Privacy

We take data protection seriously

We take the protection of your privacy when processing personal data very seriously. When you visit our website, our web servers automatically record your Internet Service Provider’s IP address, the website from which you are visiting us, the pages you view on our site, and the date and duration of your visit. This information is essential for the technical delivery of the web pages and the safety of the server operation. This data is not analysed on an individual basis.

If you send us data via the contact form, this data will be stored on our servers as part of our data backup process. We will use your data solely for the purpose of dealing with your enquiry. Your data will be treated in strict confidence. No data will be disclosed to third parties.

Data controller:

Knaus Tabbert AG
Helmut-Knaus-Straße 1 .
94118 Jandelsbrunn
Phone:
Email: info@knaustabbert.de

The company data protection officer is:

Projekt 29 GmbH & Co. KG
14 Ostengasse
Regensburg
Phone:
Email: anfrage@projekt29.de

Personal data

Personal data is information relating to you. These include your name, your address and your email address. You do not need to provide any personal data to visit our website. In some cases, we need your name and address, as well as further details, in order to provide you with the service you require.

The same applies if we send you information material at your request or if we respond to your enquiries. In such cases, we will always make a note of it. Furthermore, we only store the data that you have provided to us automatically or voluntarily.

When you use one of our services, we generally only collect the data necessary to provide you with that service. We may ask you for further information, but the nature of this information is entirely voluntary. Whenever we process personal data, we do so in order to provide you with our services or to pursue our commercial objectives.

Automatically stored non-personal data

When you visit our website, we store certain information for administrative and technical reasons. These are: The type and version of the browser used, the date and time of access, and the IP address.

This data is anonymised and used solely for statistical purposes or to improve our internet and online services. This anonymised data is stored on systems that offer safety – separate from personal data – and cannot be linked to any specific individual. This means that your personal data remains protected at all times.

Cookies

When you visit our website, we may store information on your computer in the form of cookies. Cookies are small files that are sent from a web server to your browser and stored on your hard drive. Where cookies and similar technologies are not technically necessary, their use is based solely on your consent in accordance with Section 25(1) of the TDDDG in conjunction with Art. Article 6(1)(a) of the GDPR. Technically necessary cookies are used in accordance with Section 25(2) of the TDDDG. Consent that has already been given can be withdrawn or amended at any time via the cookie settings, with effect from that point onwards. Only the IP address is stored in this process – no other personal data. The information stored in these cookies enables us to recognise you automatically the next time you visit our website, making it easier for you to use.

Of course, you can also visit our website without accepting cookies. If you do not want your computer to be recognised on your next visit, you can also refuse to accept cookies by changing the settings in your browser to ‘Refuse cookies’. You can find the relevant instructions in the user guide for your browser. However, if you refuse to accept cookies, this may restrict your ability to use certain parts of our website.

Please renew your cookie consent

Google Tag Manager

This website uses Google Tag Manager. Google Tag Manager is a service for managing website tags. Google Tag Manager itself does not process any personal data, but it does allow the integration of other services which may process personal data. This information will only be used once appropriate consent has been given via our consent management system. The tool triggers other tags, which may in turn collect data. Google Tag Manager does not access this data. If tracking has been disabled at domain or cookie level, this setting will apply to all tracking tags implemented using Google Tag Manager. You can find Google’s privacy policy for this tool here: https://www.google.com/analytics/terms/tag-manager/

Google Analytics with anonymisation feature

We use Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics uses cookies and similar technologies to analyse how our website is used. The processing is carried out solely on the basis of your consent in accordance with Art. Article 6(1)(a) of the GDPR and Section 25(1) of the TDDDG. The information generated by Google Analytics may be transferred to Google LLC’s servers in the United States. The transfer is carried out on the basis of the EU-US Data Privacy Framework or appropriate safeguards in accordance with Article 44 ff. DSGVO. IP anonymisation is enabled on this website. You can withdraw your consent at any time via the cookie settings, with effect from that point onwards.

Google Googleadservices / Google AdWords Conversion Tracking

This website uses online marketing tools provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. This helps us to identify whether a visitor has arrived at our website via a Google advert. Google uses cookies that are stored on your computer and enable the analysis of website usage. Cookies used for so-called “conversion tracking” are set when you click on an advert displayed by Google. These cookies expire after 30 days and are not used to identify individuals. If you wish to prevent conversion tracking, you can configure your browser to block cookies from the domain “googleadservices.com”. You may also exercise your right to opt out. If you would like to find out more about these methods or would like to know what options are available to you to prevent Google from using this information, click here:
https://www.google.com/settings/u/0/ads/authenticated

Facebook Custom Audiences Pixels

We use the Meta Pixel provided by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland, on our website. Using the Meta Pixel, we can track users’ behaviour after they have clicked on a Facebook or Instagram advert. This processing is carried out solely on the basis of your consent in accordance with Art. Article 6(1)(a) of the GDPR and Section 25(1) of the TDDDG. This may involve the transfer of personal data to servers operated by Meta Platforms Inc. in the United States. The transfer is carried out on the basis of the EU-US Data Privacy Framework or appropriate safeguards in accordance with Article 44 ff. DSGVO. You can withdraw your consent at any time via the cookie settings.

YouTube in enhanced privacy mode

We use YouTube to embed videos. The videos have been embedded in enhanced privacy mode. Like most websites, YouTube also uses cookies to collect information about visitors to its site. YouTube uses these, amongst other things, to collect video statistics, prevent fraud and improve the user experience. This also establishes a connection with the Google DoubleClick network. Playing the video may trigger further data processing operations. We have no control over that. For further information on data protection at YouTube, please refer to their privacy policy at: http://www.youtube.com/t/privacy_at_youtube

Hubspot

HubSpot (CRM and marketing platform) We use the “HubSpot” service provided by HubSpot Inc., 25 First Street, Cambridge, MA 02141, USA, to manage customer contacts, carry out marketing activities and provide forms. We use HubSpot in particular for: • managing contact details (customer relationship management), • running and analysing marketing campaigns, • providing forms (e.g. contact, newsletter and registration forms). In doing so, personal data (e.g. name, email address, usage data) may be processed and linked together. Processing is carried out on the basis of a data processing agreement in accordance with Article ARTICLE 28 OF THE GDPR. When using HubSpot, personal data may be transferred to the USA. HubSpot is certified under the EU-US Data Privacy Framework, meaning that data transfers are made in accordance with Article in accordance with Article 45 of the GDPR. In the absence of certification, the transfer is carried out on the basis of standard contractual clauses in accordance with Article ARTICLE 46 OF THE GDPR.

Newsletters and email marketing When you subscribe to our newsletter, we process your email address and any other data you voluntarily provide (e.g. your name) in order to send you regular updates about our products, services and events. Registration is carried out using the double opt-in procedure. In doing so, we store your IP address, as well as the date and time of your registration and confirmation, so that we can provide evidence of your consent. The newsletter is sent out and the list of recipients is managed via HubSpot. Performance measurement (tracking): Our newsletters contain tracking technologies (e.g. web beacons) that allow us to see whether and when emails have been opened and which links have been clicked. It is also possible to track whether certain actions (e.g. registrations) have taken place after a link has been clicked. These analyses help us to optimise our content and tailor it more effectively to the interests of our audience. Legal basis: Art. Article 6(1)(a) of the GDPR (Consent) 7 GDPR Article 7(2)(3) of the Unfair Commercial Practices Act (UWG) The logging of the registration process is carried out on the basis of Article Article 6(1)(f) of the GDPR (evidence of consent). You can withdraw your consent at any time with future effect, for example by clicking the unsubscribe link in the newsletter.

Forms (including iFrames)

Forms (e.g. contact, events, downloads) We provide forms on our website that you can use to get in touch with us, register for events or download Content. The forms are provided via HubSpot and may be technically embedded as external content (e.g. iFrame). However, technical data (e.g. IP address) may be transmitted to HubSpot as soon as the forms are loaded. The data you have provided will be processed for the purpose of handling your enquiry, carrying out pre-contractual measures or – provided you have given your consent – for marketing purposes. Legal basis: • Art. Article 6(1)(b) of the GDPR (contract / pre-contractual measures) • Art. Article 6(1)(a) of the GDPR (consent) • Section 25(1) of the TDDDG (consent to external content / tracking technologies)

Online job application

The application details you provide to us will be collected and processed electronically by us for the purpose of handling the application process. This relates in particular to the following personal data: Title, first name, surname, street, postcode, town/city, email address, reason for contact, cover letter, CV and references.

If your application is followed by the conclusion of an employment contract, the data you have provided may be stored in your personnel file by us for the purposes of standard organisational and administrative processes, in accordance with the relevant legal provisions.

If your job application is rejected, the data you have provided will be automatically deleted two months after you are notified of the rejection. This does not apply if longer-term storage is required by law (for example, due to the obligation to provide evidence under the General Equal Treatment Act) or if you have expressly consented to your data being stored for a longer period in our database of prospective customers.

Safety

We have put in place technical and administrative security measures to protect your personal data against loss, destruction, tampering and unauthorised access. All our employees and service providers working on our behalf are bound by the applicable data protection laws.

Whenever we collect and process personal data, it is encrypted before being transmitted. This means that your data cannot be misused by third parties. Our security measures are subject to a continuous improvement process, and our privacy policies are regularly updated. Please make sure you have the latest version.

Rights of data subjects

Please feel free to contact us at any time if you would like to find out what personal data we hold about you, or if you would like us to correct or delete it. Furthermore, you have the right to restrict processing (Art. (Article 18 of the GDPR), a right to object to processing (Article (Article 21 of the GDPR) and the right to data portability (Article (ARTICLE 20 OF THE GDPR).

In such cases, please contact us directly.

What data is processed, and what are its sources?

We process the data we have received from you in connection with the initiation or performance of a contract, on the basis of your consent, or in connection with your application to join us or your employment with us.

Personal data includes:

Your personal and contact details; for customers, these include, for example, first name and surname, address, contact details (email address, telephone number, fax number) and bank details.

For applicants and employees, this includes, for example, first name and surname, address, contact details (email address, telephone number, fax number), date of birth, information from CVs and employment references, bank details, and religious affiliation.

For business partners, this includes, for example, the names of their legal representatives, company name, company registration number, VAT registration number, business registration number, address, contact details (email address, telephone number, fax number) and bank details.

For participants in competitions, e.g. first name and surname, address, contact details (email address, telephone number).

In addition, we also process the following other personal data:

• Information on the nature and content of contract data, order data, sales and transaction data, customer and supplier history, and consultancy documents,

• Marketing and sales data,

• Information from your electronic communications with us (e.g. IP address, login details),

• other data that we have received from you in the course of our business relationship (e.g. during customer meetings),

• Data that we generate ourselves from master/contact data and other data, such as through analyses of customer needs and customer potential,

• a record of your consent to receive, for example, newsletters.

For what purposes and on what legal basis is the data processed?

We process your data in accordance with the provisions of the General Data Protection Regulation (GDPR) and the Federal Data Protection Act 2018, as amended:

• to fulfil (pre-)contractual obligations (Article 6(1)(b) of the GDPR): Your data is processed for the purpose of fulfilling the contract, either online or at one of our branches, in order to manage the employment contracts of your staff within our Company. The data is processed, in particular, when establishing business relationships and when fulfilling contracts with you.

• to comply with legal obligations (Article 6(1)(c) of the GDPR): We need to process your data in order to comply with various legal obligations, for example those set out in the German Commercial Code or the German Fiscal Code.

• to safeguard legitimate interests (Article 6(1)(f) of the GDPR): Following a balancing of interests, data may be processed beyond the actual performance of the contract in order to safeguard our legitimate interests or those of third parties. Data processing to safeguard legitimate interests takes place, for example, in the following cases:

– Advertising or marketing (see point 4),
– Measures for business management and the further development of services and products;
– Maintaining a group-wide customer database to improve customer service
– for the purposes of legal proceedings.

• on the basis of your consent (Article 6(1)(a) of the GDPR): If you have given us your consent to process your data, for example to send you our newsletter.

Processing of personal data for marketing purposes

You may object at any time to the use of your personal data for marketing purposes, either in full or in relation to specific activities, without incurring any costs other than the standard transmission charges.

In accordance with the legal provisions of Section 7(3) of the Unfair Commercial Practices Act (UWG), we are entitled to use the email address you provided when entering into the contract for the purpose of direct marketing of our own similar goods or services. We will send you these product recommendations regardless of whether you have subscribed to a newsletter. If you do not wish to receive such recommendations from us by email, you may object to the use of your email address for this purpose at any time, without incurring any costs other than the standard transmission charges. A written notification is sufficient for this purpose. Of course, every email always includes an unsubscribe link.

Who will receive my data?

Even when we engage a service provider to process data on our behalf, we remain responsible for the protection of your data. All data processors are contractually obliged to treat your data as confidential and to process it only for the purposes of providing the service. The data processors we engage will receive your data to the extent that they require it to perform their respective services. These include, for example, IT service providers, whom we require to operate and maintain the safety of our IT system, as well as advertising and address publishers for our own promotional campaigns.

Your data will be processed in our customer database. The customer database helps to improve the quality of existing customer data (removing duplicates, flagging customers as having moved or passed away, and correcting addresses), and enables the data to be enriched with information from public sources.

This data is made available to group companies where necessary for the purpose of contract fulfilment. Customer data is stored on a company-by-company basis and kept separate, with our parent company acting as a service provider for the individual participating companies.

Where there is a legal obligation to do so, or in the context of legal proceedings, public authorities, courts and external auditors may be recipients of your data.

In addition, insurance companies, banks, credit reference agencies and service providers may receive your data for the purposes of entering into and fulfilling contracts.

Your data will not be passed on to our partners (e.g. in connection with competitions) or other third parties unless we have your express consent.

How long will my data be stored?

We will process your data until the business relationship ends or until the applicable statutory retention periods have expired (as set out, for example, in the German Commercial Code, the German Fiscal Code, the German Care Homes Act or the German Working Hours Act); furthermore, we will continue to process your data until any legal disputes in which the data is required as evidence have been resolved.

Is personal data transferred to a third country?

Where individual services used transfer personal data to third countries (in particular the USA), this is done exclusively on the basis of appropriate safeguards in accordance with Article 44 ff. The GDPR, in particular the European Commission’s adequacy decisions or standard contractual clauses. In individual cases, data will only be transferred on the basis of an adequacy decision by the European Commission, standard contractual clauses, appropriate safeguards or your explicit consent.

What data protection rights do I have?

You have the right at any time to access, rectify, erase or restrict the processing of your stored data, the right to object to the processing, as well as the right to data portability and the right to lodge a complaint in accordance with the provisions of data protection law.

Right of access:
You may request information from us as to whether and to what extent we process your data.

Right to rectification:
If we process your data and it is incomplete or inaccurate, you may request that we correct or complete it at any time.

Right to erasure:
You may request that we erase your data if we are processing it unlawfully or if such processing disproportionately infringes upon your legitimate interests. Please note that there may be reasons preventing immediate deletion, for example in the case of statutory retention obligations.

Regardless of whether you exercise your right to erasure, we will erase your data immediately and in full, provided that there is no contractual or statutory obligation to retain it.

Right to restriction of processing:
You may request that we restrict the processing of your data if

– You dispute the accuracy of the data, for a period that allows us to verify its accuracy.
– the processing of the data is unlawful, but you object to its erasure and instead request that its use be restricted,
– we no longer require the data for the intended purpose, but you still need it to assert or defend legal claims, or
– You have objected to the processing of your data.

Right to data portability:
You may request that we provide you with the data you have supplied to us in a structured, commonly used and machine-readable format, and that you may transmit this data to another controller without hindrance from us, provided that

– we process this data on the basis of consent you have given (which may be withdrawn) or in order to fulfil a contract between us, and
– this processing is carried out using automated means.

Where technically feasible, you may request that we transfer your data directly to another data controller.

Right to object:

If we process your data on the basis of a legitimate interest, you may object to such processing at any time; this would also apply to profiling carried out on the basis of these provisions. We will then no longer process your data, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing is necessary for the establishment, exercise or defence of legal claims. You may object to the processing of your data for the purposes of direct marketing at any time without giving any reason.

Right to appeal:

If you believe that we are in breach of German or European data protection law in our processing of your data, please contact us so that we can clarify any issues. You are, of course, also entitled to contact the supervisory authority responsible for your case, namely the relevant State Office for Data Protection Supervision. If you wish to exercise any of the rights listed above, please contact our Data Protection Officer. If necessary, we may ask you to provide further information to verify your identity.

Am I obliged to provide data?

The processing of your data is necessary for the conclusion or performance of the contract you have entered into with us. If you do not provide us with this information, we will generally have to refuse to enter into the contract or will no longer be able to fulfil an existing contract and will therefore have to terminate it. However, you are not obliged to give your consent to the processing of data that is not relevant to the performance of the contract or not required by law.

Competitions, market and opinion polling

In the case of competitions, we use your data to notify you if you have won and to promote our offers. You can find detailed notes in the terms and conditions for the relevant competition, where applicable.

We also use your data for market research and opinion polling. Naturally, we use this data exclusively in anonymised form for statistical purposes and solely for Knaus Tabbert AG. Your survey responses will not be shared with third parties or published. We do not store the responses to our surveys alongside your email address or any other personal data.

I consent to Knaus Tabbert processing and using my personal data for market and opinion polling for its own purposes.

You may object at any time to the use of your data for market research and opinion polling, either in full or in relation to specific activities, without incurring any costs other than the standard transmission charges. A written notification sent to the contact details specified in point 1 (e.g. email, fax, letter) is sufficient for this purpose. Of course, you will also find an unsubscribe link in every survey email.

Sharing your data within the sales organisation

In order to process your enquiry, we may need to pass on your personal data to authorised dealers, importers or commercial agents who work with us as part of our sales organisation. These recipients are either located within the European Union (EU) or the European Economic Area (EEA) or, in the case of third countries, are required to ensure an adequate level of data protection through appropriate safeguards (e.g. EU standard contractual clauses).
Your data will be shared solely for the purpose of processing your enquiry. Any further use of your data by these third parties is prohibited.

Changes to this privacy policy

We reserve the right to amend our privacy policy should this become necessary due to new technologies. Please make sure you have the latest version. If any significant changes are made to this privacy policy, we will announce them on our website.

Anyone interested in our website or visiting it can contact us regarding data protection matters at:

Projekt 29 GmbH & Co. KG
14 Ostengasse
Regensburg

Tel.: +49 176 47710725 0941 2986930
Fax: 0941 29869316
Email: anfragen@projekt29.de
Website: www.projekt29.de

If our Data Protection Officer is unable to resolve your query to your satisfaction, you retain the right to lodge a complaint with the data protection supervisory authority responsible for your federal state.