Data protection

Data protection at a glance

General information
The following information provides you with an easy-to-navigate overview of what happens to your personal data when you visit this website. The term “personal data” includes all data that can be used to identify you personally. Detailed information on the subject of data protection can be found in our privacy policy, which we have attached below this copy.

Data collection on this website
Who is the party responsible for recording the data on this website (i.e. the “controller”)? The data on this website is processed by the operator of the website, whose contact information can be found under the heading “Legally required information” on this website.

How do we collect your data?
We collect your data as a result of you sharing your data with us. This may, for example, be information that you enter in our contact form.
Other data is recorded by our IT systems automatically or with your consent during your visit to the website. This data is primarily technical information (e.g. web browser, operating system or time of access to the website). This information is collected automatically when you access this website.

For what purposes do we use your data?
Some of the information is generated to ensure the error-free provision of the website. Other data can be used to analyze your usage patterns.

What rights do you have in relation to your information?
You have the right to obtain information about the source, recipients and purposes of your archived personal data at any time without having to pay a fee. You also have the right to request the correction or deletion of your data. If you have consented to data processing, you have the option to withdraw this consent at any time, which will affect all future data processing. In addition, you have the right to request that the processing of your data be restricted under certain circumstances. You also have the right to log a complaint with the competent supervisory authority. Please do not hesitate to contact us at any time at the address given in the “Information Required by Law” section of this website if you have any questions about this or other data protection-related issues.

Analysis tools and tools provided by third parties
It is possible that your browsing patterns are statistically analyzed when you visit this website. Such analyses are primarily carried out using so-called analysis programs.
Detailed information about these analysis programs can be found in our privacy policy below.

2. hosting and content delivery networks (CDN)

External hosting
This website is hosted by an external service provider (host). The personal data collected on this website is stored on the host’s servers. This includes IP addresses, contact requests, metadata and messages, contract information, contact information, names, website access and other data generated via a website. The host is used for the purpose of fulfilling contracts with our potential and existing customers (Art. 6 para. 1 lit. b GDPR) and in the interest of secure, fast and efficient provision of our online services by a professional provider (Art. 6 para. 1 lit. f GDPR).
Our host processes your data only to the extent necessary to fulfill its performance obligations and to comply with our instructions regarding this data.
We use the following host:
YTPI Internetagentur
Seewiese 1
31555 Suthfeld
Phone: +49-5723 980 440 0
Fax: +49-5723 980 440 1
VAT ID: DE270464023

Execution of a contract data processing agreement
In order to ensure data protection-compliant processing, we have concluded an order processing agreement with our hoster.

3. general information and mandatory information

Data protection
The operators of this website and its pages take the protection of your personal data very seriously. We therefore treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy. When you use this website, a variety of personal data is collected. Personal data is data that can be used to identify you personally. This privacy policy explains what data we collect and for what purposes we use this data. It also explains how and for what purpose the information is collected. We would like to point out that data transmission over the Internet (e.g. when communicating by e-mail) may be subject to security vulnerabilities. Complete protection of data against access by third parties is not possible.

Information about the responsible party (referred to as “controller” in the GDPR)
The controller of the data processing on this website is:
woresan GmbH
Hauptstrasse 56 B
30916 Isernhagen
Phone: +49 (0) 5139 9824473
E-mail: info@woresan.com
The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data (e.g. names, e-mail addresses, etc.).

Appointment of a legally required data protection officer
We have appointed a data protection officer for our company.
Nele Spohr
woresan GmbH
Hauptstrasse 56 B
30916 Isernhagen Phone: +49 (0) 5139 9849418
E-mail: nele.spohr@woresan.com

Withdrawal of your consent to data processing
A large number of data processing transactions are only possible with your express consent. You can also withdraw consent that you have already given at any time. This is without prejudice to the lawfulness of data collection that took place before you withdrew your consent.

Right to object to the collection of data in special cases; right to object to direct marketing (Art. 21 GDPR)
IN THE EVENT THAT DATA IS PROCESSED ON THE BASIS OF ART. 6 SECTION 1 LIT. E OR F GDPR, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION. THIS ALSO APPLIES TO ANY PROFILING BASED ON THESE PROVISIONS. TO DETERMINE THE LEGAL BASIS ON WHICH ANY DATA PROCESSING IS BASED, PLEASE CONSULT THIS PRIVACY POLICY. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA CONCERNED UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING OF YOUR DATA WHICH OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS OR IF THE PURPOSE OF THE PROCESSING IS THE ESTABLISHMENT, EXERCISE OR DEFENSE OF LEGAL CLAIMS (OBJECTION PURSUANT TO ART. 21 PARA. 1 GDPR). IF YOUR PERSONAL DATA ARE PROCESSED FOR THE PURPOSE OF DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA CONCERNED FOR THE PURPOSE OF DIRECT MARKETING (OBJECTION PURSUANT TO ART. 21 PARA. 1 GDPR). THIS ALSO APPLIES TO PROFILING INSOFAR AS IT IS ASSOCIATED WITH SUCH DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA WILL SUBSEQUENTLY NO LONGER BE USED FOR DIRECT MARKETING PURPOSES (OBJECTION PURSUANT TO ART. 21 PARA. 2 GDPR).

Right to log a complaint with the competent supervisory authority
In the event of infringements of the GDPR, data subjects have the right to log a complaint with a supervisory authority, in particular in the Member State where they usually maintain their domicile, place of work or place of the alleged infringement. The right to lodge a complaint is independent of any other administrative or judicial remedy available.

Right to data portability
You have the right to request that all data that we process automatically on the basis of your consent or in fulfillment of a contract be handed over to you or a third party in a commonly used, machine-readable format. If you request the direct transfer of the data to another controller, this will only take place if this is technically feasible.

SSL and/or TLS encryption
For security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as the website operator, this website uses either an SSL or a TLS encryption program. You can recognize an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and that the lock symbol appears in the browser line.
If SSL or TLS encryption is activated, data that you transmit to us cannot be read by third parties.

Information about, correction and deletion of data
Within the framework of the applicable legal provisions, you have the right to request information about your archived personal data, its origin and recipients as well as the purpose of the processing of your data at any time. Under certain circumstances, you also have the right to have your data corrected or deleted. If you have any questions on this topic or other questions about personal data, please do not hesitate to contact us at any time at the address given in the “Information required by law” section.

Right to request processing restrictions
You have the right to request the imposition of restrictions on the processing of your personal data. For this purpose, you can contact us at any time at the address given in the section “Information Required by Law”. The right to request the restriction of processing applies in the following cases:

• In the event that you should dispute the accuracy of your data archived by us, we generally require some time to verify this claim. During the period of this investigation, you have the right to request that we restrict the processing of your personal data.
• If the processing of your personal data was/is carried out in an unlawful manner, you have the option of requesting the restriction of the processing of your data instead of requesting the deletion of this data.
• If we no longer need your personal data and you need it for the exercise, defense or assertion of legal claims, you have the right to request the restriction of the processing of your personal data instead of the deletion of this data.
• If you have raised an objection pursuant to Art. 21 (1) GDPR, your rights and our rights must be weighed against each other. As long as it has not been established whose interests prevail, you have the right to request that the processing of your personal data be restricted.

If you have restricted the processing of your personal data, these data – with the exception of their archiving – may only be processed with your consent or for the establishment, exercise or defense of legal claims or for the protection of the rights of other natural or legal persons or for important reasons of public interest cited by the European Union or a member state of the EU.

Rejection of unsolicited e-mails
We hereby object to the use of contact data published as part of our duty to provide a legal notice by third parties for the purpose of sending unsolicited advertising and information material. The operators of this website and its pages expressly reserve the right to take legal action in the event of the unsolicited sending of advertising information, such as SPAM e-mails.

4. recording of data on this website

Cookies
Our websites and pages use what the industry refers to as “cookies”. Cookies are small text files that do not cause any damage to your device. They are either stored temporarily for the duration of a session (session cookies) or permanently archived on your device (permanent cookies). Session cookies are automatically deleted as soon as you end your visit. Permanent cookies remain archived on your device until you actively delete them or they are automatically deleted by your web browser. In some cases, it is possible that third-party cookies are stored on your device as soon as you enter our website (third-party cookies). These cookies enable you or us to use certain services offered by the third party (e.g. cookies for the processing of payment services).
Cookies have a variety of functions. Many cookies are technically necessary, as certain functions of the website would not work without the cookies (e.g. the shopping cart function or the display of videos). The purpose of other cookies may be to analyze usage patterns or to display advertising messages.
Cookies that are necessary for the performance of electronic communications transactions (required cookies) or to provide certain functions you want to use (functional cookies, e.g. for the shopping cart function) or those that are necessary for the optimization of the website (e.g. cookies that provide measurable insights into the web audience) are stored on the basis of Art. 6 para. 1 lit. f GDPR, unless a different legal basis is cited. The website operator has a legitimate interest in the storage of cookies in order to ensure the technically error-free and optimized provision of the operator’s services. If your consent to the storage of cookies has been obtained, the respective cookies are stored exclusively on the basis of the consent given (Art. 6 para. 1 lit. a GDPR); this consent can be revoked at any time.
You have the option of setting your browser so that you are informed about the placement of cookies and only allow the acceptance of cookies in certain cases. You can also exclude the acceptance of cookies in certain cases or in general or activate the deletion function for the automatic deletion of cookies when closing the browser. If cookies are deactivated, the functions of this website may be restricted.

In the case of the use of cookies from third parties or the use of cookies for analysis purposes, we will inform you separately in connection with this privacy policy and, if necessary, ask for your consent.

Cookie consent with Borlabs cookie
Our website uses Borlabs cookie consent technology to obtain your consent to the storage of certain cookies in your browser and for their data protection-compliant documentation. The provider of this technology is Borlabs – Benjamin A. Bornschein, Georg-Wilhelm-Str. 17, 21107 Hamburg, Germany (hereinafter referred to as Borlabs).
Whenever you visit our website, a Borlabs cookie is stored in your browser, which archives all the declarations of consent or revocations you have entered. This data is not passed on to the provider of the Borlabs technology.
The recorded data will remain archived until you ask us to delete it, delete the Borlabs cookie itself or until the purpose for storing the data no longer applies. This is without prejudice to the statutory retention obligations. To review the details of Borlabs’ data processing policy, please visit https://de.borlabs.io/kb/welche-daten-speichert-borlabs-cookie/
We use Borlabs’ cookie consent technology to obtain the legally required consents for the use of cookies. The legal basis for the use of such cookies is Art. 6 para. 1 sentence 1 lit. c GDPR.

Server log files
The provider of this website and its pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. The information includes

• Type and version of the browser used
• The operating system used
• Referring URL
• The host name of the accessing computer
• The time of the server request
• The IP address

This data is collected on the basis of Art. 6 para. 1 lit. f GDPR.
The operator of the website has a legitimate interest in the technically error-free presentation and optimization of the operator’s website. In order to achieve this, server log files must be recorded.

Contact form
If you send us inquiries via our contact form, we will store the information and contact details provided in the contact form in order to process your inquiry and in case we have any further questions. We will not pass on this information without your consent.
This data is processed on the basis of Art. 6 para. 1 lit. b GDPR if your request is related to the execution of a contract or if it is necessary for the implementation of pre-contractual measures. In all other cases, processing is based on our legitimate interest in the effective processing of the requests addressed to us (Art. 6 para. 1 lit. f GDPR) or on your consent (Art. 6 para. 1 lit. a GDPR), if this has been requested.
The information you enter in the contact form will remain with us until you ask us to delete the data, revoke your consent to the archiving of the data or if the purpose for which the information is archived no longer applies (e.g. after we have completed our response to your inquiry). Mandatory statutory provisions – in particular retention periods – remain unaffected by this.

Inquiry by e-mail, telephone or fax
If you contact us by e-mail, telephone or fax, your inquiry, including all resulting personal data (name, inquiry), will be stored and processed by us for the purpose of processing your inquiry. We will not pass on this data without your consent.

This data is processed on the basis of Art. 6 para. 1 lit. b GDPR if your request is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the data is processed on the basis of our legitimate interest in the effective processing of the inquiries addressed to us (Art. 6 para. 1 lit. f GDPR) or on the basis of your consent (Art. 6 para. 1 lit. a GDPR), if this has been granted.

The data that you have transmitted to us via contact requests will remain with us until you request us to delete it, revoke your consent to store it or the purpose for storing the data no longer applies (e.g. after your request has been processed). Mandatory statutory provisions – in particular statutory retention periods – remain unaffected by this.

5. analysis tools and advertising

Google Analytics
This website uses functions of the web analysis service Google Analytics. The provider of this service is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics enables the website operator to analyze the behavior of website visitors. For this purpose, the website operator receives a variety of user data, such as the pages accessed, the time spent on the site, the operating system used and the origin of the user. Google can summarize this data in a profile that is assigned to the respective user or the user’s device.
Google Analytics uses technologies that enable the recognition of the user for the purpose of analyzing user behavior (e.g. cookies or device fingerprinting). The website usage information recorded by Google is usually transferred to a Google server in the USA and stored there.

This analysis tool is used on the basis of Art. 6 para. 1 lit. f GDPR. The operator of this website has a legitimate interest in the analysis of user behavior in order to optimize both the online offering and the operator’s advertising activities. If a corresponding consent (e.g. consent to the storage of cookies) is requested, the processing is carried out exclusively on the basis of Art. 1 para. 1 lit. f GDPR. 6 para. 1 lit. a GDPR; consent can be revoked at any time.

IP anonymization
We have activated the IP anonymization function on this website. As a result, your IP address will be truncated by Google within the member states of the European Union or in other states that have ratified the Agreement on the European Economic Area before being transmitted to the United States of America. The full IP address will be transmitted to one of Google’s servers in the United States and abbreviated there only in exceptional cases. Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage for website operators. The IP address transmitted by your browser in connection with Google Analytics will not be merged with other data held by Google.

Browser plug-in
You can prevent the collection and processing of your data by Google by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de.

For more information on the processing of user data by Google Analytics, please refer to Google’s privacy policy at: https://support.google.com/analytics/answer/6004245?hl=de.
Processing of contract data

We have concluded a contract with Google for commissioned data processing and implement the strict requirements of the German data protection authorities in the best possible way when using Google Analytics.

Demographic parameters provided by Google Analytics
This website uses the “demographic characteristics” function of Google Analytics in order to be able to display compatible advertisements to the website visitor within the Google advertising network. In this way, reports can be generated that contain information about the age, gender and interests of website visitors. The sources of this information are interest-based advertising from Google and visitor data obtained from third-party providers. This data cannot be assigned to a specific person. You have the option of deactivating this function at any time by making the corresponding changes to the settings for advertising in your Google account, or you can generally prohibit the recording of your data by Google Analytics, as explained in the section “Objection to data recording”.

Google Analytics e-commerce tracking
This website uses the “e-commerce tracking” function of Google Analytics. With the help of “e-commerce tracking”, the website operator is able to analyze the purchasing behavior of website visitors with the aim of improving the operator’s online marketing campaigns. In this context, information such as the orders placed, the average order values, the shipping costs and the time from viewing the product to the purchase decision are tracked. This data can be summarized by Google under a transaction ID, which is assigned to the respective user or the user’s device.

Archiving period
Data stored by Google at user or incident level that is linked to cookies, user IDs or advertising IDs (e.g. DoubleClick cookies, Android advertising ID) is anonymized or deleted after 14 months. For details, please click on the following link: https://support.google.com/analytics/answer/7667196?hl=de

Google Ads
The website operator uses Google Ads. Google Ads is an online advertising program from Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Ads enables us to place ads in the Google search engine or on third-party websites when the user enters certain search terms in Google (keyword targeting). It is also possible to display targeted ads based on the user data available to Google (e.g. location data and interests; audience targeting). As a website operator, we can evaluate this data quantitatively by analyzing, for example, which search terms led to the placement of our ads and how many ads led to corresponding clicks.

The use of Google Ads is based on Art. 6 para. 1 lit. ff. GDPR. The website operator has a legitimate interest in marketing the operator’s services and products as effectively as possible.

Google Remarketing
This website uses the functions of Google Analytics Remarketing. The provider of these solutions is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Remarketing analyzes your user behavior on our website (e.g. clicks on certain products) in order to assign you to a specific advertising target group and subsequently show you suitable online offers when you visit other online offers (remarketing or retargeting).

It is also possible to link the advertising target groups generated with Google Remarketing with cross-device functions from Google. This makes it possible to display interest-based, customized advertising messages on a device (e.g. cell phone) in a way that is tailored to you and on each of your devices (e.g. tablet or PC), depending on your previous usage and browsing behavior.

If you have a Google account, you have the option to object to personalized advertising by clicking on the following link: https://www.google.com/settings/ads/onweb/. The use of Google Remarketing is based on Art. 6 1 lit. ff. GDPR. The website operator has a legitimate interest in marketing the operator’s products as effectively as possible. If a corresponding declaration of consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR; the consent given can be revoked at any time.

For more information and the relevant data protection provisions, please consult Google’s privacy policy at: https://policies.google.com/technologies/ads?hl=de.

Creation of target groups with customer matching
We use the Google Remarketing customer matching function, among other things, to create target groups. For this purpose, we transmit certain customer data (e.g. e-mail addresses) from our customer lists to Google. If the respective customers are Google users who are logged into their Google accounts, they will be shown suitable advertising messages within the Google network (e.g. on YouTube, Gmail or in a search engine).

Google Conversion Tracking
This website uses Google Conversion Tracking. The provider of this service is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

With the help of Google Conversion Tracking, we are able to recognize whether the user has completed certain actions. For example, we can analyze how often which buttons are clicked on our website and which products are checked or purchased with a certain frequency. The purpose of this information is to create conversion statistics. We learn how many users have clicked on our ads and what actions they have taken. We do not receive any information that would allow us to identify users personally. As such, Google uses cookies or comparable recognition technologies for identification purposes.

We use Google Conversion Tracking on the basis of Art. 6 para. 1 lit. ff. GDPR. The website operator has a legitimate interest in the analysis of user behavior with the aim of optimizing both the operator’s website and advertising. If a corresponding declaration of consent has been requested (e.g. regarding the storage of cookies), the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR; the consent given can be revoked at any time. Further information on Google Conversion Tracking can be found in Google’s privacy policy at: https://policies.google.com/privacy?hl=de

6. plug-ins and tools

YouTube with extended data protection integration
Our website embeds videos from the YouTube website. The operator of the website is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

We use YouTube in extended data protection mode. According to YouTube, this mode ensures that YouTube does not store any information about visitors to this website before they watch the video. However, this does not necessarily mean that the sharing of data with YouTube partners can be excluded due to the extended data protection mode. For example, YouTube always establishes a connection with the Google DoubleClick network, regardless of whether you watch a video.

As soon as you start to play a YouTube video on this website, a connection to the YouTube servers is established. As a result, the YouTube server is informed which of our pages you have visited. If you are logged into your YouTube account during your visit to our website, you enable YouTube to assign your surfing behavior directly to your personal profile. You have the option of preventing this by logging out of your YouTube account.

In addition, after you have started playing a video, YouTube may place various cookies on your device or comparable technologies for recognition (e.g. device fingerprinting). In this way, YouTube will be able to obtain information about visitors to this website. This information is used, among other things, to compile video statistics in order to improve the user-friendliness of the website and prevent attempts at fraud.

Under certain circumstances, additional data processing transactions may be triggered after you start playing a YouTube video that are beyond our control. The use of YouTube is based on our interest in an appealing presentation of our online content. According to Art. 6 para. 1 lit. f GDPR, this is a legitimate interest. If a corresponding agreement has been requested, processing is carried out exclusively on the basis of Art. 6 para. 1 lit. f 1 lit. a GDPR; consent can be revoked at any time.

Further information about how YouTube handles user data can be found in the YouTube privacy policy at: https://policies.google.com/privacy?hl=de.

Google Web Fonts (local embedding)
This website uses so-called web fonts provided by Google to ensure uniform use of fonts on this website. These Google fonts are installed locally so that no connection to the Google servers is established in connection with this application.
For more information about Google Web Fonts, please follow this link: https://developers.google.com/fonts/faq and consult Google’s privacy policy at: https://policies.google.com/privacy?hl=de.