Privacy policy

Personal data (hereinafter mostly referred to as "data") is only processed by us to the extent necessary and for the purpose of providing a functional and user-friendly website, including its content and the services offered there.

According to Article 4(1) of Regulation (EU) 2016/679, i.e. the General Data Protection Regulation (hereinafter referred to as "GDPR"), "processing" means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

With the following data protection declaration, we inform you in particular about the type, scope, purpose, duration and legal basis of the processing of personal data, insofar as we decide either alone or together with others on the purposes and means of processing. In addition, we inform you below about the third-party components we use for optimisation purposes and to increase the quality of use, insofar as third parties process data on their own responsibility.

Our privacy policy is structured as follows

I. Information about us as the controller
II. rights of users and data subjects
III. Information on data processing

I. Information about us as the controller
The responsible provider of this website in terms of data protection law is

CONUCON UG (limited liability)
Billhorner Brückenstraße 40
20539 Hamburg
Telephone: 0160 2237603
E-mail: info@conucon.de

The provider's data protection officer is: Dr Felix Oehme

II Rights of users and data subjects
With regard to the data processing described in more detail below, users and data subjects have the right

to confirmation as to whether data concerning them is being processed, to information about the processed data, to further information about the data processing and to copies of the data (cf. also Art. 15 GDPR)
to rectification or completion of incorrect or incomplete data (see also Art. 16 GDPR);
the immediate erasure of the data concerning them (see also Art. 17 GDPR) or, alternatively, if further processing is required in accordance with Art. 17 para. 3 GDPR, the restriction of processing in accordance with Art. 18 GDPR;
to receive the data concerning them and provided by them and to transfer this data to other providers/controllers (cf. also Art. 20 GDPR)
to lodge a complaint with the supervisory authority if they are of the opinion that the data concerning them is being processed by the provider in breach of data protection regulations (cf. also Art. 77 GDPR).
In addition, the provider is obliged to inform all recipients to whom data has been disclosed by the provider of any rectification or erasure of data or restriction of processing carried out on the basis of Articles 16, 17 (1), 18 GDPR. However, this obligation does not apply if this notification is impossible or involves a disproportionate effort. Notwithstanding this, the user has a right to information about these recipients.

Users and data subjects also have the right to object to the future processing of data concerning them in accordance with Art. 21 GDPR, provided that the data is processed by the provider in accordance with Art. 6 para. 1 lit. f) GDPR. In particular, an objection to data processing for the purpose of direct advertising is admissible.

III. Information on data processing
Your data processed when using our website will be deleted or blocked as soon as the purpose of storage no longer applies, the deletion of the data does not conflict with any statutory retention obligations and no other information on individual processing procedures is provided below.

Server data
For technical reasons, in particular to ensure a secure and stable Internet presence, data is transmitted to us or to our web space provider by your Internet browser. With these so-called server log files, the type and version of your Internet browser, the operating system, the website from which you have switched to our Internet presence (referrer URL), the website(s) of our Internet presence that you visit, the date and time of the respective access and the IP address of the Internet connection from which the use of our Internet presence takes place are collected, among other things.

The data collected in this way is stored temporarily, but not together with other data about you.

This storage takes place on the legal basis of Art. 6 para. 1 lit. f) GDPR. Our legitimate interest lies in the improvement, stability, functionality and security of our website.

The data will be deleted after seven days at the latest, unless further storage is required for evidence purposes. Otherwise, the data is excluded from deletion in whole or in part until an incident has been finally clarified.

Cookies
a) Session cookies/session cookies
We use so-called cookies on our website. Cookies are small text files or other storage technologies that are placed and stored on your end device by the Internet browser you use. These cookies are used to process certain information from you, such as your browser or location data or your IP address, on an individual basis.  

This processing makes our website more user-friendly, effective and secure, as the processing enables, for example, the reproduction of our website in different languages or the offer of a shopping basket function.

The legal basis for this processing is Art. 6 para. 1 lit. b) GDPR, insofar as these cookies process data for contract initiation or contract fulfilment.

If the processing does not serve to initiate or fulfil a contract, our legitimate interest lies in improving the functionality of our website. The legal basis in this case is Art. 6 para. 1 lit. f) GDPR.

These session cookies are deleted when you close your Internet browser.

b) Third-party cookies
Our website may also use cookies from partner companies with whom we work for the purposes of advertising, analysing or the functionalities of our website.

Please refer to the following information for details, in particular the purposes and legal basis for processing such third-party cookies.

c) Removal option
You can prevent or restrict the installation of cookies by changing the settings in your Internet browser. You can also delete cookies that have already been saved at any time. However, the steps and measures required for this depend on the specific Internet browser you are using. If you have any questions, please use the help function or documentation of your Internet browser or contact its manufacturer or support. In the case of so-called Flash cookies, however, processing cannot be prevented via the browser settings. Instead, you must change the settings of your Flash player. The steps and measures required for this also depend on the specific Flash player you are using. If you have any questions, please also use the help function or documentation of your Flash player or contact the manufacturer or user support.

However, if you prevent or restrict the installation of cookies, this may mean that not all functions of our website can be used to their full extent.

Contract processing
The data transmitted by you to utilise our range of goods and/or services is processed by us for the purpose of contract processing and is necessary in this respect. Conclusion and fulfilment of the contract are not possible without the provision of your data.

The legal basis for the processing is Art. 6 para. 1 lit. b) GDPR.

We delete the data once the contract has been fully processed, but must observe the retention periods under tax and commercial law.

As part of the contract processing, we pass on your data to the transport company commissioned with the delivery of goods or to the financial service provider, insofar as the transfer is necessary for the delivery of goods or for payment purposes.

The legal basis for the transfer of data is then Art. 6 para. 1 lit. b) GDPR.

Customer account / registration function
If you create a customer account with us via our website, we will collect and store the data you enter during registration (e.g. your name, address or e-mail address) exclusively for pre-contractual services, for contract fulfilment or for the purpose of customer care (e.g. to provide you with an overview of your previous orders with us or to be able to offer you the so-called notepad function). At the same time, we store the IP address and the date and time of your registration. Of course, this data will not be passed on to third parties.

As part of the further registration process, your consent to this processing is obtained and reference is made to this privacy policy. The data collected by us will be used exclusively for the provision of the customer account.

Insofar as you consent to this processing, Art. 6 para. 1 lit. a) GDPR is the legal basis for the processing.

If the opening of the customer account also serves pre-contractual measures or the fulfilment of the contract, the legal basis for this processing is also Art. 6 para. 1 lit. b) GDPR.

You can revoke your consent to the opening and maintenance of the customer account at any time with effect for the future in accordance with Art. 7 para. 3 GDPR. All you need to do is inform us of your cancellation.

The data collected in this respect will be deleted as soon as processing is no longer necessary. However, we must comply with retention periods under tax and commercial law.

Checking creditworthiness and scoring
If we offer you the basic option of paying by invoice as part of our range of goods or services and you make use of this option, we reserve the right to obtain credit information from a credit agency (such as Creditreform, Schufa, Bürgel or infoscore) on the basis of mathematical-statistical procedures. For this purpose, your data will be forwarded to the credit agency if it is relevant to the contract, such as your name and address. We use the subsequent information about the statistical probability of a payment default to decide whether to offer you payment by invoice.

The legal basis for this processing is our legitimate interest in the security of the claim in accordance with Art. 6 para. 1 lit. f) GDPR.

Newsletter
If you register for our free newsletter, the data requested from you for this purpose, i.e. your e-mail address and - optionally - your name and address, will be transmitted to us. At the same time, we store the IP address of the internet connection from which you access our website as well as the date and time of your registration. As part of the further registration process, we will obtain your consent to send you the newsletter, describe the content in detail and refer you to this privacy policy. We use the data collected in this process exclusively for sending the newsletter - in particular, it is therefore not passed on to third parties.

The legal basis for this is Art. 6 para. 1 lit. a) GDPR.

You can revoke your consent to receive the newsletter at any time with effect for the future in accordance with Art. 7 para. 3 GDPR. All you have to do is inform us of your cancellation or click on the unsubscribe link contained in every newsletter.

Contact enquiries / contact option
If you contact us via the contact form or email, the data you provide will be used to process your enquiry. The provision of the data is necessary for processing and answering your enquiry - without it, we cannot answer your enquiry or can only answer it to a limited extent.

The legal basis for this processing is Art. 6 para. 1 lit. b) GDPR.

Your data will be deleted if your enquiry has been conclusively answered and the deletion does not conflict with any statutory retention obligations, such as in the case of any subsequent contract processing.

User contributions, comments and ratings
We offer you the opportunity to publish questions, answers, opinions or ratings, hereinafter referred to as "contributions", on our website. If you make use of this offer, we will process and publish your contribution, the date and time of submission and the pseudonym you may have used.

The legal basis for this is Art. 6 para. 1 lit. a) GDPR. You can revoke your consent at any time with effect for the future in accordance with Art. 7 para. 3 GDPR. All you have to do is inform us of your cancellation.

We also process your IP address and email address. The IP address is processed because we have a legitimate interest in initiating or supporting further steps if your contribution infringes the rights of third parties and/or is otherwise unlawful.

The legal basis in this case is Art. 6 para. 1 lit. f) GDPR. Our legitimate interest lies in any necessary legal defence.

Subscription to contributions
If you publish posts on our website, we also offer you the option of subscribing to any follow-up posts by third parties. We process your email address in order to be able to inform you about these follow-up posts by email.

The legal basis for this is Art. 6 para. 1 lit. a) GDPR. You can revoke your consent to this subscription at any time with effect for the future in accordance with Art. 7 para. 3 GDPR. All you have to do is inform us of your cancellation or click on the unsubscribe link contained in the respective email.

Google
We use the Google Analytics service of Google Ireland Limited (Ireland/EU) for the needs-based design and continuous optimisation of our website. The service uses cookies that enable your use of our website to be analysed. Personal data is processed in the form of online identifiers (including cookie identifiers), IP addresses, device identifiers and information about interaction with our website. Google will use this information on our behalf to analyse the use of our online offer by users, to compile reports on the activities within our website and to provide us with further services associated with the use of our website and the use of the Internet. The processed data can be used to create user profiles, which we may link to data that we have received via our contact form. We only use Google Analytics with activated IP anonymisation. This means that the IP address of users is truncated by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area. We use the Google Universal Analytics variant. This enables us to assign interaction data from different devices and from different sessions to a unique user ID. This allows us to contextualise and analyse individual user actions.

We use the Google Optimize service on our website, which is offered by Google Ireland Limited (Ireland/EU). Google Optimize allows us to test various designs and settings on our website and use the results to adapt our website to the needs and wishes of website visitors. To analyse the test results, the Google Optimize service is linked to the Google Analytics analysis service.

We also use the Google Ads and Google Remarketing marketing services of Google Ireland Limited (Ireland/EU) on our website. These services enable us to display adverts in a more targeted manner in order to present users with adverts tailored to their interests.

Remarketing allows us to target users who have already interacted with our website. Our adverts are delivered when this target group visits a Google website or a website in the Google advertising network. For these purposes, a code is executed by Google when our website is accessed and so-called (re)marketing tags are integrated into the website. With their help, an individual cookie is stored on the user's device. The cookies can be set by various domains, including google.com, doubleclick.net, googlesyndication.com or googleadservices.com. This file records which websites users have visited, what content they are interested in and which offers have been used. In addition, technical information on the browser and operating system, referring websites, time of visit and other details on the use of the online offer are stored. All user data is only processed as pseudonymised data and does not contain any information with which we can personally identify users. The adverts shown are therefore not displayed specifically for a person, but for the owner of the cookie.

Google Ads allows us to place adverts that are relevant to users in the Google advertising network (e.g. in search results or on other websites), improve campaign performance reports and prevent a user from being shown adverts more than once. Each Ads customer sets a different conversion cookie. These cookies can therefore not be tracked across the websites of different Ads customers. A cookie ID is used to record which adverts are displayed in which browser. This prevents the same campaign from being displayed multiple times. In addition, Google can use cookie IDs to record so-called conversions, i.e. whether a user sees an advert and later visits the advertiser's website and purchases something there. According to Google, these cookies do not contain any personal information.

Further information on this processing activity, the technologies used, stored data and the storage period can be found in the settings of our Consent Management Tool. Google Marketing Services are only used with your consent in accordance with Section 15 (3) TMG or Art. 6 (1) (a) GDPR.

In the case of Google services, the transmission of data to Google Inc. in the USA cannot be ruled out. Please note the information in the section "Data transfer to third countries". Users can find further information on data protection at Google in Google's privacy policy: https://www.google.com/policies/privacy

Online job applications / publication of job advertisements
We offer you the opportunity to apply for a job with us via our website. For these digital applications, we collect and process your applicant and application data electronically to handle the application process.

The legal basis for this processing is Section 26 (1) sentence 1 BDSG in conjunction with Art. 88 (1) GDPR. Art. 88 para. 1 GDPR.

If an employment contract is concluded after the application procedure, we will store the data you submitted during the application in your personnel file for the purpose of the usual organisational and administrative process - of course in compliance with further legal obligations.

The legal basis for this processing is also Section 26 para. 1 sentence 1 BDSG in conjunction with Art. 88 para. 1 GDPR. Art. 88 para. 1 GDPR.

If an application is rejected, we automatically delete the data transmitted to us two months after notification of the rejection. However, the data will not be deleted if the data requires longer storage of up to four months or until the conclusion of legal proceedings due to legal provisions, e.g. due to the burden of proof under the AGG.

In this case, the legal basis is Art. 6 para. 1 lit. f) GDPR and Section 24 para. 1 no. 2 BDSG. Our legitimate interest lies in legal defence or enforcement.

If you expressly consent to your data being stored for a longer period of time, e.g. for your inclusion in a database of applicants or interested parties, the data will be processed further on the basis of your consent. The legal basis is then Art. 6 para. 1 lit. a) GDPR. However, you can of course revoke your consent at any time in accordance with Art. 7 para. 3 GDPR by notifying us with effect for the future.

Facebook Pixel
This website uses Facebook's visitor action pixel to measure conversions. The provider of this service is Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. However, according to Facebook, the data collected is also transferred to the USA and other third countries.

This allows the behaviour of site visitors to be tracked after they have been redirected to the provider's website by clicking on a Facebook ad. This allows the effectiveness of Facebook ads to be evaluated for statistical and market research purposes and future advertising measures to be optimised.

The data collected is anonymous to us as the operator of this website; we cannot draw any conclusions about the identity of the users. However, the data is stored and processed by Facebook so that a connection to the respective user profile is possible and Facebook can use the data for its own advertising purposes in accordance with the Facebook Data Usage Policy. This enables Facebook to place adverts on Facebook pages and outside of Facebook. This use of the data cannot be influenced by us as the website operator.

The use of this service is based on your consent in accordance with Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG. Consent can be revoked at any time.

Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum and https://de-de.facebook.com/help/566994660333381.

Insofar as personal data is collected on our website with the help of the tool described here and forwarded to Facebook, we and Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland are jointly responsible for this data processing (Art. 26 GDPR). The joint responsibility is limited exclusively to the collection of the data and its transfer to Facebook. The processing carried out by Facebook after forwarding is not part of the joint responsibility. The obligations incumbent on us jointly have been set out in an agreement on joint processing. The text of the agreement can be found at: https://www.facebook.com/legal/controller_addendum. According to this agreement, we are responsible for providing the data protection information when using the Facebook tool and for the secure implementation of the tool on our website in accordance with data protection law. Facebook is responsible for the data security of Facebook products. You can assert data subject rights (e.g. requests for information) regarding the data processed by Facebook directly with Facebook. If you assert your data subject rights with us, we are obliged to forward them to Facebook.

You can find further information on protecting your privacy in Facebook's data protection information: https://de-de.facebook.com/about/privacy/.

You can also deactivate the remarketing function "Custom Audiences" in the settings for adverts at https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen. You must be logged in to Facebook to do this.

If you do not have a Facebook account, you can deactivate usage-based advertising from Facebook on the website of the European Interactive Digital Advertising Alliance: http://www.youronlinechoices.com/de/praferenzmanagement/.

Facebook Conversion API
We have integrated Facebook Conversion API on this website. The provider of this service is Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. However, according to Facebook, the data collected is also transferred to the USA and other third countries.

Facebook Conversion API enables us to record the website visitor's interactions with our website and pass them on to Facebook in order to improve advertising performance on Facebook.

In particular, the time of the call, the website called up, your IP address and your user agent and, if applicable, other specific data (e.g. products purchased, value of the shopping basket and currency) are recorded. You can find a complete overview of the data that can be collected here: https://developers.facebook.com/docs/marketing-api/conversions-api/parameters.

The use of this service is based on your consent in accordance with Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG. Consent can be revoked at any time.

If personal data is collected on our website with the help of the tool described here and forwarded to Facebook, we and Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland are jointly responsible for this data processing (Art. 26 GDPR). The joint responsibility is limited exclusively to the collection of the data and its transfer to Facebook. The processing carried out by Facebook after forwarding is not part of the joint responsibility. The obligations incumbent on us jointly have been set out in an agreement on joint processing. The text of the agreement can be found at: https://www.facebook.com/legal/controller_addendum. According to this agreement, we are responsible for providing the data protection information when using the Facebook tool and for the secure implementation of the tool on our website in accordance with data protection law. Facebook is responsible for the data security of Facebook products. You can assert data subject rights (e.g. requests for information) regarding the data processed by Facebook directly with Facebook. If you assert your data subject rights with us, we are obliged to forward them to Facebook.

The data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum and https://de-de.facebook.com/help/566994660333381.

You can find further information on protecting your privacy in Facebook's privacy policy: https://de-de.facebook.com/about/privacy/.

Facebook Custom Audiences
We use Facebook Custom Audiences. The provider of this service is Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.

When you visit or use our websites and apps, take advantage of our free or paid offers, transmit data to us or interact with the Facebook content of our company, we collect your personal data. If you give us your consent to use Facebook Custom Audiences, we will transmit this data to Facebook, which Facebook can use to display suitable advertising to you. Your data can also be used to define target groups (lookalike audiences).

Facebook processes this data as our processor. Details can be found in the Facebook user agreement: https://www.facebook.com/legal/terms/customaudience.

The use of this service is based on your consent in accordance with Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG. Consent can be revoked at any time.

Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://www.facebook.com/legal/terms/customaudience and https://www.facebook.com/legal/terms/dataprocessing.