This privacy policy is intended to inform users of this website about the nature, scope and purpose of the collection and use of personal data by the website operator in accordance with the GDPR, TTDSG, Federal Data Protection Act and Digital Services Act.
The responsible body within the meaning of Art. 4 sentence GDPR and operator of this website is
PENTA GmbH
Hans-Fischer-Str. 10-12
80339 Munich
Phone +49 89 149896 0
E-mail [email protected]
Contact details of the data protection officer:
PROLIANCE GmbH
www.datenschutzexperte.de
Leopoldstr. 21
80802 Munich
[email protected]
When contacting the data protection officer, please state PENTA GmbH as the company to which your request relates. Please refrain from attaching sensitive information, such as a copy of your identity card, to your request.
The website operator takes your data protection very seriously and treats your personal data confidentially and in accordance with the statutory provisions.
Please bear in mind that data transmission over the Internet can always be subject to security vulnerabilities. Complete protection against access by third parties is not feasible.
Our privacy policy should be simple and understandable for everyone. The privacy policy generally uses the official terms of the General Data Protection Regulation (GDPR). The official definitions of terms are explained in Art. 4 GDPR.
Personal data includes all information relating to an identified or identifiable natural person (hereinafter referred to as the “data subject”); a natural person is regarded as identifiable if they can be identified directly or indirectly. An assignment to an identifier such as a name or pseudonym, to an identification number, to location data or to an online identifier is sufficient. However, special characteristics for identification such as the expression of physical, physiological, genetic, psychological, economic, cultural or social identity are also sufficient.
This includes, for example, name, address, telephone number, e-mail address, but also the IP address, even if this is only indirectly or temporarily assigned to a specific person.
A distinction is also made between personal data that is required for the establishment and content design or amendment of the legal relationship (inventory data) and personal data on the use of Internet pages (usage data).
The provision of personal data and the associated use of our website is voluntary.
Hyperlinks [colloquially link, in German approximately: reference or link] represent a cross-reference in a document and correspond in principle to source references in a printed document; however, you can call up these cross-references – unlike in a book – by clicking on the reference. References in a web document like this one are typical. The references can link several documents and also websites of different providers with each other. In their entirety, these references reflect the World Wide Web (WWW).
A distinction is made between internal references and external references. Internal references link several text passages or documents under one domain, external references lead to domains, websites and servers of other providers.
Other data protection regulations may apply on other web servers. Whether there is a reference to an external website can be seen by taking a closer look at the link. You can have the destination of the reference displayed by your browser. Please refer to the instructions of your browser for information on this; in many web browsers it is sufficient to move the mouse over the link without clicking it to display it. With us, external links are marked by an additional symbol immediately after the link.
Sometimes it may be useful to embed content from other websites into our design. You will then see other content in our design. Technically, this works through an IFrame/Inlineframe. This displays other web content as independent documents in a defined area of the browser, the browser address bar only shows the address of the surrounding page. Our website is displayed as a technical framework, but the content then comes from another server. This makes sense, for example, when retrieving videos that are hosted by other providers such as Youtube or Vimeo.
Technically, this transfers usage data to the third-party provider. You can find out what data they use for other purposes in the privacy policy of the respective provider.
By using our website, information (e.g. IP address) may be accessed or information (e.g. cookies) may be stored in your end devices. This access or storage may be associated with further processing of personal data within the meaning of the GDPR.
In cases where such access to information or such storage of information is absolutely necessary for the technically error-free provision of our services, this is done on the basis of § 25 Para. 1 S. 1, Para. 2 No. 2 TTDSG.
In cases where such a process serves other purposes (e.g. the needs-based design of our website), this is only done with your consent in accordance with § 25 Para. 1 TTDSG pursuant to Art. 6 Para. 1 lit. a GDPR. Consent can be revoked at any time with effect for the future.
Further information on the processing of your personal data and the relevant legal bases in this context can be found in the following sections on the specific processing activities on our website.
When you first access our website, your web browser transmits usage data to our web server. This is the only way our web server can display the website to your web browser. This usage data is present in the HTTP/S header, is automatically sent by you and is used for the duration of the page visit.
The usage data includes, among other things:
Further information about the HTTP header can be found on Wikipedia and in the RFC 2616 specification, chapter 14.
The aforementioned data serve the following purpose:
The legal basis for this data processing is Art. 6 Para. 1 Sentence 1 lit. f) GDPR. Our legitimate interest follows from the above-listed purpose of data collection. We do not use the collected data to draw conclusions about your person.
A cookie is a small data file that contains a string of characters and is generated and stored on your end device (for example, desktop PC, smartphone or tablet) while you are visiting our website. A cookie can only contain the information that we send to your client; it cannot be used to read out any further data on your device. With the help of these cookies, your end device – but not directly its user – can be recognized.
So-called session cookies contain a randomly generated, unique identification number. This allows our server to recognize which pages of the website the user has already visited during the respective “session”. They are usually automatically deleted after the end of the session. Alternatively, the session ID can be stored on the server or transmitted in the Uniform Resource Identifier (URI). In contrast to session cookies, temporary cookies are stored on the client for a specific period of time. A previous visit to the website is recognized on the basis of the temporary cookie and the previous settings are retained.
Cookies serve the purpose of individually designing the use of the website and the user profile. This means that settings that have already been made do not have to be entered again when you visit the site again. However, they can also be used to statistically record the use of the website and to evaluate it for optimization purposes. The number of visitors to our website and the frequency with which individual pages are accessed give us
Information about whether there might be interest in further contributions of a similar nature in the future.
The legal basis is Art. 6 Para. 1 Sentence 1 lit. f) GDPR . The data processed by cookies is required for the user-specific design of the website and for its optimization. There are no overriding interests or fundamental rights and freedoms of third parties. The use of cookies can be restricted or completely prevented in the security settings of your browser (such as Chrome, Firefox, Safari). Cookies can be deleted at any time. You can find information on this in the operating instructions of your browser.
We only process and transfer your personal data to third parties under the following conditions:
override, Art. 6 Para. 1 Sentence 1 lit. f) GDPR. This includes, for example, the assertion, exercise or defense of legal claims.
You can contact us via our website/contact form, but also by telephone, fax, e-mail and other means of communication. Your details are voluntary. With your voluntary information, we also process the time of the request and, for technical reasons, your usage data sent in connection with the means of communication, such as telephone number or e-mail address.
If you submit a request as part of a contractual relationship or to initiate a contract, the data will be processed in accordance with Art. 6 Para. 1 S. 1 lit. f) GDPR. In all other cases, we process your data on the basis of your consent in accordance with Art. 6 Para. 1 S. 1 lit. a) GDPR.
We use the collected data for individual communication with you, for the initiation or execution of contracts. The personal data collected by us for the use of the contact form will be deleted after your request has been processed, at the latest after the statutory retention obligations have expired.
Please note in connection with e-mails: Despite our comprehensive technical and organizational measures to protect your data, communication by e-mail has security vulnerabilities. If you want to transmit confidential information, we advise you to use encrypted transmission, for example using PGP or S/MIME.
This website is hosted by an external service provider (host). The personal data collected on this website is stored on the host’s servers. This may include, in particular, IP addresses, contact requests, meta and communication data, contract data, contact details, names, website accesses and other data generated via a website.
The host is used for the purpose of fulfilling the contract with our potential and existing customers (Art. 6 Para. 1 lit. b GDPR) and in the interest of a secure, fast and efficient provision of our online offer by a professional provider (Art. 6 Para. 1 lit. f GDPR).
Our host will only process your data to the extent necessary to fulfill its service obligations and will follow our instructions with regard to this data.
We use the following host:
12host – a product of andosto GmbH & Co. KG
Freihamer Str. 4b
82166 Gräfelfing / DE
In order to comply with the principles of data protection, the following measures are taken, among others:
Pseudonymization and encryption of personal data
permanent assurance of the confidentiality, integrity, availability and resilience of the systems and services in connection with the processing
Availability of personal data
Restoring access to personal data in the event of a physical or technical incident
Procedures for regularly reviewing, assessing and evaluating the effectiveness of technical and organizational measures
Deletion of all personal data after a maximum of 6 months, unless a statutory provision requires a longer retention period
Automated decision-making does not take place on our website
This website uses Google Analytics 4, a service of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”), which enables the use of websites to be analyzed.
When using Google Analytics 4, so-called “cookies” are used. The information collected by cookies about your use of the website (including the IP address transmitted by your end device, shortened by the last digits, see below) is usually transmitted to a Google server and stored and processed there. This may also result in information being transmitted to the servers of Google LLC, which is based in the USA, and the information being further processed there.
When using Google Analytics 4, the IP address transmitted by your end device when you use the website is always collected and processed in a shortened form as standard and automatically, so that direct personal identification of the collected information is excluded. This automatic anonymization is carried out by Google shortening the IP address transmitted by your end device by the last digits within member states of the European Union (EU) or other contracting states of the Agreement on the European Economic Area (EEA).
On our behalf, Google uses this and other information to evaluate your use of the website, to compile reports on your website activities or your usage behavior and to provide us with other services associated with your website use and internet use. The shortened IP address transmitted by your end device as part of Google Analytics 4 is not merged with other Google data. The data collected as part of the use of Google Analytics 4 is stored for 2 months and then deleted.
Google Analytics 4 also enables the creation of statistics with statements about the age, gender and interests of website users on the basis of an evaluation of interest-based advertising and with the addition of third-party provider information via a special function, the so-called “demographic characteristics”. This makes it possible to determine and differentiate between user groups of the website for the purpose of target group-optimized alignment of marketing measures. However, data collected via the “demographic characteristics” cannot be assigned to a specific person and therefore not to you personally. This data collected via the “demographic characteristics” function is stored for 2 months and then deleted.
All of the processing operations described above, in particular the setting of Google Analytics cookies for the storage and reading of information on the end device you use to use the website, only take place if you have given us your express consent to this in accordance with Art. 6 Para. 1 lit. a GDPR. Without your consent, Google Analytics 4 will not be used while you are using the website.
In connection with this website, the “UserIDs” function is also used as an extension of Google Analytics 4. By assigning individual UserIDs, we can have Google create cross-device reports (so-called “cross-device tracking”). This means that your usage behavior can also be analyzed across devices if you have given your corresponding consent to the use of Google Analytics 4 in accordance with Art. 6 Para. 1 lit. a GDPR, if you have set up a personal account by registering on this website and are logged into your personal account on different end devices with your relevant login data. The data collected in this way shows, among other things, on which end device you clicked on an ad for the first time and on which end device the relevant conversion took place.
We have concluded a so-called order processing contract with Google for our use of Google Analytics 4, which obliges Google to protect the data of our website users and not to pass it on to third parties.
Since personal data is transferred to the USA, additional protection mechanisms are required to ensure the level of data protection of the GDPR. To ensure this, we have agreed standard data protection clauses with the provider in accordance with Art. 46 Para. 2 lit. c GDPR. These oblige the recipient of the data in the USA to process the data in accordance with the level of protection in Europe. In cases where this cannot be ensured even by this contractual extension, we endeavor to obtain further regulations and promises from the recipient in the USA.
Further legal information on Google Analytics 4, including a copy of the standard contractual clauses mentioned, can be found at the following link: https://policies.google.com/privacy?hl=de&gl=de
Details on the processing initiated by Google Analytics 4 and Google’s handling of data from websites can be found here: https://policies.google.com/technologies/partner-sites
If your personal data is processed by us on the basis of legitimate interests in accordance with Art. 6 Para. 1 S. 1 lit. f GDPR, you have the right to object to the processing of your personal data in accordance with Art. 21 GDPR, provided that this is done for reasons arising from your particular situation. If the objection is directed against the processing of personal data for the purpose of direct advertising, you have a general right to object without the requirement to specify a particular situation.
Data subjects have the right
to request information about the personal data processed by us, Art. 15 GDPR. This includes information about the processing purposes, the category of personal data, the categories of recipients to whom data have been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right of appeal, the origin of the data, provided that it was not collected from us. Furthermore, they may request information about the existence of automated decision-making, including profiling and, where applicable, meaningful information on its details, and a copy of the personal data processed in relation to them
Data subjects have the right
to request information about the personal data processed by us, Art. 15 GDPR. This includes information about the processing purposes, the category of personal data, the categories of recipients to whom data have been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right of appeal, the origin of the data, provided that it was not collected from us. Furthermore, they may request information about the existence of automated decision-making, including profiling and, where applicable, meaningful information on its details, and a copy of the personal data processed in relation to them
The provision of personal data for the decision on the conclusion of a contract, the fulfillment of the contract or for the implementation of pre-contractual measures is voluntary. However, we can only make the decision within the framework of contractual measures if you provide such personal data that is required for the conclusion of the contract, the fulfillment of the contract or pre-contractual measures.
Automated decision-making or profiling in accordance with Art. 22 GDPR does not take place.
We reserve the right to update this privacy policy as necessary, in compliance with applicable data protection regulations. In this way, we can adapt it to current legal requirements and take into account changes to our services, e.g. when introducing new services. The current version applies to your visit.
Current status of the privacy policy: 16.08.2022
The contents of our website have been created with the greatest care. However, we cannot guarantee the accuracy, completeness and timeliness of the content.
As a service provider, we are responsible for our own content on these pages in accordance with general laws. However, we are not obliged to monitor transmitted or stored third-party information or to investigate circumstances that indicate illegal activity.
Obligations to remove or block the use of information in accordance with general laws remain unaffected by this. However, liability in this regard is only possible from the point in time at which a concrete violation of the law becomes known. If we become aware of corresponding violations of the law, we will remove this content immediately.
Our offer contains links to external websites of third parties, on whose content we have no influence. Therefore, we cannot assume any liability for this external content. The respective provider or operator of the pages is always responsible for the content of the linked pages. The linked pages were checked for possible legal violations at the time of linking. Illegal content was not recognizable at the time of linking. However, a permanent control of the content of the linked pages is not reasonable without concrete evidence of a violation of the law. If we become aware of legal violations, we will remove such links immediately.
The content and works created by the site operators on these pages are subject to German copyright law. The duplication, processing, distribution and any kind of exploitation outside the limits of copyright require the written consent of the respective author or creator. Downloads and copies of this page are only permitted for private, non-commercial use. As far as the content on this page was not created by the operator, the copyrights of third parties are respected. In particular, third-party content is marked as such. Should you nevertheless become aware of a copyright infringement, please inform us accordingly. If we become aware of legal violations, we will remove such content immediately.
