PRIVACY POLICY


Responsible

The party responsible for data collection and processing within the framework of the General Data Protection Regulation (GDPR) is

ConMoto Strategie und Realisierung GmbH („We“)
Boschetsrieder Str. 69
81379 Munich
Phone: +49 89 78066-138
Internet: https://www.conmoto.de
E-Mail: business@conmoto.de

Contact details of our data protection officer

Hans-Peter Toft
BDO Rechtsanwaltsgesellschaft mbH
Fuhlentwiete 12
20355 Hamburg

Introduction and general information on data processing

The protection of your personal data is extremely important to us. Therefore, we treat your personal data confidentially and comply with the legal provisions on data protection, and in particular the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG). This data protection declaration is intended to inform you about the nature, scope and purpose of the collection and use of personal data by the above-mentioned company.

We distinguish between various forms of data protection notices, which differ in content according to the respective group of addressees. Below you will find the data protection information according to Art. 13 of the GDPR directed at our business partners (customers, interested parties and suppliers) and visitors to our website (A., B.). The further explanations (C. to H.) apply to our business partners as well as to our website visitors.

A. Business Partners

1. Scope of the processing of personal data

As a matter of principle, we only collect data whose processing is either required by law, contractually agreed, necessary for the conclusion and performance of the contract or voluntarily provided to us by expressed consent.

2. Legal bases for the processing of personal data

a. Data processing for contract performance

We process the personal data provided to us in accordance with Art. 6 para. 1 b of the GDPR for the purpose of fulfilling the contract. This includes, in particular, the use of data during the process of contract initiation as well as customer care.

b. Data processing based on consent

We only base the processing of your personal data on consent in accordance with Art. 6 para. 1 a GDPR, if processing is not already justified on other legal grounds.

We request consent if we provide information about the company’s own products, services and events and if it is not possible to process the data in question in order to protect legitimate interests (see also below).

We also request your consent if we offer you to take part in a survey.

c. Data processing for the protection of legitimate interests

We only process personal data in accordance with Art. 6 para. 1 f of the GDPR for the protection of legitimate interests if the further requirements of Art. 6 para. 1 f of the GDPR are applicable, i.e. if our interests in the data processing or the interests of a third party in an individual case outweigh your interests or fundamental rights and freedoms.

On the basis of Art. 6 para. 1 f of the GDPR we process your data – as far as necessary and permissible – to check whether we want or rather are allowed to accept an order.

Furthermore, we use your personal data if and insofar as this is necessary to protect our legitimate legal interests, e.g. to protect the rights of third parties or for the defense and enforcement of claims. Also in this respect, the data processing is based on Art. 6 para. 1 f of the GDPR.

d. Data processing for compliance with legal obligations

If and insofar as necessary, we process your data in order to comply with any statutory documentation obligations, e.g. vis-à-vis tax- and supervisory authorities. The data processing is based on Art. 6 para. 1 c of the GDPR. A legal obligation results in particular from Section 147 of the German Fiscal Code. Furthermore, we process your data in accordance with Art. 6 para. 1c of the GDPR for the purpose of a thorough examination of whether an order may be accepted. The same applies to the obligation imposed on us by law to identify our business partners and the further obligations under the provisions of the Money Laundering Act.

e. Processing of personal Data for the protection of vital interests

In the event that your vital interests or those of another natural person make the processing of personal data necessary, Art. 6 para. 1 d of the GDPR serves as the legal basis.

B. Website

1. The Scope of the processing of personal data

As a matter of principle, we only collect personal data whose processing is either required by law, contractually agreed, necessary for the conclusion and performance of the contract or voluntarily provided to us by consent.

We collect, store and use personal data from you as a visitor to our website only insofar as this is necessary for the provision of a functional website and for the presentation of our content and services. Beyond that, the collection and use of your personal data is regularly carried out only after your consent. An exception is made in cases where it is not possible to obtain prior consent for factual reasons and the processing of the data is permitted by law.

2. Legal bases for the processing of personal data

a. Data processing for contract performance

When processing personal data that is necessary for the performance of a contract to which you are a party, Art. 6 para. 1 of the GDPR serves as the legal basis. This also applies to processing operations that are necessary for the performance of pre-contractual measures.

b. Data processing based on consent

Insofar as we obtain your consent for processing operations of personal data, Art. 6 para. 1 a of the GDPR serves as the legal basis for the processing of personal data. We only base the processing of your personal data on consent in accordance with Art. 6 para. 1 a GDPR, if processing is not already justified on other legal grounds.

You can revoke your consent at any time without this affecting the lawfulness of the processing carried out so far.

c. Data processing for the protection of legitimate interests

We only process your personal data in accordance with Art. 6 para. 1 f of the GDPR for the protection of legitimate interests if the further requirements of Art. 6 para. 1 f of the GDPR are applicable, i.e. if our interests in the data processing or the interests of a third party outweigh your interests or fundamental rights and freedoms in the individual case.

On the basis of Art. 6 para. 1 f of the GDPR, we use your personal data if and insofar as this is necessary to protect our legitimate legal interests, e.g. for the defense and enforcement of claims. Also in this respect, the data processing is based on Art. 6 para. 1 f of the GDPR.

C. Data deletion and storage period

Your personal data will be deleted or blocked as soon as the purpose of storage no longer applies. Beyond that, data may be stored if this has been provided for by the European or national legislator in Union regulations, laws or other provisions to which we as the responsible party are subject. Data will also be blocked or deleted if a storage period prescribed by the aforementioned standards expires unless there is a need to continue storing the data for the conclusion or fulfillment of a contract.

D. Security by TLS/SSL

If you transmit your data to us via our website, we use current secure technologies, in particular the so-called “Transport Layer Security” transmission (TLS) (previously also known as “Secure Socket Layer” transmission (SSL)). All information and data transmitted using these secure methods is encrypted before being sent to us. This applies in particular to all personal data of our business partners, such as credit card number, bank code, bank account number, name and address. To additionally protect you and us from misuse, the IP address of your computer is transmitted to us. We would like to point out that encryption using these technical methods only works if the corresponding technical pre-settings have also been made on your side.

E. Storage of Cookies

To make the visit to our website attractive and to enable the use of certain functions, we use so-called cookies on various pages. Cookies are small text files that are automatically stored on your terminal device. Some of the cookies we use are deleted at the end of the browser session, i.e. after the browser is closed (so-called Session Cookies). Other cookies remain on your terminal device and enable us to recognize your browser on your next visit (persistent cookies). The storage time can be adjusted in the cookie settings of the web browser.

In addition, we distinguish between technically necessary cookies, those that serve analysis and statistical purposes and those that serve marketing purposes. The latter relate to cookies that are stored to follow you with the intention of showing ads that are relevant and appealing to you and therefore more valuable to publishers and advertising third parties.

When you visit our website for the first time, a GDPR-compliant notice (also called cookie notice, cookie banner or cookie consent banner) appears and you can select which cookies are stored. You can also set your browser in such a way that you are informed about the setting of cookies and decide individually about their acceptance or exclude the acceptance of cookies for certain cases or in general. Each browser differs in the way it manages cookie settings. This is described in the help menu of each browser, which explains how you can change your cookie settings.

We expressly point out that the functionality of our website may be limited if cookies are not accepted.

Insofar as personal data are also processed through implemented cookies, which serve analysis and statistical purposes, the processing is carried out in accordance with Art. 6 para. 1 a of the GDPR based on your consent, which you give us by your corresponding selection decision in our cookie consent banner. The same applies regarding your selection decision on marketing cookies. Your consent can be revoked at any time. To do this, call up our Cookie Consent banner again. You will find the link button to the banner under the designation “Cookie setting” on every sub-page of our website at the bottom of the screen.

Insofar as personal data are also processed through implemented cookies, which are technically necessary for the operation of our website, the processing is carried out in accordance with Art. 6 para. 1 f of the GDPR to protect our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the site visit.

F. Individual processing operations

1. Data processing operations that are technically necessary

a. Provision of the website and creation of log files

Each time you visit our website, our system automatically collects data and information from the computer system of the calling computer.

The following data is collected:

  • your IP address
  • your browser type and version
  • your operating system
  • date and time of your visit to the website
  • duration of your visit to the website
  • visited website
  • amount of data sent
  • internet page/source/reference from which the website is visited

This data is not stored together with your other personal data.

The temporary storage of the IP address by the system is necessary to enable delivery of the website to your computer. For this purpose, your IP address must remain stored for the duration of the session. Log files are stored to ensure the functionality of the website. In addition, we use the data to optimize the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context.

This is also our legitimate interest in data processing within the meaning of Art. 6 para. 1 f of the GDPR, which serves as the legal basis for the temporary storage of personal data and log files.

For the provision of our website and the associated processing of personal data, we use a carefully selected external service provider. At present, the service provider is Oliver Kranz, brand-neu grafik & text, Halterner Str. 45, 45657 Recklinghausen, Germany. This service provider may use the personal data exclusively on our instructions for the purposes specified by us within the framework of a data processing agreement pursuant to Art. 28 of the GDPR and has been obliged to comply with the applicable data protection provisions. Any other use of the data is not permitted. The processing of the data takes place exclusively in the territory of the Federal Republic of Germany, in a member state of the European Union or in a contracting state of the Agreement on the European Economic Area.

The data will be deleted as soon as storage is no longer required to achieve the purpose for which they were collected. In the case of the collection of data for the provision of the website, we store your data for a period of 24 hours. Afterwards, the data is anonymized so that an assignment of the calling client is no longer possible. After seven days your data will be deleted.

The collection of data for the provision of the website and the storage of the data in log files is absolutely necessary for the operation of the website. Consequently, there is no possibility of objection.

b. Use of Borlabs Cookie

We use the Word-Press-Plugin Borlabs Cookie on our website. Provider of the plugin is Borlabs – Benjamin A. Bornschein, Rübenkamp 32, 22305 Hamburg, Germany (hereinafter “Borlabs”). Borlab’s Cookie automatically creates a cookie consent banner for our website visitors and allows you to give consent to data processing – in particular the setting of cookies – on our website, as well as to exercise your right to withdraw consent you have already given.

Borlab’s Cookie enables us to keep track of the cookies used on our website and provide you with accurate and transparent information about their use at all times. You will receive a cookie consent banner that always complies with data protection regulations and you can decide which type of cookies should be allowed (technically necessary, analysis and statistics, marketing). The cookie consent banner stores your consent status so that our website can recognize and follow the stored status on future page visits. For this purpose, a cookie is set and the following data is stored:

  • cookie runtime
  • cookie version
  • domain and path of the WordPress website
  • consents
  • UID (randomly generated ID)

This data will not be passed on to Borlabs or any other third party. For more information about Borlabs’ privacy practices, please visit:

https://de.borlabs.io/privacy/

If you wish to change the setting you set when you first visited our website, you can either delete the cookie in your browser or visit our cookie consent banner on our website again and adjust your settings. You will find the corresponding link on every sub-page of our website at the bottom of the screen under “Cookie-Settings”.

The legal basis for the processing of your personal data is Art. 6 para. 1 f of the GDPR. We require Borlab’s cookie to provide you with a privacy-compliant consent banner that allows you to select and opt out of cookies on our website. Consequently, there is no possibility of objection.

Data is stored for 12 months, starting with your consent in the cookie consent banner. After 12 months your data will be deleted automatically.

c. Use of Friendly Captcha

On our website, we use the Friendly Captcha service provided by Friendly Captcha GmbH, Am Anger 3-5, 82237 Wörthsee, Germany (“Friendly Captcha”). The service prevents or hinders the use of our website by automated programs and scripts (so-called “bots”).

In order to establish a connection with the visitor’s terminal device to the servers of Friendly Captcha, a program code is integrated and a calculation task is posed to the visitor’s terminal device. The visitor’s terminal solves the calculation, which requires certain system resources, and sends the calculation result to our web server. The server contacts the Friendly Captcha server via an interface and receives a response indicating whether the puzzle was solved correctly by the end device. Depending on the result, we can apply security rules to requests via our website and thus, for example, process or reject them.

The data is used exclusively for the protection against spam and bots described above. Cookies are not stored. IP addresses are only stored in hashed (one-way encrypted) form and do not allow us and Friendly Captcha to draw any conclusions about an individual person.

The legal basis for the processing is Art. 6 para. 1 lit. f DSGVO. We have a legitimate interest to protect our website from abusive access by bots. The defense against spam as well as external attacks (e.g. through mass requests) is mandatory for the operation of our website. Consequently, there is no possibility to object.

Further information on data protection when using Friendly Captcha can be found at

https://friendlycaptcha.com/legal/privacy-end-users/

2. Data processing operations for analysis and statistical purposes

Use of Google Analytics

Our website uses Google Analytics, a web analytics service provided by Google. “Google” is a group of companies and consists of Google Ireland Ltd. (provider of the service), Gordon House, Barrow Street, Dublin 4, Ireland, and Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, and other affiliates of Google LLC.

Google Analytics uses cookies that enable an analysis of your use of the website. The information generated by the cookies about your use of our website (including your IP address, which is, however, anonymized using the anonymizeIp() method so that it can no longer be assigned to a connection) is transmitted to a Google server in the USA and stored there. Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google’s behalf. Google may combine your IP address with other data held by Google.

You can prevent the processing by Google Analytics by means of an appropriate setting in your browser software or by means of an appropriate selection in our cookie consent banner. You can prevent tracking by Google Analytics by using the deactivation tools that Google offers for some internet browsers. In addition, you can prevent the collection of the data generated by Google Analytics and related to your use of the website (including your IP address) to Google, as well as the processing of this data by Google, by downloading and installing the browser plugin available under the following link:

https://tools.google.com/dlpage/gaoptout?hl=en

However, we would like to point out that you may not be able to use all the functions of our website to their full extent if you take measures to prevent this.

The processing of your personal data is based on your consent in accordance with Art. 6 para. 1 a of the GDPR, which you grant us by your selection decision in the cookie consent banner. By making the appropriate selection via our cookie consent banner, you also consent to the transfer of your data to Google in the manner and for the purposes set out above (Art. 49 para.1 a of the GDPR). In particular, we would like to inform you that by granting your consent, data will be transferred to the USA and your data may therefore be exposed to access by the authorities there and in especially by the secret services.

Your consent can be revoked at any time. To do this, call up our cookie consent banner again. You will find the link button to the banner under the designation “Cookie-Setting” on every sub-page of our website at the bottom of the screen.

3. Data processing operations for marketing purposes

a. Use of Google Maps

On our website we use Google Maps (API) from “Google”. Google Maps is a web service for displaying interactive (land) maps to visually represent geographic information. By using this service you will be shown our location and it will be easier to find us.

When you call up the sub-page(s) of our website in which the map from Google Maps is integrated, information about your use of our website (such as your IP address) is transferred to Google servers and stored there. This may also result in a transmission to Google servers in the USA. This is done regardless of whether Google provides a user account through which you are logged in or whether a user account exists. If you are logged in to Google, your data will be assigned directly to your account.

If you do not want the assignment with your profile at Google, you must log out before activating the button. However, even if you are not registered with Google or have not logged in, there is the possibility that Google learns your IP address and stores it. If you do not agree with the future transmission of your data to Google in the context of the use of Google Maps, there is also the possibility to completely deactivate the web service of Google Maps by turning off the application JavaScript in your browser. Google Maps and thus the map display on our website can then not be used. You can also prevent processing by Google Maps by selecting the appropriate option in our cookie consent banner. However, we would like to point out that you will not be able to use all the functions of our website to their full extent if you take preventive measures.

The processing of your personal data is based on your consent in accordance with Art. 6 para. 1 lit. a GDPR, which you grant us by your selection decision in the cookie consent banner. By making the appropriate selection via our cookie consent banner, you also consent to the transfer of your data to Google in the manner and for the purposes set out above (Art. 49 para.1 lit. a GDPR). In particular, we would like to inform you that by granting your consent, data will be transferred to the USA and your data may therefore be exposed to access by the authorities there and especially by the secret services. For more information on data protection in connection with the use of Google Maps, please visit:

https://www.google.en/intl/en/policies/privacy

Your consent can be revoked at any time. To do this, call up our cookie consent banner again. You will find the link button to the banner under the designation “Cookie-Setting” on every sub-page of our website at the bottom of the screen.

b. Use of LeadFeeder

We use the service LeadFeeder of the company Liidio Oy, Mikonkatu 17 C, Helsinki 00100, Finland (“Liidio Oy”). LeadFeeder is a lead generation tool. For this purpose LeadFeeder accesses the list of IP addresses of website visitors provided by Google Analytics in the analysis and links the list of IP addresses with information about the companies that can be found on the internet under these IP addresses. Due to the shortening of the IP address of the website visitors, which is already carried out when using Google Analytics, a direct personal reference is not established. Only corporate visitors can be assumed.

For more information on Liidio Oy’s data use within Leadfeeder and compliance with the GDPR, please visit:

https://www.leadfeeder.com/privacy

https://www.leadfeeder.com/leadfeeder-and-gdpr/

You can prevent Leadfeeder from storing a user profile or data about your use of our website by using an “opt-out”. Information on this can be found at:

https://yourdata.leadfeeder.com/

In addition, you can prevent processing by LeadFeeder (including access to Google Analytics and linking) by making the appropriate selection in our cookie consent banner. However, we would like to point out that you may not be able to use all the functions of our website to their full extent if you take measures to prevent this.

The processing of your personal data is based on your consent in accordance with Art. 6 para. 1 a of the GDPR, which you grant us by your selection decision in the cookie consent banner.

Your consent can be revoked at any time. To do this, call up our cookie consent banner again. You will find the link button to the banner under the designation “Cookie-Setting” on every sub-page of our website at the bottom of the screen.

c. Use of PopupBuilder

On our website, we use the PopupBuilder plugin from the provider Sygnoos, Garegin Nzhdeh 46, Yerevan, Armenia (“Sygnoos”).

The plugin controls popups (overlapping website windows) and ensures that they are displayed depending on the surfing behavior on our website. For this purpose, a session cookie must be set in order to be able to count the number of times our website is called up. In addition, the plugin uses Google Analytics from “Google” to control the popups. PopupBuilder is intended to enable ads to be displayed not immediately, but only after you have had the opportunity to take a closer look at our website and our offers.

The processing of your personal data is based on your consent pursuant to Art. 6 para. 1 a of the GDPR, which you give us by your selection decision in the cookie consent banner. By making appropriate selection via our cookie consent banner, you also consent to the transfer of your data to Sygnoos as well as to Google in the manner and for the purpose described above (Art. 49 para.1 lit. a DSGVO). In particular, we would like to inform you that by granting your consent, data will be transferred to the USA and Armenia and your data may therefore be exposed to access by the authorities there and especially by the secret services. Further information on data protection in connection with the use of PopupBuilder can be found in Section F., 2. of this Privacy Policy and at:

https//popup-builder.com/privacy-policy

Your consent can be revoked at any time. To do so, please call up our Cookie Consent banner again. You will find the link button to the banner under the designation “Cookie setting” on every sub-page of our website at the bottom of the screen.

d. Use of Like-Buttons

Plugins from social media are used on our website (Facebook, Twitter, XING and LinkedIn).

You can usually recognize the plugins by the respective social media logos. To ensure data protection on our website, we only use these plugins together with the so-called “Shariff”- Solution. This application prevents the plug-ins integrated on our website from transmitting data to the respective provider when you first enter the website.

Only when you activate the respective plugin by clicking the corresponding button, a direct connection to the provider’s server is established. As soon as you activate the plugin, the respective provider receives the information that you have visited our website with your IP address. If you are simultaneously logged in to your respective social media account (e.g.  Facebook), the respective provider can assign the visit to our website to your user account.

Activating the plugin constitutes consent within the meaning of Art. 6 para. 1 a of the GDPR. If the activation of the plugin results in a data transmission to the USA or other unsafe third countries, by activating the plugin you also consent to the transmission of the data collected about you to the relevant provider (Art. 49 para.1 a of the GDPR). We would like to inform you that by giving your consent, your data may be exposed to the access of the local authorities and in particular the secret services.

Your consent can be revoked at any time. To do this, click the corresponding button again to deactivate it.

aa. Like-Button from Facebook

Our website uses a social plugin from “Facebook”.

The plugin is not activated until you click on the corresponding slider or move it to the right. If the slider is grayed out, the plugin is inactive.

The plugin establishes a direct connection between your browser and Facebook’s servers. This is done only after the plugin has been activated. Facebook thereby receives the information that you have visited our website with your IP address. If you click the Facebook “Like Button while you are logged into your Facebook account, you can link the content of our website on your Facebook profile. This allows Facebook to assign your visit to our website with your user account. We would like to point out that we, as the provider of the website, have no knowledge of the content of the transmitted data or its use by Facebook. If you do not want Facebook to be able to assign your visit to our website with your Facebook user account, please log out of your Facebook user account. Further information can be found at:

https://de-de.facebook.com/privacy/explanation

https://www.facebook.com/help/186325668085084

By activating the plugin, your data may be transferred to the USA and thus be exposed to the access of the authorities there and in particular the secret services.

bb. Tweet-Button from Twitter

Our website uses a social plugin from Twitter. Twitter is operated by Twitter, Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA (“Twitter”).

The plugin is not activated until you click on the corresponding slider or move it to the right. If the slider is grayed out, the plugin is inactive.

The plugin establishes a direct connection between your browser and the servers of Twitter. This is done only after the plugin has been activated. By using Twitter and the “Re-Tweet” function, our website is linked to your Twitter account and made known to other users. Data is also transferred to Twitter in the process. We would like to point out that we, as the provider of the website, have no knowledge of the content of the transmitted data or its use by Twitter. For more information about this and ways to customize your privacy settings in Twitter’s account settings, see:

https://twitter.com/privacy

https://twitter.com/account/settings

By activating the plugin, your data may be transferred to the USA and thus be exposed to the access of the authorities there and in particular the secret services.

cc. Share-Button from Xing

Our website uses a social plugin from Xing.

Xing is an Internet-based social network that allows users to connect with existing business contacts and make new business contacts. Individual users can create personal profiles of themselves on Xing. Companies can, for example, create company profiles or publish job offers on Xing. Xing is operated by XING AG, Dammtorstrasse 30, 20354 Hamburg, Germany (“Xing”).

The plugin is not activated until you click on the corresponding slider or move it to the right. If the slider is grayed out, the plugin is inactive.

The plugin establishes a direct connection between your browser and Xing’s servers. This is done only after the plugin has been activated. This provides Xing with the information that your browser has accessed our website, even if you do not have a Xing account or are not currently logged in to Xing. This information (including your IP address) is transmitted by your browser directly to a Xing server in Europe and stored there. If you are logged in to Xing, Xing can assign your visit to our website directly to your Xing account. When you interact with the plugin, e.g. if you click on the “Share”-Button the corresponding information is also transmitted directly to a Xing server and stored there. The information will also be published on Xing and displayed to your Xing contacts.

Xing may use this information for the purposes of advertising, market research and demand-oriented design of the Xing pages. For this purpose, Xing creates usage-, interest- and relationship profiles, e. g. to evaluate your use of our website with regard to the advertisements displayed to you on Xing, to inform other Xing users about your activities on our website and to provide other services associated with the use of Xing.

If you do not want Xing to assign the data collected via our website to your Xing account, you must log out of Xing before activating the plugin. For more information on the purpose and scope of data collection and the further processing and use of data by Xing, as well as your rights in this regard and setting options for protecting your privacy, please see:

https://privacy.xing.com/en/data-protection-clause

dd. Share-Button from LinkedIn

Our website uses a social plugin from LinkedIn.

LinkedIn is an internet-based social network for connecting users with existing business contacts as well as generating new business contacts. On LinkedIn, companies can create profiles or post jobs. LinkedIn is operated by LinkedIn Corporation, 1000 West Maude Avenue Sunnyvale, CA 94085, USA (“LinkedIn”). The responsible party in terms of data protection law for users from Germany is LinkedIn Ireland Unlimited Company, 70 Sir John Rogerson’s Quay, Dublin 2, Dublin, D02r296, Ireland (“LinkedIn”).

The plugin is not activated until you click on the corresponding slider or move it to the right. If the slider is grayed out, the plugin is inactive.

The plugin establishes a direct connection between your browser and LinkedIn’s servers. This is only done after the plugin has been activated. This provides LinkedIn with the information that your browser has accessed our website, even if you do not have a LinkedIn account or are currently not logged in to LinkedIn. This information (including your IP address, proxy server, browser, add-ons, device identifier, and features of your ISP or mobile carrier, including location identifiers) is transmitted from your browser directly to and stored by LinkedIn on servers located in and outside the USA. If you are logged in to LinkedIn, LinkedIn can assign your visit to our website directly to your LinkedIn account. If you interact with the plugin, e.g. by clicking the “Share”-Button, the corresponding information is also transmitted directly to a LinkedIn server and stored there. The information will also be published on LinkedIn and displayed to your LinkedIn contacts.

LinkedIn may use this information for the purposes of advertising, market research and the demand-oriented design of LinkedIn pages. For this purpose, LinkedIn creates usage, interest and relationship profiles, e.g. to evaluate your use of our website with regard to the advertisements displayed to you on LinkedIn, to inform other LinkedIn users about your activities on our website and to provide other services associated with the use of LinkedIn.

If you do not want LinkedIn to assign the data collected via our website to your LinkedIn account, you must log out of LinkedIn before visiting our website.

Further information on the purpose and scope of data collection and on the further processing and use of data by LinkedIn, as well as your rights in this regard and setting options for protecting your privacy, can be found at:

https://www.linkedin.com/legal/privacy-policy

By activating the plugin, your data may be transferred to the USA and thus be exposed to the access of the authorities there and in particular the secret services.

e. Use of YouTube

On our website we use YouTube. YouTube is a streaming platform and is operated by “Google”.

aa. Integration of YouTube Videos

On some subpages of our website we directly embed videos stored on YouTube. With this integration, content from the YouTube website is displayed in parts of a browser window. However, the YouTube videos are only accessed by clicking on them separately. This technique is also called “framing”. If you call up a corresponding sub-page of our website on which YouTube videos are integrated in this form, a connection is established to the YouTube servers and the content is displayed on the website by means of a message to your browser.

The integration of YouTube content only takes place in “extended data protection mode”. The mode is provided by Google itself and ensures that YouTube does not initially store cookies on your device. However, when the corresponding sub-page is called up, the IP address and the data specified in point F., 1., a. are transferred and thus, in particular, communicated which of our sub-pages you have visited. However, this information cannot be assigned to you unless you have logged in to YouTube or another Google service (e.g. Google+) prior to accessing the page or are permanently logged in.

As soon as you start playing an embedded YouTube video by pressing the play button, Google only stores cookies on your device through the extended data protection mode, which does not contain any personally identifiable data, unless you are currently logged in to a Google service. The storage of these cookies can be prevented by appropriate browser settings.

The processing of your personal data is based on your consent in accordance with Art. 6 para. 1 a of the GDPR, which you grant us by your selection decision in the cookie consent banner. By making the appropriate selection via our cookie consent banner, you also consent to the transfer of your data to Google in the manner and for the purposes set out above (Art. 49 para.1 a of the GDPR). In particular, we would like to inform you that by granting your consent, data will be transferred to the USA and your data may therefore be exposed to access by the authorities there and especially by the secret services.

For more information on data protection in connection with the use of YouTube, please visit:

https://policies.google.com/privacy

Your consent can be revoked at any time. To do this, call up our cookie consent banner again. You will find the link button to the banner under the designation “Cookie-Setting” on every sub-page of our website at the bottom of the screen.

bb. Link to YouTube

If you click on one of the YouTube videos embedded on our website, you will be redirected to the YouTube platform and have the option to watch the corresponding video directly on the YouTube platform.

We would like to point out that you use this YouTube channel and its functions on your own responsibility. This applies in particular to the use of the “Discussion” function. Furthermore, we would like to point out that we have no influence or control over the type and scope of the data processed by Google, the type of data processing and the use and disclosure of this data to third parties. When you use YouTube, your personal information may be collected, transferred, stored, disclosed, used, and transferred to and stored in the USA and/or other third countries where Google does business, regardless of your country of residence. In addition, a data transfer to companies affiliated with Google as well as other companies and/or persons who process data on behalf of Google is to be assumed.

Google processes your voluntarily entered data such as name and username, email address and phone number. Google also collects the content that you create, upload or receive from third parties when you use the Services (e.g. your personal information) photos, videos, documents, charts, comments), and processes the personal data contained therein. The content you share is evaluated by Google to determine what topics are interesting for you. Google can also determine your location based on your IP address and send you advertising or other content suitable for you.

For evaluation purposes, Google may use analysis tools such as Google Analytics. We have no influence on the use of such tools by Google and were not informed about their potential use. We have neither commissioned the use of such tools, nor do we support Google in any way. We are also not provided with any data that may be obtained as part of the analysis, and we have no way to turn off the use of such tools on our YouTube channel. Only certain profiles of subscribers to our YouTube channel are visible to us.

Even if you are not registered with YouTube, Google retrieves certain information when you use our YouTube channel, such as your IP address, browser type, operating system, previously visited websites, search terms used, cookies stored, and, if you are accessing from a mobile phone, mobile carrier and device used (including device ID and application ID).

You can restrict data processing in the general settings of your Google account. In addition, Google also offers privacy settings specific to YouTube. Further information can be found at:

https://policies.google.com/technologies/product-privacy?hl=en&gl=en

Information about what data is processed by Google and for what purposes it is used can be found in Google’s privacy information at:

https://policies.google.com/privacy?hl=en&gl=en#infocollect

Finally, you have the option of requesting information from Google via the privacy form:

https://support.google.com/policies/answer/9581826?visit_id=637054532384299914-2421490167&hl=de&rd=3

4. Use of ClipMyHorse

Our website contains video streams of the TV channel ClipMyHorse, Am Sonnenberg 6, 65321 Heidenrod, Germany (“ClipMyHorse”), which specializes in equestrian sports. The video streams are embedded in a frame.

To start the stream, we have implemented a so-called Two-Click-Solution. After clicking on the video for the first time, another consent banner will appear informing you that data will be transmitted to ClipMyHorse when the stream is played. Only after another click the stream will be started and with it the transfer of your data.

According to information from ClipMyHorse, data that cannot be traced back to individual users is collected within the framework of analysis tools. If you are also registered as a user with ClipMyHorse, your user profile will also be enriched with the information that arises from your use of ClipMyHorse’s services (e.g. which videos are viewed, in what order videos are viewed). Cookies are not set by ClipMyHorse. For more information, please see ClipMyHorse’s privacy policy at:

https://www.clipmyhorse.tv/en_DE/privacy

The processing of your personal data is based on your consent in accordance with Art. 6 para. 1 a of the GDPR, which you grant us by double-clicking on the corresponding video stream.

Your consent can be revoked at any time. When you leave the subpage of our website, the settings will be reset automatically and you have to double-click again to restart the video stream.

5. Use of Google Tag Manager

We use the service called Google Tag Manager from “Google”. Through this service, website tags can be managed via an interface. The service does not set any cookies and does not collect any personal data itself.

The Google Tag Manager takes care of loading other components, which in turn may collect data, but does not access this data. If a deactivation has been made at the domain or cookie level, this remains in place for all tracking tags that are implemented with Google Tag Manager.

For more information on Google Tag Manager, please see Google’s privacy policy at:

https://support.google.com/tagmanager/answer/9323295?hl=de

6. Use of Google Fonts

We use Google Fonts from “Google” on our website. Google Fonts is an interactive directory with more than 800 fonts that Google provides for free use.

The fonts from Google are embedded on our web server and not on Google’s servers. We therefore use Google Fonts locally. There is no processing of personal data and no data transfer to Google in connection with the use of Google Fonts.

7. Use of Chick-CTA

On our website we use a so-called Quick-CTA, in which you can enter your e-mail address. This enables us to contact you without you having to send us a separate e-mail. Your deposited e-mail address will be stored by us for this purpose.

The processing of your e-mail address is based on your consent pursuant to Art. 6 para. 1 a of the GDPR, which you give us by entering it in the corresponding field. If you wish to work towards the conclusion of a contract by entering your e-mail address, Art. 6 para. 1 b of the GDPR serves as an additional legal basis.

Your consent can be revoked at any time. To do so, send us an e-mail to business@conmoto.de.

8. E-mail and contact form

If you send us an e-mail, the personal data you send us with your e-mail will be stored. We also have a contact form on our website that you can use to contact us. In doing so, the following data entered by you in the input mask will be transmitted to us and stored: Name, e-mail address, message. In addition, we record your IP address and the time of sending.

We need your e-mail address to send you our reply by e-mail. The communication of your name enables us to address you personally and to assign your inquiry to the appropriate contact person at our company.

The contact form is provided by […]. Entering your data may result in the transfer of this data to the aforementioned service provider. We have concluded an order processing agreement with the service provider, which obligates the service provider to comply with General Data Protection Regulation (GDPR) and ensures that the data may only be processed by the service provider on our express instructions and only for the specified purposes.

The processing of your personal data is based on your consent pursuant to Art. 6 (1) lit. a GDPR, which you give us by providing us with your data. If you wish to work towards the conclusion of a contract through your inquiry or your inquiry is made within an existing contractual relationship with us, Art. 6 (1) lit. b GDPR serves as the legal basis for us to process this data.

Subject to legal retention periods, your personal data will be deleted as soon as we have conclusively processed your inquiry. If you do not receive a response from us within a period of ten days, your personal data will also be deleted.

Your consent can be revoked at any time. To do so, send us an e-mail to business@conmoto.de. However, we would like to point out that your request cannot be processed further in the event of a revocation.

9. (Online) application

We have an application form on our website that you can use to send us your application data online. Alternatively, you can also apply to us by e-mail or by post. Depending on the data you enter in this form, the information you provide to us in your application, the documents you attach to your (online) application and the data you provide to us during the application process, the following personal data may be processed by us:

  • Master data (e.g. title, first name, last name, title, academic degree, gender, date and place of birth, nationality, address, telephone number, e-mail address, marital status, residence and work permit, application photo);
  • Application data (e.g. cover letter, resume, references, interview information, references);
  • Health data (e.g. occupational medical examinations, illnesses, aids due to illness, disabilities);
  • Information on religious affiliation relevant under tax law, from which religious and ideological convictions can be derived, if applicable;
  • Information on marital status (marriage or registered civil partnership), from which sexual orientation may be inferred, if applicable;
  • Declarations under data protection law (e.g. declaration(s) of consent to the processing of personal data, declaration(s) of revocation of consent to the processing of personal data, objection to the processing of personal data, assertion of rights to information, correction, deletion, restriction of processing and data portability, including the information you provide to us when asserting your rights).

Insofar as the processing of personal data is necessary for the decision on the establishment of an employment relationship with us, we use Art. 88 GDPR in conjunction with. § Section 26 (1) sentence 1 Federal Data Protection Act (BDSG) as the legal basis.

Furthermore, we may process your personal data insofar as this is necessary for the fulfillment of a legal obligation or the defense of asserted legal claims against us pursuant to Art. 6 (1) lit. c GDPR. A legitimate interest is, for example, a duty to provide evidence in proceedings under the General Equal Treatment Act (AGG).

For the processing of further personal data that you provide voluntarily in your application, the lawfulness of the processing is based on Art. 6 (1) lit. a GDPR. Your consent to the processing of this data can be revoked at any time. To do so, send us an e-mail to business@conmoto.de.

If an employment relationship is established between you and us as a result of your application, we may further process the personal data already received from you in the course of the application process for the purposes of the employment relationship, insofar as this is necessary in accordance with Art. 88 GDPR in conjunction with. § Section 26 sentence 1 BDSG for the implementation or termination of the employment relationship or for the exercise or fulfillment of the rights and obligations of the employees’ representation of interests resulting from a law or a collective bargaining agreement, a works agreement or a service agreement (collective agreement).

Within our company, we will only pass on the personal data you provide as part of the application process to those departments and persons who require this data to fulfill contractual and legal obligations or to implement our legitimate interests. Your applicant data will not be passed on outside our company or to countries outside the EU/EEA.

H. Data recipients

Your data can be transferred by us to external service providers (e.g. IT service providers, companies that destroy or archive data, cloud providers). We will only transfer your data to third parties if we are authorized to do so under data protection law.

The transfer of data to third parties is based either on the fulfilment of legal obligations, on legitimate interests, on the need to fulfil a contract or on the basis of any consent given. If the external service provider acts as a processor, the data transfer shall take place within the framework of a processing agreement.

If it is necessary to transfer data to processors in countries outside the European Economic Area (EEA), this will take place on the basis of the EU standard contractual clauses or to countries with regard to which an adequacy decision of the is available.

I. Your rights as a data subject

If your personal data is processed, you are a data subject within the meaning of the GDPR and you are entitled to the following rights against us as the controller:

1. Right of access

You can request confirmation from us as to whether your personal data is being processed by us. If such processing exists, you may request information from us pursuant to Art. 15 of the GDPR on the following:

  1. the purposes for which the personal data are processed
  2. the categories of personal data which are processed
  3. the recipients or the categories of recipients to whom the personal data concerning you have been or will be disclosed
  4. the planned duration of the storage of the personal data concerning you or, if specific information on this is not possible, criteria for the determination of the storage duration
  5. the existence of a right to rectify or erase personal data concerning you, a right to restrict processing by us or a right to object to such processing
  6. the existence of a right of appeal to a supervisory authority
  7. any available information on the origin of the data, if the personal data are not collected from the data subject
  8. the existence of automated decision-making including profiling pursuant to Art. 22 para. 1 and 4 of the GDPR and, at least in these cases, meaningful information about the logic involved and the scope and intended effects of such processing on you.

Furthermore, you have the right to request information as to whether the personal data concerning you is transferred to a third country or to an international organization. In this context, you may request to be informed of the appropriate safeguards pursuant to Art. 46 of the GDPR in connection with the transfer.

2. Right to rectification

According to Art. 16 of the GDPR, you have the right to rectification and / or completion vis-à-vis us if the processed data relating to you is incorrect and / or incomplete. We shall make the correction without delay.

3. Right to restriction of processing

Under the following conditions, you may request the restriction of the processing of personal data concerning you in accordance with Art. 18 of the GDPR:

  1. if you contest the accuracy of the personal data relating to you for a period of time which enables us to verify the accuracy of the personal data
  2. the processing is unlawful and you object to the erasure of the personal data and request the restriction of the use of the personal data instead
  3. we no longer need the personal data for the purposes of processing, but you need them for the assertion, exercise or defense of legal claims, or
  4. if you object to the processing pursuant to Art. 21 para. 1 of the GDPR and it is not yet clear whether our legitimate reasons outweigh your reasons.

Where the processing of personal data relating to you has been restricted, such data may be processed, with the exception of storage, only with your consent or for the assertion, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of substantial public interest of the Union or of a Member State. You will be informed by us before the restriction is lifted.

4. Right to erasure

a. Obligation to delete

According to Art. 17 of the GDPR, you can demand that we delete the personal data concerning you without delay. We are obliged to delete this data immediately if one of the following reasons applies:

  1. the personal data relating to you are no longer necessary for the purposes for which they were collected or otherwise processed
  2. your consent, on which the processing was based according to Art. 6 para. 1 a of the GDPR is revoked by you and there is no other legal basis for the processing.
  3. you object to the processing pursuant to Art. 21 para. 1 of the GDPR and there are no overriding legitimate reasons for the processing
  4. you object to the processing pursuant to Art. 21 para. 2 of the GDPR
  5. the personal data concerning you have been processed unlawfully
  6. the deletion of the personal data concerning you is necessary for compliance with a legal obligation under Union or Member State law to which the controller is subject
  7. the personal data relating to you have been processed in relation to information society services offered pursuant to Art. 8 para. 1 of the GDPR

b. Information to third parties

If we have made the personal data relating to you public and we are obliged to erase it  pursuant to Art. 17 para. 1 of the GDPR, we shall, taking into account the available technology and the cost of implementation, implement reasonable measures, including technical measures, to inform data controllers which process the personal data, that you, as the data subject, have requested that they erase all links to or copies or replications of such personal data.

c. Exceptions to the right to erasure

The right to erasure does not exist insofar as the processing is necessary:

  1. for the exercise of the right to freedom of expression and information
  2. for compliance with a legal obligation which requires processing under Union or Member State law to which we are subject, or for the performance of a task carried out in the public interest or in the exercise of an official authority vested in us
  3. for reasons of public interest in the field of public health pursuant to Art. 9 para. 2 h and i and Art. 9 para. 3 of the GDPR
  4. for archiving purposes in the public interest, for scientific or historical research purposes or for statistical purposes pursuant to Art. 89 para. 1 of the GDPR, insofar as the right referred to in Section 1 is likely to make impossible or seriously impair the achievement of the purposes of such processing
  5. for the assertion, exercise or defense of legal claims

d. Right to notification

If you have asserted the right to rectification, erasure or restriction of processing against us, we are obliged pursuant to Art. 19 GDPR to notify all recipients to whom the personal data concerning you have been disclosed, of this correction or deletion of the data or restriction of processing, unless this proves impossible or involves a disproportionate effort. You have the right to be informed about these recipients.

e. Right to data portability

Pursuant to Art. 20 of the GDPR, you have the right to receive the personal data that you have provided to us in a structured, common and machine-readable format. You also have the right to transmit this data to another controller to whom the personal data has been provided without hindrance from us, provided that

  1. the processing is based on consent pursuant to. Art. 6 para. 1 a of the GDPR or on a contract pursuant to Art. 6 para. 1 b of the GDPR and
  2. the processing is carried out with the aid of automated procedures

In exercising this right, you also have the right to have the personal data concerning you transferred directly from one controller to another, insofar as this is technically feasible. Freedoms and rights of other persons must not be impaired by this.

The right to data portability does not apply to processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us.

f. Right to object

Pursuant to Art. 21 of the GDPR, you have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Art. 6 para. 1 e or f of the GDPR; this also applies to profiling based on these provisions. The objection must be substantiated.

Upon receipt of an objection, we will no longer process the personal data relating to you unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

If the personal data relating to you are processed for the purpose of direct marketing, you have the right to object at any time to the processing of personal data relating toyou for the purpose of such marketing; this also applies to profiling insofar as it is related to such direct marketing.

If you object to processing for direct marketing purposes, the personal data relating to you will no longer be processed for these purposes.

You have the possibility, in connection with the use of information society services, notwithstanding Directive 2002/58/EC, to exercise your right to object by means of automated procedures using technical specifications.

g. Right to revoke the declaration of consent under data protection law

Pursuant to Art. 7 para. 3 of the GDPR, you have the right to revoke your declaration of consent under data protection law – even before the GDPR came into force (25th of May 2018) – at any time. The revocation shall not affect the lawfulness of the processing carried out on the basis of the consent until the revocation. The revocation of consent can be declared via e-mail, letter or telephone to our contact details above. Furthermore, you can revoke the consent given in our cookie consent banner at any time. To do this, call up our Cookie Consent banner again. You will find the link button to the banner under the designation “Cookie setting” on every sub-page of our website at the bottom of the screen.

h. Automated decision in individual cases including profiling

Pursuant to Art. 22 of the GDPR, you have the right not to be subject to a decision based solely on automated processing – including profiling – which produces legal effects concerning you or similarly significantly affects you. This shall not apply if the decision

  1. is necessary for the conclusion or performance of a contract between you and us, or
  2. is permitted by legislation of the Union or the Member States to which we are subject and that legislation contains appropriate measures to safeguard your rights and freedoms and your legitimate interests, or
  3. takes place with your express consent

However, such decisions may not be based on special categories of personal data pursuant to Art. 9 para.1 of the GDPR, unless Art. 9 para. 2 a or g of the GDPR applies and appropriate measures have been taken to protect the rights and freedoms and your legitimate interests.

With regard to the cases referred to in points 1 and 3, we shall take reasonable measures to safeguard your rights and freedoms and your legitimate interests, including at least the right to obtain the intervention of a person on our side, to express your point of view and to contest the decision.

i. Right to complain to a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, place of work or the place of the alleged infringement, if you consider that the processing of personal data concerning you infringes the GDPR.

The supervisory authority to which the complaint has been lodged shall inform the complainant of the status and outcome of the complaint, including the possibility of a judicial remedy under Art. 78 of the GDPR.

Status: May 2022