General Data Privacy Policy

1. Data protection at a glance

1.1 General information

The following information gives you a brief summary what is happening to your personal data when:

• visiting our Websites
• doing Business with us
• participate of one of our marketing campaigns (e.g. Newsletter, Survey)

Personal data include any data that can be used to identify you. For detailed information on the subject of data privacy, please refer to our privacy policy below this section.

2. General notes and mandatory information

We take the protection of your personal data very seriously. We will treat your personal data confidentially and in accordance with the statutory data privacy regulations and this privacy policy.
When you use our websites, various personal data is collected. Personal data include any data that can be used to identify you. This privacy policy provides information on which data we collect and on how we use it. It also explains how and for what purpose this is done.
We would like to point out that data transmission over the internet (e.g. communication by e-mail) can be subject to security vulnerabilities. A hundred percent protection of the data against access by third parties is not possible.

.

2.1 Note on the responsible body

The responsible body for data processing: 

Responsible for data processing:
avato consulting ag
Siemensstraße 24-26
63755 Alzenau
Telephone: +49 6023 967490
info@avato.net

Contact details of our data protection officer:
avato consulting AG
Markus Sell
Siemensstraße 24-26
63755 Alzenau
dataprivacy@avato.net

The responsible body is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data (e.g. names, e-mail addresses, etc.).

2.2 Revocation of your consent to data processing

Many data processing operations are only possible with your express consent. You can revoke your consent at any time. An informal notification sent to us by email is sufficient for this purpose. The legality of the data processing carried out before the revocation was received, remains unaffected by the revocation.

2.3 Right to data transferability

You are entitled to being handed over a copy of the data we process automatically on the basis of your consent or in fulfilment of a contract in a common, machine-readable format (or have it handed over to a third party). If you request the direct transfer of the data to a third responsible person, this will only be done as far as it is technically feasible.

2.4 SSL- or TLS encryption

This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential contents, such as orders or requests that you send to us as the site operator. You can recognise an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line.

If SSL- bor TLS encryption is activated, the data you transmit to us cannot be read by third parties.

2.5 Information, blocking, erasure

Within the framework of the applicable legal provisions, you are always entitled to information about your stored personal data, their origin and recipient and the purpose of data processing and, if applicable, a to correction, blocking or erasure of this data. You may contact us at any time at the address given in the imprint with regard to this and other questions on the subject of personal data.

2.6 Objection to advertising mails

We hereby object to the use of contact data published within the framework of the imprint obligation for the transmission of advertising and information materials which are not expressly requested. We expressly reserve the right to take legal action against unsolicited mailing or e-mailing of spam and other similar advertising materials.

3. Data collection on our websites

3.1 Cookies

Some of the Internet pages use so-called cookies. Cookies do not damage your computer and do not contain viruses. Cookies serve to make our offer more user-friendly, more effective and safer. Cookies are small text files which are stored on your computer by your browser.
Most of the cookies we use are so-called “session cookies”. They are automatically deleted at the end of your visit. Other cookies remain stored on your device until you delete them. These cookies enable us to recognise your browser when you re-visit our websites.
You can set your browser in such a way that you are informed about the setting of cookies and only allow cookies in individual cases, accept cookies for certain cases or generally exclude them and activate the automatic deletion of cookies when closing the browser. If cookies are deactivated, the functionality of our websites may be restricted.
Cookies, which are necessary for the execution of the electronic communication process or for the provision of certain functions requested by you (e.g. shopping basket function), are stored on the basis of article 6, section 1 (f) GDPR. We have a legitimate interest in the storage of cookies for the technically error-free and optimised provision of his services. As far as other cookies (e.g. cookies for the analysis of your surfing behaviour) are stored, these are treated separately in this privacy policy.

3.2 Server log files

• The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:
  browser type and browser version
  operating system used
  referrer URL
• host name of the accessing computer
• time of the server request
• IP address

These data will not be merged with other data sources.
Data processing is carried based on article 6, section 1 (f) GDPR, which permits the processing of data for the fulfilment of a contract or pre-contractual measures.

3.3 Contact form

If you send us enquiries through the contact form, your details from the enquiry form including the contact data you provide there will be stored by us for the purpose of processing the enquiry and in the event of follow-up questions. We will not pass on this data without your consent.
The processing of the data entered in the contact form is therefore carried out exclusively on the basis of your consent (article 6, section 1 (f) GDPR). You can revoke this consent at any time. An informal notification sent to us by email is sufficient for this purpose. The legality of the data processing operations carried out before the revocation was received, remains unaffected by the revocation.
The data entered by you in the contact form will remain with us until you request us to delete it, revoke your consent to storage or the storage purpose no longer exists (e.g. after your request has been processed). Mandatory statutory provisions – especially retention periods – remain unaffected.

4. Social media

4.1 Facebook plugins (Like & Share button)

Our pages offer Facebook plugins; the provider is Facebook Inc., 1 Hacker Way, Menlo Park, California 94025, USA. You can recognise Facebook plugins by the Facebook logo or the “Like” button on our page. An overview of the Facebook plugins can be found here: https://developers.facebook.com/docs/plugins/.
When you visit our pages, the plugin establishes a direct connection between your browser and the Facebook server. Facebook receives the information that you have visited our site with your IP address. If you click the Facebook “Like” button while logged in to your Facebook account, you can link the content of our pages to your Facebook profile. This allows Facebook to associate your visit of our pages with your user account. We would like to point out that as the provider of the pages, we do not have any knowledge of the content of the transmitted data or its usage by Facebook. For more information, please see Facebook’s privacy policy at:  https://de-de.facebook.com/policy.php.
If you do not want Facebook to be able to associate your visits to our pages to your Facebook user account, please log out of your Facebook user account.

4.2 Twitter plugin

Our pages offer functions of the Twitter service. These features are provided by Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. By using Twitter and the “Re-Tweet” function, the websites you visit are linked to your Twitter account and made known to other users. This involves data being transmitted to Twitter. We would like to point out that, as the provider of these pages, we do not have any knowledge of the content of the transmitted data or its usage by Twitter. For more information, please see Twitter’s privacy policy at https://twitter.com/privacy.
You can change your Twitter privacy settings in your account settings at https://twitter.com/account/settings.

4.3 Google+ plugin

Our pages use Google+ functions. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Collection and dissemination of information: Using the Google+ button, you can publish information worldwide. The Google+ button provides you and other users with personalised content from Google and our partners. Google stores both, the information that you have given +1 for content as well as information about the page you viewed when clicking +1. Your +1 can be displayed as a piece of information along with your profile name and photo in Google services, such as search results, or in your Google profile, or elsewhere on websites and ads on the Internet.
Google records information about your +1 activities to improve Google services for you and others. To use the Google+ button, you need a globally visible, public Google profile, which must contain at least the name chosen for the profile. This name is used in all Google services. In some cases, this name may also replace a different name you used when sharing contents through your Google Account. The identity of your Google profile may be displayed to users who know your email address or have other identifying information about you.
Use of the information collected: In addition to the purposes described above, the information you provide will be used in accordance with Google’s latest privacy policy. Google may publish aggregated statistics about users’ +1 activity or share them with users and partners, such as publishers, advertisers or affiliated websites.

4.4 LinkedIn plugin

Our websites uses features of the LinkedIn network. The provider is LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA.
Each time you access one of our pages that contains LinkedIn functions, a connection is established to LinkedIn servers. LinkedIn will be informed of the fact that you have visited our websites with your IP address. If you click the LinkedIn “Recommend” button while logged into your LinkedIn account, LinkedIn will be able to associate your visit to our websites with you and your user account. We would like to point out that, as the provider of the pages, we have no knowledge of the content of the transmitted data or its use by LinkedIn.
For more information, see LinkedIn’s privacy policy at: https://www.linkedin.com/legal/privacy-policy.

4.5 XING plugin

Our websites uses functions of the  XING network. The provider is XING AG, Dammtorstraße 29–32, 20354 Hamburg, Germany.
Each time you access one of our pages that contains XING functions, a connection is established to XING servers. No personal data are stored in this process as far as we know. In particular, no IP addresses are stored and no user behaviour evaluation takes place.
Further information on data protection and the XING Share button can be found in the privacy policy of XING at: https://www.xing.com/app/share?op=data_protection.

5. Analysis tools and advertising

5.1 Google Analytics

Our websites use functions of the web Google Analytics analysis service. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Google Analytics uses so-called “cookies”. These are text files that are stored on your computer and allow an analysis of your use of our websites. The information generated by the cookie about your use of our websites will generally be transmitted to a Google server in the USA and stored there.
Google Analytics cookies are stored on the basis of article 6, section 1 (f) GDPR. We have a legitimate interest in analysing user behaviour in order to optimise both our websites and his advertising.

5.1.1 IP anonymisation

We have activated the IP anonymisation function on our websites. As a result, your IP address will be truncated by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area prior to transmission to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. On our behalf, Google will use this information to evaluate your use of our websites, to compile reports on website activity and to provide other services relating to website activity and internet usage. The IP address transmitted by your browser as part of the Google Analytics service will not be merged with other data from Google.

5.1.2 Browser plugin

You may refuse the use of cookies by selecting the appropriate settings in your browser. However, please note that if you do this you may not be able to use the full functionality of our websites. You can also prevent Google from collecting the data generated by the cookie as well as data related to your use of our websites (including your IP address) and from processing this data; to do this, download and install the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de.

5.1.3 Objection to data collection

You can prevent Google Analytics from collecting your data by clicking on the following link. An opt-out cookie is set to prevent your information from being collected during future visits to our websites: Deactivate Google Analytics.
For more information on how Google Analytics treats user data, please see Google’s privacy policy: https://support.google.com/analytics/answer/6004245?hl=de.

5.1.4 Order data processing

We have concluded a contract with Google for order data processing and fully implement the strict requirements of the German data protection authorities with regard to the use of Google Analytics.

5.1.5 Demographic characteristics of Google Analytics

Our websites are using Google Analytics’ Demographics feature. This allows reports to be created that contain information about the age, gender and interests of the site visitors. These data are derived from interest-related advertising by Google and from visitor data from third-party providers. These data cannot be traced back to a specific person. You can deactivate this function at any time in the ad settings of your Google account or generally prohibit the collection of your data by Google Analytics as described under “Objection to data collection”.

5.2   WordPress Stats

Our websites are using the WordPress Stats tool to statistically evaluate visitor accesses. The provider is Automattic Inc., 60 29th Street #343, San Francisco, CA 94110–4929, USA.
WordPress Stats uses cookies that are stored on your computer and allow an analysis of the use of our websites. The information generated by cookies about the use of our websites is stored on servers located in the USA. Your IP address will be anonymised after processing and before storage.
“WordPress Stats” cookies will remain on your device until you delete them.
WordPress Stats cookies are stored on the basis of article 6, section 1 (f) GDPR. We have a legitimate interest in the anonymous analysis of user behaviour in order to optimise both our websites and his advertising.
You can set your browser in such a way that you are informed about the setting of cookies and only allow cookies in individual cases, accept cookies for certain cases or generally exclude them and activate the automatic deletion of cookies when closing the browser. If cookies are deactivated, the functionality of our websites may be restricted.
You may opt out of the collection and use of your data in the future by clicking on this link to set an opt-out cookie in your browser: https://www.quantcast.com/opt-out/.
If you delete the cookies on your computer, you must set the opt-out cookie again.

5.3   Google Web Fonts

This page uses so-called Web Fonts provided by Google for the uniform display of fonts. When you view a page, your browser loads the required Web Fonts into your browser cache in order to display texts and fonts correctly.
For this purpose, the browser you are using must connect to Google’s servers. This way, Google will be informed that our websites have been accessed from your IP address. The use of Google Web Fonts is in the interest of a uniform and appealing presentation of our websites contents. This constitutes a legitimate interest within the meaning of article 6, section 1 (f) GDPR.
If your browser does not support Web Fonts, a standard font will be used by your computer.
Further information on Google Web Fonts can be found at https://developers.google.com/fonts/faq and in the Google privacy policy: https://www.google.com/policies/privacy/.

5.4   Google Maps

This page uses the Google Maps map service through an API. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
To use the functions of Google Maps, it is necessary to store your IP address. This information is usually transferred to a Google server in the USA and stored there. The provider of this site has no influence on this data transfer.
The use of Google Maps is in the interest of an appealing presentation of our websites contents and an easy retrievability of the places indicated by us on our websites. This constitutes a legitimate interest within the meaning of article 6, section 1 (f) GDPR.
For more information on how Google treats user data, please refer to: https://www.google.de/intl/de/policies/privacy/.