DATA PROTECTION POLICY
Thank you for visiting our website. Complying with data protection regulations is very important to us. The aim of this Data Protection Policy is to inform you as a user of our website about the type, scope, and aim of the processing of personal information, as well as your current rights if you are an affected person according to Art. 4 No. 1 of the General Data Protection Regulation (GDPR). The following Data Protection Policy already incorporates the changes due according to the GDPR from 25.05.2018. At the same time, this Policy also fulfills the requirements of § 13 German Telemedia Act (Telemediengesetz) that were valid up to the implementation of the GDPR.
1. Data Controller
This website and the service offering are run by
Phone: +49 (0) 4264 7384 000
Fax: +49 (0) 4264 7384 013
Managing Director: Sönke Hinrichs.
We configured this website to collect as little data as possible from you. In principle, our website can be visited without providing any personal information. Only when you decide to utilise certain services (e.g. use of the contact form) will the processing of your personal data be necessary. If that is the case, we always pay attention to only use your personal data in accordance with legal regulations or the permissions you granted. We adhere to the regulations of the General Data Protection Regulation (GDPR) that came into effect on 25.05.2018 and to the particular local regulations such as the German Data Protection Act (Bundesdatenschutzgesetz), the German Telemedia Act (Telemediengesetz), or other specific laws relating to data protection.
The terms used in this Data Protection Policy have the following meanings consistent with the GDPR.
‘personal data’ means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person;
‘processing’ means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction;
‘restriction of processing’ means the marking of stored personal data with the aim of limiting their processing in the future;
‘pseudonymisation’ means the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures to ensure that the personal data are not attributed to an identified or identifiable natural person;
‘controller’ means the natural or legal person, public authority, agency, or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law;
‘processor’ means a natural or legal person, public authority, agency, or other body which processes personal data on behalf of the controller;
‘recipient’ means a natural or legal person, public authority, agency, or another body, to which the personal data are disclosed, whether a third party or not. However, public authorities which may receive personal data in the framework of a particular inquiry in accordance with Union or Member State law shall not be regarded as recipients; the processing of those data by those public authorities shall be in compliance with the applicable data protection rules according to the purposes of the processing;
‘third party’ means a natural or legal person, public authority, agency, or body other than the data subject, controller, processor, and persons who, under the direct authority of the controller or processor, are authorised to process personal data;
‘consent’ of the data subject means any freely given, specific, informed, and unambiguous indication of the data subject´s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.
When you visit our website, to some extent we collect specific personal data for which we need your consent. This is the case when you, for example, send us a message via our contact form or subscribe to our newsletter.
Declaration of Consent
With the use of our available forms, you give your consent that we may collect your provided personal data and process it as described in this Data Protection Policy. You can revoke this permission for the future at any time by submitting a relevant statement. However, we would like to point out that without your consent, using our services is no longer possible. For your revocation, please use the above mentioned methods of contact (in this case, please provide your name, e mail, and mailing address).
5. Purpose of Use and Legal Basis for Processing Personal Data
We process personal data that are required for the justification, implementation, or execution of our service offerings according to the legal basis of Article 6 paragraph 1 point (b) GDPR. Insofar as we commission an external service provider in the context of order data processing, the processing is carried out on the legal basis of Article 28 GDPR.
We collect, process, and use the personal data solely for the following purposes:
|Purpose of data processing||Legal grounds for data processing (“Why is the data processing necessary“)|
|to establish contact and related correspondence||based on your consent|
|to process your request and, when indicated, to consult you||based on your consent|
|to process your order of videos||based on pre contract arrangements upon request of the affected person|
|to send our newsletter||based on your consent|
|to send individualised mailing campaigns||based on your consent|
|to ensure that our website is presented to you as effective and interesting as possible (e.g. with the help of anonymous analysis)||based on legitimate interest|
|totechnically implement our offers||based on legitimate interest|
6. Collected and Processed Personal Data
We only collect and process your personal data when you have knowingly and willingly provided this data, e.g. by filling out forms or sending e mails.
Within the scope of the available forms, these are the following data to begin with:
- e mail address*
- first name
- last name*
- street and house number
- postal code
Newsletter sign up:
- e mail address*
- customer ID
- PSI number
- first name
- last name
- street and house number
- postal code*
Order form for personalised videos:
- postal code*
- first name*
- last name*
- e mail address*
- street and house number
- order related data (company address, contact person, contact details)
Items marked with * are mandatory fields.
The personal data you provided and their contents remain solely with us and our affiliated companies. We will only save and process your data for the purposes mentioned in section 5. A use going beyond the disclosed purpose requires your explicit consent. The same applies to the broadcast and transmission of your data to third parties.
When you sign up for our e mail newsletter, we need your name and the e mail address to which we shall send the newsletter. Possible other data is optional and will be used to address you personally and to shape the newsletter to your personal needs, as well as to clarify questions regarding your e mail address.
If you sign up for our newsletter on this website, Inspirion GmbH uses the data you provided solely for this purpose or to inform you about relevant factors regarding this service or the registration for it. Inspirion GmbH passes this data to the service provider CleverReach GmbH & Co. KG for the purpose of managing and executing the newsletter mailings. Inspirion GmbH signed a contract with the e mail marketing service provider CleverReach GmbH & Co. KG regarding the procedure of order processing. This ensures that the above mentioned service provider adheres to the strict regulations of the German data privacy laws in all points. This also ensures that your data is stored with high security within the European Union. Your data is not stored on servers outside of the European Union.
To receive our e mail newsletter, a valid e mail address is required. The IP address from which you sign up for the newsletter and the date on which you order the newsletter are also stored. These data are necessary for Inspirion GmbH as proof for misuse in case an unauthorised e mail address is signed up for our newsletter. To furthermore ensure that an e mail address is not improperly registered with the distribution list of Inspirion GmbH by third parties, we work according to the “Double Opt In” procedure. This means that you will receive a confirmation e mail to your registered e mail address after signing up. Only after confirming your registration by clicking the link contained in the e mail will you subsequently receive the desired e mail newsletter. In the course of this procedure, the subscription to the newsletter, the distribution of the confirmation e mail, and the receipt of the sign up confirmation are recorded.
At all times do you have to possibility to withdraw your consent regarding the storage of your data, e mail address, and its use for the newsletter distribution with effect for the future. Inspirion GmbH in each newsletter provides you with a link for this revocation. You furthermore have the possibility to convey your revocation request in writing to the above mentioned contact possibilities.
8. General Log Files
The web server temporarily records the connection details of the requesting computer (IP address), our pages you visit, the date and duration of your visit, identification details of the browser and operating system you use, as well as the website from which you visit us and the successful access in log files. The technical administration of the website and anonymous data collection enable an analysis of access to the service offers by Inspirion GmbH and an analysis aimed at improving data privacy and data security in our company, in order to ensure an optimal protection level for the personal data processed by us.
The data of the server log files are stored separately from all personal data you provide.
On our website, information is collected and stored by using so called browser cookies.
What are Cookies?
Cookies are small text files that are stored on your data medium and that store certain settings and data that are to be exchanged with our system via your browser. A cookie usually contains the name of the domain from which the cookies is sent, as well as information about the age of the cookie and an alphanumeric identification code.
Cookies enable our system to recognise the device of the user and to make possible pre settings available immediately. As soon as the user accesses our platform, a cookie is transferred to the hard drive of the computer of the respective user. Cookies help us to improve our website and to provide you with a better and more personalised service. They enable us to recognise your computer or your (mobile) device when you return to our website and through this, we can:
- store information about your preferred activities on the website and thereby cater our website to your individual interests; and
- improve the speed when processing your requests.
We work together with third party services that support us with creating a more interesting internet service and website for you. Therefore, cookies from these partner companies (third party service providers) are also stored on your hard drive when you visit the website. In this case, the cookies are automatically deleted after a pre set time.
You can find a list of the cookies set by us in the following table:
|Cookie name||Cookie from the initial service provider or a third party cookie?|
If a third party cookie: Who causes the cookie?
|Description / Function||Standard expiration time|
|IngShop||initial service provider||session cookie||end of session|
|Cookieconsent_dismissed||initial service provider||cookie for cookie consent||365 days|
Should you not wish a use of browser cookies, you can configure your browser to not accept cookies. Please note that in this case you might only be able to use our website in a limited way or not at all. If you want to accept only our cookies and not those of our service providers and partners, you can select the option “Block third party cookies” in your browser. We do not accept responsibility for the use of third party cookies.
10. Job Application Process
If you apply for a job at Inspirion GmbH electronically, your data are used exclusively to process your job application and will not be forwarded to third parties. Please note that applications that you send to Inspirion GmbH via e mail are sent without encryption. Therefore, there is a risk that someone unauthorised might intercept and use these data.
11. Embedding of Services and Content of Third Parties
Our website uses content, services, and performance from other providers. For example, these might be videos provided by YouTube. In order for these data to be called and shown in the browser of the user, a transfer of the IP address is mandatory. The provider (in the following called “third party”) therefore notices the IP address of the respective user.
Even though we strive to solely use third parties that need the IP address only to provide content, we have no influence on whether or not your IP address might be stored. If that is the case, the process might be used for statistical purposes, amongst others. Provided that we are aware of your IP address being stored, we will point this out to you.
Use of YouTube
In order to integrate and show video content, our website uses plug ins of the website YouTube, which is controlled by Google. The provider of the video portal is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA.
When opening a web page with integrated YouTube plug in, a connection the servers of YouTube is established. Through this, YouTube will be aware of which of our pages you have visited.
If you are logged in to your YouTube account, YouTube can directly connect your surfing habits with your personal profile. You may avoid this by logging out in advance.
The use of YouTube is based on the interest to provide an appealing display of our online services. This accounts for a legitimate interest in terms of Article 6 paragraph 1 point (f) GDPR.
You can find details regarding the handling of user data in the Data Protection Policy of YouTube at: https://policies.google.com/privacy?hl=en.
12. Data Security
Unfortunately, the transmission of data via the internet is never 100 % secure, which is why we cannot guarantee the security of the data transmitted to our website via the internet.
Nevertheless, we protect our website through technical and organisational means against loss, destruction, access, modification, or distribution of your data by unauthorised persons.
In particular, your personal data is transmitted encrypted by us.
For this, we use the encoding system SSL/TLS (Secure Sockets Layer / Transport Layer Security). Our security measures are constantly improved in line with technological advances.
13. Rights of Data Subjects
Insofar as you are classified as a data subject in terms of Article 4 number 4 GDPR, you have the rights outlined by the GDPR regarding the processing of your personal data.
You can find the legal text of the following rights at: https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32016R0679&from=EN.
Right to Confirmation and Communication
On the grounds of Article 15 GDPR, you have the right to obtain from the controller a confirmation on whether or not personal data relating to you is processed. You may also at any time request information about the personal data related to you free of charge from the controller responsible for the data processing, and receive a copy of this information.
Right to Rectification
On the grounds of Article 16 GDPR, you have the right to obtain from the controller without undue delay the rectification of inaccurate personal data concerning you. Furthermore, taking into account the purposes of the processing, you have the right to have incomplete personal data completed, including by means of providing a supplementary statement.
Right to Erasure (‘Right to be Forgotten’)
On the grounds of Article 17 GDPR, you have the right to have personal data concerning you erased without undue delay, insofar as one of the reasons of Article 17 GDPR is existent and to the extent that the processing is not necessary.
Right to Restriction of Processing
On the grounds of Article 18 GDPR, you have the right to restrict the processing if one of the conditions of Article 18 GDPR is met.
Right to Data Portability
On the grounds of Article 20 GDPR, you have the right to receive the personal data concerning you, which you have provided us, in a structured, commonly used, and machine readable format, and you have the right to transmit those data to another controller without hindrance from us, insofar as the further conditions of Article 20 GDPR are met.
Right to Withdraw Consent
You have the right to withdraw your consent given to us for processing of your personal data at any time with effect for the future. Please address your revocation to the above mentioned contact details.
Right to Object
On the grounds of Article 21 GDPR, you have the right to object the processing of your personal data at any time. If the conditions for an effective revocation are met, processing through us must not continue.
Right to Lodge a Complaint with a Supervisory Authority
You have the right to lodge a complaint with a supervisory authority, in particular the member state of your current location, your workstation, or the location of the alleged violation, if you are of the opinion that the processing of personal data concerning you violated the regulations of the GDPR. This does not impact other administrative or judicial rights of appeal.
14. Transmission of Your Personal Data
The transmission of your personal data is carried out as described in the following paragraphs.
The website is hosted directly by Inspirion GmbH in Germany. By this means, we ensure that data is only processed in Germany. This is essential for operating the website, as well as for the justification, the implementation, and the execution of the established user contract, and also possible without your consent.
A transmission is furthermore carried out when we are authorised or obligated by legal regulations and/or official directives or court orders to forward your data. In particular, this refers to disclosure for the purpose of prosecution, danger prevention, or enforcement of intellectual property rights.
If your data are forwarded to third parties in the required extent, these will only have access to your personal data insofar as it is necessary to fulfil their tasks. These third party service providers are obliged to treat your personal data according to the applicable data protection laws, in particular the GDPR.
On principle, we will not forward your data without your consent beyond the scope of the aforementioned circumstances. In particular, we will not transmit your personal data to a body in a third party country or an international organisation.
15. Storage Duration for Personal Data
Regarding the storage duration, we will delete personal data as soon as the storage is no longer necessary to fulfil the original purpose and no legal obligation to retain the data exists. Ultimately, legal obligations to retain data remain the criteria for the final storage duration of your personal data. After the expiration of this period, the relevant data will be routinely deleted. Should legal obligations to retain data continue to exist, the processing of data will be restricted by blocking the data.
16. References and Links
When calling up web pages to which we include a link on our website, these may once again ask for details such as name, address, e mail address, browser characteristics, etc. This Data Protection Policy does not regulate the collection, transmission, or handling of personal data by third parties.
Third parties may have differing and distinct regulations when handling the collection, processing, and use of personal data. We therefore recommend that you inform yourself about the code of practice regarding the handling of personal data on the websites of these third parties.
17. Change of Data Protection Policy
We continuously develop our website further in order to provide you with a constantly improving service. We will keep this Data Protection Policy up to date and adjust it accordingly, if and when this may be necessary.
Of course we will give you due notice regarding possible changes of this Data Protection Policy. We will do this, for example, by e mail to the e mail address you provided us. Insofar as you may need to provide additional consent relating to our handling of your data, we will of course ask for your consent before relevant changes come into effect.
You can access the current version of our Data Protection Policy at all times at https://www.inspirion.eu/en/contact/privacy.
18. Data Protection Officer
If you have questions relating to data protection, please contact our Data Protection Officer.
Herold Unternehmensberatung GmbH
Mister Philipp Herold
Last updated: April 2019