Privacy
Privacy policy
1. Privacy at a glance
General information
The notes below give a simple overview of what happens to your personal data when you visit this website. Personal data is any data by which you can be identified. Detailed information is in the privacy policy that follows.
Data collection on this website
You may contact us at any time about this and about other privacy questions.
Who is responsible for data collection on this website?
Data processing on this website is carried out by the website operator. Contact details are in the section “Note on the controller”.
How do we collect your data?
Some data is collected because you give it to us, for example in a contact form. Other data is collected automatically, or with your consent, by our IT systems when you visit the website. That is above all technical data (browser, operating system, time of the page request). Collection starts automatically as soon as you enter the website.
What do we use your data for?
Some data is collected so the website can be provided without errors. Other data may be used to analyse how you use the site.
What rights do you have in relation to your data?
You have the right at any time to obtain, free of charge, information about the origin, recipients and purpose of your stored personal data. You also have the right to request rectification or erasure of that data. If you have given consent, you may withdraw it at any time for the future. In certain circumstances you may request restriction of processing. You also have the right to lodge a complaint with the competent supervisory authority.
Analytics tools and third-party tools
When you visit this website, your browsing may be evaluated statistically. That is done above all with analytics programs. Details are in the privacy policy that follows.
2. Hosting
We host the content of our website with the following provider:
Strato
The provider is Strato AG, Otto-Ostrowski-Straße 7, 10249 Berlin (referred to below as “Strato”). When you visit our website, Strato collects various log files, including your IP addresses.
Further information is in Strato’s privacy policy: https://www.strato.de/datenschutz/.
Use of Strato is based on Art. 6 (1) (f) GDPR. We have a legitimate interest in the most reliable presentation of our website possible. Where consent has been requested, processing takes place solely on the basis of Art. 6 (1) (a) GDPR and § 25 (1) TTDSG, in so far as the consent covers the storage of cookies or access to information on the user’s device (for example device fingerprinting) within the meaning of the TTDSG. Consent may be withdrawn at any time.
3. General information and mandatory information
Privacy
The operators of these pages take the protection of your personal data seriously. We treat your personal data confidentially and in line with statutory data-protection rules and this privacy policy.
When you use this website, various personal data is collected. This privacy policy explains which data we collect and what we use it for. It also explains how and for what purpose that happens.
We point out that data transmission on the internet (for example by email) can have security gaps. Complete protection of data against access by third parties is not possible.
Note on the controller
The controller for data processing on this website is:
TIM Tietze Industrie Montage GmbH, Ernst-Thälmann-Straße 105, 06179 Teutschenthal, telephone: 034561450, email: sekretariat@tim-personal.de.
The controller is the natural or legal person who, alone or jointly with others, decides on the purposes and means of processing personal data (for example names, email addresses).
Storage period
Unless a more specific storage period is stated in this privacy policy, your personal data remains with us until the purpose of processing no longer applies. If you make a legitimate request for erasure or withdraw consent, your data is deleted, unless we have other legally permitted grounds for storing it (for example retention periods under tax or commercial law). In that case deletion takes place once those grounds no longer apply.
Legal bases for processing on this website
If you have consented to processing, we process your personal data on the basis of Art. 6 (1) (a) GDPR or Art. 9 (2) (a) GDPR where special categories of data under Art. 9 (1) GDPR are processed. If you have expressly consented to the transfer of personal data to third countries, processing is also based on Art. 49 (1) (a) GDPR. If you have consented to the storage of cookies or to access to information on your device (for example via device fingerprinting), processing is additionally based on § 25 (1) TTDSG. Consent may be withdrawn at any time. If your data is required to perform a contract or to take steps prior to a contract, we process it on the basis of Art. 6 (1) (b) GDPR. We also process data where this is required to comply with a legal obligation, on the basis of Art. 6 (1) (c) GDPR. Processing may further be based on our legitimate interest under Art. 6 (1) (f) GDPR. The legal basis that applies in each case is stated in the following sections of this privacy policy.
Note on data transfer to the USA and other third countries
We use, among other things, tools from companies based in the USA or in other third countries that are not secure in data-protection terms. When these tools are active, your personal data may be transferred to those countries and processed there. We point out that those countries cannot guarantee a level of data protection comparable to that of the EU. US companies, for example, are obliged to release personal data to security authorities without you, as the person concerned, being able to take effective court action against that. It cannot therefore be ruled out that US authorities (for example intelligence services) process, evaluate and permanently store data held on US servers for surveillance purposes. We have no influence over those processing activities.
Withdrawal of your consent
Many processing operations are possible only with your express consent. You may withdraw consent already given at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
Right to object to data collection in particular cases and to direct marketing (Art. 21 GDPR)
WHERE PROCESSING IS BASED ON ART. 6 (1) (e) OR (f) GDPR, YOU HAVE THE RIGHT AT ANY TIME, ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION, TO OBJECT TO PROCESSING OF PERSONAL DATA CONCERNING YOU; THIS ALSO APPLIES TO PROFILING BASED ON THOSE PROVISIONS. THE LEGAL BASIS ON WHICH PROCESSING RESTS IS SET OUT IN THIS PRIVACY POLICY. IF YOU OBJECT, WE WILL NO LONGER PROCESS THE PERSONAL DATA CONCERNED UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS, OR THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS (OBJECTION UNDER ART. 21 (1) GDPR).
WHERE YOUR PERSONAL DATA IS PROCESSED FOR DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH MARKETING; THIS ALSO APPLIES TO PROFILING IN SO FAR AS IT IS RELATED TO SUCH DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA WILL SUBSEQUENTLY NO LONGER BE USED FOR DIRECT MARKETING (OBJECTION UNDER ART. 21 (2) GDPR).
Right to lodge a complaint with the competent supervisory authority
In the event of breaches of the GDPR, data subjects have a right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, their place of work or the place of the alleged breach. The right to complain is without prejudice to other administrative or judicial remedies.
Right to data portability
You have the right to have data that we process automatically on the basis of your consent or in performance of a contract handed over to you or to a third party in a commonly used, machine-readable format. If you request direct transfer to another controller, this takes place only where it is technically feasible.
Access, rectification and erasure
Within the statutory provisions that apply, you have the right at any time to free information about your stored personal data, its origin and recipients and the purpose of processing, and where applicable a right to rectification or erasure of that data. You may contact us at any time about this and about other questions on personal data.
Right to restriction of processing
You have the right to request restriction of the processing of your personal data. You may contact us at any time. The right to restriction exists in the following cases:
If you contest the accuracy of personal data stored by us, we usually need time to check this. For the duration of the check you have the right to request restriction of processing.
If the processing of your personal data was or is unlawful, you may request restriction of processing instead of erasure.
If we no longer need your personal data but you need it for the exercise, defence or establishment of legal claims, you have the right to request restriction of processing instead of erasure.
If you have objected under Art. 21 (1) GDPR, a balance must be struck between your interests and ours. Until it is clear whose interests prevail, you have the right to request restriction of processing.
If you have restricted the processing of your personal data, that data – apart from storage – may be processed only with your consent or for the establishment, exercise or defence of legal claims, or for the protection of the rights of another natural or legal person, or for reasons of important public interest of the European Union or of a Member State.
SSL or TLS encryption
For security reasons and to protect the transmission of confidential content, such as orders or enquiries you send to us as the site operator, this site uses SSL or TLS encryption. You can recognise an encrypted connection by the browser address line changing from “http://” to “https://” and by the lock symbol in the browser bar.
When SSL or TLS encryption is active, the data you send to us cannot be read by third parties.
Objection to advertising emails
We object to the use of contact data published under the legal-notice obligation for sending advertising and information material that has not been expressly requested. The operators of the pages expressly reserve the right to take legal action in the event of unsolicited sending of advertising information, for example spam emails.
4. Data collection on this website
Cookies
Our website uses so-called “cookies”. Cookies are small data packages and do not harm your device. They are stored either temporarily for the duration of a session (session cookies) or permanently (permanent cookies). Session cookies are deleted automatically at the end of your visit. Permanent cookies remain on your device until you delete them yourself or your browser deletes them automatically.
Cookies may come from us (first-party cookies) or from third-party companies (third-party cookies). Third-party cookies make it possible to integrate certain services of third-party companies into web pages (for example cookies for handling payment services).
Cookies have various functions. Many cookies are technically necessary, because certain website functions would not work without them (for example the shopping-basket function or the display of videos). Other cookies may be used to evaluate user behaviour or for advertising.
Cookies that are required to carry out electronic communication, to provide functions you have requested (for example the shopping basket) or to optimise the website (for example cookies measuring web audience) are stored on the basis of Art. 6 (1) (f) GDPR, unless another legal basis is stated. The website operator has a legitimate interest in storing necessary cookies for the technically error-free and optimised provision of its services. Where consent to the storage of cookies and comparable recognition technologies has been requested, processing takes place solely on the basis of that consent (Art. 6 (1) (a) GDPR and § 25 (1) TTDSG); consent may be withdrawn at any time.
You can set your browser so that you are informed about the setting of cookies and allow cookies only in individual cases, exclude the acceptance of cookies in certain cases or generally, and activate automatic deletion of cookies when you close the browser. If cookies are deactivated, the functionality of this website may be limited.
Which cookies and services are used on this website is set out in this privacy policy.
Server log files
The provider of the pages automatically collects and stores information in so-called server log files, which your browser transmits to us. These are: browser type and browser version, operating system used, referrer URL, host name of the accessing computer, time of the server request, IP address.
This data is not combined with other data sources.
This data is collected on the basis of Art. 6 (1) (f) GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimisation of its website – the server log files have to be collected for that purpose.
Contact form
If you send us enquiries via the contact form, your details from the form, including the contact data you provide there, are stored by us for the purpose of handling the enquiry and in case of follow-up questions. We do not pass this data on without your consent.
This data is processed on the basis of Art. 6 (1) (b) GDPR if your enquiry is connected with the performance of a contract or is required in order to take steps prior to a contract. In all other cases processing is based on our legitimate interest in the effective handling of enquiries sent to us (Art. 6 (1) (f) GDPR) or on your consent (Art. 6 (1) (a) GDPR) where this was requested; consent may be withdrawn at any time.
The data you enter in the contact form remains with us until you ask us to delete it, withdraw your consent to storage, or the purpose of storage no longer applies (for example after your enquiry has been dealt with). Mandatory statutory provisions – in particular retention periods – remain unaffected.
Enquiry by email, telephone or fax
If you contact us by email, telephone or fax, your enquiry, including all personal data arising from it (name, enquiry), is stored and processed by us for the purpose of handling your request. We do not pass this data on without your consent.
This data is processed on the basis of Art. 6 (1) (b) GDPR if your enquiry is connected with the performance of a contract or is required in order to take steps prior to a contract. In all other cases processing is based on our legitimate interest in the effective handling of enquiries sent to us (Art. 6 (1) (f) GDPR) or on your consent (Art. 6 (1) (a) GDPR) where this was requested; consent may be withdrawn at any time.
The data you send us in contact enquiries remains with us until you ask us to delete it, withdraw your consent to storage, or the purpose of storage no longer applies (for example after your request has been dealt with). Mandatory statutory provisions – in particular statutory retention periods – remain unaffected.
5. Social media
Elements of the social network Facebook are integrated on this website. The provider of this service is Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. According to Facebook, the data collected is also transferred to the USA and to other third countries.
An overview of Facebook social-media elements is here: https://developers.facebook.com/docs/plugins/?locale=de_DE.
When the social-media element is active, a direct connection is established between your device and the Facebook server. Facebook thereby receives the information that you have visited this website with your IP address. If you click the Facebook “Like” button while logged in to your Facebook account, you can link the content of this website to your Facebook profile. Facebook can thereby assign the visit to this website to your user account. We point out that, as the provider of the pages, we have no knowledge of the content of the data transmitted or of its use by Facebook. Further information is in Facebook’s privacy policy: https://de-de.facebook.com/privacy/explanation.
Where consent has been obtained, use of the service named above is based on Art. 6 (1) (a) GDPR and § 25 TTDSG. Consent may be withdrawn at any time. Where no consent has been obtained, use of the service is based on our legitimate interest in the widest possible visibility on social media.
In so far as personal data is collected on our website with the tool described here and forwarded to Facebook, we and Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, are joint controllers of this processing (Art. 26 GDPR). Joint controllership is limited exclusively to the collection of the data and its forwarding to Facebook. Processing by Facebook after forwarding is not part of the joint responsibility. The obligations we share have been set out in an agreement on joint processing. The wording of the agreement is at: https://www.facebook.com/legal/controller_addendum. Under that agreement we are responsible for providing the privacy information when the Facebook tool is used and for implementing the tool on our website in a manner that is secure in data-protection terms. Facebook is responsible for the data security of Facebook products. Data-subject rights (for example access requests) in relation to data processed by Facebook can be asserted directly with Facebook. If you assert data-subject rights with us, we are obliged to forward them to Facebook.
Transfer of data to the USA is based on the European Commission’s standard contractual clauses. Details are here: https://www.facebook.com/legal/EU_data_transfer_addendum, https://de-de.facebook.com/help/566994660333381 and https://www.facebook.com/policy.php.
Functions of the Instagram service are embedded on this website. These functions are offered by Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
When the social-media element is active, a direct connection is established between your device and the Instagram server. Instagram thereby receives information about your visit to this website.
If you are logged in to your Instagram account, you can link the content of this website to your Instagram profile by clicking the Instagram button. Instagram can thereby assign the visit to this website to your user account. We point out that, as the provider of the pages, we have no knowledge of the content of the data transmitted or of its use by Instagram.
Where consent has been obtained, use of the service named above is based on Art. 6 (1) (a) GDPR and § 25 TTDSG. Consent may be withdrawn at any time. Where no consent has been obtained, use of the service is based on our legitimate interest in the widest possible visibility on social media.
In so far as personal data is collected on our website with the tool described here and forwarded to Facebook or Instagram, we and Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, are joint controllers of this processing (Art. 26 GDPR). Joint controllership is limited exclusively to the collection of the data and its forwarding to Facebook or Instagram. Processing by Facebook or Instagram after forwarding is not part of the joint responsibility. The wording of the joint-processing agreement is at: https://www.facebook.com/legal/controller_addendum. Under that agreement we are responsible for providing the privacy information when the Facebook or Instagram tool is used and for implementing the tool on our website in a manner that is secure in data-protection terms. Facebook is responsible for the data security of Facebook and Instagram products. Data-subject rights in relation to data processed by Facebook or Instagram can be asserted directly with Facebook. If you assert them with us, we are obliged to forward them to Facebook.
Transfer of data to the USA is based on the European Commission’s standard contractual clauses. Details are here: https://www.facebook.com/legal/EU_data_transfer_addendum, https://help.instagram.com/519522125107875 and https://de-de.facebook.com/help/566994660333381.
Further information is in Instagram’s privacy policy: https://instagram.com/about/legal/privacy/.
6. Newsletter
Newsletter data
If you wish to receive the newsletter offered on the website, we need an email address from you and information that allows us to check that you are the owner of the email address given and that you agree to receive the newsletter. Further data is not collected, or is collected only on a voluntary basis. We use this data solely to send the information requested and do not pass it on to third parties.
Data entered in the newsletter sign-up form is processed solely on the basis of your consent (Art. 6 (1) (a) GDPR). You may withdraw the consent given to storage of the data, the email address and its use for sending the newsletter at any time, for example via the “unsubscribe” link in the newsletter. Withdrawal does not affect the lawfulness of processing already carried out.
The data you have stored with us for the purpose of receiving the newsletter is stored by us, or by the newsletter service provider, until you unsubscribe, and is deleted from the distribution list after you cancel the newsletter or the purpose no longer applies. We reserve the right to delete or block email addresses from our newsletter distribution list at our discretion within our legitimate interest under Art. 6 (1) (f) GDPR.
Data stored with us for other purposes remains unaffected.
After you unsubscribe from the newsletter distribution list, your email address may be stored by us or by the newsletter service provider on a blacklist, where this is required to prevent future mailings. Data from the blacklist is used only for this purpose and is not combined with other data. This serves both your interest and our interest in complying with statutory requirements when sending newsletters (legitimate interest within the meaning of Art. 6 (1) (f) GDPR). Storage on the blacklist is not limited in time. You may object to storage where your interests override our legitimate interest.
7. Plug-ins and tools
YouTube with enhanced privacy
This website embeds videos from YouTube. The operator of the pages is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
We use YouTube in enhanced privacy mode. According to YouTube, this mode means YouTube does not store information about visitors to this website before they watch the video. Forwarding of data to YouTube partners is not necessarily excluded by enhanced privacy mode. YouTube establishes a connection to the Google DoubleClick network whether or not you watch a video.
As soon as you start a YouTube video on this website, a connection is established to the YouTube servers. The YouTube server is told which of our pages you have visited. If you are logged in to your YouTube account, you enable YouTube to assign your browsing directly to your personal profile. You can prevent this by logging out of your YouTube account.
YouTube may also store various cookies on your device after a video is started, or use comparable recognition technologies (for example device fingerprinting). In this way YouTube can obtain information about visitors to this website. This information is used, among other things, to collect video statistics, improve usability and prevent fraud attempts.
Further processing operations may be triggered after a YouTube video is started, over which we have no influence.
YouTube is used in the interest of an appealing presentation of our online offering. This is a legitimate interest within the meaning of Art. 6 (1) (f) GDPR. Where corresponding consent has been requested, processing takes place solely on the basis of Art. 6 (1) (a) GDPR and § 25 (1) TTDSG, in so far as the consent covers the storage of cookies or access to information on the user’s device (for example device fingerprinting) within the meaning of the TTDSG. Consent may be withdrawn at any time.
Further information on privacy at YouTube is in their privacy policy: https://policies.google.com/privacy?hl=de.
Google Maps
This site uses the Google Maps map service. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
To use the functions of Google Maps it is necessary to store your IP address. This information is generally transferred to a Google server in the USA and stored there. The provider of this site has no influence over this data transfer. When Google Maps is enabled, Google may use Google Fonts for the uniform display of fonts. When Google Maps is called up, your browser loads the required web fonts into its cache so that texts and fonts are displayed correctly.
Google Maps is used in the interest of an appealing presentation of our online offering and of making the places stated on the website easy to find. This is a legitimate interest within the meaning of Art. 6 (1) (f) GDPR. Where corresponding consent has been requested, processing takes place solely on the basis of Art. 6 (1) (a) GDPR and § 25 (1) TTDSG, in so far as the consent covers the storage of cookies or access to information on the user’s device within the meaning of the TTDSG. Consent may be withdrawn at any time.
Transfer of data to the USA is based on the European Commission’s standard contractual clauses. Details are here: https://privacy.google.com/businesses/gdprcontrollerterms/ and https://privacy.google.com/businesses/gdprcontrollerterms/sccs/.
More information on the handling of user data is in Google’s privacy policy: https://policies.google.com/privacy?hl=de.
OpenStreetMap
We use the map service of OpenStreetMap (OSM).
We embed OpenStreetMap map material from the server of the OpenStreetMap Foundation, St John’s Innovation Centre, Cowley Road, Cambridge, CB4 0WS, United Kingdom. The United Kingdom is regarded as a third country that is secure in data-protection terms. That means the United Kingdom has a level of data protection equivalent to that of the European Union. When the OpenStreetMap maps are used, a connection is established to the servers of the OpenStreetMap Foundation. Your IP address and further information about your behaviour on this website may be forwarded to the OSMF. OpenStreetMap may store cookies in your browser or use comparable recognition technologies.
OpenStreetMap is used in the interest of an appealing presentation of our online offering and of making the places we state on the website easy to find. This is a legitimate interest within the meaning of Art. 6 (1) (f) GDPR. Where corresponding consent has been requested, processing takes place solely on the basis of Art. 6 (1) (a) GDPR and § 25 (1) TTDSG, in so far as the consent covers the storage of cookies or access to information on the user’s device within the meaning of the TTDSG. Consent may be withdrawn at any time.
Wordfence
We have integrated Wordfence on this website. The provider is Defiant Inc., Defiant, Inc., 800 5th Ave Ste 4100, Seattle, WA 98104, USA (referred to below as “Wordfence”).
Wordfence serves to protect our website against unwanted access or malicious cyberattacks. For this purpose our website maintains a permanent connection to Wordfence’s servers so that Wordfence can compare its databases with the accesses made on our website and block them where necessary.
Use of Wordfence is based on Art. 6 (1) (f) GDPR. The website operator has a legitimate interest in the most effective protection of its website against cyberattacks possible. Where corresponding consent has been requested, processing takes place solely on the basis of Art. 6 (1) (a) GDPR and § 25 (1) TTDSG, in so far as the consent covers the storage of cookies or access to information on the user’s device within the meaning of the TTDSG. Consent may be withdrawn at any time.
Transfer of data to the USA is based on the European Commission’s standard contractual clauses. Details are here: https://www.wordfence.com/help/general-data-protection-regulation/.