Data Protection at ZIEGLER

We are pleased about your visit on and interest in our website www.ziegler.de. The protection of your private data is evident for us. Therefore, in the following we would like to inform you about the processing of your person-related data. The website www.ziegler.de is an offer of the Albert Ziegler GmbH (called ZIEGLER in the following).

Person-related data can lead to the identification of your person. Thereby it doesn’t matter if individual information leads to the identification. The more information and data are being collected, the more exactly the person can be identified. Name, address, age, e-mail-address and telephone number are part of these person-related data.

1  Responsible for data processing

Responsible for the data processing is

Albert Ziegler GmbH
Represented by Managing Director: Wenjie Yan
Albert-Ziegler-Straße 1
89537 Giengen/Brenz
Deutschland

info@ziegler.de

If you have questions, requests, complaints, criticism or need more information about our data security you can contact the responsible person above.

2  Contact person for data security

The correct implementation of data security is being taken over by an extern data protection commissioner. If you have questions, requests, complaints, criticism or need more information about our data security you can contact the responsible person above. Also, if you have any concerns about the processing of your person-related data it is possible to contact the data protection commissioner directly.

External data protection officer
c/o TÜV SÜD Akademie GmbH
Westendstr. 160
80339 München
​datenschutz@ziegler.de

Please note, that we may contact you in a different way due to the validation of your request and that we need to process your person-related data for this purpose. With this, we want to make sure that no information is given to unauthorised third people.

3  Collection, processing and storage of person-related data by ZIEGLER

ZIEGLER collects, processes and storages your person-related data only when the statutory provisions allow it or if you give your permission to it. We receive this data in two ways: Either you shared the data with us or we collect it while you are using our services.

3.1  Shared data

Usually you are able to use our website without sharing private information directly. To ensure, that certain services work fast and user friendly or to be able to offer these services in the first place, we will enquire private information for several services. In chapter 5 you can find detailed information about all services ZIEGLER provides at the website.

3.2  Data we receive from using our website

Several data are already collected automatically and for technical reasons when you visit our website. These data are being saved in a so called Logfile temporary. Following information is being collected without your involvement and is being saved until deleted automatically: 

• Visited Website
• Time of access
• Amount of sent data in Byte
• Source, how you found the page
• Browser used
• Operating system used
• IP-address used

The mentioned data will be processed for following purposes:

• Warranty of a smooth connection setup of the website
• Warranty of using our website comfortably
• Evaluation of system-security and -stability

The legal foundation for data processing is article 6, paragraph 1, p.1 lit. f GDPR. Our legitimate interest follows from the data collection purposes listed above. In no case we will use the collected data to draw a conclusion about your person.

Furthermore, we use cookies when you visit our website. You can find more information about it in chapter 4 of this privacy policy.

3.3  Disclosure of data

In general, person-related data won’t be passed on to third persons. If a disclosure of data happens in an individual case, you will find the according information in this privacy policy. With appropriate actions and regular controls, we make sure that the collected data can’t be read or tapped off from unauthorized people from the outside.

3.4  Data transfer to a third country or to an international organization

Data transfer to recipients in countries outside the European Union (so-called third countries) is permissible with the application of suitable guarantees for the purpose of establishing an appropriate level of data protection.

In chapter 4 and 5 you can find information about the individual parts of the website which transfer data to a third country if applicable.

4  Usage of cookies and other storage technologies

4.1  Explanation of certain terms

Cookies are small data files which are created by your browser automatically and that are being storaged by your terminal device (laptop, tablet, smartphone). At the latest state cookies don’t contain viruses, trojans or other malware.

Local Storage, similar to cookies, allows information to be stored in the context of the browser. In contrast to cookies, the browser can be analyzed and processed more precisely. According to today’s knowledge no viruses, trojans or other malware can be contained here either.

With these storage technologies information is stored that arises in each case in connection with the specifically used terminal device. That doesn’t mean that we receive any immediate knowledge of your identity. The use of these storage technologies serves to make the use of our offer more comfortable for you. The following types can be distinguished:

In order to navigate on the website and to use its functions, absolutely necessary data is needed.

Preference-data allows websites to remember information, that affect the way a website acts or looks, e.g. in the region you are (language setting).

Statistical data allows the number of visitors and traffic sources to be recorded and counted in order to measure and improve the performance of the website. They are also there to find out, if there are any errors or problems at certain pages, which pages are the most popular and how visitors navigate on the website.

Marketing-data is used to track the visits and individual activities on websites. They serve to place advertising more efficiently.

4.2  Use of cookies

Currently we use following cookies for following purposes at our website:

The necessary data processed by the cookies for the operation of a website are required to protect our legitimate interests pursuant to article 6 (1) p.1 lit. f GDPR. This necessity is also given in the sense of § 25. Para. 2 TDDDG. Furthermore, we process personal-related data in connection with cookies with your consent in accordance with article 6 para. 1 sentence 1 lit. a GDPR or article 49 para. 1 lit. a GDPR as well as § 25 para. 1 TDDDG.

In your browser you have the possibility to display the cookies existing at your computer, to delete the existing cookies or to set up the configuration in a way that not all or no more cookies are stored. Please note that several features either don’t work the right way or not at all if you deactivate the placing of cookies.

4.3  Use of local storage

Currently we are using following data sets in the form of local storage.

The necessary data processed by the cookies for the operation of a website are required to protect our legitimate interests pursuant to article 6 (1) p.1 lit. f GDPR. This necessity is also given in the sense of § 25. Para. 2 TDDDG. Furthermore, we process personal-related data in connection with cookies with your consent in accordance with article 6 para. 1 sentence 1 lit. a GDPR or article 49 para. 1 lit. a GDPR as well as § 25 para. 1 TDDDG.

In your browser you have the possibility to display the data existing on your computer in the local storage, to delete the local storage or to set up the configuration in a way that not all or no more data is stored. Please note that several features either don’t work the right way or not at all if you deactivate the storage of data.

5  Individual services

The respective data processing purposes and data categories as well as the legal basis can be found in the corresponding chapters.

5.1  Tracker (Google Analytics)

This website uses Google Analytics, a web-analysis service from the Google Inc. (“Google”). Google Analytics uses marketing-cookies, which allow an analysis of how you use the website. The information generated by the cookie about how you are using the website is usually transferred to a Google-server in the USA and processed there. Sometimes a processing by Google for own purposes can occur. We have activated the IP-anonymisation on this website, so that your IP-address of Google inside the member countries of the European Union or in other contracting countries to the agreement on the European economic area are shortened before.

Only in exceptional cases the whole IP-address will be transferred to a Google server in the USA and shortened there. On behalf of the operator of this website Google will use this information to analyse the use of the website, to compose reports about the website activity and to provide further services related to website activity and internet usage to the website operator. The IP-address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

You can prevent the storage of all cookies by an according setting in your browser-software; however, we indicate that in this case you might not be able to fully use several features of this website. Moreover, you are able to prevent the collection of data generated by the cookie and related to your use of the website (including your IP-address) by Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de.

Alternatively, please klick on the following link. In doing so an Opt-Out-Cookie is placed, which prevents future collection of your data while visiting this website: Google Analytics deaktivieren 

Please note, if you’re deleting this cookie, data processing by Google will be activated again.

The processing is carried out on the basis of Art. 49 Para. 1 lit. a GDPR or § 25 Para. 1 TDDDG on the basis of your consent.

5.2 Google Tag Manager

This website uses Google Tag Manager, a service provided by Google Inc ("Google") to control components of this website. The Google Tag Manager is an auxiliary service and itself processes personal data only for technically necessary purposes. The Google Tag Manager takes care of loading other components, which in turn may collect and process data. The Google Tag Manager does not access this data.

The information generated by the Google Tag Manager about your use of this website is usually transmitted to a Google server in the USA and processed there. If necessary, Google may also process the data for its own purposes. Furthermore, it cannot be ruled out that US authorities may gain access to the data on the basis of local laws. An adequacy decision and other effective safeguards to secure the transfer of data do not exist for the USA.

The processing is carried out on the basis of Art. 49 para. 1 lit. a DSGVO or § 25 para. 1 TDDDG on the basis of your consent.

For more information on Google Tag Manager, please see Google's privacy policy (https://policies.google.com/privacy?hl=de).

5.3  Social Media (Facebook, YouTube, LinkedIn, TikTok)

We also offer you extensive personal support and the opportunity to stay in contact with us via our social media pages (Facebook, instagram, YouTube, LinkedIn, TikTok) on the basis of Art. 6 para. 1 p. 1 lit. f DSGVO. These social media services may collect personal data themselves, e.g. via your profile created there.

It cannot be ruled out that every visitor to these appearances is recorded by the companies listed above. The purpose and scope of the data collection and the further processing and use of the data by these companies, as well as your rights in this regard and setting options for protecting your privacy, can be found in the privacy notices of:

Data protection Faceboook and instagram

Data protection YouTube

Data protection TikTok

Data protection LinkedIn

5.4  Contact form

We offer you an extensive personal support. Provided you contact us with the contact form, we collect your first name and surname, your address, as well as contact information like e-mail address and telephone number in shape of mandatory fields to answer your request quickly and individually. You are welcome to provide us even more information in order to specify your request.

The transmission of data proceeds encoded. Please note, that an answer in an electrical shape usually cannot be transmitted encoded. Please communicate with us if you wish an answer by telephone or in writing.

Your data is exclusively used for answering your request, it will not be used for a sales pitch or other advertising purposes, provided you do not explicitly ask for it in your request.

5.5  Registration for a training course

The registration for a training course occurs through the use of a contact form. In doing so we record and process the names and also if necessary an examination number of the participant, as well as the contact information for the sending department or fire department and in addition the date of arrival and departure.

The transmission of data proceeds encoded. Please note that feedback e.g. in shape of a registration confirmation usually occurs in an electronic shape per e-mail. Due to technical restrictions an encoding via e-mail dispatch is not possible most of the time. Please let us know, if you wish a feedback in writing or per telephone.

According to article 6 para. 1 p.1 lit. b) GDPR data is used for preparing, executing and following up the training course. This contains among others if necessary a hotel reservation, the issuing of a confirmation of participation and subsequent invoicing. Moreover, we will share name, examination number and department or fire department with an extern training service provider or manufacturer for the purpose of conducting the training.

The data highlighted as mandatory are required for the fulfilment of the contract. Without this data it is not possible to carry out the training.

Data is only used for the training courses and not for advertising purposes.

The recording of private e-mail addresses of the participants for sending possible documents proceeds voluntary and normally with an agreement according to article 6, para. 1 lit. a) GDPR at the date of the training course. The same applies for an agreement of processing photos of the training course.

5.6  Newsletter

For the registration to our newsletter we collect your e-mail address. If you tell us your name, we would be pleased to address you in our newsletter personally. After your registration you will receive a notification about your registration per e-mail which you have to confirm, in order to receive the newsletter (so-called Double Opt-In). This serves us as an evidence that you actually initiated the registration. We will send you the newsletter with your permission on the basis of article 6 para. 1, p.1 lit. a) GDPR. You are able to revoke your permission over a link at the end of the newsletter anytime (deregistration).

The processing of your data for sending the newsletter is performed by a carefully selected service provider who is committed to data protection.

5.7  Facebook fan page

On Facebook we run an own fan page under www.facebook.com/zieglergroup. The page and its technical functionality are provided by Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.

The own processing of person-related data on the Facebook fan page is based on our legitimate interests according to article 6, para. 1, p.1 lit f) GDPR in order to provide information about our offer there and to communicate with active customers, interested parties and users. When calling up the fan page, the terms and conditions and data processing guidelines of Facebook apply, over which we have no influence. Data may also be processed outside the European Union. You can find Facebook's privacy policy at  https://www.facebook.com/about/privacy/.

Here Facebook is responsible primary according to GDPR for processing insight data and will fulfil several duties of the GDPR with regard to the processing of insights data (among others Articles 12 and 13 GDPR, Articles 15 to 22 GDPR and Articles 32 to 34 GDPR). In addition, Facebook will make the essence of its Page Insights supplement (https://www.facebook.com/legal/terms/page_controller_addendum) available to data subjects.

You can reach out to the contact person for data security of Facebook via the contact form under https://www.facebook.com/help/contact/540977946302970.

5.8  Instagram fan page

On Instagram we also run our own fan pages under https://www.instagram.com/ziegler_group/  and under https://www.instagram.com/ziegler_azubiblog/.

The page and its technical functionality are provided by Facebook Ireland Limited, 4 Grand Canal Harbour, Dublin 2, Ireland.

The own processing of person-related data on the Instagram fan page is based on our legitimate interests according to article 6, para. 1, p.1 lit f) GDPR in order to provide information about our offer there and to communicate with active customers, interested parties and users. When calling up the fan page, the terms and conditions and data processing guidelines of Facebook apply, over which we have no influence. Data may also be processed outside the European Union. You can find Facebook's privacy policy at https://instagram.com/about/legal/privacy.

You can reach out to the contact person for data security of Instagram via the contact form under https://www.facebook.com/help/contact/540977946302970

5.9  Online Shop

In our Online Shop at https://shop.ziegler.de it is possible to buy and look at different articles and products from our range.

For this purpose we record and process person-related data while you are visiting the shop, putting articles in the shopping cart or placing an order. We only record further person-related data, like name, address or other contact information if you provide us with these in the course of the ordering process by logging in or when opening a customer account in the Online Shop. The collected data is exclusively used for processing the contract and for maintaining your customer account. The legal base for this is article 6, para. 1 lit. b) GDPR (contract fulfilment) in comparison with § 25 para. 2 TDDDG (absolute necessity). After complete processing of the contract and after expiry of the retention periods under tax and commercial law, your data will be blocked or deleted, provided that no justified interest in retention can be proven on the part of those responsible.

Your data, as well as contents of your order are transmitted to supporting service providers (Shipping companies, payment service providers, debt collection companies, lawyers) which we of course selected carefully for the before mentioned purpose. The transmission of your data to thirds only occurs when we are legally required to. It is guaranteed that all data-receiving agencies comply with the requirements of data protection and data security.

Creating an account is obligatory and cost free. For this we collect your name, address and contact information for further questions as well as a password for your account. Therefore, you have the possibility to deposit different delivery- and billing addresses, to speed up the payment process the next purchasing, to keep an eye on all open orders, to view the history of past orders, to manage the settings of your customer account, as well as changing your password.

On the basis of the in chapter 6 described rights you are able to, among others, demand information about storage date or the deletion of your user account anytime. Please note that we might are obligated to storage them due to legal requirements.

In this Online Shop cookies and/or local storages are created and analysed in the browser (compared to chapter 4.2, 4.3) which are technically required by the shop-system. These data will storage your login and also the shopping cart and the shop settings while shopping. The legal foundation for this is article 6, para. 1 lit. f) GDPR (legitimate interest) in comparison to § 25 para. 2 TDDDG (absolute requirement).

Furthermore, you are able to agree on processing further data in form of cookies and/or local storage for functional or comfortable, and also statistical purposes. In doing so you enable improvements of the whole Online Shop and the product range. The legal basis for this is Art. 6 para. 1 lit. a) GDPR (consent) in conjunction with § 25 para. 1 TDDDG (consent). You can revoke this consent at any time. To do so, click on the link "Consent management" in the footer in the Online Shop.

6  Your rights

Of course, you have the control over several person-related data you provide us while visiting our website and while using our services. You have the following rights, which you can exercise free of charge.

6.1  Right to information

You have the right to receive information about storaged person-related data anytime.

6.2  Right to revoke given consent

You have the right to revoke a once given consent for processing personal data in future processes anytime. In case of revoking we will delete the affected data immediately, if a further processing isn’t based on a legal foundation of processing. The revocation of consent shall not affect the lawfulness of the processing carried out on the basis of consent until revocation.

6.3  Right to contradiction

If, in the context of a balancing of interests, we process your personal data on the basis of our overriding legitimate interest, you have the right to object to this processing due to special reasons or situations with effect for the future anytime.

If you use your right to contradiction we will stop the processing of the affected data. But if we are able to demonstrate compelling reasons worthy of protection, which overshadow your interests, fundamental rights und fundamental freedom or when the processing serves as assertion, exercise or defence of legal claims, a further processing remains reserved.

If your personal data is being processed by us for the purpose of direct advertising, you have the right to object to the processing of your personal data for the purpose of such advertising anytime.

6.4  Right to data portability

You have the right to request the transmission of your personal date from us to another responsible company.

6.5  Right to correcting, deleting and restricting the processing

You have the right to your personal data being corrected, deleted and also to the processing being restricted.

6.6  Right to complaints

You have the right to complain to a supervisory authority or to our company if you have a reason for that. To exercise any rights against our company, please contact the contact person listed in this privacy policy.

7  Length of storage

Criteria for the length of storage of personal data is the legal storage period. After the deadline the relevant data will be deleted routinely, insofar they are no longer required to achieve the necessary purposes.

8  Automated decision making

An automated decision making based on the personal data collected does not take place.

9  Data security

We use the common SSL-Process (Secure Socket Layer) in context with the highest encryption level your browser supports. If an individual page of our internet appearance is being transmitted encoded, you can recognize this by the closed display of the key or lock symbol in the respective place in your browser.

By the way, we use suitable technical or organizational security measures to protect your data from accidental or deliberate tampering, partly or complete loss, destruction or from unauthorized access of thirds. Our security measures are continuously improved in line with technological developments.

10  Responsible supervisory authority

Responsible supervisory authority relevant for us

The State Comissioner for Data Protection and Freedom of Information of Baden-Württemberg
P.O. Box 10 29 32
70025 Stuttgart
Germany

Phone +49 711/615541-0
Fax +49 711/615541-15

poststelle@lfdi.bwl.de