also to improve our marketing measures. We assure you that we will not pass on your data to third parties other than HubSpot, where it will be stored on their databases to perform the above-mentioned services. The personal data that is processed also includes information that is publicly available about you on the Internet and that Hubspot also stores. We reserve the right to use the information to contact those visitors to our website by e-mail or telephone who have provided their contact details for this purpose and to determine which of our company’s services are of interest to the visitors. About HubSpot itself: The software company originates from the USA and has a branch in Ireland. Contact: HubSpot, 2nd Floor 30 North Wall Quay, Dublin 1, Ireland, Phone: +353 1 5187500 HubSpot is subject to TRUSTe’s Privacy Seal. The EU standard contractual clauses have been concluded to regulate data transfer. Further information on the topic of “HubSpot and data protection” can be found at https://legal.hubspot.com/de/privacy-policy.

§ 9 SOCIAL MEDIA PORTALS

We would like to give users of our website the opportunity to use social networks (social media portals). In order to prevent unwanted data transmission to the social media providers, we only include the social media portals as links (possibly behind the graphics with the corresponding logos of the social media portals). After clicking on the link, you will be redirected to the website of the respective social media provider and only then will user information be transmitted to the respective social media provider. With regard to the data processing there, the privacy policy of the respective social media provider applies (e.g. for the “Facebook” service of the operator Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA, at: https://www.facebook.com/policy.php, for the “Instagram” service of the operator Instagram LLC, 1601 Willow Rd, Menlo Park CA 94025, USA at https://help.instagram.com/155833707900388, for the “Pinterest” service of the operator Pinterest Inc, 808 Brannan Street, San Francisco, CA 94103, USA at https://about.pinterest.com/de/privacy-policy, for the “YouTube” video platform of the operator YouTube, LLC, 901 Cherry Ave, San Bruno, A 94066, USA, which is represented by Google Inc (Google), at https://www.google.de/intl/de/policies/privacy).

§ 10 HYPERLINKS

Our website contains so-called hyperlinks to websites of other providers. If you activate these hyperlinks, you will be forwarded directly from our website to the website of the other provider. You can recognise this by the change of URL, among other things. We cannot accept any responsibility for the confidential handling of your data on these third-party websites, as we have no influence on whether these companies comply with data protection regulations. Please refer directly to these websites for information on how these companies handle your personal data.

§ 11 RIGHTS OF DATA SUBJECTS

The GDPR gives you the following rights as a data subject of personal data processing:

  • In accordance with Art. 15 GDPR, you can request information about your personal data processed by us. In particular, you can request information about the processing purposes, the categories of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right of appeal, the origin of your data if it was not collected by us, about a transfer to third countries or to international organisations and about the existence of automated decision-making including profiling and, if applicable, meaningful information about its details.
  • In accordance with Art. 16 GDPR, you can immediately request the correction of incorrect or the completion of your personal data stored by us.
  • In accordance with Art. 17 GDPR, you can request the deletion of your personal data stored by us, unless the processing is necessary to exercise the right to freedom of expression and information, to fulfil a legal obligation, for reasons of public interest or for the assertion, exercise or defence of legal claims.
  • In accordance with Art. 18 GDPR, you can request the restriction of the processing of your personal data if the accuracy of the data is disputed by you, the processing is unlawful, we no longer need the data and you refuse to delete it because you need it for the assertion, exercise or defence of legal claims. You also have the right under Art. 18 GDPR if you have objected to the processing in accordance with Art. 21 GDPR.
  • In accordance with Art. 20 GDPR, you can request to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or you can request that it be transferred to another controller.
  • In accordance with Art. 7 para. 3 GDPR, you can revoke your consent to us at any time. As a result, we may no longer continue the data processing based on this consent in the future.
  • In accordance with Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence, your workplace or our company headquarters.

§ 12 RIGHT OF OBJECTION

If your personal data is processed on the basis of legitimate interests in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR, you have the right to object to the processing of your personal data in accordance with Art. 21 GDPR, provided that there are reasons for this arising from your particular situation or the objection is directed against direct advertising. In the case of direct marketing, you have a general right to object, which we will implement without you having to specify a particular situation.

§ 13 DATA SECURITY AND SECURITY MEASURES

We are committed to protecting your privacy and treating your personal data confidentially. In order to prevent manipulation, loss or misuse of your data stored by us, we take extensive technical and organisational security precautions, which are regularly reviewed and adapted to technological progress. These include the use of recognised encryption methods (SSL or TLS). However, we would like to point out that due to the structure of the Internet, it is possible that the rules of data protection and the above-mentioned security measures may not be observed by other persons or institutions outside our area of responsibility. In particular, unencrypted data – e.g. when sent by e-mail – can be read by third parties. We have no technical influence on this. It is the responsibility of the user to protect the data provided by him/her against misuse through encryption or in any other way.