Data Protection

Responsible for data collection on these websites:
CI4C GmbH & Co. KG (hereinafter referred to as “we”)
Represented by the Managing Directors: Ralf Hölscher and Jürgen F. H. Thormann.

CI4C GmbH & Co. KG
Hainenbachstr. 30
89522 Heidenheim

Email Address:
leonie.muether@schwenk.com

1. Collection and Processing of Data
We collect and process personal data where you provide such data to us through an input form on our website or by other means, such as by email. We also collect and process data generated through your use of our website. Your data is processed in accordance with the provisions of the EU General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG), and the German Telemedia Act (TMG). Personal data means any information relating to an identified or identifiable natural person. In the following sections, we explain in detail what data we collect, the legal basis on which it is collected, your rights in relation to your data, and the length of time for which your data is stored.

2. Processing of Data Through Cookies and Log Files
Information on the use of cookies on our website can be found in our Cookie Policy.

Our website also uses so-called log files on the basis of Article 6(1)(f) GDPR, in which access data is stored each time a page is accessed. The data record stored in this process contains the following information:

Your IP address, the date and time of access, the file accessed, the status, the request submitted by your browser to the server, the volume of data transferred, the website from which you accessed the requested page (referrer), as well as information about the product and version of the browser used, your operating system, and your country of origin. The log data is routinely deleted after 14 days. This means that all data contained therein is irretrievably erased. This temporary storage is carried out solely to protect our website against attacks and misuse. This also constitutes our legitimate interest in storing the data. We do not use the log data for any other purposes.

3. Links
Our website contains references (links) to external websites. Your privacy is protected because external content is not directly integrated into our website; instead, only a link is provided. Data may only be transmitted to the operators of the respective website once you actively click on the link. We accept no responsibility for the websites of other operators. In such cases, the privacy policies of the respective website operator shall apply.

4. Third-Party Providers

Cookie Consent Management

When you use our website, no connection is established to the provider’s servers, as the system is hosted by us. We use this technology to obtain your consent and other declarations regarding the use of cookies. We then store a cookie in your browser in order to associate the consents you have granted, or any withdrawal of such consents, with your browser. The data collected in this way is stored until you change your settings, delete the cookie, or the purpose for storing the data no longer applies. Mandatory statutory retention obligations remain unaffected.

We use this technology to obtain the legally required consent for the use of cookies. The legal basis for this is Article 6(1)(c) GDPR.

5. Processing of Usage Data Through the Integration of Fonts

Google Web Fonts

This website uses so-called Web Fonts provided by Google to ensure the consistent display of fonts. When you access a page, your browser loads the required Web Fonts into its browser cache in order to display text and fonts correctly.

For this purpose, the browser you use must establish a connection to Google’s servers. As a result, Google becomes aware that this website has been accessed via your IP address. The use of Google Web Fonts is based on Article 6(1)(f) GDPR. The website operator has a legitimate interest in ensuring a consistent presentation of fonts on the website. Where consent has been requested (for example, consent to the storage of cookies), processing is carried out exclusively on the basis of Article 6(1)(a) GDPR; such consent may be withdrawn at any time.

If your browser does not support Web Fonts, a standard font installed on your computer will be used instead.

Further information on Google Web Fonts can be found at:
https://developers.google.com/fonts/faq

For information on how Google processes personal data, please refer to Google's Privacy Policy:
https://policies.google.com/privacy?hl=en-GB.

6. Processing of Your Personal Data When Contacting Us
If you provide us with personal data by contacting us, for example by email or by entering your details into one of our online forms, we process your data in accordance with Article 6(1)(b) GDPR for the purpose of fulfilling a contract or carrying out pre-contractual measures taken at your request, or in accordance with Article 6(1)(f) GDPR on the basis of our legitimate interest in responding to your enquiry. We process your data solely for the purpose of handling your specific enquiry. This may include forwarding your enquiry to an affiliated company where necessary to provide an appropriate response. Beyond this, we do not process your data for any other purposes.

After completing and submitting any form provided on our website – with the exception of forms supplied by third-party providers – you will receive an email summarising the data we process about you. This includes the content of the submitted form, any consents you have given, and any other declarations of intent.

You may also exercise the rights set out in Section 11 of this Privacy Policy. Enquiries that we have answered or forwarded, and for which there is no further basis for retention, are automatically deleted from our systems after 2 (two) months. Further information regarding the deletion of your data can be found in Section 12 of this Privacy Policy.

7. Encryption
Where you are able to enter personal data on our website, such data is transmitted over the internet using SSL encryption. We protect our website and other systems through technical and organisational measures designed to safeguard your data against loss, destruction, unauthorised access, alteration, or disclosure by unauthorised persons.

8. Categories of Data Recipients; Transfers of Data to Third Countries
Service providers and agents engaged by us in connection with the website, such as hosting providers, agencies, and IT service providers, may have access to your personal data. Where such service providers and agents process data on our behalf, they act strictly in accordance with our instructions and are contractually bound to do so. This also applies to service providers located in a third country (a country outside the European Union or the European Economic Area).

In some third countries, a level of data protection equivalent to that of the European Economic Area may not be guaranteed. Where personal data is transferred to a third country, we ensure that such transfers take place only in accordance with the applicable legal requirements set out in Chapter V of the GDPR.
In doing so, we always take account of current case law and follow the applicable recommendations of the relevant authorities to ensure that your data is afforded a level of protection equivalent to that provided under the GDPR.

9. Your Rights
In accordance with Article 15 GDPR, you have the right, upon request and free of charge, to obtain information about the personal data stored concerning you. You also have the right, pursuant to Articles 16, 17 and 18 GDPR, to request the rectification of inaccurate data and the restriction or erasure of your personal data.

Under the conditions set out in Article 20 GDPR, you are also entitled to receive the personal data concerning you that has been stored in a structured, commonly used, and machine-readable format, and to transmit those data to another controller without hindrance from us.

Furthermore, pursuant to Article 21(1) GDPR, you have the right to object, on grounds relating to your particular situation, to the processing of personal data concerning you where such processing is based on Article 6(1)(e) or (f) GDPR, including profiling. We will comply with the above rights where the legal requirements for exercising them are met. Where your personal data is processed for direct marketing purposes, you have the right at any time, pursuant to Article 21(2) GDPR, to object to the processing of your personal data for such marketing, including profiling insofar as it is related to such direct marketing.

Please direct any requests relating to your personal data to the contact details provided at the beginning of this Privacy Policy and in the legal notice (Imprint) on our website.

In addition, every data subject has the right to lodge a complaint with a data protection supervisory authority regarding the processing of their data by us.

10. Duration of Storage and Routine Deletion
Unless otherwise expressly stated in this Privacy Policy, we process and store personal data only for as long as is necessary to fulfil the purpose of the processing or as required by laws or regulations to which we are subject. Once the purpose for storage no longer applies, or a statutory retention period expires, the personal data will be routinely restricted or deleted in accordance with the applicable legal requirements.