Privacy Policy for FEUTRON Klimasimulation GmbH

A. Information on the Collection of Personal Data by the Controller

1. General Information and Scope

The following provides information on the processing of personal data

when using our website www.feutron.de,
when using the contact form on our website, and
for other inquiries via email, mail, and telephone

in accordance with Art. 12 of the EU General Data Protection Regulation (GDPR).

With this Privacy Policy, we inform you about the details of the collection and processing of your data, as well as your related rights. We reserve the right to adapt the Privacy Policy with future effect, particularly in the event of further development of the website, the use of new technologies, tools, or as a result of changes in legal bases or jurisprudence.

2. Controller

The controller pursuant to Art. 4 para. 7 GDPR is:

Feutron Klimasimulation GmbH
represented by Managing Director Jens Geißler,
Am Weberbrunnen 1
07957 Langenwetzendorf

Phone: +49 36625 500 60
Email: feutron@feutron.de

3. Definitions

Personal data means any information relating to an identified or identifiable natural person, e.g., name, address, email addresses, user behavior. It is sufficient for a person to be identifiable. This is the case when a person can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

Processing means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

Further relevant definitions used in this Privacy Policy can be found in Art. 4 GDPR, available at https://dsgvo-gesetz.de/art-4-dsgvo/ or comparable websites that provide the GDPR for retrieval.

B. Your Rights

1. Your Rights to Information, Rectification, Erasure, Restriction, Data Portability, and Withdrawal of Consent

You have the following rights regarding your personal data vis-à-vis a controller:

Right to free information (Art. 15 GDPR) about your stored personal data, its origin and recipients, and the purpose of data processing;
Right to rectification or erasure (Art. 16 and 17 GDPR) of your personal data processed by us.

If you have questions about your right to information or right to rectification or erasure of your personal data, you can contact us as the controller at any time or – if specified – our data protection officer.

You also have the right to restriction of processing of your personal data (Art. 18 GDPR) under the following conditions:

You have contested the accuracy of the personal data. We usually need time to verify this. For the duration of the review, you have the right to request the restriction of processing of your personal data (Art. 18 para. 1 lit. a) GDPR).
If the processing of your personal data is/was unlawful, you can request the restriction of data processing instead of the erasure of your personal data (Art. 18 para. 1 lit. b) GDPR).
If we no longer need your personal data, but you require it for the establishment, exercise, or defense of legal claims, you have the right to request the restriction of processing of your personal data instead of erasure (Art. 18 para. 1 lit. c) GDPR).
If you have lodged an objection pursuant to Art. 21 para. 1 GDPR, a balancing of your interests and ours must be carried out. As long as it has not yet been determined whose interests prevail, you have the right to request the restriction of processing of your personal data (Art. 18 para. 1 lit. d) GDPR).

If you have restricted the processing of personal data, such data – apart from its storage – may only be processed with your consent or for the establishment, exercise, or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the European Union or a Member State (Art. 18 para. 2 GDPR).

If you have consented to the processing of your personal data, you have the right to withdraw your consent at any time with future effect. Please direct such a withdrawal to feutron@feutron.de. The withdrawal does not affect the lawfulness of the processing of your personal data until the withdrawal.

You have the right to have your data, which we process automatically based on your consent or in fulfillment of a contract, handed over to yourself or a third party in a common, machine-readable format (data portability, Art. 20 GDPR). If you request direct transfer to another controller, this will only be done if technically feasible.

You also have the right to lodge a complaint with a data protection supervisory authority about our processing of your personal data. The supervisory authority responsible for us is in Thuringia (https://www.tlfdi.de/tlfdi/). lodge a complaint. The supervisory authority responsible for us is the authority in Thuringia (https://www.tlfdi.de/tlfdi/).

2. Right to Object to Processing (Art. 21 GDPR)

If data processing is based on Art. 6 para. 1 lit. e) or f) GDPR, you have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data; this also applies to profiling based on these provisions. The respective legal basis on which processing is based can be found in this Privacy Policy. If you object, we will no longer process your affected personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or the processing serves the establishment, exercise, or defense of legal claims (objection pursuant to Art. 21 para. 1 GDPR).

If your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing; this also applies to profiling to the extent that it is related to such direct marketing. If you object, your personal data will subsequently no longer be used for direct marketing purposes (objection pursuant to Art. 21 para. 2 GDPR).

C. Processing of Personal Data When Visiting Our Website

1. Server Log Files

Each time this website is accessed, i.e., merely viewed without registration and without you otherwise providing us with information, we process personal data that your browser transmits to our server. The collection of data and information from your device’s system is automated. The collected data and information are stored in so-called server log files.

This data relates to an identified or identifiable natural person (here: website visitor).

The data described below is automatically transmitted by the browser you use when accessing our website:

– IP address

– Date and time of the request

– Time zone difference to Greenwich Mean Time (GMT)

– Content of the request (page visited)

– Access status/HTTP status code

– Amount of data transferred in each case

– Previously visited page

– Browser

– Operating system and its interface

– Language and version of the browser software.

The purpose of this processing is to make our website accessible from your device and to enable a correct display of our website on your device or in your browser. Furthermore, the aforementioned data serve to optimize the website and ensure the security of the controller’s systems. The data is not evaluated for marketing purposes.

The aforementioned data are therefore technically necessary for us.

The legal basis for the processing of this data is Art. 6 para. 1 lit. f) GDPR. We have a legitimate interest in providing you with a website optimized for your browser and enabling communication between our server and your device. The processing of your IP address, in particular, is necessary for communication between our server and your device.

The collected data is automatically deleted when it is no longer required for the stated processing purpose. This usually occurs after the session you initiated by accessing the website has ended.

2. Cookies

We use cookies on our website. Cookies are small files that are placed on your desktop, laptop, mobile device, or similar end device by a website you visit. Cookies are stored either temporarily for the duration of a session (session cookies) or permanently (persistent cookies) on your end device. Session cookies are automatically deleted after your visit to our website ends. Persistent cookies remain stored on your end device until you delete them yourself or until an automatic deletion occurs through your web browser.

In some cases, third-party cookies may also be stored on your end device when you use our website. These enable us or you to use certain services of the third-party company (e.g., displaying videos).

You can configure your browser to inform you about the setting of cookies, allow cookies only in individual cases, exclude the acceptance of cookies for certain cases or generally, and activate the automatic deletion of cookies when closing the browser. Disabling cookies may limit the functionality of this website.

We have divided the cookies we use into the following categories:

Necessary cookies allow you to navigate the website and use essential functions, such as secure and private areas.

Analytics cookies help us understand how you use our website (e.g., which pages you visit). They provide statistics on how our website is used and improve the website by identifying errors and performance issues.

Functional cookies are cookies used to store user selections and thus improve their user experience (e.g., language selection).

Marketing cookies are used to collect information about the impact of our marketing campaigns on other websites on users and non-users.

3. Contact Form

You have the option to send us your inquiry directly via a dedicated contact form on the website www.feutron.de/kontakt.

For this purpose, we collect the following data from you:

Personal master data: First and last name of the contact person
Contact information: Email address, telephone number, and address of the contact person (usually: company address)
Inquiry content: Subject and a description of your inquiry

This data is processed and stored by us for the purpose of processing and responding to your inquiry. The data is forwarded exclusively internally to the responsible employees for processing your inquiry.

The data will be stored by us until your inquiry has been successfully processed. The data will be deleted as soon as the processing purpose has been achieved, provided that no legal retention periods prevent deletion. If this is the case, the processing of your personal data will be restricted by us for the duration of the legal retention periods.

The processing of personal data through your inquiry takes place in connection with the execution and fulfillment of a contract or for the implementation of pre-contractual measures taken at your request (Art. 6 para. 1 sentence 1 lit. b) GDPR) and based on your consent requested by us (Art. 6 para. 1 sentence 1 lit. a) GDPR).

You have the option to withdraw your consent at any time pursuant to Art. 13 para. 2 lit. d) GDPR. Please direct your withdrawal to feutron@feutron.de. The withdrawal does not affect the lawfulness of data processing until the withdrawal.

4. Hosting

Our website is hosted by an external service provider, EMERIDIAN – Digital & Datenschutz Agentur.

The domain is hosted and provided by EMERIDIAN – Digital & Datenschutz Agentur.

The data collected when using our website is stored on the servers of our service providers (see C. 1.). This data includes, in particular, IP addresses, contact inquiries, meta and communication data, contact data, website accesses, and other data that arises during the use of a website.

Our service providers are used for the purpose of fulfilling contracts with our potential and existing customers (Art. 6 para. 1 lit. b GDPR) and in the interest of a secure, fast, and efficient provision of our online offering by a professional provider (Art. 6 para. 1 lit. f GDPR).

Our host will only process your data to the extent necessary to fulfill its contractual obligations.

To ensure data protection-compliant processing, we have concluded a data processing agreement with the service providers we use.

5. Plugins and Tools

Google Maps

On our website, we use the functions of Google Maps from Google Inc. (USA), with its European Economic Area headquarters in Ireland (Google Ireland Ltd., Gordon House, Barrow Street Dublin, 4 Ireland).

We use Google Maps to visualize the location of our company headquarters for our website users. By using Google Maps on the website www.feutron.de/kontakt, data is transmitted to Google and stored on Google’s servers.

The Google Maps service collects the following data from you when you access the website:

entered search terms,
your IP address,
latitude and longitude coordinates
when using the route planner function, also the details of the starting address

Data processing takes place directly within Google Inc.’s sphere, so we must inform you about this data processing, but we cannot influence it.

By using Google Maps on the website www.feutron.de/kontakt, Google sets the following cookies:

Name: NID
Purpose: Customizing the display of advertisements in Google Search by using an individual ID that Google uses to collect your personal settings for advertising purposes
Provider: Google Inc.
Storage duration: 6 months

The data is transmitted to Google servers, which are regularly located in the USA.

The legal basis for data processing is

your consent pursuant to Art. 6 para. 1 sentence 1 lit. a) GDPR.
our legitimate interest in optimizing our online offering pursuant to Art. 6 para. 1 sentence 1 lit. f) GDPR.

Your data will be transferred to the USA, among other places. According to the European Court of Justice, the USA is not a country that offers an adequate level of protection, so there are risks to the lawfulness and security of data processing. In particular, according to the ECJ, it is not guaranteed that data in the USA will not be passed on to third parties, especially government institutions, because there are no sufficient legal remedies.

Due to the lack of an adequacy decision pursuant to Art. 45 para. 3 GDPR, data processing is only possible if the other requirements of Art. 46 et seq. GDPR are met.

Google Inc. uses, in particular for data processing and data transfer to so-called third countries, the standard contractual clauses provided by the European Commission (Art. 46 para. 2 lit. c) and para. 3 GDPR). This can be found here: https://policies.google.com/privacy/frameworks?hl=de.

Real Cookie Banner

To manage the cookies and similar technologies (tracking pixels, web beacons, etc.) used and related consents, we use the consent tool “Real Cookie Banner”. Details on how “Real Cookie Banner” works can be found at https://devowl.io/de/rcb/datenverarbeitung/.

Legal bases for the processing of personal data in this context are Art. 6 para. 1 lit. c GDPR and Art. 6 para. 1 lit. f GDPR. Our legitimate interest is the management of the cookies and similar technologies used and the related consents.

The provision of personal data is neither contractually required nor necessary for the conclusion of a contract. You are not obliged to provide the personal data. If you do not provide the personal data, we cannot manage your consents.

D. Processing of Personal Data for Inquiries via Email, Telephone, Mail, or Fax

Of course, you also have the option to contact us outside of the website. Here too, we inform you about the data processing carried out by us.

1. Inquiry by Email or Telephone

If you contact us by email or telephone, your inquiry, including all personal data arising therefrom, in particular:

Personal master data: First and last name, position if applicable, and date of birth if applicable
Contact information: Telephone number (direct dial), email address, address (usually: company address)
Inquiry content: specific content of your inquiry

will be stored and processed.

Processing is carried out for the purpose of handling your inquiry.

The legal basis for processing is Art. 6 para. 1 lit. b GDPR, insofar as your inquiry is related to the establishment or execution of a contractual relationship. In all other cases, processing is based on our legitimate interest in effectively handling inquiries addressed to us (Art. 6 para. 1 lit. f GDPR) or on your consent (Art. 6 para. 1 lit. a GDPR), if such has been requested.

The data communicated or sent by you in the context of the inquiry will be stored by us until you request its deletion, withdraw your consent to storage, or the purpose for data storage ceases to apply (e.g., after your inquiry has been processed). Mandatory legal provisions, in particular legal retention periods, remain unaffected. In the event of legal retention periods applying, we will restrict the processing of your personal data upon achievement of the processing purpose.

2. Applications

We provide contact information on our website for (unsolicited) applications, which should be used for electronic contact within the application process. You can send applications to us via email or by post, among other ways. In any case, we process your contact data (name, address, date of birth, email address, marital status) as well as any other personal data resulting from the application documents.

The purpose of processing is the decision on the establishment of an employment relationship, processing for possible follow-up questions, as well as the fulfillment of legal obligations or the safeguarding of legitimate interests. In detail:

We process your personal data in accordance with the provisions of the General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG), insofar as this is necessary for the decision on the establishment of an employment relationship with us. The legal basis is Art. 88 GDPR in conjunction with Section 26 BDSG, and possibly Art. 6 para. 1 lit. b GDPR for the initiation or execution of contractual relationships.

Furthermore, we may process your personal data if this is necessary for the fulfillment of legal obligations (Art. 6 para. 1 lit. c GDPR) or for the defense against asserted legal claims against us. The legal basis is Art. 6 para. 1 lit. f GDPR. The legitimate interest results, among other things, from the burden of proof in proceedings under the General Equal Treatment Act (AGG). If you give us explicit consent to process personal data for specific purposes, the lawfulness of this processing is given on the basis of your consent pursuant to Art. 6 para. 1 GDPR. Any given consent can be revoked at any time with future effect.

If an employment relationship is established between you and us, we may continue to process the personal data already received from you for the purposes of the employment relationship in accordance with Art. 88 GDPR in conjunction with Section 26 BDSG, insofar as this is necessary for the performance or termination of the employment relationship or for the exercise or fulfillment of the rights and obligations of the employee representation arising from a law or a collective agreement, a company or service agreement (collective agreement).

We only pass on your personal data within our company to departments and persons who require this data to fulfill contractual and legal obligations or to implement our legitimate interest.

We may transmit your personal data to affiliated companies, insofar as this is permissible within the framework of the stated purposes and legal bases.

Data will otherwise only be transferred to recipients outside the company if this is permitted by legal provisions, the transfer is necessary to fulfill legal obligations, or we have your consent.

We store your personal data for as long as this is necessary for the decision regarding your application. Your personal data or application documents will be deleted a maximum of six months after the end of the application process (e.g., the announcement of the rejection decision), unless longer storage is legally required or permissible. We will only store your personal data beyond this if legally required or, in the specific case, necessary for the assertion, exercise, or defense of legal claims for the duration of a legal dispute.

In the event that you have consented to longer storage of your personal data, we will store it in accordance with your declaration of consent.

If an employment relationship, training relationship, or internship relationship is established following the application process, your data will, if necessary and permissible, initially continue to be stored and then transferred to the personnel file.