Privacy Policy

I. Preliminary remark

The purpose of this privacy policy is to comply with the data protection requirements existing for the operation and use of the website www.innocast.de, in particular the information requirements pursuant to Article 13 and Article 14 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data, on the free movement of such data and on the repeal of Directive 95/46/EC (General Data Protection Regulation – GDPR).

This Privacy Policy only concerns the data processing operations related to the visit of the Website and the execution of contracts concluded through the Website.

II. Responsible body / data protection officer / supervisory authority

1. Responsible

The responsible party within the meaning of the General Data Protection Regulation (GDPR) and other national data protection laws of the member states as well as other data protection regulations is innoCast GmbH:

innoCast GmbH
Haus-Gravener-Straße 191-193
40764 Langenfeld
Germany

Phone: +49 2173 101399-0
E-Mail: info@innocast.de

2. Data Protection Officer

Klaus-Peter Paashaus
Verlach 15
42697 Solingen
Germany

E-Mail: datenschutz@innocast.de

3. Competent supervisory authority for data protection

LDI Nordrhein-Westfalen
Postfach 20 04 44
40102 Düsseldorf
Germany

Phone: 0211/38424-0
Fax: 0211/38424-10
E-Mail: poststelle@ldi.nrw.de
Website: www.ldi.nrw.de

III. General information on data processing

1. Scope of the processing of personal data

As a matter of principle, we collect and process personal data of our users only to the extent that this is necessary for the provision of a functional website as well as for the provision of our services and in the cases listed in this privacy policy. Any further processing of personal data of our users is only carried out if this is expressly permitted by legal regulations and/or the consent of the respective user – if required – has been obtained.

2. Legal basis for the processing of personal data

Insofar as we obtain the consent of the data subject for processing operations involving personal data, Art. 6 (1) (a) of the EU General Data Protection Regulation (GDPR) serves as the legal basis.

When processing personal data that is necessary for the performance of a contract to which the data subject is a party, Art. 6 (1) lit. b GDPR serves as the legal basis. This also applies to processing operations that are necessary for the performance of pre-contractual measures.

Insofar as processing of personal data is necessary for compliance with a legal obligation to which our company is subject, Art. 6 (1) lit. c GDPR serves as the legal basis.

In the event that vital interests of the data subject or another natural person make processing of personal data necessary, Art. 6 (1) lit. d GDPR serves as the legal basis.

If the processing is necessary to protect a legitimate interest of our company or a third party and the interests, fundamental rights and freedoms of the data subject do not override the first-mentioned interest, Art. 6 (1) f GDPR serves as the legal basis for the processing.

3. Data deletion and storage period

The personal data of the data subject shall be deleted or blocked as soon as the purpose of storage ceases to apply. Storage may also take place if this has been provided for by the European or national legislator in Union regulations, laws or other provisions to which the controller is subject. Data will also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or performance of a contract.

IV. Visit of the website

1. Description and scope of data processing
   

When you visit and use our website www.innocast.de, information is automatically sent to the server of our website by the program used on your end device to view and use websites (Internet browser). This information is temporarily stored in a so-called log file. The following information is collected without your intervention and stored until automated deletion:

• the IP address of the requesting computer,
• the date and time of access,
• the name and URL of the file accessed,
• the website from which the access was made (referrer URL),
• the Internet browser you use and, if applicable, the operating system of your terminal device,
• as well as the name of the service provider that provides you with your Internet access (access provider).

2. Purpose of data processing

This data is processed by us for the following purposes:

• Ensuring a smooth connection to the website,
• Ensuring a comfortable use of our website,
• Evaluation of system security and stability.

Legal basis for data processing

The legal basis for data processing is Art. 6 para. 1 p. 1 lit. f DS-GVO. Our legitimate interest is to present you with an informative and functional website. The processing of the above-mentioned data is necessary to protect our interest. Of course, we also take into account your legitimate interests, fundamental rights and freedoms. Therefore, we do not use the collected data in any case to draw conclusions about your person.

4. Duration of storage

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended.

V. Cookies use

1. Description and scope of data processing
   

We use cookies on our website. Cookies are small files that are automatically created in your internet browser or by your internet browser and stored on your end device (laptop, tablet, smartphone, etc.). Cookies do not cause any damage to your end device, do not contain viruses, Trojans or other malware. A cookie contains a characteristic string of characters that enables the browser to be uniquely identified when the website is called up again. In a cookie, information is stored that arises in each case in connection with the specific end device used. This does not mean, however, that we thereby gain direct knowledge of your identity.

We use cookies to make our website more user-friendly. For example, we use so-called session cookies to recognize that you have already visited individual pages of our website. These are automatically deleted after you leave our site. In addition, we also use temporary cookies to optimize user-friendliness, which are stored on your terminal device for a certain fixed period of time. If you visit our site again to use our services, it is automatically recognized that you have already been to our site and which entries and settings you have made so that you do not have to enter them again.

On the other hand, we use cookies to statistically record the use of our website and to evaluate it for the purpose of optimizing our offer for you. These cookies are automatically deleted after a defined period of time.

2. Legal basis for data processing

The legal basis for the processing of personal data using technically necessary cookies is Art. 6 para. 1 lit. f GDPR.

The legal basis for the processing of personal data using cookies for analysis purposes is Art. 6 para. 1 lit. a GDPR if the user has consented to this.

3. Purpose of data processing

The purpose of using technically necessary cookies is to simplify the use of websites for users. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the Internet browser is recognized even after a page change.

The analysis cookies are used for the purpose of improving the quality of our website and its content. Through the analysis cookies, we learn how the website is used and can thus constantly optimize our offer.

In these purposes also lies our legitimate interest in the processing of personal data according to Art. 6 para. 1 lit. f GDPR.

4. Duration of storage

Technically necessary cookies are automatically deleted after you leave our site. Technically unnecessary cookies are automatically deleted after a defined period of time. Cookies are stored on your end device and transmitted from it to our site. However, you can configure your Internet browser so that no cookies are stored on your end device or a message always appears before a new cookie is created. However, the complete deactivation of cookies may mean that you cannot use all the functions of our website. You can find out about the cookies stored on your end device and their validity period directly in the corresponding settings area of your Internet browser. There you can also delete cookies before the end of their respective validity period.

Make your own cookie customizations

VI. Social Media Plugins

We use social plugins of the social network YouTube on our website on the basis of Art. 6 (1) p. 1 lit. f GDPR in order to make our company better known. The underlying promotional purpose is to be regarded as a legitimate interest within the meaning of the GDPR. The responsibility for data protection-compliant operation is to be ensured by their respective providers. The integration of these plugins by us takes place by way of the so-called two-click method in order to protect visitors to our website as best as possible.

YouTube

Plugins from YouTube are integrated on our website and can be played directly from our website. The operator is YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA. When you call up a page of our website that contains such a plugin, your internet browser establishes a direct connection to YouTube’s servers. The content of the plugin is transmitted by YouTube directly to your internet browser and integrated into the page. Through this integration, YouTube receives the information that your internet browser has called up the corresponding page of our website, even if you do not have a YouTube or Google account or are not currently logged in to YouTube or Google. This information (including your IP address) is transmitted by your internet browser directly to a YouTube server in the USA and stored there. If you are logged into YouTube or Google, YouTube can directly assign your visit to our website to your YouTube or Google account. If you do not wish to be associated with your YouTube profile, you must log out before activating the button. YouTube stores your data as usage profiles and uses them for the purposes of advertising, market research and/or demand-oriented design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact YouTube to exercise this right.

Further information on the purpose and scope of data collection and its processing by YouTube can be found in the privacy policy. There you will also find further information on your rights and setting options to protect your privacy: https://www.google.de/intl/de/policies/privacy. Google also processes your personal data in the USA and has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

VII. Web analysis

1. Google Analytics

a. Description and scope of data processing

We use the web analytics service Google Analytics of Google Inc. (https://about.google/), 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter “Google”) on our website for the needs-based design and ongoing optimization of our web presence. The software uses so-called cookies on the user’s computer (for cookies, see section IV.) to enable an analysis of the user’s use of our website. For this purpose, pseudonymized usage profiles are created and cookies are used. In the process, information is collected about your use of our website such as

• Browser type/version,
• operating system used,
• Referrer URL (the previously visited page),
• host name of the accessing computer (IP address),
• Time of the server request

transmitted to a Google server in the USA and stored there. The information is used to evaluate the use of the website, to compile reports on website activity and to provide other services related to the use of the website and the Internet for the purposes of market research and demand-oriented design of these Internet pages. This information may also be transferred to third parties if this is required by law or if third parties process this data on our behalf. Under no circumstances will your IP address be merged with other Google data. The IP addresses are anonymized so that an assignment is not possible (IP masking). You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) and the processing of this data by Google by downloading and installing a browser add-on (https://tools.google.com/dlpage/gaoptout?hl=de). As an alternative to the browser add-on, especially for browsers on mobile devices, you can also prevent the collection by Google Analytics by clicking on this link tools.google.com/dlpage/gaoptout?hl=en. An opt-out cookie will be set, which prevents the future collection of your data when visiting this website. The opt-out cookie is only valid in this browser and only for our website and is stored on your device. If you delete the cookies in this browser, you must set the opt-out cookie again. Further information on data protection in connection with Google Analytics can be found, for example, in the Google Analytics help (https://support.google.com/analytics/answer/6004245?hl=de).

b. Legal basis for data processing

The legal basis for the processing of the data is Art. 6 para. 1 lit. f GDPR.

 c. Purpose of data processing

The processing of the users’ personal data enables us to analyze the surfing behavior of our users. By evaluating the data obtained, we are able to compile information about the use of the individual components of our website. This helps us to continuously improve our website and its user-friendliness. In these purposes also lies our legitimate interest in the processing of data according to Art. 6 para. 1 lit. f GDPR. By anonymizing the IP address, the interest of users in the protection of their personal data is sufficiently taken into account.

d. Duration of storage

The data is deleted as soon as it is no longer required for our recording purposes. In our case, this is the case after 26 months.

2. WordPress Stats

a. Description and scope of data processing

We use on our website WordPress Tool Stats of Automattic Inc, 60 29th Street #343, San Francisco, CA 94110-4929, USA (hereinafter ” WordPress Stats”). WordPress Stats uses cookies (see section IV.), which are stored on your computer and allow an analysis of the use of the website. The information generated by the cookies about the use of our website is stored on servers in the USA. Your IP address is anonymized after processing and before storage.

You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when closing the browser. When deactivating cookies, the functionality of our website may be limited.

You can object to the collection and use of your data for the future by setting an opt-out cookie in your browser by clicking on this link: https://www.quantcast.com/opt-out/.

If you delete the cookies on your computer, you must set the opt-out cookie again.

 b. Legal basis for data processing

The legal basis for the processing of the data is Art. 6 para. 1 lit. f GDPR.

c. Purpose of data processing

The processing of users’ personal data enables us to statistically record the use of our website and to evaluate it for the purpose of optimizing our website for you.

 d. Duration of storage

The data is deleted as soon as it is no longer required for our recording purposes. In our case, this is the case after 26 months.

VIII. Data subject rights

You have the right:

• in accordance with Art. 15 GDPR to request information about your personal data processed by us. In particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right of complaint, the origin of your data if it has not been collected by us, as well as the existence of automated decision-making including profiling and, if applicable, meaningful information about its details;
• in accordance with Art. 16 GDPR to immediately demand the correction of incorrect or completion of your personal data stored by us;
• pursuant to Art. 17 GDPR to request the erasure of your personal data stored by us, unless the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defense of legal claims;
• to request the restriction of the processing of your personal data in accordance with Art. 18 GDPR, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you object to its erasure and we no longer require the data, but you need it for the assertion, exercise or defense of legal claims or you have objected to the processing in accordance with Art. 21 GDPR;
• pursuant to Art. 20 GDPR to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request the transfer to another controller;
• to revoke your consent at any time in accordance with Art. 7 (3) GDPR. This has the consequence that we may no longer continue the data processing based on this consent for the future, and
• complain to a supervisory authority in accordance with Art. 77 GDPR. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our registered office.
• Right of objection

If your personal data is processed on the basis of legitimate interests pursuant to Art. 6 (1) p. 1 lit. f GDPR, you have the right to object to the processing of your personal data pursuant to Art. 21 GDPR, provided that there are grounds for doing so that arise from your particular situation or the objection is directed against direct advertising. In the latter case, you have a general right of objection, which will be implemented by us without specifying a particular situation. If you wish to exercise your right of revocation or objection, you can use the e-mail address provided in the imprint for this purpose. You can simply enter “Objection” as the subject.