DATA PRIVACY DECLARATION

1. information on the collection of personal data

Thank you for visiting our website and for your interest in our company. We take the protection of your personal data very seriously. We want you to feel comfortable and secure when you visit our website. We process personal data in accordance with the data protection regulations of the country in which the responsible organisation is based. This data protection declaration applies only to the Corteco GmbH website and not to websites to which links may be provided.

In the following, we provide information about the collection of personal data when using our website. Personal data is all data that can be related to you personally, e.g. name, address, e-mail addresses, user behaviour.

2. controller pursuant to Art. 4 para. 7 of the EU General Data Protection Regulation (GDPR) is

Corteco GmbH
Badener Str. 4
69493 Hirschberg
Hirschberg, Germany

Tel: +49 6201 25964 0
Fax: +49 6201 25964-11
E-mail: service@corteco.de

3. you can reach our data protection officer at

legitimis GmbH
Ball 1
51429 Bergisch Gladbach

datenschutz-corteco@legitimis.com
Telephone: +49 2202 28 941-0

When you contact us by e-mail or via a contact form, the data you provide (your e-mail address, possibly your name and telephone number) will be stored by us in order to answer your questions. We delete the data arising in this context after storage is no longer necessary, or restrict processing if there are statutory retention obligations.

If we use contracted service providers for individual functions of our offer or would like to use your data for advertising purposes, we will inform you in detail below about the respective processes. We will also state the specified criteria for the storage period.

4. Your rights

You have the following rights with regard to your personal data:

– Right of access,

– Right to rectification or erasure,

– Right to restriction of processing,

– Right to object to processing,

– right to data portability.

You also have the right to complain to a data protection supervisory authority about the processing of your personal data by us. You can find an overview of the state supervisory authorities here: https://www.bfdi.bund.de/DE/Service/Anschriften/Laender/Laender-node.html.  

5. collection of personal data when visiting our website

When using the website for information purposes only, i.e. if you do not register or otherwise provide us with information, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure stability and security (legal basis is Art. 6 para. 1 sentence 1 lit. f GDPR):

  • IP address
  • Date and time of the enquiry
  • Time zone difference to Greenwich Mean Time (GMT)
  • Content of the request (specific page)
  • Access status/HTTP status code
  • Amount of data transferred in each case
  • Website from which the request originates
  • browser
  • Operating system and its interface
  • Language and version of the browser software.

6. use of cookies:

Furthermore, cookies are stored on your computer when you use the website. Cookies are small text files that are stored on your hard drive assigned to the browser you are using and through which certain information flows to the body that sets the cookie (in this case us). Cookies cannot execute programmes or transmit viruses to your computer. They are used to make the website more user-friendly and effective overall.

Our website uses Borlabs Cookie consent technology to obtain your consent to the storage of certain cookies in your browser or to the use of certain technologies and to document this in accordance with data protection regulations. The provider of this technology is Borlabs GmbH, Rübenkamp 32, 22305 Hamburg, Germany (hereinafter referred to as Borlabs).

When you enter our website, a Borlabs cookie is stored in your browser, in which the consent you have given or the revocation of this consent is stored. This data is not passed on to the provider of Borlabs Cookie.

The data collected will be stored until you ask us to delete it or delete the Borlabs cookie yourself or until the purpose for storing the data no longer applies. Mandatory statutory retention periods remain unaffected. Details on data processing by Borlabs Cookie can be found at https://de.borlabs.io/kb/welche-daten-speichert-borlabs-cookie/.

A list of the individual cookies can be viewed via the Borlabs plug-in in the footer of the Corteco website and offers the option of revoking consent.

7. Further functions and offers of our website

(1) In addition to the purely informational use of our website, we offer various services that you can use if you are interested. To do so, you must generally provide additional personal data that we use to provide the respective service and for which the aforementioned data processing principles apply.

(2) In some cases, we use external service providers to process your data. These have been carefully selected and commissioned by us, are bound by our instructions and are regularly monitored.

(3) Furthermore, we may pass on your personal data to third parties if we offer participation in promotions, competitions, contracts or similar services together with partners. You will receive more detailed information on this when you provide your personal data or in the description of the offer below.

(4) If our service providers or partners are based in a country outside the European Economic Area (EEA), we will inform you of the consequences of this circumstance in the description of the offer.

(5) If you have given your consent to the processing of your data, you can revoke this at any time. Such a revocation affects the permissibility of processing your personal data after you have given it to us.

(6) If we base the processing of your personal data on the balancing of interests, you can object to the processing. This is the case if, in particular, the processing is not necessary for the fulfilment of a contract with you, which is described by us in the following description of the functions. When exercising such an objection, we ask you to explain the reasons why we should not process your personal data as we have done. In the event of your justified objection, we will examine the situation and either discontinue or adapt the data processing or point out to you our compelling reasons worthy of protection on the basis of which we will continue the processing.

(7) Of course, you can object to the processing of your personal data for advertising and data analysis purposes at any time. You can inform us of your objection to advertising using the following contact details: service@corteco.de.

8. Customer data and newsletter

(1) With your consent, you can subscribe to our newsletter, with which we inform you about our current interesting offers. The advertised goods and services are named in the declaration of consent. We also collect personal data as part of our customer data management, e.g. as part of our discussions with interested parties and sales partners or from publicly accessible sources (e.g. professional networks).

(2) We use the so-called double opt-in procedure to register for our newsletter. This means that after you have registered, we will send you an email to the email address you have provided in which we ask you to confirm that you wish to receive the newsletter. If you do not confirm this within twenty-one days, your registration will be automatically cancelled. We will store your e-mail address until you unsubscribe from the newsletter. The sole purpose of storing the data is to be able to send you the newsletter.

(3) We collect personal data for sending the newsletter or for addressing our customers such as sales and contact persons and interested parties. Contact data such as title, first name, surname and email address are stored in our CRM (MS Dynamics 365). The data is stored on servers in the European Economic Area.

The legal basis for sending the newsletter is your express consent within the meaning of Art. 6 para. 1 sentence 1 lit. a GDPR and for customer data management our legitimate interest pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR.

(4) You can revoke your consent to the sending of the newsletter at any time and unsubscribe from the newsletter. You can declare your cancellation by clicking on the link provided in every newsletter email or by sending an email to service@corteco.de or by sending a message to the contact details provided in the legal notice. You can also object to storage in our customer data system unless there are compelling reasons such as the assertion, exercise or defence of legal claims.

(5) We would like to point out that we evaluate your user behaviour when sending the newsletter. For this analysis, the emails sent contain so-called web beacons, also known as tracking pixels. These are one-pixel image files that link to our website and thus enable us to evaluate your user behaviour. Links received in the newsletter also contain this ID. The data is collected on a personal basis and the IDs are linked to your other personal data in our CRM system (MS Dynamics 365 Marketing) for marketing and optimisation purposes. You can object to this tracking at any time by unsubscribing from the newsletter. You can do this by clicking on the link provided at the end of every newsletter email or by sending an email to dataprivacy@fst.com. Such tracking is also not possible if you have deactivated the display of images in your e-mail programme by default. In this case, however, the newsletter may not be displayed in full and you may not be able to use all the functions. If you display the images manually, the above-mentioned tracking will take place.

We use the data obtained in this way to create a user profile in order to optimise the newsletter and provide you with the best possible information. We record when you read our newsletters, which links you click on in them and deduce your personal interests from this.

9. use of Google Analytics 4 and Google Tag Manager

(1) This website uses Google Analytics, a web analytics service provided by Google Inc (“Google”). Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyse how users use the site. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. However, if IP anonymisation is activated on this website, your IP address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area beforehand. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. Google will use this information on behalf of the operator of this website to analyse your use of the website, to compile reports on website activity and to provide the website operator with other services relating to website activity and internet usage.

(2) The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

(3) You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de.

(4) We use Google Analytics to analyse and regularly improve the use of our website. We can use the statistics obtained to improve our offer and make it more interesting for you as a user.

(5) Information from the third-party provider: Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. You can find the terms of use here: http://www.google.com/analytics/terms/de.html

Overview of data protection: http://www.google.com/intl/de/analytics/learn/privacy.html, as well as the privacy policy: http://www.google.de/intl/de/policies/privacy.

(6) This website also uses Google Analytics for a cross-device analysis of visitor flows, which is carried out via a user ID. You can deactivate the cross-device analysis of your usage in your customer account under “My data”, “Personal data” at https://myaccount.google.com

(7) Data at user and event level that is linked to cookies, user IDs and advertising IDs (e.g. DoubleClick cookies, Android advertising ID, IDFA [Apple identifier for advertisers]) is stored by us for 14 months before it is automatically deleted.

(8) Use of Google Tag Manager: Google Tag Manager is a solution that allows marketers to manage website tags via an interface. The Tag Manager tool itself (which implements the tags) is a cookie-free domain and does not collect any personal data. The tool triggers other tags, which in turn may collect data. Google Tag Manager does not access this data. If a deactivation has been made at domain or cookie level, this remains in place for all tracking tags that are implemented with Google Tag Manager. https://marketingplatform.google.com/about/analytics/tag-manager/use-policy/ Click here to be excluded from collection via Google Tag Manager.

10. integration of third-party services

YouTube

(1) We have integrated YouTube videos into our online offering, which are stored on https://www.youtube.com/ and can be played directly from our website. These are all integrated in “extended data protection mode”, i.e. no data about you as a user is transferred to YouTube if you do not play the videos. Only when you play the videos will the data mentioned in paragraph 2 be transmitted. We have no influence on this data transfer.

(2) When you visit the website, the third-party provider receives the information that you have accessed the corresponding subpage of our website. In addition, the data specified in this declaration will be transmitted. This occurs regardless of whether this third-party provider provides a user account through which you are logged in or whether no user account exists. If you are logged in with the plug-in provider, this data is directly assigned to your account. If you do not wish to be associated with your profile with the plug-in provider, you must log out before activating the button.

(3) The plug-in provider stores this data as a user profile and uses it for the purposes of advertising, market research and/or customising its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide customised advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact the respective plug-in provider to exercise this right.

(4) Further information on the purpose and scope of data collection and its processing by the plug-in provider can be found in the data protection declarations of these providers provided below. There you will also find further information on your rights in this regard and setting options to protect your privacy: https://www.google.de/intl/de/policies/privacy

11. Use of Microsoft services

We use various services of the Microsoft® Corporation for telephone conferences, appointments, surveys or for collaboration with our employees, customers, interested parties and applicants. You can find the data protection information here: https://www.corteco.com/data-security-microsoft-services/

12 Flockler

(1) Type and purpose of processing: Content from Corteco’s social media sites is bundled on our website via a plug-in solution from the provider Flockler Oy, Rautatienkatu 21 B, 33100, Tampere, Finland. Flockler is a social media aggregator tool for curating social media feeds and presenting social media content. The aggregated content contains external links to the social media platforms. By clicking on the links, you visit these websites.

(2) Legal basis: Flockler does not store any information about your visit. The aggregated content is offered in such a way that data can only be transmitted after your consent (Art. 6 para. 1 lit. a) GDPR) by means of a so-called “two-click solution”. As part of the “two-click solution”, you will be asked to expressly and knowingly decide whether you wish to use Flockler on our website. You will only be able to access this content once you have given your consent.

(3) Recipients: Recipients of the data may be technical service providers who act as processors for the operation and maintenance of our website. Further recipients can be found in the cookie settings. By agreeing to the use of Flockler (as part of the 2-click solution), you consent to the loading of this content and the transfer of data to Flocker. For more information, read the privacy policy of the Flockler service: https://flockler.com/privacy- policy and https://flockler.com/de/dsgvo

(4) Storage period: The data will be deleted as soon as you withdraw your consent or the data is no longer required to fulfil the purpose for which it was collected.

(5) Mandatory or required provision: The provision of your data is voluntary, solely on the basis of your consent. If you prevent access, this may result in functional restrictions on the website.

(6) Revocation of consent: You can revoke your consent for the future in the cookie settings.

13. Social networks

We have our own presence on various social media to present ourselves, provide information, get in touch with the respective users and communicate with them. You can find information on data protection here: https://www.corteco.com/data-security-social-media/

Last update: 15.05.2024