Data Protection

DATA PROTECTION POLICY

Thank you for visiting our website. Compliance with the provisions of data protection law is particularly important to us. The aim of our Privacy Policy is explaining the type, scope and purpose of the processing of personal data to you as the user of our website and the rights you have, if you are deemed to be a data subject as per Art. 4 (1) of the General Data Protection Regulation. The following Privacy Policy takes into consideration the changes introduced on 25 May 2018 when the General Data Protection Regulation came into effect. At the same time, this declaration also meets the applicable requirements there of section 13 of the German Telemedia Act.

1. Data Controller

This website and the range of services are operated by

Inspirion GmbH
Zum Panrepel 39
28307 Bremen
Germany

Phone: +49 (0) 421 5227 0
Fax: +49 (0) 421 5227 126
Email:

info@inspirion.eu

Managing Director: Sönke Hinrichs.

2. General

We have developed this website so that we collect as little data from you as possible. It is generally possible to visit our website without disclosing any personal data. Only when you decide to use certain services (e.g. using the contact form), will it be necessary to process personal data. In this connection, we always ensure that your personal data is processed in harmony with the legal basis or the consent you have given. We comply with the regulations of the General Data Protection Regulation (GDPR), which has been in effect since 25 May 2018, and the relevant national regulations, such as the German Data Protection Act, the German Telemedia Act and other special data protection laws.

3. Definition

In harmony with the GDPR, the terms used in this Privacy Policy have the following meanings:

‘Personal data’ is all information that relates to an identified or identifiable natural person (in the following “data subject”); a natural person is seen to be identifiable if they can be identified, directly or indirectly, in particular by allocation to an identifier such as a name, an identification number, location data, an online identifier or to one or more special characteristics that are an expression of the physical, physiological, genetic, psychological, financial, cultural or social identity of this natural person;

‘Processing’ is every procedure or sequence of procedures carried out with or without the help of automatic processes or every such range of procedures in connection with personal data, such as collecting, recording, organising, ordering, storing, adapting or amending, reading, requesting, using, disclosing by transmission, distributing or any other form of provision, comparing or linking, restricting, erasing or destroying;

‘Restricting processing’ is marking stored personal data with the aim of restricting future processing;

‘Pseudonymisation’ is the processing of personal data in a manner so that the personal data cannot be allocated to a specific data subject without drawing on additional information, if this additional information is separately stored and subject to technical and organisational measures that guarantee that the personal data is not attributed to an identified or identifiable natural person;

The ‘controller’ or data controller describes the natural person or legal entity, public authority, institution or other centre that decides on the purpose and means of processing personal data alone or together with others; if the purposes and means of this processing are stipulated by Union law or the law of the Member States, the controller or the certain criteria of its appointment can be provided in accordance with Union law or the law of the Member States;

The ‘order processor’ is a natural person or legal entity, public authority, institution or other centre that processes personal data on behalf of the controller.

The ‘recipient’ is a natural person or legal entity, public authority, institution or other centre to which personal data is disclosed, regardless of whether this concerns a third party or not. Public authorities that may obtain personal data as part of an investigation in accordance with Union law or the law of the Member States are, however, not deemed to be recipients; the processing of this data by the specified public authorities is carried out in harmony with the applicable data protection regulations as per the purposes of the processing;

A ‘third party’ is a natural person or legal entity, public authority, institution or other centre, apart from the data subject, the controller, an order processor and persons authorised to process the personal data under the direct responsibility of the controller or an order processor;

‘Consent’ of the data subject of every voluntary declaration for the certain case, given in an informed manner and an unmistakable declaration of intention in the form of a declaration or another clear action with which the data subject gives an understanding that they agree with the processing of their personal data;

4. Consent

When you visit our website, we partly use certain personal data for which we require your consent. This occurs, for example, when you write us a message using our contact form or order our newsletter.

Declaration of consent

By using the forms that we provide you give your consent that we can collect the personal data you have provided and process it as presented in this Privacy Policy. This consent can be withdrawn at any time by a corresponding declaration to us with effect in the future. However, we must point out that using our services without your consent will no longer be possible. Please use the contact paths detailed above for your withdrawal (in this case, please give your name, email address and postal address).

5. Purpose and legal basis for processing personal data

The legal basis for processing personal data to establish, carry out and settle our range of services is Art. 6 (1) b GDPR. If we use external service providers within the scope of order processing, this processing is carried out on the legal basis of Art. 28 GDPR.

We collect, process and use personal data exclusively for the following purposes:

Purpose of data processing	Legal basis for the data processing (“Why is the data processing necessary?”)
To make contact and associated correspondence	On the basis of your consent
To deal with your concerns and any further advice you may require	On the basis of your consent
To process your order of videos	On the basis of pre-contractual measures at the request of the data subject
To send our newsletter	On the basis of your consent
To send individualised mailshots	On the basis of your consent
In order to ensure that our website is presented in a manner as effective and interesting as possible (e.g. by anonymised evaluation)	Due to legitimate interests
For the technical realisation of our range	Due to legitimate interests

6. Collected and processed personal data

We only collect and process personal data when you consciously provide this voluntarily e.g. by completing forms or sending emails.

Within the scope of the available forms this is in the first instance the following data:

Press contact:

Email address*
phone
company
title*
first name
last name*
street and house number
postal code
city
country
message*

Newsletter subscription:

e mail address*
phone
customer ID
PSI number
title
first name
last name
street and house number
postal code*
city*
country*

Order form for personalised videos:

company*
postal code*
city*
title*
first name*
last name*
e mail address*
street and house number
order related data (company address, contact person, contact details)
message*

The personal data you provide and its contents will remain exclusively with us and our affiliated companies. Your data will only be stored and processed for the purpose specified under point 5. Any use beyond the purpose shown requires your explicit consent. The same applies to any transfer and transmission of your data to third parties.

7. Newsletter

Within the scope of your registration for an email newsletter Inspirion GmbH requires your name and the email address to which the newsletter should be sent. Any additional disclosures are voluntary and will be used to address you personally and personalise the newsletter for you as well as to clarify any queries about the email address.

If you register for the newsletter on this website, Inspirion GmbH will use the data you have input exclusively for this purpose or to inform you about circumstances relevant to this service or its registration. Inspirion GmbH will transfer this data to the service provider Mapp DigitaI Germany GmbH for the purposes of administering and conducting mailshots. Inspirion GmbH has concluded a contract with its email marketing service provider, Mapp DigitaI Germany GmbH, for the order processing procedure. This ensures that this service provider complies with all points of the strict requirements of German data protection law when administering and conducting the newsletter mailshots. This ensures your data will only be stored within the EU with a high level of protection. Your data will not be stored on servers outside the EU.

A valid email address is required to receive the newsletter. The IP address you use to register for the newsletter will also be stored, as will the date on which you order the newsletter. This data will be used by Inspirion GmbH as evidence in the event of misuse if an unknown email address registers for the newsletter. Furthermore, in order to ensure an email address is not misused by third parties by being added to the lnspirion GmbH distribution lists, we work as per the “double opt-in” procedure. In this procedure, after registering you will receive a confirmation email sent to the email address you have given. Only when you have clicked on the link in this mail to confirm will you receive the desired newsletter. This procedure records the newsletter order, the sending of the confirmation mail and the receipt of the registration confirmation.

You can withdraw your consent to the storage of your data, your email address and its use for sending the newsletter at any time with effect in the future. Inspirion GmbH provides a link to unsubscribe in each newsletter. You can also send your cancellation to one of the contacts detailed above.

8. General logfiles

The web server temporarily stores access data of the requesting computer (IP address), the pages you visit on our site, the date and duration of the visit, the recognition data or the type of browser and operating system used, the website you visited previously and the successful call-up in log files. The technical administration of the website and the collection of anonymous statistics make it possible to evaluate accesses to the range of Inspirion GmbH with the aim of improving data protection and data security in our company, ultimately in order to ensure an optimal level of protection for the personal data we process.

Server logfile data is stored separately from the personal data you have given.

9. Cookies

Use of cookies
Information is collected and stored on our website using so-called browser cookies.

What are cookies?
These are small files stored on your data storage media that store certain settings and data to exchange with your system via your browser. A cookie usually contains the name of the domain from which the cookie was sent and information on the age of the cookie and an alpha-numeric identifier.

Why do we use cookies?
Cookies enable our systems to recognise the user’s device and make any pre-settings available immediately. As soon as a user accesses the platform, a cookie will be transmitted to the relevant user’s computer hard disk. Cookies help us to improve our website and to be able to offer you a service even more customised for you. They enable us to recognise your computer or (mobile) terminal again if you return to our website and thus:

Store information about your preferred activities on the website and thus orient our website on your individual interests.

To accelerate the speed of processing your enquiries.

We work together with third-party services that support us to arrange the internet range and website more interestingly for you. Therefore, when visiting the website, cookies from these partner companies (third-party providers) will be stored on your hard disk. These are cookies that will be automatically deleted after the stipulated time.

The cookies we use are listed in the following table:

Cookie name	Initial provider- cookies or third-party provider- cookie? For third-party cookies: who is the originator?	Description / Function	Standard time elapsed
Inspirion	Initial provider	Session cookie	End of session
Cookie consent dismissed	Initial provider	Cookie for cookie pop-up	365 days

Can I decide if cookies are used?
If you do not want to use browser cookies, you can set your browser so the storage of cookies is not accepted. Please note that in this case you might be able to use our website only with restrictions or even not at all. If you only want to accept our cookies but not the cookies of our service providers and partners, you can choose the setting “Block third-party provider cookies” in your browser. We cannot accept any responsibility for the use of third-party cookies

10. Application procedure

If you want to apply to Inspirion GmbH electronically, your disclosures will be used exclusively to process your application and will not be transferred to third parties. Please note that applications you send to Insipirion GmbH by email will be transmitted unencrypted so there is a risk of unauthorised access to and use of this data.

11. Inclusion of third-party services and contents

Our website uses contents and service ranges from other providers. These can be, for example, videos provided by YouTube. In order that this data can be called up in the user’s browser and presented, the IP address has to be transmitted. Thus, the provider (subsequently “third-party provider”) becomes aware of the user’s IP address.

Even though we make efforts only to use third-party providers that merely require the IP address to be able to deliver the contents, we have no influence on whether the IP address might be stored. This procedure is for statistical evaluation, among others. If we become aware that the IP address is stored, we will inform you.

Use of YouTube
Our website uses plug-ins to integrate and present video contents from the site YouTube, operated by Google. The provider of the video portal is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA.

If you visit a page with a YouTube plug-in, a connection will be made to YouTube servers. In the process, YouTube will be informed which of our pages you called up.

If you are logged in to your YouTube account, YouTube can allocate your surfing behaviour to you personally. You can prevent this by logging out of your YouTube account in advance.

We use YouTube in order to present our online range in an appealing manner. This is a legitimate interest in accordance with Art. 6 (1) f GDPR.

You will find further information about how user data is handled in the YouTube privacy policy on:

https://policies.google.com/privacy?hl=en.

12. Data security

Unfortunately, transmitting data via the internet is never 100% secure. For this reason, we cannot guarantee the security of data transmitted to our website.

However, we use staff and organisational measures to secure our website against the loss, destruction, access, amendment or distribution of your data by unauthorised persons.

In particular, we will transmit your personal data encrypted. For this purpose, we use the coding system SSL/TLS (Secure Sockets Layer/ Transport Layer Security). We continuously improve our security measures in accordance with technological developments.

13. Data subject rights

If you are a data subject as per Art. 4 (1) GDPR, you have the following rights concerning the processing of your personal data in accordance with the GDPR. You will find the legal text of the rights detailed below on

https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32016R0679&from=EN.

Right to confirmation and information
Under the conditions of Art. 15 GDPR you have the right to demand a confirmation of whether personal data about you is processed and free-of-charge information about personal data about you that is stored and a copy of this information from the data controller at any time.

Right to rectification
Under the conditions of Art. 16 GDPR you have the right to demand the rectification without delay of incorrect personal data about you. In addition, you have the right, taking the purposes of processing into account, to demand incomplete personal data is made complete, including by means of a supplementary declaration.

Right to erasure
Under the conditions of Art. 17 GDPR you have the right to demand personal data about you is erased without delay if one of the grounds specified in Art. 17 GDPR exists and if processing is not necessary.

Right to restrict processing
Under the conditions of Art. 18 GDPR you have the right to demand the restriction of processing if one of the conditions specified in Art. 18 GDPR is met.

Right to data portability
Under the conditions of Art. 20 GDPR you have the right to obtain personal data about you that you have provided to us in a structured, common and automatically readable format. You have the right to transfer this data to another controller without any impediment by us if the further conditions of Art. 20 GDPR are met.

Right to withdraw consent
You have the right to withdraw any consent you have given to process personal data with effect in the future. Please direct any withdrawal to the contact details given above.

Right to object
Under the conditions of Art. 21 GDPR you have the right to object to the processing of your personal data at any time. If an effective objection is made, we must no longer process this data.

Right to complain to a supervisory authority
Regardless of any other administrative law or judicial remedies, you have the right to complain to a supervisory authority, in particular in the Member State where you are resident, have your workplace or at the location of the alleged breach if, in your opinion, the processing of the personal data about you breaches the requirements of the GDPR.

14. Transfer of personal data

The transfer of your personal data is described below..

Our website is hosted directly at Inspirion GmbH in Germany. In this connection, we ensure data processing takes place solely in Germany. This is required to operate the website, and to establish, conduct and settle the existing user contract and is also possible without your consent.

A transfer will also be made if we are entitled or obliged to do so due to legal provisions and/or official or court orders. This can, in particular, concern providing evidence for criminal prosecutions, to avert danger or to assert ownership rights.

If your data is transferred to a service provider to the required extent, these providers will only have access to your personal data as far as is necessary for them to carry out their tasks. These service providers are obliged to treat your personal data as per the applicable data protection law, in particular, the GDPR.

Beyond the circumstances detailed, we will generally not transfer your data to third parties without your consent. In particular, we will not transfer any personal data to a centre in a third country of an international organisation.

15. Duration of storage of personal data

What applies to the duration of storage is that we will erase personal data as soon as its storage is no longer necessary to fulfil the original purpose and there are no longer any legal retention periods. Ultimately, the legal retention periods are the criterion for the final duration of storage of personal data. After the expiry of these periods, the corresponding data will be routinely erased. If there are any retention periods, processing will be restricted in the form of blocking the data.

16. References and links

When calling up internet sites referred to on our website, there may be a new request for disclosures such as your name, address, email address, browser characteristics etc. This Privacy Policy does not regulate the collection, transfer or handling of personal data by third parties.

These service providers may have their own, differing provisions for handling the collection, processing and use of personal data. You are therefore advised to find out about the practices of third-party providers when handling personal data before you input any personal data.

17. Changing the Privacy Policy

We continuously develop our website further in order to be able to provide you with an ever-better service. We will keep this Privacy Policy up-to-date at all times and amend it accordingly if and as far as this is necessary.

We will inform you about any changes to this Privacy Policy in good time as a matter of course. This will be done in an email we will send to the email address you have notified us of. Furthermore, if any further consent is required from you concerning our handling of your data, we will obtain this from you before these changes become effective as a matter of course.

You can call up the current version of our Privacy Policy on the internet at any time on

https://www.inspirion.eu/en/contact/privacy.

18. Data Protection Officer

If you have any questions concerning data protection law, please contact our Data Protection Officer.

Herold Unternehmensberatung GmbH

Mr. Philipp Herold
Hafenstraße 1a
23568 Lübeck

E-mail: privacy-officer[at]inspirion.eu
Web: www.mein-datenschutzbeauftragter.de

Version: May 2018