Privacy Statement

1. Data protection at a glance

General information

The following information gives a simple overview of what happens to your personal data when you visit our website. Personal data is defined as all data with which you can be personally identified. Extensive information on the topic of data protection can be found in our data protection declaration below this text.

Data collection on this website

Who is responsible for data collection on this website?

On this website the data is processed by the website operator whose contact details can be found in the legal notice of this website. How do we collect data? Firstly, your data is collected when you give it to us. This can include eg data entered into a contact form. Other data is collected automatically by out IT system when you visit the website. That is primarily technical data (eg internet browser, operating system or the time the page was viewed). This data is collected automatically as soon as you enter our website.

What do we use your data for?

Some of the data is collected to ensure the website functions properly. Other data can be used to analyse user behaviour.

What rights do you have in connection with your data?

At all times, you have the right to be informed free of charge about the origin, recipient and purpose of the personal data we store about you. Furthermore, you also have the right to require that data to be corrected, blocked or deleted. For this purpose, or if you have and questions on the topic of data protection, you can contact us at all times under the address given in the legal notice. In addition you also have the right to make a complaint to the responsible supervisory authority.

Analysis tools and tolls from third party providers

When you visit our website, it is possible to assess your browsing habits statistically. That is done mainly with cookies and with so-called analysis programs. The analysis of your browsing habits is usually anonymous, your browsing habits cannot be traced back to you. You can object to this analysis or prevent it by not using certain tools. Detailed information on this topic can be found in the following data protection declaration. You can object to this analysis. We will inform you of your options for objecting in this data protection declaration.

2. General information and mandatory information

Data Protection

The operators of this site take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection provisions as well as this data protection declaration.

When you use this website, various personal data is collected. Personal data is defined as data with which you can be personally identified. This data protection declaration explains which data we collect and what we use it for. It also explains how, and for what purpose that happens.

We would like to point out that online data transfer (eg when communicating by email) may be subject to security flaws. It is not possible to protect such data completely against access by third parties. Information on the responsible entity. The entity responsible for data processing on this website is:

marcapo GmbH
Bahnhofstraße 4
96106 Ebern

Telephon: +49 9531 92200
Email: kontakt@marcapo.com

Represented by Marc-Stephan Vogt, Thomas Ötinger, Christian Schwarzenberger

The responsible entity is the natural or legal person who, either alone or together with others, decides about the purpose for and means of processing personal data (eg names, email addresses etc).

Withdrawal of your consent to data processing

Many data processing operations are only possible with your express consent. You can withdraw any consent already given at any time. An informal communication by email suffices for that. The legitimacy of the data processing effected up to the time of the withdrawal remains unaffected.

Right to object to the data collection in particular cases, as well as to direct marketing (Art. 21 of the GDPR)

If the data processing is effected on the basis of Art. 6 Sec 1 Letter e or f of the GDPR, then you have the right to object at any time, for reasons arising from your personal situation, to the processing of your personal data; this also includes any profiling based on these provisions. The corresponding legal basis for any processing is to be found in this data protection declaration. If you make an objection, we will no longer process your relevant personal data, unless we can demonstrate compelling legitimate grounds for doing so which outweigh your interests, rights and freedoms, or the processing serves to establish, exercise or defend legal claims. (Objection according to Art. 21 Sec. 1 of the GDPR). If your personal data is processed in order to carry out direct marketing, then you have the right to object to the processing of your relevant personal data for the purpose of such marketing at all times; this applies in particular to profiling to the extent that it is related to such direct marketing. If you object, then your personal data will subsequently no longer be utilised for the purpose of direct marketing (Objection according to Art. 21 Sec. 2 of the GDPR).

Right to make an objection to the responsible supervisory authority

In the case of data protection violations, the person affected has the right to make a complaint to the responsible supervisory authority. The supervisory authority responsible for us is the Data Protection Authority of Bavaria for the Private Sector BayLDA, Promenade 27, 91522 Ansbach, Phone: BayLDA, Promenade 27, 91522 Ansbach, Phone: 0981/531300(www.lda.bayern.de).

Right to data portability

You have the right to have personal data we process automatically on the basis of your consent or in the fulfilment of a contract sent to you or to a third party n a structured, commonly used and machine-readable format. In so far as you require the direct transfer of the data to a different controller, then this is only effected to the extent that it is technically possible.

SSL or TLS encryption

For security reasons and to protect the transmission of confidential content, such as in the case of orders or enquires you send to us as the page operators, this page uses a SSL or TLS encryption. An encrypted connection can be recognised when the address bar of the browser changes from “http://” to “https://” and a lock symbol appears in the browser bar.

If the SSL or TLS encryption is activated, the data you are transmitting to us cannot be read by any third parties.

Information, blocking, erasure and rectification

In the context of the applicable statutory provisions, you have the right to be informed free of charge about the personal data saved, the origin and recipient thereof, and the purpose of the data processing and where relevant, the right to rectification, blocking or erasure of the data. For this purpose, or if you have and questions on the topic of personal data, you can contact us at all times under the address given in the legal notice.

Right to restrict processing

You have the right to request that the processing of your personal data is restricted. For this purpose you can contact us at all times under the address given in the legal notice. The right to restrict processing exists in the following cases:

  • If you dispute the correctness of the personal data stored by us, as a rule we require time to verify that. You have the right to request that the processing of your personal data is restricted while we investigate that.
  • If the processing of your personal data occurred / occurs unlawfully, you can request the processing be restricted rather than that the data be erased.
  • If we no longer require your personal data, but if you require the data to establish, exercise or defend legal claims, then you have the right to request the processing be restricted rather than that the data be erased.
  • If you have lodged an objection according to Art. 21 Sec. 1 of the GDPR, then both your interests and ours must be weight carefully. You have the right to request that the processing of your personal data is restricted while it is determined whose interests outweigh the others.

If you have restricted the processing of your personal data, then that data may only be processed - with the exception of storage - with your permission or to establish, exercise or defend legal claims, or to protect the rights of an other natural or legal person, or for reasons of substantial public interest of the European Union or a member state.

Objections to advertising emails

We hereby expressly prohibit the use of the contact data published as part of our duty to publish an imprint for the purpose of sending advertising and information material not explicitly requested. The operator of the site expressly reserves the right to institute legal action in case unsolicited advertising is sent, for example in the form of spam.

3. Data protection officer

Legally required data protection officer

We have appointed a data protection officer for our company.

THALES Rechtsanwälte.Datenschutz
Prymstraße 1, 97070 Würzburg

Telephon: +49 9531 9220 0
Email: datenschutz(at)marcapo.com

4. Data collection on this website

Consent with Usercentrics

This website uses the consent technology of Usercentrics to obtain your consent to the storage of certain cookies on your device or for the use of specific technologies, and to document the former in a data protection compliant manner. The party offering this technology is Usercentrics GmbH, Sendlinger Straße 7, 80331 München, Germany, website:
https://usercentrics.com/ (hereinafter referred to as “Usercentrics”).

Whenever you visit our website, the following personal data will be transferred to Usercentrics:

  • Your declaration(s) of consent or your revocation of your declaration(s) of consent
  • Your IP address
  • Information about your browser
  • Information about your device
  • The date and time you visited our website

Moreover, Usercentrics shall store a cookie in your browser to be able to allocate your declaration(s) of consent or any revocations of the former. The data that are recorded in this manner shall be stored until you ask us to eradicate them, delete the Usercentrics cookie or until the purpose for archiving the data no longer exists. This shall be without prejudice to any mandatory legal retention periods.

The Usercentrics banner on this website has been configured with the assistance of eRecht24. This can be identified by the eRecht24 logo. To display the eRecht24 logo in the banner, a connection to the image server of eRecht24 will be established. In conjunction with this, the IP address is also transferred; however, is only stored in anonymized form in the server logs. The image server of eRecht24 is located in Germany with a German provider. The banner as such is provided exclusively by Usercentrics.

Usercentrics uses cookies to obtain the declarations of consent mandated by law. The legal basis for the use of specific technologies is Art. 6(1)(c) GDPR.

Data processing

We have concluded a data processing agreement (DPA) for the use of the above-mentioned service. This is a contract mandated by data privacy laws that guarantees that they process personal data of our website visitors only based on our instructions and in compliance with the GDPR.
 

Cookies

This website uses so-called cookies in several places. Cookies do not cause any damage of any kind to your computer and do not contain viruses. Cookies serve to make our site more user friendly, more efficient and safer. Cookies are small text files that can be stored locally in the memory of your computer's web browser.

Most of the cookies we use are so-called "session cookies". They are automatically deleted when you leave the site. Other cookies remain on your end device until you delete them. These cookies enable us to recognise your browser next time you visit the site.

You can set your browser in such a way that you are informed about the installation of cookies and only permit cookies in individual cases, to generally exclude the acceptance of cookies for certain cases, and to activate the automatic deletion of the cookies when you close the browser. If cookies are disabled, the functionality of this website may be limited.

Cookies which are necessary for the execution of the electronic communication process or the provisions of the functions you request (eg the shopping basket function), are stored on the basis of Art. 6 Sec 1 letter f of the GDPR. The website operator has a legitimate interest in the storage of cookies which ensure the error-free and optimised provision of his services. Insofar as other cookies (eg cookies for the analysis of your browsing habits) are stored, they are handled separately in the data protection declaration.

Server log files

The website provider automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. That information is:

  • Browser type and version
  • Operating system used
  • Referrer URL
  • Host name of the accessing computer
  • Time of the server request
  • IP Address

This data is not combined with other data sources.

The foundation for the data processing is Art. 6 Sec. 1 letter f of the GDPR, which permits the processing of data for the fulfilment of a contract or pre-contractual measures.

Contact form

If you send us enquires through the contact form, your information from the contact form, including the contact data specified by you is stored by us for the purpose of processing the enquiry and in case of possible follow up questions. We do not pass on this data without your consent.

The data in the contact form is thus processed exclusively on the basis of your consent (Art. 6 Sec.1 letter a of the GDPR). You can withdraw any consent already given at any time. An informal communication by email suffices for that. The legitimacy of the data processing procedures effected up to the time of the withdrawal remains unaffected.

The data entered in the contact form by you remains with us, until you request erasure, withdraw your consent to storage or the grounds for the data storage become void (eg after the processing of your enquiry is concluded). Mandatory statutory provisions - especially regarding the obligation to retain data - remain unaffected.

5. Analysis tools and advertising

Facebook Pixel

To measure our conversion rates, our website uses the visitor activity pixel of Facebook, Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA („Facebook“).

This tool allows the tracking of page visitors after they have been linked to the website of the provider after clicking on a Facebook ad. This makes it possible to analyse the effectiveness of Facebook ads for statistical and market research purposes and to optimize future advertising campaigns.

For us as the operators of this website, the collected data is anonymous. We are not in a position to arrive at any conclusions as to the identity of users. However, Facebook archives the information and processes it, so that it is possible to make a connection to the respective user profile and Facebook is in a position to use the data for its own promotional purposes in compliance with the Facebook Data Usage Policy. This enables Facebook to display ads on Facebook pages as well as in locations outside of Facebook. We as the operator of this website have no control over the use of such data.

The use of Facebook Pixel is based on Art. 6 Sect. 1 lit. f GDPR. The operator of the website has a legitimate interest in effective advertising campaigns, which also include social media.

In Facebook’s Data Privacy Policies, you will find additional information about the protection of your privacy at: https://www.facebook.com/about/privacy/.

You also have the option to deactivate the remarketing function „Custom Audiences“ in the ad settings section under https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen. To do this, you first have to log into Facebook.

If you do not have a Facebook account, you can deactivate any user based advertising by Facebook on the website of the European Interactive Digital Advertising Alliance: http://www.youronlinechoices.com/de/praferenzmanagement/.

Google Analytics

This website uses functions of the web analysis service Google Analytics. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Google Analytics uses so-called “cookies”. They are text files which are saved on your computer and make it possible to analyse your use of our website. The information about your use of our website generated through the cookies is, as a rule, transferred to a Google server in the USA and saved there.

Google Analytics cookies are only stored on the basis of Art. 6 (1) a) DSGVO if you have given us your express consent to do so (Consent Banner)

IP anonymisation

On this website we have activated the IP anonymisation function. In this way, your IP address is shortened by Google within a European Union member state or in some other treaty state under the agreement on the European Economic Area before it is transmitted to the USA. Only in exceptional cases will your full IP address be transferred by Google to a server in the USA and shortened there. Google will use this information on behalf of the operator of this website to evaluate your use of the website, to compile reports on website activity and to provide the website operator with further services in connection with website use and Internet use. The IP address transferred from your browser by Google Analytics is not merged with any other data by Google..

Browser plug-in

You can prevent the storage of cookies with the appropriate setting of your browser software; however, we would draw your attention to the fact that in this case you may not be able to make use of all the functions of this website to their full extent. In addition, you can prevent the collection of the data generated by the cookie and relating to your use of the website (including your IP) by Google, as well as the processing of these data by Google, by downloading and installing the browser plug-in available through the following link:  https://tools.google.com/dlpage/gaoptout?hl=de .

Objection to data collection

You can prevent the collection of data by Google Analytics by clicking on the following link. An opt-out-cookie is saved to prevent the future collection of your data when visiting the website:

More information about the handling of user data by Google Analytics is to be found in the Google data protection declaration: https://support.google.com/analytics/answer/6004245?hl=de .

Contract data processing

We have concluded a contract with Google for contract data processing and apply the strict directives of the German data protection authorities fully to the use of Google Analytics.

Google Tag Manager

We use the Google Tag Manager. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland

The Google Tag Manager is a tool that allows us to integrate tracking or statistical tools and other technologies on our website. The Google Tag Manager itself does not create any user profiles, does not store cookies, and does not carry out any independent analyses. It only manages and runs the tools integrated via it. However, the Google Tag Manager does collect your IP address, which may also be transferred to Google’s parent company in the United States.

The Google Tag Manager is used on the basis of Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the quick and uncomplicated integration and administration of various tools on his website. If appropriate consent has been obtained, the processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and § 25 (1) TTDSG, insofar the consent includes the storage of cookies or the access to information in the user’s end device (e.g., device fingerprinting) within the meaning of the TTDSG. This consent can be revoked at any time.

6. Newsletter

Which data is required for the newsletter of the company marcapo GmbH?

On our website you have the opportunity to register for our marcapo newsletter.   

You also have the option to order various content, such as check lists, guidelines, e-books and whitepapers, for which it is necessary to register. After registering for the content, you can access the download. The registration for the newsletter is completely voluntary and not compulsory.

For our newsletter, we collect, process and use personal data. There, the essential types of data are: Email address. Further personal data can be added voluntarily. Company name, gender, first name, family name. Compulsory data and that given voluntarily are treated in the same way by us. The differentiation between compulsory data and that given voluntarily is necessary as it is obviously impossible to receive the newsletter without giving an email address.

In the registration for the newsletter, we use the so-called double opt-in procedure. Once you register for our newsletter, we thus send a confirmation email to the address specified by you in which you are required to confirm that you would like to receive the newsletter by clicking on a link in the message. Should you fail to confirm that email, you will receive no further information from us. Insofar as you confirm the email, then we store the data you have entered until you revoke your consent. The personal data entered by you upon registration is used exclusively for the purpose of providing you with the newsletter.

You can withdraw your request for the newsletter at any time. The cancellation of the newsletter can either be effected by sending a message to  antworten_news(at)marcapo.com or by clicking on the corresponding link in the newsletter.

Utilisation of the email marketing provider Evalanche

We uses Evalanche for sending our newsletter. Evalanche does not pass on the data described here to third-parties. Evalanche is an analysis service of the SC-Networks GmbH, Enzianstr. 2, 82319 Starnberg. Evalanche uses so-called "cookies", text files which are saved on your computer and make it possible to analyse your use of our website. The information generated by cookies about your use of the newsletter (including your IP address) is selected and sent to a server in Germany. The newsletters also contain so-called tracking pixels. They are miniature images which allow us to see if a newsletter has been opened by you or not. The tracking pixel, as well as the links in the newsletters are linked to the ID assigned to you by the above-mentioned cookie, which is also linked to your email address. With the help of this data we compile a user profile which we use to provide you with a newsletter that is suited to your interests.

7. Plugins and tools

YouTube

Our website uses plugins for the Google-operated site YouTube. Operator of the site is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA.

If you visit one of our pages equipped with a YouTube plugin, then a connection is established with the YouTube servers. Then the YouTube server is informed which of our pages you visited.

If you are logged into your YouTube account, you are allowing YouTube to associate your browsing habits with your personal profile. You can prevent this by logging out of your YouTube account.

The use of YouTube occurs in the interest of achieving an appealing presentation of our online offerings. This represents a legitimate interest in accordance with Art. 6 Sec. 1 letter f of the GDPR.

Further information about the handling of user data can be found in the YouTube data protection declaration under: https://www.google.de/intl/de/policies/privacy.

Google Web Fonts

For the uniform presentation of fonts, this website uses so-called web fonts provided by Google. When accessing a page, your browser loads the required web fonts into your browser cache in order to be able to display texts and fonts correctly. For this purpose, the browser you use must make contact with the Google servers. In this way, Google learns that our website was accessed from your IP address. The use of Google Web Fonts occurs in the interest of achieving an appealing presentation of our online offerings. This represents a legitimate interest in accordance with Art. 6 Sec. 1 letter f of the GDPR.

If your browser does not support web fonts, then a standard font from your computer is used.

Further information on Google Web Fonts can be found under developers.google.com/fonts/faq developers.google.com/fonts/faq and in the data protection declaration of

Google: policies.google.com/privacy.

Google Maps

This website uses the map service Google Maps through an API. The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

In order to make use of the Google Maps functions, it is necessary to save your IP address. As a rule, this information is transferred by Google to a server in the USA and stored there. The provider of this website had no influence over that data transfer. The use of Google Maps occurs in the interest of achieving an appealing presentation of our online offerings and of ensuring that the locations given by us on this website are easily found. This represents a legitimate interest in accordance with Art. 6 Sec. 1 letter f of the GDPR.

Further information about the handling of user data can be found in the Google data protection declaration under: policies.google.com/privacy.

8. Our social media appearances

Data processing through social networks

We maintain publicly available profiles in social networks. The individual social networks we use can be found below.

Social networks such as Facebook, Google+ etc. can generally analyse your user behaviour comprehensively if you visit their website or a website with integrated social media content (e.g. like buttons or banner ads). When you visit our social media pages, numerous data protection-relevant processing operations are triggered. In detail:

If you are logged in to your social media account and visit our social media page, the operator of the social media portal can assign this visit to your user account. Under certain circumstances, your personal data may also be recorded if you are not logged in or do not have an account with the respective social media portal. In this case, this data is collected, for example, via cookies stored on your device or by recording your IP address.

Using the data collected in this way, the operators of the social media portals can create user profiles in which their preferences and interests are stored. This way you can see interest-based advertising inside and outside of your social media presence. If you have an account with the social network, interest-based advertising can be displayed on any device you are logged in to or have logged in to.

Please also note that we cannot retrace all processing operations on the social media portals. Depending on the provider, additional processing operations may therefore be carried out by the operators of the social media portals. Details can be found in the terms of use and privacy policy of the respective social media portals.

Legal basis

Our social media appearances should ensure the widest possible presence on the Internet. This is a legitimate interest within the meaning of Art. 6 (1) lit. f GDPR. The analysis processes initiated by the social networks may be based on divergent legal bases to be specified by the operators of the social networks (e.g. consent within the meaning of Art. 6 (1) (a) GDPR).

Responsibility and assertion of rights

If you visit one of our social media sites (e.g., Facebook), we, together with the operator of the social media platform, are responsible for the data processing operations triggered during this visit. You can in principle protect your rights (information, correction, deletion, limitation of processing, data portability and complaint) vis-à-vis us as well as vis-à-vis the operator of the respective social media portal (e.g. Facebook).

Please note that despite the shared responsibility with the social media portal operators, we do not have full influence on the data processing operations of the social media portals. Our options are determined by the company policy of the respective provider.

Storage time

The data collected directly from us via the social media presence will be deleted from our systems as soon as the purpose for their storage lapses, you ask us to delete it, you revoke your consent to the storage or the purpose for the data storage lapses. Stored cookies remain on your device until you delete them. Mandatory statutory provisions - in particular, retention periods - remain unaffected.

We have no control over the storage duration of your data that are stored by the social network operators for their own purposes. For details, please contact the social network operators directly (e.g. in their privacy policy, see below).

Individual social networks

LinkedIn

This website uses elements of the LinkedIn network. The provider is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland.

Any time you access a page of this website that contains elements of LinkedIn, a connection to LinkedIn’s servers is established. LinkedIn is notified that you have visited this website with your IP address. If you click on LinkedIn’s “Recommend” button and are logged into your LinkedIn account at the time, LinkedIn will be in a position to allocate your visit to this website to your user account. We have to point out that we as the provider of the websites do not have any knowledge of the content of the transferred data and its use by LinkedIn.

If your approval (consent) has been obtained the use of the abovementioned service shall occur on the basis of Art. 6 (1)(a) GDPR and § 25 TTDSG (German Telecommunications Act). Such consent may be revoked at any time. If your consent was not obtained, the use of the service will occur on the basis of our legitimate interest in making our information as comprehensively visible as possible on social media. Data transmission to the US is based on the Standard Contractual Clauses (SCC) of the European Commission. Details can be found here:
https://www.linkedin.com/help/linkedin/answer/62538/datenubertragung-aus-der-eu-dem-ewr-und-der-schweiz?lang=en

For further information on this subject, please consult LinkedIn’s Data Privacy Declaration at:
https://www.linkedin.com/legal/privacy-policy


Facebook

We have a profile on Facebook. The provider is Facebook Inc., 1 Hacker Way, Menlo Park, California 94025, USA. Data transmission to the US is based on the Standard Contractual Clauses (SCC) of the European Commission. Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendumhttps://de-de.facebook.com/help/566994660333381 and https://www.facebook.com/policy.php.

You can customise your advertising settings independently in your user account. Click on the following link and log in:https://www.facebook.com/settings?tab=ads.

Details can be found in the Facebook privacy policy: https://www.facebook.com/about/privacy/.