Privacy information

In the following, we inform you about what data is involved, how it is processed and what rights you have in this regard.

Personal data is, according to Art. 4 No. 1 of the General Data Protection Regulation (GDPR), any information relating to an identified or identifiable natural person (hereinafter "data subject or user").

I.) Name and contact details of the data controller

This data protection information applies to data processing by the data controller:

PFIFF Vertriebs GmbH
Wilhelmstrasse 49 - 51
49610 Quakenbrück

(hereinafter referred to as "pfautec")

Tel.: +49 5431 900 600
Fax: +49 5431 900 60 21
E-Mail: info@pfautec.de

The pfautec data protection officer can be contacted at the above address, Attn. Data Protection Officer or can be reached at datenschutz@pfautec.de. You can contact our data protection officer directly at any time if you have questions about data protection law or your data subject rights.

II.) Processing of personal data and purposes of processing

1. When visiting the website

You can access our pages without having to disclose any information about your identity. The browser used on your end device automatically sends merely information to the server of our website (e.g. date and time of access, name and URL of the file accessed, operating system/ browser type and version used, website from which access is made (referrer URL)).

This also includes the IP address of your requesting end device. This is temporarily stored in a so-called log file and automatically deleted after 14 days:

We cannot draw any direct conclusions about your identity from the processing of the IP address in the log file. The processing of the IP address is carried out for technical and administrative purposes of connection establishment and stability, in order to guarantee the security and functionality of our website and to be able to pursue any illegal attacks on it if necessary.

The legal basis for the processing of the IP address is Art. 6 para. 1 p. 1 lit. f GDPR. Our legitimate interest follows from the security interest mentioned and the necessity of a trouble-free provision of our website.

In addition, we use cookies and analysis services when you visit our website. You will find more detailed explanations in sections IV, V and VI of this data protection declaration.

2. When using the contact form for use of the contact form for general enquiries

We offer you the possibility to send us general enquiries via the contact form provided online. Here we collect the following mandatory information:

• Salutation,
• First and last name
• Address
• E-mail address, and
• Your personal message

We need the information about you and your company in order to know from whom the enquiry originates and, if your company is already a customer of ours, in order to assign it to the responsible customer advisor for answering. We need your email address in order to be able to answer your enquiry or for any queries you may have.

This data processing is carried out at your request, in the context of answering the contact request on the basis of our legitimate interest according to Art. 6 para. 1 lit. f GDPR.

The personal data collected by us for the use of the contact form will be deleted as soon as your enquiry has been conclusively answered, unless we are obliged to store it for a longer period of time in accordance with Article 6 para. 1 Sentence 1 lit. c GDPR due to tax and commercial law storage and documentation obligations (from HGB, StGB or AO), or you have consented to the storage beyond this in accordance with Article 6 para. 1 clause 1 lit. a GDPR.

3. Within the framework of our newsletter

If you have expressly consented in accordance with Art. 6 para. 1 clause. 1 lit. a GDPR, we will use your email address to send you our newsletter on a regular basis. To receive the newsletter, it is sufficient to provide an email address.

We may also use your email address without your explicit consent to send you information about similar products and services of our company, provided that you are our existing customer and have not objected to the use of your email address. In the case of existing customer advertising, we base the processing on our legitimate interests pursuant to Art. 6 para. 1 clause 1 lit. f GDPR. The processing of your email address for the purpose of direct marketing is thereby deemed to be a legal interest recognised by the GDPR.

You can unsubscribe at any time by clicking on the "Unsubscribe" link at the end of the newsletter. Alternatively, you are welcome to email your unsubscribe request to kontakt@dqs.de at any time.

We use a specialised service provider, Act-On Software, Inc, 121 SW Morrison St #1600, Portland, OR 97204 (hereinafter "Act On") (hereinafter "Act-On") to send our newsletter. Act-On stores email addresses exclusively on servers in Ireland.

4. Form pages

a.) Within the framework of a request for proposal

You have the possibility to make a request for an offer for the manufacture and/or purchase of a bike.

When you submit a request for quotation to us, we regularly require the following information from you:

• Salutation,
• First and last name
• Address
• Phone
• Email address,
• if applicable, the time at which production is to take place

We need the information about your person and your company,

• to know who the request is from
• and to assign them to the responsible specialist.
• We need your email address and telephone number in order to be able to answer your enquiry and for any queries you may have

The data processing is carried out on your request and is necessary according to Art. 6 para. 1 clause 1 lit. b GDPR for the mentioned purposes for the fulfilment of pre-contractual measures.

The personal data collected by us within the scope of the offer enquiry will be stored until the expiry of the legal warranty obligation and then deleted, unless we are obliged to store the data for a longer period of time in accordance with Article 6 para. 1 clause 1 lit. c GDPR due to tax and commercial law retention and documentation obligations (from HGB, StGB or AO), or you have consented to the storage of the data beyond this in accordance with Article 6 para. 1 clause 1 lit. a GDPR.

5. Dealer registration

Under the domain www.pfautec.de/haendler-werden, pfautec, as joint controller pursuant to Art. 26 GDPR, enables you to register for a password-protected area in which relevant documents can be provided and accessed by you.

If you initiate the activation of your dealer area via your account manager, he will create a user account based on the available contact information (name, email address) and the file number of your organisation. Your name is required to identify who the request is coming from. Your email address is required to send you an email with the registration confirmation link.

In order to complete the registration, further mandatory information about your company must be provided. If you have voluntarily entered a telephone number in your contact details, this will be added to your user account. To complete the registration it is necessary to choose a personal password. In conjunction with your email address, this allows you access to your user account.

Provided you have been given the appropriate permissions, you will be able to independently add additional user accounts for your organisation. To add a user account, the following information is required:

• Salutation
• First and last name
• Company
• Position
• Business email address
• Business phone number

The newly created user will receive an email with an activation link with which the user account can be activated as described above. The link has a validity of 24 hours. If the user account is not activated and no new activation link is sent, the user account will be automatically deleted after 48 hours. Write-authorised user accounts can independently delete other user accounts within the organisation at any time.

The processing of data is carried out by your request and is necessary according to Article 6, para. 1, subpara. 1, point (b) of the GDPR for the above-mentioned purpose, the execution of a contract with you, as well as pre-contractual measures, based on the interests of pfautec according to Article 6, para. 1, subpara. 1, point (f) of the GDPR, to jointly provide additional customer services to the customer.

If you would like to completely deactivate your organisation in the pfautec dealer area, you can request the deletion of your data at any time by sending an email to your account manager. Personal data processed in the dealer area will be automatically deleted after all contractual matters have been concluded, unless you have consented to additional storage (in particular company details and user accounts) in accordance with Article 6, para. 1, subpara. 1 et seq. of the GDPR, or there are legal requirements that prevent deletion.

You may enforce the duty to inform against pfautec. The overall internal responsibility lies with pfautec.

III.) Information disclosure

Your personal data will not be transferred for purposes other than those listed below.

1. For the execution of the contract

Insofar as this is legally permissible and necessary for the processing of contractual relationships with you in accordance with Art. 6 para. 1 clause 1 lit. b GDPR, your personal data will be passed on to third parties. The data disclosed may be used by the third party exclusively for the purposes stated.

2. For further purposes

In addition, we will only share your personal information with third parties if:

• You have given your explicit consent in accordance with Art. 6 para. 1 clause. 1 lit. a GDPR
• in the event that there is a legal obligation for the disclosure pursuant to Art. 6 para. 1 clause 1 lit. c GDPR.

3. Transmission to third countries

A transfer of personal data to third countries only takes place if the prerequisite of Art. 44 et seq. of the GDPR are given.

A third country is defined as a country outside the European Economic Area (EEA) where the GDPR is not directly applicable. A third country is deemed to be insecure if the EU Commission has not issued an adequacy decision for that country pursuant to Art. 45 para. 1 GDPR confirming that adequate protection for personal data states exists in that country.

With the ECJ ruling of 16 July 2020 (C-311/18), the (partial) adequacy decision for the US, the so-called Privacy Shield was declared null and void. The USA is thus a so-called unsafe third country. This means that the US does not provide a level of data protection comparable to that in the EU. The following risks exist when personal data is transferred to the USA. There is a risk that U.S. authorities may gain access to the personal data on the basis of the PRISM and UPSTREAM surveillance programs based on Section 702 of FISA (Foreign Intelligence Surveillance Act), as well as on the basis of Executive Order 12333 or Presidential Police Directive 28. EU citizens have no effective means of legal protection against these accesses in the USA or the EU.

We inform you in this privacy information when and how we transfer personal data to the USA or other unsecure third countries. We transmit your personal data only if

• sufficient guarantees are provided by the recipient in accordance with Art. 46 GDPR for the protection of the personal data,
• You have expressly consented to the transfer, after which we have informed you of the risks, in accordance with Art. 49 para. 1 lit. a) GDPR,
• the transfer is necessary for the performance of contractual obligations between you and us

or another exception from Article 49 of the GDPR applies.

Guarantees according to Art. 46 GDPR can be so-called standard contractual clauses. In these standard contractual clauses, the recipient guarantees to sufficiently protect the data and thus to ensure a level of protection comparable to the GDPR. We have previously assured ourselves that the recipient can also fulfil the agreed guarantees.

IV.) Cookies and pixel tags

We use cookies on our website. Cookies are small files that are automatically created by your browser and stored on your end device (laptop, tablet, smartphone or similar) when you visit our site. Cookies do not cause any damage to your end device and do not contain any viruses, Trojans or other malware.

Information is stored in the cookie that is related to the specific end device used. This does not mean, however, that we thereby gain direct knowledge of your identity.

We use pixel tags (also called tracking pixels or beacon trackers) as part of our online offering. Pixels are small graphics that are embedded in the HTML code of our pages. The pixel tag itself does not store or change any information on your end device, so pixels do not cause any damage to your end device and do not contain any viruses, Trojans or other malware.

The pixels send your IP address, the referrer URL of the website visited, the time the pixel was viewed, the browser used, and previously set cookie information to a web server. This makes it possible to carry out coverage measurements and other statistical evaluations, which serve to optimise our offer.

The use of cookies serves on the one hand to make the use of our offer more pleasant for you. We use so-called session cookies to recognise that you have already visited individual pages of our website.

In addition, we also use temporary cookies to optimise user-friendliness, which are stored on your end device for a certain fixed period of time. If you visit our site again to use our services, it automatically recognises that you have already visited us and which entries and settings (e.g. language settings, tracking and targeting settings, etc.) you have made so that you do not have to enter them again.

The data processed by cookies is necessary for the aforementioned purposes to protect our legitimate interests pursuant to Art. 6 para. 1 clause 1 lit. f GDPR.

We also use cookies and pixel tags – provided that you have explicitly consented to this when calling up our website, Art. 6 para. 1 clause. 1 lit. a GDPR – in order to statistically record the use of our website and for the purpose of optimising our offer (see Section VI.). These cookies are automatically deleted after a defined period of time.

All cookies at a glance

Necessary cookies

We use necessary cookies on our website to make the use of our website more pleasant and to optimise its use. This data will not be disclosed to third parties nor will third parties have access to this data. The cookies are stored temporarily. The data will be deleted automatically. For more detailed information, please refer to the description of the services.

Google Tag Manager

This is a tag management system for managing JavaScript and HTML tags used to implement tracking and analytics tools.

Processing Company:
Google LLC., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA

Data processing purposes:
Management of website tags of the Google LLC.

Data collected:
No personal data is processed. The Tag Manager is a cookie-free domain and does not collect any personal data. However, Google Tag Manager may trigger other tags that may collect and process personal data. This refers here to the use of Google Analytics. You can find more information on data processing by Google Analytics at Google Analytics.

Retention period:
There is no storage by the Google Tag Manager.

Data Recipient:
Google LLC, in the USA.

Typo3

This is a content management service that allows us to create, edit and display digital content on our website.

Processing Company:
TYPO3 Association, Sihlbruggstrasse 105 CH 6340 Baar, Switzerland

Data processing purposes:
Website Security, optimisation, analytics

Technologies Used:
Cookies

Data collected:
This list contains all (personal) data collected by or through the use of this service. Browser information, device operating system, referrer URL, host name of the accessing computer, date and time of the visit, IP address

Data Recipient:
The data will not be merged with other data sources.

Static Cookies

We use cookies on our website to analyse website usage and to measure and improve website performance. For this purpose we use the services mentioned in this category. The data is transmitted to the service providers and stored. The data will be deleted automatically. The storage period and the recipients of the respective data transfers can be found in the descriptions of the individual services. You can object to the use of the services at any time.

Google Analytics

This is a web analytics service. Pseudonymised user profiles are created, which we use to analyse our website and to further optimise the use of the website. More information on this can also be found in section VI).

Processing Company:
Google LLC., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA

Data processing purposes
Creation of pseudonymous user profiles, for analysis and optimisation purposes on the website.

Technologies used
Cookies, Pixel Tags.

Data collected:
This list contains all (personal) data collected by or through the use of this service.

• IP address (anonymised)
• Date and time of the visit
• Usage data
• Click path
• App updates
• Browser information
• Devices information
• JavaScript support
• Visited pages
• Referrer URL
• Downloads
• Flash version
• Location information
• Buying activity
• Widget interactions

Retention period:
The stored data is automatically deleted after 26 months.

Data recipient
Google LLC., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Marketing cookies

We use the services in this category to serve web ads that are relevant to your interests. We use the services to measure the effectiveness of marketing efforts in order to improve and optimise our operations. The services allow us to track user behaviour on our and other websites or services and to recognise visitors to our website who have previously visited other of our offerings. The data is transmitted to the service providers and stored. The data will be deleted automatically. The storage period and the recipients of the respective data transfers can be found in the descriptions of the individual services. You can object to the use of the services at any time.

Facebook Pixel

This is a tracking technology offered by Facebook and used by other Facebook services, such as Facebook Custom Audiences, to enable re-targeting of users between Facebook services and our own website. For more information, see Section VI.).

Processing company
Facebook Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin, D02, Irland

Data processing purposes
Advertising, marketing, retargeting, tracking ID, analytics, technologies used, cookies,

Data collected
This list contains all (personal) data collected by or through the use of this service. Facebook user ID, browser information, usage data, device information, non-sensitive custom data, referrer URL, pixel ID, location information, pixel specific data, user behaviour, ads viewed, interactions with ads, services and products, marketing information, viewed content, IP address

Retention period
The data will be deleted as soon as they are no longer needed for the processing purposes.

Data recipient
Facebook Inc. 1601 Willow Road,Menlo Park, California 94025, USA.

V.) Tracking and Targeting

The analysis, tracking and targeting measures listed below and used by us are only carried out if you have given us your consent to do so, in accordance with Art. 6 para. 1 clause 1 lit. a GDPR.

Google Analytics

We use Google Analytics on our websites, a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter: "Google"). In this context, pseudonymous user profiles are created and cookies are used.

We have concluded an order processing agreement with Google for the use of Google Analytics. Through this contract, Google assures that they will process the data in accordance with our instructions and ensure the protection of the data subject's rights.

The use of Google Analytics serves the analysis and optimisation of our online offer as well as the economic operation of this website. Google therefore processes the information on our behalf in order to evaluate the use of the website, to compile reports on website activities and to provide us with further services associated with the use of the website and the Internet for the purposes of market research and demand-oriented design of these Internet pages.

We use Google Analytics only with IP anonymisation enabled. This means that the IP address of the user is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the USA and truncated there.

We have activated the advertising functions of Google Analytics. This is used to generate reports on target groups, demographic characteristics such as age, gender and interests of site visitors, and our marketing campaigns. The data for this comes from campaigns carried out via Google services, from interest-based advertising from Google, the Google Display Network and from visitor data from third-party providers. Your identity is not immediately revealed to us as a result. With the help of these reports, we can better evaluate user behaviour in connection with our online offers and optimise the addressing of target groups.

If you do not want your user behaviour to be taken into account in these reports, you can deactivate this, for example, via the ad settings in your own Google account or prevent the collection of data by Google Analytics as described below. You can also limit collection by not logging into your own Google account when you visit our sites.

We do not use the Universal Analytics with User ID offered by Google.

If necessary, the collected data will be transferred to third parties if this is required by law or if third parties process the data on our behalf.

The user data collected via cookies is automatically deleted after 26 months.

Notice: The information generated by the cookie about the use of our website (e.g. IP address of the accessing computer, time of access, referrer URL and information on the browser and operating system used) will be transmitted to and processed by Google on servers in the United States. The USA is a so-called unsafe third country (see also section III.3). This means that for the USA there is no adequacy decision from the European Commission. Your data is therefore not subject to a level of data protection in the USA comparable to that in the EU. Google does not currently offer any guarantees under Article 46 of the GDPR that could compensate for this data protection deficit. Your data is therefore exposed to the risk of state access as described in section III. 3. If you consent to processing by Google, you therefore consent at the same time to your data being transferred to the USA in accordance with Art. 49 para. 1 lit a GDPR.

Under the cookie settings you can revoke your consent at any time with effect for the future.

Further information on data protection in connection with Google Analytics can be found, for example, in the Google Analytics Help. For information on Google's use of data, please see their privacy policy.

Facebook Pixel

We integrate the Facebook Pixel of the social network Facebook, Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA, or Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (hereinafter referred to as "Facebook") into our pages, through which personal data about the use of these web pages are processed. This includes your IP address, the browser used and the source and target pages.

The Facebook Pixel allows us to see how you respond to our ads on Facebook, such as when you click on a link in the ad that leads to our website. This gives us a better overview of how successful our campaigns are on Facebook and allows us to optimise them on an ongoing basis. With the help of the pixel, it is also possible to recognise you as a visitor to our website. Based on this information, it is possible to display the advertisements played by us on Facebook only to those Facebook users who are also likely to be interested in our offers, either because they have visited our website before or because they have certain characteristics (e.g. interests in certain topics or products determined on the basis of the websites visited).

The pixel is loaded when you visit our website or respond to an ad we have placed on Facebook, for example by clicking on a link to our site that it contains. In this context, a pixel ID is created and stored in a cookie, so that we receive evaluations of your user behaviour. The pixel does not serve us to identify you personally.

We have entered into a processing-on-behalf agreement. In it, Facebook assures to process the data in accordance with the GDPR and to protect the data subject's rights.

The data is usually sent to servers in the USA. Facebook transfers personal data to the USA or other countries outside the EEA that may not offer data protection standards comparable to those in the EU. Facebook has signed standard contractual clauses. In this way, Facebook ensures guarantees that provide a level of protection comparable to that in the EU (see also Section III. 3).

You can revoke your consent at any time with effect for the future.

VI.) Integrated third party content

We integrate third-party content, e.g. videos, into our website on the basis of your consent pursuant to Art. 6 para. 1 clause 1 lit. a GDPR and on the basis of our legitimate interests pursuant to Art. 6 para. 1 clause 1 it. f GDPR in order to expand the range of functions of our pages for our users with services offered by other manufacturers. The underlying purpose is to be regarded as a legitimate interest within the meaning of the GDPR.

Embedded Youtube videos

We use components (videos) of the company YouTube, LLC. 901 Cherry Ave, 94066 San Bruno, CA, USA (hereinafter: "YouTube"), a company of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter: "Google"), on our pages.

Here, we use the "extended data protection mode" option provided by YouTube.

If you call up a page that has an embedded video, a connection to the YouTube servers is established, if you consent in accordance with Art. 6 para. 1 clause 1 lit. a GDPR, and the content is displayed on the website by a message on your browser. If you have blocked Javascript, the consent request may not be displayed. In this case, we integrate YouTube videos on the basis of Art. 6 para. 1 clause. 1 lit. f GDPR, whereby our interest lies in the smooth integration of the videos and the resulting appealing design of our website.

According to the information provided by YouTube, in "extended data protection mode" no cookies are set to analyse user behaviour, but data – in particular which of our websites you have visited as well as device-specific information including the IP address – is only transmitted to the YouTube server in the USA when you watch the video. By clicking on the video, you consent to this transmission.

If you are logged in to YouTube at the same time, this information is assigned to your member account with YouTube. You can prevent this by logging out of your member account before visiting our website.

Data is usually transmitted to servers in the USA. The USA is a so-called unsafe third country (see also section III.3). This means that the USA does not guarantee a level of data protection comparable to that in the EU. There are also no safeguards provided under Article 46 GDPR that could compensate for this data protection deficit. Your data is therefore exposed to the risk of state access as described in section III. 3. If you click on an embedded YouTube video, you agree at the same time that your data will be transmitted to the USA according to Art. 49 para. 1 lit. a GDPR.

For more information on data protection in connection with YouTube, please refer to Google's privacy policy.

Integrated Google Maps

We use on our website for the display of an interactive map based on your consent pursuant to Art. 6 para. 1 lit. a GDPR the offer of Google Maps of Google LLC., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter: "Google"). As a result of the implementation, Google collects device-related information, log data including IP address, and location-based information. No data is transferred to Google simply by calling up our website. Only by clicking on the map do you activate the interactive map of Google Maps and thus agree to the transmission of data to Google. The personal data collected by Google is transferred to a Google server in the USA and stored there. The USA is a so-called unsafe third country (see also section III.3). This means that the USA does not guarantee a level of data protection comparable to that in the EU. There are also no safeguards provided under Article 46 GDPR that could compensate for this data protection deficit. Your data is therefore exposed to the risk of state access as described in section III. 3.

If you consent to processing by Google, you therefore consent at the same time to your data being transferred to the USA in accordance with Art. 49 para. 1 lit a GDPR.

Google uses the personal data to evaluate the use of the website, to compile reports on website activity and to provide other services associated with website and internet use for the purposes of market research and demand-oriented design of these Internet pages. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf. You can prevent any data transfer from the Google Maps application to Google's servers by disabling JavaScript in your browser. In this case, however, you cannot use the map display. For more information on data protection in connection with Google Maps, please refer to Google's privacy policy.

VII.) Data subject rights

You have the right:

• in accordance with Art. 7 para. 3 GDPR to revoke your previously given consent to us at any time. This has the consequence that we may no longer continue the data processing based on this consent in the future;
• to request information about your personal data processed by us in accordance with Art. 15 GDPR. In particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right of complaint, the origin of your data if it has not been collected by us, as well as the existence of automated decision-making including profiling and, if applicable, meaningful information about its details;
• in accordance with Art. 16 GDPR to demand the immediate correction of incorrect or completion of your personal data stored by us;
• in accordance with Art. 17 GDPR to request the deletion of your personal data stored by us, unless the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the assertion, exercise or defence of legal claims;
• to demand the restriction of the processing of your personal data in accordance with Art. 18 GDPR, insofar as the correctness of the data is disputed by you, the processing is unlawful, but you object to its deletion and we no longer require the data, but you need it for the assertion, exercise or defence of legal claims or you have objected to the processing in accordance with Art. 21 GDPR;
• in accordance with Art. 20 GDPR, to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request that it be transferred to another controller; and
• complain to a supervisory authority in accordance with Art. 77 GDPR. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our company headquarters.

Information about your right to object according to Art. 21 GDPR

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you carried out on the basis of Article 6 para. 1 lit e GDPR (data processing in the public interest) and Article 6 para. 1 lit f GDPR (data processing on the basis of a balance of interests); this also applies to Article 4 no. 4 GDPR profiling based on this provision.

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

If your objection is directed against the processing of data for the purpose of direct marketing, we will immediately stop the processing. In this case, it is not necessary to specify a particular situation. This also applies to profiling, insofar as it is connected with such direct advertising.

If you wish to exercise your right of objection, simply send an e-mail to datenschutz@pfautec.de.

VIII.) Data security

All data transmitted by you personally will be encrypted using the generally accepted and secure standard TLS (Transport Layer Security). TLS is a secure and proven standard that is also used, for example, in online banking. Among other things, you can recognize a secure TLS connection by the appended s to the http (i.e. ..) in the address bar of your browser or by the lock symbol in the lower area of your browser.

We also use appropriate technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or against unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.

XI.) Actuality and change of this privacy policy

This privacy policy is currently valid as of February 2021.

Due to the further development of our website and offers on it or due to changed legal or official requirements, it may become necessary to change this data protection declaration. The current data protection declaration can be viewed at any time on the website at www.pfautec.de/de/datenschutz and printed out by you.