PRIVACY POLICY
I. NAME AND ADDRESS OF THE CONTROLLER
The controller within the meaning of the General Data Protection Regulation and other national data protection laws of the EU Member States as well as other applicable data protection provisions is:
ALEX & GROSS GmbH
O3 2-8
68161 Mannheim
Germany
Phone: +49 (0) 621 3999 2000
Fax: +49 (0) 621 9110 9999
Email: info@alex-gross.com
Website: www.alex-gross.com
II. DATA PROTECTION OFFICER
If you have any questions regarding data protection at ALEX & GROSS GmbH, our Data Protection Officer will be happy to assist you. If you would like your data to be removed from our records, please contact:
ALEX & GROSS GmbH
Dr. Helge Bertram
III. GENERAL INFORMATION ON DATA PROCESSING
The protection of your personal data is important to us. That is why we conduct our web-based activities in accordance with applicable data protection and data security laws. ALEX & GROSS GmbH takes appropriate precautions to ensure the security of your personal data. Your data is handled carefully and protected against loss, destruction, alteration, manipulation, unauthorized access, or unauthorized disclosure. In the following, we explain which information we may collect and how we handle it.
1. SCOPE OF PROCESSING PERSONAL DATA
We collect and use personal data of our users only to the extent necessary to provide a functional website and our content and services. As a rule, the collection and use of personal data takes place only with the user’s consent. An exception applies in cases where obtaining prior consent is not possible for factual reasons and the processing of the data is permitted by legal regulations.
2. LEGAL BASIS FOR PROCESSING PERSONAL DATA
Where we obtain the data subject’s consent for the processing of personal data, Article 6(1)(a) of the EU General Data Protection Regulation (GDPR) serves as the legal basis.
When processing personal data is necessary for the performance of a contract to which the data subject is a party, Article 6(1)(b) GDPR serves as the legal basis. This also applies to processing operations required to carry out pre-contractual measures.
If the processing of personal data is necessary to fulfill a legal obligation to which our company is subject, Article 6(1)(c) GDPR serves as the legal basis.
If the processing is necessary to protect the vital interests of the data subject or another natural person, Article 6(1)(d) GDPR serves as the legal basis.
If the processing is necessary to safeguard a legitimate interest of our company or a third party, and if the interests, fundamental rights, and freedoms of the data subject do not override the former interest, Article 6(1)(f) GDPR serves as the legal basis for the processing.
3. DATA DELETION AND STORAGE DURATION
The personal data of the data subject will be deleted or blocked as soon as the purpose for storing it no longer applies. Storage may continue beyond that time if provided for by European or national legislation in EU regulations, laws, or other legal provisions to which the controller is subject. Data will also be deleted or blocked when a storage period prescribed by these regulations expires, unless there is a necessity for continued storage of the data for the conclusion or fulfillment of a contract.
IV. PROVISION OF THE WEBSITE AND CREATION OF LOG FILES
1. DESCRIPTION AND SCOPE OF DATA PROCESSING
Each time our website is accessed, our system automatically collects data and information from the computer system of the accessing device. This data is also stored in our system’s log files. The following information is collected without any action on your part and stored until it is automatically deleted:
- Browser type and version
- Operating system used
- Internet service provider of the user
- IP address of the user
- Date and time of access
- Websites from which the user’s system accesses our website
- Websites accessed by the user’s system via our website
- Name and URL of the retrieved file
2. PURPOSE OF DATA PROCESSING
The data mentioned above is processed for the following purposes:
- Ensuring a smooth connection to the website and system functionality
- Ensuring a user-friendly experience and optimizing the website
- Evaluating and ensuring the security and stability of our IT systems
- Other administrative purposes
We reserve the right to conduct statistical analysis of anonymized data sets.
3. LEGAL BASIS FOR DATA PROCESSING
The legal basis for the data processing is Article 6(1)(f) GDPR. Our legitimate interest follows from the purposes of data collection listed above. Under no circumstances do we use the collected data to draw conclusions about individual users. We also use cookies and analytics tools when you visit our website. These are described in detail in sections V and VII of this privacy policy.
4. STORAGE DURATION
Log file data is deleted after no more than seven days. Further storage is possible, in which case the IP addresses are anonymized or altered so that assignment to a specific user is no longer possible.
5. RIGHT TO OBJECT AND POSSIBILITY OF REMOVAL
The collection of data for the provision of the website and the storage of data in log files is absolutely necessary for the operation of the website. Therefore, there is no option for the user to object.
V. USE OF COOKIES
1. DESCRIPTION AND SCOPE OF DATA PROCESSING
Our website uses cookies. Cookies are text files that are stored in or by the internet browser on the user’s computer system. When a user visits a website, a cookie may be stored on their operating system. This cookie contains a characteristic string that allows the browser to be uniquely identified when the website is visited again. Cookies do not cause any harm to your device, and they do not contain viruses, trojans, or other malware.
Most browsers accept cookies automatically. However, you can configure your browser to prevent cookies from being stored on your computer or to alert you before a new cookie is created. Please note that fully disabling cookies may result in some parts of the website not functioning properly.
We use cookies to make our website more user-friendly. Some elements of our website require that the browser can be identified even after a page change.
The following data is stored and transmitted in cookies:
- Language settings
- User IDs
In addition, we use cookies on our website that enable an analysis of users’ browsing behavior. The following data may be transmitted this way:
- Entered search terms
- Frequency of page views
- Use of website features
- Submission of forms
The cookie stores information that relates specifically to the device being used. This does not mean, however, that we can directly identify the user.
The data collected in this way is pseudonymized through technical means. Therefore, it is no longer possible to assign the data to a specific user. This data is not stored together with other personal data of the user.
When visiting our website, users are informed about the use of cookies for analytical purposes by means of a cookie banner and are asked for their consent to the processing of personal data in this context. A reference to this privacy policy is also provided, as well as instructions on how to disable the storage of cookies via browser settings.
ALEX & GROSS GmbH also uses the email marketing system of CleverReach GmbH & Co. KG, 26125 Oldenburg, to individually inform interested parties and continuously improve our offering. CleverReach uses first-party cookies, which can be deleted at any time by clearing your browser cookies.
2. PURPOSE OF DATA PROCESSING
The purpose of using technically necessary cookies is to simplify website use for users. Some website functions cannot be offered without the use of cookies, as they require the browser to be recognized after a page change.
We use cookies for the following applications:
- Preserving language settings
- Remembering search terms
The user data collected through technically necessary cookies is not used to create user profiles.
Analytics cookies are used to improve the quality of our website and its content. These cookies help us understand how the website is used and enable us to continuously optimize our offering.
Additional purposes include:
- Access to content after registration (e.g., downloads)
- Pre-filling of forms
- Direct access after initial registration
These purposes also represent our legitimate interest in data processing under Article 6(1)(f) GDPR.
3. LEGAL BASIS FOR DATA PROCESSING
The legal basis for processing personal data using technically necessary cookies is Article 6(1)(f) GDPR. The legal basis for processing personal data using cookies for analytical purposes is Article 6(1)(a) GDPR, provided that the user has given their consent.
4. DURATION OF STORAGE, RIGHT TO OBJECT AND REMOVAL
Cookies are stored on the user’s device and transmitted to our website. As the user, you therefore have full control over the use of cookies. You can disable or restrict the transmission of cookies by changing the settings in your internet browser. Stored cookies can be deleted at any time. This can also be done automatically. Disabling cookies for our website may result in limited functionality.
VI. NEWSLETTER
1.DESCRIPTION AND SCOPE OF DATA PROCESSING
We offer users the opportunity to subscribe to a free newsletter via our website.
When registering for the newsletter, the data entered into the input form is transmitted to us.
The following personal data is collected during the registration process:
- First name and last name
- Email address
- Phone number
During registration, your consent is obtained for the processing of your data, and reference is made to this privacy policy.
No data will be passed on to third parties in connection with the newsletter subscription.
The data will be used exclusively for sending the newsletter.
2. PURPOSE OF DATA PROCESSING
The collection of the user’s email address is necessary in order to deliver the newsletter.
The collection of additional personal data during the registration process serves to prevent misuse of the services or of the email address used.
3. LEGAL BASIS FOR DATA PROCESSING
The legal basis for processing the data after registration for the newsletter is the user’s consent in accordance with Article 6(1)(a) GDPR.
4. DURATION OF STORAGE
The data is deleted as soon as it is no longer necessary for achieving the purpose for which it was collected. Accordingly, the user’s email address is stored for as long as the newsletter subscription is active. Additional personal data collected during the registration process is generally deleted after seven days.
5. RIGHT TO OBJECT AND REMOVAL OPTION
Users may unsubscribe from the newsletter at any time.
A corresponding link is provided in each newsletter. Alternatively, you may send your unsubscribe request at any time via email to: opt-out@alex-gross.com.
Unsubscribing also constitutes withdrawal of your consent to store the personal data collected during the registration process.
VII. CONTACT FORM
1.DESCRIPTION AND SCOPE OF DATA PROCESSING
If you have any questions, we offer you the opportunity to contact us via a form provided on our website. To do so, you must provide a valid email address so that we know who the request is from and can respond appropriately. Any additional information can be submitted voluntarily.
2. PURPOSE OF DATA PROCESSING
The data you provide is processed for the purpose of handling your inquiry and further communication.
3. LEGAL BASIS FOR DATA PROCESSING
The legal basis for processing your data is your voluntarily given consent in accordance with Article 6(1)(a) GDPR.
4. DURATION OF STORAGE
The personal data collected via the contact form will be automatically deleted once your request has been fully resolved.
VIII. DISCLOSURE OF PERSONAL DATA TO THIRD PARTIES
1. DISCLOSURE TO SERVICE PROVIDERS
In the context of contract execution via the website, personal data is disclosed to customers in accordance with the contractual agreement.
2. USE OF SOCIAL MEDIA PLUGINS / THIRD-PARTY COOKIES
A) SCOPE OF PERSONAL DATA PROCESSING
ALEX & GROSS GmbH uses various social network services. When these services are used, a direct connection is established between you and the respective service provider in the United States, allowing them to receive your IP address and information about the current page you are visiting. Due to the direct connection, ALEX & GROSS GmbH has no influence on the data collected and can only inform you to the best of its knowledge. The respective providers are responsible for ensuring that their services are operated in compliance with data protection regulations. ALEX & GROSS GmbH does not transmit any further data to these networks.
Facebook / Facebook Like Button
Our website may use plugins from Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”). When you access a page of our website that contains such a plugin, your browser establishes a direct connection to Facebook’s servers. The content of the plugin is transmitted directly from Facebook to your browser and integrated into the website. Through this integration, Facebook receives information that your browser has accessed the corresponding page of our website – even if you do not have a Facebook account or are not currently logged into Facebook. This information (including your IP address) is transmitted directly from your browser to a Facebook server in the USA and stored there. An overview of Facebook plugins can be found here: https://developers.facebook.com/docs/plugins/
If you are logged into Facebook, Facebook can directly associate your visit to our website with your Facebook account. If you interact with the plugins – for example by clicking the “LIKE” or “SHARE” button – this information is also transmitted directly to a Facebook server and stored there. This data may also be published on Facebook and shown to your Facebook friends.
Facebook may use this information for advertising, market research, and to tailor its pages to user preferences. For this purpose, Facebook creates usage, interest, and relationship profiles — e.g., to analyze your use of our website with regard to the ads shown to you on Facebook, to inform other Facebook users about your activities on our website, and to provide further services associated with Facebook. If you do not want Facebook to associate data collected via our website with your Facebook account, you must log out of Facebook before visiting our website.
Please note that we have no knowledge of the content of the data transmitted to Facebook or how it is used. For further information about the scope and purpose of data collection and processing by Facebook, as well as your rights and options for protecting your privacy, please refer to Facebook’s data policy: https://www.facebook.com/about/privacy/
Google +1 Button
According to Google, data related to the +1 button is only stored and processed if you are a logged-in member of Google. More information about the +1 button and how Google uses this data can be found here: https://www.google.com/intl/de/+/policy/+1button.html
Outbrain
Our website uses technology provided by Outbrain UK Ltd. (“Outbrain”). This technology allows us to recommend additional content that may be of interest to you — either on our website or on third-party websites — based on cookies stored on your device.
Outbrain determines these content recommendations based on the articles you have previously viewed. The selection and delivery of this content is managed automatically by Outbrain’s systems.These recommendations are displayed on a pseudonymous basis. No personally identifiable data is stored.
The cookie uses information such as device source, browser type, and your fully anonymized IP address (with the last octet removed) to determine appropriate content. More information about Outbrain’s data protection practices is available here: https://outbrain.com/legal/privacy. You can opt out of interest-based content recommendations by using the “Opt-out” option in section 4 (“Advertising/Behavioral Targeting; How To Opt-Out”) of Outbrain’s privacy policy. Please note that the opt-out must be performed separately on each device or browser you use to access our website. After opting out, you will still see additional content recommendations — however, they will no longer be based on your prior browsing behavior.
Bing Ads (Microsoft Advertising)
Our website uses Microsoft Advertising provided by Microsoft Online Inc., 6100 Neil Road, Reno, NV 89511, USA.
(For EMEA: Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, D18 P521, Ireland)
Microsoft Advertising is an advertising platform that allows companies to authorize Microsoft and its partners to use automated tools for formatting ads.
Our website uses cookies to:
- track which ads have already been displayed to you so you don’t see the same ad repeatedly
- count the number of visitors who click on an ad
- track how many purchases are made via the ad
- store your visit on the website in order to derive your interests
- determine whether you clicked on an ad
- collect information about your browsing behavior, which may be shared with other websites
- allow third-party services to show you advertisements
- display relevant ads based on your social media activity
If you reached our website via a Bing ad, Bing places cookies on your device. This enables us to determine that someone clicked on an ad and was redirected to our website, reaching a predefined landing page or completing a specific action.
We only receive aggregate data on how many users clicked the ad and were redirected — we do not receive personally identifiable information.
These cookies are used to uniquely identify a web browser on a specific device but do not identify individuals.
Neither we nor the third-party providers store personal data.
We also use Bing’s remarketing feature. This allows us to show interest-based advertisements to users of our website on Bing search results pages.
To enable this, Bing stores a cookie in the user’s browser that tracks their visits. This cookie is used solely to identify a web browser on a specific computer and does not store personal information.
For more information about Microsoft’s data privacy practices, please visit: https://privacy.microsoft.com/en-us/privacystatement
Our website uses so-called social plugins (“plugins” or “third-party cookies”) from Instagram, a service operated by Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.
When you access a page on our website that contains such a plugin, your browser establishes a direct connection to Instagram’s servers. The content of the plugin is transmitted directly from Instagram to your browser and embedded into the website.
Why does Instagram use cookies and similar technologies?
For details on the purpose and scope of data collection, the further processing and use of your data by Instagram, as well as your rights and privacy settings, please refer to Instagram’s Privacy Policy: https://help.instagram.com
How long do cookies remain on my device?
The duration depends on whether it is a persistent or a session cookie:
- Session cookies remain on your device only until you close your browser.
- Persistent cookies remain stored until they expire or are manually deleted.
How can you control cookies?
Cookies set by Instagram and other companies can be managed via your browser settings: https://help.instagram.com/cookie_settings
If you have an Instagram account, you can adjust your privacy preferences in your account settings. If you do not have an account, or are not logged in, you can still manage third-party cookies across Meta services in your browser. To do so, follow your browser’s instructions (usually found under “Help”, “Tools” or “Settings”) for managing cookies in apps or on websites — including cookies from other companies used on Instagram.
To learn more about how advertisers may collect and use information about your online activity over time and across websites, visit:
- Network Advertising Initiative: https://www.networkadvertising.org/managing/opt_out.asp
- Digital Advertising Alliance: https://www.aboutads.info/
- European Digital Advertising Alliance: https://youronlinechoices.eu/
If you do not want Instagram to associate the data collected via our website with your Instagram account, you must log out of Instagram before visiting our site. You can also completely prevent Instagram plugins from loading by using browser add-ons — for example, the script blocker “NoScript”: https://noscript.net/
LinkedIn
Our website may use plugins provided by LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. When visiting a page on our website that includes such a plugin, data collected through your use of the website — including information about which specific pages you visited — may be transmitted to LinkedIn’s servers. If you are logged into your LinkedIn account at the time, LinkedIn may associate this data directly with your personal user profile. This enables LinkedIn to provide additional plugin functionality in connection with your LinkedIn account. If you do not want LinkedIn to associate your visit to our website with your LinkedIn profile, please log out of your LinkedIn account before accessing our site.
Please note that we have no knowledge of the content of the data transmitted to LinkedIn, nor how that data is used. For more information on how LinkedIn collects and processes your data, as well as your rights and privacy settings, please refer to LinkedIn’s privacy policy: https://www.linkedin.com/legal/privacy-policy
Our website integrates plugins from the short messaging service Twitter Inc.
If you reside in the European Union, EFTA states, or the United Kingdom, the responsible entity is:
Twitter International Unlimited Company (Company No. 503351, VAT No. IE9803175Q),
One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland.
If you reside outside of the EU, EFTA, or the UK — including in the USA — the responsible provider is:
X Corp., the company that provides Twitter and its services,
1355 Market Street, Suite 900, San Francisco, CA 94103, USA.
Twitter plugins (such as the tweet button) can be recognized by the Twitter logo on our website.
When you access a page on our site that contains such a plugin, a direct connection is established between your browser and Twitter’s servers.
Twitter then receives the information that your IP address has accessed our website. If you click the Twitter “tweet button” while logged into your Twitter account, you can link the content of our pages to your Twitter profile. This allows Twitter to associate your visit to our website with your user account.
Please note that we, as the website provider, have no knowledge of the content of the data transmitted to Twitter or how Twitter uses that data.
For details on how Twitter Inc. handles the personal data you provide — including your consent to collection and use, and the transfer of data to the United States, Ireland, or other countries for storage, processing, and usage by Twitter and its affiliates — please refer to Twitter’s privacy policy: https://www.twitter.com/de/privacy
If you do not want Twitter to associate your visit to our website with your Twitter account, you must log out of your Twitter account before visiting our website. Further information is also available in Twitter’s privacy policy: https://www.twitter.com/de/privacy
B) PURPOSE OF DATA PROCESSING
ALEX & GROSS GmbH integrates the services of the aforementioned companies on its website to enable interested parties, customers, and visitors to:
- Stay up to date with news, developments, and ideas related to professional topics
- Explore career paths and education opportunities
- Discover job and career openings
- Search for potential clients, customers, partners, and other business contacts and connect with them professionally
The underlying purpose of these integrations is promotional in nature and is considered a legitimate interest pursuant to Article 6(1)(f) GDPR.
C) LEGAL BASIS FOR THE PROCESSING OF PERSONAL DATA
The legal basis for processing personal data through the use of social media plugins is Article 6(1)(f) GDPR.
D) DURATION OF STORAGE
ALEX & GROSS GmbH does not store any data that is transferred to the companies listed under section a).
For details on the duration of storage, deletion of accounts, and related data handling practices, please refer to the privacy policies of the respective third-party providers.
E. RIGHT TO OBJECT AND REMOVE OPTIONS
For information on how to object to data processing or how to remove stored data, please consult the privacy policies of the respective third-party providers listed under section a).
3. WEBSITE ANALYSIS SERVICES
A) SCOPE OF THE PROCESSING OF PERSONAL DATA
Google Adwords Conversion Tracking
To statistically evaluate the use of our website and optimize it for our users, we use Google Ads Conversion Tracking. If you reach our website via a Google ad, a cookie is placed on your device by Google Ads. This cookie expires after 30 days and does not serve the purpose of personal identification. If the user visits specific pages of the Ads client’s website and the cookie is still valid, Google and the client can recognize that the user clicked the ad and was redirected to that page.
Each Google Ads client receives a unique cookie. These cookies cannot be tracked across the websites of different Ads customers.
The information collected with the help of the conversion cookie is used to generate conversion statistics for Ads clients who use conversion tracking. Clients learn the total number of users who clicked their ad and were redirected to a page tagged for conversion tracking. However, they do not receive any information that personally identifies users.
If you prefer not to participate in tracking, you can opt out by preventing the required cookie from being set — for example, by adjusting your browser settings to generally block the automatic setting of cookies. You can also block cookies for conversion tracking specifically by configuring your browser to block cookies from the domain: www.googleadservices.com. Google’s data protection policy for conversion tracking can be found here: https://services.google.com/sitestats/en.html
Google Tag Manager
This website uses Google Tag Manager by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). We use this service to manage other analytics and marketing tags on our website. Google Tag Manager itself does not use cookies and does not collect personal data. It merely triggers other tags that may collect data. However, Google Tag Manager does not access this data. If deactivation has been implemented at the domain or cookie level, it remains in effect for all tracking tags deployed via Google Tag Manager.
More information is available here: https://support.google.com/tagmanager/ and https://policies.google.com/terms
Google Analytics
This website uses Google Analytics, a web analytics service provided by Google Inc. (https://www.google.de/intl/de/about/) (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). Google Analytics uses “cookies”, which are text files stored on your computer to help analyze how you use the website. The information generated by the cookie about your use of the website, including:
- browser type and version
- operating system used
- referrer URL (previous page visited)
- hostname of the accessing device (IP address)
- time of the server request
The information is usually transferred to and stored on a Google server in the USA. This information is used to evaluate website usage, compile reports on website activity, and provide other services related to website and internet usage for the purpose of market research and website optimization. This data may also be shared with third parties if required by law or if third parties process this data on behalf of Google.
Your IP address is never merged with other Google data. IP addresses are anonymized using IP masking, meaning they are truncated and cannot be linked to an individual. If IP anonymization is enabled on this website, your IP address will be truncated by Google within the European Union or the European Economic Area before transmission. Only in exceptional cases will the full IP address be sent to a Google server in the USA and shortened there. We use Google Analytics with the extension “_anonymizeIp()”, ensuring that IP addresses are processed only in a truncated form, excluding any direct personal reference.
Leadfeeder
We also use Leadfeeder, a web analytics tool from Liidio Oy, Mikonkatu 17 C, Helsinki, Finland. Leadfeeder works in conjunction with our Google Analytics data to identify company visitors on our website. Google Analytics-provided IP addresses are used to link data to companies associated with those IPs. These IP addresses are already anonymized by Google Analytics, and therefore cannot be directly associated with individuals. However, a personal reference could be inferred by viewing linked information. The data provided by Leadfeeder includes:
- company name
- pages visited
- time of visit
- reverse domain of the IP address
- referring page or service
- browser and OS data
- search terms used to reach the site
More information about Leadfeeder’s privacy policy is available here: https://www.leadfeeder.com/privacy
B) PURPOSE OF DATA PROCESSING
On behalf of the operator of this website, Google will use the collected information to analyze your usage of the website, to compile reports on website activity, and to provide additional services related to website and internet usage to the website operator. The goal of this processing is to ensure demand-driven design and the continuous optimization of our website. Furthermore, data is processed in order to statistically evaluate website usage and to improve our offering for you. These purposes represent our legitimate interest in data processing within the meaning of Article 6(1)(f) GDPR. The Google Analytics tracking code implemented on this website also supports display advertising. As part of this, the remarketing feature of Google Analytics is used. Advertisements are shown on third-party websites — including those operated by Google. These third parties (e.g., Paessler or PRTG), including Google, use cookies. The combined use of first-party cookies (e.g., Google Analytics cookies) and third-party cookies (e.g., DoubleClick cookies) allows targeted ad delivery, optimization, and placement based on your previous visits to this website. The following Google Ads features are used on this website:
- Remarketing
- Interest categories
- Similar audiences
- Other types of interest-based advertising
We use these Google Ads features to re-engage visitors to our website on third-party websites, or to address internet users with specific interest profiles based on their online behavior. We do not collect any personally identifiable information through our cookies, remarketing lists, or other anonymous identifiers.
C) LEGAL BASIS FOR THE PROCESSING OF PERSONAL DATA
The legal basis for processing personal data through the use of Google Analytics is Article 6(1)(f) GDPR.
D) DURATION OF STORAGE
The data is deleted as soon as it is no longer required to fulfill the purpose for which it was collected.
Other personal data collected during the registration process is usually deleted after seven days.
E. RIGHT TO OBJECT AND OPTIONS FOR REMOVAL
You can prevent cookies from being stored by configuring your browser accordingly. Please note, however, that if you do so, some functions of this website may no longer be fully available.
You can also prevent Google from collecting the data generated by the cookie and related to your use of the website (including your IP address), as well as Google’s processing of this data, by downloading and installing the browser add-on available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de
Additionally, you can deactivate Google Analytics for display advertising and customize ads in the Google Display Network using the Ads Settings Manager. Alternatively, particularly for browsers on mobile devices, you can prevent Google Analytics from collecting your data by clicking on a dedicated opt-out link. This will set an opt-out cookie on your device, which prevents the collection of your data during future visits to this website. Note: This opt-out cookie is browser-specific and applies only to this website. If you delete your browser’s cookies, you will need to set the opt-out cookie again. Further information on data protection in connection with Google Analytics can be found in the Google Analytics Help Center (https://support.google.com/analytics/answer/6004245?hl=de).
IX. RIGHTS OF THE DATA SUBJECT
If your personal data is processed, you are considered a data subject within the meaning of the GDPR, and you have the following rights in relation to the data controller:
1. RIGHT OF ACCESS (ART. 15 GDPR)
You have the right to obtain confirmation from us as to whether or not personal data concerning you is being processed.
Where this is the case, you have the right to access this personal data and the following information:
- the purposes of the processing
- the categories of personal data concerned
- the recipients or categories of recipients to whom the personal data has been or will be disclosed
- the planned duration of data storage, or, if specific information is not available, the criteria used to determine that duration
- the existence of a right to rectification or erasure of personal data, or to restriction of processing by the controller, or the right to object to such processing
- the existence of a right to lodge a complaint with a supervisory authority
- where the personal data is not collected directly from you, any available information regarding the source of the data
- the existence of automated decision-making, including profiling, as referred to in Art. 22(1) and (4) GDPR, and, at least in these cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject. You also have the right to be informed whether your personal data is transferred to a third country or international organization. Where this is the case, you may request to be informed of the appropriate safeguards pursuant to Art. 46 GDPR relating to the transfer.
2. RIGHT TO RETIFICATION (ART. 16 GDPR)
You have the right to obtain from the controller without undue delay the rectification of inaccurate personal data concerning you. You also have the right to have incomplete personal data completed — including by means of providing a supplementary statement.
3. RIGHT TO RESTRICTION OF PROCESSING (ART. 18 GDPR)
You have the right to request the restriction of processing of your personal data under the following conditions:
- if you contest the accuracy of the personal data, for a period enabling the controller to verify the accuracy of the personal data;
- if the processing is unlawful and you oppose the erasure of the personal data and instead request the restriction of its use;
- if the controller no longer needs the personal data for the purposes of the processing, but you require it for the establishment, exercise, or defense of legal claims; or
- if you have objected to processing pursuant to Art. 21(1) GDPR and it has not yet been determined whether the controller’s legitimate grounds override yours. If the processing of your personal data has been restricted under the conditions above, such data — apart from being stored — may only be processed with your consent, for the establishment, exercise or defense of legal claims, to protect the rights of another natural or legal person, or for reasons of important public interest of the Union or a Member State. If the restriction of processing has been implemented under the conditions mentioned above, you will be informed by the controller before the restriction is lifted.
4. RIGHT TO ERASURE (ART. 17 GDPR)
A) OBLOGATION TO ERASE
Pursuant to Article 17 GDPR, you have the right to request the immediate erasure of personal data concerning you, and the controller is obliged to erase this data without undue delay if one of the following reasons applies:
- The personal data is no longer necessary in relation to the purposes for which it was collected or otherwise processed.
- You withdraw your consent on which the processing was based pursuant to Art. 6(1)(a) or Art. 9(2)(a) GDPR, and there is no other legal ground for the processing.
- You object to the processing pursuant to Art. 21(1) GDPR and there are no overriding legitimate grounds for the processing, or you object pursuant to Art. 21(2) GDPR.
- The personal data concerning you has been unlawfully processed.
- The erasure of the personal data concerning you is required to comply with a legal obligation under Union or Member State law to which the controller is subject.
- The personal data has been collected in relation to the offer of information society services referred to in Art. 8(1) GDPR.
B) INFORMATION TO THIRD PARTIES
C) EXCEPTIONS
The right to erasure does not apply to the extent that processing is necessary:
- for exercising the right of freedom of expression and information;
- for compliance with a legal obligation which requires processing by Union or Member State law to which the controller is subject, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
- for reasons of public interest in the area of public health in accordance with Art. 9(2)(h) and (i) and Art. 9(3) GDPR;
- for archiving purposes in the public interest, scientific or historical research purposes, or statistical purposes in accordance with Art. 89(1) GDPR, insofar as the right referred to in section a) is likely to render impossible or seriously impair the achievement of the objectives of that processing; or
- for the establishment, exercise, or defense of legal claims.
5. RIGHT TO NOTIFICATION (ART. 19 GDPR)
If you have asserted the right to rectification, erasure, or restriction of processing against the controller, the controller is obligated to notify all recipients to whom the personal data has been disclosed of such rectification, erasure, or restriction — unless this proves impossible or involves disproportionate effort.
You have the right to request that the controller inform you about those recipients.
6. RIGHT TO DATA PORTABILITY (ART. 20 GDPR)
You have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format.
You also have the right to transmit this data to another controller without hindrance, provided that:
- the processing is based on your consent pursuant to Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR, or on a contract pursuant to Art. 6(1)(b) GDPR; and
- the processing is carried out by automated means. In exercising this right, you also have the right to have the personal data transmitted directly from one controller to another, where technically feasible. This must not adversely affect the rights and freedoms of others. The right to data portability does not apply to processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
7. RIGHT TO OBJECT (ART. 21 GDPR)
You have the right, on grounds relating to your particular situation, to object at any time to the processing of your personal data based on Article 6(1)(e) or (f) GDPR; this also applies to profiling based on these provisions.
The controller shall no longer process the personal data concerning you unless he can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or the processing serves the establishment, exercise or defense of legal claims.
Where your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such marketing; this also applies to profiling to the extent that it is related to such direct marketing.
If you object to processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes.
You may exercise your right to object — in connection with the use of information society services — by automated means using technical specifications, notwithstanding Directive 2002/58/EC.
If you wish to exercise your right to object or withdraw consent, you can do so at any time by sending an email to: contact@alex-gross.com
8. RIGHT TO WITHDRAW CONSENT UNDER DATA PROTECTION LAW (ART. 7(3) GDPR)
You have the right to withdraw your data protection consent at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. However, from the moment of withdrawal, we are no longer permitted to continue the data processing that was based on that consent.
9. AUTOMATED INDIVIDUAL DECISION-MAKING INCLUDING PROFILING
You have the right not to be subject to a decision based solely on automated processing — including profiling — which produces legal effects concerning you or similarly significantly affects you.
This does not apply if the decision:
- is necessary for entering into, or the performance of, a contract between you and the controller,
- is authorized by Union or Member State law to which the controller is subject and which also lays down suitable measures to safeguard your rights and freedoms and legitimate interests, or
- is based on your explicit consent.
However, such decisions must not be based on special categories of personal data referred to in Article 9(1) GDPR unless point (a) or (g) of Article 9(2) applies, and suitable measures have been taken to safeguard your rights, freedoms, and legitimate interests.
In the cases referred to under points (1) and (3) above, the controller must implement appropriate measures to safeguard your rights and freedoms and legitimate interests — including at least the right to obtain human intervention, to express your point of view, and to contest the decision.
10. RIGHT TO LODGE A COMPLAINT WITH A SUPERVISORY AUTHORITY (ART. 77 GDPR)
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, place of work, or the place of the alleged infringement, if you believe that the processing of personal data relating to you infringes the GDPR.
The supervisory authority with which the complaint has been lodged will inform you of the progress and outcome of the complaint, including the possibility of a judicial remedy under Article 78 GDPR.
X. DATA SECURITY
We use the widely adopted SSL (Secure Socket Layer) encryption protocol in conjunction with the highest level of encryption supported by your browser.
As a rule, this is 256-bit encryption. If your browser does not support 256-bit encryption, we will instead use 128-bit v3 technology. You can recognize whether an individual page of our website is being transmitted in encrypted form by looking for the closed key or lock icon in the status bar of your browser.
In addition, we take appropriate technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction, or unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.
XI. UPDATES TO THIS PRIVACY POLICY
This privacy policy is currently valid as of June 2022. As our website and services continue to evolve, or due to changes in legal or regulatory requirements, it may become necessary to update this privacy policy. The most recent version of this privacy policy can be accessed and printed at any time on our website at: https://www.alex-gross.com/datenschutz/