Privacy Policy

Our company attaches great importance to protecting personal data and respects your desire for privacy. In the following, we provide information on how we collect personal data when you use our website. If you have any further questions regarding the handling of your personal data, please do not hesitate to contact our data protection officer.

Data controller

The data controller within the meaning of the General Data Protection Regulation (GDPR) is:

ALANOD GMBH & CO. KG
Street No: Egerstrasse 12
Postcode, City, Country: 58256 Ennepetal, Germany
Commercial Register/No: HRA 4567
Managing Director: Milan W. Krumbe | CCO; Ralf Hillebrand | COO; Frank Weigand | CFO
Phone number: +49 2333 986-500
Email address: info@alanod.de

Our data protection officer will be happy to answer your inquiries:

Personal / Confidential
To the Data Protection Officer
Street No: Egerstrasse 12
Postcode, City, Country: 58556 Ennepetal, Germany
Email address dsb@alanod.de

Data security

We have taken extensive technical and operational precautions to protect your data from accidental or intentional manipulation, loss, destruction or access by unauthorized persons. Our security procedures are regularly reviewed and adapted to technological progress.

Legal basis of our data processing

The processing of personal data may be based on various legal grounds. If we require your data to fulfil a contract with you or to respond to inquiries from you regarding a contract, the legal basis for this data processing is Article 6(1)(1)(b) GDPR. If we obtain your consent for certain data processing, the legal basis is Article 6(1)(1)(a) GDPR. We carry out some data processing on the basis of our legitimate interest, always weighing your interests which require protection against our legitimate interests. The legal basis for this is Article 6(1)(f) GDPR. Insofar as the processing is necessary to fulfil a legal obligation to which we are subject, the legal basis is Article 6(1)(1)(c) GDPR.

Below, we explain how we process personal data via our website:

Data processing when you visit our website

If you use the website solely for information purposes, i.e., if you do not register or otherwise transmit information to us (e.g., via a contact form), we collect the following technical information (log file data):

– Operating system of the end device with which you visit our website
– Browser (type, version & language settings)
– Amount of data retrieved
– Current IP address of the terminal device with which you visit our website
– Date and time of access
– URL of the previously visited website (referrer)
– URL of the (sub)page you are accessing on the website
– Internet service provider of the accessing system

Collecting this data is technically necessary so that we can display our website to you and ensure stability and security. We (and our service provider) regularly do not know who is behind an IP address. We do not merge the above data with any other data.

The legal basis is Article 6(1)(1)(f) GDPR. Since the collection of data for the provision of the website and the storage in log files are absolutely necessary to operate the website and to protect against misuse, our legitimate interest in data processing prevails at this point

Contact

When you contact us by email or via a contact form, the data you provide (your email address, the country from which your request originates and your name, if applicable) will be stored by us in order to answer your questions and process your requests. The legal basis in this respect is Article 6(1)(1)(f) GDPR. If we use our contact form to request information that is not required to establish contact, it will always be marked as optional. These details help us answer your inquiry and to improve the processing of your request. This information is provided expressly on a voluntary basis and with your consent, Article 6(1)(1)(a) GDPR. If this includes information on communication channels (e.g. email address, telephone number), you also agree that we may contact you via this communication channel in order to respond to your request. Of course, you can withdraw this consent at any time with future effect.

Your data, which we have received in the course of contact with you, will be deleted as soon as it is no longer required to achieve the purpose for which it was collected, your request has been fully processed and no further communication with you is necessary or desired by you.

Applications

You can apply to our company electronically, e.g. via email. Please note that unencrypted emails are not transmitted with access protection.

Your information will be used to process your application and decide on establishing an employment relationship. The legal basis is Section 26(1) in conjunction with (8)(2) BDSG (Federal Data Protection Act). Furthermore, your personal data may be processed insofar as this is necessary for us to defend against legal claims asserted against us arising from the application process. The legal basis for this is Article 6(1)(1)(f) GDPR. The stated purposes also constitute the legitimate interest in the processing.

Insofar as an employment relationship arises between you and us, we may, in accordance with Section 26(1) BDSG, further process the personal data already received from you for the purposes of the employment relationship, if this is necessary for the execution or termination of the employment relationship or for the exercise or fulfilment of the rights and obligations of the representation of the interests of the employee resulting from a law or a collective agreement, a company or service agreement (collective agreement).

Your application data will not be processed beyond the use described.

After completion of the application process, your personal data will be deleted after 6 months at the latest, unless there are other legitimate interests on our part that prevent deletion or you have given us permission to store it for a longer period. Other legitimate interest in this sense is, for example, a duty to provide evidence in proceedings under the General Equal Treatment Act (AGG).

General information
You can subscribe to our newsletter via our website, which we use to inform you about our company's activities, current information about our services, special offers, promotions and events . The legal basis for sending the respective newsletter is your consent pursuant to Article 6(1)(1)(a) GDPR in conjunction with Section 7(2)(3) UWG (Unfair Competition Act) or the legal permission pursuant to Section 7(3) UWG.

For our newsletter registration we use what is known as the double-opt-in procedure. This means that after you have registered, we will send you an email to the email address provided, in which we will ask you to confirm that you wish to receive the newsletter. If you do not confirm your registration, your information will be automatically deleted after 3 days.

The only information we require to send the newsletter is your email address. The provision of further data is voluntary: This data is used to be able to address you personally. After your confirmation, we store your email address for the purpose of sending the newsletter and until revoked. We also store your current IP address at the time of registration, the time of registration and the confirmation for up to three years after registration (statute of limitations). The purpose of this procedure is to be able to prove your registration in case of doubt and, if necessary, to clarify any misuse of your personal data. The legal basis for logging the registration is our legitimate interest pursuant to Article 6(1)(1)(f) GDPR in proving a formerly given consent, see also Article 7(1) GDPR.

You can withdraw your consent to receive the newsletter and unsubscribe at any time. You can declare your withdrawal by clicking on the link provided in each newsletter email or by sending an email to info@alanod.de.

Newsletter tracking
We would like to point out that we evaluate your user behaviour when sending the newsletter in order to determine whether and when the newsletter was opened. For this evaluation, the emails sent contain what are known as web beacons or tracking pixels that are stored on our server and loaded when the newsletter is opened. Technical information such as browser type, time of opening and IP address are transmitted. For evaluation purposes, we link the above data and web beacons to your email address and an individual ID.

The data is processed pseudonymously, i.e. the IDs are not directly linked to your other personal data, a direct personal reference is excluded. The legal basis for this data processing is your consent, Article 6(1)(a) GDPR.

You can withdraw your consent at any time with effect for the future. In this case, the withdrawal includes the entire newsletter, since a separate withdrawal of the tracking is unfortunately not technically possible. To do so, simply click the unsubscribe link provided in each email.

Moreover, such tracking is not possible if you have disabled the display of images by default in your email program. In this case, the newsletter will not be displayed in its entirety and you may not be able to use all of its features. When you display the images manually, the tracking mentioned above takes place.

The information from the tracking is stored for as long as you are subscribed to the newsletter. After unsubscribing, the data is anonymized and used for purely statistical purposes.

The data you provide for the purpose of receiving the newsletter will be stored by us until you unsubscribe from the newsletter and will be deleted after you unsubscribe from the newsletter. Data that has been stored by us for other purposes remains unaffected by this.

Cookies and third-party tools

Cookies are data that are stored on your computer by a website you visit and allow your browser to be reassigned. Cookies transmit information to the entity that sets the cookie. Cookies can store various information, such as your language setting, the duration of your visit to our website or the entries you have made there. This avoids, for example, having to re-enter required form data each time you use it. The information stored in cookies can also be used to recognize preferences and to target content according to areas of interest.

There are different types of cookies: Session cookies are sets of data that are only saved temporarily in your computer storage and are deleted when you close your browser. Permanent or persistent cookies are automatically deleted after a predefined duration, which may differ depending on the cookie. The information can also be stored in text files on your computer with this type of cookie. However, you can also delete these cookies at any time via your browser settings.

First-party cookies are set by the website you are currently visiting. Only this website may read information from these cookies. Third-party cookies are set by organizations that are not operators of the website you are visiting. These cookies are used by marketing companies, for example.

The legal basis for possible processing of personal data by means of cookies and their storage period may vary. If you have given us your consent, the legal basis is Article 6(1)(1)(a) GDPR. Insofar as the data processing is based on our overriding legitimate interests, the legal basis is Article 6(1)(1)(f) GDPR. The stated purpose then corresponds to our legitimate interest.

We use cookies to ensure the proper operation of the website, to provide basic functionality, and – with your consent – to measure reach and tailor our services to preferred areas of interest.

The cookies used on this website are:

_gid: Persistent third-party cookie for the purpose of distinguishing users in the context of tracking by Google Analytics. The storage period is 2 years.

_ga: Persistent third-party cookie for statistical purposes to store and count users' pageviews as part of Google Analytics tracking. The storage period is 1 day.

_gat_gtag_UA_*: Persistent third-party cookie to store a unique user ID by Google Analytics. The storage time is 1 minute.

arsorsCookie_interact: Persistent first-party cookie used to determine whether the user has already interacted with the cookie manager plugin. As a result, the cookie manager is no longer displayed if the user has already used the cookie manager and visits the page again. The storage period is 1 year.

arsorsCookie: Persistent first-party cookie used to determine whether the user has already interacted with the cookie manager plugin. As a result, the cookie manager is no longer displayed if the user has already used the cookie manager and visits the page again. The storage period is 1 year.

__cf_bm: This cookie is used to distinguish between humans and bots. This is beneficial for the website to generate valid reports on the usage of their website. The storage period is 1 day.

_grecaptcha: This cookie is used to distinguish between humans and bots. This is beneficial for the website to generate valid reports about the usage of their website. Storage period is 6 months.

When accessing our website, all users of our website are also informed by an information banner about our use of cookies and referred to this privacy policy. At the same time, you as a user will also be asked for your consent to the use of certain cookies and other technologies, in particular those relevant for the personalization of services and for marketing measures. Once you have given your consent, you can withdraw it at any time with future effect by calling up the cookie administration via the following link and unchecking the box next to the processing to which you have consented.

Google Tag Manager
For reasons of transparency, we would like to point out that we use the Google Tag Manager of the provider Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA. The responsible entity for users in the EU/EEA and Switzerland is Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.

Google Tag Manager itself does not collect any personal data. Google Tag Manager makes it easy for us to integrate and manage our tags. Tags are small pieces of code used to measure traffic and visitor behaviour, track the impact of online advertising and social channels, set up remarketing and audience targeting, and test and optimize websites, among other things. We use the Tag Manager for the Google Analytics service. If you made a deactivation, this deactivation will be taken into account by the Google Tag Manager. For more information on Google Tag Manager see https://www.google.com/intl/de/tagmanager/use-policy.html.

Google reCaptcha
We use reCaptcha v2 on our websites. reCaptcha is a service provided by Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA. The responsible entity for users in the EU/EEA and Switzerland is Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.

ReCaptcha serves to prevent abusive automated entries into web forms and thus to protect the technical systems of the hoster.

When you call up one of our web pages in which reCaptcha is integrated, a connection is established to Google's servers. A reCaptcha cookie is set. Your IP address will be transmitted to Google.

In addition, reCaptcha collects the following data by means of "fingerprinting":

– Browser plugins used
– Cookies set by Google in the last 6 months
– Number of mouse clicks and touches you have made on this screen
– CSS information for the called page
– Javascript objects
– Date
– Browser language

You may refuse the use of cookies and fingerprinting by selecting the appropriate settings on your browser, however, please note that if you do this you may not be able to use the full functionality of this website.

To the extent that data is processed outside the European Economic Area/the EU, where there is no level of data protection equivalent to the European standard, Google states that it uses standard contractual clauses.

Google's privacy policy and terms of use can be found here https://policies.google.com/privacyand here https://policies.google.com/terms.

The data collection and storage is only carried out after explicit consent according to Article 6(1)(1)(a) GDPR. This can be withdrawn revoked at any time with future effect.

Google Analytics
If you have given your consent, this website uses Google Analytics, a web analytics service provided by Google LLC. The responsible entity for users in the EU/EEA and Switzerland is Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google").

Google Analytics uses cookies that enable an analysis of your use of our websites. The information collected by means of cookies about your use of this website is usually sent to a Google server in the USA.

Google Analytics 4 has IP address anonymization enabled by default. Due to IP anonymization, your IP address will be truncated by Google within Member States of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and truncated there. The IP address transmitted by your browser as part of Google Analytics is not merged with other data from Google.

On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, and compiling reports on website activity. The reports provided by Google Analytics are used to analyze the performance of our website.

Recipients of the data are/could be

Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (as processor under Article 28 GDPR)

Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA

Alphabet Inc, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA

Insofar as data is processed outside the EU/EEA and there is no level of data protection corresponding to the European standard, we have concluded EU standard contractual clauses with the service provider to establish an appropriate level of data protection. The parent company of Google Ireland, Google LLC, is based in California, USA. A transmission of data to the USA and access by US authorities to the data stored by Google cannot be ruled out. The USA is currently considered a third country from a data protection perspective. You do not have the same rights there as within the EU/EEA. You may not be entitled to any legal remedies against access by authorities.

The data sent by us and linked to cookies are automatically deleted after 14 months. The deletion of data, the retention period of which has been reached, occurs automatically once a month.

The legal basis for this data processing is your consent pursuant to Article 6(1)(1)(a) GDPR.

For more information on Google Analytics terms of use and Google's data protection policy, please see https://marketingplatform.google.com/about/analytics/terms/en/

and at https://policies.google.com/?hl=en.

Google Maps plug-in
This site uses the map service Google Maps. Google Maps is a mapping service provided by Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA. The responsible entity for users in the EU/EEA and Switzerland is Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.

In order to use the functions of Google Maps, information, including the IP address as well as the address, which is entered within the scope of the route function, can be transmitted to the provider's servers. This information is usually transferred to a Google server in the USA and stored there. When you visit a website that contains Google Maps, your browser establishes a direct connection with Google's servers, whereby the map content is sent to your browser and integrated by it. The provider of this site has no influence on this data transmission.

Google Maps is used in the interest of an appealing presentation of our online offers and to make it easy to find the places we indicate on the website. If you do not want Google to process data via this service, you can disable the use of JavaScript in your browser settings. Please note that in this case the interactive map function of Google Maps is not usable.

You can find more information on the handling of user data in Google's privacy policy https://www.google.de/intl/en/policies/privacy/.

The collection and storage of data only takes place after explicit consent according to Article 6(1)(1)(a) GDPR. This can be withdrawn revoked at any time with future effect.

Vimeo
We use the provider Vimeo, among others, to integrate our videos. Vimeo is operated by Vimeo, LLC, headquartered at 555 West 18th Street, New York, New York 10011. With the integration of Vimeo videos, we pursue the purpose of making our website more interesting and attractive for our visitors and to achieve a better presentation of content or facts.

We use a data protection-friendly implementation technique (2-click method). When you visit a page that has a Vimeo video embedded, a connection to Vimeo's servers is not created until you click on the video's thumbnail. This transmits certain information (e.g. your IP address) to Vimeo. Vimeo may also place cookies on your device. We do not obtain knowledge of the type and scope of the data collected by Vimeo and have no influence on its use. Through the integration, Vimeo can also receive the information that your browser has accessed the corresponding page of this website, even if you do not have a user account with Vimeo or are not logged in to Vimeo.

By clicking on the video, you give your consent for your data to be transferred to the respective provider. The legal basis for the use of the Vimeo services is Article 6(1)(1)(a) GDPR.

For more information on the purpose and scope of data collection and processing by Vimeo, please see the privacy policy. There you will also receive further information about your rights and setting options to protect your privacy: Vimeo, Inc, 555 West 18th Street, New York, New York 10011, USA vimeo.com/privacy.

Data transmission

As a matter of principle, your personal data will not be transferred to third parties unless we are required to do so by law, or the transfer of data is necessary for the performance of the contractual relationship, or you have previously given your express consent to the transfer of your data.

External service providers and partner companies or a shipping company commissioned to deliver goods to you will only receive your data to the extent necessary to process your order. In these cases, however, the scope of the data transmitted is limited to the minimum required. Insofar as our service providers process your personal data on our behalf, we ensure within the scope of commissioned processing pursuant to Article 28 GDPR that they comply with the provisions of the data protection laws in the same manner. The respective service provider is responsible for the content of third-party services, whereby we check the services for compliance with legal requirements within the scope of reasonableness.

We attach importance to processing your data within the EU/EEA. However, we may use service providers that process data outside the EU/EEA. In these cases, we ensure that an adequate level of data protection comparable to the standards within the EU is established at the recipient prior to the transfer of your personal data. This is usually ensured by concluding the EU standard contracts or by means of Binding Corporate Rules.

Your rights

We will be happy to provide you with information on whether personal data concerning you is being processed. If this is the case, you have a right of access to this personal data and to the information listed in detail in Article 15 GDPR. In addition, you have the right to rectification (Article 16 GDPR), the right to restriction of processing (Article 18 GDPR), the right to erasure (Article 17 GDPR) and the right to data portability (Article 20 GDPR) under the respective legal conditions.

You have the right to object to the processing under the legal conditions (Article 21 GDPR).

To exercise your foregoing rights, please contact us by email to info@alanod.de or by post to:

ALANOD GMBH & CO. KG
Egerstrasse 12
58256 Ennepetal, Germany

Exercising your abovementioned rights is free of charge for you.

Without prejudice to these rights and the possibility of seeking any other administrative or judicial remedy, you may at any time exercise your right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, place of work or the place of the alleged infringement, if you consider that the processing of personal data relating to you infringes data protection law (Article 77 GDPR).

The supervisory authority responsible for us is:

Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen
Kavalleriestr. 2-4
40213 Düsseldorf
Phone: 0211/38424-0
Fax: 0211/38424-999
Email: poststelle@ldi.nrw.de

Updated July 2022