We take data protection seriously

The protection of your privacy when we process your personal data is an important concern for us. When you visit our website, our web servers automatically store the IP of your Internet service provider, the website from which you visit us, the pages which you visit when you are on our website, as well as the date and duration of the visit. This information is essential for the technical transmission of the web pages and for secure server operation. No personalised evaluation of this data is carried out.

If you send us data via the contact form, this data is stored on our servers as part of the data back-up process. Your data will be used by us only to process your request. Your data will also be dealt with in the strictest of confidence. It will not be disclosed to third parties.

Controller:

Impact Innovations GmbH

Bürgermeister-Steinberger-Ring 1
84431 Rattenkirchen

Phone: +49 8636 695190-0

E-Mail: [email protected]

 

General data processing information

Affected data

Personal data is only collected if you provide it to us of your own accord. In addition, no personal data is collected. Any processing of your personal data beyond the scope of the statutory permissions will only take place on the basis of your express consent.

  • Purpose of processing: execution of the contract.
  • Categories of recipients: Public bodies in the case of overriding legal provisions. External service providers or other contractors. Other external bodies as far as the data subject has given his consent or a transmission is permitted due to an overriding interest.
  • Third country transfers: As part of the execution of the contract, processors outside the European Union can also be used.
  • Duration of data storage: The duration of data storage is based on the statutory retention requirements and is usually 10 years.

Personal data

Personal data is data about your person. This includes your name, address and email address. You do not have to disclose any personal data in order to be able to visit our Internet site. In some cases, we need your name and address as well as further information in order to be able to offer you the requested service.

The same applies if we supply you with information material on request or if we answer your enquiries. In these cases, we will always point this out to you. Furthermore, we store only the data that you have sent to us either automatically or voluntarily.

If you use one of our services, we generally only collect the data that is necessary for us to be able to provide you with our service. We may ask you for further information, although this is only on a voluntary basis. Whenever we process personal data, we do so in order to be able to provide you with our service or to pursue our commercial objectives.

Use of a newsletter

When you register for our newsletter, you provide us with your email address and, optionally, other data. We use this information exclusively to send you the newsletter. The data you entered when registering for the newsletter will be stored by us until you unsubscribe from our newsletter. You can unsubscribe at any time using the link provided in the newsletter or by sending us a corresponding message. By unsubscribing, you object to the use of your email address.

We also use your e-mail address, which we receive in connection with the sale of goods or services, exclusively for direct advertising in the form of our newsletter for our own goods or services similar to those you have ordered, provided you have not objected to this use. You can object to the use of your email address at any time without incurring any costs other than the transmission costs according to the basic tariffs. Your objection (and thus the cancellation of our newsletter) can be exercised by sending a message to our e-mail address (see legal notice).

Usage data

When you visit our website, you transmit data to our web server via your internet browser (for technical reasons). The following data is recorded during an ongoing connection for communication between your internet browser and our web server:

  • Date and time of the request
  • Name of the requested file
  • Page from which the file was requested
  • Access status (file transferred, file not found, etc.)
  • Used web browser and operating system used
  • Full IP address of the requesting computer
  • Amount of data transferred.

For reasons of technical security, in particular to defend against attempted attacks on our web server, we store this data for a short time. It is not possible for us to draw conclusions about individual persons on the basis of this data. After seven days at the latest, the data is anonymized by shortening the IP address at domain level, so that it is no longer possible to establish a reference to the individual user. The data is also processed anonymously for statistical purposes; a comparison with other databases or a transfer to third parties, even in excerpts, does not take place.

Automatically stored data

Server log files 

The website provider automatically collects and stores information in so-called "server log files", which your browser automatically transmits to us. These are:

  • Date and time of the request
  • Name of the requested file
  • Page from which the file was requested
  • Access status (file transferred, file not found, etc.)
  • Web browser and operating system used
  • Complete IP address of the requesting computer
  • Transferred data volume

This data is not combined with other data sources. Processing is carried out in accordance with Art. 6 Para. 1 (f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website.

This data is temporarily stored by us for reasons of technical security, in particular in order to prevent attempts to attack our web server. It is not possible for us to draw conclusions about specific individuals on the basis of this data. After seven days at the latest, the data is made anonymous by shortening the IP address at the domain level, so that it is no longer possible to establish a reference to the individual user. The data is also processed in anonymous form for statistical purposes; it is not compared with other data stocks or passed on to third parties, even in the form of extracts. Only within the context of our server statistics, which we publish every two years in our activity report, is the number of page views made known.

 

Cookies

When you visit our website, we may store information on your computer in the form of cookies. Many cookies contain a so-called cookie ID. A cookie ID is a unique identifier for the cookie. It consists of a string of characters which can be used to assign Internet pages and servers to the specific Internet browser in which the cookie was stored. This enables the Internet pages and servers visited to distinguish the individual browser of the person concerned from other Internet browsers that contain other cookies. A specific Internet browser can be recognized and identified by means of the unique cookie ID.

By using session cookies, the person responsible can provide users of this website with a user-friendly service that would not be possible without the setting of cookies.

By means of a cookie, the information and offers on our website can be optimised in the interest of the user. As already mentioned, cookies enable us to recognise the users of our website. The purpose of this recognition is to make it easier for users to use our website. For example, the user of a website that uses cookies does not have to enter his or her access data each time he or she visits the website, because this is done by the website and the cookie stored on the user's computer system. Another example is the cookie of a shopping cart in the online shop. The online shop uses a cookie to remember the articles that a customer has placed in the virtual shopping cart.

 

Google Analytics with Anonymisation Function

On our website, we use Google Analytics, a web analysis service of Google LLC., 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA, hereinafter "Google“. Google-Analytics uses so-called "cookies“, text files that are saved on your computer allowing for an analysis of your visit to the website.

The information provided by these cookies, such as the time, place and frequency of your visit including your IP address, will be sent to Google in the USA and saved at this location.

On our website, we use Google Analytics with the suffix "_gat._anonymizeIp". In this case, Google will already shorten and thus anonymise your IP address within the member states of the European Union or other signatories of the Agreement on the Economic Area.

Google uses this information to evaluate your visit to our website, to create reports for us about the website activities and to render additional services associated with the use of the website and Internet. Where appropriate, Google will also disclose this information to third parties if legally required or if a third party processes these data on behalf of Google.

Google will never link your IP address with other data from Google on its own account. You can prevent the installation of cookies with the corresponding setting of your browser software; however, we would like to point out that in this case you won't be able to make full use of all the functions on our website.

In addition, Google provides a deactivation add-on for the most common browsers which will give you more control over which data Google will collect from the websites you visit. The add-on tells JavaScript (ga.js) from Google Analytics that no information on the website visit may be sent to Google Analytics. However, the deactivation add-on from Google Analytics for browsers does not prevent information from being sent to us or other web analysis services possibly used by us. Click on the following link to get more information on the installation of the browser add-on: https://tools.google.com/dlpage/gaoptout?hl=en

If you have agreed to have your web and app browser history linked to your Google account and that information from your Google account can be used to personalise your data, Google will use your data together with Google Analytics data to create target group lists for remarketing purposes across devices. For this purpose, Google Analytics will first collect your Google-authenticated ID on our website which is then linked to your Google account (thus personal data). Google Analytics will then temporarily link your ID to your Google Analytics data in order to optimise our target groups.

If you don't agree with this, you can stop this by making the corresponding settings in the "My account" area of your Google account.

 

Google Web Fonts

Google web fonts (http://www.google.com/webfonts/) are used to improve the visual presentation of various information on our website. The web fonts are transferred to the cache of the browser when the page is called up, so that they can be used for the display. If the browser does not support Google web fonts or prevents access, the text is displayed in a standard font. When the page is called up, no cookies are stored for the website visitor. Data submitted in connection with the page view is sent to resource-specific domains such as fonts.googleapis.com or fonts.gstatic.com. They are not associated with data that may be collected or used in connection with the parallel use of authenticated Google services such as Gmail.

You can set your browser so that the fonts are not loaded from the Google servers (e.g. by installing add-ons like NoScript or Ghostery for Firefox). If your browser does not support the Google fonts or if you prevent access to the Google servers, the text will be displayed in the default font of the system. For information about the Google Web Fonts privacy policy, please visit: https://developers.google.com/fonts/faq#Privacy. Information about the Google Privacy Policy and Google Terms of Use can be obtained directly from Google: http://www.google.com/intl/en-EN/privacy/

 

Google reCaptcha

We use the Google reCaptcha service to determine whether a person or a computer makes a certain entry in our contact or newsletter form. Google uses the following data to check whether you are a person or a computer: IP address of the device you are using, the website you visit with us and on which the captcha is integrated, the date and duration of the visit, the identification data the type of browser and operating system used, Google account if you are logged in to Google, mouse movements on the reCaptcha areas and tasks in which you have to identify images. The legal basis for the data processing described is Article 6 (1) (f) of the General Data Protection Regulation. There is a legitimate interest on our part in this data processing, to ensure the security of our website and to protect us from automated input (attacks).

YouTube in extended data protection mode

We use YouTube to incorporate videos. The videos have been embedded in the extended Data Privacy Mode . Like most other websites, YouTube also uses cookies in order to collect information about the visitors to their website. YouTube uses them to create video statistics, prevent fraud and improve user-friendliness, for example. This will also lead to a contact with the Google DoubleClick network. When you start the video, this could trigger further data processing. We have no influence in this regard. For more information on data protection at YouTube, you will find the data privacy statement at: http://www.youtube.com/t/privacy_at_youtube

 

Information on further data processing methods

Specific information on the application process

  • Affected data: application details
  • Purpose of processing: Implementation of the application process
  • Categories of recipients: Public bodies in the case of overriding legal provisions. External service providers or other contractors. Other external bodies as far as the data subject has given his consent or a transmission is permitted due to an overriding interest.
  • Third country transfers: As part of the execution of the contract, processors outside the European Union can also be used.
  • Duration of data storage: Application data will usually be deleted within four months after notification of the decision, unless consent has been given to longer data storage in the context of inclusion in the applicant pool.

Specific information on the processing of customer data / prospect data

  • Affected data: data communicated for the execution of the contract; Any additional data for processing on the basis of your express consent.
  • Purpose of processing: contract execution, including offers, orders, sales and invoicing, quality assurance.
  • Categories of recipients: Public bodies in the case of overriding legal provisions. External service providers or other contractors, e.g. for data processing and hosting, for shipping, transport and logistics, service providers for printing and sending information and call centers. Other external bodies as far as the data subject has given his consent or a transmission is permitted due to an overriding interest.
  • Third country transfers: As part of the execution of the contract, processors outside the European Union can also be used.
  • Duration of data storage: The duration of data storage is based on the statutory retention requirements and is usually 10 years.

Specific information on the processing of employee data

  • Affected data: data communicated for the execution of the contract; Any additional data for processing on the basis of your express consent.
  • Purpose of processing: Execution of the contract in the context of the employment relationship
  • Categories of recipients: Public bodies if there are priority legal provisions, including tax office, social security agency, professional association. External service providers or other contractors, e.g. for data processing and hosting, for payroll accounting, for travel expense accounting, for insurance services, for vehicle use. Other external bodies as far as the data subject has given his consent or a transmission is permitted due to an overriding interest.
  • Third country transfers: As part of the execution of the contract, processors outside the European Union can also be used.
  • Duration of data storage: The duration of data storage is based on the statutory retention requirements and is usually 10 years.

Specific information on the processing of supplier data

  • Affected data: data communicated for the execution of the contract; Any additional data for processing on the basis of your express consent.
  • Purpose of processing: contract execution, including inquiries, purchasing, quality assurance
  • Categories of recipients: Public bodies in the case of overriding legal provisions. External service providers or other contractors, e.g. for data processing and hosting, accounting, payment processing. Other external bodies as far as the data subject has given his consent or a transmission is permitted due to an overriding interest.
  • Third country transfers: As part of the execution of the contract, processors outside the European Union can also be used.
  • Duration of data storage: The duration of data storage is based on the statutory retention requirements and is usually 10 years.

Security

We have taken technical and administrative security precautions to protect your personal data against loss, destruction, manipulation and unauthorised access. All of our employees and the service providers working for us are obliged to comply with the valid data protection laws. Whenever we collect and process personal data, it is encrypted before being transmitted. This means that your data cannot be misused by third parties. Our security precautions are subject to a constant improvement process and our privacy policies are constantly being revised. Please make sure that you have the latest version.

 

Affected Rights

You have a right to information, rectification, erasure or restriction of the processing of your stored data, a right of objection to the processing as well as a right to data portability and a right to complain in accordance with the requirements of data protection law.

 

Right to information:

You can request information from us concerning whether and to what extent we process your data.

 

Right to rectification:

If we process your data that is incomplete or incorrect, you can request that we rectify or complete such data at any time.

 

Right to erasure:

You can request that we erase your data if we process it unlawfully or if the processing interferes disproportionately with your legitimate protection interests. Please note that there may be reasons that prevent immediate erasure, e.g. in the case of legally regulated retention obligations. Irrespective of the exercising of your right to erasure, we will erase your data immediately and completely, unless there is a contractual or legal obligation to retain it.

 

Right to restriction of the processing:

You may request that we restrict the processing of your data if 

  • you dispute the accuracy of the data, namely for a period of time that enables us to verify the accuracy of the data.
  • the processing of the data is unlawful, but you refuse to have it erased and instead request a restriction on the use of the data,
  • we no longer need the data for the intended purpose, but you still need this data to assert or defend legal claims, or
  • you have lodged an objection to the processing of the data. Right to data portability: You may request us to provide you with the data you have made available to us in a structured, current and machine-readable format and to allow you to forward this data to another responsible party without our interference, provided that
  • we process this data on the basis of an agreement which you have submitted and which is revocable or in order to fulfil a contract between us, and
  • this processing is carried out using automated methods. If it is technically feasible, you can ask us to transfer your data directly to another responsible party.

 

Right of objection:

If we process your data on the basis of a legitimate interest, you can object to this data processing at any time; this would also apply to any profiling which is based on these provisions. We will then no longer process your data unless we can prove compelling reasons worthy of protection for the processing that outweigh your interests, rights and freedoms or the processing serves to assert, exercise or defend legal claims. You can object to the processing of your data for the purposes of direct advertising at any time without stating any reasons.

 

Right of appeal:

If you are of the opinion that we are infringing German or European data protection law when processing your data, please contact us so that we can clarify any questions. Of course you also have the right to contact the supervisory authority which is responsible for you, i.e. the respective State Office for Data Protection Supervision. If you wish to assert any of the above rights against us, please contact our Data Protection Officer. In cases of doubt we may request additional information to confirm your identity.

 

Changes to this privacy policy

We reserve the right to change our privacy policies if this becomes necessary due to new technologies. Please make sure that you have the latest version. If fundamental changes are carried out to this privacy policy, we announce these on our website.

 

Contact details for data protection officer:

IITR Datenschutz GmbH
Dr. Sebastian Kraska
Marienplatz 2
80331 München

Germany

E-Mail: [email protected]
Phone: +49 89-18917360