1. General

1.1 What is personal data?
Personal data is information that discloses or may disclose a user's identity. We follow the principle of data minimisation. The collection of personal data is avoided as much as possible.

1.2 Handling of personal data
Your personal data is only processed if we have obtained your consent to this (Art. 6 I S. 1 a GDPR) or if there is a legitimate interest for usin processing this data and only where it can be demonstrated that there are no opposing overriding interests, fundamental rights or freedoms from your side (Art. 6 I S. 1 f GDPR).

We may use data processors to process your personal data. However, the personal data shall not be further disclosed to third parties.

Your personal data will be processed solely within the EU, unless otherwise stated below.

1.3 Usage data
When you visit our website, we collect general technical information. This is information such as the IP address used, the time, the duration of the visit, browser type and, where applicable, the origin page. For technical purposes, this usage data is registered in a log file and may be stored and used for the purposes of statistical analysis of this website. Usage data is not linked to your other personal data.

1.4 How long will my data be stored?
Once the purpose for which the data was collected has come to an end, we only store data for as long as is required in line with statutory regulations (notably tax regulations).

2. Your rights

2.1 Information
You can request information from us as to whether we process your personal data and, if this is the case, you have a right to information about this personal data and to the further information specified in Art. 15 GDPR.

2.2 The right to rectification
You have the right to request the rectification of any inaccurate personal data concerning you. You also have the right to ask us to complete information you think is incomplete in accordance with Art. 16 GDPR.

2.3 The right to erasure
You have the right to ask us to erase your personal data immediately. We are required to erase your data immediately in the following circumstances:

• Your personal data is no longer required for the purposes for which it was collected or processed.
• You withdraw your consent to the processing of your data and there is no other lawful basis for data processing.
• Your data has been processed unlawfully.

The right to erasure does not apply if your personal data is required to assert, exercise or defend our legal claims.

2.4 The right to restrict processing
You have the right to ask us to restrict processing of your personal data if

• you contest the accuracy of the data, and we therefore verify the accuracy
• the processing is unlawful and you refuse erasure and request restriction of use instead
• we no longer need the data, but you need it to assert, exercise or defend a legal claim,
• you have objected to the processing of your data and it has not yet been determined whether our legitimate grounds prevail over yours in this case.

2.5 The right to data portability

You have the right to obtain the personal data you provided to us in a structured, commonly used and machine-readable format. You also have the right to transfer this data to another controller without hindrance by us, provided that the processing is based on consent or a contract and provided that we carry out the processing by automated means.

2.6 The right to object
Where the processing of your data is based on consent, you have the right to revoke this consent at any time.

2.7 General information and the right to appeal
You may exercise the above rights free of charge. In the event of a complaint, you have the right to contact the supervisory authority responsible for us, the State Commissioner for Data Protection.

3. Data protection

3.1 Data protection
All data on our website is safeguarded by technical and organisational measures against loss, destruction, access, modification and dissemination.

3.2 Sessions and cookies
We use cookies and server sessions where data can be stored to operate the website. We ensure that no personal data is taken from sessions or through cookies without your express consent. Cookies are only used if technically necessary for the website (e.g. spam protection on a contact form, a shopping cart function) and thus the consideration shows that there are no overriding interests on your part (Art. 6 I p. 1 f GDPR) or if you have provided your express consent.

With your express consent, we use cookies to personalise content and ads, to provide social media functions and to analyse access to our website. With your consent, we may share information on your use of our website with our social media, advertising and analytics partners. Our partners may combine this information with other data they already hold about you.

Please find the domain, name and duration of the cookies used solely on the basis of your consent below:

Site cookies

5. Social media presence

We use the following social media platforms for our corporate image and communications (express reference is made to the privacy policies and opt-out options linked below).

Twitter (Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland)
Privacy policy: https://twitter.com/en/privacy
Opt-out: https://twitter.com/personalization

YouTube (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland)
Privacy policy: http://www.youtube.com/t/privacy/

These social media platforms may process personal data outside the EU where applicable. Please refer to these platforms’ privacy policies as detailed above. The relevant social media platforms may create usage profiles from your usage behaviour and any interests and actions arising therefrom and may save cookies on your computer where your usage behaviour is stored. If you have an account on the relevant social media platforms and are logged in, your user behaviour may also be stored independently of your device. For example, your usage profile may be used to place advertisements that supposedly correspond to your interests.

We process personal data solely for the purpose of communicating with you via your chosen social media platform and to optimise our online presence. We ensure that that there are no interests on your part that outweigh this legitimate interest on our part (Art. 6 I S. 1 f GDPR). If you have already given your effective consent to corresponding data processing to the operator of the relevant social media platform, the processing of your personal data also takes place based on this consent (Art. 6 I S. 1 a GDPR).

6. Third party services

6.1 The use of YouTube
This website and the integrated services contain what are known as YouTube video embeds. These facilitate a connection to YouTube and the videos stored there. YouTube is a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Use of YouTube is only possible with your consent (Art. 6 I S. 1 a GDPR). The purpose and scope of data collection and data use by Google as well as your rights and configuration options for protection as a YouTube customer can be found in YouTube's data protection information. To do this, visit: http://www.youtube.com/t/privacy/.

6.2 Google Web Fonts
We use what are known as Web Fonts from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google") to display a uniform typeface on our website. These are automatically stored in your browser cache when accessing one of our pages to facilitate the desired display. If your browser does not support the web fonts used, one of your computer’s standard fonts may be used. The use of this service is only possible with your consent (Art. 6 I S. 1 a GDPR). You can view Google's privacy policy here: https://www.google.com/policies/privacy/ For more information on Google Web Fonts, visit: https://developers.google.com/fonts/faq

6.3 WordPress plugin Cerber
We use Cerber, a service provided by Cerber Tech Inc., New York, NY, 1732 1st Ave, 10128, USA (www.wpcerber.com), to protect our website from unauthorised access and attacks (hacker protection plugin) and to enable the blocking or allowing of logins from previously defined IP addresses with an IP blacklist or whitelist. We naturally have a legitimate interest in this regard. No data is collected or processed by Cerber for the use of this service, so that a consideration here shows that your interests do not prevail and therefore do not prevent processing (Art. 6 I S. 1 f GDPR). You can view Cerber's privacy policy here: https://wpcerber.com/privacy-policy/

Cookie consent tool Complianz

We use the cookie consent tool Complianz, a service from Complianz B.V., Kalmarweg 14-5, 9723JG Groningen, The Netherlands. Complianz has the ability to, among other things, divide cookies into groups and design a cookie banner. Complianz also uses a cookie that can store the status of your consent (consent, no consent, consent revoked). The following data, among others, may be collected for this purpose:

• Timestamp
• ControllerID,
• ProcessorID and
• the browser used by the user.

The legal basis for processing the data is Art. 6 I S. 1 c GDPR (fulfilment of legal obligation) and Art. 6 I S. 1 f GDPR (legitimate interest).

You can view Complianz's privacy statement here: https://complianz.io/privacy-statement

6.5 Google DoubleClick

Our website uses the online marketing tool DoubleClick (operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). DoubleClick uses cookies to display adverts relevant to users, to improve campaign performance reports or to prevent a user from seeing the same adverts multiple times. Google uses a cookie ID to record which adverts are displayed in which browser and can accordingly them from being displayed more than once. DoubleClick can also use cookie IDs to record any conversions related to advert requests, such as when a user views a DoubleClick advert and subsequently uses the same browser to visit the advertiser's website and make a purchase. According to Google, DoubleClick cookies do not contain any personal data. Thanks to the marketing tools used, your browser automatically establishes a direct connection with Google’s server. We have no control over the scope and further use of the data Google collects through the use of this tool. We therefore provide as much information as we know: with the integration of DoubleClick, Google receives the information that you have accessed the relevant part of our website or clicked on our ad. If you are registered with a Google service, Google may allocate the visit to your account. If you are not registered with Google or are not logged in, it is still possible that the provider will determine and store your IP address.

You can opt out of participation in this tracking procedure by selecting the appropriate setting in your browser. Please note that if you do so, you may not be able to enjoy full access to all the functions of our website. Use of DoubleClick is only possible with your consent (Art. 6 I S. 1 a GDPR). You can view Google’s privacy statement here: http://www.google.com/intl/de/policies/privacy

7. Contact

To get in touch regarding data protection, please contact us using the following details. Controller as defined by the GDPR:

Gesellschaft zur Förderung des Tierwohls in der Nutztierhaltung mbH
Schwertberger Str. 14
5317 Bonn
E-Mail: info@haltungsform.de
Telephone: +49 (0) 228 336485-0

Our data protection officer will also be happy to assist you:

Thorsten Werning
Tel (0208) 69609-0
Fax (0208) 69609-190
e-mail twe@CONCEPTEC.de