Privacy policy

1. Data protection at a glance

General information

The following provides a simple overview of what happens to your personal information when visiting this website. Personal data or information is defined as any data from which you can be personally identified. For detailed information about data protection, please refer to our privacy policy listed below.

The Thitronik app collects, stores, and evaluates user data completely anonymously and at no time is it possible to connect this data with individual users.

Data collection on this website

Who is responsible for the collection of data on this site?

Data processing on this site is carried out by the website operator. You can find the contact details of the website operator in the section "Information on the party responsible for data processing" section of this privacy policy.

How is your data collected?

Your personal data is collected in two ways. One is when you provide it, for example, by entering it into a contact form.

The other is when data is collected by our servers after your consent when you visit our website. This is mainly technical data (e.g. internet browser, operating system or time of page view) and takes place automatically as soon as you enter the site.

What is your data used for?

Part of the data collected is used to ensure the smooth and seamless use of our website, while other data may be used for analyzing user behavior from the visit.

What rights do you have regarding your data?

You have the right at any time to receive information, free of charge, about the origin, recipient, and the intended purposes of your stored personal data. You also have a right to request the correction or deletion of this data. If you have given your consent to data collection and its use, you also have the right to revoke it at any time in the future. You also have the right to request the restriction of its use under certain circumstances as well as the right to lodge complaints with the relevant supervisory authority. You may contact us at any time regarding this and any other questions you might have about data protection.

Third-party analytics and tools

When visiting this website, data is collected in order to statistically analyze your web behavior. This is done mainly with so-called web analytics tools.

Detailed information on these tools can be found in the following data protection and privacy policy.

2. Hosting

Hetzner

We host our website with Hetzner.

The provider is Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen (hereinafter: Hetzner).

For more details, please refer to Hetzner's privacy policy: https://www.hetzner.com/de/rechtliches/datenschutz.

Our use of Hetzner is based on Art. 6 para. 1 lit. f GDPR. We have a legitimate interest in the most reliable presentation of our website possible. If a corresponding consent has been requested, processing is then based exclusively on this. However, this consent can be revoked at any time.

Order Processing Agreement

We have an order processing agreement (AVV) with the above-mentioned provider. This contract is required by data protection law and ensures that the provider only processes the personal data of our website visitors in accordance with our instructions and in compliance with the GDPR.

 

3 General information and mandatory disclosures

Data protection

The operators of this site take the protection of your personal information very seriously. Your data is treated confidentially and in accordance with existing statutory data protection regulations as well as with what is stated in this data protection policy.

When using this website, various personal data are collected. Personal data is defined as data that can be used to identify you personally. This privacy policy explains what data we collect, how it is collected, and what we use it for.

We would like to point out that data transmission on the Internet (e.g. communication by e-mail) can have security gaps and the complete protection against third parties accessing this data is not possible.

Information on the party responsible for data processing

The data controller for this website is:

Mark Thietje

Managing Director

 

Thitronik GmbH
Finkenweg 9-15

24340 Eckernförde

Phone: +49 (0) 4351 76744-0

E-Mail: kontakt@thitronik.de

The controller is the natural or legal person who alone, or jointly with others, determines the purposes and means of the processing of personal data (e.g. names, e-mail addresses, etc.).

Storage period

Unless specific storage periods have been stated within this privacy policy, your personal information will remain with us until the purpose for the data processing no longer applies. If you assert a legitimate request for the deletion of your data, or revoke your consent to its processing, your data will be deleted immediately, unless there are other legally permitted reasons for storing it (e.g. special retention periods under tax or commercial law); in such cases, the data will be deleted once these conditions no longer apply.

Data Protection Officer

We have appointed a data protection officer for our company:

Graduate engineer Karsten Dreyer

Email: datenschutz@thitronik.de

Thitronik GmbH
Data Protection Officer
Finkenweg 9-15
24340 Eckernförde

Information on data transfer to the USA and other non-EU member countries

We use tools from companies based in the USA or other non-EU member countries that may not protected under European data protection law. If these tools are used, your personal data may be transferred to these countries and processed there. We would like to point out that no level of data protection comparable to that in the European Union can be guaranteed in these countries. For example, US companies are obliged to hand over personal information to the authorities without you as the data subject being able to take legal action against it. Therefore, it cannot be ruled out that US authorities (e.g. intelligence services) may process, evaluate and permanently store your data located on US servers for monitoring purposes. We have no influence on these data processing activities.

Revocation of your consent to data processing

Many data processing operations are only possible with your express consent. You can revoke this consent at any time. The legality of the data processing carried out until the consent is revoked remains unaffected.

The right to object to the collection of data in specific cases as well as to direct marketing (Art. 21 GDPR)

If data processing has been carried out on the basis of Art. 6 Abs. 1 lit. e or f GDPR, you have the right to object to the processing of your personal data at any time and for any reason arising from your particular situation. This also applies to cases of profiling based on these provisions. The respective legal basis on which this processing is established can be found in this data protection declaration. If you have objected to its processing, we will no longer process your personal information unless we can demonstrate compelling legitimate grounds for its processing that would override your interests, rights, or freedoms; or if the processing is necessary for the purpose of asserting, exercising or defending any legal claims (objection pursuant to Art. 21 (1) GDPR)

If your personal information has been processed for the purpose of direct marketing, you have the right to object to its use in this way at any time. This also applies to profiling insofar as it is connected to these activities. If you have objected, your personal data will then no longer be used for this purpose.

Right of appeal ­to a relevant supervisory authority

In the event of a breach of the GDPR, data subjects shall have the right to appeal to a supervisory authority in the Member State of their residence, their place of work, or the location of the alleged breach. The right of appeal is without prejudice to any other administrative or judicial remedy.

 

 

Right to data portability

You have the right to have data that we process automatically, either based on your consent or in fulfilment of a contract, handed over to you or to a third party in a common, machine-readable format. If you request the transfer of the data to another controller, this will only be done insofar as it is technically feasible.

SSL or TLS encryption

This site uses SSL or TLS encryption for security reasons. This is to protect the transmission of confidential content, such as orders or enquiries that are sent to us as the site operator. You can identify an encrypted connection when the address line of the browser changes from "http://" to "https://" as well as from the lock symbol displayed in your browser’s address field.

If SSL or TLS encryption is activated, data that is transmitted to us cannot be read by third parties.

Deletion and correction of information

Within the framework of the applicable legal provisions, you have the right at any time to receive, free of charge, information about your stored personal data. This includes its origin, recipient, the purpose of data processing and, if applicable, the right to the correction or deletion of this data. You can contact us at any time about this or any other questions you may have about your personal data.

Right to the restriction of data processing

 

You have the right to request the restriction of the processing of your personal data. For this purpose, you can contact us at any time. The right to restriction of processing applies in the following cases:

 

  • If the accuracy of your personal data stored by us has been disputed, it is usually necessary to have time to verify this. During the duration of the review, you have the right to request the restriction of the processing of your personal data.
  • If the processing of your personal data was/is unlawful, you may request the restriction of data processing instead of its deletion.
  • If we no longer need your personal data, but you need it to exercise, defend or enforce a legal claim, you have the right to request the restriction of the processing of your personal data instead of its deletion.
  • If you have lodged an objection pursuant to Art. 21 (1) GDPR, a balancing of both your and our interests must be considered. In the time that it has not been determined whose interests shall prevail, you have the right to request the restriction of the processing of your personal data.

If you have restricted the processing of your personal data, such data may, apart from being stored, only be processed with your consent; or for the assertion, exercise or defense of legal claims; or for the protection of the rights of another natural or legal person; or for reasons of important public interest of the European Union or one of its Member States.

Objection to advertising and marketing e-mails

The use of the contact data published within this data protection declaration for the purpose of sending advertising and information material that has not been expressly requested is hereby prohibited. The operators of the pages expressly reserve the right to take legal action in the event of the unsolicited sending of advertising information, such as spam e-mails.

4. Data collection on this website

Cookies

Our web pages use so-called "cookies". Cookies are small text files and do not cause any damage to your computer or device. They are stored either temporarily for the duration of a session (“session cookies”) or permanently (“permanent cookies”) on your end device. Session cookies are automatically deleted at the end of your visit, while permanent cookies remain stored on your device until you personally physically delete them, or they are automatically deleted by your web browser.

In some cases, cookies from third-party companies may also be stored on your computer or device when you enter our site (“third-party cookies”). These enable you, or us, to use certain services that are provided by a third-party company (e.g. cookies for payment processing services).

Cookies perform various functions. Many cookies are technically necessary, as certain website functions do not work without them (e.g. shopping cart functionality or the display of videos). Other cookies are used to evaluate user behavior on the website or to display advertising.

Cookies that are required to carry out electronic communication processes (“necessary cookies”) or to provide certain functions that you have requested (“functional cookies”, e.g. for the shopping cart) or to optimize the website (e.g. cookies to measure web metrics) are stored on the basis of Art. 6 (1) lit. f GDPR, unless other legal grounds have been specified. The website operator has a legitimate interest in storing cookies for a technically seamless and optimized provision of its services. Insofar as consent to the storage of cookies has been requested, the storage of them then is based exclusively upon this consent (Art. 6 para. 1 lit. a GDPR) and can be revoked at any time.

You can set your browser so that you are informed about the setting of cookies, giving you the option to allow or exclude them either generally or in individual cases. You can also use the setting within your browser to activate the automatic deletion of cookies after closing it. However, deactivating cookies altogether may limit the functionality of this website.

If cookies are used by third parties or for analytical purposes, you will be informed separately within the framework of this data protection policy and, if necessary, your consent will be requested.

Contact form

If you send us enquiries via the contact form, your details from this form, including the contact details you provide there, will be stored by us for the purpose of processing the enquiry as well as in the event of follow-up questions. This data is not passed on to anyone without your consent.

The processing of this data is based on Art. 6 (1) lit. b GDPR if your request is related to the carrying out of a contract or is necessary for the implementation of any pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of requests addressed to us (Art. 6 (1) (f) GDPR) or from your consent (Art. 6 (1) (a) GDPR) if this has been requested.

The data you enter in the contact form will remain with us until you request it to be deleted; revoke your consent to store it; or the purpose for storing said data no longer applies (e.g. after the processing of your request has been completed). Mandatory legal provisions, in particular data retention periods, remain unaffected.

Inquiry by e-mail, telephone or fax

If you contact us by e-mail, telephone or fax, your enquiry including all personal data arising from it (name, enquiry etc.) will be stored and processed by us for the purpose of processing your request. We will not pass on this data without your consent.

The processing of this data is based on Art. 6 (1) lit. b GDPR if your request is related to the carrying out of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of the requests addressed to us (Art. 6 (1) (f) GDPR) or from your consent (Art. 6 (1) (a) GDPR) if this has been requested.

The information you send to us via contact requests will remain with us until you request us to delete it; revoke your consent to store it; or the purpose for storing the data no longer applies (e.g. after processing your request has been completed). Mandatory statutory provisions, in particular statutory retention periods, remain unaffected.

5. Analytical tools and advertising

Matomo (formerly Piwik)

This website uses the open-source web analytics service Matomo. Matomo uses technologies that enable cross-page recognition to analyze user behavior (e.g. cookies or device fingerprinting). The information collected by Matomo about the use of this website is stored on our server. The IP address is anonymized before storage.

With the help of Matomo, we can collect and analyze data about visitors’ use of our website. This allows us to find out, among other things, when page views occurred and from which region they came. We also collect various log files (e.g. IP address, referrer, browsers, operating system used) and can measure whether our website visitors perform certain actions (e.g. clicks, purchases, etc.).

The use of this analysis tool is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in the anonymized analysis of user behavior in order to optimize both its website and its advertising. If a corresponding consent has been requested (e.g. consent to store cookies), the processing is carried out exclusively on the basis of Art. 6 (1) a GDPR and this consent can be revoked at any time.

IP anonymization

We use IP-anonymization when doing analyses with Matomo. Your IP address will be shortened before the analysis so that it can no longer be able to be ascribed to you.

Hosting

We host Matomo exclusively on our own servers. Therefore, all data for analysis remains with us and is not made accessible to third parties.

6. Newsletter

Newsletter data

If you would like to receive the newsletter offered on our website, we require an e-mail address from you as well as information that allows us to verify that you are the owner of the specified e-mail address and agree to receive the newsletter. Further data will not be collected or only on a voluntary basis. For the handling of the newsletter, we use newsletter service providers, which are described below.

CleverReach

This website uses CleverReach for its newsletter distribution.

 

The provider is:

CleverReach GmbH & Co KG

Schafjückenweg 2,

26180 Rastede, Germany (hereinafter: "CleverReach").

CleverReach is a service with which newsletter distribution can be organized and analyzed. The data you enter for the purpose of receiving newsletters (e.g. an email address) is stored on CleverReach's servers in Germany or in Ireland.

Newsletters sent with CleverReach allow us to analyze how recipients interact with them. We can analyze how many recipients have opened the newsletter and how often individual links in it were clicked. With the help of conversion tracking, we can also analyze whether a predefined action (e.g. purchase of a product on this website) has taken place after clicking on the link in the newsletter.

 

For more information on data analysis by CleverReach, please visit: https://www.cleverreach.com/de/funktionen/reporting-und-tracking/.

All data processing is based on your consent (Art. 6 para. 1 lit. a GDPR) and this consent can be revoked by unsubscribing from the newsletter. Therefore, if you do not wish to have your data available for analysis by CleverReach, you must unsubscribe from the newsletter. For this purpose, a corresponding link is provided in every newsletter. The legality of the data processing operations that had already been carried out before revocation of consent remain unaffected.

The data you provide for the purpose of receiving the newsletter will be stored by us or the newsletter service provider until you unsubscribe and will be deleted from the newsletter distribution list after you have unsubscribed. Data that has been stored by us for other purposes remains unaffected by this.

After you have unsubscribed from the newsletter distribution list, your e-mail address will be stored by us or the newsletter service provider in a blacklist in order to prevent future mailings. The data from the blacklist will only be used for this purpose and will not be merged with any other data. This serves both your interest and our interest in complying with the legal requirements for sending newsletters (legitimate interest within the meaning of Art. 6 (1) f GDPR). The storage in the blacklist is not limited in time. You may object to the storage if you feel your interests outweigh our legitimate interests.

 

For more details, please see CleverReach's privacy policy at: https://www.cleverreach.com/de/datenschutz/.

Order Processing Agreement

We have an order processing agreement (AVV) with the above-mentioned provider. This contract is required by data protection law and ensures that the provider only processes the personal data of our website visitors in accordance with our instructions and in compliance with the GDPR.

7. Plug-ins and tools

YouTube with enhanced privacy

This website embeds videos from YouTube. The operator of YouTube is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.

We use YouTube in extended privacy mode. According to YouTube, in this mode YouTube does not store any information about visitors to this website before they watch the video. However, the disclosure of data to YouTube partners is not necessarily excluded by the extended data protection mode. Thus, YouTube, regardless of whether or not you watch a video, establishes a connection to the Google DoubleClick network.

As soon as you start a YouTube video on this website, a connection to the YouTube servers is established. This tells the YouTube server which of our pages you have visited. If you are logged into your YouTube account, you enable YouTube to assign your web behavior directly to your personal profile. This can be prevented by first logging out of your YouTube account.

After starting a video, YouTube may store cookies on your computer or mobile device or use other comparable recognition technologies (e.g. device fingerprinting) and in this way can obtain information about visitors to this website. This information is then used, for among other things, to collect video statistics, improve the user experience, or prevent fraud attempts.

Therefore, it may happen that further data processing operations may be triggered after the start of a YouTube video over which we have no control.

We use YouTube in the interest of presenting our products and services online. This represents a legitimate interest defined within Art. 6 (1) lit. f GDPR. If the corresponding consent has been requested, the processing is carried out exclusively on that basis. Of course, you may revoke this consent at any time.

For more information about privacy at YouTube, please see their privacy policy at: https://policies.google.com/privacy?hl=de.

Vimeo without tracking (Do-Not-Track)

This website uses plugins of the video portal Vimeo.

The provider is:

Vimeo Inc

555 West 18th Street

New York, New York 10011, USA.

When you visit one of our pages equipped with Vimeo videos, a connection to the Vimeo servers is established and tells their server which of our pages you have visited. When doing this, Vimeo obtains your IP address. However, we have set Vimeo so that Vimeo will not track your user activities and not set any cookies.

We use Vimeo in the interest of presenting our products and services online. This represents a legitimate interest defined within Art. 6 (1) lit. f GDPR. If the corresponding consent has been requested, the processing is carried out exclusively on that basis. Of course, you may revoke this consent at any time.

Data transfer to the USA is based on the standard contractual clauses of the EU Commission and, according to Vimeo, on "legitimate business interests".

 

Details can be found here: https://vimeo.com/privacy.

 

For more information on how Vimeo handles user data, please see Vimeo's privacy policy at: https://vimeo.com/privacy.

 

8. Audio and video conferencing tools

Data processing

Among others tools, we use online conferencing applicatons to communicate with our clients. The individual tools we use are listed below. If you communicate with us via video or audio conference via the Internet, your personal data will be collected and processed by us and the provider of the respective conferencing tool.

The conferencing tools collect all data that you provide/enter in order to use the tools (e-mail address and/or your telephone number). Furthermore, the conferencing tools process the duration of the conference, the start and end time of participation in the conference, the number of participants and any other "contextual information" related to the communication process (metadata).

Furthermore, the provider of the tool processes all technical data that are necessary for the handling of the online communication. This includes, in particular, IP addresses, MAC addresses, device IDs, device type, operating system type and version, client version, camera type, microphone or speaker and the type of connection.

If content is exchanged, uploaded, or otherwise made available within the tool, this is also stored on the servers of the tool providers. Such content includes, but is not limited to, cloud recordings, chat/instant messages, voicemails, uploaded photos and videos, files, whiteboards, and other information shared while using the service.

Please note that we do not have full influence on, or control of, the data processing procedures of the tools used. Our options are largely determined by the corporate policy of the respective provider. For further information on data processing by the conference tools, please refer to the data protection statements of the respective tools used, which we have listed below.

Purposes and legal basis

The conference tools are used to communicate with prospective or existing contractual partners or to offer certain services to our customers (Art. 6 para. 1 lit. b GDPR). Furthermore, the use of these tools serves in the general simplification and acceleration of communication with us or our company, which is considered a legitimate interest within Art. 6 para. 1 lit. f GDPR. Insofar that consent has been requested, the tools in question are used on the basis of this consent but can, however, be revoked at any time.

Storage period

The data collected directly by us via video and conferencing tools will be deleted from our systems immediately upon the request to delete it; via revocation of consent to store it; or if the purpose for storing the data no longer applies. All stored cookies remain on your device until you physically delete them, with the mandatory legal retention periods remaining unaffected.

We have no influence on the storage period of your data, which is stored by the operators of the conference tools for their own purposes. For details, please contact the operators of the conferencing tools directly.

Conference tools used

We use the following conferencing tools:

Microsoft Teams

We use Microsoft Teams.

 

The provider is:

 

Microsoft Corporation

One Microsoft Way

Redmond, WA 98052-6399, USA.

 

For details on data processing, please refer to the Microsoft Teams privacy policy:https://privacy.microsoft.com/de-de/privacystatement.

Order Processing Agreement

We have an order processing agreement (AVV) with the above-mentioned provider. This contract is required by data protection law and ensures that the provider only processes the personal data of our website visitors in accordance with our instructions and in compliance with the GDPR.

Last updated: 23.08.2021