Ihr Partner für Messtechnik in der grünen Branche

Política de privacidad

Privacy Policy | STEP Systems GmbH

Status 04/03/2025

Who we are

The controller within the meaning of the General Data Protection Regulation (GDPR) and other data protection regulations is

STEP Systems GmbH

Sprottauer Str. 23-25

90475 Nuremberg

Germany

0911 9626050

info@stepsystems.de

www.stepsystems.de

Contacting the data protection officer

The data protection officer of the controller is

DataCo GmbH

Sandstr. 33

80335 Munich

Germany

+49 89 7400 45840
www.dataguard.de

On this page we inform you about the processing of your personal data on the website.

How we collect and use your personal data depends on how you interact with us or which services you use. We will only collect, use or share your personal data where we have a legitimate purpose and legal basis for doing so.

What do we mean by legal basis?

Consent (Art. 6 para. 1 sentence 1 lit. a GDPR)-You have given us your consent to process your personal data for the specific purpose that we have explained to you. You have the right to withdraw your consent at any time. For more information on how you can withdraw your consent, please refer to the subsections «Exercising your rights» in the following sections of this Privacy Policy.

Contract (Art. 6 para. 1 sentence 1 lit. b GDPR) – We need to use your data to fulfil a contract you have with us. Alternatively, it is necessary to use your data because we have asked you to do so or you have taken certain steps yourself before entering into this contract.

Legal obligation (Art. 6 para. 1 sentence 1 lit. c GDPR) – We must use your data to comply with the law.

Vital interests (Art. 6 para. 1 sentence 1 lit. d GDPR) – The processing of your data is necessary to protect your vital interests or those of another person. For example, to protect you from serious physical harm.

Public task (Art. 6 para. 1 sentence 1 lit. e GDPR) – The processing of your data is necessary for the performance of a task carried out in the public interest or because it is covered by a task defined by law, e.g. for a statutory function.

Legitimate interests (Art. 6 para. 1 sentence 1 lit. f GDPR) – The processing of your data is necessary to support a legitimate interest that we or another party have, only if your own interests do not prevail.

Please note that we may not be able to provide you with our website services if your data is processed to fulfil a contract or legal obligation and you do not provide the requested data.

Data sharing and international transfer

As explained in this Privacy Policy, we use various service providers to help us provide our services and ensure the security of your data. When we use these service providers, it is necessary for us to share your personal data with them.

We have concluded agreements with all service providers to whom we pass on your data, obliging them to protect your data.

If your personal data is transferred outside the EU, we will ensure that your personal data receives an equivalent level of protection, either because the country to which your data is transferred has an «adequate» standard of data protection as defined by the European Commission, or by applying another safeguard, such as an enhanced contractual arrangement, i.e. the Standard Contractual Clauses (SCCs) adopted by the European Commission.

For example, when we use US service providers, we rely on either the SCC or the EU-US Data Privacy Framework, depending on the provider. You can request a copy of the SCCs that we have entered into with our service providers by sending an email to the email address provided in this Privacy Policy.

Your rights

If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights vis-à-vis the controller:

1. the right to information (Art. 15 GDPR)

You have the right to obtain from us confirmation as to whether or not personal data concerning you are being processed, and, where that is the case, access to the personal data and the following information:

· Processing purposes

· Categories of personal data

· Recipients or categories of recipients

· Planned storage duration or the criteria for determining this duration

· the existence of the rights to rectification, erasure, restriction or objection

· Right to lodge a complaint with the competent supervisory authority

· If applicable, origin of the data (if collected from a third party)

· If applicable, the existence of automated decision-making including profiling with meaningful information about the logic involved, the scope and the expected effects

· Possible transfer of personal data to a third country or international organisation

2. right to rectification (Art. 16 GDPR)

If your personal data is incorrect or incomplete, you have the right to request immediate correction or completion of the personal data.

3. right to restriction of processing (Art. 18 GDPR)

If one of the following conditions is met, you have the right to request that the processing of your personal data be restricted:

· You contest the accuracy of your personal data for a period enabling us to verify the accuracy of the personal data.

· In the event of unlawful processing, you object to the erasure of the personal data and instead request the restriction of the use of the personal data.

· We no longer need your personal data for the purposes of processing, but you need your personal data for the establishment, exercise or defence of legal claims, or

· after you have lodged an objection to the processing, for the duration of the examination as to whether our legitimate reasons outweigh your reasons.

4. right to erasure («right to be forgotten») (Art. 17 GDPR)

If one of the following reasons applies, you have the right to demand that your personal data be deleted immediately:

· Your data are no longer necessary for the processing purposes for which they were originally collected.

· you withdraw your consent and there is no other legal basis for the processing.

· You object to the processing and there are no overriding legitimate grounds for the processing or you object pursuant to Art. 21 (2) GDPR.

· Your personal data is being processed unlawfully.

· The deletion is necessary to fulfil a legal obligation under Union law or the law of the member state to which we are subject.

· The personal data was collected in relation to information society services offered in accordance with Article 8 (1) GDPR.

Please note that the above reasons do not apply if the processing is necessary:

· To exercise the right to freedom of expression and information;

· To fulfil a legal obligation or to perform a task that is in the public interest and to which we are subject.

· For reasons of public interest in the area of public health.

· For archiving purposes in the public interest, scientific or historical research purposes or for statistical purposes.

· for the assertion, exercise or defence of legal claims.

5. right to data portability (Art. 20 GDPR)

You have the right to receive your personal data in a structured, commonly used and machine-readable format or to request that it be transmitted to another controller.

6. right to object to certain data processing (Art. 21 GDPR)

You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (e) or (f) of Article 6(1) GDPR. This also applies to profiling based on these provisions.

If your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such marketing, which includes profiling to the extent that it is related to such direct marketing.

7. right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority if you consider that the processing of personal data relating to you infringes the GDPR.

The supervisory authority with which the complaint has been lodged shall inform the complainant of the status and outcome of the complaint, including the possibility of a judicial remedy pursuant to Art. 78 GDPR.

A list of the competent supervisory authorities in Germany can be found on the website of the Federal Commissioner for Data Protection at the following link: https://www.bfdi.bund.de/DE/Service/Anschriften/Laender/Laender-node.html

Provision of the website and creation of log files

1. description and scope of data processing

Each time our website is accessed, our system automatically collects data and information from the computer system of the accessing computer.

The following data is collected:

· Information about the browser type and version used

· The user’s operating system

· Date and time of access

· Websites from which the user’s system accesses our website

· Websites that are accessed by the user’s system via our website

This data is stored in the log files of our system.

This data is not stored together with other personal data of the user.

2. purpose of data processing

Temporary storage of the IP address by the system is necessary to enable delivery of the website to the user’s computer. For this purpose, the user’s IP address must remain stored for the duration of the session.

Data is stored in log files to ensure the functionality of the website. We also use the data to optimise the website and to ensure the security of our information technology systems. The data is not analysed for marketing purposes in this context.

3. legal basis for data processing

The legal basis for the temporary storage of data and log files is Art. 6 para. 1 sentence 1 lit. f GDPR.

4. duration of storage

The data is deleted as soon as it is no longer required to fulfil the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended.

If the data is stored in log files, this is the case after fourteen days at the latest. Storage beyond this period is possible. In this case, the IP addresses of the users are deleted or anonymised so that it is no longer possible to identify the accessing client.

5. exercise your rights

The collection of data for the provision of the website and the storage of data in log files is absolutely necessary for the operation of the website. The user can object to this. Whether the objection is successful must be determined as part of a balancing of interests.

Use of cookies

1. description and scope of data processing

When you visit our website, we use technical aids for various functions, in particular cookies, which can be stored on your end device. When you access our website and at any time thereafter, you have the choice of whether you generally allow cookies to be set or which individual additional functions you would like to select. You can make changes in your browser settings or via our Consent Manager.

Cookies are text files or information in a database that are stored on your hard drive and assigned to the browser you are using so that certain information can flow to the organisation that sets the cookie. Below we describe the type of cookies we use:

We use technically necessary cookies that are required for the technical structure of the website. Without these cookies, our website cannot be displayed (completely correctly) or the support functions are not possible.

The following data is stored and transmitted by the technically necessary cookies:

· Language settings

· Utilisation of website functions

We use cookies on our website that are not technically necessary. Cookies that are not technically necessary are text files that are not only used for the functionality of the website, but also collect other data.

By setting technically unnecessary cookies, the following data is processed:

· IP address

· Location of Internet users

· Date and time the website was accessed

· Customisation of advertisements to the user

· Tracking of surfing behaviour

· Linking the website visit with other social media platforms

2. purpose of data processing

The purpose of using technically necessary cookies is to ensure the functionality of our website. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary for the browser to be recognised even after a page change.

We require the technically necessary cookies for the following applications:

· Transfer of language settings

· Functionality of the website

Cookies that are not technically necessary are used for the purpose of improving the quality of our website, its content and thus our reach and efficiency. By setting these cookies, we learn how the website is used and can thus constantly optimise our offer. In particular, these cookies serve the following purposes:

marketing purpose and to improve the customer experience.

3. legal basis for data processing

The provisions of the Telecommunications Digital Services Data Protection Act (TDDDG) apply to the storage of information in the end user’s terminal equipment and/or access to information already stored in the end user’s terminal equipment. If the setting and reading of cookies is technically necessary, this is done to ensure the functionality of our website. In this case, cookies are stored and accessed on your terminal equipment on the basis of Section 25 (2) No. 2 TDDDG. This storage and access to the information in your end device serves to make it easier for you to use our website and to be able to offer you our services as you have requested. Some functions of our website do not work without the use of these cookies and could therefore not be offered. The cookies are generally deleted after the end of the session (e.g. logging out or closing the browser) or after the expiry of a specified period. Information on different storage periods for cookies can be found in the following sections of this privacy policy.

Insofar as cookies are used that are not technically necessary, this is done on the basis of your express consent, which you can give via the cookie banner. In this case, the basis for the storage and access to information is § 25 para. 1 TDDDG in conjunction with Art. 6 para. 1 lit. a), Art. 7 GDPR. Art. 6 para. 1 lit. a), Art. 7 GDPR. You can revoke your consent at any time with effect for the future or subsequently grant it again by configuring your cookie settings accordingly. Alternatively, you can prevent the storage of cookies by making the appropriate settings in your browser software. Please note that the browser settings you make only apply to the browser you are using. If personal data is processed following the storage of and access to the information on your end device, the provisions of the GDPR apply. You can find information on this in the following sections of this privacy policy.

4. exercise your rights

You can revoke your consent to the use of cookies at any time and manage your consent preferences at the following link: https://www.stepsystems.de/datenschutz/

1. description and scope of data processing

You can subscribe to a free newsletter on our website. When you register for the newsletter, the data from the input screen is transmitted to us.

In order to provide this service, we collect the following data from you:

· Email address

· Surname

· First name

· IP address of the calling computer

· Date and time of registration

Your consent is obtained for the processing of the data as part of the registration process and reference is made to this privacy policy.

The data will be used exclusively for sending the newsletter.

2. purpose of data processing

The purpose of collecting the user’s email address is to send the newsletter.

The collection of other personal data as part of the registration process serves to prevent misuse of the services or the email address used.

3. legal basis for data processing

The legal basis for the processing of data after registration for the newsletter by the user is Art. 6 para. 1 sentence 1 lit. a GDPR if the user has given consent.

4. duration of storage

The data is deleted as soon as it is no longer required to fulfil the purpose for which it was collected. The user’s email address is therefore stored for as long as the subscription to the newsletter is active.

The other personal data collected during the registration process is generally deleted after a period of seven days.

5. exercise your rights

The subscription to the newsletter can be cancelled by the user concerned at any time. For this purpose, there is a corresponding link in every newsletter.

This also makes it possible to withdraw consent to the storage of personal data collected during the registration process.

Contact form

1. description and scope of data processing

There is a contact form on our website that can be used to contact us electronically. If a user makes use of this option, the data entered in the input mask will be transmitted to us and stored.

The following data is stored at the time the message is sent:

· Email address

· Surname

· First name

· Address

· Telephone/mobile phone number

· Free Text

· Date and time

2. purpose of data processing

The processing of personal data from the input mask of the contact form or via the e-mail address provided serves us solely to process the contact.

The other personal data processed during the sending process is used to prevent misuse of the contact form and to ensure the security of our information technology systems.

3. legal basis for data processing

The legal basis for the processing of data transmitted in the course of sending an email is Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interest is to answer your enquiry, which you send to us via the contact form, in the best possible way. If the email contact is aimed at concluding a contract, the additional legal basis for the processing is Art. 6 para. 1 sentence 1 lit. b GDPR.

4. duration of storage

The data is deleted as soon as it is no longer required to fulfil the purpose for which it was collected. For the personal data from the input screen of the contact form and those sent by email, this is the case when the respective conversation with the user has ended. The conversation is ended when it can be inferred from the circumstances that the matter in question has been conclusively clarified.

The additional personal data collected during the sending process will be deleted after a period of seven days at the latest.

5. exercise your rights

If the user contacts us via the input mask in the contact form, they can object to the storage of their personal data at any time in the following manner:

Via email to info@stepsystems.de

All personal data stored in the course of contacting us will be deleted in this case.

Corporate presence

Instagram:

Instagram, Part of Meta Platforms Ireland Ltd, 4 Grand Canal Square Grand Canal Harbour, Dublin 2, Ireland

On our company page, we provide information and offer Instagram users the opportunity to communicate.

If you carry out an action on our Instagram corporate presence (e.g. comments, posts, likes, etc.), you may make personal data (e.g. real name or photo of your user profile) public.

However, as we generally or largely have no influence on the processing of your personal data by Instagram, we cannot make any binding statements about the purpose and scope of the processing of your data.

We use our corporate presence in social networks to communicate and exchange information with (potential) customers. In particular, we use the company presence for:

Presentation of the company and the products sold.

The publications on the company’s website may contain the following content:

· Information about products

· Information about services

· Advertising

· Customer contact

Every user is free to publish personal data through activities.

Insofar as we process your personal data in order to evaluate your online behaviour, offer you competitions or carry out lead campaigns, this is done on the basis of your express declaration of consent, Art. 6 para. 1 sentence 1 lit. a, Art. 7 GDPR.

The legal basis for the processing of personal data for the purpose of communicating with customers and interested parties is Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interest in doing so is to respond to your enquiry in the best possible way or to be able to provide the requested information.

If the contact is aimed at the conclusion of a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b GDPR.

The data generated by the company website is not stored in our own systems.

For the processing of your personal data in third countries, we have provided suitable guarantees in the form of standard data protection clauses in accordance with Art. 46 para. 2 lit. c GDPR. A copy of the standard data protection clauses can be requested from us.

You can object to the processing of your personal data that we collect in the context of your use of our corporate presence at any time and assert your rights as a data subject as set out in the «Your rights» section of this privacy policy. To do so, send us an informal email to info@stepsystems.de. You can find more information on the processing of your personal data by Instagram and the corresponding objection options here:

Instagram: https://help.instagram.com/519522125107875

YouTube:

YouTube LLC, 901 Cherry Ave, San Bruno, CA 94066, United States

We provide information on our company page and offer YouTube users the opportunity to communicate with us.

If you carry out an action on our corporate YouTube presence (e.g. comments, posts, likes, etc.), you may make personal data (e.g. real name or photo of your user profile) public.

However, as we generally or largely have no influence on the processing of your personal data by YouTube, we cannot make any binding statements about the purpose and scope of the processing of your data.

We use our company presence in social networks to communicate and exchange information with (potential) customers. In particular, we use the company presence for:
Presenting the company and the products we sell.

The publications on the company’s website may contain the following content:

· Information about products

· Information about services

· Advertising

· Customer contact

Every user is free to publish personal data through activities.

The legal basis for the processing of personal data for the purpose of communicating with customers and interested parties is Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interest is to respond to your enquiry in the best possible way and to be able to provide the requested information.

If the contact is aimed at the conclusion of a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b GDPR.

You can object to the processing of your personal data that we collect in the context of your use of our corporate presence at any time and assert your rights as a data subject as set out in the «Your rights» section of this privacy policy. To do so, please send us an informal email to info@stepsystems.de. You can find more information on the processing of your personal data by YouTube and the corresponding objection options here:

YouTube: https://policies.google.com/privacy?gl=DE&hl=en

Use of company presences in professional networks

1. scope of data processing

The company website is used for applications, information/PR and active sourcing. We have no information on the processing of your personal data by the companies jointly responsible for the company website. Further information on this can be found in the privacy policy of:

· LinkedIn

We provide information on our website and offer users the opportunity to communicate with us.

The company website is used for applications, information/PR and active sourcing.

We have no information on the processing of your personal data by the companies jointly responsible for the company’s website. Further information can be found in the privacy policy of:

LinkedIn:

https://www.linkedin.com/legal/privacy-policy

If you carry out an action on our company website (e.g. comments, posts, likes, etc.), you may make personal data (e.g. real name or photo of your user profile) public.

2. legal basis for data processing

The legal basis for the processing of personal data for the purpose of communicating with customers and interested parties is Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interest is to respond to your enquiry in the best possible way and to be able to provide the requested information.

If the contact is aimed at the conclusion of a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b GDPR.

3. purpose of data processing

The purpose of our company website is to inform users about our services. Every user is free to publish personal data through activities.

4. duration of storage

The data generated by the company website is not stored in our own systems.

5. exercise your rights

You can object to the processing of your personal data that we collect in the context of your use of our corporate presence at any time and assert your rights as a data subject as set out in the «Your rights» section of this privacy policy. To do so, please send us an informal email to the email address stated in this privacy policy.

Further information on exercising your rights can be found here:

LinkedIn:

https://www.linkedin.com/legal/privacy-policy

Hosting

The website is hosted on our own servers. Third parties do not have access to server log files.

The servers automatically collect and store information in so-called server log files, which your browser automatically transmits when you visit the website. The information stored is

· Information about the browser type and version used

· The user’s operating system

· Date and time of access

· Websites from which the user’s system accesses our website

· Websites that are accessed by the user’s system via our website

This data is not merged with other data sources. This data is collected on the basis of Art. 6 para. 1 lit. f GDPR. Our legitimate interest in processing this data is to display our website without errors and to optimise its functions.

The website server is geographically located in Germany.

Geotargeting

We use the IP address and other information provided by the user (in particular postcode as part of the registration or order) for regional targeting (so-called «geotargeting»).

Regional targeting is used, for example, to automatically show you regional offers or adverts that are often more relevant to users. The legal basis for the use of the IP address and any other information provided by the user (in particular postcode) is Art. 6 para. 1 lit. f GDPR, based on our interest in ensuring a more precise target group approach and thus providing offers and advertising with greater relevance for users.

Part of the IP address and the additional information provided by the user (in particular the postcode) is only read out and not stored separately.

You can prevent geotargeting by using a VPN or proxy server, for example, which prevent precise localisation. In addition, depending on the browser you are using, you can also deactivate location localisation in the corresponding browser settings (if supported by the respective browser).

We use geotargeting on our website for the following purposes:

· Customer approach

· Advertising purposes

Integrated third-party services

We use various service providers to provide the services we offer on the website.

In general, we have a legitimate interest in sharing your data with the relevant service providers if these services are essential for the provision of the basic service offered on the website in order to provide the relevant website service.

If such services are required for additional services, extended functions or additional purposes, your personal data will only be passed on to service providers if you give your consent.

You can withdraw your consent to the use of integrated third-party services at any time and manage your consent settings here: https://www.stepsystems.de/datenschutz/

Use of meta pixels

1. scope of the processing of personal data

We use the meta pixel of Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland (hereinafter referred to as Facebook) on our online presence. With its help, we can track the actions of users after they have seen or clicked on a Facebook advert. This allows personal data to be stored and analysed, in particular the user’s activity (in particular which pages have been visited and which elements have been clicked on), device and browser information (in particular the IP address and operating system), data about the advertisements displayed (in particular which advertisements have been displayed and whether the user has clicked on them) and also data from advertising partners (in particular pseudonymised user IDs). This enables us to record the effectiveness of Facebook adverts for statistical and market research purposes.
Data may be transmitted to Facebook servers in the USA.
The data collected in this way is anonymous to us, i.e. we do not see the personal data of individual users. However, this data is stored and processed by Facebook. Facebook can link this data to your Facebook account and also use it for its own advertising purposes in accordance with Facebook’s data usage policy.
Further information on the processing of data by Facebook can be found here:
https://de-de.facebook.com/policy.php

2 Purpose of the data processing

The meta pixel is used to analyse and optimise advertising measures.

3. legal basis for the processing of personal data

The legal basis for the processing of users’ personal data is generally the consent of the user in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR.

4. duration of storage

Your personal information will be stored for as long as necessary to fulfil the purposes described in this Privacy Policy or as required by law, e.g. for tax and accounting purposes.

5 Exercising your rights

You have the right to revoke your declaration of consent under data protection law at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
You can prevent the collection and processing of your personal data by Facebook by preventing the storage of third-party cookies on your computer, using the «Do Not Track» function of a supporting browser, deactivating the execution of script code in your browser or installing a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com) in your browser.
Further information on objection and removal options vis-à-vis Facebook can be found at
https://de-de.facebook.com/policy.php

Use of Google AdWords

1. scope of the processing of personal data

We use Google AdWords from Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA and the representative in the Union Google Ireland Ltd, Gordon House, Barrow Street, D04 E5W5, Dublin, Ireland (hereinafter referred to as: Google). We use this service to place adverts. Google places a cookie on your computer. This allows personal data to be stored and analysed, in particular the user’s activity (in particular which pages have been visited and which elements have been clicked on), device and browser information (in particular the IP address and operating system), data about the advertisements displayed (in particular which advertisements have been displayed and whether the user has clicked on them ) and also data from advertising partners (in particular pseudonymised user IDs).
Further information on the processing of data by Google can be found here:
https://policies.google.com/privacy?gl=DE&hl=de

2 Purpose of data processing

We only receive information about the total number of users who have responded to our advert. No information is passed on with which we could identify you. The use is not for tracking purposes.

3. legal basis for the processing of personal data

The legal basis for the processing of users’ personal data is generally the consent of the user in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR.

4. duration of storage

Your personal information will be stored for as long as necessary to fulfil the purposes described in this Privacy Policy or as required by law, e.g. for tax and accounting purposes.

5 Exercising your rights

You have the right to withdraw your declaration of consent under data protection law at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
You can prevent the collection and processing of your personal data by Google by preventing the storage of third-party cookies on your computer, using the «Do Not Track» function of a supporting browser, deactivating the execution of script code in your browser or installing a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com) in your browser.
You can use the following link to deactivate the use of your personal data by Google:
https://adssettings.google.de
Further information on objection and removal options vis-à-vis Google can be found at
https://policies.google.com/privacy?gl=DE&hl=de

Use of Google Ads Remarketing

1. scope of the processing of personal data

We use Google Ads Remarketing from Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA and the representative in the Union Google Ireland Ltd, Gordon House, Barrow Street, D04 E5W5, Dublin, Ireland (hereinafter referred to as: Google). Google Remarketing is used to retarget visitors to the online presence for advertising purposes via Google Ads adverts. Google Ads Remarketing can be used to create target groups («similar target groups») that have, for example, accessed certain pages. This makes it possible to identify the user on other online presences and display targeted advertising. Google places a cookie on the user’s computer. This allows personal data to be stored and analysed, in particular the user’s activity (in particular which pages have been visited and which elements have been clicked on), device and browser information (in particular the IP address and operating system), data about the advertisements displayed (in particular which advertisements have been displayed and whether the user has clicked on them) and also data from advertising partners (in particular pseudonymised user IDs).
Further information on the processing of data by Google can be found here:
https://policies.google.com/privacy?gl=DE&hl=de

2 Purpose of data processing

The purpose of processing personal data is to address a specific target group. The cookies stored on the user’s end device recognise them when they visit an online presence and can therefore show them interest-based advertising.

3. legal basis for the processing of personal data

The legal basis for the processing of users’ personal data is generally the consent of the user in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR.

4. duration of storage

Your personal information will be stored for as long as necessary to fulfil the purposes described in this Privacy Policy or as required by law, e.g. for tax and accounting purposes.

5 Exercising your rights

You have the right to withdraw your declaration of consent under data protection law at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
You can prevent the collection and processing of your personal data by Google by preventing the storage of third-party cookies on your computer, using the «Do Not Track» function of a supporting browser, deactivating the execution of script code in your browser or installing a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com) in your browser.
You can also prevent the collection of data generated by the cookie and related to your use of the online presence (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link:
https://tools.google.com/dlpage/gaoptout?hl=de
You can deactivate the use of your personal data by Google by clicking on the following link
https://adssettings.google.de
Further information on objection and removal options vis-à-vis Google can be found at
https://policies.google.com/privacy?gl=DE&hl=de

Use of Google Analytics 4 (GA 4)

1. scope of the processing of personal data

We use Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as: Google).

Google Analytics analyses, among other things, how website visitors use our website. Google places cookies on your end device. During the visit, user behaviour is recorded in the form of «events». This allows personal data to be stored and analysed, including

· First visit to the website

· Interaction with the website, usage path

· Clicks on external links

· Video usage

· File downloads

· Advertising impressions and clicks

· Scroll behaviour (if to end of page)

· Searches on the website

· Language selection

· Page visits

· Location (region)

· Your IP address (in abbreviated form)

· technical information about your browser and the end devices you use (e.g. language setting, screen resolution)

· Your internet provider

· Referrer URL

We use the User ID function. With the help of the user ID, we can assign a unique, permanent ID to one or more sessions (and the activities within these sessions) and analyse user behaviour across devices.

We use Google Signals. This enables Google Analytics to collect additional information about users who have activated personalised ads (interests and demographic data) and ads can be delivered to these users in cross-device remarketing campaigns.

IP address anonymisation is activated by default in GA 4. This means that your IP address will be truncated by Google within the member states of the European Union or other signatory states to the Agreement on the European Economic Area. As an exception, only in rare cases will the full IP address be transmitted to a Google server in the USA and truncated there. Google states that the IP address transmitted by your browser will not be merged with other Google data in the context of Google Analytics.

Further information on the processing of data by Google can be found here: https://policies.google.com/privacy

2. purpose of data processing

We use GA 4 to analyse the use of our online presence and to generate reports on the activities on our website. The reports are used to analyse the performance of our website and to target advertising to people who have already shown an initial interest by visiting our website.

3. legal basis for the processing of personal data

The legal basis for the processing of users’ personal data is generally the consent of the user in accordance with Art. 6 para. 1 sentence 1 lit. a) GDPR.

4. duration of storage

Your personal data will be deleted after 2 months. This deletion takes place automatically once a month.

5. exercise your rights

You can prevent the collection and processing of your personal data by Google by preventing the storage of third-party cookies on your computer, using the «Do Not Track» function of a supporting browser, deactivating the execution of script code in your browser or installing a script blocker such as NoScript (https://noscript.net) or Ghostery (https://www.ghostery.com) in your browser.

Further information on objection and removal options vis-à-vis Google can be found at: https://policies.google.com/technologies/partner-sites

You can also prevent the collection of data generated by the cookie and related to your use of the online presence (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de

You can use the following link to deactivate the use of your personal data by Google: https://adssettings.google.de

Use of Google Maps

1. scope of the processing of personal data

We use the online map service Google Maps from Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA and the representative in the Union Google Ireland Ltd, Gordon House, Barrow Street, D04 E5W5, Dublin, Ireland (hereinafter referred to as: Google). We use the Google Maps plugin to visualise geographical data and embed it on our online presence. By using Google Maps on our online presence, information about the use of our online presence, your IP address and addresses entered in the route planning function are transmitted to a Google server and stored there.
Further information on the processing of data by Google can be found here:
https://policies.google.com/privacy?gl=DE&hl=de

2 Purpose of the data processing

The use of the Google Maps plug-in serves to improve user-friendliness and an appealing presentation of our online presence.

3. legal basis for the processing of personal data

The legal basis for the processing of users’ personal data is generally the consent of the user in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR.

4. duration of storage

Your personal information will be stored for as long as necessary to fulfil the purposes described in this Privacy Policy or as required by law.

5 Exercising your rights

Use of Google ReCaptcha

1. scope of the processing of personal data

We use Google ReCaptcha from the provider Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA and the representative in the Union Google Ireland Ltd, Gordon House, Barrow Street, D04 E5W5, Dublin, Ireland. This tool is designed to check whether a data entry is compliant and has not been made by a bot, and Google ReCaptcha analyses and authenticates the behaviour of an online presence visitor with regard to various characteristics. This allows personal data to be stored and analysed, in particular the user’s activity (especially mouse movements and which elements have been clicked on) and device and browser information (especially time, IP address and operating system).

The data is not associated with data that may be collected or used in connection with the parallel use of authenticated Google services such as Gmail.

Further information on the processing of data by Google can be found here:

https://policies.google.com/privacy?gl=DE&hl=de

2. purpose of data processing

The use of Google ReCaptcha serves to protect our online presence from misuse.

3. legal basis for the processing of personal data

The legal basis for the processing of users’ personal data is generally the consent of the user in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR.

4. duration of storage

Your personal information will be stored for as long as necessary to fulfil the purposes described in this Privacy Policy or as required by law, e.g. for tax and accounting purposes.

5. exercise your rights

You can prevent the collection and processing of your personal data by Google by preventing the storage of third-party cookies on your computer, using the «Do Not Track» function of a supporting browser, deactivating the execution of script code in your browser or installing a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com) in your browser.

You can use the following link to deactivate the use of your personal data by Google:

https://adssettings.google.de

Further information on objection and removal options vis-à-vis Google can be found at

https://policies.google.com/privacy? gl=DE&hl=en «

Use of MailChimp

1. scope of the processing of personal data

We use the service provider MailChimp of The Rocket Science Group, LLC, 512 Means Street, Suite 404, Atlanta, GA 30318, USA (hereinafter referred to as: MailChimp) to send our newsletter. MailChimp is a provider of email marketing and enables us to communicate directly with potential customers via email newsletters. If you register for the newsletter, the data you enter when registering for the newsletter will be transmitted to MailChimp and stored there. This allows further personal data to be stored and analysed, in particular the user’s activity (in particular which pages have been visited and which elements have been clicked on) and device and browser information (in particular the IP address and operating system).
Your data is also stored by MailChimp for this purpose. Your data will not be passed on to third parties for the purpose of receiving the newsletter and MailChimp does not obtain the right to pass on your data. After registration, MailChimp will send you an email to confirm your registration. Furthermore, MailChimp offers various options for analysing how the sent newsletters are opened and used, e.g. to how many users an email was sent, whether emails were rejected and whether users unsubscribed from the list after receiving an email.
Further information on the processing of data by MailChimp can be found here:
https://MailChimp.com/legal/privacy/

2 Purpose of data processing

The personal data collected when registering for the newsletter will be used exclusively for sending our newsletter, possibly for invitations to events and, if you are already our customer, for our customer mail. Furthermore, subscribers to the newsletter may be informed by email if this is necessary for the operation of the newsletter service or a registration in this regard, as could be the case in the event of changes to the newsletter offer or changes to the technical circumstances.

3. legal basis for the processing of personal data

The legal basis for the processing of users’ personal data is generally the consent of the user in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR.

4. duration of storage

Your personal information will be stored for as long as necessary to fulfil the purposes described in this Privacy Policy or as required by law. In addition, you can contact MailChimp and request the deletion of your data.

5 Exercising your rights

You have the right to revoke your declaration of consent under data protection law at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
You can revoke your consent to the storage of data and its use for sending the newsletter by MailChimp at any time. You can revoke your consent at any time by sending an email to MailChimp or by clicking on the link provided in every newsletter.
Further information on objection and removal options vis-à-vis MailChimp can be found at
https://MailChimp.com/legal/privacy/

Use of Wordfence Security

1. scope of the processing of personal data

Our online presence uses functions of Defiant Inc, 800 5th Ave, Suite 4100, Seattle, WA 98104, USA (hereinafter referred to as: Defiant). Wordfence Security secures our online presence and thus protects visitors to the online presence from viruses and malware. When you visit a page with a plugin, a direct connection is established between your computer and the Defiant server. The plugin sets cookies to recognise whether the visitor is a human or a bot. This allows to store and analyse additional personal data, in particular device and browser information (especially the IP address and operating system).

It is possible to evaluate the behaviour from the notifications sent (e.g. how often a page is accessed). IP addresses are stored on the Wordfence servers to protect against brute force and DDoS attacks or comment spam. IP addresses categorised as harmless are placed on a white list.

Further information on the processing of data by Defiant can be found here:

https://www.wordfence.com/privacy-policy/

2. purpose of data processing

The online presence uses the plug-in to protect against viruses and malware and to defend against attacks by computer criminals.

3. legal basis for the processing of personal data

The legal basis for the processing of users’ personal data is generally the consent of the user in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR.

4. duration of storage

Your personal information will be stored for as long as necessary to fulfil the purposes described in this Privacy Policy or as required by law, e.g. for tax and accounting purposes.

5. exercise your rights

You can prevent the collection and processing of your personal data by Wordfence Security by preventing the storage of third-party cookies on your computer, using the «Do Not Track» function of a supporting browser, deactivating the execution of script code in your browser or installing a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com) in your browser.

Further information on objection and removal options vis-à-vis Wordfence Security can be found at:

https://www.wordfence.com/privacy-policy/

Use of WPML

1. scope of the processing of personal data

We use WPML from OnTheGoSystems Limited, 22/F 3 Lockhart Road, Wanchai, Hong Kong (hereinafter referred to as: WPML). WPML is a multilingual plugin for WordPress. We use WPML to display our online presence in different languages. When you visit our online presence, WPML stores a cookie on your end device to save the language setting you have selected. This allows personal data to be stored and analysed, in particular the user’s activity (in particular which pages have been visited and which elements have been clicked on) as well as device and browser information (in particular the IP address and operating system).
Further information on the processing of data by WPML can be found here:
https://wpml.org/de/documentation-3/privacy-policy-and-gdpr-compliance/

Purpose of data processing of personal data

The purpose of using WPML is to be able to display our online presence in multiple languages.

3. legal basis for the processing of personal data

The legal basis for data processing is Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interest lies in addressing visitors to our online presence in their native language.

4. duration of storage

WPML stores cookies on your end device. Information on the storage duration of cookies can be found at: https://wpml.org/documentation/privacy-policy-and-DSGVO-compliance

5 Exercising your rights

You can prevent the collection and processing of your personal data by WPML by preventing the storage of third-party cookies on your computer, using the «Do Not Track» function of a supporting browser, deactivating the execution of script code in your browser or installing a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com) in your browser.
Further information on objection and removal options in relation to WPML can be found at
https://wpml.org/de/documentation-3/privacy-policy-and-gdpr-compliance/

Use of Google Tag Manager

1. scope of the processing of personal data

We use the Google Tag Manager (https://www.google.com/intl/de/tagmanager/) of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA and the representative in the Union Google Ireland Ltd, Gordon House, Barrow Street, D04 E5W5, Dublin, Ireland (hereinafter referred to as: Google). Google Tag Manager can be used to manage and bundle tags from Google and third-party services and embed them on an online presence. Tags are small code elements on an online presence that are used, among other things, to measure visitor numbers and behaviour, to record the impact of online advertising and social channels, to use remarketing and targeting and to test and optimise online presences. When a user visits the online presence, the current tag configuration is sent to the user’s browser. It contains instructions on which tags should be triggered. Google Tag Manager triggers other tags, which in turn may collect data. Information on this can be found in the sections on the use of the corresponding services in this privacy policy. Google Tag Manager does not access this data.
Further information on Google Tag Manager can be found at https://www.google.com/intl/de/tagmanager/faq.html and in Google’s privacy policy: https://policies.google.com/privacy?hl=de

2 Purpose of the data processing

The purpose of the processing of personal data is the collection and clear management and efficient integration of the services of third-party providers.

3. legal basis for the processing of personal data

The legal basis for the processing of users’ personal data is generally the consent of the user in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR.

4. duration of storage

Your personal information will be stored for as long as necessary to fulfil the purposes described in this privacy policy or as required by law. Advertising data in server logs is anonymised by Google deleting parts of the IP address and cookie information after 9 and 18 months respectively.

5 Exercising your rights

You have the right to withdraw your declaration of consent under data protection law at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
You can prevent the collection and processing of your personal data by Google by preventing the storage of third-party cookies on your computer, using the «Do Not Track» function of a supporting browser , deactivating the execution of script code in your browser or installing a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com) in your browser.
You can also prevent the collection of data generated by the cookie and related to your use of the online presence (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link:
https://tools.google.com/dlpage/gaoptout?hl=de
You can deactivate the use of your personal data by Google by clicking on the following link
https://adssettings.google.de
Further information on objection and removal options vis-à-vis Google can be found at
https://policies.google.com/privacy?gl=DE&hl=de

Use of Google My Business

1. scope of the processing of personal data

We use the Google My Business marketing platform of Google LLC, Gordon House, Barrow Street, 4, Dublin, Ireland (hereinafter referred to as Google).
We use Google My Business for customer acquisition with optimised company profiles, including the possibility of statistical evaluation and contacting users.
Google cookies are stored on your end device.
In particular, the following personal data is processed by Google My Business:

· Contact data / Company data

· Address data

· E-mail addresses

· Telephone number

· Opening hours

· Location data

· Credit card details

· Reviews

· IP address

Data may be transmitted to Google servers in the USA. Further information on the processing of data by Google My Business can be found here:
https://policies.google.com/privacy

2 Purpose of data processing

We use Google My Business to develop statistical methods and to improve user behaviour.

3. legal basis for the processing of personal data

The legal basis for data processing is Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interest lies in the purposes of data processing mentioned under 2.

4. duration of storage

Your personal information will be stored for as long as necessary to fulfil the purposes described in this Privacy Policy or as required by law, e.g. for tax and accounting purposes.

5 Exercising your rights

Use of HERE Geocoding and Search API

1. scope of the processing of personal data

We use functionalities of the HERE Geocoding and Search API of HERE Global B.V., Kennedyplein 222-226, 5611, Eindhoven, The Netherlands (hereinafter referred to as: here).
The service is used to enable users to find the geocoordinates of a known address, place, locality or administrative area, even if the query is incomplete or partially incorrect. The result is a complete string of postal address and address details.
Cookies from here are stored on your end device.
In particular, the following personal data is processed by here:

· Registration data

· Contact details

· Location data and location information

· Search terms

· Information about the use of the service

Further information on the processing of data by here can be found here:
https://legal.here.com/de-de/privacy/policy

2 Purpose of the data processing

We use Geocoding and Search API to obtain geocoordinates for addresses, localities, administrative areas, locations and known landmarks.

3. legal basis for the processing of personal data

The legal basis for data processing is Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interest lies in the purposes of data processing mentioned under 2.

4. duration of storage

Your personal information will be stored for as long as necessary to fulfil the purposes described in this privacy policy or as required by law, e.g. for tax and accounting purposes. Cookies expire after the respective session.
Data, such as records of your activities within the application, are usually only kept for a short period of time before being anonymised or pseudonymised.

5 Exercising your rights

You can prevent the collection and processing of your personal data by here by preventing the storage of third-party cookies on your computer, using the «Do Not Track» function of a supporting browser, deactivating the execution of script code in your browser or installing a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com) in your browser.
Further information on objection and removal options vis-à-vis here can be found at
https://legal.here.com/de-de/privacy/policy

Use of WP Statistics

1. scope of the processing of personal data

We use the web analytics service WP Statistics for WordPress websites, provided by Verona Labs, Tornimäe 5, 10145 Tallinn, Estonia. WP Statistics is used to gain insights into the behaviour of visitors to our website. It collects and processes data, including user activity (such as pages visited and elements clicked on) as well as device and browser information (including IP addresses, which are anonymised to protect privacy, and operating system). This enables us to analyse personal data in order to improve the functionality and user experience of our website.

2. purpose of data processing

The use of WP Statistics aims to improve the user-friendliness and performance of our website. By analysing the use of our site, we can optimise our content, improve navigation and ensure a better user experience.

3. legal basis for the processing of personal data

The legal basis for the processing of personal data by WP Statistics is the consent given by the user in accordance with Art. 6 para. 1 (a) GDPR.

4. duration of storage

Your personal data collected by WP Statistics is only stored for as long as is necessary to analyse and improve the website. This period is determined by the specific analysis requirements. As soon as the data is no longer required for these purposes, it is immediately deleted or anonymised.

5. exercise your rights

You have the right to revoke your declaration of consent under data protection law at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. You can prevent the collection and processing of your personal data by WP Statistics by configuring your browser to block cookies, using the «Do Not Track» function of a supporting browser, disabling the execution of script code in your browser or using a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com) in your browser.

Use of Borlabs Cookie

1. scope of the processing of personal data

We use Borlabs Cookie, a cookie consent management tool provided by Borlabs GmbH, 22305 Hamburg, Germany. Borlabs Cookie helps us to manage and document the consents of website visitors for cookies and similar technologies. When visitors interact with the consent banner, Borlabs Cookie processes data including their cookie preferences, device and browser information, IP address and consent history. This data is essential for us to comply with legal requirements and to respect the privacy preferences of our visitors.

2. purpose of data processing

The main purpose of using Borlabs Cookie is to enable our website to comply with legal obligations under the GDPR and the TDDDG. By effectively managing cookie consents, we ensure that our website respects our visitors’ choices regarding privacy and the use of cookies and related technologies.

3. legal basis for the processing of personal data

The processing of personal data by Borlabs Cookie is based on the legal requirement to obtain and document the consent of website visitors for the use of cookies and similar technologies in accordance with Art. 6 para. 1 (c) GDPR and § 25 TDDDG.

4. duration of storage

The personal data collected by Borlabs Cookie is stored for as long as is necessary to document consent and fulfil legal obligations. The retention period is determined by legal requirements for the documentation of consent. The data is securely deleted as soon as it is no longer required for its intended purpose or when the legal retention periods expire.

5. exercise your rights

For more information about how Borlabs Cookie processes personal data and about visitors’ rights, please refer to Borlabs Cookie’s privacy policy at: Borlabs Privacy Policy.

Use of Quform

1. scope of the processing of personal data

We use Quform, a plugin for creating forms for WordPress websites, developed by ThemeCatcher Ltd. Quform is designed to create and manage different types of forms on our website. It processes data including user input into forms (such as contact details, feedback and enquiries) as well as users’ device and browser information. This data collection is critical for us to effectively process form submissions and ensure that the forms on our website are responsive and user-friendly.

2. purpose of data processing

The main purpose of using Quform is to facilitate user interactions and form submissions on our website. By analysing user submissions and interactions with our forms, we can improve the functionality of our website, respond efficiently to user requests and better tailor our communications to users’ needs and preferences.

3. legal basis for the processing of personal data

The processing of personal data by Quform is based on the user’s consent in accordance with Art. 6 para. 1 (a) GDPR.

4. duration of storage

The personal data collected by Quform is only stored for as long as necessary for the purpose of form management, user interaction and response. The retention period is determined by the nature of the interaction and our administrative requirements. The data is securely deleted or anonymised as soon as it is no longer needed for its intended purpose or if a user requests its removal.

5. exercise your rights

You have the right to withdraw your consent to the processing of your personal data at any time in accordance with data protection laws. Withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal. You can exercise your rights, including requesting the deletion or modification of your data, by contacting us directly, especially in cases where you have previously submitted personal data via our Quform forms. For more information about how ThemeCatcher processes personal data and about visitors’ rights, please refer to ThemeCatcher’s privacy policy at: https://www.themecatcher.net/privacy-policy

This privacy policy was created with the support of DataGuard.

Política de privacidad

Privacy Policy | STEP Systems GmbH

Who we are

Contacting the data protection officer

What do we mean by legal basis?

Data sharing and international transfer

Your rights

1. the right to information (Art. 15 GDPR)

2. right to rectification (Art. 16 GDPR)

3. right to restriction of processing (Art. 18 GDPR)

4. right to erasure («right to be forgotten») (Art. 17 GDPR)

5. right to data portability (Art. 20 GDPR)

6. right to object to certain data processing (Art. 21 GDPR)

7. right to lodge a complaint with a supervisory authority

Provision of the website and creation of log files

1. description and scope of data processing

2. purpose of data processing

3. legal basis for data processing

4. duration of storage

5. exercise your rights

Use of cookies

1. description and scope of data processing

2. purpose of data processing

3. legal basis for data processing

4. exercise your rights

Newsletter

1. description and scope of data processing

2. purpose of data processing

3. legal basis for data processing

4. duration of storage

5. exercise your rights

Contact form

1. description and scope of data processing

2. purpose of data processing

3. legal basis for data processing

4. duration of storage

5. exercise your rights

Corporate presence

Use of company presences in professional networks

1. scope of data processing

2. legal basis for data processing

3. purpose of data processing

4. duration of storage

5. exercise your rights

Hosting

Geotargeting

Integrated third-party services