Privacy policy

1. Data protection at a glance

General information

The fol­low­ing notes pro­vide a sim­ple overview of what hap­pens to your per­son­al data when you vis­it this web­site. Per­son­al data is any data with which you can be per­son­al­ly iden­ti­fied. You can find detailed infor­ma­tion on the sub­ject of data pro­tec­tion in our data pro­tec­tion dec­la­ra­tion list­ed under this text.

Data collection on this website

Who is responsible for data collection on this website?

The data pro­cess­ing on this web­site is car­ried out by the web­site oper­a­tor. You can find their con­tact details in the sec­tion “Note on the respon­si­ble par­ty” in this data pro­tec­tion dec­la­ra­tion.

How do we collect your data?

Your data is col­lect­ed when you pro­vide it to us. This may be data that you enter in a con­tact form, for exam­ple.

Oth­er data is col­lect­ed auto­mat­i­cal­ly or with your con­sent when you vis­it the web­site by our IT sys­tems. These are main­ly tech­ni­cal data (e.g. inter­net browser, oper­at­ing sys­tem or time of page view). This data is col­lect­ed auto­mat­i­cal­ly as soon as you enter this web­site.

What do we use your data for?

Part of the data is col­lect­ed to ensure that the web­site is pro­vid­ed with­out errors. Oth­er data can be used to analyse your user behav­iour.

What rights do you have regarding your data?

You have the right to receive infor­ma­tion free of charge at any time about the ori­gin, recip­i­ent and pur­pose of your stored per­son­al data. You also have the right to request the cor­rec­tion or dele­tion of this data. If you have giv­en your con­sent to data pro­cess­ing, you can revoke this con­sent at any time for the future. You also have the right to request the restric­tion of the pro­cess­ing of your per­son­al data under cer­tain cir­cum­stances. Fur­ther­more, you have the right to lodge a com­plaint with the respon­si­ble super­vi­so­ry author­i­ty.

You can con­tact us at any time with regard to this and oth­er ques­tions on the sub­ject of data pro­tec­tion.

Analysis tools and third-party tools

When you vis­it this web­site, your surf­ing behav­iour can be sta­tis­ti­cal­ly eval­u­at­ed. This is main­ly done with so-called analy­sis pro­grammes.

You can find detailed infor­ma­tion on these analy­sis pro­grammes in the fol­low­ing data pro­tec­tion dec­la­ra­tion.

2. Hosting

Strato

We host our web­site with Strato. The provider is Strato AG, Pascalstraße 10, 10587 Berlin (here­inafter referred to as “Strato”). When you vis­it our web­site, Strato col­lects var­i­ous log files includ­ing your IP address­es.

For more infor­ma­tion, please refer to Strato’s pri­va­cy pol­i­cy: https://www.strato.de/datenschutz/.
Strato is used on the basis of Art. 6 para. 1 lit. f GDPR. We have a legitimate interest in presenting our website as reliably as possible. If corresponding consent has been obtained, processing takes place exclusively on the basis of Art. 6 para. 1 lit. a GDPR; consent can be revoked at any time.

Order processing
We have con­clud­ed an order pro­cess­ing con­tract (AVV) with the above-men­tioned provider. This is a con­tract required by data pro­tec­tion law, which ensures that this provider only pro­cess­es the per­son­al data of our web­site vis­i­tors in accor­dance with our instruc­tions and in com­pli­ance with the GDPR.

3. General information and mandatory information

Data protection

The oper­a­tors of these pages take the pro­tec­tion of your per­son­al data very seri­ous­ly. We treat your per­son­al data con­fi­den­tial­ly and in accor­dance with the statu­to­ry data pro­tec­tion reg­u­la­tions and this data pro­tec­tion dec­la­ra­tion.

When you use this web­site, var­i­ous per­son­al data is col­lect­ed. Per­son­al data is data with which you can be per­son­al­ly iden­ti­fied. This data pro­tec­tion dec­la­ra­tion explains which data we col­lect and what we use it for. It also explains how and for what pur­pose this hap­pens.

We would like to point out that data trans­mis­sion over the Inter­net (e.g. when com­mu­ni­cat­ing by e‑mail) can have secu­ri­ty gaps. Com­plete pro­tec­tion of data against access by third par­ties is not pos­si­ble.

Note on the responsible party

The respon­si­ble par­ty for data pro­cess­ing on this web­site is:

DHM Projektgesellschaft Hanau GmbH

Altenhöferallee 141

60438 Frankfurt/Main

Tele­phone: +49 69 9055772261

E-mail: high5-hanau@lechnergroup.com

The respon­si­ble par­ty is the nat­ur­al or legal per­son who alone or joint­ly with oth­ers decides on the pur­pos­es and means of pro­cess­ing per­son­al data (e.g. names, e‑mail address­es, etc.).

Storage period

Unless a more spe­cif­ic stor­age peri­od has been spec­i­fied with­in this pri­va­cy pol­i­cy, your per­son­al data will remain with us until the pur­pose for data pro­cess­ing no longer applies. If you assert a legit­i­mate dele­tion request or revoke your con­sent to data pro­cess­ing, your data will be delet­ed, unless we have oth­er legal­ly per­mis­si­ble rea­sons for stor­ing your per­son­al data (e.g. tax or com­mer­cial law reten­tion peri­ods); in the lat­ter case, dele­tion will take place after these rea­sons no longer apply.

General information on the legal bases of data processing on this website

If you have consented to data processing, we process your personal data on the basis of Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR, provided that special categories of data are processed in accordance with Art. 9 para. 1 GDPR. In the event of express consent to the transfer of personal data to third countries, data processing is also carried out on the basis of Art. 49 para. 1 lit. a GDPR. If you have consented to the storage of cookies or to access information in your end device (e.g. via device fingerprinting), data processing is additionally carried out on the basis of § 25 para. 1 TTDSG. Consent can be revoked at any time. If your data is required for the fulfillment of a contract or for the implementation of pre-contractual measures, we process your data on the basis of Art. 6 para. 1 lit. b GDPR. Furthermore, we process your data if it is necessary for the fulfillment of a legal obligation on the basis of Art. 6 para. 1 lit. c GDPR. Data processing may also take place on the basis of our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR. Information on the legal bases applicable in individual cases is provided in the following paragraphs of this data protection declaration.

Recipients of personal data

In the course of our busi­ness activ­i­ties, we work with var­i­ous exter­nal bod­ies. In some cas­es, it is also nec­es­sary to trans­mit per­son­al data to these exter­nal bod­ies. We only pass on per­son­al data to exter­nal bod­ies if this is nec­es­sary with­in the scope of ful­fill­ing a con­tract, if we are legal­ly obliged to do so (e.g. pass­ing on data to tax author­i­ties), if we have a legit­i­mate inter­est in pass­ing on the data pur­suant to Art. 6 para. 1 lit. f GDPR or if anoth­er legal basis allows the data to be passed on. When using data proces­sors, we only pass on the per­son­al data of our cus­tomers on the basis of a valid data pro­cess­ing agree­ment. In the case of joint pro­cess­ing, an agree­ment on joint pro­cess­ing is con­clud­ed.

Revocation of your consent to data processing

Many data pro­cess­ing oper­a­tions are only pos­si­ble with your express con­sent. You can revoke con­sent that you have already giv­en at any time. The law­ful­ness of the data pro­cess­ing car­ried out until the rev­o­ca­tion remains unaf­fect­ed by the rev­o­ca­tion.

Right to object to data collection in special cases and to direct advertising (Art. 21 GDPR)

IF DATA PROCESSING IS BASED ON ART. 6 ABS. 1 LIT. E OR F GDPR, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA AT ANY TIME FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. THE RESPECTIVE LEGAL BASIS ON WHICH PROCESSING IS BASED CAN BE FOUND IN THIS DATA PROTECTION DECLARATION. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR AFFECTED PERSONAL DATA UNLESS WE CAN PROVE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OUTWEIGH YOUR INTERESTS, RIGHTS AND FREEDOMS OR THE PROCESSING SERVES TO ASSERT, EXERCISE OR DEFEND LEGAL CLAIMS (OBJECTION ACCORDING TO ART. 21 ABS. 1 GDPR).

IF YOUR PERSONAL DATA IS PROCESSED FOR THE PURPOSE OF DIRECT ADVERTISING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH ADVERTISING; THIS ALSO APPLIES TO PROFILING, INSOFAR AS IT IS CONNECTED WITH SUCH DIRECT ADVERTISING. IF YOU OBJECT, YOUR PERSONAL DATA WILL SUBSEQUENTLY NO LONGER BE USED FOR THE PURPOSE OF DIRECT ADVERTISING (OBJECTION ACCORDING TO ART. 21 ABS. 2 GDPR).

Right to lodge a complaint with the competent supervisory authority

In the event of vio­la­tions of the GDPR, data sub­jects have the right to lodge a com­plaint with a super­vi­so­ry author­i­ty, in par­tic­u­lar in the mem­ber state of their habit­u­al res­i­dence, their place of work or the place of the alleged vio­la­tion. The right to lodge a com­plaint exists with­out prej­u­dice to any oth­er admin­is­tra­tive or judi­cial reme­dies.

Right to data portability

You have the right to have data that we pro­cess auto­mat­i­cal­ly on the basis of your con­sent or in ful­fil­ment of a con­tract hand­ed over to you or to a third par­ty in a com­mon, machine-read­able for­mat. If you request the direct trans­fer of the data to anoth­er con­troller, this will only be done if it is tech­ni­cal­ly fea­si­ble.

Information, correction and deletion

With­in the frame­work of the applic­a­ble legal pro­vi­sions, you have the right to free infor­ma­tion about your stored per­son­al data, its ori­gin and recip­i­ent and the pur­pose of data pro­cess­ing and, if applic­a­ble, a right to cor­rec­tion or dele­tion of this data at any time. You can con­tact us at any time with regard to this and oth­er ques­tions on the sub­ject of per­son­al data.

Right to restriction of processing

You have the right to request the restric­tion of the pro­cess­ing of your per­son­al data. You can con­tact us at any time. The right to restric­tion of pro­cess­ing exists in the fol­low­ing cas­es:

• If you dis­pute the accu­ra­cy of your per­son­al data stored by us, we usu­al­ly need time to ver­i­fy this. For the dura­tion of the exam­i­na­tion, you have the right to request the restric­tion of the pro­cess­ing of your per­son­al data.
• If the pro­cess­ing of your per­son­al data hap­pened/is hap­pen­ing unlaw­ful­ly, you can request the restric­tion of data pro­cess­ing instead of dele­tion.
• If we no longer need your per­son­al data, but you need it to exer­cise, defend or assert legal claims, you have the right to request the restric­tion of the pro­cess­ing of your per­son­al data instead of dele­tion.
• If you have lodged an objec­tion pur­suant to Art. 21 para. 1 GDPR, a bal­anc­ing of your inter­ests and ours must be car­ried out. As long as it has not yet been deter­mined whose inter­ests pre­vail, you have the right to request the restric­tion of the pro­cess­ing of your per­son­al data.

If you have restrict­ed the pro­cess­ing of your per­son­al data, this data – apart from its stor­age – may only be pro­cessed with your con­sent or for the asser­tion, exer­cise or defence of legal claims or for the pro­tec­tion of the rights of anoth­er nat­ur­al or legal per­son or for rea­sons of an impor­tant pub­lic inter­est of the Euro­pean Union or of a mem­ber state.

SSL or TLS encryption

This site uses SSL or TLS encryp­tion for secu­ri­ty rea­sons and to pro­tect the trans­mis­sion of con­fi­den­tial con­tent, such as orders or requests that you send to us as the site oper­a­tor. You can rec­og­nize an encrypt­ed con­nec­tion by the fact that the address line of the browser changes from “http://” to “https://” and by the lock sym­bol in your browser line.

If SSL or TLS encryp­tion is acti­vat­ed, the data that you trans­mit to us can­not be read by third par­ties.

4. Data collection on this website

Cookies

Our web­sites use so-called “cook­ies”. Cook­ies are small data pack­ages and do not cause any dam­age to your end device. They are stored either tem­porar­i­ly for the dura­tion of a ses­sion (ses­sion cook­ies) or per­ma­nent­ly (per­ma­nent cook­ies) on your end device. Ses­sion cook­ies are auto­mat­i­cal­ly delet­ed after the end of your vis­it. Per­ma­nent cook­ies remain stored on your end device until you delete them your­self or they are auto­mat­i­cal­ly delet­ed by your web browser.

Cook­ies can come from us (first-par­ty cook­ies) or from third-par­ty com­pa­nies (so-called third-par­ty cook­ies). Third-par­ty cook­ies enable the inte­gra­tion of cer­tain ser­vices from third-par­ty com­pa­nies with­in web­sites (e.g. cook­ies for pro­cess­ing pay­ment ser­vices).

Cook­ies have var­i­ous func­tions. Many cook­ies are tech­ni­cal­ly nec­es­sary, as cer­tain web­site func­tions would not work with­out them (e.g. the shop­ping cart func­tion or the dis­play of videos). Oth­er cook­ies can be used to eval­u­ate user behav­iour or for adver­tis­ing pur­pos­es.

Cook­ies that are required to car­ry out the elec­tron­ic com­mu­ni­ca­tion process, to pro­vide cer­tain func­tions that you have request­ed (e.g. for the shop­ping cart func­tion) or to opti­mize the web­site (e.g. cook­ies to mea­sure the web audi­ence) (nec­es­sary cook­ies) are stored on the basis of Art. 6 para. 1 lit. f GDPR, unless anoth­er legal basis is spec­i­fied. The web­site oper­a­tor has a legit­i­mate inter­est in stor­ing nec­es­sary cook­ies for the tech­ni­cal­ly error-free and opti­mized pro­vi­sion of its ser­vices. If con­sent to the stor­age of cook­ies and com­pa­ra­ble recog­ni­tion tech­nolo­gies has been request­ed, pro­cess­ing is car­ried out exclu­sive­ly on the basis of this con­sent (Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG); con­sent can be revoked at any time.

You can set your browser so that you are informed about the set­ting of cook­ies and only allow cook­ies in indi­vid­ual cas­es, exclude the accep­tance of cook­ies for cer­tain cas­es or gen­er­al­ly and acti­vate the auto­mat­ic dele­tion of cook­ies when clos­ing the browser. If cook­ies are deac­ti­vat­ed, the func­tion­al­i­ty of this web­site may be restrict­ed.

You can find out which cook­ies and ser­vices are used on this web­site in this data pro­tec­tion dec­la­ra­tion.

Consent with Real Cookie Banner

To man­age the cook­ies and sim­i­lar tech­nolo­gies used (track­ing pix­els, web bea­cons etc.) and the con­sents relat­ing to them, we use the con­sent tool “Real Cook­ie Ban­ner”.
Details on how “Real Cook­ie Ban­ner” works can be found at https://devowl.io/de/rcb/datenverarbeitung/.

The legal bases for processing personal data in this context are Art. 6 para. 1 lit. c GDPR and Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in the management of the cookies and similar technologies used, as well as the associated consent.

The pro­vi­sion of this per­son­al data is nei­ther con­trac­tu­al­ly required nor nec­es­sary for the con­clu­sion of a con­tract. You are not oblig­at­ed to pro­vide this data. With­out pro­vi­sion, how­ev­er, we can­not man­age your con­sents.

Contact form

If you send us inquiries via the con­tact form, your details from the inquiry form, includ­ing the con­tact data you pro­vide there, will be stored by us for the pur­pose of pro­cess­ing the inquiry and in the event of fol­low-up ques­tions. We do not pass on this data with­out your con­sent.

This data is processed on the basis of Article 6(1)(b) GDPR, provided that your request is related to the fulfillment of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of requests addressed to us (Article 6(1)(f) GDPR) or on your consent (Article 6(1)(a) GDPR) if this has been requested; consent can be withdrawn at any time.

The data you enter in the contact form will remain with us until you request us to delete it, revoke your consent to storage or the purpose for data storage no longer applies (e.g. after your request has been processed). Mandatory statutory provisions – in particular retention periods – remain unaffected.

Inquiry by e-mail, telephone or fax

If you contact us by e-mail, telephone or fax, your request, including all personal data resulting from it (name, request), will be stored and processed by us for the purpose of processing your request. We do not pass on this data without your consent.

This data is processed on the basis of Article 6(1)(b) GDPR, provided that your request is related to the fulfillment of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of requests addressed to us (Article 6(1)(f) GDPR) or on your consent (Article 6(1)(a) GDPR) if this has been requested; consent can be withdrawn at any time.

The data you send to us via contact requests will remain with us until you request us to delete it, revoke your consent to storage or the purpose for data storage no longer applies (e.g. after your request has been processed). Mandatory statutory provisions – in particular statutory retention periods – remain unaffected.

5. Analysis tools and advertising

Google Tag Manager

We use Google Tag Manager. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Tag Manager is a tool that helps us integrate tracking or statistics tools and other technologies on our website. Google Tag Manager itself does not create user profiles, store cookies or carry out independent analyses. It only serves to manage and play out the tools integrated via it. However, Google Tag Manager collects your IP address, which may also be transferred to Google’s parent company in the United States.

The Google Tag Manager is used on the basis of Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in the quick and uncomplicated integration and management of various tools on its website. If corresponding consent has been obtained, processing takes place exclusively on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information in the user’s end device (e.g. device fingerprinting) within the meaning of the TTDSG. Consent can be revoked at any time.

The company has a certification according to the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the USA that is intended to ensure compliance with European data protection standards for data processing in the USA. Every company certified under the DPF undertakes to comply with these data protection standards. Further information on this can be obtained from the provider at the following link: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt000000001L5AAI&status=Active

Google Analytics

This website uses functions of the web analysis service Google Analytics. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics enables the website operator to analyze the behavior of website visitors. The website operator receives various usage data, such as page views, duration of stay, operating systems used and the origin of the user. This data is summarized in a user ID and assigned to the respective end device of the website visitor.

Furthermore, with Google Analytics we can record your mouse and scroll movements and clicks, among other things. Google Analytics also uses various modeling approaches to supplement the collected data sets and uses machine learning technologies for data analysis.

Google Analytics uses technologies that enable the recognition of the user for the purpose of analyzing user behavior (e.g. cookies or device fingerprinting). The information collected by Google about the use of this website is usually transferred to a Google server in the USA and stored there.

The use of this service is based on your consent according to Art. 6 Para. 1 lit. a GDPR and Section 25 Para. 1 TTDSG. Consent can be withdrawn at any time.

The data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://privacy.google.com/businesses/controllerterms/mccs/.

The company has a certification according to the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the USA that is intended to ensure compliance with European data protection standards for data processing in the USA. Every company certified under the DPF undertakes to comply with these data protection standards. Further information on this can be obtained from the provider at the following link: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt000000001L5AAI&status=Active

IP anonymization

Google Analytics IP anonymization is activated. This means that your IP address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before transmission to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services associated with website and internet use to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

Browser plugin

You can prevent Google from collecting and processing your data by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de.

More information on how Google Analytics handles user data can be found in Google’s privacy policy: https://support.google.com/analytics/answer/6004245?hl=de.

Order processing

We have concluded a contract with Google for order processing and fully implement the strict requirements of the German data protection authorities when using Google Analytics.