User Data Privacy Protection Notice

We collect and automatically store information in our server log files that your browser is automatically sending us. These are:

• Browser type and version
• Operating system in use
• The internet page from which you access our internet page  (known as Referring URL)
• Each page viewed 
• Host name of your computer
• Date and time of server request
• Your IP address
• Your internet service provider (ISP)
• Other similar data and information that will be used for emergency notification in the event of a breach of our information technology systems.  

When gathering this general data and information, we do not form opinions regarding you. Rather, this information is important to us in order to:

• provide accurate content in our internet pages,
• optimize the content of our internet pages and advertising,
• ensure the durable functionality of our information technology systems and the strategy of our web pages, and
• furnish vital information to enforcement agencies in the event of a cyberattack.

The basis for data processing is the German Regulation: Art. 6, Par. 1, lit. b DSGVO, which permits the processing of data required for the necessary steps in order processing or contract fulfillment.

Your IP address will be automatically deleted after one week. 

Pursuant to legal requirements, our internet page includes information that allows rapid electronic connection to our company and direct communication with us by e-mail. If you contact us by e-mail or via our coded contact form, the personal data transmitted by you is automatically stored. Such voluntary personal data is stored solely for the purposes of processing your inquiry or for contacting you. No personal data is shared with third parties.

The legal basis for the processing of newsletter subscription data is the German Regulation: Art. 6, Par. 1, lit. f, or possibly lit. b DSGVO.

The data you have entered into our contact form will remain with us until you request us to delete it or until the purpose for the data has expired, (e.g., after the processing of your inquiry or sales contract is complete). Legal regulations such as mandatory retention periods remain unaffected.

We collect and process personal data from applicants for the sole purpose of processing the application. Processing can also occur electronically, especially when application documents  are transmitted via e-mail or via the form provided on our web page.

If we agree to an employment contract with an applicant, the transmitted data is stored for the purpose of processing the employment as specified by legal regulations. If there is no employment contract, the application documents will be deleted automatically 2 months after notification of rejection, provided said deletion is not counter to any other legally justifiable interests of our company. A legally justifiable interest in this context would be, for example, for providing proof of compliance with the General Equality Act (AGG). In this case, the application documents are stored for 6 months.

The legal basis for processing of application information is German Regulation: Art. 88 DSGVO in connection with § 26 BDSG.

Our internet page utilizes Google Analytics (with anonymous function). Google Analytics is a web analysis service of Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.

Google Analytics operates with text files that are stored in your unit (known as cookies). Data is collected about what internet page provided access to our internet page (known as referrer), which subpages were viewed, and how frequently and for how long our internet pages were viewed.

This data is automatically transmitted with each connection to a Google server in the USA and stored there. No data regarding you will be combined with other data already stored at Google.  However, Google may potentially share this collected personal data with third parties.

Google uses this information on our behalf to provide us with an analysis of website usage, website activities, and other services. This helps us to optimize our website.

We have concluded a so-called “contract data processing agreement” with Google. 

We use the masking function „anonymize IP“. Prior to transmitting your IP address to the Google servers in the USA, it will be abridged inside the EU. A transfer of the original IP address rarely occurs, and it is then abbreviated on servers in the USA.

Note on the processing of your data collected on this website in the USA by Google, Facebook, LinkedIn, YouTube: By agreeing to the use of these cookies, you also consent to your data being processed in the USA (Art. 49 Paragraph 1 Clause 1 lit. a GDPR). The US is assessed by the European Court of Justice as a country with an inadequate level of data protection according to EU standards. In particular, there is a risk that your data may be processed by US authorities for control and monitoring purposes, possibly even without the possibility of redress.

You can prevent this process by taking the following measures:

• Prevent the use of cookies by our internet page at any time by using a special setting on your internet browser, and thus the long-term prevention of cookies.
• An already placed cookie can be deleted by Google Analytics via the internet browser or other software

Additional information and current data protection regulations at Google can be viewed at: https://www.google.de/intl/de/policies/privacy/ and under http://www.google.com/analytics/terms/de.html. Google Analytics is explained in detail at: https://www.google.com/intl/de_de/analytics/

We have a legitimate interest in the use of Google Analytics which is in predominant use. There is minimal access via the anonymous page design and less interference into the right to personal privacy (see Art. 6, Par. 1, lit. f DSGVO).

The website operator uses Google Ads. Google Ads is an online advertising programme of Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.
 
Google Ads enables us to display adverts in the Google search engine or on third-party websites when the user enters certain search terms into Google (keyword targeting). Furthermore, targeted adverts can be displayed based on the user data available at Google (e.g. location data and interests) (target group targeting). As the website operator, we can evaluate this data quantitatively, for example by analysing which search terms have led to the display of our advertisements and how many advertisements have led to corresponding clicks.
 
The use of this service is based on your consent in accordance with Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG. You can revoke your consent at any time.
 
For more information on how Google processes your data under its own responsibility, please refer to Google's privacy policy: policies.google.com/privacy.
 
Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: policies.google.com/privacy/frameworks and privacy.google.com/businesses/controllerterms/mccs/.

This website uses Google Conversion Tracking. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.
 
With the help of Google conversion tracking, Google and we can recognise whether the user has carried out certain actions. For example, we can analyse which buttons on our website were clicked how often and which products were viewed or purchased particularly frequently. This information is used to create conversion statistics. We find out the total number of users who have clicked on our adverts and what actions they have taken. We do not receive any information with which we can personally identify the user. Google itself uses cookies or comparable recognition technologies for identification purposes.
 
The use of this service is based on your consent in accordance with Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG. Consent can be revoked at any time.
You can find more information about Google Conversion Tracking in Google's privacy policy: policies.google.com/privacy.

You can prevent this process by taking the following measures:

• Prevent the use of cookies by our internet page at any time by using a special setting on your internet browser, and thus the long-term prevention of cookies.
• An already placed cookie can be deleted by Google Analytics via the internet browser or other software

This website uses the visitor action pixel from Meta to measure conversions. The provider of this service is Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. However, according to Meta, the data collected is also transferred to the USA and other third countries.

This allows the behavior of site visitors to be tracked after they have been redirected to the provider's website by clicking on a Meta ad. This allows the effectiveness of the meta ads to be evaluated for statistical and market research purposes and future advertising measures to be optimized.

The data collected is anonymous to us as the operator of this website; we cannot draw any conclusions about the identity of the users. However, the data is stored and processed by Meta so that a connection to the respective user profile on Facebook or Instagram is possible and Meta can use the data for its own advertising purposes in accordance with the Meta Data Usage Policy (https://de-de.facebook.com/about/privacy/). This enables Meta to place advertisements on Facebook or Instagram pages and other advertising channels. This use of the data cannot be influenced by us as the website operator.

The use of this service is based on your consent in accordance with Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG. Consent can be revoked at any time.

Insofar as personal data is collected on our website with the help of the tool described here and forwarded to Meta, we and Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland are jointly responsible for this data processing (Art. 26 GDPR). The joint responsibility is limited exclusively to the collection of the data and its transfer to Meta. The processing carried out by Meta after forwarding is not part of the joint responsibility. The obligations incumbent on us jointly have been set out in a joint processing agreement. The text of the agreement can be found at: www.facebook.com/legal/controller_addendum. According to this agreement, we are responsible for providing the data protection information when using the Meta tool and for the secure implementation of the tool on our website in accordance with data protection law. Meta is responsible for the data security of the Meta products. You can assert data subject rights (e.g. requests for information) regarding the data processed by Facebook or Instagram directly with Meta. If you assert your data subject rights with us, we are obliged to forward them to Meta.

Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: www.facebook.com/legal/EU_data_transfer_addendum and
de-de.facebook.com/help/566994660333381

You can find further information on protecting your privacy in Meta's privacy policy: de-de.facebook.com/about/privacy/.

You can also deactivate the remarketing function “Custom Audiences” in the settings for advertisements at www.facebook.com/ads/preferences/. You must be logged in to Facebook to do this.

If you do not have a Facebook or Instagram account, you can deactivate usage-based advertising from Meta on the website of the European Interactive Digital Advertising Alliance: www.youronlinechoices.com/de/praferenzmanagement/.

The company is certified according to the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the USA that is intended to ensure compliance with European data protection standards for data processing in the USA. Every company certified under the DPF undertakes to comply with these data protection standards. Further information on this can be obtained from the provider at the following link: www.dataprivacyframework.gov/participant/4452.

We use the web analysis tool ‘LinkedIn Insight Tag’ on individual landing pages. The legal basis for the processing of your personal data is Art. 6 para. 1 lit. f EU GDPR. The processing of your personal data enables us to analyse your surfing behaviour. Based on the data obtained, we are able to compile information about the use of the individual areas of our website. Your personal data will be deleted as soon as it is no longer required for our aforementioned purposes.

You can manage the processing of your files via our cookie tool.

Please see https://www.facebook.com/KellerLufttechnik/ for our own facebook fanpage (“Fanpage”) by which you can contact us and leave comments as well. Personal data such as your name is used to reply to your inquiry or comments.

When you visit us by the fanpage, Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Irland („Facebook“) uses your IP address or the page from which you have activated the fanpage (so-called referrer-URL). This also happens if you do not have an own facebook account and just read our fanpage. Details of personal data that are processed by facebookk are mentioned on facebook’s  data guideline under https://www.facebook.com/privacy/explanation . According to a judgment of the European Court of Justice from June 05, 2018 (reference C-210/16) there is a common responsibility between fanpage providers like us and facebook for so-called insights data. Insights data are collected personal data relating to a visit or interaction of persons on / by a fanpage and its content.

To meet the common responsibility according to the jurisdiction of the European Court of Justice there is a special agreement between facebook and us. For details please see https://www.facebook.com/legal/terms/page_controller_addendum.
The vested right for you according to the data protection law can be claimed according to Art. 26 Abs. 3 DS-GVO (facebook or us). Details about your rights are mentioned under “your rights”.

Purpose of data processing
Keller Lufttechnik utilizes Microsoft Teams to schedule conference calls, online meetings, video conferences and/or web conferences (hereinafter referred to as "online meetings"), among our employees (in their home offices or inside the company), or between them and third parties such as business partners, including customer care, manufacturer support and continuous improvement. Microsoft Teams is a service of Microsoft Corporation.

Responsibility
Keller Lufttechnik GmbH + Co. KG is responsible for data processing that is directly related to the systematic planning of online meetings.

Important note: Should you visit the Microsoft Teams website, the provider of Microsoft Teams is responsible for data processing. However, accessing the website is necessary only in order to download the software for using Microsoft Teams. In case one does not wish to or cannot access the Microsoft Teams app, one can also access Microsoft Teams by using one‘s browser. In this case, the service is also provided by the Microsoft Teams website.

Legal bases in general
If personal data is processed by employees of Keller Lufttechnik GmbH + Co. KG, § 26 BDSG is the legal basis for such data processing. If, in connection with using Microsoft Teams, personal data is not required for the establishment, performance or termination of employment, but is nevertheless a fundamental component of the use of Microsoft Teams, Art. 6, Par.1, letter f) DSGVO is the legal basis for such data processing. In these cases we are interested in the efficient performance of online meetings.

Furthermore, the legal basis for data processing during the conduct of online meetings is Art. 6, Par.1, letter b) DSGVO, provided the meetings are conducted within the context of existing contractual relationships.
If no contractual relationship exists, the legal basis is Art. 6, Par.1, letter f) DSGVO. Here too, we are interested in the productivity of online meetings.

Which data is processed?
When using Microsoft Teams, a variety of data is processed. The extent of the data depends on the information provided prior to or during participation in an online meeting.

The following personal data is subject to processing:
•    User details: e.g., displayed name, e-mail address (if applicable), profile photo (optional), preferred language
•    Meeting metadata: e.g., date, time, meeting ID, phone numbers, location
•    Text, audio and video data: You may be able to use the chat function during an online meeting. To this end, any text entries submitted will be processed in order to display them during the online meeting. To enable the presentation of videos and the playback of audio, the data from the microphone of the terminal device as well as from a connected video camera will be processed for the duration of the meeting. Users may opt to turn off the camera or mute the microphone themselves at any time by using the Microsoft Teams applications.

Scope of data processing
Keller Lufttechnik uses Microsoft teams to organize online meetings. If online meetings are to be recorded, this is communicated transparently in advance and, if necessary, consent is requested.

The chat content is logged when using Microsoft Teams. Files that users share during chats are stored in the OneDrive for Business account of the user who shared the file. Files that team members share in a channel are stored on the team's SharePoint site.

Automated decision making as defined by article 22 DSGVO is not used.

Recipient
Personal data processed in connection with participation in online meetings is generally not passed on to third parties, unless it is specifically intended to be so disclosed. Please note that content from online meetings, as well as personal meetings, is often used to communicate information with customers, interested parties or third parties and is, therefore, intended for disclosure.
Other recipients: The provider of Microsoft Teams necessarily obtains knowledge of the above-mentioned data to the extent that this is provided for in our contractual processing agreement with Microsoft Teams.

Data processing outside the European Union
Data processing outside the European Union (EU) does not take place as a matter of principle, since we have limited our storage location to data centers within the European Union. However, we cannot exclude the potential option that data may be routed via Internet servers located outside the EU. This may be the case in particular if participants in online meetings are located in a third country.

However, the data is encrypted by Microsoft during transmission over the cloud, and is, therefore, protected from unauthorized access by third parties.

Deletion of data
As a matter of principle, we delete personal data when there is no further need for storage. A requirement can exist in particular if the data is still required in order to fulfill contractual obligations, to examine and grant or to be able to settle warranties and, if applicable, guarantee claims. In the case of legal storage obligations, deletion shall only be considered after the expiry of the respective storage requirement.

Further information on data protection at Microsoft Corporation
For additional information, please access the links provided below:

privacy.microsoft.com/de-de/privacystatement
www.microsoft.com/de-de/trust-center

You have the right:

• to demand information about any personal data processed by us, in accordance with  Art. 15, DSGVO.  In particular, you can request information about the purpose of the use of your personal data, types of recipients to whom your data was disclosed, the planned retention period, the right to correct, delete, or restrict access to your data , the right to request the source of your data if it was not collected by us, and demand the specifics of any automated decision- making functions such as customer profiling,  as well as any other material information;
   
• to request the immediate correction of any erroneous personal data stored by us, in accordance with Art. 16 DSGVO;
   
• to demand, according to Art. 17 DSGVO, the deletion of personal data stored by us, unless it is required by us for the purposes of exercising the right of freedom of expression or information, to fulfill any legal obligations that may be in the public interest, or for the assertion, execution or in defense of any legal claims;
   
• to restrict the processing of your data according to Art. 18 DSGVO – if the accuracy of the data is denied by you, if the processing was illegal but you refuse its deletion because you need it in order to assert, execute or defend your legal rights, or if you have filed an objection according to Art. 21 DSGVO;
   
• to request your personal data that you have provided to us, in a structured, common and machine-readable format,  according to Art. 20 DSGVO,  or to request transmission to another responsible party;
   
• to revoke a previously submitted approval at any time, according to Art. 7 Abs. 3 DSGVO. This means that we must discontinue processing data which is based upon a previous approval, and
   
• according to Art. 77 DSGVO – you have the right to lodge a complaint with a supervisory authority. As a rule, you may contact the supervisory authorities for your place of residence, for your workplace, or for our headquarters site.

If your personal data is processed on the basis of a legitimate interest according to Art. 6 Abs. 1 S. 1 lit. f DSGVO, you retain the right – according to Art. 21 DSGVO – to enter an objection against the processing of your personal data, provided there are valid reasons relating to a special situation, or if you object to any form of direct mail advertisement. In the latter case, you have a general right to enter an objection which is executed by us without you having to divulge your particular situation.

If you wish to exercise your right to lodge a complaint, please send an e-mail to matthias.hausser@keller-lufttechnik.de