Data protection information
Collection of personal data
The controller within the meaning of Art. 4(7) of the EU General Data Protection Regulation (GDPR) is ABC Design GmbH, Dr. Rudolf-Eberle Str. 29, 79774 Albbruck (see our legal notice). You can contact our data protection officer at the above address or at datenschutz(at)abc-design.de.
When you contact us by email or via our contact form, we will store the data that you provide (your email address, your last name and any optional information supplied) to allow us to respond to your enquiry. We will delete data obtained in this way once storage is no longer required or, if legal retention obligations apply, we will restrict processing of this data.
You have the following rights with regard to personal data concerning you:
- Right to access
- Right to rectification or deletion
- Right to restriction of processing
- Right to object to processing
- Right to data portability
You also have the right to lodge a complaint with the data protection authority regarding the processing of your personal data by us.
Collection of personal data when you visit our website
When you visit our website purely for the purposes of obtaining information, i.e. you do not register or otherwise transfer information to us, we will only collect the personal data that your browser transmits to our server. When you wish to view our website, we collect the following data, which we require for technical reasons in order to display our website and ensure stability and security (the legal basis is provided by Art. 6(1)(f) GDPR.
- IP address
- Data and time of access
- Time zone difference from Greenwich Mean Time (GMT)
- Content of the request (specific page)
- Access status/HTTP status code
- Volume of any data transferred
- Website from which the request comes
- Operating system and interface
- Language and version of browser software
Cookies can contain data that make it possible to recognise the device used. In some cases, however, cookies only contain information on certain settings, that cannot be attributed to individuals. Cookies cannot directly identify a user.
The legal basis for these tools is your consent in accordance with Art. 6(1)(a) of the GDPR that you can grant, withdraw and manage via our cookie management system. There you will also receive further information on the individual cookies set and tools used.
In this respect we use a cookiebot — a tool that manages your consent for the processing of cookies.
In accordance with Art. 7(1) of the GDPR it is necessary that we can prove your consent to the processing of your personal data. The cookiebot helps us with this, as it informs you about the cookies we use on our website and we can manage and document any consent that may be required. The legal basis for using the data is Art. 6(1)(c) of the GDPR.
Find out more about the data protection guidelines for a cookiebot here: https://www.cookiebot.com/de/privacy-policy/.
Use of Google Analytics
Our website uses the web analysis service Google Analytics, that for users in Europe, the Middle East and Africa (EMEA) is offered by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, and for all other users by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (jointly “Google”).
The legitimacy of third-country transfers to our service provider is ensured by the conclusion of standard contractual clauses of the EU Commission in accordance with Art. 46 GDPR in conjunction with a order processing contract concluded according to Art. 28 of the GDPR.
Use of Google Tag Manager
Google Tag Manager allows marketers to manage website tags from one interface. The Tag Manager itself, that sets the tags, however, functions without cookies and does not collect any personal data. The Tag Manager merely triggers other tags which in turn may collect data. The corresponding explanations about these third-party providers can be found in this data protection declaration. However, Google Tag Manager does not use these data. If you have set or otherwise deactivated cookies, this will be taken into account for all tracking tags set with Google Tag Manager, the tool does not change your cookie settings. More information on how Google Tag Manager functions can be found here: https://support.google.com/tagmanager/answer/2772432?hl=de&topic=2574304&ctx=topic and in the use policy: c.
We use Google Ads on our website, a promotional service from Google that enables us to draw attention to our offer with the help of external advertising material on external websites and to determine the success of individual advertising measures. Cookies and pixel tags are set for this purpose, that process the following parameters: IP address, browser information, use data, date and time of the visit, site information, cookie ID. The legal basis for this is your consent, that you can withdraw at any time.
The data is deleted as soon as it is no longer required for processing. Log data is typically anonymised after nine months and cookie information after 18 months.
We ourselves do not collect and process any personal data as part of the advertising measures. We merely receive statistical evaluations from Google. Transfers to third countries are possible. The standard contractual clauses of the European Commission were concluded as suitable guarantees. More information on this can be found here: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection_de.
Integration of Google Maps
This website uses the map service Google Maps. To use the Google Maps functions it is necessary to store your IP address. This information is typically transferred to a Google server in the USA and stored there.
The use of Google Maps happens in the interests of an appealing display of our online offers and to make it easy to find the locations indicated on our website. This represents a legal interest within the meaning of Art. 6(1)(f) of the GDPR.
More information on handling user data can be found in Google’s data protection policy: https://policies.google.com/privacy?hl=de&gl=de.
Integration of YouTube videos
We have embedded YouTube videos into our website, which are stored at www.YouTube.com and can be played directly on our website. These are all integrated in extended data protection mode, i.e. no user data is transmitted to YouTube if the videos are not played.
YouTube receives the information that our website has been accessed. This happens whether or not a YouTube user account exists or not. YouTube stores your data as a user profile and uses this profile for the purposes of advertising, market research and/or tailoring its website to user needs. More information can be found at: https://policies.google.com/privacy?hl=de.
We use Meta Pixel, a service from Meta Inc., 1601 S California Ave, Palo Alto, California 94304, USA (“Meta”). Meta Pixel enables Meta to display our ads, so-called “meta ads” to those users who have visited our website, especially if they have shown interest in our online offer. Meta Pixel also makes it possible to check whether a user has been redirected to our website after clicking on our meta ads. User actions are stored as cookies on your end device. These cookies enable Meta to match your user data with the data in your Meta account. The data collected are anonymous and not visible by us and can only be used in the context of placing advertisements. If you have a Meta user account and are registered, Meta can assign the visit to your user account.
We use Meta Pixel for marketing and optimisation purposes, particularly to show you relevant and interesting advertisements, and thus to improve our offer and make it more interesting for users.
The use of Meta Pixel is based on your consent (Art. 6(1)(a) GDPR). More information can be found at https://www.facebook.com/policy.php
With your consent, you can subscribe to our newsletter, which we use to provide you with information on our latest interesting offers and product news from our range. We use the double opt-in process for registrations for our newsletter. This means that, when you sign up to receive our newsletter, we will send an email to the email address provided asking you to confirm that you wish to receive the newsletter. If you do not confirm your registration within 24 hours, your information will be blocked and will be automatically deleted after a month. In addition, we save your IP address and the times of registration and confirmation. The aim of this process is to verify your registration and identify any misuse of your personal data. Your email address is the only mandatory information required in order to receive the newsletter. Providing your name is optional and enables us to address you by name. Following your confirmation, we will store your email address for the purpose of sending the newsletter. The legal basis is provided by 6(1)(a) of the GDPR). You may withdraw your consent and unsubscribe from the newsletter at any time. You can withdraw your consent by clicking on the link provided in every newsletter email, by email to newsletter(at)abc-design.de or by sending a message using the contact details given in the legal notice.
Notes for business contacts
We collect personal data (usually names, contact data, billing and payment data) about our (potential) business partners or contacts there, in order to provide our contractual services, in particular brokerage services, to be able to identify business partners and correspond with them, and for invoicing. The legal basis for this is Art. 6(1)(b) of the GDPR. Failure to provide certain data can result in a contract not being concluded or executed.
We only transfer your personal data to third parties if, and to the extent there is legal permission to do so, within the meaning of Art. 6(1) GDPR. In particular this includes transferring it to payment service providers as well as to public bodies and institutions if there is a legal or official obligation to do so.
To the extent that we use external service providers to process personal data on business partners, these have been carefully selected, commissioned in writing and they are bound by our instructions. These service providers will not pass the data on to third parties, but delete it after the contract has been fulfilled and the statutory storage periods have expired, unless consent has been given for further storage.
We store your personal data for as long as legal storage and documentation obligations (Art. 6(1)(c) GDPR) require it (usually ten years), unless there is consent for storage to go beyond this or there are legitimate interests that make further storage necessary.
Notes for candidates
Below we set out information on the processing of personal data regarding applications.
If you apply to us by email, we will store your details to carry out the application process and for the duration of this process. This concerns any personal data in your application documents, usually name, address, email address, telephone number and, where applicable, sensitive data such as your religious preference or severe disabilities.
If you apply to us via portals operated by third parties, we receive your data from the source to whom you have given your consent to the transfer of the data. For more information on data collection, please contact the source concerned.
Provision of your personal data is necessary to be able to carry out the application process. The legal basis for the aforementioned data processing is Art. 6(1)(b) GDPR in conjunction with Section 26 of the Federal Data Protection Act (BDSG in German).
As part of the application process, we also check whether we can offer your another job opening, that fits your application. If we wish to keep your application documents for a later date, we will ask for your separate consent to do this. In addition, we usually keep your application data for a period of six months after the end of an unsuccessful application process, unless statutory storage obligations preclude this.
The legal basis for the aforementioned data processing is Art. 6(1)(c) and (f) GDPR.
In principle your data will be processed exclusively by us and not passed on to third parties. Exceptions relate to cases where the legislator requires or provides for the transfer of data (e.g. in the context of tax audits by the tax authorities or in the scope of the money laundering act. There is no transfer abroad and this is not envisaged.
Personal data is protected by us using suitable technical and organisational measures to ensure an appropriate level of security and to uphold the personal rights of the persons concerned. The measures taken serve, among other things, to prevent unauthorised access to the technical facilities used by us as well as protection of personal data from unauthorised access by third parties. In particular, this website uses SSL or TLS encryption for security reasons and to protect the transfer of confidential content, such as contact requests that you send to us as the site operator. You can recognise an encrypted connection as the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line. If SSL or TLS encryption is activated the data that you transmit to us cannot be read by third parties. However, we would like to point out that data transfer over the internet (e.g. when communicating by email) can have security gaps. Complete protection of data from access by third parties is not possible in this respect.
Updating of data protection information
As this data protection information can change from time to time, due to legal changes or new functions relating to our offer, we recommend you regularly look at this information.
As of: February 2022