Data protection declaration for website operators according to the requirements of GDPR

We are pleased that you are visiting our website and thank you for your interest in our company, as well as our first-class services and products (collectively, our "Services"). Data protection and data security when using our website are very important to us. We would therefore like to inform you at this point about which of your personal data we collect when you visit our website and for which purposes these are used.

As changes to the law or our internal processes may require an adaptation of this Privacy Notice, we kindly ask you to read this Privacy Statement regularly. The data protection declaration can be retrieved, stored, and printed at any time under Privacy Notice.

§ 1 RESPONSIBLE PERSON AND SCOPE

The controller within the meaning of the EU General Data Protection Regulation (hereinafter: GDPR) and other national data protection laws of the member states as well as other data protection regulations is:

schalk&friends GmbH
Lindwurmstraße 124
80337 Munich
Phone: +49 (89) 44 23 58-0
E-mail: info@schalk-and-friends.de

This Privacy Note applies to the Internet offer of schalk&friends GmbH, which can be accessed under the domain www.schalk-and-friends.de as well as the various subdomains and associated domains (hereinafter referred to as "our website").

§ 2 DATA PROTECTION OFFICER

The external data protection officer of the controller is:

Robert Faußner, M.A.
Data Protection Officer
c/o HEUSSEN Rechtsanwaltsgesellschaft mbH
Brienner Straße 9 / Amiraplatz
80333 München
Tel: +49 89 290 97 0
Fax: +49 89 290 97 200
E-mail: datenschutzbeauftragter@heussen-law.de

§ 3 PRINCIPLES OF DATA PROCESSING
Personal data is any information that relates to an identified or identifiable natural person. This may include information such as your name, age, address, phone number, date of birth, your e-mail address, IP address or user behaviour. Information in which we cannot (or only with a disproportionate effort) establish a connection to your person, e.g. by anonymizing the information, is not personal data. The processing of personal data (e.g. collection, retrieval, use, storage, or transmission) always requires a legal basis or your consent. Processed personal data will be deleted as soon as the purpose of the processing has been achieved and no statutory retention obligations can be maintained.

If we process your personal data for the provision of certain services, we inform you below about the specific processes, the scope and purpose of the data processing, the legal basis for the processing and the respective storage period.

§ 4 INDIVIDUAL PROCESSING OPERATIONS

1) Provision and use of the website
Type and scope of data processing When calling up and using our website, we collect the personal data that your browser automatically transmits to our server. This information is temporarily stored in a so-called Log file saved. When you use our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure stability and security:

• IP address of the requesting computer
• Date and time of access
• Name and URL of the retrieved file
• Website from which access is made (referrer URL)
• The browser used and, if applicable, the operating system of your computer, as well as the name of your access provider

The legal basis
for the aforementioned data processing is Art. 6 para. 1 lit. F GDPR as legal basis. The processing of the aforementioned data is necessary for the provision of a website and thus serves to safeguard a legitimate interest of our company.

Storage time
As soon as the specified data is no longer required to display the web page, it will be deleted. The collection of the data for the provision of the website and the storage of the data in log files is absolutely necessary for the operation of the website. There is therefore no possibility of objection on the part of the user. Further storage can take place in individual cases if this is required by law.

2) Newsletter Type and scope of data processing

On our website, it is possible to subscribe to a free newsletter. To be able to send you the newsletter on a regular basis, we need the following information from you:
• E-mail address

Your data will not be passed on to third parties in connection with the sending of the newsletter. We use the so-called Double opt-in procedure, i.e. we will only send you the newsletter if you first confirm your registration via a confirmation email sent to you for this purpose by means of a link contained therein. This is to ensure that only you, as the owner of the e-mail address provided, can register for the newsletter. Your confirmation must be received promptly after receipt of the confirmation email, otherwise your newsletter subscription will be automatically deleted from our database.

Legal basis
The processing of your e-mail address for sending the newsletter is based on Art. 6 para. 1 lit. A GDPR on the voluntarily submitted by you below

Declaration of consent:
Declaration of consent: By entering my data and clicking the "Submit" button, I declare my consent to the processing of my e-mail address for regular newsletter delivery. I can unsubscribe from the newsletter service at any time by clicking on the corresponding link at the end of the newsletter. I have read and accept the current Privacy Notice. I can revoke my consent to the collection of personal data collected during the registration process at any time by contacting info@schalk-and-friends.de.

You can revoke your consent to the use of your personal data at any time by sending an e-mail to the e-mail address mentioned under § 1 above or to the data protection officer (see above under § 2) with effect for the future.

Storage time
Your email address will be stored for as long as you have subscribed to the newsletter. After unsubscribing from the newsletter, your e-mail address will be deleted. Further storage can take place in individual cases if this is required by law.

3) Contact form Type and scope of data processing

On our website, we offer you to contact us via a form provided. As part of the sending of your request via the contact form, you will be referred to this Privacy Statement to obtain your consent. If you make use of the contact form, the following personal data will be processed by you:
• Name: *
• First name: *
• Company: *
• Telephone: *
• Message: *#

The legal basis set out above (cf. § 4 4. A.) Data processing described for the purpose of contacting is carried out in accordance with Art. 6 para. 1 lit. A GDPR on the declaration of consent voluntarily given by you below:

By entering my data and clicking the "Send request" button, I declare my consent to the processing of my e-mail address, name, and customer number for answering my contact request. I have read and accept the current Privacy Notice. I can revoke this consent at any time with effect for the future by contacting info@schalk-and-friends.de.

You can revoke your consent to the use of your personal data at any time by sending an e-mail to the e-mail address mentioned under § 1 above or to the data protection officer (see above under § 2) with effect for the future.

Storage period
As soon as the request you have made has been completed and the relevant matter has been finally clarified, the personal data processed via the contact form will be deleted by you. Further storage can take place in individual cases if this is required by law.

4) Contact options on our website

On our website, you can contact us via e-mail using the following methods:

• Consulting and support: info@schalk-and-friends.de
• Accounting: accounting@schalk-and-friends.de

Type and scope of data processing
Every website visitor can send his or her request to these e-mail addresses. The relevant specialist departments process the enquiries by e-mail. Our data collection is limited to the e-mail address of the e-mail account you use to contact us and to the personal data you provide as required while contacting us.

Legal basis
The permissibility of data collection is based on Art. 6 para. 1 lit. F) GDPR, since there is a direct interest in contacting and communicating between you and our company as well as a legitimate corporate interest in the processing of the aforementioned data in order to be able to process your request.

Duration of storage
The duration of the storage of the above-mentioned data depends on the background of your contact. Your data will be deleted regularly, provided that the intended purpose of communication is no longer necessary, and storage is no longer required (e.g. after processing your request).

§ 5 DISCLOSURE OF DATA

We will only share your personal data with third parties if:
• You have your express consent to this in accordance with Art. 6 para. 1 sentence 1 lit. A GDPR
• This is legally permissible and in accordance with Art. 6 para. 1 sentence 1 lit. B GDPR is necessary for the fulfilment of a contractual relationship with you.
• According to Art. 6 para. 1 sentence 1 lit. C GDPR There is a legal obligation for the disclosure.
• The transfer according to Art. 6 para. 1 sentence 1 lit. F GDPR is necessary for the protection of legitimate corporate interests, as well as for the assertion, exercise or defence of legal claims and there is no reason to assume that you have an overriding interest worthy of protection in the non-disclosure of your data.

§ 6 USE OF COOKIES

Type and scope of data processing
We use cookies on our website. Cookies are small files that are sent by us to the browser of your terminal device and stored there during your visit to our Internet pages. Some functions of our website cannot be offered without the use of technically necessary cookies. Other cookies, on the other hand, allow us to perform various analysis. Cookies are, for example, able to recognize the browser you use when you visit our website again and to transmit various information to us. With the help of cookies, we can, among other things, make our Internet offer more user-friendly and effective for you, by, for example, tracking your use of our website and your preferred settings (e.g. country and language settings). If third parties process information via cookies, they collect the information directly via your browser. Cookies do not cause any damage to your device. They cannot run programs or contain viruses. Our website uses different types of cookies, the type and function of which is explained in more detail below.

Type 1: Transient cookies
Our website uses transient cookies, which are automatically deleted when you close your browser. This type of cookie allows you to capture your session ID. This allows different requests from your browser to be assigned to a common session and allows us to recognize your device on subsequent website visits.

Type 2: Persistent cookies
Persistent cookies are used on our website. Persistent cookies are cookies that are stored in your browser for an extended period of time and transmit information to us. The storage time varies depending on the cookie. You can delete persistent cookies independently via your browser settings.

Function 1: Necessary cookies
These cookies are required for technical reasons, so that you can visit our website and use the functions offered by us. For example, this applies to the following applications: Website tracking (order process). In addition, these cookies contribute to the safe and proper use of the website.

Function 2: Performance-related cookies
These cookies enable us to perform an analysis of website usage and improve the performance and functionality of our website. For example, information is collected about how our website is used by visitors, which pages are accessed most frequently, or whether error messages are displayed on certain pages.

Function 3: Marketing and social media cookies
Advertising cookies (third-party providers) allow you to view various offers that suit your interests. These cookies can be used to record the web activities of users over a longer period of time. You may recognize cookies on various devices you use. The following third parties receive personal data via cookies integrated on our website:
• Google Analytics
• Bing
• CrazyEgg
• LinkedIn
• AdWords conversion tag
• Adobe Analytics

In addition, certain cookies allow you to connect to your social networks and share content on our website within your networks.

Legal basis
based on the purposes described (cf. § 6. A.), the legal basis for the processing of personal data using cookies is Art. 6 (1) (f) GDPR. If you have given us your consent to the use of cookies on the basis of a notice given by us on the website ("cookie banner"), the legality of the use is additionally determined by Art. 6 para. 1 sentence 1 lit. A GDPR.

Storage period
As soon as the data transmitted to us via the cookies is no longer necessary for the purposes described above, this information will be deleted. Further storage can take place in individual cases if this is required by law. Configuration of browser settings Most browsers are preset to accept cookies by default. However, you can configure your browser to accept only certain or no cookies at all. However, we would like to point out that you may not be able to use all the features of our website if cookies are disabled by your browser settings on our website. You can also delete cookies already stored in your browser using your browser settings. It is also possible to set your browser to notify you before cookies are stored. Since the different browsers may differ in their respective functions, we ask you to use the respective help menu of your browser for the configuration options. If you want a comprehensive overview of all third-party accesses to your Internet browser, we recommend installing specially developed plug-ins.

§ 7 TRACKING AND ANALYSIS TOOLS

We use tracking and analysis tools to ensure continuous optimization and tailored design of our website. With the help of tracking measures, it is also possible for us to statistically record the use of our website by visitors and to further develop our online offer for you with the help of the insights gained in this way. Due to these interests, the use of the tracking and analysis tools described below is prohibited in accordance with Art. 6 para. 1 sentence 1 lit. F GDPR is justified. If you have given us your consent to the use of cookies on the basis of a notice given by us on the website ("cookie banner"), the legality of the use is additionally determined by Art. 6 para. 1 sentence 1 lit. a GDPR. The following description of the tracking and analysis tools also shows the respective processing purposes and the data processed. You can change your selection of tracking and analysis tools in the cookie settings at any time and activate them in this way.

1) Google Analytics

This website uses Google Analytics, a web analytics service provided by Google Inc., 1600 Amphitheater Parkway, MountainView, CA 94043 USA ("Google"). Google Analytics uses so-called "cookies", text files that are stored on your computer and which enable an analysis of your use of the website.

The information generated by these cookies, for example about the time, place, and frequency of your use of this website, is usually transmitted to a Google server in the USA and stored there. When using Google Analytics, it is not excluded that the cookies set by Google Analytics may also collect other personal data in addition to the IP address. We would like to point out to you that Google may transfer this information to third parties if this is required by law or if third parties process this data on behalf of Google.

Google will use the information generated by cookies on behalf of the operator of this website to evaluate your use of the website, to compile reports on website activities and to provide the website operator with other services related to website and internet use. According to Google, the IP address transmitted by your browser as part of Google Analytics is not merged with other Google data.

You can generally prevent the storage of cookies by setting your browser software accordingly. However, we would like to point out that in this case you may not be able to use all the functions of this website in full.

It is not excluded that the cookies set by Google Analytics may collect other personal data in addition to the IP address. To prevent information about your use of the website from being collected by Google Analytics and transferred to Google Analytics, you can download and install a plugin for your browser under the following link, in addition to the above- mentioned option of deactivating tracking cookies: http://tools.google.com/dlpage/gaoptout?hl=de. This plugin prevents information about your visit to the website from being transmitted to Google Analytics. This plugin does not prevent any other analysis.

To ensure the best possible protection of your personal data, Google Analytics has been extended on this website by the code "anonymizeIp". This code causes the last 8 bits of the IP addresses to be deleted and thus your IP address is recorded anonymously (so-called IP masking). Your IP address will be shortened and thus anonymized by Google prior to transmission within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there.

2) Google AdWords
We use the technology "Google AdWords" and in particular conversion tracking. Google Conversion Tracking is an analytics service provided by Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA. If you click on an ad placed by Google, a cookie will be stored on your PC for conversion tracking. The cookies are valid for 30 days and are not used for personal identification. If you visit certain pages of our website, if the cookie has not expired, Google and we can recognize that you have clicked on a certain ad and have been redirected to that page. Google AdWords customers will each receive a different cookie. This means that it is not possible to track cookies through the websites of AdWords customers.

The data collected with the help of the conversion cookie is used to generate conversion statistics for AdWords customers who use conversion tracking. Customers will learn the number of users who clicked on their ad and were then redirected to a page tagged with a conversion tracking tag. However, they do not receive any information that can be used to personally identify users. If you do not wish to participate in conversion tracking, you can prevent this by setting this up in your browser, e.g. in the form that the installation of cookies is generally prevented. You can also disable cookies for conversion tracking by setting your browser so that only cookies from the web address "googleadservices.com" are blocked.

3) Google remarketing
We use the "Google Remarketing" technology from Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA. Google Remarketing serves ads for users who have already visited our websites and online services and who are interested in a specific offer. Within the Google advertising network, targeted and interest-based ads can be placed on our site. Google remarketing uses cookies for this analysis. This allows our visitors to be recognized as soon as they visit websites within Google's advertising network. Within the Google advertising network, targeted and interest-based advertisements can be placed that are based on the websites of the Google advertising network previously visited by the visitor (which also use Google's remarketing function). If you do not want to see targeted, interest-based advertising, you can deactivate the use of cookies by Google for these purposes via the link: https://www.google.de/settings/ads.

4) LinkedIn conversion tracking
We use the re-targeting tool LinkedIn Conversion Tracking from LinkedIn Ireland, Wilton Plaza, Wilton Place, Dublin 2, Ireland ("LinkedIn"). For this purpose, the LinkedIn Insight Tag is integrated on the websites of the online trade fair, which enables LinkedIn to collect statistical, pseudonymous data about your visit and the use of our website and to provide us with corresponding aggregated statistics on this basis. In addition, this information is used to show you interest-specific and relevant offers and recommendations after you have been interested in certain services, information and offers at the online trade fair. The relevant information is stored in a cookie. You can prevent the storage of cookies via a browser setting. Alternatively, you can object to this form of data processing by setting an opt-out cookie via the following link, which remains on your device until you delete the cookies. This option exists for both LinkedIn members and non-members: LinkedIn Conversion Tracking Notes Further information can also be found in the LinkedIn Privacy Statement.

5) CrazyEgg.com
This page uses the tracking tool CrazyEgg.com to record randomly selected individual visits (only with anonymized IP address). This tracking tool allows you to use cookies to evaluate the way you use the website (e.g. what content is clicked on). A usage profile is displayed visually. When using the tool, no personal data will be collected, processed, or used by you. Only usage profiles are created when using pseudonyms. You can object to the collection, processing and collection of data generated by CrazyEgg.com at any time by following the instructions at http://www.crazyegg.com/opt-out. For more information about privacy at CrazyEgg.com, visit http://www.crazyegg.com/privacy.

6) Bing
Bing Conversion Tracking from Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA - Can, when you click on one of our ads on Bing or on selected websites on the Bing advertising network, save a temporary cookie on your computer. If you get to a conversion page with us, it will be recorded that you have previously clicked on the ad, as can be seen by Microsoft Bing and us. This is used to create conversion statistics, i.e. to record how many users reach a conversion page after clicking on an ad, i.e. to complete an order process. Information on this and a way to prevent information about your use of the website from being collected by Bing Ads and transmitted to Microsoft, you can find, in addition to the above-mentioned option of disabling tracking cookies, at the following link: http://choice.microsoft.com/de.

6) Adobe Analytics
This means that you can visit the Internet pages or Apps becomes even more user-friendly, we use Adobe Analytics software from Adobe Systems for marketing and optimization purposes. Data on usage behaviour, including visitor origin and page views, is stored. In addition, data such as gender, year of birth or postal code are collected in an anonymized form without any conclusions about you as a person being possible. It is not possible to combine the data with your personal data (name, address, or insurance number). In addition, Adobe Systems does not process your IP address, but only stores it in a shortened, unpersonalized form. The information collected is stored by Adobe Systems within the European Union.

For more information on Adobe Systems' privacy policy and the Privacy Notice, visit https://www.adobe.com/de/privacy.html.

Processing companies

Adobe Systems Software Ireland Limited
4-6 Riverwalk
Citywest Business Campus
Dublin 24
Republic of Ireland


Data protection information of the processing company
Below is the e-mail address of the data protection officer of the processing company.
4-6 Riverwalk
Citywest Business Park
Dublin 24
Republic of Ireland
DPO@Adobe.com

Data processing purposes
• Statistical evaluation of website operation
• Error detection
• Optimization of website design
• Analysis of the user behaviour of the visitors

Data collected
Data is collected, e.g.
• Visitor origin
• Browser information
• Usage data (pages accessed, dwell time, ...)
• Call data (time, duration, provider, sales, etc.)
• Device information (PC, tablet, smartphone)
• Operating system
• Gender
• Year of birth
• Postal code

Legal basis
The legal basis for the processing of personal data is as follows:
Art. 6 para. 1 sentence 1 lit. A GDPR (consent)

The legal basis required to use cookies and similar technologies for this tool:
Art. 25 TTDSG para. 1 (Consent)

Place of processing
European Union
Retention period
The data is deleted as soon as it is no longer needed for processing purposes.

Data receiver
Adobe Systems Software Ireland Limited
Disclosure to third countries
Worldwide
More information and opt-out
Click here to read the data protection regulations of the data
processor and, if necessary, to obtain further information and
to withdraw consent from Adobe.
https://www.adobe.com/de/privacy.html
https://experienceleague.adobe.com/docs/core-services/interface/administration/ec-cookies/cookies-analytics.html
https://experienceleague.adobe.com/docs/id-service/using/intro/cookies.html
https://www.adobe.com/de/privacy/policy.html

§ 8 SOCIAL MEDIA PORTALS

We would like to give the users of our website the opportunity to use social networks (social media portals). To prevent unwanted data transmission to the social media providers, we only integrate the social media portals as links (possibly behind the graphics with the corresponding logos of the social media portals). After clicking on the link, a forwarding to the website of the respective social media provider takes place and only then will user information be transferred to the respective social media provider. The data protection declaration of the respective social media provider (e.g. for the service "Facebook" of the operator Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA, applies to the data processing there. Under: https://www.facebook.com/policy.php, for the service "Instagram" of the operator Instagram LLC, 1601 Willow Rd., Menlo Park CA 94025, USA under https://help.instagram.com/155833707900388, for the service "Pinterest" of the operator Pinterest Inc., 808 Brannan Street, San Francisco, CA 94103, USA under https://about.pinterest.com/de/privacy-policy, For the video platform "YouTube" of the operator YouTube, LLC, 901 Cherry Ave., San Bruno, A 94066, United States, which is controlled by Google Inc. (Google) is represented at https://www.google.de/intl/de/policies/privacy).

§ 9 HYPERLINKS

On our website are so-called hyperlinks to websites of other providers. If you activate these hyperlinks, you will be redirected directly from our website to the website of the other providers. You can see this by changing the URL, among other things. We cannot assume any responsibility for the confidential handling of your data on these third-party websites, as we have no influence over the compliance of these companies with the data protection regulations. Please inform yourself about the handling of your personal data by these companies directly on these websites.

§ 10 RIGHTS OF THE DATA SUBJECT

As the data subject of the processing of personal data, the following rights arise from the GDPR:
• In accordance with Art. 15 GDPR, you may request information about your personal data processed by us. In particular, you may obtain information about the processing purposes, the categories of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, deletion, restriction of processing or objection, the existence of a right of appeal, the origin of your data, If not collected from us, request a transfer to third countries or international organizations, as well as the existence of automated decision-making, including profiling and, where appropriate, meaningful information on their details. • In accordance with Art. 16 GDPR, you can immediately request the correction of incorrect or the completion of your personal data stored by us.
• In accordance with Art. 17 GDPR, you can request the deletion of your personal data stored by us, unless the processing is necessary for exercising the right to freedom of expression and information, for fulfilling a legal obligation, for reasons of public interest or for asserting, exercising, or defending legal claims.
• In accordance with Art. 18 GDPR, you can request the restriction of the processing of your personal data, insofar as you contest the accuracy of the data, the processing is unlawful, we no longer need the data and you refuse to delete it, because you need it to assert, exercise or defend legal claims. The right under Art. 18 GDPR is also entitled to you if you have requested it in accordance with Art. 21 GDPR have filed an objection to the processing. • In accordance with Art. 20 GDPR, you may request that your personal data you have provided us receive in a structured, common, and machine-readable format, or you may request the transfer to another controller. • In accordance with Art. 7 Para. 3 GDPR, you can revoke your consent to us at any time. As a result, we will no longer be allowed to continue data processing based on this consent for the future.
• In accordance with Art. 77 GDPR, you have the right to complain to a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence, your workplace, or our company headquarters.

§ 11 RIGHT TO OBJECT

When processing your personal data on the basis of legitimateinterests pursuant to Art. 6 para. 1 sentence 1 lit. F GDPR,you have the right, in accordance with Art. 21 GDPR to file anobjection against the processing of your personal data, insofar as there are reasons for this that arise from your particular situation, or the objection is directed against direct advertising. In the case of direct advertising, you have a general right of objection, which is implemented by us without specifying a special situation.

§ 12 DATA SECURITY AND SECURITY MEASURES

We are committed to protecting your privacy and to keeping your personal information confidential. To avoid manipulation, loss or misuse of your data stored with us, we take extensive technical and organizational security measures, which are regularly reviewed and adapted to technological progress. This includes, among other things, the use of recognized encryption methods (SSL or TLS). However, we would like to point out that due to the structure of the Internet, it is possible that the rules of data protection and the above-mentioned security measures are not observed by other persons or institutions that are not within our area of responsibility. In particular, unencrypted data – e.g. if this is provided by e-mail – can be read by third parties. We have no technical influence on this. It is the responsibility of the user to protect the data provided by him against misuse by encryption or in any other way.