• Data Privacy Statement of PTV Group

    PTV Group is committed to Internet-based business models and to developing an Internet-based offering of our applications and solutions. Thank you for visiting one of our websites and for your interest in our company and our solutions and services.

    This privacy policy describes how we collect and record, use, disclose, transmit and store ("process") your personal data. The personal data collected depends on the context of your interaction with us. We always treat your personal data confidentially and in accordance with the legal data protection regulations and this privacy policy.

    This declaration refers to our offer:

     

    1. General information

     

    1.1 Information about the responsible party (referred to as the “controller” in the GDPR)

    The data processing controller on this website is:

    PTV Planung Transport Verkehr AG
    Haid-und-Neu-Str. 15
    76131 Karlsruhe, Germany
    Email: info(at)ptvgroup.com

    We may share contact information of business partners with other affiliated companies of the PTV Group as part of your business relationship with us. We and the affiliated companies of PTV Group are jointly responsible for the protection of your personal data (Art. 26 Basic Data Protection Regulation). To ensure that you can easily and reliably exercise your data protection rights within the scope of this joint responsibility, we have agreed with our affiliated companies that you can assert your data protection rights described in xxx not only against the respective company of the PTV Group, but also centrally against PTV Planung Transport Verkehr AG.

    Data protection officer required by law

    We have appointed a data protection officer for our company.

    Thomas Heimhalt
    DATENSCHUTZ perfect GbR, Karlsruhe, Germany
    Email: datenschutz(at)ptvgroup.com

     

    1.2 Processing of personal data when using our websites

    1.2.1 What personal data is collected? 

    Our websites are generally freely accessible. Personal information is only collected if it is necessary for the execution of the services available on the website. When you visit PTV Group's websites, certain information is stored, particularly about your browser, operating system and IP address.

    If you use a contact or registration form, the information you provide is recorded. 

    We also collect 

    • IP addresses in anonymous form
    • Data required for the anonymous determination and analysis of your user behaviour; this includes the IP address as well as meta information such as the browser you use, the browser language, date and time, user preferences, e.g. by setting cookies.

    This does not include information whose content does not directly indicate the identity or the factual circumstances of an individual person, e.g. the number of visitors to a website.

     

    1.3 What rights do you have as far as your information is concerned?

    You have the right to receive information free of charge about the origin, recipient and purpose of your stored personal data at any time. You also have the right to demand the correction, blocking or deletion of this data. For this purpose, as well as for further questions regarding data protection, you can contact us at any time at the address given in the imprint. Furthermore, you have a right of appeal to the responsible supervisory authority.

    1.3.1 Revocation of your consent to the processing of data

    A wide range of data processing transactions are possible only subject to your express consent. You can also revoke at any time any consent you have already given us. This shall be without prejudice to the lawfulness of any data collection that occurred prior to your revocation.

    Right to object to the collection of data in special cases; right to object to direct advertising (Art. 21 GDPR)

    IN THE EVENT THAT DATA ARE PROCESSED ON THE BASIS OF ART. 6 SECT. 1 LIT. E OR F GDPR, YOU HAVE THE RIGHT TO AT ANY TIME OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA BASED ON GROUNDS ARISING FROM YOUR UNIQUE SITUATION. THIS ALSO APPLIES TO ANY PROFILING BASED ON THESE PROVISIONS. TO DETERMINE THE LEGAL BASIS, ON WHICH ANY PROCESSING OF DATA IS BASED, PLEASE CONSULT THIS DATA PROTECTION DECLARATION. IF YOU LOG AN OBJECTION, WE WILL NO LONGER PROCESS YOUR AFFECTED PERSONAL DATA, UNLESS WE ARE IN A POSITION TO PRESENT COMPELLING PROTECTION WORTHY GROUNDS FOR THE PROCESSING OF YOUR DATA, THAT OUTWEIGH YOUR INTERESTS, RIGHTS AND FREEDOMS OR IF THE PURPOSE OF THE PROCESSING IS THE CLAIMING, EXERCISING OR DEFENCE OF LEGAL ENTITLEMENTS (OBJECTION PURSUANT TO ART. 21 SECT. 1 GDPR).

    IF YOUR PERSONAL DATA IS BEING PROCESSED IN ORDER TO ENGAGE IN DIRECT ADVERTISING, YOU HAVE THE RIGHT TO AT ANY TIME OBJECT TO THE PROCESSING OF YOUR AFFECTED PERSONAL DATA FOR THE PURPOSES OF SUCH ADVERTISING. THIS ALSO APPLIES TO PROFILING TO THE EXTENT THAT IT IS AFFILIATED WITH SUCH DIRECT ADVERTISING. IF YOU OBJECT, YOUR PERSONAL DATA WILL SUBSEQUENTLY NO LONGER BE USED FOR DIRECT ADVERTISING PURPOSES (OBJECTION PURSUANT TO ART. 21 SECT. 2 GDPR).

    1.3.2 Right to log a complaint with the competent supervisory agency

    In the event of violations of the GDPR, data subjects are entitled to log a complaint with a supervisory agency, in particular in the member state where they usually maintain their domicile, place of work or at the place where the alleged violation occurred. The right to log a complaint is in effect regardless of any other administrative or court proceedings available as legal recourses.

    1.3.3. Right to data portability

    You have the right to demand that we hand over any data we automatically process on the basis of your consent or in order to fulfil a contract be handed over to you or a third party in a commonly used, machine readable format. If you should demand the direct transfer of the data to another controller, this will be done only if it is technically feasible.

     

    1.4 Your obligation to provide data 

    For the establishment and execution of a business relationship or for a pre-contractual relationship with us are necessary or we are legally obliged to collect the data, it is necessary that you provide the data. Without this data we cannot conclude or execute a contract with you. This may also refer to data required later within the scope of the business relationship.

     

    1.5 Storage duration

    Unless a more specific storage period has been specified in this privacy policy, your personal data will remain with us until the purpose for which it was collected no longer applies. If you assert a justified request for deletion or revoke your consent to data processing, your data will be deleted, unless we have other legally permissible reasons for storing your personal data (e.g. tax or commercial law retention periods); in the latter case, the deletion will take place after these reasons cease to apply.

     

    1.6 SSL encryption

    For security reasons and to protect the transmission of confidential content, such as purchase orders or inquiries you submit to us as the website operator, this website uses a SSL encryption program. You can recognize an encrypted connection by checking whether the address line of the browser switches from “http://” to “https://” and also by the appearance of the lock icon in the browser line.

    If the SSL encryption is activated, data you transmit to us cannot be read by third parties.

     

    1.7 Information on data transfer to the USA

    Our website uses, in particular, tools from companies based in the USA. When these tools are active, your personal information may be transferred to the US servers of these companies. We must point out that the USA is not a safe third country within the meaning of EU data protection law. US companies are required to release personal data to security authorities without you as the data subject being able to take legal action against this. The possibility cannot therefore be excluded that US authorities (e.g. secret services) may process, evaluate and permanently store your data on US servers for monitoring purposes.  We have no influence over these processing activities.

     

    1.8 Objection to receiving promotional emails

    We hereby expressly object to the use of contact details, which have been published in accordance with editorial requirements, for sending advertising and promotional material which has not been explicitly requested. The same applies to the e-mail address datenschutz(at)ptvgroup.com . Website operators reserve the right to take legal action in the event of unsolicited mailing of promotional information, for example in the form of spam emails.

     

    2. Hosting of our websites

    Unless otherwise stated, our websites are hosted on servers of the PTV Group. These are located in an external computer center (housing). For the PTV platform, however, the hosting is done by an external provider. You will find information on this in section 4.1.3.

     

    3. Legal basis of the processing

    Unless otherwise expressly stated in the collection of personal data, the legal basis for data processing is

    • the execution and performance of a contract with you (Article 6 (1) (b) of the Basic Data Protection Regulation) ("Contract Implementation"),
    • the fulfilment of legal obligations to which we are subject (Article 6 (1) (c) of the Basic Data Protection Regulation), ("fulfilment of legal obligations") or
    • Protection of our legitimate interests (Article 6 (1) (f) of the Basic Data Protection Regulation) ("legitimate interest in processing"). Our legitimate interest lies in the processing of your personal data for the purpose of (i) offering and operating the online services and (ii) initiating, implementing and handling our business relationship. To the extent that, according to the table below, our legitimate interest in processing is indicated as the legal basis for the processing of your personal data, we believe that your interests, fundamental rights and freedoms are sufficiently taken into account because (i) we regularly review the processing activities and underlying processes described in this Privacy Policy, (ii) we take the protection of your personal data into account in our processes, (iii) we guarantee the transparency of our processing activities and (iv) you are entitled to the aforementioned rights with regard to our processing activities. If you would like more information about the described balancing of interests, please contact our privacy organization at datenschutz@ptvgroup.com .
    • If you have expressly given your consent to the processing of your personal data in individual cases, this consent is the legal basis for the processing (Article 6 (1) (a) of the Basic Data Protection Regulation) ("Consent").

     

    3.1 Processing purposes and their legal basis

    Contact form, order a newsletter 

    • Consent when given voluntarily (Article 6 (1) (a) of the basic data protection regulation)
    • Legitimate interest in processing (Article 6 (1) (f) of the basic data protection regulation)

    Registration and implementation of PTV Group events

    • Consent when given voluntarily (Article 6 (1) (a) of the basic data protection regulation)
    • In the case of paid events, also contract performance (Article 6 (1) (b) of the basic data protection regulation)
    • Legitimate interest in processing (Article 6 (1) (f) of the basic data protection regulation)

    Enforcement of our terms of use, assertion and defence of legal claims, defence and prevention of fraudulent and similar acts, including attacks on our IT infrastructure

    • Compliance with legal obligations (Article 6 (1) (c) of the basic data protection regulation)
    • Legitimate interest in processing (Article 6 (1) (f) of the basic data protection regulation)

    Communication with customers and suppliers about products, services and projects, e.g. to process enquiries from the contractual partner or to provide technical information about products

    • Performance of the contract (Article 6 (1) (b) of the data protection regulation)
    • Legitimate interest of PTV Group in the processing (Article 6 (1) (f) of the Data Protection Regulation)

    Planning, execution and administration of the (contractual) business relationship between the customer and us, e.g. to process orders for products and services, to collect payments, for accounting and billing purposes and to carry out deliveries and support services

    • Performance of the contract (Article 6 (1) (b) of the GDPR)
    • Compliance with legal obligations (Article 6 (1) (c) of the GDPR)

    To carry out customer satisfaction surveys and direct marketing 

    Within the framework of applicable laws, we may use your contact details for direct marketing purposes (e.g. invitations to trade fairs, information and offers on our products and services) and to carry out customer satisfaction surveys, in each case also by e-mail. You have the right to object to the use of your contact data for these purposes at any time by sending an e-mail to datenschutz@ptvgroup.com or by making use of the objection option in the message you received.

    • Consent of the user, if given voluntarily (Article 6 (1) (a) of the DSGVO).
    • Legitimate interest of PTV Group in the processing (Article 6 (1) (f) of the DSGVO)

    Maintaining and protecting the security of our products and services and our websites, preventing and detecting security risks, fraudulent activity or other criminal or harmful activity

    • Legitimate interest of PTV Group in the processing (Article 6 (1) (f) of the GDPR)

    Compliance with (i) legal requirements (e.g. tax and commercial retention obligations), (ii) existing compliance screening obligations (to prevent economic crime or money laundering) and (iii) our policies and industry standards 

    • Fulfilment of legal obligations (Article 6 (1) (c) of the DSGVO).
    • Legitimate interest of PTV Group in the processing (Article 6 (1) (f) of the GDPR)

    Settlement of legal disputes, enforcement of existing contracts and for the assertion, exercise and defence of legal claims

    • Fulfilment of legal obligations (Article 6 (1) (c) of the DSGVO)
    • Legitimate interest of PTV Group in the processing (Article 6 (1) (f) of the GDPR)

     

    4. Special Notes

     

    4.1 Processing of personal data - overview, purpose and legal basis

    Enabling the use of the services and functions of the PTV platform, such as

    • Create and administer your user account; 
    • implementing updates, security and troubleshooting measures; 
    • providing customer support; 
    • Processing your activation/order and making related information and offers available;
    • Billing for the use of the PTV platform service you have selected;
    • establishing your identity and user authentication; 
    • improving and further developing our services.  

    The legal basis for processing is the execution of the contract (Article 6 (1) (b) of the GDPR) and our justified interest (Article 6 (1) (f) of the GDPR) in improving the offer.

     

    4.2 External Hosting

    The PTV platform (myptv.com) is hosted by an external service provider (hoster). The personal data collected via this website is stored on the hoster's servers. This may include IP addresses, contact requests, meta and communication data, contractual data, contact data, names, website accesses and other data generated via a website.

    The hoster is used for the purpose of fulfilling the contract with our potential and existing customers (Art. 6 para. 1 lit. b DSGVO) and in the interest of a secure, fast and efficient provision of our online offer by a professional hoster (Art. 6 para. 1 lit. f DSGVO).

    Our hoster will only process your data to the extent that this is necessary for the fulfilment of its service obligations and in order to comply with our instructions regarding this data.

    The PTV platform is operated in the Microsoft Azure Cloud, which is provided by Microsoft Ireland Operations Ltd, Carmenhall Road, Sandyford, Dublin 18, Ireland ("Microsoft Ireland"). There is an order processing agreement between PTV and Microsoft Ireland.

     

    4.3 Data protection in eCommerce 

    4.3.1 Processing of data (customer and contract data)

    We collect, process and use personal data only insofar as is necessary for the establishment, content-related structuring or alteration of a contractual relationship (inventory data). This takes place on the basis of Article 6 (1) (b) GDPR, which permits the processing of data in order to fulfil a contract or take steps prior to entering into a contract. We only collect, process and use personal data regarding the use of our website (usage data) insofar as this is required for users to use the service or to bill them.

    The customer data collected is deleted upon completion of an order or termination of the business relationship. Statutory retention periods will remain unaffected.

    4.3.2 Data transfer upon conclusion of a contract for online shops, traders and product dispatch

    We only send personal data to third parties if this is necessary as part of contract processing, for instance to companies entrusted with the delivery of products or a financial institution commissioned to process payments. No further transfer of data takes place or only if you have given explicit consent to the transfer. Your data will not be passed on to third parties, for advertising purposes, for example, without explicit consent.

    The basis for data processing is Article 6 (1) (b) GDPR, which permits the processing of data in order to fulfil a contract or take steps prior to entering into a contract.

    4.3.3 Encrypted payment transactions on our websites

    If there is an obligation to provide us with your payment data (e.g. account number for direct debit authorization) after the conclusion of a chargeable contract, this data is required for payment processing.

    The payment transactions via the usual means of payment (especially Visa/MasterCard, direct debit) are exclusively carried out via an encrypted SSL or TLS connection. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line.

    In the case of encrypted communication, your payment data that you transmit to us cannot be read by third parties.

     

    4.4 Data protection in the case of applications and application processes

    We collect and process personal data from applicants for the purpose of executing an application process in PTV Planung Transport Verkehr AG and its associated companies. Data may be processed electronically. This is the case particularly if applicants send us application documents electronically, for example by email, or via the career pages on our website.

    Once your data has been entered and sent, it goes directly to the servers of our external service providers via an encrypted connection. All data is encrypted based on the TLS method. If you log on after you have registered using the user data provided, the TLS encryption method is also used.

    Data security for applications

    Your data is hosted by a provider within the context of contract processing pursuant to Article 28 GDPR. Both PTV Planung Transport Verkehr AG and the provider use technical and organisational security measures to protect your data against accidental or deliberate manipulation, loss, destruction or access by unauthorised persons. Our security measures are constantly being improved in accordance with technological developments.

    Processing of data at the end of the application process

    If PTV Planung Transport Verkehr AG or one of its associated companies offers an applicant a contract of employment, data sent for the purposes of executing the employment relationship is stored in compliance with statutory regulations. If no contract of employment is offered, application documents will be deleted automatically three months after rejection has been notified unless deletion is contrary to other legitimate interests. Other legitimate interest in this sense means a burden of proof in proceedings in accordance with the German General Equal Treatment Act (AGG) for example.

    The basis for data processing is Article 6 (1) (b) GDPR, which permits the processing of data in order to fulfil a contract or take steps prior to entering into a contract.

     

    4.5 Comment function on blog.ptvgroup.com

    For the comment function on blog.ptvgroup.com, unless you post anonymously, your comment will be stored along with information at the time the comment was created, your email address and the username you chose.

    Storage of the IP address

    The blog's comment function stores the IP addresses of users who post comments. This is for our security, as we may be held responsible for illegal content (such as insults or propaganda) on the site, even if it is created by users. IP addresses are not processed beyond this purpose.

    Storage period of comments

    The comments and related data are stored and remain on our website until the commented content has been completely deleted or the comments have to be deleted for legal reasons.

    Legal basis 

    The comments are stored on the basis of your consent (Article 6 (1) (a) GDPR). You can revoke your consent at any time. An informal e-mail notification to us is sufficient for this purpose. The legality of the data processing operations that have already taken place remains unaffected by the revocation.

     

    4.6 Live chat

    In certain areas of our website we offer contact and advice via live chat. With the help of the Live Chat function, you can communicate with one of our employees via text messages. When you open and start using the Live Chat, your browser automatically transmits the following data for technical reasons, which we store separately from other data you may transmit to us:

    • Date and time of access,
    • Duration of the visit to our website,
    • Type of web browser including version,
    • Operating system used,
    • Amount of data sent,
    • Type of event,
    • IP address (anonymized).

    The legal basis for this data processing is Article 6 para. 1 lit. f GDPR, whereby our legitimate interest is directed towards guaranteeing and maintaining the operation and security of our offer as well as an error-free service. Within this framework, the data is also processed by us for analysis purposes - without allocation to a specific person.

    If you provide us with additional personal data via the live chat, this is done on a voluntary basis. We do not actively request personal data from you. The texts you enter in the chat widget during the live chat are stored on our behalf on the external service provider’s server. The legal basis for this data processing is Article 6 para. 1 lit. b and f GDPR, as we have a legitimate interest in offering you an optimal prospect and customer service within the framework of a (pre)contractual relationship.

     

    5. Used tools

     

    5.1 Online Marketing 

    Use of Eloqua

    We use Eloqua from the third-party provider Oracle, Redwood City, CA, USA (www.eloqua.com ) for marketing purposes. Eloqua allows us to tailor content to the exact visitors and subscribers to our website and how we communicate with them. 

    Eloqua cookies gather anonymised data about the user behaviour of visitors to our website, for example the number of visitors to the website, how they came to the site and which pages they have visited. This data feeds into analyses and helps us to improve our website. We may also gather personal identification data when you use certain services or parts of the website. When you sign up for a service or subscribe to one of our newsletters, for example, we can identify you when you visit our website and navigate through the individual pages. This data is stored securely at Eloqua. 

    If you wish to prevent the use of Eloqua tracking technologies on your device completely, you can do so on the Eloqua opt-out page available at https://www.oracle.com/marketingcloud/opt-status.html

    Further information on data protection in connection with the use of Eloqua can be found here: Oracle Privacy Policy 

     

    5.2 Social Media, Social Media Plugins

    5.2.1 Facebook-Plugins (Like & Share-Button)

    We have integrated plug-ins of the social network Facebook on this website. The provider of this service is Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. According to Facebook’s statement the collected data will be transferred to the USA and other third-party countries too.

    You will be able to recognize Facebook plug-ins by the Facebook logo or the “Like” button on this website. An overview of the Facebook plug-ins is available under the following link: https://developers.facebook.com/docs/plugins/https://developers.facebook.com/docs/plugins/.

    Whenever you visit this website and its pages, the plug-in will establish a direct connection between your browser and the Facebook server. As a result, Facebook will receive the information that you have visited this website with your plug-in. However, if you click the Facebook “Like” button while you are logged into your Facebook account, you can link the content of this website and its pages with your Facebook profile. As a result, Facebook will be able to allocate the visit to this website and its pages to your Facebook user account. We have to point out, that we as the provider of the website do not have any knowledge of the transferred data and its use by Facebook. For more detailed information, please consult the Data Privacy Declaration of Facebook at: https://www.facebook.com/privacy/explanation.

    If you do not want Facebook to be able to allocate your visit to this website and its pages to your Facebook user account, please log out of your Facebook account while you are on this website.

    The use of the Facebook plug-in is based on Art. 6 Sect. 1 lit. f GDPR. The operator of the website has a legitimate interest in being as visible as possible on social media. If a respective declaration of consent has been obtained, the data shall be processed exclusively on the basis of Art. 6 Sect. 1 lit. a GDPR. This declaration of consent may be revoked at any time.

    5.5.2 Twitter Plugin

    We have integrated functions of the social media platform Twitter into this website. These functions are provided by Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland. While you use Twitter and the “Re-Tweet” function, websites you visit are linked to your Twitter account and disclosed to other users. During this process, data are transferred to Twitter as well. We must point out, that we, the providers of the website and its pages do not know anything about the content of the data transferred and the use of this information by Twitter. For more details, please consult Twitter’s Data Privacy Declaration at: https://twitter.com/en/privacy.

    The use of Twitter plug-ins is based on Art. 6 Sect. 1 lit. f GDPR. The operator of the website has a legitimate interest in being as visible as possible on social media. If a respective declaration of consent has been obtained, the data shall be processed exclusively on the basis of Art. 6 Sect. 1 lit. a GDPR. This declaration of consent may be revoked at any time.

    You have the option to reset your data protection settings on Twitter under the account settings at https://twitter.com/account/settings.

    5.2.3 LinkedIn Plugin

    This website uses functions of the LinkedIn network. The provider is LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA.

    Any time you access a page of this website that contains functions of LinkedIn, a connection to LinkedIn’s servers is established. LinkedIn is notified that you have visited this website with your IP address. If you click on LinkedIn’s “Recommend” button and are logged into your LinkedIn account at the time, LinkedIn will be in a position to allocate your visit to this website to your user account. We have to point out that we as the provider of the websites do not have any knowledge of the content of the transferred data and its use by LinkedIn.

    The use of the LinkedIn plug-in is based on Art. 6 Sect. 1 lit. f GDPR. The operator of the website has a legitimate interest in being as visible as possible on social media. If a respective declaration of consent has been obtained, the data shall be processed exclusively on the basis of Art. 6 Sect. 1 lit. a GDPR. This declaration of consent may be revoked at any time.

    For further information on this subject, please consult LinkedIn’s Data Privacy Declaration at: https://www.linkedin.com/legal/privacy-policy.

    5.2.4 XING Plugin

    This website uses functions of the XING network. The provider is the New Work SE, Dammtorstraße 30, 20354 Hamburg, Germany.

    Any time one of our sites/pages that contains functions of XING is accessed, a connection with XING’s servers is established. As far as we know, this does not result in the archiving of any personal data. In particular, the service does not store any IP addresses or analyze user patterns.

    Data are stored and analyzed on the basis of Art. 6 Sect. 1 lit. f GDPR. The website operator has a legitimate interest in the highest possible visibility on social media. If a respective declaration of consent has been obtained, the data will be processed exclusively on the basis of Art. 6 Sect. 1 lit. a DGDPR. Any such consent may be revoked at any time.

    For more information on data protection and the XING share button please consult the Data Protection Declaration of Xing at: https://www.xing.com/app/share?op=data_protection.

    5.2.5 YouTube

    Our website uses plug-ins of the Google operated site YouTube. The operator of the site is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA.

    If you visit one of our pages that has a YouTube plug-in, a connection is established to the YouTube servers. The YouTube server is notified which of our pages you have visited in the process.

    If you are logged in to your YouTube account, YouTube allows your surfing behaviour to be associated directly to your personal profile. You can prevent this by logging out of your YouTube account.

    YouTube is used in the interests of attractive presentation of our online services. This represents a legitimate interest in accordance with Article 6 (1) (f) GDPR.

    You can find further information regarding the handling of user data in the YouTube data privacy statement at: https://www.google.de/intl/de/policies/privacy.

     

    5.3 Live Chat with User-Like

    We use the Live Chat of Userlike UG, Probsteigasse 44-46, 50670 Cologne, Germany (hereafter "Userlike"). Userlike uses cookies to enable you to have a personal conversation with us in the form of a real-time chat. Live chat visitors do not have to log in with their name to use this function but can have an anonymous chat. We use the so-called privacy mode when using Userlike. This means that your IP address is stored in the cookies in anonymous form and is not used to identify you personally. If you disclose personal information about yourself during the anonymous chat, this is done voluntarily. 

    The data collected by Userlike is processed on our behalf and based on a contract for order processing.

    The processing of your personal data is based on Article 6 para. 1 lit. f GDPR, as we have a legitimate interest in the economic operation, the operability and the optimization of our website in the form of a cross-webpage operation of the chat function. 

    For further information, please refer to Userlike's privacy policy: https://www.userlike.com/en/terms 

     

    6. Cookies and Analysis - Tools

    When you visit our website, your surfing behavior can be statistically evaluated. This is mainly done with so-called analysis programs and cookies. 

    Detailed information about these analysis programs and cookies can be found in the following section. 

     

    6.1 Cookies

    Our websites and pages use what the industry refers to as “cookies.” Cookies are small text files that do not cause any damage to your device. They are either stored temporarily for the duration of a session (session cookies) or they are permanently archived on your device (permanent cookies). Session cookies are automatically deleted once you terminate your visit. Permanent cookies remain archived on your device until you actively delete them or they are automatically eradicated by your web browser.

    In some cases, it is possible that third-party cookies are stored on your device once you enter our site (third-party cookies). These cookies enable you or us to take advantage of certain services offered by the third party (e.g. cookies for the processing of payment services).

    Cookies have a variety of functions. Many cookies are technically essential since certain website functions would not work in the absence of the cookies (e.g. the shopping cart function or the display of videos). The purpose of other cookies may be the analysis of user patterns or the display of promotional messages.

    Cookies, which are required for the performance of electronic communication transactions (required cookies) or for the provision of certain functions you want to use (functional cookies, e.g. for the shopping cart function) or those that are necessary for the optimization of the website (e.g. cookies that provide measurable insights into the web audience), shall be stored on the basis of Art. 6 Sect. 1 lit. f GDPR, unless a different legal basis is cited. The operator of the website has a legitimate interest in the storage of cookies to ensure the technically error free and optimized provision of the operator’s services. If your consent to the storage of the cookies has been requested, the respective cookies are stored exclusively on the basis of the consent obtained (Art. 6 Sect. 1 lit. a GDPR); this consent may be revoked at any time.

    You have the option to set up your browser in such a manner that you will be notified any time cookies are placed and to permit the acceptance of cookies only in specific cases. You may also exclude the acceptance of cookies in certain cases or in general or activate the delete function for the automatic eradication of cookies when the browser closes. If cookies are deactivated, the functions of this website may be limited.

    In the event that third-party cookies are used or if cookies are used for analytical purposes, we will separately notify you in conjunction with this Data Protection Policy and, if applicable, ask for your consent.

    6.1.1 Cookie-Consent with Cookiebot

    Our websites use Cookie Content technology from Cookiebot to obtain your consent to the storage of certain cookies on your end device and to document this in a data protection-compliant manner. The provider of this technology is Cybot A/S, Havnegade 39, 1058 Copenhagen, Denmark, website: https://www.cookiebot.com/en/ (hereinafter "Cookiebot").

    Cookiebot stores a cookie in your browser in order to be able to assign the consent you have given or to revoke it. The data collected in this way is stored until you request us to delete it, delete the Cookiebot cookie itself or until the purpose for which the data is stored no longer applies. Mandatory legal storage obligations remain unaffected.

    Cookiebot is used to obtain the legally required consent for the use of cookies. The legal basis for this is Art. 6 para. 1 p. 1 lit. c GDPR.

    6.1.2 Changing your cookie settings

    You can view and change your cookie settings at any time at https://www.ptvgroup.com/en/cookies/.

     

    6.2 Analytics tools and advertising

    6.2.1 Use of Leadlab

    Our website uses tracking pixel technology from wiredminds GmbH (www.wiredminds.de) to analyse visitor behaviour. 

    Data is collected, processed and stored where appropriate from which a usage profile is created under a pseudonym. These usage profiles are anonymised in full wherever this is possible and reasonable. Cookies may be used for this purpose. Cookies are small text files stored in the visitor's Internet browser and used to recognise the Internet browser on the next visit. Data collected, which may also include personal data, is sent to wiredminds or is collected directly by wiredminds. wiredminds may use data left on the website through visits in order to create anonymised usage profiles. Data obtained in this way will not be used without the separate consent of the data subject to identify the visitor to this website and will not be combined with personal data relating to the bearer of the pseudonym. If IP addresses are collected, they are anonymised immediately by deleting the last number block. 

    6.2.2 Google Analytics

    This website uses functions of the web analysis service Google Analytics. The provider of this service is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

    Google Analytics enables the website operator to analyze the behavior patterns of website visitors. To that end, the website operator receives a variety of user data, such as pages accessed, time spent on the page, the utilized operating system and the user’s origin. Google may consolidate these data in a profile that is allocated to the respective user or the user’s device.

    Google Analytics uses technologies that make the recognition of the user for the purpose of analyzing the user behavior patterns (e.g. cookies or device fingerprinting). The website use information recorded by Google is, as a rule transferred to a Google server in the United States, where it is stored.

    This analysis tool is used on the basis of Art. 6 Sect. 1 lit. f GDPR. The operator of this website has a legitimate interest in the analysis of user patterns to optimize both, the services offered online and the operator’s advertising activities. If a corresponding agreement has been requested (e.g. an agreement to the storage of cookies), the processing takes place exclusively on the basis of Art. 6 para. 1 lit. a GDPR; the agreement can be revoked at any time.

    IP anonymization

    On this website, we have activated the IP anonymization function. As a result, your IP address will be abbreviated by Google within the member states of the European Union or in other states that have ratified the Convention on the European Economic Area prior to its transmission to the United States. The full IP address will be transmitted to one of Google’s servers in the United States and abbreviated there only in exceptional cases. On behalf of the operator of this website, Google shall use this information to analyze your use of this website to generate reports on website activities and to render other services to the operator of this website that are related to the use of the website and the Internet. The IP address transmitted in conjunction with Google Analytics from your browser shall not be merged with other data in Google’s possession.

    Browser plug-in

    You can prevent the recording and processing of your data by Google by downloading and installing the browser plugin available under the following link: https://tools.google.com/dlpage/gaoptout?hl=enhttps://tools.google.com/dlpage/gaoptout?hl=en.

    For more information about the handling of user data by Google Analytics, please consult Google’s Data Privacy Declaration at: https://support.google.com/analytics/answer/6004245?hl=en.

    Contract data processing

    We have executed a contract data processing agreement with Google and are implementing the stringent provisions of the German data protection agencies to the fullest when using Google Analytics.

    Demographic parameters provided by Google Analytics

    This website uses the “demographic characteristics” function of Google Analytics, to be able to display to the website visitor compatible ads within the Google advertising network. This allows reports to be created that contain information about the age, gender and interests of the website visitors. The sources of this information are interest-related advertising by Google as well as visitor data obtained from third-party providers. This data cannot be allocated to a specific individual. You have the option to deactivate this function at any time by making pertinent settings changes for advertising in your Google account or you can generally prohibit the recording of your data by Google Analytics as explained in section “Objection to the recording of data”.

    6.2.3 Google AdSense (not personalized)

    This website uses Google AdSense, an ad embedding service provided by Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

    We use Google AdSense in the “non-personalized” mode. Contrary to the personalized mode, the ads are not based on your previous user patterns and the service does not generate a user profile for you. Instead, the service uses so-called “context information” to choose the ads that are posted for you to view. The selected ads are thus based e.g. on your location, the content of the website you are visiting at the time or the search terms you are using. To learn more about the distinct differences between personalized targeting and targeting that has not been personalized by Google AdSense, please click on the following link: https://support.google.com/adsense/answer/9007336.

    Please keep in mind that if Google Adsense is used in the non-personalized mode, it is possible that cookies are stored or comparable recognition technologies (e.g. device fingerprinting) are used.

    AdSense is used on the basis of Art. 6 Abs. 1 lit. et seq. GDPR. The website operator has a legitimate interest in making the marketing of the website as effective as possible. If a respective declaration of consent was requested, processing shall occur exclusively on the basis of Art. 6 Sect. 1 lit. a GDPR; the given consent may be revoked at any time.

    You have the option to autonomously adjust the advertising settings in your user account. To do so, please click on the link provided below and log in: https://adssettings.google.com/authenticated.

    For more information about Google’s advertising technologies, please click here:
    https://policies.google.com/technologies/adshttps://policies.google.com/technologies/ads
    https://www.google.de/intl/de/policies/privacy/.

    6.2.4 Google Remarketing

    This website uses the functions of Google Analytics Remarketing. The provider of these solutions is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

    Google Remarketing analyzes your user patterns on our website (e.g. clicks on specific products), to allocate a certain advertising target groups to you and to subsequently display matching online offers to you when you visit other online offers (remarketing or retargeting).

    Moreover, it is possible to link the advertising target groups generated with Google Remarketing to device encompassing functions of Google. This makes it possible to display interest-based customized advertising messages, depending on your prior usage and browsing patterns on a device (e.g. cell phone) in a manner tailored to you as well as on any of your devices (e.g. tablet or PC).

    The use of Google Remarketing is based on Art. 6 1 lit. et seq. GDPR. The website operator has a legitimate interest in the marketing of the operator’s products that is as effective as possible. If a respective declaration of consent was requested, processing shall occur exclusively on the basis of Art. 6 Sect. 1 lit. a GDPR; the given consent may be revoked at any time.

    If you have a Google account, you have the option to object to personalized advertising under the following link: https://www.google.com/settings/ads/onweb/https://www.google.com/settings/ads/onweb/.

    For further information and the pertinent data protection regulations, please consult the Data Privacy Policies of Google at: https://policies.google.com/technologies/ads?hl=enhttps://policies.google.com/technologies/ads?hl=en.

    Formation of Target Groups with Customer Reconciliation

    For the formation of target groups, we use, among other things, the Google Remarketing customer reconciliation feature. To achieve this, we transfer certain customer data (e.g. email addresses) from our customer lists to Google. If the respective customers are Google users and are logged into their Google accounts, matching advertising messages within the Google network (e.g. YouTube, Gmail or in a search engine) are displayed for them to view.

    6.2.5 Bing Universal Event Tracking (UET)

    On our website, data is collected and saved using the technologies of Bing Ads from which usage profiles are created using pseudonyms. This is a service of the Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA. This service enables us to track the activities of users on our website if they accessed our website via advertisements from Bing Ads. If you access our website via an advertisement of this nature, a cookie is set on your computer. A Bing UET tag is integrated on our website. This is a code which, in combination with the cookie, saves some non-personal data about the usage of the website. This includes, among other things, the time spent on the website, which areas of the website were opened and via which advertisement the users accessed the website. No information about your identity is collected.

    The information collected is transmitted to Microsoft servers in the USA and is there stored for a period of at most 180 days. You can prevent the collection of the data generated by the cookie with respect to your usage of the website as well as the processing of these data by deactivating the use of cookies. This could possibly lead to a restricted functionality of the website.

    Furthermore, Microsoft can possibly track your usage behaviour across several of your electronic devices using so-called Cross-Device Tracking and is thereby able to display personalized advertising on or in Microsoft web pages and apps. You can deactivate this behaviour under https://account.microsoft.com/privacy/ad-settings/

    Further information about the analysis services of Bing can be found on the Bing Ads website (https://help.bingads.microsoft.com/#apex/3/de/53056/2). Further information about data protection at Microsoft and Bing can be found in Microsoft’s data protection provisions (https://privacy.microsoft.com/de-de/privacystatement).

    6.2.6 Google Ads and Google Conversion Tracking

    This website uses Google AdWords. AdWords is an online advertising program from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

    We use conversion tracking as part of Google AdWords. If you click on a Google ad, a conversion tracking cookie is placed on your computer. Cookies are small text files which an Internet browser places on a user's computer. These cookies expire after 30 days and are not used to identify users. If a user visits certain pages of this website and the cookie has not yet expired, we and Google can recognise that the user has clicked on an ad and been redirected to this page.

    Every Google AdWords customer receives a different cookie. Cookies cannot be tracked via the websites of AdWords customers. Information obtained with the help of conversion cookies is used to produce conversion statistics for AdWords customers which have opted for conversion tracking. Customers learn the total number of users who have clicked on their ad and been redirected to a page provided with a conversion tracking tag. However, they do not receive any information allowing them to identify the user. If you do not wish to participate in tracking, you can object to such use by easily disabling the Google conversion tracking cookie via your Internet browser's user settings. You will then not be included in conversion tracking statistics.

    Conversion cookies are stored on the basis of Article 6 (1) (f) GDPR. The website operator has a legitimate interest in analysing user behaviour in order to optimise both its web service and its advertising.

    More information about Google AdWords and Google Conversion Tracking can be found in Google's data protection regulations: https://www.google.de/policies/privacy/.

    You can configure your browser to receive notifications about the placement of cookies and only allow cookies in individual cases, enable the acceptance of cookies in specific cases or generally refuse them and enable automatic deletion of cookies when you close your browser. Disabling cookies may limit the functionality of this website.

    You may withdraw your consent to the storage of data, email address and its use for sending the newsletter at any time, for example via the 'Unsubscribe' link in the newsletter.

    6.2.7 Facebook Pixel

    To measure conversion rates, this website uses the visitor activity pixel of Facebook. The provider of this service is Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. According to Facebook’s statement the collected data will be transferred to the USA and other third-party countries too.

    This tool allows the tracking of page visitors after they have been linked to the website of the provider after clicking on a Facebook ad. This makes it possible to analyze the effectiveness of Facebook ads for statistical and market research purposes and to optimize future advertising campaigns.

    For us as the operators of this website, the collected data is anonymous. We are not in a position to arrive at any conclusions as to the identity of users. However, Facebook archives the information and processes it, so that it is possible to make a connection to the respective user profile and Facebook is in a position to use the data for its own promotional purposes in compliance with the Facebook Data Usage Policy. This enables Facebook to display ads on Facebook pages as well as in locations outside of Facebook. We as the operator of this website have no control over the use of such data.

    The use of Facebook Pixel is based on Art. 6 Sect. 1 lit. f GDPR. The operator of the website has a legitimate interest in effective advertising campaigns, which also include social media. If a corresponding agreement has been requested (e.g. an agreement to the storage of cookies), the processing takes place exclusively on the basis of Art. 6 para. 1 lit. a GDPR; the agreement can be revoked at any time.

    In Facebook’s Data Privacy Policies, you will find additional information about the protection of your privacy at: https://www.facebook.com/about/privacy/https://www.facebook.com/about/privacy/.

    You also have the option to deactivate the remarketing function “Custom Audiences” in the ad settings section under  https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen. To do this, you first have to log into Facebook.

    If you do not have a Facebook account, you can deactivate any user based advertising by Facebook on the website of the European Interactive Digital Advertising Alliance: http://www.youronlinechoices.com/de/praferenzmanagement/.

    6.2.8 Conversion pixels from Adform

    This website uses conversion tracking from Adform (Adform A/S, Wildersgade 10B, sal. 1, DK-1408 Copenhagen, Denmark; 'Adform'). 

    Adform uses a cookie mechanism on an anonymous basis to decide which ads are shown to a user. This is based on products that a visitor has already viewed on a previous occasion. This means that Adform stores no personal data of any kind, such as email addresses, names or addresses, in the cookie or in the cookie-based profile. 

    A cookie is a small text file that can be stored on a computer if a user views advertising or websites of an Adform customer using a browser. The cookie does not collect any names, addresses, phone numbers, email address or other data identifying the user.

    Instead, the cookie contains a random identification number. Using these random identification numbers from the cookie, Adform collects and stores anonymous information, such as operating system, browser version, geographical location, URLs on which Adform shows advertising, or facts concerning reciprocal effects with advertising (for example, number of clicks or views) in cookie-based profiles. 

    The IP addresses of Internet users are accessible to our system during web requests on Adform web servers.

    Adform acts in accordance with local data protection legislation and anonymises data in accordance with local regulations. Adform does not pass this data on to third parties and uses the data solely for analysis purposes on behalf of the website owner.

    You can disable tracking by Adform at any time: https://site.adform.com/datenschutz-opt-out/

    6.2.9 Lead the Way

    Our website uses functionalities of the French web analysis service Lead the Way®. Provider is CARTEGIE SAS based in 33522 BRUGES Cedex (France).

    Lead the Way® allows us to identify customers or prospects who have visited our website after an email campaign or as part of a marketing program. Cookies may be used for this purpose. Cookies are small text files stored in the visitor's Internet browser and used to recognise the Internet browser on the next visit. In order to analyse your use of our website and to be able to contact you and offer you suitable B2B solutions, we use a cookie from our partner CARTEGIE to identify your IP address and establish the connection to your company.“Lead the Way® cookies” are stored on the basis of Art. 6 lit. f GDPR. As a website operator, we have a legitimate interest in analysing user behaviour in order to optimise both our website and our marketing and to be able to contact you and offer you professional solutions.

    Objection to data collection 

    You can object to the collection of your data by CARTEGIE cookies in accordance with the instructions on the www.lead-the-way.fr/donnees-personnelles.html website. For more information on how CARTEGIE handles user data, please refer to the Lead the Way privacy policy: https://www.lead-the-way.fr/donnees-personnelles.html.

    6.2.10 OptinMonster

    OptinMonster is a plugin of the company Retyp, LLC., 7732 Maywood Crest Dr., West Palm Beach, FL 33412, US (https://optinmonster.com).

    This allows us to provide our visitors with additional offers via pop-up on our website, for example, to enable registration of the e-mail address in a newsletter or to point out actions. OptinMonster uses cookies for this purpose. Personal data is only collected through an active action of the customer (for example, the customer signs up for the newsletter via a popup). OptinMonster does not store the collected data on its own servers but forwards it to a PTV Group selected tool (Eloqua).

    We have entered into an order processing contract with OptinMonster, in which we oblige OptinMonster to protect your data in accordance with the applicable provisions of the GDPR. Details on the handling of the customer’s personal data by OptinMonster are described in more detail in OptinMonster’s privacy policy (https://optinmonster.com/privacy/).

    Objection to data collection 

    You can object to the collection of your data by CARTEGIE cookies in accordance with the instructions on the www.lead-the-way.fr/donnees-personnelles.html website. For more information on how CARTEGIE handles user data, please refer to the Lead the Way privacy policy: https://www.lead-the-way.fr/donnees-personnelles.html. 

     

    Karlsruhe, 17 December 2020.