Data Protection Declaration
I. Name and address of the responsible company
INFOX GmbH & Co. Informationslogistik KG
Genker Str. 20
Tel.: +49(0)2241 2500 0
is responsible within the meaning of the EU General Data Protection Regulation (GDPR) and other national data protection laws.
II. Name and address of the data protection officer
The data protection officer of the responsible company is:
Hanauer Landstr. 151-153
60314 Frankfurt am Main
+49 (0) 69 - 9494 32 410
III. General information on data processing
1. scope of the processing of personal data
We collect and use personal data of the users of our website only to the extent necessary to provide a functional website, our content and services.
In principle, we collect and use of personal data of our users only after his consent. An exception to this principle applies in cases where processing of the data is permitted by legal regulations or where obtaining prior consent is not possible for actual reasons.
2. Legal basis for the processing of personal data
The legal bases for the processing of personal data result in principle from:
6 para. 1 lit. a DSGVO when obtaining the consent of the data subject.
6 para. 1 lit. b DSGVO in the case of processing operations that serve to fulfill a contract to which the data subject is a party. Included here are processing operations that are necessary for the implementation of pre-contractual measures.
6 para. 1 lit. c DSGVO in the case of processing operations that are necessary for the fulfillment of a legal obligation.
6 para. 1 lit. d DSGVO if vital interests of the data subject or another natural person make processing of personal data necessary.
6 para. 1 lit. f DSGVO if the processing is necessary to protect a legitimate interest of our company or a third party and the interests, fundamental rights and freedoms of the data subject do not override the former interest.
3. data deletion and storage period
The users' personal data will be deleted or blocked as soon as the purpose of the storage no longer applies. Storage beyond this may take place if this has been provided for by the European or national legislator in Union regulations, laws or other provisions to which the responsible party is subject. Data will also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or performance of a contract.
IV. Use of our website, general information
1. description and scope of data processing
Each time our website is accessed, our system automatically collects data and information from the user's computer system. The following information is collected in the process:
- Information about the browser type and version used
- Language and version of the browser software
- The user's operating system
- The user's Internet service provider
- The IP address of the user
- The date and time of access
- Time zone difference to Greenwich Mean Time (GMT)
- Websites from which the user's system accesses our website
- Websites that are accessed by the user's system via our website
- Content of the request (specific page)
- Access status/HTTP status code
- Amount of data transferred in each case
The described data is stored in the log files of our system. This data is not stored together with other personal data of the user.
2. purpose and legal basis for data processing
The temporary storage of the IP address by our system is necessary to enable delivery of the website to the user's computer. For this purpose, the user's IP address must remain stored for the duration of the session.
The storage in log files is done to ensure the functionality of the website. In addition, we use the data to optimize the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context.
The legal basis for the temporary storage of the data and the log files is Art. 6 para. 1 lit. f DSGVO.
The collection of their personal data for the provision of our website and the storage of the data in log files is mandatory for the operation of the website. Therefore, there is no possibility for the user to object.
3. duration of storage
Your collected data will not be deleted automatically. Please adjust your settings independently in your internet browser or provide your consent ID and date when contacting us regarding your consent.
Cookies are used by us to make our homepage more user-friendly. Some elements of our website require that the browser can be identified even after a page change.
The legal basis for the storage of cookies, device identifiers and similar tracking technologies or for the storage of information in the end user's terminal equipment and access to this information is the European ePrivacy Directive in conjunction with the Telecommunications and Telemedia Data Protection Act (TTDSG).
Please note that the legal basis for the processing of personal data collected in this context then results from the DSGVO (Art. 6 para. 1 p.1 DSGVO). The relevant legal basis for the processing of personal data in each specific case can be found below the respective cookie or the respective processing itself.
The primary legal basis for the storage of information in the end user's terminal equipment - in particular for the storage of cookies - is your consent, Section 25 (1) sentence 1 TTDSG. The consent is given when visiting our website -which of course does not have to be given- and can be revoked at any time in the cookie settings.
Pursuant to Section 25 (2) No. 2 TTDSG, consent is not required if the storage of information in the end user's terminal equipment or access to information already stored in the end user's terminal equipment is absolutely necessary for the provider of a telemedia service to be able to provide a telemedia service expressly requested by the user. You can see from the cookie settings which cookies are to be classified as absolutely necessary (often also referred to as "technically necessary cookies"), and therefore fall under the exception of Section 25 (2) TTDSG and therefore do not require consent.
The following data is stored and transmitted:
- Storage of the cookie setting
- Display of the cookie hint
The legal basis for the processing of personal data using cookies results from Art. 6 para. 1 lit. f DSGVO. The purpose of the use of technically necessary cookies is to simplify the use of our website.
We would like to point out that isolated functions of our website can only be offered using cookies. These are the following applications:
- Storage of the cookie setting
- Display of the cookie notice
We do not use user data collected through technically necessary cookies to create user profiles.
For more information on technically unnecessary cookies, please refer to section VI.
5. cookie consent with Cookiebot
Our website uses cookie consent technology from Cookiebot to obtain your consent to store certain cookies in your browser and to document it in a privacy-compliant manner. The provider of this technology is the company Cybot A/S, Havnegade 39, 1058 Copenhagen, Denmark (hereinafter Cybot).
When you enter our website, a Cybot cookie is stored in your browser, in which the consents you have given or the revocation of these consents are stored. If consent has been granted, the Cybot cookie data will also be logged with Cybot:
The IP number of the end user in anonymized form (the last three digits are
set to '0'), Date and time of consent, User agent of the end user's browser, The URL from which the consent was sent, An anonymous, random and encrypted key, The consent status, which serves as proof of consent.
The collected data will be stored until you request us to delete it or delete the Cybot cookie yourself, or until the purpose for storing the data no longer applies. Mandatory legal retention periods remain unaffected. Details on the data processing of Cookiebot can be found at https://www.cookiebot.com/de/privacy-policy/.
You can view and adjust your cookie settings at any time in the widget in the lower left corner of our website.
6. electronic contact
If you would like to contact us, a contact form is available on our homepage, which you can use to contact us electronically. The data entered in the input mask will be transmitted to us and stored. These data are: First name, last name, e-mail address, telephone number (optional), message.
At the time the message is sent, the following data is also stored: The IP address of the user, date and time of registration.
Furthermore, there is the possibility to contact us via the provided e-mail address. In this case, the user's personal data transmitted with the e-mail will be stored.
Your data will not be passed on to third parties in this context; the data will be used exclusively for processing the establishment of communication.
The legal basis for the processing of the contact request and its handling is regularly Art. 6 para. 1 p.1 lit. b DSGVO.
If further personal data is processed during the sending process, this is only used to prevent misuse of the contact form and to ensure the security of our information technology systems.
Your data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. For the personal data from the input mask of the contact form and those sent by e-mail, this is the case when the respective conversation with the user has ended. The conversation is ended when it is clear from the circumstances that the matter in question has been conclusively clarified.
The additional personal data collected during the sending process will be deleted after a period of seven days at the latest.
V. Your rights / rights of the data subject
According to the EU General Data Protection Regulation, you have the following rights as a data subject:
1. right to information
You have the right to receive information from us as the responsible party as to whether and which personal data concerning you are processed by us, as well as further information in accordance with the legal requirements under Art. 13, 14 DSGVO.
You could assert your right to information at: firstname.lastname@example.org
2. right to rectification
If the personal data processed by us and concerning you is incorrect or incomplete, you have a right against us to rectification and/or completion. The correction will be made without delay.
3. right to restriction
You have the right to restrict the processing of personal data concerning you in accordance with the legal provisions (Art. 18 DSGVO).
4. right to deletion
If the reasons set out in Art. 17 DSGVO apply, you may request that the personal data relating to you be deleted without delay.
We would like to point out that the right to erasure does not exist insofar as the processing is necessary for one of the exceptional circumstances mentioned in Art. 17 (3).
5. right to information
If you have asserted the right to rectification, erasure or restriction of processing, we are obliged to inform all recipients to whom the personal data concerning you have been disclosed of this rectification or erasure of the data or restriction of processing, unless this proves impossible or involves a disproportionate effort. Furthermore, you have the right to be informed about these recipients.
6. right to data portability
According to the GDPR, you also have the right to receive the personal data concerning you that has been provided to us in a structured, common and machine-readable format or to request its transfer to another controller.
7. right to revoke the declaration of consent under data protection law
You have the right to revoke your declaration of consent under data protection law at any time. We point out that the revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.
8. right of objection
Furthermore, you have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data relating to you which is carried out on the basis of Article 6(1)(e) or (f) DSGVO.
9. Automated decision in individual cases including profiling
According to the EU General Data Protection Regulation, you also have the right not to be subject to a decision based solely on automated processing - including profiling - which produces legal effects concerning you or similarly significantly affects you.
10. right to lodge a complaint with a supervisory authority
Finally, if you consider that the processing of personal data concerning you infringes the GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, workplace or the place of the alleged infringement.
VI. Use of Google Analytics
This website uses Google Analytics, a web analytics service provided by Google, Inc. ("Google"). Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. In the event that IP anonymization is activated on this website, however, your IP address will be truncated beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator.
The IP address transmitted by your browser as part of Google Analytics will not be merged with other data from Google.
This website also uses Google Analytics for a cross-device analysis of visitor flows, which is carried out via a user ID. You can deactivate the cross-device analysis of your usage in your customer account under "My Data", "Personal Data".
1. data transfer outside the EU
The GDPR ensures an equally high level of data protection within the European Union. When selecting our service providers, we therefore rely on European partners wherever possible when your personal data is to be processed. Only in exceptional cases will we have data processed outside the European Union in the context of using third-party services. We will only allow your data to be processed in a third country if the special requirements of Art. 44 et seq. DSGVO are fulfilled. This means that the processing of your data may then only take place on the basis of special guarantees, such as the officially recognized determination by the EU Commission of a level of data protection corresponding to the EU or the observance of officially recognized special contractual obligations, the so-called "standard data protection clauses".
VII. Use of Google Fonts
We integrate the fonts ("Google Fonts") of the provider Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, on the basis of our legitimate interests pursuant to Art. 6 (1) f DSGVO. The aim is the optimization and economic operation of our homepage.
The opt-out can be set at: https://adssettings.google.com/authenticated
After you have registered for an e-mail newsletter, we store your e-mail address until you unsubscribe from the newsletter. The storage serves the sole purpose of being able to send you the newsletter. Furthermore, we store your IP addresses and the times of registration and confirmation to prevent misuse of your personal data.
The only mandatory information for sending the newsletter is the e-mail address. The provision of further, separately marked, information is voluntary and will only be used to personalize the newsletter.
We would like to point out that we evaluate your user behavior when sending the newsletter. For this evaluation, the e-mails sent contain so-called web beacons, also called tracking pixels. These are single-pixel image files that link to our website and thus enable us to evaluate your user behavior. This is done by collecting the data mentioned in IV as well as web beacons that are assigned to your e-mail address and linked to a separate ID.
IX. Social Media
1. social media platforms
Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA)
LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Ireland
2. social media presence
We maintain fan pages within various social networks and platforms with the aim of communicating with customers, interested parties and users active there and informing them about our services there.
We would like to point out that your personal data may be processed outside the European Union in the process, so that risks may arise for you in this regard (for example, when enforcing your rights under European / German law).
User data is usually processed for market research and advertising purposes. For example, usage profiles can be created from the usage behavior and resulting interests of the users. These usage profiles can in turn be used, for example, to place advertisements within and outside the platforms that presumably correspond to the interests of the users. For these purposes, cookies are usually stored on the users' computers, in which the usage behavior and interests of the users are stored. Furthermore, data may also be stored in the usage profiles regardless of the devices used by the users (especially if the users are members of the respective platforms and are logged in to them).
The processing of the users' personal data is based on our legitimate interests in effectively informing users and communicating with users pursuant to Art. 6 para. 1 p. 1 lit. f. DSGVO. If users are asked by the respective providers for consent to data processing (i.e. declare their consent e.g. by ticking a checkbox or confirming a button), the legal basis of the processing is Art. 6 para. 1 p. 1 lit. a. DSGVO.
For more information about the processing of your personal data and your objection options, please refer to the links of the respective provider listed below. The assertion of information and other rights of the data subjects can also be made against the providers, then only they have direct access to the data of the users and have the corresponding information. Of course, we are available to answer any queries and provide support if you need assistance.
3. integration of YouTube videos
We have integrated YouTube videos into our online offer, which are stored on http://www.youtube.com and can be played directly from our website. These are all integrated in "extended data protection mode", which means that no data about you as a user is transmitted to YouTube if you do not play the videos. Only when you play the videos will the data mentioned in paragraph 2 be transmitted. We have no influence on this data transmission.
By visiting the website, YouTube receives the information that you have accessed the corresponding sub-page of our website. This occurs regardless of whether YouTube provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data will be directly assigned to your account. If you do not want the assignment with your profile at YouTube, you must log out before activating the button. YouTube stores your data as usage profiles and uses them for the purposes of advertising, market research and/or demand-oriented design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact YouTube to exercise this right.
The legal basis for the use of YouTube is our legitimate interest pursuant to Art. 6 (1) p. 1 lit. f, which is to provide our users with the most extensive and appealing user experience possible.
X. LinkedIn Insight Tag for Analytics & LinkedIn Ads
We use the conversion tracking technology and the retargeting function of LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA on our website with your consent. With the help of this technology, visitors to our website can be shown personalized advertisements on LinkedIn. Furthermore, it is possible to create anonymous reports on the performance of the advertisements as well as information on website interaction. For this purpose, the LinkedIn Insight tag is embedded on this website, which establishes a connection to the LinkedIn server if you visit this website and are logged into your LinkedIn account at the same time. We would like to point out that we, as the provider of the pages, have no knowledge of the content of the transmitted data or its use by LinkedIn. The information collected by the LinkedIn Insight tag about your use of our website is encrypted. The cookie is stored in the LinkedIn member's browser until the member deletes the cookie or the cookie expires (the expiration date is rolling six months after the member's browser has loaded the Insight tag for the last time).
The data processing is based on your consent and thus on the legal basis of Art. 6 para. 1 lit. a) DSGVO. You can object to the collection and use of your data for the display of LinkedIn Ads at any time or revoke your consent, e.g. by changing your cookie settings on our site accordingly. To deactivate conversion tracking on our website ("opt-out") follow this link: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out
For more information on conversion tracking, please visit https://www.linkedin.com/help/linkedin/answer/67595/linkedin-conversion-trackingubersicht.
(Status: December 2021)