When using our website, personal data is processed by you. Personal data is all information with which you can be identified or which can be related to you personally.
We take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this data protection declaration. Below you will find an explanation of what data we collect and how and for what purpose this is done.
1. Name and contact details of the Controller and the Data Protection Officer
The Controller according to Art. 4(7) GDPR (EU General Data Protection Regulation) is:
represented by the CEO M.Re. Dipl.-Ing. Architect Tobias Ell
52074 Aachen | Germany
Tel +49 (241) 88 75-0
The Data Protection Officer for Carpus+Partner AG can be contacted at the above address, for the attention of the Data Protection Officer or at email@example.com.
2. Processing of personal data when visiting our website
a Server log data
When you visit our website, the following information is automatically sent to the server of our website by the browser used on your terminal device:
- IP address of the requesting computer,
- date and time of the access,
- time zone difference to Greenwich Mean Time (GMT),
- name and URL of the retrieved file,
- access status/HTTP status code,
- respective transferred data volume,
- website from which the access occurs (referrer URL),
- browser used,
- the operating system of your computer and its interface,
- the name of your access provider and
- language and version of the browser software.
This information is stored for 7 days in a so-called log file.
The legal basis for data processing is Art. 6(1) lit. f) GDPR. Our legitimate interest follows from the purposes listed below:
- guaranteeing smooth-running connection establishment to the website,
- guaranteeing convenient use of our website,
- evaluation of the system security and stability, as well as
- for additional administrative purposes.
In no event do we use the collected data for the purpose of drawing conclusions as to your personal details.
Information is filed in the cookie, which arises in relation to the specifically used end device. However, this does not mean that we directly receive knowledge of your identity.
Most browsers accept cookies automatically. We have no influence on the duration of storage or deletion of cookies. The settings are made by the respective services or by the user himself. However, you can configure your browser such that no cookies are stored on your computer or a message always appears before a new cookie is created. However, the complete deactivation of cookies may lead to you not being able to use all functions of our website.
The data processed by cookies are required for the purposes referred to, in order to preserve our interests in accordance with Art. 6(1) lit. f) GDPR.
Session cookies (Temporary cookies)
We use so-called session cookies, in order to make the use of our offer more pleasant for you. Session cookies store settings that you have made (e.g. language) for the duration of the session. These cookies are automatically deleted after leaving our website.
For this, we also use permanent cookies to optimize the user friendliness, which are stored on your end device until their expiry date is reached or until they are deleted by the user. If you visit our website again, in order to use our services, it is automatically identified that you have already been with us and which entries and setting you have made, so you do not need to repeat them.
On this website we use tools and plugins from Google (Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001). When using our website and the corresponding plug-ins, data is transferred to Google.
The data is generally transmitted to a Google server in the USA and stored there. Google has submitted to the EU-US Privacy Shield (see https://www.privacyshield.gov/EU-US-Framework).
a Google Analytics
On this website, we use Google Analytics, a web analytics service. We can improve our service using the statistics obtained and design it to be more interesting for you, as a user. The legal basis for the use of Google Analytics is Art. 6(1) lit. f) GDPR.
With the function “demographic characteristics” reports can be generated, which contain statements about age, gender and interests of the website visitors. These data originate from interest-based advertising of Google and from visitor data of third-party providers. These data cannot be allocated to a specific person. You can deactivate these functions at any time in your Google account or generally prevent the collection of your data by Google Analytics, as described below.
On our behalf, Google will use this information to evaluate your use of the website, to produce reports concerning the website activities and to produce additional services to us associated with the use of the Internet and website.
By the add-on “_anonymizeIp()” your IP address is shortened by Google before the further processing, a personal reference can thereby be excluded. The full IP address will only be transferred to a Google server in the USA and abbreviated there in exceptional cases. The IP address sent by your browser within the context of Google Analytics will not be combined with other data of Google.
Objection to data collection
Commissioned data processing
We have concluded a contract with Google for commission data processing and implement the strict stipulations of the German data protection authorities for the use of Google Analytics.
b Google Maps
We link to Google Maps on this website. This way, we can display our company locations in interactive maps. The legal basis for the use of Google Maps is Art. 6(1) lit. f) GDPR.
The IP address must be processed by Google in order for the map to be displayed. By visiting the website, Google also receives the information that you have accessed the corresponding sub-site on our website. If you have a Google account and are logged in, your data are allocated directly to your account. If you do not want the allocation to your profile with Google, you must log out before activating the map.
On this website we use plugins of the YouTube website operated by Google (YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA). This way, we can display videos directly on the website and allows you to conveniently use the video play function. The legal basis for the use of YouTube is Art. 6(1) lit. f) GDPR.
By visiting the website, YouTube receives the information that you have accessed the corresponding sub-site on our website. If you have a YouTube account and are logged in, your data are allocated directly to your account. If you do not want the allocation to your profile with YouTube, you must log out before activating the video.
4. Social media pages
We run one company page on each of the following platforms:
The data you enter on our social media pages, such as videos, images, comments, likes, public messages, etc., are published by the respective social media platform and never used or processed by us for other purposes. We only reserve the right to delete content if this should be necessary. If necessary, we share your content on our site and communicate with you via the social media platform. The legal basis is Art. 6(1) lit. f) GDPR. Data processing is carried out in the interest of our public relations work as well as communication and networking.
The operator of the respective social media platform also carries out data processing on which we have only limited influence. In addition, we have no knowledge of what data the operator is processing. At the points where we can exert influence, we work within the framework of the possibilities available to us to ensure that the operator of the social media platform treats the data in accordance with data protection regulations.
5. Recipients / disclosure of data
If not already mentioned above, data will not be passed on to third parties. However, we use service providers for the operation of this website (IT service providers, digital agencies). It may happen that a service provider becomes aware of personal data. We select our service providers carefully – particularly with regard to data protection and data security – and take all measures required under data protection law for permissible data processing.
6. Rights of data subjects
You have the right to information about the personal data concerning your person processed by us. In the case of a request for information that is not made in writing, please understand that we may then request information from you that proves that you are the person you claim to be. Furthermore, you have a right of correction or deletion or to restriction of the processing, insofar as you are legally entitled to this. Moreover, you have a right of objection to the processing within the context of the statutory provisions. The same applies for a right to data portability.
7. Right to object
If your personal data are processed on the basis of legitimate interests in accordance with Art. 6(1) lit. f) GDPR, you have the right to lodge an objection against the processing of your personal data, in accordance with Art. 21 GDPR, insofar as reasons exist for this, which arise from your specific situation or if the objection is aimed against direct marketing. In the latter case, you have a general right to object, which will be implemented by us, without indicating a specific situation.
If you wish to assert your right of revocation or objection, it is sufficient to send an e-mail to firstname.lastname@example.org.
8. Data security
Within the website visit, we use the widely prevalent SSL procedure (secure socket layer) in conjunction with the respective highest encryption level, which is supported by your browser. You can identify whether an individual page of our Internet presence has been transferred using encryption, you can recognize this by the closed illustration of the key/lock symbol in the bottom status bar of your browser.
We also use appropriate technical and organizational security measures, in order to protect your data from accidental or malicious manipulation, partial or complete loss, destruction of from unauthorized access by third parties. Our security measures are continuously improved in accordance with technological developments.