Data protection

1.

Introduction and General Terms and Conditions

Dear Visitors, we appreciate your interest in the information we provide and thank you for your attention. Protecting your privacy when collecting, processing, and using your personal data in accordance with legal requirements is very important to us. This Privacy Policy applies to our handling of personal data that we collect, process, or use via any website operated by the Sedus Group (hereinafter “Sedus”) that contains a link to this Privacy Policy. This Privacy Policy covers the personal data of customers, prospective customers, job applicants, and visitors.

Sedus is committed to protecting your personal data. Personal data is data that relates to natural persons and can be attributed to a specific individual (e.g., your name, phone number, or email address). When you provide such information, we are legally obligated to use your information in compliance with all laws pertaining to the protection of personal data. The following Privacy Policy complies with the requirements of Article 13 of the GDPR regarding the provision of information to data subjects about data processing. Sedus websites may contain links to websites owned and operated by third-party companies that are not covered by this Privacy Policy. Separate privacy policies of the respective website operators apply to these sites.

2.

Data Controller

Data controller within the meaning of the General Data Protection Regulation:

Sedus Stoll Aktiengesellschaft
Christof-Stoll-Straße 1
79804 Dogern
Germany
Phone: +49 (7751) 84 – 0
Fax: +49 (7751) 84 – 310
E-Mail: info@sedusstollgroup.co m
Internet: www.sedusstollgroup.com

You can find the complete information here: https://sedusstollgroup.com/impressum/

3.

Scope of the Privacy Policy

The law defines the processing of personal data as activities such as the collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure, or destruction of personal data.
Personal data refers to any information relating to an identified or identifiable natural person. This Privacy Policy addresses the personal data of customers, prospective customers, job applicants, and visitors. This Privacy Policy applies to our website http://www.sedusstollgroup.com/, including all subdomains.

3.1. Collection and Processing of Data During Your Visits to Our Website
When you visit our website, the web server stores the following information in server log files, which are automatically transmitted to us by your browser: the IP address assigned to you by your Internet service provider, the website from which you came, the pages you visit on our site, the amount of data transferred, your web browser’s identifier, the time of your visit, and other information about the devices you use to access our site. This data is stored in a server log for statistical and marketing purposes, for example, to improve the website and its content, including security.

4.

In what cases do we contact you?

We may contact you:

in connection with the service and support you have signed up for, to ensure that Sedus can provide you with these services;
in connection with any correspondence we receive from you, or comments or complaints regarding Sedus products or services;
in connection with personalized services you use;
to invite you to participate in surveys (participation is always voluntary);
for marketing purposes, i.e., newsletters and mailings, if you have expressly consented to this in advance.

5.

Why do we process your personal data—and on what legal basis

To strengthen and optimize our customer relationship
As part of our efforts to continuously improve our relationship with you, we occasionally ask you to participate in our customer surveys. The results of these surveys help us tailor our products and services even better to your needs.

Data processing and analysis for marketing purposes
Your needs are important to us, and we strive to provide you with information about products and services that are tailored specifically to you. To do this, we use insights gained from our business relationship with you as well as from market research. The primary goal is to tailor our product recommendations to your needs. In this context, we guarantee that we will always process your data in accordance with applicable data protection laws. Important: You may object to the use of your personal data for this purpose at any time.

What specifically do we analyze and process?

Results of our marketing campaigns to measure the effectiveness and relevance of our campaigns;
Information from your visits to our website;
We analyze the potential demand for our products and services.

Based on your consent
If you have consented to the processing of your personal data for one or more specific purposes, we are permitted to process your data. You may revoke this consent at any time with future effect without incurring any costs other than the transmission costs according to standard rates (costs of your Internet connection). However, the withdrawal of consent does not affect the lawfulness of processing carried out prior to the withdrawal.

Due to Legal Requirements or in the Public Interest
As a company, we are subject to a wide variety of legal requirements (e.g., under tax law). We process your personal data to comply with our legal obligations. Occasionally, however, Sedus relies on third-party providers to process your personal data, e.g., to perform certain analyses (see Section 7: Technologies) or to rent storage space or server capacity for our web hosting and/or application. Sedus requires these third-party providers, like all commissioned data processors, to strictly adhere to our instructions. Sedus maintains appropriate agreements with all providers regarding commissioned data processing in accordance with Article 28 of the GDPR. When personal data is processed outside the EU/EEA, we ensure, through contractual agreements based on the EU Standard Contractual Clauses, an adequate level of data protection in the third country that is equivalent to European data protection standards.

6.

Browser Cookies

A “cookie”—also commonly referred to as a “web cookie” or “browser cookie”—is a file containing a small amount of data, often including a unique identifier, that is sent to your computer, tablet, or mobile phone and automatically stored there when you visit a website. Each website can send its own cookie to your web browser if your browser settings allow it. Most modern browsers support cookies but give users the option to disable them. You can set your browser to reject all cookies or to display a notification when a cookie is sent. However, some of the features or services on our sites may not function fully without cookies.

On Sedus websites, cookies store information about your online preferences, allowing us to tailor our websites to your interests. We also use cookies to continuously improve the quality of our service and to determine how our websites are used. To do this, we store user preferences in cookies and track trends and patterns in how visitors navigate our websites.

There are different types of cookies.

Session Cookies: A user’s session cookies for a website exist only in the browser’s temporary memory and only as long as the user remains on the website. If no expiration date or validity period is specified when the cookie is created, only a session cookie is generated. Web browsers typically delete session cookies when the user closes the browser.
Persistent cookies: Persistent cookies exist beyond the duration of the session. For example, if a maximum age of 1 year has been set for a persistent cookie, the initial value stored in that cookie is always sent to the server whenever the user visits that server within that year. This allows us to track how the user originally arrived at this website. For this reason, persistent cookies are also referred to as tracking cookies.
We may use third-party cookies to identify user trends and patterns with the help of third-party web analytics providers. Third-party cookies are cookies that belong to domains other than the one displayed in the browser’s address bar. Websites may contain content from third-party domains (e.g., banner ads). This makes it possible to track the user’s browsing history. Data collected by third-party cookies is processed by their respective providers on behalf of Sedus as the data controller. The third-party cookies on the Sedus website are used exclusively by Sedus websites and the web analytics provider and are not shared with third parties. The privacy settings of most modern browsers allow you to block third-party tracking cookies (see Section 9).

Through our cookie banner, you have the option at any time to limit the use of cookies to only those that are necessary.

7.

Technology

Sedus uses Internet technologies (e.g., cookies, JavaScript) solely to make it easier for you to work with Internet applications. We use Google Analytics (a web analytics service) to analyze the content of this website, generate reports on website activity for the website operator, and provide the website operator with additional services related to website activity and internet usage. To this end, reports on your website activities are compiled for Sedus so that Sedus can tailor its online offerings to your needs.
The collected data is analyzed solely for statistical purposes and in anonymized form. To this end, Google Analytics truncates IP addresses before they are transmitted. We would like to point out that the website uses the Google extension “gat._anonymizeIp();”. This ensures that IP addresses are collected anonymously (IP anonymization). Google does not associate your truncated IP address with any other Google data.
You may object to further tracking and analysis at any time. In addition, you can prevent the collection of data generated by the cookie regarding your use of the website (including your IP address) and its analysis by Google by downloading and installing the browser plugin available at the following link: http://tools.google.com/dlpage/gaoptout?hl=en. If you use multiple devices or browsers, you may need to opt out separately for each device or browser.

8.

Social Plugins

Our website uses so-called social plugins (“plugins”) from social networking sites. When you access the Sedus website via such a plugin, your browser establishes a connection to the server of the underlying social networking site, downloads the plugin’s visual representation, and displays it to you. During this process, the social networking site receives information related to your visit to our website, as well as additional data such as your IP address.

All plugins are marked with the logo of their respective operator. To enhance data protection and in accordance with applicable data protection laws, Sedus has implemented the plugins using a so-called “2-click solution.” This implementation ensures that no direct connection is established between your browser and the operators’ servers when you visit our website. Only when you activate the plugins by clicking on them—and thereby consent to the data transfer—will your browser establish a direct connection to the respective operator’s server. The plugin’s content is then transmitted directly from the operators to your browser and embedded into the website. This may result in data being transferred to a third country (e.g., the U.S.).

When the plugin is embedded, the respective provider receives the information that your browser has accessed our website. If you were logged into your account while visiting the website, the respective provider can link the visit directly to your account. If you interact with the plugin, the corresponding information is transmitted directly from your browser to the provider and stored by them. In addition, the information is made public on the relevant social network and may be displayed to your contacts. If you do not want such data to be transmitted to the providers, you must log out of your respective account before clicking on and activating the plugins.

You can find further information on the purpose and scope of the collection, processing, and use of this data in the operators’ privacy policies:

Google (analytics, maps, …): developers.google.com/+/web/buttons-policy
WordPress: codex.wordpress.org/WordPress_Cookies

8.1 Google (Analytics, Maps, Ads, Tag Manager, Fonts, YouTube):developers.google.com/+/web/buttons-policy

We use Google Analytics or Google Universal Analytics, a web analytics service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, to analyze user behavior on the website and in the customer portals. For this analysis, the usage information generated by the cookie (including the user’s truncated IP address) is transmitted to our servers and stored for usage analysis purposes, provided that you accept cookies for marketing purposes. We use usage analysis to optimize our own websites, customer portals, customer communications, and other advertising measures, as well as for market research purposes. During this process, users’ IP addresses are immediately truncated, so that it is no longer possible to identify users via their IP addresses. In the case of Google Universal Analytics, IP anonymization takes place. We also wish to inform you that on this website, Google Analytics has been enhanced with the “anonymizeIp” code to ensure the anonymized collection of IP addresses (so-called IP masking). According to Google, it does not associate your truncated IP address with other Google data. Through Google Universal Analytics, we assign a user ID to the user when they access the personal area. If the same user accesses the personal area using different devices, we may share this user ID with Google Universal Analytics, and the usage profiles across the various devices are linked by creating an additional client ID. This enables us to track user activity across devices. In addition, the user’s profile may be enriched with additional data that is unrelated to the visit to the website.
You may object to further tracking and analysis at any time. You can also prevent the collection of data generated by the cookie regarding your use of the website (including your IP address) and its analysis by Google by downloading and installing the browser plug-in available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de. If you use multiple devices or browsers, you may need to opt out separately for each device or browser.
For more information on Google’s Terms of Service and privacy policy, please visit http://www.google.com/analytics/terms/de.html or https://www.google.de/intl/de/policies/.

Any user who does not consent to the storage and analysis of their anonymized user data regarding their visit to our website may object to this storage and use at any time.
Please note that, according to information from Google Inc., all Google Analytics accounts are to be migrated to Google Universal Analytics.
To draw attention to our current products and new developments, planned activities, and services, we place ads on Google Ads and, as part of this, also use Google Conversion Tracking for our marketing activities. These ads are displayed on websites in the Google Display Network based on search queries. We have the option to combine our ads with specific search terms. If you visit certain pages on our website, we and Google can recognize that you, as a user, clicked on one of our ads placed on Google and were redirected to our site. This data is used to generate visit statistics to evaluate the effectiveness of our advertising efforts.

In addition, we use Google Ads remarketing lists for search and display ads. This allows us to tailor search and display ad campaigns for users who have previously visited our website. Through these services, we can combine our ads with specific search terms or show ads to previous visitors that promote, for example, services they viewed on our website.
Interest-based advertising requires an analysis of online user behavior. Google uses cookies to perform this analysis. When a user clicks on an ad or visits our website, Google sets a cookie on the user’s computer. This information is used to target the visitor with ads within Google’s advertising network during a subsequent search query.

We use Google Maps on our site. Each time Google Maps is accessed, Google sets a cookie to process user settings and data when displaying this page. This cookie is generally not deleted when you close your browser but expires after a certain period of time. If you do not consent to this processing of your data, you can disable the “Google Maps” service. To do so, you must disable the JavaScript function in your browser. However, please note that in this case, you will not be able to use “Google Maps” at all or only to a limited extent.

On our website, we embed videos from YouTube, LLC, 901 Cherry Ave., 94066 San Bruno, CA, USA, a subsidiary of Google Inc., Amphitheatre Parkway, Mountain View, CA 94043, USA. We use the “- enhanced privacy mode -” option provided by YouTube. When you visit a page that contains an embedded video, a connection is established with YouTube’s servers, and the selected content is displayed by being transmitted to your browser. According to YouTube, in “- Enhanced Privacy Mode -,” data is only transmitted to the YouTube server when you watch the video. If you are logged into YouTube at the same time, this information is associated with your YouTube account. You can prevent this by logging out of your YouTube account before visiting our website.

More information about Google
Privacy at Google and YouTube: https://www.google.de/intl/de/policies/privacy/
Ad settings for Google: https://adssettings.google.com/authenticated

8.2 Adobe Fonts
This website uses Adobe Fonts to ensure consistent font display. The provider is Adobe Systems Software Ireland Limited, 4-6 Riverwalk, Citywest Business Campus, Dublin 24, Ireland.

When you visit a page, your browser loads the required fonts from Adobe’s servers. In doing so, technical information—specifically your device’s IP address, information about your browser, and the website you are visiting—is transmitted to Adobe.

Adobe Fonts is used to ensure a consistent and appealing presentation of our online content and to maintain a consistent corporate and brand image. The legal basis for this processing is Article 6(1)(f) of the GDPR.

According to Adobe, no cookies are set for the provision of the fonts. The IP address is processed solely for the purpose of delivering the fonts.

It cannot be ruled out that, in connection with the use of Adobe Fonts, personal data may be transferred to companies within the Adobe Group in third countries, particularly in the United States. To the extent that such a transfer occurs, Adobe provides appropriate safeguards in accordance with the requirements of Articles 44 et seq. of the GDPR.

For more information on data processing by Adobe, please visit:
https://www.adobe.com/privacy.html
https://www.adobe.com/privacy/policies/adobe-fonts.html

8.3 WordPress
We use cookies from WordPress. This involves storing certain information on your computer to verify the user’s identity. A distinction is made between cookies for logged-in users and commenters. Consequently, the user is authenticated. To log in to your WordPress site, you must therefore enable the use of cookies in your browser settings.
When you log in, a cookie containing authentication details is set. After logging in, another cookie is set to identify the user and track the duration of the session (a so-called session cookie). Identity verification occurs only for users with a login account. The cookies also contain hashed data, so it is not possible to read your username or password.
WordPress also uses cookies to bypass part of the password entry process (wp-login.php). If it is determined that valid cookies are still active, you will be redirected directly to the WordPress admin screen. If you comment on a blog as a visitor, cookies are also stored on your computer. This is done solely to simplify the user experience. These cookies expire in less than a year.
For more information, see: codex.wordpress.org/WordPress_Cookies

9.

How is my personal data protected?

To adequately protect your personal data, we have implemented technical and organizational measures to prevent unauthorized access. In addition, our employees are bound by confidentiality obligations and are required to uphold data protection standards.

10.

Your Rights

You also have certain rights regarding the processing of your personal data. Further details can be found in the relevant provisions of the General Data Protection Regulation (Articles 15 through 21)

10.1 Right of Access and Rectification
You have the right to request information from us regarding which of your personal data we process. If this information is incorrect or no longer accurate, you may request that we correct the data; if the information is incomplete, you may request that we supplement it. If we have disclosed your data to third parties, we will inform the relevant third parties in accordance with applicable law.

10.2 Right to Erasure
You may request the immediate erasure of your personal data under the following circumstances:

If your personal data is no longer needed for the purposes for which it was collected;
If you have withdrawn your consent and there is no other legal basis for data processing;
If you object to the processing and there are no overriding legitimate grounds for processing the data;
If your data is being processed unlawfully;
If your personal data must be deleted to comply with legal obligations.

Please note that before deleting your data, we must verify that there is no legitimate reason to process your personal data.

10.3 Right to Restriction of Processing (“Right to Blocking”)
You may request that we restrict the processing of your personal data for any of the following reasons:

If you contest the accuracy of the data, until we have had the opportunity to verify its accuracy;
If the data is being processed unlawfully, but you request only that the use of the personal data be restricted rather than its deletion;
If we no longer need the personal data for the purposes of processing, but you still need it to assert, exercise, or defend legal claims;

If you have objected to the processing and it has not yet been determined whether your legitimate interests outweigh ours.

10.4 Right to Object

10.4.1 RIGHT TO OBJECT ON A CASE-BY-CASE BASIS
If the processing is carried out in the public interest or based on a balancing of interests, you have the right to object to the processing for reasons arising from your particular situation. If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or because your personal data is necessary for the establishment, exercise, or defense of legal claims. The objection does not affect the lawfulness of the processing carried out prior to the objection.

10.4.2 OBJECTION TO MARKETING
In cases where your personal data is used for marketing purposes, you may object to this form of processing at any time. We will then no longer process your personal data for these purposes.

The objection may be submitted in any form and should be addressed to:
Sedus Stoll Aktiengesellschaft
Christof-Stoll-Str. 1
79804 Dogern,
Germany
Fax: +49 (7751) 84 – 310
E-Mail: info@sedusstollgroup.com

10.4.3 RIGHT TO DATA PORTABILITY
You have the right to receive, upon request, the personal data you have provided to us for processing in a portable and machine-readable format.

10.4.4 RIGHT TO WITHDRAW CONSENT
If we process your personal data based on consent you have provided to us, you have the right to withdraw that consent at any time without providing a reason. The withdrawal is effective only for the future and does not affect the lawfulness of the data processing prior to your withdrawal.

The withdrawal may be made in any form and should be addressed to:
Sedus Stoll Aktiengesellschaft
Christof-Stoll-Str. 1
79804 Dogern,
Germany
Fax: +49 (7751) 84 – 310
E-Mail: info@sedusstollgroup.com

10.4.5 RIGHT TO FILE A COMPLAINT WITH THE SUPERVISORY AUTHORITY (ART. 77 GDPR)
We always strive to process your inquiries and requests as quickly as possible in order to protect your rights accordingly. However, depending on the volume of inquiries, it may take up to 30 days before we can provide you with further information regarding your request. If it takes longer, we will promptly notify you of the reasons for the delay and discuss the next steps with you.

In some cases, we are not permitted or able to provide you with information. Where legally permissible, we will inform you of the reason for denying the request.

If you are still not satisfied with our responses or believe that we are violating applicable data protection laws, you are free to file a complaint with both our Data Protection Officer and the competent supervisory authority. The supervisory authority responsible for us is:

The State Commissioner for Data Protection and Freedom of Information in Baden-Württemberg
P.O. Box 10 29 32,
70025 Stuttgart
Königstraße 10a,
70173 Stuttgart
Tel.: 0711/61 55 41 – 0
Fax: 0711/61 55 41 – 15
Email: poststelle(a)lfdi.bwl.de

11.

Data Use Within the Sedus/Klöber Group

In order to provide you with the best possible service, we occasionally share data within the Group. In doing so, we ensure that applicable data protection regulations are followed and that your personal data is adequately protected at all times.

For this reason, we have taken appropriate measures to ensure compliance with data protection regulations within the SEDUS/KLÖBER Group:

We have entered into agreements with our individual subsidiaries to ensure that personal data exchanged within the Group remains protected at all times.

In accordance with these agreements and applicable data protection laws, we transfer personal data to our production and sales subsidiaries only for the purposes specified in this Privacy Policy. In doing so, we support our subsidiaries both operationally and in complying with the technical and organizational measures—such as those we implement at the parent company—to ensure the security of your personal data. Where possible, we protect your data through pseudonymization or anonymization measures. If subsidiaries are located outside the EEA, we take appropriate measures to ensure that the personal data processed there is protected to the same extent as within the EEA.

12.

Changes to the Privacy Policy

This Privacy Policy may be updated from time to time. We therefore recommend that you review it whenever you provide personal data to Sedus. The most recent revision date is indicated on this page. If you do not accept these changes, we ask that you cease using Sedus’s websites and/or online services to transmit personal data to Sedus. Your rights as a data subject—in particular, the rights to access, rectification, erasure, or restriction of processing in accordance with applicable data protection laws, specifically Sections 34 and 35 of the German Federal Data Protection Act (BDSG)—remain unaffected, of course.

We respond to all relevant requests regarding access to and, where applicable, correction, completion, or erasure of personal data. If you have any questions or comments regarding this Privacy Policy (e.g., if you wish to view and update your personal data), please contact our external Data Protection Officer:

2B Advice GmbH – the privacy benchmark
Joseph-Schumpeter-Allee 25 | 53227 Bonn

Phone: +49 228 926165 121
Fax: +49 228 926165 109
Email: sedus(a)2b-advice.com