Data protection on the trebbau.com website

Cologne, May 2021

(Website and contents of Trebbau direct media GmbH, hereinafter referred to as Trebbau).

Data protection at Trebbau

On this website, the data is processed by Trebbau direct media GmbH. Our contact information can be found in the imprint of this website. It can also be found at the end of this privacy policy. There you will also find the contact details of our Data Protection Officer.

Data protection is a matter of trust, and your trust is important to us. Trebbau attaches great importance to the protection of personal data and complies with the laws on data protection and data security of the European Union and the Federal Republic of Germany.

This privacy policy provides information on how Trebbau uses information collected when you visit this website.

Our aim is to welcome you as a new customer, to maintain a relationship to you as a customer, and to provide you with information and offers of interest to you. Therefore, we process your data in accordance with Article 6 paragraph 1 lit (a), (b) or (f) of the European General Data Protection Regulation and based on marketing criteria that satisfy your legitimate interests, to be able to provide services, and submit offers and information to you.

1. Data collection and use of personal data

a) Personal data are all information that identify you, such as your name, your e-mail or postal address. For a start, we only collect and save data, if your are willing to provide them to us. This may include information that you enter into our contact form, for example. The data is used for the intended purpose (mailing information materials, offers, etc.), and occasionally for our own promotional advertising. If a business relation is established, the data will be used for the provision and processing of contractually agreed services. Within the framework of order processing, we will exclusively disclose data to service providers deployed by us (forwarding agencies, logistics providers, financing banks) that are necessary to fulfil their tasks. Apart from that, Trebbau will not disclose your personal data to any third parties, nor will we use it for any other purposes. The employees of Trebbau are obligated to maintain confidentiality.

b) Login: Certain offers are not available in the public domain, but only via a password-protected direct access specifically set up for you. You undertake to treat your access details as confidential, and not disclose these to unauthorised third parties. We do not assume liability for passwords that were improperly used, unless the fault for the misuse is on our part. For important changes, such as changes to the scope of the offer or technically necessary changes, we will use the e-mail address provided during registration to inform you in this way. The data entered during registration is processed for the purpose of implementing the user relationship established by the registration and, if applicable, for the initiation of further contracts (Art. 6 Para. 1, b) GDPR). The data entered during registration is stored by us for as long as you are registered on this website and is then deleted. Legal retention periods remain unaffected.

c) Children and youth: Offers by Trebbau are aimed solely to entrepreneurs within the meaning of Article 14 of the German Civil Code. Trebbau advises all parents and guardians to instruct their children on secure and responsible use of personal data on the Internet. Minors should not transmit any personal data to the Trebbau website without the permission of their parents or guardians! Trebbau undertakes to not knowingly collect personal data from minors, or disclose it to third parties without permission.

d) Amendments: If your personal information changes (e.g. zip code, e-mail, postal address), please email the changes to Trebbau at info@trebbau.com in order to correct or update your personal data.

2. Other data

Other data is automatically collected by our IT systems when you visit our website. These are mainly technical data (e.g. web browser, operating system, or time the web page is accessed). These data are collected automatically, as soon as the website is opened. Part of the data is collected in order to ensure the provision of a website free of errors. Other data may be used to analyse your user behaviour. When you visit our website, even through a link in our newsletter, for example, the domain name or IP address of the computer making the inquiry will be recorded from time to time for the purpose of system security. The same applies to the data input, date of access, http-response code and the website from which the computer accessed our web pages, as well as finally, to the data volume (bytes) that is transmitted. In addition, we save information in form of so-called “Cookies” on your computer (see section 10.).

3. SSL and TLS encryption

This website uses SSL or TLS encryption for security reasons and for the protection of the transmission of confidential content, such as the inquiries you send to us as the site operator. You can recognize an encrypted connection in your browser’s address line when it changes from “http://” to “https://” and the lock icon is displayed in your browser’s address bar. If SSL or TLS encryption is activated, the data you transfer to us cannot be read by third parties.

4. External Hosting

This website is hosted by an external service provider (host). Personal data collected on this website are stored on the servers of the host. These may include, but are not limited to, IP addresses, contact requests, metadata and communications, contract information, contact information, names, web page access, and other data generated through a web site. The host is used for the purpose of fulfilling the contract with our potential and existing customers (Art. 6 para. 1 lit. b GDPR) and in the interest of secure, fast and efficient provision of our online services by a professional provider (Art. 6 para. 1 lit. f GDPR). Our host will only process your data to the extent necessary to fulfil its performance obligations and to follow our instructions with respect to such data. In order to guarantee processing in compliance with data protection regulations, we have concluded an order processing contract with our host.

5. Newsletters, sweepstakes and promotions

a) If you are interested in subscribing to the newsletter offered on the website, we need you to provide a valid email address and information that allows us to check that you are the owner of the email address provided, and that you consent to the receipt of the newsletter. Additional data are not collected, or collected on a voluntary basis only. We use your data exclusively to send out the requested information, and we will not disclose it to any third parties. The data entered into the newsletter registration form are exclusively processed based on your prior consent (Article 6 paragraph 1 lit. (a) of the GDPR). Your are entitled to revoke your granted consent to save the data and the email address for the purpose of mailing the newsletter via the “unsubscribe” link in the newsletter. The fundamental conditions for the lawfulness of the already performed data processing will remain unaffected, if the authorisation is revoked. The information submitted by you for the sole purpose of subscribing to the newsletter are saved by us, until you cancel the subscription to our newsletter. The data will then be deleted. Data stored with us for other purposes (e.g. email addresses for the membership section) remain unaffected.

b) For potential sweepstakes we use the data for the purpose of notification of the winner.

c) Important: You are obviously entitled to revoke your consent at any time for us to use your personal data for promotional purposes, as well as to unsubscribe from further newsletters. You will find an unsubscribe link in every newsletter. Please send your request to revoke your consent by email to: info@trebbau.com

6. Contact form

If you use the contact form to submit inquiries to us, the details you supply on the form, including the contact information you provide, will be saved by us for the purpose of processing the inquiry and in case of follow-up quotations. We will not disclose this information without your consent. We will, therefore, process any data you enter onto the contact form only with your consent per Article 6 paragraph 1 lit. (a) of the GDPR. You may revoke your consent at any time. An informal email is sufficient for this matter. The fundamental conditions for the lawfulness of the data processing performed until the revocation will remain unaffected. The data entered by you in the contact form remain with us until your request for deletion, the revocation of your consent, or if the purpose for saving the data has become irrelevant (e.g. upon completion of the processing of your enquiry). Mandatory statutory provisions – in particular retention periods – remain unaffected.

7. Request by e-mail, telephone or fax

If you contact us by e-mail, telephone or fax, your request, including all resulting personal data (name, request) will be stored and processed by us for the purpose of processing your request. We do not pass these data on without your consent. These data are processed on the basis of Art. 6 Sect. 1 lit. b GDPR if your inquiry is related to the fulfillment of a contract or is required for the performance of pre-contractual measures. In all other cases, the data are processed on the basis of our legitimate interest in the effective handling of inquiries submitted to us (Art. 6 Sect. 1 lit. f GDPR) or on the basis of your consent (Art. 6 Sect. 1 lit. a GDPR) if it has been obtained. The data sent by you to us via contact requests remain with us until you request us to delete, revoke your consent to the storage or the purpose for the data storage lapses (e.g. after completion of your request). Mandatory statutory provisions – in particular statutory retention periods – remain unaffected.

8. Processing of customer and contract data

We collect, process and use personal data only to the extent necessary for the establishment, content organization or change of the legal relationship (data inventory). These actions are taken on the basis of Art. 6 Sect. 1 lit. b GDPR, which permits the processing of data for the fulfilment of a contract or pre-contractual actions. We collect, process and use personal data concerning the use of this website (usage data) only to the extent that this is necessary to make it possible for users to utilize the services and to bill for them. The collected customer data shall be eradicated upon completion of the order or the termination of the business relationship. This shall be without prejudice to any statutory retention mandates.

9. Your rights

a) Revocation of your consent to the processing of data
Some data processing transactions are possible only subject to your express consent. You can also revoke at any time any consent you have already given us. This shall be without prejudice to the lawfulness of any data collection that occurred prior to your revocation.

b) ight to object to the collection of data in special cases; right to object to direct advertising (Art. 21 GDPR
IN THE EVENT THAT DATA ARE PROCESSED ON THE BASIS OF ART. 6 SECT. 1 LIT. E OR F GDPR, YOU HAVE THE RIGHT TO AT ANY TIME OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA BASED ON GROUNDS ARISING FROM YOUR UNIQUE SITUATION. THIS ALSO APPLIES TO ANY PROFILING BASED ON THESE PROVISIONS. TO DETERMINE THE LEGAL BASIS, ON WHICH ANY PROCESSING OF DATA IS BASED, PLEASE CONSULT THIS DATA PROTECTION DECLARATION. IF YOU LOG AN OBJECTION, WE WILL NO LONGER PROCESS YOUR AFFECTED PERSONAL DATA, UNLESS WE ARE IN A POSITION TO PRESENT COMPELLING PROTECTION WORTHY GROUNDS FOR THE PROCESSING OF YOUR DATA, THAT OUTWEIGH YOUR INTERESTS, RIGHTS AND FREEDOMS OR IF THE PURPOSE OF THE PROCESSING IS THE CLAIMING, EXERCISING OR DEFENCE OF LEGAL ENTITLEMENTS (OBJECTION PURSUANT TO ART. 21 SECT. 1 GDPR). IF YOUR PERSONAL DATA IS BEING PROCESSED IN ORDER TO ENGAGE IN DIRECT ADVERTISING, YOU HAVE THE RIGHT TO AT ANY TIME OBJECT TO THE PROCESSING OF YOUR AFFECTED PERSONAL DATA FOR THE PURPOSES OF SUCH ADVERTISING. THIS ALSO APPLIES TO PROFILING TO THE EXTENT THAT IT IS AFFILIATED WITH SUCH DIRECT ADVERTISING. IF YOU OBJECT, YOUR PERSONAL DATA WILL SUBSEQUENTLY NO LONGER BE USED FOR DIRECT ADVERTISING PURPOSES (OBJECTION PURSUANT TO ART. 21 SECT. 2 GDPR).
c) Right to log a complaint with the competent supervisory agency
In the event of violations of the GDPR, data subjects are entitled to log a complaint with a supervisory agency, in particular in the member state where they usually maintain their domicile, place of work or at the place where the alleged violation occurred. The right to log a complaint is in effect regardless of any other administrative or court proceedings available as legal recourses.

d) Right to data portability
You have the right to demand that we hand over any data we automatically process on the basis of your consent or in order to fulfil a contract be handed over to you or a third party in a commonly used, machine readable format. If you should demand the direct transfer of the data to another controller, this will be done only if it is technically feasible.
e) Information about, rectification and eradication of data
Within the scope of the applicable statutory provisions, you have the right to at any time demand information about your archived personal data, their source and recipients as well as the purpose of the processing of your data. You may also have a right to have your data rectified or eradicated. If you have questions about this subject matter or any other questions about personal data, please do not hesitate to contact us at any time at the address provided in section “Information Required by Law.”
f) Right to demand processing restrictions
You have the right to demand the imposition of restrictions as far as the processing of your personal data is concerned. To do so, you may contact us at any time at the address provided in section “Information Required by Law.” The right to demand restriction of processing applies in the following cases: In the event that you should dispute the correctness of your data archived by us, we will usually need some time to verify this claim. During the time that this investigation is ongoing, you have the right to demand that we restrict the processing of your personal data. If the processing of your personal data was/is conducted in an unlawful manner, you have the option to demand the restriction of the processing of your data in lieu of demanding the eradication of this data. If we do not need your personal data any longer and you need it to exercise, defend or claim legal entitlements, you have the right to demand the restriction of the processing of your personal data instead of its eradication. If you have raised an objection pursuant to Art. 21 Sect. 1 GDPR, your rights and our rights will have to be weighed against each other. As long as it has not been determined whose interests prevail, you have the right to demand a restriction of the processing of your personal data. If you have restricted the processing of your personal data, these data – with the exception of their archiving – may be processed only subject to your consent or to claim, exercise or defend legal entitlements or to protect the rights of other natural persons or legal entities or for important public interest reasons cited by the European Union or a member state of the EU.

10. Cookies

The website sometimes uses so-called cookies. Cookies do not damage your computer and do not contain viruses. Cookies serve to make our offer more user-friendly, more effective and safer. This website uses almost exclusively so-called functional or essential cookies, i.e. cookies without which the operation of the website is not possible. Cookies are small text files that are stored on your computer and saved by your browser. Most of the cookies we use are so-called “session cookies”. They are automatically deleted at the end of your visit. Other cookies remain stored on your end device until you delete them. These cookies enable us to recognize your browser the next time you visit us. You can set your browser so that you are informed about the setting of cookies and allow cookies only in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when closing the browser. If you deactivate cookies, the functionality of this website may be limited. Cookies that are required to carry out the electronic communication process or to provide certain functions that you have requested (e.g. shopping basket function) are stored on the basis of Art. 6 Paragraph 1, f) GDPR. The website operator has a legitimate interest in the storage of cookies for the technically error-free and optimised provision of his services.

For cookies that are required to use Google Maps or Google Recaptcha, we ask for your consent on the relevant website (Art. 6 para. 1, a) GDPR).

11. Links to other websites

This privacy policy applies to the websites of Trebbau. The web pages on this website may contain links of third parties to which this privacy policy does not apply. When you leave the Trebbau website, we recommend to read the privacy policies of each web page that collects personal data.

12. LinkedIn Plugin

Our website uses functions of the Linkedln network. The service provider is the LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, US. Every time you access one of our pages that includes LinkedIn functions, the page creates a connection to LinkedIn servers. LinkedIn is informed that you have visited our website with your IP address. If you click the LinkedIn “Recommend button” and are logged into your account at LinkedIn, LinkedIn can associate your visit to our website with you and your user account. We would like to note that we, as the page provider, are not aware of the content of data transferred, nor of how it is used by LinkedIn. Further information is provided in the LinkedIn data privacy policy under: https://www.linkedin.com/legal/privacy-policy.

13. XING Plugin

Our website uses functions of the XING network. The service provider is XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany. Every time you access one of our pages that includes XING functions, the page creates a connection to XING servers. To our knowledge, no personal information is saved in the process. In particular, no IP addresses are saved, and user behaviour is not evaluated. Further information on data privacy and the XING share button is available in the XING data privacy policy under: https://www.xing.com/app/share?op=data_protection.

14. Google reCAPTCHA

We use “Google reCAPTCHA” (hereinafter referred to as “reCAPTCHA”) on this website. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. The purpose of reCAPTCHA is to determine whether data entered on this website (e.g. information entered into a contact form) is being provided by a human user or by an automated program. To determine this, reCAPTCHA analyzes the behavior of the website visitors based on a variety of parameters. This analysis is triggered automatically as soon as the website visitor enters the site. For this analysis, reCAPTCHA evaluates a variety of data (e.g. IP address, time the website visitor spent on the site or cursor movements initiated by the user). The data tracked during such analyses are forwarded to Google. reCAPTCHA analyses run entirely in the background. Website visitors are not alerted that an analysis is underway. Data are stored and analyzed on the basis of Art. 6 Sect. 1 lit. f GDPR. The website operator has a legitimate interest in the protection of the operator’s websites against abusive automated spying and against SPAM. If a respective declaration of consent has been obtained, the data will be processed exclusively on the basis of Art. 6 Sect. 1 lit. a DGDPR. Any such consent may be revoked at any time. For more information about Google reCAPTCHA please refer to the Google Data Privacy Declaration and Terms Of Use under the following links: https://policies.google.com/privacy?hl=en” and https://policies.google.com/terms?hl=en..

15. Google Maps

Via an API, this website uses the mapping service Google Maps. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. To enable the use of the Google Maps features, your IP address must be stored. As a rule, this information is transferred to one of Google’s servers in the United States, where it is archived. The operator of this website has no control over the data transfer. We use Google Maps to present our online content in an appealing manner and to make the locations disclosed on our website easy to find. This constitutes a legitimate interest as defined in Art. 6 Sect. 1 lit. f GDPR. If a respective declaration of consent has been obtained, the data shall be processed exclusively on the basis of Art. 6 Sect. 1 lit. a GDPR. This declaration of consent may be revoked at any time. For more information on the handling of user data, please review Google’s Data Privacy Declaration under: https://policies.google.com/privacy?hl=en.

16. Online-based Audio and Video Conferences (Conference tools)

a) Data processing
We use online conference tools, among other things, for communication with our customers. The tools we use are listed in detail below. If you communicate with us by video or audio conference using the Internet, your personal data will be collected and processed by the provider of the respective conference tool and by us. The conferencing tools collect all information that you provide/access to use the tools (email address and/or your phone number). Furthermore, the conference tools process the duration of the conference, start and end (time) of participation in the conference, number of participants and other “context information” related to the communication process (metadata). Furthermore, the provider of the tool processes all the technical data required for the processing of the online communication. This includes, in particular, IP addresses, MAC addresses, device IDs, device type, operating system type and version, client version, camera type, microphone or loudspeaker and the type of connection. Should content be exchanged, uploaded or otherwise made available within the tool, it is also stored on the servers of the tool provider. Such content includes, but is not limited to, cloud recordings, chat/ instant messages, voicemail uploaded photos and videos, files, whiteboards and other information shared while using the service. Please note that we do not have complete influence on the data processing procedures of the tools used. Our possibilities are largely determined by the corporate policy of the respective provider. Further information on data processing by the conference tools can be found in the data protection declarations of the tools used, and which we have listed below this text.

b) Purpose and legal bases
The conference tools are used to communicate with prospective or existing contractual partners or to offer certain services to our customers (Art. 6 para. 1 sentence 1 lit. b GDPR). Furthermore, the use of the tools serves to generally simplify and accelerate communication with us or our company (legitimate interest in the meaning of Art. 6 para. 1 lit. f GDPR). Insofar as consent has been requested, the tools in question will be used on the basis of this consent; the consent may be revoked at any time with effect from that date.

c) Duration of storage
Data collected directly by us via the video and conference tools will be deleted from our systems immediately after you request us to delete it, revoke your consent to storage, or the reason for storing the data no longer applies. Stored cookies remain on your end device until you delete them. Mandatory legal retention periods remain unaffected. We have no influence on the duration of storage of your data that is stored by the operators of the conference tools for their own purposes. For details, please contact directly the operators of the conference tools.

d) Conference tools used: Zoom
We use Zoom. The provider of this service is Zoom Communications Inc, San Jose, 55 Almaden Boulevard, 6th Floor, San Jose, CA 95113, USA. For details on data processing, please refer to Zoom’s privacy policy: https://zoom.us/en-us/privacy.html. Execution of a contract data processing agreement We have entered into a contract data processing agreement with the provider of Zoom and implement the strict provisions of the German data protection agencies to the fullest when using Zoom.

e) Conference tools used: Microsoft Teams
We use Microsoft Teams. The provider is Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA. For details on data processing, please refer to the Microsoft Teams privacy policy: https://privacy.microsoft.com/en-us/privacystatement. Execution of a contract data processing agreement We have entered into a contract data processing agreement with the provider of Microsoft Teams and implement the strict provisions of the German data protection agencies to the fullest when using Microsoft Teams.

17. Job Applications

We offer website visitors the opportunity to submit job applications to us (e.g. via e-mail, via postal services on by submitting the online job application form). Below, we will brief you on the scope, purpose and use of the personal data collected from you in conjunction with the application process. We assure you that the collection, processing and use of your data will occur in compliance with the applicable data privacy rights and all other statutory provisions and that your data will always be treated as strictly confidential If you submit a job application to us, we will process any affiliated personal data (e.g. contact and communications data, application documents, notes taken during job interviews, etc.), if they are required to make a decision concerning the establishment or an employment relationship. The legal grounds for the aforementioned are § 26 New GDPR according to German Law (Negotiation of an Employment Relationship), Art. 6 Sect. 1 lit. b GDPR (General Contract Negotiations) and – provided you have given us your consent – Art. 6 Sect. 1 lit. a GDPR. You may revoke any consent given at any time. Within our company, your personal data will only be shared with individuals who are involved in the processing of your job application. If your job application should result in your recruitment, the data you have submitted will be archived on the grounds of § 26 New BDSG and Art. 6 Sect. 1 lit. b GDPR for the purpose of implementing the employment relationship in our data processing system. Data Archiving Period If we are unable to make you a job offer or you reject a job offer or withdraw your application, we reserve the right to retain the data you have submitted on the basis of our legitimate interests (Art. 6 para. 1 lit. f GDPR) for up to 6 months from the end of the application procedure (rejection or withdrawal of the application). Afterwards the data will be deleted, and the physical application documents will be destroyed. The storage serves in particular as evidence in the event of a legal dispute. If it is evident that the data will be required after the expiry of the 6-month period (e.g. due to an impending or pending legal dispute), deletion will only take place when the purpose for further storage no longer applies. Longer storage may also take place if you have given your agreement (Article 6 (1) (a) GDPR) or if statutory data retention requirements preclude the deletion.

18. Statutory prescribed data protection officer

If you have any questions regarding the processing and storing of your personal data, please do not hesitate to contact our data protection officer:

Helsper & Helsper – Attorneys
Rudolf Helsper
Am Kielshof 18
51105 Cologne

If you, as the data subject, have any questions or requests regarding your personal data stored with Trebbau that have been submitted in relation to our job as service provider to be able to process the order data, please do not hesitate to contact us directly, or our data protection officer. We will be at your disposal to clarify questions concerning spam, in so far as we are involved in the specific cases, and have influence on the situation.

19. Controller information

Controller means a natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data (e.g. name, email address or similar). The company responsible for data processing on this website is:

Trebbau direct media GmbH
Schönhauser Str. 21
50968 Cologne
Telephone: +49(0)221/3 76 46-0
email: info@trebbau.com