1. Introduction
Thank you for visiting our website. We take privacy very seriously and strive to protect your personal data in the context of our website offer.
By personal data, we understand all data about the personal and factual circumstances of a natural person. Personal data collected on our website is used solely for our own purposes.

2. Legal basis of data processing
Consent: If your consent has been obtained for processing of personal data, Article 6 para. 1 lit. a EU General Data Protection Regulation (GDPR) is the legal basis for the data processing.
Contract: For the processing of personal data that is required to fulfill a contract of which you are a party, Article 6 para. 1 lit. b GDPR is the legal basis. This also applies to processing operations which are required to implement pre-contractual measures.
Legal duty: If the processing of personal data is required in order to fulfill a legal obligation to which our company is subject, Article 6 para. 1 lit. c GDPR is the legal basis.
If vital interests of you or any other natural person require the processing of personal data, Article 6 para. 1 lit. d GDPR is the legal basis.
Legitimate interest: If the processing is necessary to safeguard the legitimate interests of our company or a third party and if the interests, fundamental rights and fundamental freedoms of the data subject do not prevail over the former interest, then Article 6 para. 1 lit. f GDPR is the legal basis for the processing. The legitimate interest of our company lies in the execution of our business activities.

3. Affected rights
As part of our data processing, your personal data is processed. You are entitled to the rights from the third chapter of the GDPR vis-à-vis our company.
We respect the rights to information, correction, restriction of processing, deletion or portability regarding your personal data. You can claim these rights as follows:

Right to information
You have the right to request a confirmation from us as to whether we process personal data that concerns you. If this is the case, you have a right to receive information about this personal data as well as the following information:
(a) the processing purposes;
(b) the categories of personal data being processed;
(c) the recipients or categories of recipients to whom the personal data has been or will be disclosed, particularly in the case of recipients in third countries or of international organizations;
(d) if possible, the planned duration for which the personal data will be stored or, if that is not possible, the criteria for determining that duration;
(e) the existence of a right to the correction or deletion of your personal data or to the restriction of the processing by the responsible party or of a right to object to such processing;
(f) the existence of a right of appeal to a supervisory authority;
(g) if the personal data is not collected from the data subject, all available information about the source of the data;
(h) the existence of automated decision-making, including profiling, as referred to in Article 22 para. 1 and 4 and, at least in such cases, meaningful information about the logic involved as well as the scope and intended impact of such processing upon the data subject.

If personal data is transferred to a third country or to an international organization, you have the right to be informed about the appropriate safeguards pursuant to Article 46 GDPR in connection with the transfer.
We will provide you with a copy of the personal data which is the subject of the processing. For any additional copies that you request, we may charge a reasonable fee based on administrative costs. If you submit the request for information electronically, we have to provide the information in a common electronic format, unless otherwise stated.
The right to receive a copy may not affect the rights and freedoms of other people.

Right to correction
You also have the right to demand the immediate correction of incorrect personal data that concerns you. Taking into account the purposes of the processing, you have the right to request the completion of incomplete personal data, including by means of a supplementary statement.

Right to Deletion (“Right to be forgotten”)
You also have the right to ask us to promptly delete your personal data; moreover, we are obliged to delete personal data immediately if one of the following cases applies:
(a) the personal data is no longer necessary for the purposes for which it was collected or otherwise processed.
(b) you revoke your consent upon which the processing pursuant to Article 6 I lit. a GDPR or Article 9 para. 2 lit. a is based and there is no other legal basis for the processing.
(c) you object to the processing pursuant to Article 21 para. 1 and there are no primary legitimate grounds for the processing or you object to the processing pursuant to Article 21 para. 2.
(d) the personal data has been processed unlawfully.
(e) the deletion of the personal data is required in order to fulfill a legal obligation pursuant to Union or national law to which we are subject.
(f) the personal data has been collected in relation to services offered by the information society pursuant to Article 8 para. 1.

(2) We have made the personal data public and we are obliged to delete it pursuant to para. 1, we shall take appropriate measures, including technical ones, and taking into account available technology and implementation costs, to inform the parties that are responsible for processing the personal data that you have requested the deletion of all links to or copies of this personal data. This shall not apply if the processing is required: (a) to exercise the right to freedom of expression and information; (b) to fulfill a legal obligation which requires the processing pursuant to the law of the Union or of the Member States to which we are subject or for the performance of a task of public interest or in the exercise of official authority that is assigned to us; (c) for reasons of public interest in the field of public health pursuant to Article 9 para. 2 lit. h and i as well as Article 9 para. 3; (d) for archival purposes of public interest, for scientific or historical research purposes or for statistical purposes pursuant to Article 89 para. 1, provided that the right referred to in para. 1 is likely to render impossible or seriously impair the achievement of the objectives of that processing, or (e) for the asserting, exercise or defense of legal claims.

Right to the restriction of the processing
(1) The data subject has the right to require the responsible party to restrict the processing if one of the following conditions is met:
(a) the accuracy of the personal data is disputed by the data subject for a period of time that allows the responsible party to review the accuracy of the personal data
(b) the processing is unlawful and the data subject declines the deletion of the personal data and instead requests that the use of the personal data be restricted;
(c) the responsible party no longer needs the personal data for the purposes of the processing, but the data subject requires this data in order to assert, exercise or defend legal claims, or
(d) the data subject has lodged an objection to the processing pursuant to Article 21 para. 1 until such time as it is established whether the legitimate reasons of the responsible party predominate vis-à-vis those of the data subject.

(2) If the processing pursuant to para. 1 has been restricted, this personal data may only be processed – apart from its storage – with the consent of the data subject or for the purposes of asserting, exercising or defending legal claims or protecting the rights of another natural or legal person or for the sake of an important public interest of the Union or of a Member State. 4.5.2016 L 119/44 Official Journal of the European Union DE

(3) A data subject who has effected a restriction of the processing pursuant to para. 1 shall be informed by the responsible party before the restriction is lifted.

Article 19 Obligation to provide notification regarding the correction or deletion of personal data or the restriction of processing All recipients to whom/to which personal data has been disclosed shall be informed by the responsible party of any correction or deletion of said personal data or of any restriction of processing pursuant to Art. 16, 17 para. 1 and Art. 18, unless this proves to be impossible or involves disproportionate effort. The responsible party shall inform the data subject of these recipients if the data subject so requests.

Article 20 Right to data portability
(1) The data subject has the right to have his personal data that he provided to a responsible party sent to himself in a structured, common and machine-readable format, as well as the right to transfer that information to another responsible party, without interference from the original responsible party to whom personal data had been provided, as long as
(a) the processing is based on consent pursuant to Article 6 para. 1 lit. a or Article 9 para. 2 lit. a or a contract pursuant to Article 6 para. 1 lit. b, and
(b) the processing is performed by automated means.

(2) When exercising his data portability rights pursuant to para. 1, the data subject has the right to have the personal data transmitted directly from one responsible party to another, as far as this is technically feasible.

(3) Exercise of the right pursuant to para. 1 of this article is without prejudice to Art. 17. This right does not apply to any processing that is necessary for the performance of a task in the public interest or in the exercise of official authority that is delegated to the responsible party.

(4) The right pursuant to para. 2 is not permitted to affect the rights and freedoms of other persons.
You also have the right to consult our Data Protection Officer regarding the aforementioned rights as well as any questions related to the processing of your personal data.
In addition, our clients may assert their right to appeal to the relevant regulatory authorities.

Right of objection
You have the right at any time, for reasons arising out of your particular situation, to object to the processing of your personal data pursuant to Art. 6 para. 1 lit. e or f; this also applies to any profiling that is based upon this provision. The responsible party will then no longer process the personal data unless the responsible party can demonstrate compelling legitimate grounds for the processing that outweigh the interests, rights and freedoms of your person or the processing serves to assert, exercise or defend legal claims.
(2) If your personal data is processed in order to perform direct advertising, you shall have the right to object at any time to the processing of your personal data for the purpose of such advertising; this also applies to profiling insofar as it is related to such direct advertising.
(3) If you object to processing for direct advertising purposes, your personal data will no longer be processed for that purpose.
(4) In connection with the use of information society services, you may exercise your right of refusal, notwithstanding Directive 2002/58/EC, by means of automated procedures which make use of technical specifications.
(5) You have the right, for reasons arising out of your particular situation, to object to the processing of your personal data for scientific or historical research purposes or for statistical purposes pursuant to Art. 89 para. 1, unless the processing is necessary to fulfill a task which is in the public interest.
Without prejudice to any other administrative or judicial remedy, you are entitled to file a complaint with a supervisory authority if you believe that the processing of personal data concerning you violates the GDPR.

4. Web server logs
In the context of using our website, the connection information is stored in the server log files.
This information includes:
• the IP address of the calling system
• the browser information, such as the utilized operating system and screen resolution
• the visited web page
• the originating web site
• the time of the call
The web server logs are only processed for security purposes.
We only use the log data for statistical evaluations for the purpose of operation, safety and the optimization of the offer. However, we reserve the right to review the log data retrospectively if there is a justified suspicion of unlawful use on the basis of concrete evidence.

5. Contact form
In the contact form, you have the possibility to send any data to us that you choose to. The data is forwarded by our web server via e-mail to the e-mail inbox of our company. Please note that communication via the contact form is not encrypted. When sending confidential communication, please use a secure communication channel for your own sake.

6. Cookies
This website uses cookies. Cookies are text files that are stored on your end device. Cookies can be read, transferred and changed from the website when the website is accessed. We only use cookies with random, pseudonymous identification numbers. These identification numbers are used to evaluate your usage behavior on our website. At no time is the usage profile assigned to the name of a natural person. If you use special functions (such as the shopping cart or “stay logged in”) on our website, cookies will also be used for these functions.
It is always possible to opt out from the placing of cookies by changing the setting in your Internet browser. Placed Cookies can be deleted. Please note that you might not be able to use all the features of our website if cookies are disabled.
You can find the exact functions of the cookies in the more detailed information contained in this Data Protection Statement.

7. Google Analytics
This website uses Google Analytics, a web analytics service provided by Google Inc. (“Google”). Google Analytics uses so-called “cookies”, text files that are stored on your computer that allow an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. However, if IP anonymization is activated on this website, your IP address will be shortened by Google beforehand within member states of the European Union or other parties to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity as well as to provide the website operator with other services related to website activity and Internet usage. The IP address provided by your browser as part of Google Analytics will not be merged with other Google data. You can prevent the storage of cookies by setting your browser software accordingly; however, please note that if you do this, you may not be able to use all the features of this website to the fullest extent possible. In addition, you can prevent the collection by Google of the data generated by the cookie and related to your use of the website (including your IP address) as well as the processing of this data by Google by downloading and installing the browser plug-in which is available at the following link http://tools.google.com/dlpage/gaoptout?hl=de.”
We have a contract with Google Germany GmbH – GOOGLE ANALYTICS GERMANY, which ensures that the personal data is processed exclusively according to our instructions, and generally within Europe. On our website, IP anonymization (the IP mask method) is activated, which results in the IP address being anonymized automatically.
For more information about Google Analytics and data protection, please visit the following website: https://www.google.com/intl/de/analytics/privacyoverview.html.

8. Google Maps
On the subpages [listing], we embed a map provided by Google Inc. servers for the sake of better visualization. When you view the map, it connects to the Google server, which, among other things, transmits the IP address to Google. Furthermore, there is the possibility for Google to write and read cookies. These cookies may be Google User cookies that are directly related to you. For more information about Google Maps, please refer to the Google Privacy Policy and Terms of Use.

9. Data protection contact
The party that is responsible for the data processing within the meaning of Art. 4 No. 7 GDPR is
Klaus Union GmbH & Co. KG
Blumenfeldstrasse 18
44795 Bochum
Germany
Tel: +49 (0) 234 4595-0
Fax: +49 (0) 234 4595-7000
E-mail: info@klaus-union.de

Legal representative
Oliver Terhorst

Data Protection Officer
Sicoda GmbH
Oliver Gönner
Rochusstrasse 198
53123 Bonn
Tel.: +49 (0) 228 2861-4060
E-mail: dsb@sicoda.de