Privacy Policy
1. Introduction and terms
1.1 General
In operating the IR-ONE.de website (hereinafter referred to as the "website"), we process personal data. We treat them confidentially and process them in accordance with the applicable laws – in particular the German Data Protection Regulation (DSGVO) and the German Federal Data Protection Act (BDSG-neu). Through our data protection regulations, we will inform you which personal data we collect from you, for which purposes and on which legal basis we use that data and, if applicable, to whom we disclose it. In addition, we will explain what rights you have to protect and enforce your data privacy.
1.2 Terms
Our data protection provisions contain technical terms that are used in the German DSGVO and the BDSG-neu regulations. For your better understanding, we will explain in advance these terms in simple terms:
1.2.1
"Personal data" means any information relating to an identified or identifiable individual (Art. 4 No. 1 DSGVO). Information about an identified person can be, for example, the name or the e-mail address. However, personal data is also data for which the identity is not immediately apparent, but can be determined by combining someone’s information or that of others and thus finding out who he or she is. A person can be identified, for example, by providing their address or bank details, date of birth or user name, IP addresses and/or location data. What is relevant here is all information that in any way allows a conclusion to be drawn about a person.
1.2.2
"Processing" is understood by Art. 4 No. 2 DSGVO to mean any operation in connection with personal data. This applies in particular to the collection, recording, organization, arrangement, storage, adaptation or alteration, retrieval, consultation, use, disclosure, transmission, dissemination or any other form of making available, aligning or combining, restricting, deleting or destroying personal data.
2. Responsible persons and contact persons
2.1 Persons in charge
The organization responsible for data processing is: IR-ONE AG & Co. KG
Address: Schauenburgerstraße 42–44, 20095 Hamburg, Germany
E-Mail: info@ir-one.de
Members of the Management Board: Frank Riebel and Alexander Rossa
2.2 Contact for data protection
Name: Frank Riebel
E-Mail: info@ir-one.de
3. Processing framework
3.1 Website
Within the framework of the website, we process your personal data that are listed in detail below in sections 3 to 4. We only process the data you provide when using our offering.
Your data will be processed exclusively by us and will not be sold, lent or passed on to third parties. If we use the help of external service providers to process your personal data, this will be carried out within the framework of the order processing, in which we as the client are authorized to issue instructions to our contractors. For the operation of our website, we use external service providers for hosting. If additional external service providers are used for the individual processing operations listed in sections 6 to 11, they will be named there. Data transfer to third countries does not take place and is not planned. We will provide information about exceptions to this principle in the processing operations described below.
4. Processing in detail
4.1 Provision of the website and server log files
4.1.1 Description of processing
Each time you call up the website, we automatically collect the information your browser transmits to our server. This is also stored in the log files of our system. The following data are collected:
- Browser software used
- Operating system used
- Time of access, date and time of day
- Files/pages accessed by the website user
- Anonymized IP address
We have to temporarily store your IP address in the system in order to deliver our website to a user's terminal device. For this purpose, the user's IP address must remain stored for a period of seven days, after which it will be anonymized. However, your IP address is not recorded in our log files.
4.1.2 Purpose
Processing is carried out to enable the website to be called up and to ensure its stability and security. In addition, processing serves the statistical evaluation and improvement of our online offering.
4.1.3 Legal basis
Processing is necessary to protect the overriding legitimate interests of the controller (Art. 6 para. 1 lit. f DSGVO). Our legitimate interest lies in the purpose named in section 4.1.2.
4.1.4 Storage period
The personalized data will be stored for seven days and then deleted.
4.2 Cookies and local storage
4.2.1 Description of processing
Our website uses cookies. Cookies are small text files that are stored on the user's terminal device when visiting a website. Cookies contain information that enables the recognition of a terminal device and, possibly, certain functions of a website.
To enable you to adapt the website functions to your personal needs and usage, we also use local storage technology (aka local data or local memory) in addition to cookies. In this process, data is stored locally in the cache of your browser. The data continues to exist and can be read even after you close the browser window or exit the program – unless you delete the cache.
Local storage allows your preferences when using the website to be stored on your computer and used by you. We use the local storage data to store your consent to the storage of cookies and to the use of Google Maps (see section 4.3.1) (see 4.4.1 Consent management plug-in "Cookiebot").
4.2.2 Purpose
We use cookies and local storage to make our website more user-friendly and offer the functions described in section 4.2.1.
4.2.3 Legal basis
Processing is necessary to protect the overriding legitimate interests of the controller (Art. 6 (1) (f) DSGVO). Our legitimate interest lies in the purpose named in section 4.2.2.
4.2.4 Storage period
See 4.2.1 Note: Since cookies are stored on your terminal device, you as a user also have full control of this storage and thus also of the cookies’ storage duration. By changing the settings in your internet browser, you can disable or restrict the transfer of cookies. Cookies that have already been stored can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, individual functions of our website may not be able to be used or may only be used to a limited extent.
The same applies to local storage. Here you can empty or delete the cache of your browser. If local storage data is deleted, individual functions of our website may not be able to be used or only to a limited extent.
4.3 Google Maps
4.3.1
On our website, we use Google Maps (API) from Google LLC., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). Google Maps is a web service for displaying interactive (land) maps to visually display geographical information. By using this service, our location is displayed to you and a possible approach is facilitated. Already when calling up those sub-pages in which the map of Google Maps is integrated, information about your use of our website (such as your IP address) is transmitted to Google servers in the USA and stored there. This occurs regardless of whether Google provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data will be directly assigned to your account. If you do not want the assignment with your profile at Google, you must log out before activating the button. Google stores your data (even for users who are not logged in) as usage profiles and evaluates them. Such an evaluation is carried out in particular in accordance with Art. 6 para. 1 lit.f DSGVO on the basis of Google's legitimate interests in the insertion of personalized advertising, market research and/or needs-based design of its website. You have the right to object to the creation of these user profiles, whereby you must contact Google to exercise this right.
If you do not agree to the future transmission of your data to Google in the context of the use of Google Maps, you have the option of completely deactivating the Google Maps web service by switching off the JavaScript application in your browser. On the other hand, you can revoke your consent to the use of the Google Maps plugin at any time within our consent management. However, the deactivation or revocation does not affect the data that has already been transferred to Google. In both cases, the map display on this website can then no longer be used. The terms of use of Google can be viewed at www.google.de/intl/de/policies/terms/regional.html; the additional terms of use for Google Maps can be found at www.google.com/intl/de_US/help/terms_maps.html. Detailed information on data protection in connection with the use of Google Maps can be found on the Google website ("Google Privacy Policy"): www.google.de/intl/de/policies/privacy/.
4.3.2 Purpose
We use plug-ins from Google Maps to make our website more user-friendly and informative. Through using this service, our location is displayed to you and a possible journey to us is made easier.
4.3.3 Legal basis
This processing is necessary to protect the overriding legitimate interests of the controller (Art. 6 para. 1 lit. f DSGVO). Our legitimate interest lies in the purpose named in section 4.4.2.
4.3.4 Storage period
See 4.2.1.
4.4 Cookiebot
4.4.1
We use the Cookiebot consent management tool on our website.
Cookiebot is a trademark of Usercentrics A/S, a company registered in Denmark. The tool enables you to give consent to data processing via the website, in particular setting cookies and activating scripts, as well as to exercising your right to withdraw consent already given. Data processing serves the purpose of obtaining and documenting required consents to data processing and thus complying with legal obligations. Cookies may be used for this purpose. Among other things, the following information may be collected and transmitted to Cookiebot: anonymized IP address, date and time of consent, URL from which the consent was sent, anonymous, random, encrypted key, consent status. This data is not shared with any other third parties. Data processing is carried out to fulfill a legal obligation on the basis of Art. 6 para. 1 lit. c DSGVO. For more information on terms of use and data protection at Cookiebot, please visit www.cookiebot.com/de/privacy-policy/.
4.4.2 Purpose
This tool enables us to comply with the legal requirement to obtain and document consent to data processing and thus to comply with legal obligations.
4.4.3 Legal basis
This processing is necessary to protect the overriding legitimate interests of the controller (Art. 6 (1) (f) DSGVO). Our legitimate interest lies in the purpose named in section 4.5.2.
4.4.4 Storage period
See 4.2.1.
4.5 External links
4.5.1 Description of processing
Our website contains external links (links) to other websites, whose content we have no influence on. For this reason, we cannot assume any liability for this content’s compliance with the provisions of data protection law. The respective provider of the linked website is responsible for the legality of the information provided. At the time of linking, no legal violations were apparent. If such an infringement becomes known, the link will be removed immediately. When opening the external pages, we do not store any personal data.
4.5.2 Legal basis
This linking is necessary to protect the overriding legitimate interests of the responsible party (Art. 6 para. 1 lit. f DSGVO). Our legitimate interest lies in the purposes named in the following paragraphs.
5. Security measures
To protect your personal data from unauthorized access, we have provided our website with an SSL certificate. SSL stands for Secure Sockets Layer and encrypts the communication of data between a website and the user's terminal device. You can recognize active SSL encryption by a small lock logo displayed on the far left of the browser's address bar.
6. Your rights
6.1 Data subject rights
With regard to the data processing described above, you are entitled to the following data subject rights:
6.1.1 Information (Art. 15 DSGVO)
You have the right to request confirmation from us as to whether we are processing personal data relating to you. If this is the case, you have the right to information about this personal data and to the information listed in detail in Art. 15 DSGVO under the conditions specified in Art. 15 DSGVO.
6.1.2 Correction (Art. 16 DSGVO)
You have the right to demand that we correct any inaccurate personal data concerning you and, if necessary, complete any incomplete personal data without undue delay.
6.1.3 Deletion (Art. 17 DSGVO)
You have the right to demand that we delete personal data concerning you without undue delay, provided one of the reasons listed in detail in Art. 17 DSGVO applies, e.g. if your data is no longer required for the purposes we pursue.
6.1.4 Restriction of data processing (Art. 18 DSGVO)
You have the right to request us to restrict processing if one of the conditions listed in Art. 18 DSGVO applies; for example, if you dispute the accuracy of your personal data, data processing will be restricted for the period of time that allows us to verify the accuracy of your data.
6.1.5 Data portability (Art. 20 DSGVO)
You have the right, under the conditions set out in Art. 20 DSGVO, to request that data relating to you be handed over in a structured, common and machine-readable format.
6.1.6 Withdrawal of consent (Art. 7 (3) DSGVO)
You have the right to revoke your consent at any time in the case of processing based on consent. The revocation applies from the time it is asserted. In other words, it has effect for the future. The processing therefore does not become unlawful retroactively as a result of the revocation of consent.
6.1.7 Complaint (Art. 77 DSGVO)
If you believe that the processing of your personal data violates the EU General Data Protection Regulation (GDPR), you have the right to lodge a complaint with a supervisory authority. You can exercise this right at a supervisory authority in the EU member state of your residence, workplace or the place of the alleged infringement.
6.1.8 Prohibition of automated decisions/profiling (Art. 22 DSGVO)
Decisions that have legal effects concerning you or which significantly affect you must not be based solely on automated processing of personal data, including profiling. We are glad to inform you that we do not use automated decision-making, including profiling, with regard to your personal data.
6.1.9 Right to object (Art. 21 DSGVO)
If we process your personal data on the basis of Art. 6(1)(f) DSGVO (to protect overriding legitimate interests), you have the right to object to this under the conditions listed in Art. 21 DSGVO. However, this only applies insofar as there are reasons arising from your particular situation. After an objection has been raised, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for processing that override your interests, rights and freedoms. Moreover, we do not have to stop processing if it serves the assertion, exercise or defense of legal claims. In any case, and regardless of any specific situation, you have the right to object at any time to the processing of your personal data for direct marketing purposes.