Data category
Access data
The provisions of the basic EU data protection regulation (hereinafter DSGVO) apply throughout Europe. We would like to inform you about the processing of personal data carried out by our company in accordance with this Regulation (see Articles 13 and 14 DSGVO). If you have any questions or comments about this data protection declaration, you can send them at any time to the e-mail address given under item 2 or 3.
In this section of the data protection declaration you will find information on the scope of application, the person responsible for data processing, his data protection officer and data security.
Data processing by ARDEX can essentially be divided into two categories:
- All data necessary for the execution of a contract with ARDEX will be processed for the purpose of contract execution. If external service providers are also involved in the processing of the contract, e.g. logistics companies or payment service providers, your data will be passed on to them to the required extent.
- When you access the ARDEX website/application, various information is exchanged between your end device and our server. This may also include personal data. The information collected in this way is used, among other things, to optimize our website or to display advertising in your terminal's browser.
This data protection declaration applies to the following offers:
- our newsletter offer available at www.ardex.de/newsletter
- our Internet pages, e.g. www.ardex.de, www.pandomo.de, http://www.perfektimsystem.de/, www.echte-teufelskerle.de, www.ardex-campus.de, www.ardex.nl, www.ardex.eu, etc.
- our online shop available at https://ardex.smake.com/
- our apps like ARDEX and ARDEX Natural Stone
- if otherwise from one of our offers (e.g. websites, subdomains, mobile applications, web services or integration into third party sites) is referred to this data protection declaration, regardless of how you access or use it.
All these offers are also collectively referred to as "Services".
The party responsible for data processing - i.e. the one who decides on the purposes and means of processing personal data - in connection with the services is ARDEX GmbH
Friedrich-Ebert-Str. 45
58453 Witten
Telephone: 02302 664 0
E-Mail: info(at)ardex.de
You can contact our data protection officer as follows:
Contact form:
DS EXTERN GmbH
Dipl.-Kfm. Marc Althaus
Bredkamp 53a
D-22589 Hamburg
In order to develop the measures required in Art. 32 DSGVO and thus achieve a level of protection appropriate to the risk, we have established the information security standard in our company on the basis of VdS 3473.
In this section of the data protection declaration we inform you in detail about the processing of personal data within the scope of our services. For better clarity, we structure this information according to certain functionalities of our services. In the normal use of the services, different functionalities and thus also different processes can come into effect one after the other or simultaneously.
Unless otherwise stated, the following applies to all processing operations described below:
a. No obligation to provide
There is no contractual or legal obligation to provide personal data. You are not obliged to provide data.
b. Consequences of nonprovision
Failure to provide the required data (data marked as mandatory during entry) means that the service in question cannot be provided. Otherwise, failure to make our services available may mean that they cannot be provided in the same form and quality.
c. Acquiescence
In various cases, you also have the option of giving us your consent (possibly for part of the data) to further processing in connection with the processing described below. In this case, we will inform you separately in connection with the submission of the respective declaration of consent about all modalities and the scope of the consent and about the purposes which we pursue with these processing steps.
d. Transfer of personal data to third countries
If we transfer data to third countries, i.e. countries outside the European Union, then the transfer takes place exclusively in compliance with the legally regulated admissibility requirements.
The admissibility requirements are regulated by Arts. 44 -49 DSGVO.
e. Hosting with external service providers
Our data processing takes place to a large extent with the involvement of so-called hosting service providers, who provide us with storage space and processing capacities in their data centers and also process personal data on our behalf in accordance with our instructions. These service providers process data either exclusively in the EU or we have guaranteed an adequate level of data protection through the EU standard data protection clauses.
f. Transmission to state authorities
We transmit personal data to state authorities (including law enforcement authorities) if this is necessary to fulfil a legal obligation to which we are subject (legal basis: Art. 6 para. 1 c) DSGVO) or if it is necessary to assert, exercise or defend legal claims (legal basis: Art. 6 para. 1 f) DSGVO).
g. Storage period
We do not store your data longer than we need it for the respective processing purposes. If the data are no longer required for the fulfilment of contractual or legal obligations, they are regularly deleted, unless their temporary storage is still necessary. Reasons for this could be, for example, the following:
· The fulfilment of commercial and tax retention obligations
· Obtaining evidence for legal disputes within the framework of the statutory statute of limitations
It is also possible for us to continue to store your data with us if you have given your express consent.
h. Categories of data
- Account information: Login-/User identification and password
- Personal data: Title, Salutation/Gender, First name, Last name, Date of birth
- Occupational group
- Address: Street, house number, additional address (if applicable), postcode, city, country
- Contact info: Telephone number(s), fax number(s), e-mail address(es)
- Registration details: Information about the service through which you have registered; dates and technical information on registration, confirmation and cancellation; data provided by you when you registered
- Order details: Ordered products, prices, payment and delivery information
- Payment details: Account data, credit card data, data on other payment services such as Paypal
- Access data: Date and time of the visit to our service; the page from which the accessing system came to our site; pages accessed during use; session ID data; also the following information about the accessing computer system: Internet protocol address used (IP address), browser type and version, device type, operating system and similar technical information.
- Application details: Curriculum vitae, certificates, proofs, work samples, certificates, pictures.
- Data according to Art. 9 DSGVO: Data revealing racial and ethnic origin, political opinions, religious or philosophical beliefs or trade union membership, as well as genetic data, biometric data uniquely identifying a natural person, health data or data relating to a natural person's sex life or sexual orientation.
2. Calling the website/application
This section describes how we process your personal data when you access our services. We would particularly like to point out that the transmission of access data to external content providers (see b.) is unavoidable due to the technical functioning of information transmission on the Internet.
Data category
Access data
Assigned purpose
Connection establishment, presentation of the contents of the service, detection of attacks on our site based on unusual activities, fault diagnosis.
Legal basis
Art. 6 para. 1 f) DSGVO
Storage period
7 days
Recipient category
External content providers that provide content (such as images, videos, social network embedded postings, banners, fonts, update information) required to view the Service.
Data concerned
access data
Legal basis of the transmission
Order processing (Art. 28 DSGVO)
Legitimate interest, if applicable
proper functioning of the services, (accelerated) presentation of content
Recipient category
Internal IT security
Data concerned
Access data
Legal basis for the transfer
Order processing (Art. 28 DSGVO)
Legitimate interest, if applicable
Prevention of attacks by exploiting security holes / vulnerabilities
Recipient category
Hosting service provider
Data concerned
Access data
Legal basis of the transmission
Order processing (Art. 28 DSGVO)
Legitimate interest, if applicable
Hosting of the website
3. Newsletter
We describe here what happens to your personal data in connection with a subscription to our newsletter:
Data category
E-Mail-address
Assigned purpose
Verification of registration (double opt-in procedure), sending of newsletters
Legal basis
Art. 6 para. 1 letter b) DSGVO
Storage period
Duration of the newsletter subscription, consent can be revoked at any time
Data category
Personal data
Assigned purpose
Personalization of the newsletter
Legal basis
Art. 6 para. 1 letter b) DSGVO
Storage period
Duration of the newsletter subscription, consent can be revoked at any time
Data category
Registration data
Assigned purpose
Traceability of newsletter subscription/confirmation/unsubscription
Legal basis
Article 6(1)(b), (f) DSBER
Legitimate interest, if applicable
Proof of newsletter subscription/confirmation/unsubscription
Storage time
Duration of the newsletter subscription, consent can be revoked at any time
Data category
User profile data Newsletter
Assigned purpose
Design of the newsletter in line with your interests
Legal basis
Article 6, paragraph 1, letter f) DSGVO
Legitimate interest, if applicable
Improvement of our service, advertising purposes
Storage time
Duration of the newsletter subscription, consent can be revoked at any time
Recipient category
Service provider for newsletter dispatch (CleverReach® GmbH & Co. KG)
Data concerned
All data mentioned under a.
Legal basis of the transmission
Order processing (Art. 28 DSGVO)
Legitimate interest, if applicable
Sending of the newsletter/storage and processing of the order data
Recipient category
ARDEX GmbH
Data concerned
all data mentioned under a.
Legal basis of the transmission
Order processing (Art. 28 DSGVO)
Legitimate interest, if applicable
Advertising purposes and individualized newsletters
4. Application process
In an ongoing application process with regard to applications received from candidates (m/f) or through the provision of application documents by personnel consultants, etc., we process your personal data in the following manner:
Data category
Address data, contact details
intended purpose
Identification, contact, communication for contract initiation
Legal basis
Art. 6 para. 1 b) DSGVO
Storage period
If the application does not lead to an employment: 6 months,
as far as no consent for further storage is available.
Data category
Personal data
Assigned purpose
Identification, contacting, content checking
Art. 6 para. 1 b) DSGVO
Storage data
6 months, regulations as before
Data category
Application data
Assigned purpose
Selection of applicants
Legal basis
Art. 6 para. 1 b) DSGVO
Storage period
6 months, regulations as before
5. Purchasing
If you are a contact person of one of our suppliers, we process your personal data in the following way:
Data category
Personal master data, address data, contact data
Assigned purpose
Establishing contacts, communication for contract initiation and execution (especially delivery of goods)
Legal basis
Art. 6 para. 1 b) DSGVO
Storage period
3 years after the end of the business relationship
Recipient category
Contact person data will only be passed on internally
6. Sales
If you are a contact person for one of our customers, we process your personal data in the following way:
Category of data
Personal data, address, contact data
Assigned purpose
Establishing contacts, communication for contract initiation and execution (especially delivery of goods)
Legal basis
Art. 6 para. 1 b), f) DSGVO
Legitimate interest, if applicable
Customer relationship management
Storage period
3 years after the end of the business relationship
Recipient category
Contact person data will only be passed on internally
7. Customer support
How we process your personal data when you contact our customer service can be found here:
Data category
Personal data, contact data, contents of inquiries/complaints
Assigned purpose
Handling of customer inquiries and user complaints
Legal basis
Art. 6 para. 1 b), f)
Legitimate interest, if applicable
Customer loyalty, improvement of our service
Storage period
Processing of the request
Recipient category
Personal data will only be passed on internally
8. Training courses
The following information describes how your personal data is processed when you register for and attend our training courses:
- Registration for the seminar via the registration form of ARDEX area managers or via the website
http://www.ardex.de/ardex/ardexacademy/seminare
- Feedback questionnaires and participation forms following a training course are available in the training centres
- ARDEX certificates that are subsequently sent to customers
Data category
Personal data, contact details
Designated purpose
Processing of customer enquiries, sending the seminar programme/certificate
Legal basis
Art. 6 para. 1 b), f)
Legitimate interest, if applicable
Customer loyalty, improvement of our service, issue of ARDEX certificates
Storage period
Duration of the customer relationship, consent can be revoked at any time
Category of data
Contents of the questionnaires/evaluations of the seminars
Designated purpose
Processing of customer feedback
Legal basis
Art. 6 para. 1 b), f)
Justifiable interest, if applicable
Improving our service
Storage data
Duration of the customer relationship, consent can be revoked at any time
Recipient category
Personal data will only be passed on internally
Data concerned
all data mentioned under a.
Legitimate interest, if applicable
Improvement of our range of seminars, issue of certificates
9. Shopping in the online shop
The following information describes how your personal data is processed when you shop in our online shop.
Category of data
Persona data, contact data
Designated purpose
Processing of purchases of advertising material
Legal basis
Art. 6 para. 1 b), f)
Legitimate interest
Sale/purchase of advertising materials
Storage data
Duration of the customer relationship, consent can be revoked at any time
Recipient category
Service provider for the webshop
Data concerned
all data mentioned under a.
Legal basis of the transmission
Order processing (Art. 28 DSGVO)Legal basis of the transmission
10. Tracking
Below we describe how your personal data is processed using tracking technologies to analyze and optimize our services and for advertising purposes.
The description of the tracking procedures also includes information on how you can prevent or object to data processing. Please note that the so-called "Opt-out", i.e. the refusal of processing, is usually stored via cookies. If you use our services via a new terminal or in another browser or if you have deleted the cookies set by your browser, you must declare your rejection again.
The tracking procedures shown process personal data only in pseudonymous form. A connection with a concrete, identified natural person, i.e. a combination of the data with information about the bearer of the pseudonym, does not take place.
a. Tracking to analyse and optimise our services and their use, to measure the success of advertising campaigns and to optimise the display of advertising
The analysis of user behavior via tracking helps us to check the effectiveness of our services, to optimize and adapt them to the needs of the users and to correct errors. Furthermore, it serves to statistically determine characteristic values about the use of our services (range, intensity of use, surfing behaviour of users) - on the basis of uniform standard procedures - and thus to obtain market-wide comparable values.
Tracking to measure the success of advertising campaigns serves to optimize our ads for the future and to enable marketers and advertisers to optimize their ads accordingly. The purpose of tracking to optimize the display of advertising is to show users advertising tailored to their interests, to increase the success of advertising and thus also advertising revenues.
For services that make the behaviour of affected persons on the Internet comprehensible and for the creation of user profiles, informed consent within the meaning of the DSGVO is required.
Name of the service
Google Analytics
Operating principle
Webanalyse
Possibility to prevent processing (opt-out)
tools.google.com/dlpage/gaoptout?hl=de
Data transmission to third countries?
no
Name of the service
Double Click
operating principle
commercial
Possibility to prevent processing (opt-out)
https://www.google.com/settings/ads/
Data transmission to third parties?
yes
Where appropriate, appropriate guarantees (Art. 46 DSGVO)
EU-U.S. Privacy Shield
Name of the service
GA Audiences
Operating principle
commercial
Possibility to prevent processing (opt-out)
tools.google.com/dlpage/gaoptout?hl=de
Data transmission to third parties?
no
If you wish to opt-out of interest-based advertising, you can also visit http://www.youronlinechoices.com/de/, click on "Preference Management" and follow the instructions to completely or individually prevent the use of data for interest-based advertising by the service providers listed there. You will still receive advertising that is not interest-based.
1. Right of objection
If we process your personal data for direct marketing purposes, you have the right to object at any time with future effect to the processing of personal data concerning you for the purpose of such advertising; this also applies to profiling, insofar as it is associated with such direct marketing.
You also have the right to object at any time, for reasons arising from your particular situation, with future effect, to the processing of personal data concerning you in accordance with Article 6(1)(e) or (f) DSGVO; this also applies to profiling based on these provisions.
You can try out your right of objection free of charge.
You can contact us via the contact details listed under I.2.
You have the right to know whether we process personal data concerning you, what personal data this may be, and further information in accordance with Art. 15 DSGVO.
You have the right to request us to correct any incorrect personal data concerning you without delay (Art. 16 DSGVO). Taking into account the purposes of the processing, you have the right to request the completion of incomplete personal data - also by means of a supplementary declaration.
You have the right to request us to delete personal data relating to you without delay, provided that one of the reasons stated in Art. 17 para. 1 DSGVO applies and the processing is not necessary for one of the purposes regulated in Art. 17 para. 3 DSGVO.
You are entitled to demand a restriction on the processing of your personal data if one of the conditions laid down in Article 18, paragraph 1, letters a) to d) DSGVO is met.
You have the right to receive the personal data concerning you that you have provided to us in a structured, common and machine-readable format. Furthermore, you have the right to transmit this data to another person responsible without any hindrance by us or to arrange for direct transmission by us, if this is technically possible. This should always apply if the basis of data processing is consent or a contract and the data is processed automatically. This does not apply to data stored in paper form only.
If the processing is based on your consent, you have the right to revoke the consent at any time. This does not affect the legality of the processing carried out on the basis of the consent until revocation.
You have a right of appeal to a supervisory authority.
Contract processor: A natural or legal person, authority, institution or other body processing personal data on behalf of the data controller.
Browser: Computer program for displaying websites (e.g. Chrome, Firefox, Safari)
Cookies: A "cookie" describes a small text file that is stored locally on the user's computer when visiting a website. This file stores data about the user's behaviour. If the browser is called up and the corresponding website is visited repeatedly, the cookie is used and gives the web server information about the user's surfing behaviour using the stored data.
In this context, cookies are not cookies, but information that a website stores locally on the visitor's computer in a small text file. This can be settings already made by the user on a page, but also information that the website has collected completely independently from the user. Later, these locally stored text files can be read out again from the same web server from which they were created. Most browsers automatically accept cookies. You can manage cookies using the browser functions (usually under "Options" or "Settings"). As a result, the storage of cookies can be deactivated, made dependent on your consent in individual cases or otherwise restricted. You can also delete cookies at any time.
Third countries: Country which is not bound to the legal requirements of the EU Data Protection Directive (country outside the EEA).
Personal data: All information relating to an identified or identifiable natural person. Identifiable is a natural person who can be identified directly or indirectly, in particular by assignment to an identifier such as a name, an identification number, location data, an online identifier or one or more special characteristics that express the physical, physiological, genetic, psychological, economic, cultural or social identity of that natural person.
Pixel: Pixels are also called tracking pixels, web beacons or web bugs. These are small, invisible graphics in HTML e-mails or on web pages. When a document is opened, this small image is loaded from a server on the Internet, where the download is registered. This allows the server operator to see if and when an e-mail has been opened or a website visited. This function is usually implemented by calling a small program (Javascript). This allows certain types of information on your computer system to be recognized and passed on, such as the content of cookies, the time and date of page views and a description of the page on which the pixel-code is located.
Profiling: any automated processing of personal data consisting in the use of such personal data to evaluate or predict certain personal aspects relating to a natural person, in particular aspects relating to his/her work performance, economic situation, health, personal preferences, interests, reliability, conduct, whereabouts or relocation
Services: Our offers to which this data protection declaration applies (see Scope of application).
Tracking: The collection of data and its evaluation with regard to the behaviour of visitors to our services.
Tracking-Technologies: Tracking can be done using the activity logs (log files) stored on our web servers or by collecting data from your end device via pixels, cookies and similar tracking technologies.
Processing: Any operation or series of operations carried out with or without the aid of automated procedures in connection with personal data, such as the collection, collection, organisation, sorting, storage, adaptation or modification, reading, querying, use, disclosure by transmission, dissemination or any other form of provision, comparison or linking, restriction, deletion or destruction.
Witten, May 2018