Land- en taalkeuze
Jouw land: Netherlands
Jouw taal: Dutch
Wilt u overschakelen naar de versie voor uw land? Welcome to ZIEHL-ABEGG!
You are visiting our Website from Greece?

Op de website voor jouw regio vind je informatie over de voor jou relevante producten, contactgegevens en nieuws.

Unfortunately, there is no Greek language version of our website. However, you can stay on this page or contact our sales representative in Greece directly.

PRIVACY STATEMENT

Your privacy is important to us
Thank you for your interest in our organization and its products and services. Your privacy matters to us and we want you to feel comfortable visiting our site. The protection of your privacy in the processing of your personal data is a very important concern. We observe the provisions of the EU General Data Protection Regulation (GDPR) as a matter of course. In using this website, you are deemed to have read and agreed to the following privacy statement. We want you to know about the information we gather online, why we gather it and how we use it. We have implemented technical and organizational measures to ensure that data protection regulations are observed both by us and where data is passed on to external service providers.

1 Paragraph, name and address of the person responsible

ZIEHL-ABEGG Benelux B.V.
Middelweg 20A
5253 CA Nieuwkuijk
Nederland
Phone: +31 73 594 7000
E-mail: info@ziehl-abegg.nl 
Website: www.ziehl-abegg.nl

2 Personal data

Personal data means any information relating to the personal or material circumstances of an identified or identifiable natural person ("data subject"). This includes details such as your name, address, telephone number and e-mail address. You are not required to disclose personal data in order to use our website. However, in certain cases, we need your name, address and other details so that we can provide you with the desired services.For example, this concerns the use of contact forms or the software download registration. The same also applies, for example, if we are sending you information, dispatching goods that you have ordered or answering individual questions. In such cases, we will specifically draw your attention to the use of the data. In addition, we will only store and process data that has been supplied to us voluntarily or automatically. Where you make use of our services, we will normally collect only the data we need to provide the service concerned. If we request further data from you, the information need only be supplied voluntarily. We will process personal data solely in order to provide the requested service and to safeguard our own legitimate business interests. We store your data for as long as we need to perform the above-mentioned services. The criteria for the deletion of data arise from the tax regulations.

3 Purpose for which personal data is held

We will generally use the (personal) data you have made available to us to answer your enquiries, process your orders or ensure you have access to specific information or offers.
 In particular, such information or offerings comprise:

  • Information retrieval concerning products, product features and product services
  • Software for better use of our product offerings
  • Registrations for customer access
  • Online Portals
  • Contact and service request forms
  • Contacting via electronic post (e-mail) and telephone

 Which data are collected in each case is evident in the respective input forms.

4 Legal bases of the processing of personal data

We process personal data in compliance with the regulations of the GDPR. 

  • For the performance of contractual obligations (Article 6 (1) b) GDPR)
    Processing of personal data takes place for the purpose of initiation and implementation of contracts with you and the execution of orders, as well as for all the activities required for the operation and administration of an industrial company. In particular, processing serves the purpose of performance of contractually agreed product deliveries (electric motors, fans, and electronic devices) and associated services incl. software. The purposes of data processing mainly depend on the products selected. For further details on the purpose of data processing, please refer to the respective contractual documentation and terms and conditions.
  • Within the scope of balancing of interests (Article 6 (1) f) GDPR)
    We process your personal data beyond the actual performance of the contract if it is necessary to safeguard legitimate, primarily economic interests of ours or of third parties. In particular, this takes place for the following purposes: Conducting advertising, also direct advertising as well as market and opinion research. Optimisation and further development of products. Assertion of legal claims and defence in legal disputes. Detection, prevention and solving of criminal offences. Ensuring the security and operability of our IT systems:
  • On account of your consent (Article 6 (1) a) GDPR)
    Insofar as you have granted us consent to process your personal data, the respective consent is the legal basis for the processing covered by the consent. In particular, this concerns any consent you may have granted to a promotional approach by telephone or email. You may revoke this consent granted at any time. Please note that the revocation will only apply for the future. Any processing done before revocation remains legal. On account of legal requirements (Article 6 (1) c) GDPR)
    Our company is subject to various mandatory legal obligations under commercial and tax law, e.g. legal retention and documentation duties with regard to business documents. We must process your personal data according to the applicable laws in order to meet these legal requirements.

5 Recipients or categories of recipients of personal data

The use of your data takes place only to the extent required in each case. If needed to perform the necessary service, your data will be forwarded as necessary within the ZIEHL-ABEGG Group. Insofar as external service providers (hosting providers) are used to operate this website, the external service providers will receive access to your data only to the extent required for the performance of their respective tasks and functions in each case. 

Mittwald
Hosting provider is Mittwald CM Service GmbH & Co. KG, Königsberger Straße 4-6, 32339 Espelkamp (hereinafter referred to as Mittwald). Details can be found in Mittwald's privacy policy: https://www.mittwald.de/datenschutz (German).
Mittwald is used on the basis of Art. 6 para. 1 lit. f GDPR. We have a legitimate interest in ensuring that our website is displayed as reliably as possible. If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG, insofar as the consent includes the storage of cookies or access to information in the user's terminal device (e.g. device fingerprinting) within the meaning of the TDDDG. Consent can be revoked at any time.

Order processing
We have concluded an order processing contract (AVV) for the use of the above-mentioned service. This is a contract prescribed by data protection law, which ensures that it processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.

In addition, in order to maintain customer relationships it may be necessary for us or a service company commissioned by us to use these personal data in order to inform you of offerings which are useful for your business activity or to better fulfil the tasks and demands of our customers. We may forward your payment date to credit institutions to settle payments. Service or transport companies commissioned by us or credit institutions also undertake to comply with these data protection provisions. We are authorised in individual cases to give information on your data to responsible authorities in so far as they request your data to exercise legal powers (e.g. criminal prosecution). We will neither sell your personal data to third parties nor market them otherwise.

6 Personal data captured electronically

When our website is used, the following data is saved for organizational and technical reasons: the names of the pages visited, the browser and operating system used, the date and time of access, search engines used, names of downloaded files and their IP addresses. This technical data is evaluated anonymously and exclusively for statistical purposes, so that we can continue to optimize our websites and increase the attractiveness of the content on an ongoing basis. This anonymous data is stored separately from personal information on secured systems and cannot be assigned to specific people. However, this data is not merged by ZIEHL-ABEGG Benelux B.V. with other data sources. Therefore, your personal data and your privacy are protected at all times. ZIEHL-ABEGG Benelux B.V. reserves the right to transfer this data to law enforcement bodies for the prosecution of offences.

7 Children

Persons under the age of 18 should not supply us with personal data without the consent of a parent or guardian. We do not request personal data from persons under the age of 18, neither do we collect such data nor forward it to third parties.

8 Security

We have implemented technical and organizational security measures to protect your personal data against loss, destruction, manipulation or unauthorized access. All our employees and all third parties involved in data processing are obliged to comply with the EU General Data Protection Regulation (GDPR) and ensure confidentiality in the handling of personal data. Where personal data is collected and processed, the transmission of this data is encrypted to prevent misuse by third parties. Our security measures are revised on an ongoing basis to encompass new technological developments. 

9 Changes to our data protection provisions

We reserve the right to amend our security and data protection measures if this is necessitated by technological developments. In this case, we will also adjust our privacy information accordingly. Please therefore ensure that you are referring to the most up-to-date version of our privacy statement.

10 Retention of data

We are subject to various retention and documentation duties arising among other things from the Company Code [Unternehmensgesetzbuch (UGB)] and  the Federal Tax Code [Bundesabgabenordnung (BAO)]The retention or documentation periods specified there are  up to 10 years. Ultimately, the storage period is also assessed according to the legal periods of limitation, which may, for example, amount to 3 years or up to 30 years according to sections  of the  General Civil Code [Allgemeines Bürgerliches Gesetztbuch (ABGB)].

11 Disclaimer for the content of linked external sites

This privacy statement does not extend to the use of any external links that may be included on our websites. If we include links, we endeavour to ensure that they also comply with our data protection and security standards. However, we have no control over the compliance of other website providers with data protection and security provisions. We therefore ask you to refer to the websites of the providers concerned for information on their own privacy policies.

12 Right to information

You can receive information at any time free of charge on the data stored by us about you, concerning its origin and recipient as well as the purpose of data processing. In addition, you have a legal right to the rectification, blocking and erasure of your personal data. 

13 Right of rectification

You have the right to demand from us the rectification of incorrect or incomplete personal data concerning you.

14 Right of deletion

You have the right to demand the deletion of your data provided that the conditions referred to in Art. 17 GDPR exist. In this respect, you may for example demand the deletion of your data in so far as they are no longer necessary for the purposes for which they were collected. Furthermore, you may demand the deletion if we process your data on the basis of your consent and you revoke this consent.

15 Right to limitation of processing

You have the right to demand the limitation of the processing of your data if the conditions according to Art. 18 GDPR exist. This is, for example, the case if you dispute the correctness of your data. You may then demand the limitation of the processing for the duration it takes to check the correctness of the data.

16 Right to object

You have the right to object at any time to the processing of your personal data pursuant to Art. 6 para. 1 letter e GDPR (data processing in the public interest) or Art. 6 para. 1 letter f GDPR (data processing on the basis of a balance of interests) on grounds relating to your particular situation. If you object, we will only process your personal data if we can prove compelling legitimate reasons that outweigh your interests, rights and freedoms, or for the establishment, exercise or defence of legal claims.

17 Right to data portability

Should data processing be on the basis of a consent or contract performance and this also takes place using automated processing, you have the right to obtain your data in a structured, standard, machine-readable format and to transfer these data to another data processor.

18 Right of complaint

You also have the right according to Art. 77 GDPR to file a complaint with the responsible supervisory authority if you believe that the processing of your personal data was not done lawfully. The supervisory authority responsible for you is the  “Österreichische Datenschutzbehörde”, Wickenburggasse 8, 1080 Wien, phone: +43 1 521 52-25 69, e-mail: dsb@dsb.gv.at

19 Right of revocation

Moreover, you can revoke your consent to the collection and storage of your personal data on our part at any time. We kindly request that you use the revocation possibilities specified here. In all other cases we request that you send the revocation to the contact data specified in the legal notice.

20 Does an obligation exist for me to supply data (Article 13 (2) e) GDPR)?

As part of our business relationship, you must supply only those personal data which are required for the initiation and implementation of a business relationship or which we are legally obliged to collect. Without these data we will usually have to reject the conclusion of a contract or the execution of an order or will no longer be able to carry out an existing contract and will have to terminate it if necessary.

21 Cookies

If you visit one of our websites, it is possible that we will store some information on your computer in the form of a cookie. Cookies are small text files sent by a web server to your browser and saved on the hard disk of your computer.

No personal user data at all is saved in this process; it only involves Internet protocol addresses. The purpose of this information is to allow our server to recognize your computer automatically when you next visit our websites; this will make navigation easier for you. Cookies allow us, for example, to customize a website to your interests or save your password so that you do not have to input it every time. Before permanent cookies are set, you must agree to them. The agreement may be revoked at any time by deleting the cookies. For further details, please refer to the description of your internet browser.

Please note that any changes you make to these settings only apply to the particular browser program in which you made them. If you use different browsers or different terminal devices, you have to change the settings for each browser and each device. You are furthermore able to delete cookies from your storage medium at any time. Please refer to your browser's Help function for information on how to change your cookie settings and delete cookies.

Further information about deactivating flash cookies/ local shared objects can be found here:
Information about deactivating local shared objects

If you choose not to accept cookies it may result in a reduced availability of the services provided on our website.

You can change your Privacy Settings here.

22 Youtube Videos

We incorporate YouTube videos into some of our web pages. The operator of the respective plug-ins is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. If you visit a page with the YouTube plug-in, a connection is established to the YouTube servers. YouTube is informed which pages you visit. If you are logged into your YouTube account, YouTube can assign your surfing behaviour to you personally. You can prevent this by logging out of your YouTube account beforehand. If a YouTube video is started, the provider uses cookies which collect information about user behaviour. Anyone who has deactivated the storing of cookies for the Google ad program, can expect such cookies not to be used when watching YouTube videos. But YouTube also stores non-personal usage information in other cookies. If you want to prevent this, then you must block the storing of cookies in the browser. For further information on data protection at YouTube, please refer to the data privacy statement of the provider under: https://policies.google.com/privacy.  

23 Google Analytics Remarketing

Our websites use the features of Google Analytics Remarketing combined with the cross-device capabilities of Google Ads and DoubleClick. This service is provided by Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA.

This feature makes it possible to link target audiences for promotional marketing created with Google Analytics Remarketing to the cross-device capabilities of Google Ads and Google DoubleClick. This allows advertising to be displayed based on your personal interests, identified based on your previous usage and surfing behavior on one device (e.g. your mobile phone), on other devices (such as a tablet or computer).

Once you have given your consent, Google will associate your web and app browsing history with your Google Account for this purpose. That way, any device that signs in to your Google Account can use the same personalized promotional messaging.

To support this feature, Google Analytics collects Google-authenticated IDs of users that are temporarily linked to our Google Analytics data to define and create audiences for cross-device ad promotion.

You can permanently opt out of cross-device remarketing/targeting by turning off personalized advertising in your Google Account; follow this link: https://myadcenter.google.com/personalizationoff?hl=en.

The aggregation of the data collected in your Google Account data is based solely on your consent, which you may give or withdraw from Google per Art. 6 (1) (a) GDPR. For data collection operations not merged into your Google Account (for example, because you do not have a Google Account or have objected to the merge), the collection of data is based on Art. 6 (1) (f) GDPR. The website operator has a legitimate interest in analyzing anonymous user behavior for promotional purposes.

For more information and the Google Privacy Policy, go to: https://policies.google.com/technologies/ads.

24 Google Tag Manager

Google Tag Manager is a service from Google Inc. and is used to manage website tags via an interface ensuring the release of other tags which are listed here in the privacy statement. Google Tag Manager does not access this data and does not collect personal data itself.

25 Google Analytics

This website uses Google Analytics, a web analysis service of Google Inc. (‘Google’). Google Analytics uses so-called ‘cookies’, text files stored on your computer which facilitate the analysis of your use of the website. The information about your use of this website generated by the cookies is usually transferred to a Google server in the USA where it is stored. In the event of the activation of the IP- anonymisation on this website, your IP address will, however, be truncated first by Google within Member States of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there. Google will use this information on behalf of the operator of this website in order to analyse your use, to compile reports on the website activities and to provide other services associated with the website use to the operator. The IP address of your browser transmitted in the context of Google Analytics is not linked with other data by Google. You can prevent the storage of cookies by changing your browser settings accordingly; however, we must point out that, in this case, you may not be able to use all functions on this website in full. You can also prevent the recording of the data generated by the cookie and related to your use of the website (incl. your IP address) and its transmission to Google, as well as the processing of this data by Google, by downloading and installing the browser add-on available under the following link. The current link is https://tools.google.com/dlpage/gaoptout?hl=en. If your web browser does not support the above-mentioned link to the browser add-on by Google (e.g. when accessing our Internet offer from your smartphone), you can also prevent the recording by Google Analytics by clicking on the following link. An opt-out cookie will then be set that prevents the recording of your data when you visit this website in the future: Deactivate Google Analytics.

Further information on conditions of use and data protection can be found at https://marketingplatform.google.com/about/analytics/terms/gb/ or https://policies.google.com/?hl=en. Please note that the "gat._anonymizeIp();" code was added to this Google Analytics website to ensure the anonymous registration of IP addresses (so-called IP masking).

26 Google Looker Studio

Insofar as you have given your consent, we use Google Looker Studio, an analysis service of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043-1351, USA ("Google").

We use the Google Looker Studio software to visualize data regarding user behavior on our website in the form of graphical reports. In doing so, we use data from the web analytics service Google Analytics as well as other data sources (such as Google Ads, Google Analytics, SEMrush). Further information on the use of Google Looker Studio can be found at https://docs.cloud.google.com/looker/docs/studio.

Data is also regularly transmitted to a Google server in the USA as part of the processing operations. There is an agreement with Google in accordance with the EU standard contractual clauses, which ensures the adequacy of data protection even in the case of processing in the USA and other third countries (Art. 46 GDPR).

The processing is carried out pursuant to Art. 6 para. 1 p. 1 lit. a) GDPR on the basis of your consent. If you give your consent to the use of the cookies in question, you also expressly consent to the transfer of data to the USA as described above (Art. 49 para. 1 lit. a GDPR).

If you deactivate the use of Google Analytics for the future at https://tools.google.com/dlpage/gaoptout?hl=en, our data will also not be used in Google Looker Studio. By clicking the link, we set a cookie (opt-out cookie) in your browser, which signals to us to stop the use of Google Analytics for your end device. Please note that you will have to perform this process again if you remove the cookies in your browser.

27 Google Fonts

Our Internet pages contain external fonts from Google Fonts to ensure a graphically appealing representation. Google Fonts is a service from Google Inc. ("Google"). These web fonts can be incorporated by calling a server, usually a Google server in the USA. By this means, the information is transmitted to the server which of our Internet pages you have visited. In addition, the IP address of the visitor of these Internet pages is stored by Google. The fonts are stored in your browser cache, which prevents multiple loading. This has a positive effect on the loading speed of our Internet pages

For further information, please refer to the data protection information of Google under: https://policies.google.com/privacy

28 Google Maps

Our Internet pages use Google Maps to represent geographical information visually. When using Google maps, Google Inc. also collects, processes and uses data on the use of map functions by visitors. For further information on data processing by Google, please refer to: https://policies.google.com/privacy.

29 LinkedIn Insight-Tag

The LinkedIn Insight Tag is a piece of lightweight JavaScript code that we add to our website to enable in-depth campaign reporting and unlock valuable insights about our website visitors. As a LinkedIn Marketing Solutions customer, we use the LinkedIn Insight Tag to track conversions, retarget website visitors, and unlock additional insights about members interacting with our ads.

The LinkedIn Insight Tag enables the collection of data regarding members’ visits to our website, including the URL, referrer, IP address, device and browser characteristics (User Agent), and timestamp. The IP addresses are truncated or (when used for reaching members across devices) hashed, and members’ direct identifiers are removed within seven days in order to make the data pseudonymous. This remaining pseudonymized data is then deleted within 180 days.

LinkedIn does not share the personal data with the website owner, it only provides reports and alerts (which do not identify you) about the website audience and ad performance. LinkedIn also provides retargeting for website visitors, enabling the website owner to show personalized ads off its website by using this data, but without identifying the member. We also use data that does not identify you to improve ad relevance and reach members across devices. LinkedIn members can control the use of their personal data for advertising purposes through their account settings.

30 Hotjar

We use Hotjar in order to better understand our users’ needs and to optimize this service and experience. Hotjar is a technology service that helps us better understand our users experience (e.g. how much time they spend on which pages, which links they choose to click, what users do and don’t like, etc.) and this enables us to build and maintain our service with user feedback. Hotjar uses cookies and other technologies to collect data on our users’ behavior and their devices (in particular device's IP address (captured and stored only in anonymized form), device screen size, device type (unique device identifiers), browser information, geographic location (country only), preferred language used to display our website). Hotjar stores this information in a pseudonymized user profile. Neither Hotjar nor we will ever use this information to identify individual users or to match it with further data on an individual user. For further details, please see Hotjar’s privacy policy by clicking on this link. If you wish to opt out of this processing activity, please contact dpo@hotjar.com with the subject line “Opt-Out of Marketing”.

31 Facebook

a. Facebook Pixel Custom Audience
Our website uses Facebook Pixel Custom Audience, a service of Facebook Inc., Menlo Park, California, USA. Among other things, Facebook Pixel Custom Audience uses cookies that are stored across devices and allow an analysis of the use of the website. As part of the use of data, in particular the IP address and activities of the user are transmitted to a Facebook Inc. server and stored there. If necessary, Facebook Inc. will transfer this information to third parties if this is required by law or if such data is processed by third parties. The data itself primarily serves to provide user-based, cross-device advertising. You can prevent the collection and transfer of personal data (in particular your IP address) and the processing of this data by disabling the execution of Java Script in your browser or installing a tool such as ‘NoScript’. For more information on privacy when using Facebook Pixel Custom Audience, please visit the following link: https://www.facebook.com/full_data_use_policy. An opt-out option is available for download at the following link: https://www.youronlinechoices.com/nl/uw-advertentie-voorkeuren.

b. Facebook
Our pages are loaded with plug-ins from the company Facebook Inc., 1601 Willow Road, Menlo Park, CA 94025, USA and its affiliate Facebook Ireland Ltd., Hanover Reach, 5-7 Hanover Quay, Dublin 2, Ireland (Facebook). If you have activated scripts in your browser and have not installed a script blocker, your browser will forward your personal data to Facebook without asking you individually. When logged on, an immediate assignment of the data to the Facebook profile is possible. For more information, please see the Facebook privacy policy (https://www.facebook.com/privacy/policy/). If you do not wish Facebook to associate your visit to our website with your Facebook account, please log out of your Facebook user account and block the execution of Facebook script content in your browser, e.g. with the script blockers from www.noscript.net or www.ghostery.com.

c. Facebook Impressions
On our site JavaScript code is loaded from the company Facebook Inc., Menlo Park, California, USA (hereinafter: Facebook Impressions). If you have activated JavaScript in your browser and have not installed a JavaScript blocker, your browser may transfer personal data to Facebook Impressions. For more information, see the Facebook Impressions Privacy Policy: https://www.facebook.com/privacy/policy/. In order to prevent the execution of JavaScript code from Facebook impressions altogether, you can install a JavaScript blocker (for example, www.noscript.net or www.ghostery.com).

d. Facebook Remarketing
This website uses the remarketing feature “Custom Audiences” from Facebook Inc. (“Facebook”). This function serves to present interest-based advertisements (“Facebook Ads”) to visitors of this website as part of their visit to the social network Facebook. For this purpose, the Facebook remarketing tag was implemented on this website. By using this tag, a direct connection to the Facebook servers is made when visiting the website. This involves a transmission to the Facebook server that you have visited this website and Facebook assigns this information to your personal Facebook user account. For further information on the collection and use of data by Facebook, as well as your rights in this regard and ways to protect your privacy, please refer to the Privacy Policy of Facebook at https://www.facebook.com/privacy/policy/. Alternatively you can disable the remarketing function “Custom Audiences” at https://www.facebook.com/settings/?tab=ads#_=_. For this you must be logged on to Facebook.

32 Online application

The processing of your personal data in online applications is based on the following legal grounds:

To fulfill contractual obligations pursuant to Article 6 (1) b) GDPR in conjunction with Section 26 BDSG (Federal Data Protection Act) for the purpose of the employment relationship.

The processing of personal data is carried out for the initiation or execution of contracts. Your personal data will thus only be processed for the purpose of carrying out the application process for the initiation and establishment of an employment relationship in our company.

Should personal data of the special category pursuant to Article 9 (1) GDPR (e.g. health data or religious affiliation) be processed, this will only be done on the basis of the following legal grounds:

For compliance with rights and obligations under labor law, social protection and social security protection pursuant to Article 9 (2) b) GDPR in conjunction with Section 22 (1) a) BDSG.

For the purpose of preventive health care, occupational medicine as well as for the assessment of fitness for work pursuant to Article 9 (2) h) in conjunction with Section 22 (1) b) BDSG.

Based on your consent in accordance with Article 6 (1) a) GDPR. Insofar as you have given us consent to process your personal data, the respective consent is the legal basis for the processing covered by the consent.

All data provided to us by the applicant, such as name, address, curriculum vitae, etc., is given voluntarily to ZIEHL-ABEGG SE. ZIEHL-ABEGG uses your applicant data in order to obtain the most suitable applicant for the advertised position. Access is only granted to persons who are actively involved in the application process for a position and whose knowledge is necessary for filling the position. The data will not be passed on to third parties or used outside the application process.

As part of our AEO-F certification, we are required to check our existing and new employees against sanctions lists. It is therefore possible that we may also carry out such a check using the information you provide during the application process. We do this because we have a legitimate interest in maintaining our certification by meeting the requirements. The legal basis for this is Art. 6 (1) f) GDPR.

It should be noted that, due to the nature of the matter, synonymous, joking or fake information in the mandatory fields will result in the application not being considered. There is no entitlement to the application being considered if false data is entered. For a successful application, you should ensure that the data is correct and up-to-date.
Tracking for usage analysis of the application system does not take place.
It is possible to have the user profile filled via the social media platforms LinkedIn or Xing. This only happens if you actively do so. To do this, you must register with the social media providers via these websites and accept the transfer of data. Data matching only takes place at this time and is closed afterwards. If you subsequently make changes to your social media profile, this will not be synchronized. To do this, you must run the process again. The filling by your social media profile is at your own discretion. By using this offer, you consent to ZIEHL-ABEGG using this data to fill or match your application profile. ZIEHL-ABEGG does not use the connection to evaluate your application documents or to obtain information from the provider. Likewise, only data that can be viewed and changed by you will be requested. A data query without your personal control does not take place.
The uploaded data (documents and text content) is temporarily stored for processing in selected data centers, all of which are located in Germany. After processing or regular retrieval of the data by the HR department, all data is permanently and irrevocably deleted from the data centers and stored on the internal servers of the HR department. After completion of the application process, your application data will be deleted in accordance with legal requirements. This is the case 6 months after completion of the application process. You can revoke your consent to the storage and processing of your application data at any time and have the data deleted. You can, of course, reapply at any time.

33 Artificial Intelligence (AI) chatbot

a. General
The chatbot "ZAC" is a self-information system that enables users to obtain information about our products and services quickly and easily in the form of a dialog. The chatbot processes inquiries fully automatically on the basis of artificial intelligence, using text analysis and machine learning to provide you with precise answers. As part of the automated response generation process, the chatbot sometimes links to relevant websites or website forms.

To provide this chatbot, we work with our service provider moinAI, a product of knowhere GmbH

knowhere GmbH
Karolinenstraße 9
20357 Hamburg

b. Description and scope of data processing
The ZIEHL-ABEGG chatbot processes information that is entered during interaction with the system. This data includes:
- Your requests, i.e. the questions or information you enter into the system.
- Communication data generated during the dialog.
- Metadata such as the time and duration of use.

The chatbot functions as a text-based dialogue system. Users can ask questions and communicate concerns, which are answered fully automatically using text analysis and machine learning. It is not necessary to enter any personal data to use the chatbot for this function.

We process voluntarily entered personal data in accordance with the General Data Protection Regulation (GDPR).

The data is stored by moinAI on their servers in Germany, which are secured using SSL encryption. moinAI stores all data collected during the use of the chatbot only for as long as necessary for the respective purpose. Manual deletion of the data by the user is possible at any time.

c. Legal basis for data processing
The data you enter is processed on the basis of Art. 6 para. 1 lit. f GDPR (legitimate interest) and, if you have given us your consent, on the basis of Art. 6 para. 1 lit. a GDPR.

d. Purpose of data processing
The data collected by the chatbot is used for the following purposes:
- Answering Your questions and providing information about ZIEHL-ABEGG products and (service) offerings.
- Improving the functionality and quality of the chatbot by continuously learning and adapting the suggested answers.
- Ensuring technical security and preventing misuse by logging usage data.

e. Duration of storage
The storage period depends on the specific purposes of the data processing. 
As a rule, the data is stored for a maximum of 90 days after the last contact. In the event that personal data has been entered, it can also be deleted earlier on request.

f. Objection, removal and revocation options
You can request the deletion of your personal data or the revocation of your consent at any time by contacting us.

g. Use of cookies and other technologies
No classic cookies are used to operate the chatbot and improve the user experience.

The chatwidget uses two technical localStorage Keys: The element “knowhere_jwt_[Live ID of the chatbot]” is stored in the web browser to save and recognize users. It enables the continuation of the user dialogue across webpages. Here, data is stored locally in your browser's cache and can be read even after the window is closed - unless you delete the cache. The cookies are stored on your device for four hours by default. The storage is based on your consent in accordance with Art. 6 para. 1 lit. A) GDPR. The element “knowhere_widget_open” is necessary for the correct display of the chat widget. Without your consent, the chatbot cannot be used.

h. Contract processing
knowhere GmbH (moinAI) is responsible for the provision of the chatbot as a processor in accordance with Art. 28 GDPR. The data processing takes place on the servers in Germany and moinAI has taken the necessary technical and organizational measures to protect your data. Personal data is processed within the meaning of Art. 4 No. 2 and Art. 28 GDPR.

You can view an order processing contract (DPA) at any time. To do so, please contact the ZIEHL-ABEGG data protection officer or the moinAI data protection officer (RA Carola Sieling, Technologiewerft GmbH, c/o Kanzlei Sieling, Gurlittstraße 24, 20099 Hamburg) at info@technologiewerft.de.

i. Security measures
All data exchanged between the chatbot and users is protected by SSL encryption. In addition, moinAI uses advanced security mechanisms such as two-factor authentication and role-based access controls to prevent unauthorized access to your data.

j. Your rights
As a data subject, you have the right:
- To request information about the processing of your personal data.
- To request the rectification or erasure of your personal data.
- To object to the processing of your personal data or to request its restriction.
- To withdraw your consent to processing at any time.

To exercise your rights, you can contact the ZIEHL-ABEGG data protection officer at any time.

k. Contact
If you have any questions about data processing in connection with the use of the chatbot or for data protection inquiries, you can contact our data protection officer:

Data Protection Officer
Email: info@ziehl-abegg.nl

l. Changes to the data protection declaration
We reserve the right to adapt this data protection declaration if necessary, especially in the event of changes to the legal or technical framework conditions. We therefore recommend that you check the privacy policy regularly.

34 Dynamics 365 Customer Insights – Journeys

a. Nature and purpose of data processing
To subscribe to the newsletter offered on our website, we require an email address and information that allows us to verify ownership of the email address and consent to receiving the newsletter. Further data is only collected on a voluntary basis.
Data entered in contact forms on our website is stored for the purpose of individual communication.

We use the Microsoft Dynamics 365 Customer Insights – Journeys marketing, analysis and service tool for promotional and, in part, non-promotional emails. The provider of these services is Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA. Microsoft Dynamics 365 Customer Insights – Journeys records, collects, and analyses data about the behaviour of website users and recipients of commercial and, in part, non-commercial emails. This data includes, among other things, access to our subsite.
The purpose of using Microsoft Dynamics 365 Customer Insights – Journeys as an analysis tool is to provide interest-related information to users based on their behaviour on the website and the associated optimisation of marketing activities.

b. Double opt-in procedure
To subscribe to our promotional newsletter, we need a valid email address from you. We use the double opt-in process to check whether the registration actually originates from the owner of the email address provided. For this purpose, we record the receipt of the registration via the contact form, the sending of a confirmation email and receipt of the response requested in this confirmation email. The data stored in connection with the email address used includes further information on a voluntary basis from the user, such as form of address, name and other information. This additional data serves the purpose of teaching us more about the interests and preferences of subscribers and offering more personal, attractive content.

Microsoft Dynamics 365 Customer Insights – Journeys uses cookies that are stored in the user’s browser and facilitate analysis of the user’s use of our websites: https://learn.microsoft.com/en-gb/dynamics365/customer-insights/journeys/real-time-journeys-cookies (English) https://learn.microsoft.com/nl-nl/dynamics365/customer-insights/journeys/real-time-journeys-cookies (Nederlands)

c. Recipients
In addition to ZIEHL-ABEGG, the technical service provider Microsoft Dynamics 365 is the recipient of data; it provides Customer Insights – Journeys and our Customer Relationship Management (CRM) system. Microsoft's Product and Services Data Protection Addendum applies. More information can be found at https://www.microsoft.com/en-gb/privacy/privacystatement (English) https://www.microsoft.com/nl-nl/privacy/privacystatement (Nederlands).
We also receive technical support in the implementation of our customer relationship management system. This technical service provider (ORBIS SE, Nell-Breuning-Allee 3-5, D-66115 Saarbrücken, Germany) also acts as a processor for us within the framework of its admin access. They were carefully selected by us and comply with the applicable data protection regulations in accordance with our instructions. The data will not be passed on to third parties.

d. Storage period
The data is deleted as soon as the user’s consent is withdrawn or it is no longer required for the processing and analysis of the request made via the contact form. Consent can be revoked at any time by means of a corresponding link in each issue of the newsletter.
After removal from the distribution list, the email address is stored in a so-called opt-out list to prevent future mailings. The data in the opt-out list will only be used for this purpose and will not be merged with other data. This serves both subscribers and ZIEHL-ABEGG’s interest in compliance with the legal requirements when sending newsletters (legitimate interest within the meaning of Art. 6(1) f) GDPR). Storage in the opt-out list is not limited in time, but we reserve the right to review it. You can object to this storage.

e. Third-country transfer
The download of the web beacons contained in the emails sent by Microsoft Dynamics 365 Customer Insights – Journeys is stored on a Microsoft Azure Data Centre server. According to our understanding of Microsoft’s security policy (https://www.microsoft.com/en-gb/trust-center/privacy/data-location (English) https://www.microsoft.com/nl-nl/trust-center/privacy/data-location (Nederlands)), the server is located in the EU. We therefore assume that no data will be transferred to the USA.

f. Profiling
With the help of the Microsoft Dynamics 365 Customer Insights – Journeys analysis tool, user profiles are also created when using the contact form, linked to the respective email address, in which a few, selected employees can understand which subject area or country the registration can be assigned to. The creation of user profiles explicitly does not correspond to profiling within the meaning of Art. 22 GDPR, which leads to an automated decision that has legal effects for data subjects or otherwise significantly impairs them. Rather, the aim is to provide interest-based information to the registered persons.

g. Withdrawal of consent
Consent to the processing and analysis of the data entered via the registration form and the further analysis of website usage (tracking) can be revoked at any time with effect for the future via an opt-out form linked in the footer of each advertising email sent.

35 Dynamics 365 Customer Voice

a. Nature and purpose of data processing
In order to ensure the quality of our products and services, to continuously improve them and to cover various other requirements, we collect feedback from customers and/or visitors to our website at regular intervals by means of surveys. Participation in our surveys is always voluntary.
To conduct our surveys, we use the Dynamics 365 Customer Voice service, operated by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA.
For the purpose of implementation, a survey is created, which can be made available via various channels. Depending on the type of access and purpose of the survey, the answers given may be anonymous or linked to the records in our Customer Relationship Management (CRM) system. Information on the type of access and links to existing data is provided in the terms and conditions of participation of the respective survey.
Personal data may also be collected within the framework of the survey, e.g. regarding personal experiences with ZIEHL-ABEGG, contact information or other personal data. This information is used to continuously improve ZIEHL-ABEGG’s offering and, for example, to contact you at your express request. If participation in the survey is related to a prize draw, we may also use the data to notify winners and provide information on the next steps for handing over the prize. Information on the type and use of data for determining the prize winners will be provided in the terms and conditions of participation of the respective prize draw.

Microsoft Dynamics 365 Customer Voice uses cookies that are stored in the user’s browser and allow the user to analyse the participation status: https://learn.microsoft.com/en-gb/dynamics365/customer-voice/cookies (English) https://learn.microsoft.com/nl-nl/dynamics365/customer-voice/cookies (Nederlands)

b. Recipients
In addition to ZIEHL-ABEGG, the technical service provider Microsoft Dynamics 365, which provides Customer Voice and our CRM. Microsoft's Product and Services Data Protection Addendum applies. For more information, refer to section https://www.microsoft.com/en-gb/privacy/privacystatement (English) https://www.microsoft.com/nl-nl/privacy/privacystatement (Nederlands).
We also receive technical support in the implementation of our customer relationship management system. This technical service provider (ORBIS SE, Nell-Breuning-Allee 3-5, D-66115 Saarbrücken, Germany) also acts as a processor for us within the framework of its admin access. They were carefully selected by us and comply with the applicable data protection regulations in accordance with our instructions. The data will not be passed on to third parties.

c. Storage period
The data is deleted as soon as the user’s consent is withdrawn or it is no longer required for the processing and analysis of the survey.

d. Third-country transfer
The personal data collected with Dynamics 365 Customer Voice is only processed within the European Union: https://www.microsoft.com/en-gb/trust-center/privacy/data-location (English) https://www.microsoft.com/nl-nl/trust-center/privacy/data-location (Nederlands)
The personal data provided will not be transferred to a third country.

e. Withdrawal of consent
Consent to the processing and analysis of the data entered in the survey can be revoked at any time with future effect. The lawfulness of any data processing carried out up until the time of revocation remains unaffected.

36 Microsoft Clarity

On the basis of your consent (Article 6 (1) a) GDPR), we collect information about your use of our website and analyse this information to optimise our website.
For this purpose, we use the Microsoft Clarity tool, provided by Microsoft Corporation, One Microsoft Way, Redmond, Washington 98052 USA.
Specifically, we process user data such as access times, IP addresses, and behavioural information such as cursor and scroll movements. We use Microsoft Clarity with something known as the anonymisation function. With this function, Microsoft already shortens the IP address within the EU or the EEA. The collected information is transmitted to Microsoft and stored there in a pseudonymised user profile. Neither we nor Microsoft identify the user.
The data collected will be processed for a period of 13 months.
For use of the Clarity tool and the transfer of personal data within the scope of using the tool, a data processing agreement within the meaning of Art. 28 GDPR has been concluded with Microsoft Corporation.
Microsoft Clarity uses cookies that are stored in the user’s browser and facilitate analysis of the user’s use of our websites: https://learn.microsoft.com/en-gb/clarity/setup-and-installation/clarity-cookies (English) https://learn.microsoft.com/nl-nl/clarity/setup-and-installation/clarity-cookies (Nederlands)

37 Privacy notice for social media channels

This privacy notice provides you with information about the processing of your personal data and your rights as a data subject in the context of our accounts on social networks.

a. Data controller
Our social media channels are operated by:

ZIEHL-ABEGG SE
Heinz-Ziehl-Straße
74653 Künzelsau
Germany

Email: info@ziehl-abegg.de
Phone: +49 7940 16 0

b. Data protection officer
You can reach our data protection officer at the aforementioned postal address, adding “Data Protection Officer”, or via the email address:
datenschutz@ziehl-abegg.de

c. General information
We have set up and operate publicly accessible profiles on various social networks. When you visit these pages, your personal data is not only processed by us, but also by the provider of the respective social network. In addition to us, the provider of the respective social network is responsible for the collection and further processing of your personal data in the respective social network, e.g. through websites or apps. If you use our presence in a social network and/or contact us via this presence (e.g. our page or our channel on a social network), your personal data will be processed by the provider. Please note that this also applies if you do not have a user account on the social network or are not logged in to an existing account when visiting or using our social network profiles.

You are neither legally nor contractually obliged to provide us with your personal data. However, your personal data may be required for you to fully utilise all functions of the social networks in general and our profile on the network specifically.

Information about how personal data is processed by the provider of the respective social network can be found in their data protection regulations; we have added links to these regulations in the section “Additional information on the individual social networks” of this privacy notice. These links may be updated from time to time.

As the operator of our social network accounts, we can only view your public profile in the respective social network. Which of your information is visible to us depends on the privacy settings selected in your profile. Further information on your privacy settings can be found in the privacy information pages on the respective social networks.

d. Processing purposes and type of personal data
We process your personal data (your name, the content of your messages, requests, or other contributions directed to us) when you contact us through our profiles on the respective social network. We then process this data for the purpose of processing and possibly responding to your posts and/or messages addressed to us.

In addition, the provider of the respective social network may provide us with something known as “page insights data” and/or analysis data. This data consists of anonymous statistics that we use to assess the quality of our presence and content on social networks. These statistics are compiled on the basis of the usage data collected by the respective social network about your interaction with our social network page. We do not have access to this usage data. You can find out which specific tracking and analysis techniques the respective social networks use under the respective tab in the section “Additional information on the individual social networks” of this privacy notice.

e. Legal basis
The processing of your personal data is based on our legitimate interest according to Article 6(1)(f) of the General Data Protection Regulation (GDPR). Our legitimate interest stems, in particular, from being able to contact you in response to your requests or posts and recognise your user preferences (e.g. the number of followers, the number of visits to individual areas of our page, user statistics regarding age, geography, and language) and also adapt and improve our offerings on our profile in the respective social network as accurately as possible for the target audience.

f. Erasure of personal data
We store your personal data in our systems (e.g. when we use certain administrative programs to process messages from and to you), i.e. outside the respective social network, only for as long as necessary for the relevant processing purposes or for as long as legal retention obligations apply.

g. Data transmission to recipients outside the European Economic Area
When visiting certain social networks, your personal data may be transferred to recipients in countries outside the European Union (EU), Iceland, Liechtenstein and Norway (= European Economic Area, EEA) and processed there, in particular in the USA. Where there is no European Commission decision establishing an adequate level of protection for personal data (known as an adequacy decision), we enter into agreements with the recipients regarding the application of EU standard contractual clauses, binding corporate rules or, if applicable, other applicable instruments in order to establish an “adequate level of protection” according to the applicable legal requirements.

In the following countries outside the EU/EEA, the European Commission has established an adequate level of protection for the processing of personal data in accordance with EU standards (known as an “adequacy decision”): https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/adequacy-decisions_en

h. Transfer of personal data to third parties
We may use certain qualified service providers to design and support our social media presence. In such cases, we will only disclose your personal data if this is necessary for the purposes stated in the section “Usage purposes” of this privacy notice and to the extent permitted by law or to the extent that you have granted consent.

i. You have the following rights

  • Right to information: Pursuant to Art. 15 GDPR, you have the right to information about which of your personal data we process. This means that you have the right to receive confirmation from us as to whether or not personal data concerning you is being processed and, if so, the right to request access to this personal data. The right of information includes, among other things, the purposes of processing, the categories of personal data concerned and the recipients and categories of recipients to whom the personal data has been or will be disclosed. However, this is not an absolute right and the interests of third parties may limit your right to information.
  • Right to rectification: You have the right to rectify inaccurate personal data pursuant to Art. 16 GDPR. This means that you have the right to request that we correct inaccurate personal data concerning you. Depending on the purpose of the processing, you may have the right to request the completion of incomplete personal data, including by means of a supplementary declaration.
  • Right to erasure (“right to be forgotten”): In accordance with Art. 17 GDPR, you can request for your personal data to be erased. This means that, under certain circumstances, you have the right to request that we delete any personal data concerning you and we are obliged to delete this personal data.
  • Right to restriction of processing:  In accordance with Art. 18 GDPR, you have the right to request that processing of your personal data is restricted. This means that in this case, the relevant data will be marked and may only be processed by us for specific purposes (e.g. with your consent or for the enforcement of legal claims).
  • Right to data portability:  Under Article 20 of the GDPR, you have the right, in certain circumstances, to receive personal data concerning you that you have provided to us in a structured, commonly used, and machine-readable format, and you have the right to transfer this data to another data controller without any hindrance from us.
  • Right to file a complaint with a supervisory authority: You also have the right to lodge a complaint with the competent data protection supervisory authority, primarily in the EU member state where you usually reside or where the potential violation of the GDPR regulations occurred.

In certain circumstances, you have the right to object to the processing of your personal data at any time for reasons arising from your particular situation or if personal data is processed by us for direct marketing purposes, and we may be required to stop processing your personal data. If your personal data is processed for direct marketing purposes, you also have the right to object to the processing of your personal data for such marketing purposes at any time. This also applies to profiling insofar as it is associated with direct marketing. In this case, we will no longer process your personal data for these purposes. To exercise your right to object, please send us an email, if possible, to the address stated in section 1.

To assert these rights with regard to data processing by the provider of the respective social network, please contact the provider via the contact options provided on their websites.

j. Additional information on the individual social networks

Facebook

We have a presence on Facebook. The provider of this social network is Meta Platforms Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour Dublin 2, Ireland (hereinafter also referred to as “Meta”).
Information on the processing of personal data by the provider can be found in its data protection regulations under the following link: https://facebook.com/privacy/policy/

In relation to the operation of our Facebook fan pages, Facebook provides us with something known as page insights data. This data consits of anonymous statistics that we use to evaluate the quality of our Facebook page and its content. These statistics are created based on the usage data collected by Facebook about your interaction with our Facebook page; we do not have access to this usage data. Further information on how your data is used in this context can be found under the following link: https://facebook.com/legal/terms/information_about_page_insights_data

With regard to page insights data, we have an agreement with Meta on our joint responsibility according to Art. 26 GDPR: https://facebook.com/legal/terms/page_controller_addendum

Instagram

We have a presence on Instagram. The provider of this social network is Meta Platforms Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour Dublin 2, Ireland (hereinafter also referred to as “Meta”).
Information on the processing of personal data by the provider can be found in its data protection regulations under the following link: https://privacycenter.instagram.com/policy/

In relation to the operation of our Instagram profile, Meta provides us with something known as page insights data. This data consists of anonymous statistics that we use to assess the quality of our Instagram profile and our content. These statistics are compiled on the basis of the usage data collected by Meta about your interaction with our Instagram profile. We do not have access to this usage data. Further information on how your data is used in this context can be found under the following link: https://facebook.com/legal/terms/information_about_page_insights_data

With regard to page insights data, we have an agreement with Meta on our joint responsibility according to Art. 26 GDPR: https://facebook.com/legal/terms/page_controller_addendum 

LinkedIn

We have a presence on LinkedIn. The provider of this social network is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. Information on the processing of personal data by the provider can be found in its data protection regulations under the following links: https://www.linkedin.com/legal/privacy-policy (EN) https://nl.linkedin.com/legal/privacy-policy (NL)

In relation to the operation of our LinkedIn profile, LinkedIn provides us with something known as page insights data. This data consists of anonymous statistics that we use to assess the quality of our LinkedIn profile and our content. These statistics are created based on the usage data collected by LinkedIn about your interaction with our LinkedIn page; we do not have access to this usage data. Further information on how your data is used in this context can be found under the following links: https://www.linkedin.com/help/linkedin/answer/a1338708?lang=en (EN) https://www.linkedin.com/help/linkedin/answer/a1338708?lang=nl (NL)

With regard to page insights data, we have an agreement with LinkedIn on our joint responsibility according to Art. 26 GDPR: https://www.linkedin.com/help/linkedin/answer/a1338708?lang=en (EN) https://www.linkedin.com/help/linkedin/answer/a1338708?lang=nl (NL)

YouTube

We have a channel on YouTube. The provider of this social network is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Information on the processing of personal data by the provider can be found in its data protection regulations under the following link: https://policies.google.com/privacy

TikTok

We have a presence on TikTok. The provider of this social network is TikTok Technology Limited based at 10 Earlsfort Terrace, Dublin, D02 T380, Ireland (“TikTok Ireland”).
Information on the processing of personal data by the provider can be found in its data protection regulations under the following links: https://www.tiktok.com/legal/page/global/partner-privacy-policy/en (EN) https://www.tiktok.com/legal/page/global/partner-privacy-policy/nl (NL)

X (formerly Twitter)

We have a presence on X. The provider of this social network is Twitter International Unlimited Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland.
Information on the processing of personal data by the provider can be found in its data protection regulations under the following links: https://x.com/en/privacy (EN) https://x.com/nl/privacy (NL)

Xing

We have a presence on Xing. The provider of this social network is New Work SE, Am Strandkai 1, 20457 Hamburg, Germany. Information on the processing of personal data by the provider can be found in its data protection regulations under the following link: https://privacy.xing.com/en/privacy-policy

Spotify

We are present on Spotify. The provider is Spotify AB, Regeringsgatan 19, SE-111 53 Stockholm, Sweden.
Information on the processing of personal data by the provider can be found in its data protection regulations at the following links: https://www.spotify.com/legal/privacy-policy/ (EN) https://www.spotify.com/nl/legal/privacy-policy/ (NL)

Apple Podcasts

Our content is also available via Apple Podcasts. The provider is Apple Distribution International Ltd., Hollyhill Industrial Estate, Hollyhill, Cork, Ireland.
Information on the processing of personal data by the provider can be found in its data protection regulations under the following links: https://www.apple.com/legal/privacy/en-ww/ (EN) https://www.apple.com/legal/privacy/nl/ (NL)

Amazon Music

We are represented on Amazon Music. The provider is Amazon Digital Germany GmbH, Domagkstraße 28, 80807 Munich, Germany.
Information on the processing of personal data by the provider can be found in its data protection regulations under the following links: https://www.amazon.nl/gp/help/customer/display.html?nodeId=201909010&language=en_GB (EN) https://www.amazon.nl/gp/help/customer/display.html?nodeId=201909010&language=nl_NL (NL)

Deezer

We have a presence on Deezer. The provider is Deezer S.A., 24 rue de Calais, 75009 Paris, France.
Information on the processing of personal data by the provider can be found in its data protection regulations under the following link: https://www.deezer.com/legal/personal-datas

38 Cloudflare

We use the “Cloudflare” service. The provider is Cloudflare Inc., 101 Townsend St., San Francisco, CA 94107, USA (hereinafter “Cloudflare”).

Cloudflare offers a globally distributed content delivery network with DNS. Technically, this means that the transfer of information between your browser and our website is routed through Cloudflare’s network. This enables Cloudflare to analyze the data traffic between your browser and our website and to act as a filter between our servers and potentially malicious traffic from the Internet. In doing so, Cloudflare may also use cookies or other technologies to recognize Internet users; however, these are used solely for the purpose described here.

Our use of Cloudflare is based on our legitimate interest in providing our website as error-free and secure as possible (Art. 6(1)(f) GDPR).

Data transfers to the U.S. are based on the EU Commission’s Standard Contractual Clauses. Details and further information on security and data protection at Cloudflare can be found here: https://www.cloudflare.com/privacypolicy/.

The company is certified under the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the United States designed to ensure compliance with European data protection standards when data is processed in the United States. Every company certified under the DPF commits to complying with these data protection standards. For more information, please visit the provider’s website at the following link: https://www.dataprivacyframework.gov/participant/5666.

Data Processing

We have entered into a data processing agreement (DPA) for the use of the aforementioned service. This is a contract required under data protection law that ensures the service provider processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.