Data protection
I. Preliminary Note
This privacy policy aims to meet the data protection requirements for the operation and use of the website www.innocast.de, particularly the information obligations according to Articles 13 and 14 of Regulation (EU) 2016/679 of the European Parliament and Council of April 27, 2016, on the protection of natural persons with regard to the processing of personal data, the free movement of such data, and the repeal of Directive 95/46/EC (General Data Protection Regulation – GDPR).
This privacy policy applies only to the data processing activities related to visiting the website and the processing of contracts concluded via the website.
II. Responsible Entity / Data Protection Officer / Supervisory Authority
- Responsible Entity
The responsible entity within the meaning of the General Data Protection Regulation (GDPR) and other national data protection laws of the member states, as well as other data protection regulations, is innoCast GmbH:
innoCast GmbH
Haus-Gravener-Straße 191-193
D-40764 Langenfeld
Phone: +49 2173 101399-0
Email: info@innocast.de
- Data Protection Officer
Klaus-Peter Paashaus
Verlach 15
42697 Solingen
Email: datenschutz@innocast.de
- Competent Supervisory Authority for Data Protection
LDI Nordrhein-Westfalen
Postfach 20 04 44
40102 Düsseldorf
Tel.: 0211/38424-0
Fax: 0211/38424-10
Email: poststelle@ldi.nrw.de
Website: www.ldi.nrw.de
III. General Information on Data Processing
- Scope of Personal Data Processing
We collect and process personal data of our users primarily only to the extent necessary to provide a functional website and to deliver our services, as well as in the cases listed in this privacy policy. Further processing of personal data only occurs to the extent that it is expressly permitted by legal regulations and/or the consent of the respective user is obtained – where required.
- Legal Basis for Processing Personal Data
If we obtain the consent of the data subject for processing personal data, Article 6(1)(a) of the EU General Data Protection Regulation (GDPR) serves as the legal basis.
For the processing of personal data necessary for the fulfillment of a contract to which the data subject is a party, Article 6(1)(b) GDPR serves as the legal basis. This also applies to processing operations that are necessary to carry out pre-contractual measures.
If the processing of personal data is necessary for compliance with a legal obligation to which our company is subject, Article 6(1)(c) GDPR serves as the legal basis.
In the event that processing is necessary to protect vital interests of the data subject or another natural person, Article 6(1)(d) GDPR serves as the legal basis.
If processing is necessary for the purposes of the legitimate interests pursued by our company or a third party, and the interests, rights, and freedoms of the data subject do not override the former, Article 6(1)(f) GDPR serves as the legal basis for processing.
- Data Deletion and Retention Period
Personal data of the data subject will be deleted or blocked as soon as the purpose of the storage ceases to exist. Further storage may occur if this is provided for by European or national legislators in Union regulations, laws, or other provisions to which the controller is subject. Blocking or deletion of data also occurs when a storage period prescribed by the aforementioned regulations expires, unless there is a need for further storage of the data for the conclusion or fulfillment of a contract.
IV. Visiting the Website
- Description and Scope of Data Processing
When you visit and use our website www.innocast.de, the program used on your device for viewing and using websites (internet browser) automatically sends information to the server of our website. This information is temporarily stored in a so-called log file. The following information is collected without your intervention and stored until automated deletion:
- the IP address of the requesting computer,
- the date and time of access,
- the name and URL of the retrieved file,
- the website from which the access was made (referrer URL),
- the internet browser you use and, if applicable, the operating system of your device, as well as the name of the service provider providing your internet access (Access Provider).
- Purpose of Data Processing
We process this data for the following purposes:
- Ensuring a smooth connection to the website,
- Ensuring a comfortable use of our website,
- Evaluating the system security and stability.
- Legal Basis for Data Processing
The legal basis for data processing is Article 6(1) sentence 1 lit. f GDPR. Our legitimate interest is to present you with an informative and functional website. To maintain our interest, processing of the above-mentioned data is necessary. Of course, we also take into account your legitimate interests, rights, and freedoms. Therefore, we will in no case use the collected data to draw conclusions about your identity.
- Duration of Storage
The data will be deleted as soon as they are no longer required for the purpose for which they were collected. In the case of data collection to provide the website, this is the case when the respective session ends.
V. Use of Cookies
- Description and Scope of Data Processing
We use cookies on our website. Cookies are small files that are automatically created by your internet browser and stored on your device (laptop, tablet, smartphone, etc.). Cookies do not cause any harm to your device and do not contain viruses, trojans, or other malicious software. A cookie contains a characteristic string of characters that allows the browser to be uniquely identified when accessing the website again. A cookie stores information related to the specific device used. However, this does not mean that we directly gain knowledge of your identity.
We use cookies to make our website more user-friendly. For instance, we use so-called session cookies to recognize that you have already visited individual pages on our website. These are automatically deleted when you leave our site. Additionally, we also use temporary cookies to optimize the user experience, which are stored on your device for a specific, set period. If you visit our site again to use our services, it will automatically be recognized that you have already been with us and what inputs and settings you have made, so you don’t need to enter them again.
On the other hand, we use cookies to statistically track the usage of our website and evaluate this data for the purpose of optimizing our offerings for you. These cookies are automatically deleted after a defined period.
- Legal Basis for Data Processing
The legal basis for processing personal data using technically necessary cookies is Article 6 (1) lit. f GDPR.
The legal basis for processing personal data using cookies for analytical purposes, if the user has given consent, is Article 6 (1) lit. a GDPR.
- Purpose of Data Processing
The purpose of using technically necessary cookies is to simplify the use of websites for users. Some functions on our website cannot be offered without the use of cookies. For these, it is necessary that the internet browser is recognized after switching pages.
The use of analysis cookies serves the purpose of improving the quality of our website and its content. Through analysis cookies, we learn how the website is used and can continuously optimize our offerings.
Our legitimate interest in processing the personal data in these purposes is also based on Article 6 (1) lit. f GDPR.
- Duration of Storage
Technically necessary cookies are automatically deleted once you leave our site. Technically non-essential cookies are automatically deleted after a defined period. Cookies are stored on your device and transmitted to our site from there. However, you can configure your internet browser so that no cookies are stored on your device or that you are always notified before a new cookie is placed. However, disabling cookies entirely may result in not being able to use all features of our website. You can also find out about the cookies stored on your device and their validity directly in the relevant settings area of your internet browser. There, you can also delete cookies before the end of their validity period.
VI. Social Media Plugins
On our website, we use social plugins from the social network YouTube based on Article 6 (1) sentence 1 lit. f GDPR to increase the visibility of our company. The underlying commercial purpose is considered a legitimate interest within the meaning of the GDPR. The responsibility for ensuring data protection compliance lies with the respective providers. We integrate these plugins through the so-called two-click method to best protect visitors to our website.
YouTube
We embed YouTube plugins on our website, which can be played directly from our site. The operator is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. When you visit a page on our website containing such a plugin, your internet browser establishes a direct connection to YouTube’s servers. The content of the plugin is transmitted directly from YouTube to your internet browser and embedded in the page. Through this integration, YouTube receives information that your browser has accessed the corresponding page of our website, even if you do not have a YouTube or Google account or are not currently logged in to YouTube or Google. This information (including your IP address) is transmitted directly from your internet browser to a YouTube server in the USA and stored there. If you are logged into YouTube or Google, YouTube can directly associate your visit to our website with your YouTube or Google account. If you do not want this association, you must log out before activating the button. YouTube stores your data as usage profiles and uses them for advertising, market research, and/or the design of its website tailored to your needs. Such analysis is particularly carried out (even for users who are not logged in) to provide targeted advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, and you can exercise this right by contacting YouTube.
For more information on the purpose and scope of data collection and its processing by YouTube, please refer to the YouTube privacy policy. You will also find further information on your rights and options for privacy protection here: https://www.google.de/intl/de/policies/privacy. Google also processes your personal data in the USA and has submitted to the EU-U.S. Privacy Shield Framework, https://www.privacyshield.gov/EU-US-Framework.
VII. Web Analytics
- Google Analytics
a. Description and Scope of Data Processing
We use the web analytics service Google Analytics from Google Inc. (https://about.google/), 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter „Google“) on our website for demand-oriented design and continuous optimization of our web presence. The software uses so-called cookies on the user’s computer (see section IV on cookies) to enable an analysis of the use of our website by the user. For this purpose, pseudonymized usage profiles are created and cookies are used. The following information about your use of our website is transmitted:
- Browser type/version,
- Operating system used,
- Referrer URL (the previously visited page),
- Hostname of the accessing computer (IP address),
- Time of server request
is transferred to a server of Google in the USA and stored there. The information is used to evaluate the use of the website, compile reports on website activities, and provide further services related to website and internet usage for market research and demand-oriented design of these internet pages. This information may also be transferred to third parties if required by law or if third parties process this data on our behalf. In no case will your IP address be merged with other Google data. The IP addresses are anonymized, so that no association is possible (IP masking). You can prevent the installation of cookies by adjusting your browser settings. However, please note that in this case, some functions of this website may not be fully available. Additionally, you can prevent the collection of the data generated by the cookie and related to your use of the website (including your IP address) as well as its processing by Google by downloading and installing a browser add-on (https://tools.google.com/dlpage/gaoptout?hl=en). Alternatively, especially for browsers on mobile devices, you can prevent Google Analytics tracking by clicking on this link: tools.google.com/dlpage/gaoptout?hl=en. An opt-out cookie will be set that prevents future collection of your data when visiting this website. The opt-out cookie applies only in this browser and only for our website and is saved on your device. If you delete the cookies in this browser, you will need to set the opt-out cookie again. For more information on privacy related to Google Analytics, please refer to the Google Analytics Help (https://support.google.com/analytics/answer/6004245?hl=en).
b. Legal Basis for Data Processing
The legal basis for the processing of the data is Article 6 (1) lit. f GDPR.
c. Purpose of Data Processing
Processing the personal data of users enables us to analyze the surfing behavior of our users. By evaluating the data collected, we can compile information about the usage of individual components of our website. This helps us continuously improve our website and its user-friendliness. Our legitimate interest in processing the data is based on Article 6 (1) lit. f GDPR. By anonymizing the IP address, the interest of users in protecting their personal data is adequately taken into account.
d. Duration of Storage
The data will be deleted once it is no longer needed for our recording purposes. In our case, this happens after 26 months.
- WordPress Stats
a. Description and Scope of Data Processing
We use the WordPress tool Stats by Automattic Inc., 60 29th Street #343, San Francisco, CA 94110-4929, USA (hereinafter “WordPress Stats”) on our website. WordPress Stats uses cookies (see section IV) that are stored on your computer and allow analysis of the use of the website. The information generated by the cookies about your use of our website is stored on servers in the USA. Your IP address is anonymized after processing and before being stored.
You can configure your browser to be notified when cookies are set and to allow cookies only in individual cases, exclude the acceptance of cookies for certain cases or generally, and activate the automatic deletion of cookies when closing the browser. If you disable cookies, the functionality of our website may be limited.
You can object to the collection and use of your data for the future by setting an opt-out cookie in your browser with a click on this link: https://www.quantcast.com/opt-out/.
If you delete the cookies on your computer, you need to set the opt-out cookie again.
b. Legal Basis for Data Processing
The legal basis for processing the data is Article 6 (1) lit. f GDPR.
c. Purpose of Data Processing
The processing of personal data of users enables us to statistically capture the use of our website and evaluate it for the purpose of optimizing our website for you.
d. Duration of Storage
The data will be deleted once it is no longer needed for our recording purposes. In our case, this happens after 26 months.
VIII. Rights of Data Subjects
You have the right to:
- Request information about your personal data processed by us in accordance with Article 15 GDPR. In particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been disclosed or will be disclosed, the planned storage duration, the existence of a right to correction, deletion, restriction of processing, or objection, the existence of a right to complain, the source of your data if it was not collected by us, and the existence of automated decision-making, including profiling, and, if applicable, meaningful information about their details;
- Request the immediate correction of inaccurate or completion of your personal data stored with us in accordance with Article 16 GDPR;
- Request the deletion of your personal data stored with us in accordance with Article 17 GDPR, as long as the processing is not required to exercise the right of freedom of expression and information, to fulfill a legal obligation, for reasons of public interest, or for the establishment, exercise, or defense of legal claims;
- Request the restriction of the processing of your personal data in accordance with Article 18 GDPR, as long as the accuracy of the data is disputed by you, the processing is unlawful, but you oppose its deletion and we no longer need the data, but you require it for the establishment, exercise, or defense of legal claims, or you have objected to the processing under Article 21 GDPR;
- Receive your personal data that you have provided to us in a structured, commonly used, and machine-readable format or request the transmission to another controller in accordance with Article 20 GDPR;
- Withdraw your consent given to us at any time in accordance with Article 7 (3) GDPR. This means that we can no longer continue the data processing based on this consent in the future;
- Lodge a complaint with a supervisory authority in accordance with Article 77 GDPR. In general, you can contact the supervisory authority of your usual place of residence, place of work, or our registered office for this purpose.
- Right to Object
If your personal data is processed on the basis of legitimate interests according to Article 6 (1) sentence 1 lit. f GDPR, you have the right to object to the processing of your personal data in accordance with Article 21 GDPR, provided that there are reasons arising from your particular situation or if the objection is directed against direct marketing. In the latter case, you have a general right to object, which will be implemented by us without the need to specify a particular situation. If you wish to exercise your right of withdrawal or objection, you can use the email address provided in the imprint. You can simply enter „Objection“ as the subject.