Data protection on the trebbau.com website
Cologne, May 2021
(Website and contents of Trebbau direct media GmbH, hereinafter referred to as Trebbau).
Data protection at Trebbau
Data protection is a matter of trust, and your trust is important to us. Trebbau attaches great importance to the protection of personal data and complies with the laws on data protection and data security of the European Union and the Federal Republic of Germany.
Our aim is to welcome you as a new customer, to maintain a relationship to you as a customer, and to provide you with information and offers of interest to you. Therefore, we process your data in accordance with Article 6 paragraph 1 lit (a), (b) or (f) of the European General Data Protection Regulation and based on marketing criteria that satisfy your legitimate interests, to be able to provide services, and submit offers and information to you.
1. Data collection and use of personal data
a) Personal data are all information that identify you, such as your name, your e-mail or postal address. For a start, we only collect and save data, if your are willing to provide them to us. This may include information that you enter into our contact form, for example. The data is used for the intended purpose (mailing information materials, offers, etc.), and occasionally for our own promotional advertising. If a business relation is established, the data will be used for the provision and processing of contractually agreed services. Within the framework of order processing, we will exclusively disclose data to service providers deployed by us (forwarding agencies, logistics providers, financing banks) that are necessary to fulfil their tasks. Apart from that, Trebbau will not disclose your personal data to any third parties, nor will we use it for any other purposes. The employees of Trebbau are obligated to maintain confidentiality.
b) Login: Certain offers are not available in the public domain, but only via a password-protected direct access specifically set up for you. You undertake to treat your access details as confidential, and not disclose these to unauthorised third parties. We do not assume liability for passwords that were improperly used, unless the fault for the misuse is on our part. For important changes, such as changes to the scope of the offer or technically necessary changes, we will use the e-mail address provided during registration to inform you in this way. The data entered during registration is processed for the purpose of implementing the user relationship established by the registration and, if applicable, for the initiation of further contracts (Art. 6 Para. 1, b) GDPR). The data entered during registration is stored by us for as long as you are registered on this website and is then deleted. Legal retention periods remain unaffected.
c) Children and youth: Offers by Trebbau are aimed solely to entrepreneurs within the meaning of Article 14 of the German Civil Code. Trebbau advises all parents and guardians to instruct their children on secure and responsible use of personal data on the Internet. Minors should not transmit any personal data to the Trebbau website without the permission of their parents or guardians! Trebbau undertakes to not knowingly collect personal data from minors, or disclose it to third parties without permission.
d) Amendments: If your personal information changes (e.g. zip code, e-mail, postal address), please email the changes to Trebbau at firstname.lastname@example.org in order to correct or update your personal data.
2. Other data
Other data is automatically collected by our IT systems when you visit our website. These are mainly technical data (e.g. web browser, operating system, or time the web page is accessed). These data are collected automatically, as soon as the website is opened. Part of the data is collected in order to ensure the provision of a website free of errors. Other data may be used to analyse your user behaviour. When you visit our website, even through a link in our newsletter, for example, the domain name or IP address of the computer making the inquiry will be recorded from time to time for the purpose of system security. The same applies to the data input, date of access, http-response code and the website from which the computer accessed our web pages, as well as finally, to the data volume (bytes) that is transmitted. In addition, we save information in form of so-called “Cookies” on your computer (see section 10.).
3. SSL and TLS encryption
This website uses SSL or TLS encryption for security reasons and for the protection of the transmission of confidential content, such as the inquiries you send to us as the site operator. You can recognize an encrypted connection in your browser’s address line when it changes from “http://” to “https://” and the lock icon is displayed in your browser’s address bar. If SSL or TLS encryption is activated, the data you transfer to us cannot be read by third parties.
4. External Hosting
This website is hosted by an external service provider (host). Personal data collected on this website are stored on the servers of the host. These may include, but are not limited to, IP addresses, contact requests, metadata and communications, contract information, contact information, names, web page access, and other data generated through a web site. The host is used for the purpose of fulfilling the contract with our potential and existing customers (Art. 6 para. 1 lit. b GDPR) and in the interest of secure, fast and efficient provision of our online services by a professional provider (Art. 6 para. 1 lit. f GDPR). Our host will only process your data to the extent necessary to fulfil its performance obligations and to follow our instructions with respect to such data. In order to guarantee processing in compliance with data protection regulations, we have concluded an order processing contract with our host.
5. Newsletters, sweepstakes and promotions
a) If you are interested in subscribing to the newsletter offered on the website, we need you to provide a valid email address and information that allows us to check that you are the owner of the email address provided, and that you consent to the receipt of the newsletter. Additional data are not collected, or collected on a voluntary basis only. We use your data exclusively to send out the requested information, and we will not disclose it to any third parties. The data entered into the newsletter registration form are exclusively processed based on your prior consent (Article 6 paragraph 1 lit. (a) of the GDPR). Your are entitled to revoke your granted consent to save the data and the email address for the purpose of mailing the newsletter via the “unsubscribe” link in the newsletter. The fundamental conditions for the lawfulness of the already performed data processing will remain unaffected, if the authorisation is revoked. The information submitted by you for the sole purpose of subscribing to the newsletter are saved by us, until you cancel the subscription to our newsletter. The data will then be deleted. Data stored with us for other purposes (e.g. email addresses for the membership section) remain unaffected.
b) For potential sweepstakes we use the data for the purpose of notification of the winner.
c) Important: You are obviously entitled to revoke your consent at any time for us to use your personal data for promotional purposes, as well as to unsubscribe from further newsletters. You will find an unsubscribe link in every newsletter. Please send your request to revoke your consent by email to: email@example.com
6. Contact form
If you use the contact form to submit inquiries to us, the details you supply on the form, including the contact information you provide, will be saved by us for the purpose of processing the inquiry and in case of follow-up quotations. We will not disclose this information without your consent. We will, therefore, process any data you enter onto the contact form only with your consent per Article 6 paragraph 1 lit. (a) of the GDPR. You may revoke your consent at any time. An informal email is sufficient for this matter. The fundamental conditions for the lawfulness of the data processing performed until the revocation will remain unaffected. The data entered by you in the contact form remain with us until your request for deletion, the revocation of your consent, or if the purpose for saving the data has become irrelevant (e.g. upon completion of the processing of your enquiry). Mandatory statutory provisions – in particular retention periods – remain unaffected.
7. Request by e-mail, telephone or fax
If you contact us by e-mail, telephone or fax, your request, including all resulting personal data (name, request) will be stored and processed by us for the purpose of processing your request. We do not pass these data on without your consent. These data are processed on the basis of Art. 6 Sect. 1 lit. b GDPR if your inquiry is related to the fulfillment of a contract or is required for the performance of pre-contractual measures. In all other cases, the data are processed on the basis of our legitimate interest in the effective handling of inquiries submitted to us (Art. 6 Sect. 1 lit. f GDPR) or on the basis of your consent (Art. 6 Sect. 1 lit. a GDPR) if it has been obtained. The data sent by you to us via contact requests remain with us until you request us to delete, revoke your consent to the storage or the purpose for the data storage lapses (e.g. after completion of your request). Mandatory statutory provisions – in particular statutory retention periods – remain unaffected.
8. Processing of customer and contract data
We collect, process and use personal data only to the extent necessary for the establishment, content organization or change of the legal relationship (data inventory). These actions are taken on the basis of Art. 6 Sect. 1 lit. b GDPR, which permits the processing of data for the fulfilment of a contract or pre-contractual actions. We collect, process and use personal data concerning the use of this website (usage data) only to the extent that this is necessary to make it possible for users to utilize the services and to bill for them. The collected customer data shall be eradicated upon completion of the order or the termination of the business relationship. This shall be without prejudice to any statutory retention mandates.
9. Your rights
a) Revocation of your consent to the processing of data
Some data processing transactions are possible only subject to your express consent. You can also revoke at any time any consent you have already given us. This shall be without prejudice to the lawfulness of any data collection that occurred prior to your revocation.
b) ight to object to the collection of data in special cases; right to object to direct advertising (Art. 21 GDPR
IN THE EVENT THAT DATA ARE PROCESSED ON THE BASIS OF ART. 6 SECT. 1 LIT. E OR F GDPR, YOU HAVE THE RIGHT TO AT ANY TIME OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA BASED ON GROUNDS ARISING FROM YOUR UNIQUE SITUATION. THIS ALSO APPLIES TO ANY PROFILING BASED ON THESE PROVISIONS. TO DETERMINE THE LEGAL BASIS, ON WHICH ANY PROCESSING OF DATA IS BASED, PLEASE CONSULT THIS DATA PROTECTION DECLARATION. IF YOU LOG AN OBJECTION, WE WILL NO LONGER PROCESS YOUR AFFECTED PERSONAL DATA, UNLESS WE ARE IN A POSITION TO PRESENT COMPELLING PROTECTION WORTHY GROUNDS FOR THE PROCESSING OF YOUR DATA, THAT OUTWEIGH YOUR INTERESTS, RIGHTS AND FREEDOMS OR IF THE PURPOSE OF THE PROCESSING IS THE CLAIMING, EXERCISING OR DEFENCE OF LEGAL ENTITLEMENTS (OBJECTION PURSUANT TO ART. 21 SECT. 1 GDPR). IF YOUR PERSONAL DATA IS BEING PROCESSED IN ORDER TO ENGAGE IN DIRECT ADVERTISING, YOU HAVE THE RIGHT TO AT ANY TIME OBJECT TO THE PROCESSING OF YOUR AFFECTED PERSONAL DATA FOR THE PURPOSES OF SUCH ADVERTISING. THIS ALSO APPLIES TO PROFILING TO THE EXTENT THAT IT IS AFFILIATED WITH SUCH DIRECT ADVERTISING. IF YOU OBJECT, YOUR PERSONAL DATA WILL SUBSEQUENTLY NO LONGER BE USED FOR DIRECT ADVERTISING PURPOSES (OBJECTION PURSUANT TO ART. 21 SECT. 2 GDPR).
c) Right to log a complaint with the competent supervisory agency
In the event of violations of the GDPR, data subjects are entitled to log a complaint with a supervisory agency, in particular in the member state where they usually maintain their domicile, place of work or at the place where the alleged violation occurred. The right to log a complaint is in effect regardless of any other administrative or court proceedings available as legal recourses.
d) Right to data portability
You have the right to demand that we hand over any data we automatically process on the basis of your consent or in order to fulfil a contract be handed over to you or a third party in a commonly used, machine readable format. If you should demand the direct transfer of the data to another controller, this will be done only if it is technically feasible.
e) Information about, rectification and eradication of data
Within the scope of the applicable statutory provisions, you have the right to at any time demand information about your archived personal data, their source and recipients as well as the purpose of the processing of your data. You may also have a right to have your data rectified or eradicated. If you have questions about this subject matter or any other questions about personal data, please do not hesitate to contact us at any time at the address provided in section “Information Required by Law.”
f) Right to demand processing restrictions
You have the right to demand the imposition of restrictions as far as the processing of your personal data is concerned. To do so, you may contact us at any time at the address provided in section “Information Required by Law.” The right to demand restriction of processing applies in the following cases: In the event that you should dispute the correctness of your data archived by us, we will usually need some time to verify this claim. During the time that this investigation is ongoing, you have the right to demand that we restrict the processing of your personal data. If the processing of your personal data was/is conducted in an unlawful manner, you have the option to demand the restriction of the processing of your data in lieu of demanding the eradication of this data. If we do not need your personal data any longer and you need it to exercise, defend or claim legal entitlements, you have the right to demand the restriction of the processing of your personal data instead of its eradication. If you have raised an objection pursuant to Art. 21 Sect. 1 GDPR, your rights and our rights will have to be weighed against each other. As long as it has not been determined whose interests prevail, you have the right to demand a restriction of the processing of your personal data. If you have restricted the processing of your personal data, these data – with the exception of their archiving – may be processed only subject to your consent or to claim, exercise or defend legal entitlements or to protect the rights of other natural persons or legal entities or for important public interest reasons cited by the European Union or a member state of the EU.
The website sometimes uses so-called cookies. Cookies do not damage your computer and do not contain viruses. Cookies serve to make our offer more user-friendly, more effective and safer. This website uses almost exclusively so-called functional or essential cookies, i.e. cookies without which the operation of the website is not possible. Cookies are small text files that are stored on your computer and saved by your browser. Most of the cookies we use are so-called “session cookies”. They are automatically deleted at the end of your visit. Other cookies remain stored on your end device until you delete them. These cookies enable us to recognize your browser the next time you visit us. You can set your browser so that you are informed about the setting of cookies and allow cookies only in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when closing the browser. If you deactivate cookies, the functionality of this website may be limited. Cookies that are required to carry out the electronic communication process or to provide certain functions that you have requested (e.g. shopping basket function) are stored on the basis of Art. 6 Paragraph 1, f) GDPR. The website operator has a legitimate interest in the storage of cookies for the technically error-free and optimised provision of his services.
For cookies that are required to use Google Maps or Google Recaptcha, we ask for your consent on the relevant website (Art. 6 para. 1, a) GDPR).
11. Links to other websites
12. LinkedIn Plugin
13. XING Plugin
14. Google reCAPTCHA
15. Google Maps
Via an API, this website uses the mapping service Google Maps. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. To enable the use of the Google Maps features, your IP address must be stored. As a rule, this information is transferred to one of Google’s servers in the United States, where it is archived. The operator of this website has no control over the data transfer. We use Google Maps to present our online content in an appealing manner and to make the locations disclosed on our website easy to find. This constitutes a legitimate interest as defined in Art. 6 Sect. 1 lit. f GDPR. If a respective declaration of consent has been obtained, the data shall be processed exclusively on the basis of Art. 6 Sect. 1 lit. a GDPR. This declaration of consent may be revoked at any time. For more information on the handling of user data, please review Google’s Data Privacy Declaration under: https://policies.google.com/privacy?hl=en.
16. Online-based Audio and Video Conferences (Conference tools)
a) Data processing
We use online conference tools, among other things, for communication with our customers. The tools we use are listed in detail below. If you communicate with us by video or audio conference using the Internet, your personal data will be collected and processed by the provider of the respective conference tool and by us. The conferencing tools collect all information that you provide/access to use the tools (email address and/or your phone number). Furthermore, the conference tools process the duration of the conference, start and end (time) of participation in the conference, number of participants and other “context information” related to the communication process (metadata). Furthermore, the provider of the tool processes all the technical data required for the processing of the online communication. This includes, in particular, IP addresses, MAC addresses, device IDs, device type, operating system type and version, client version, camera type, microphone or loudspeaker and the type of connection. Should content be exchanged, uploaded or otherwise made available within the tool, it is also stored on the servers of the tool provider. Such content includes, but is not limited to, cloud recordings, chat/ instant messages, voicemail uploaded photos and videos, files, whiteboards and other information shared while using the service. Please note that we do not have complete influence on the data processing procedures of the tools used. Our possibilities are largely determined by the corporate policy of the respective provider. Further information on data processing by the conference tools can be found in the data protection declarations of the tools used, and which we have listed below this text.
b) Purpose and legal bases
The conference tools are used to communicate with prospective or existing contractual partners or to offer certain services to our customers (Art. 6 para. 1 sentence 1 lit. b GDPR). Furthermore, the use of the tools serves to generally simplify and accelerate communication with us or our company (legitimate interest in the meaning of Art. 6 para. 1 lit. f GDPR). Insofar as consent has been requested, the tools in question will be used on the basis of this consent; the consent may be revoked at any time with effect from that date.
c) Duration of storage
Data collected directly by us via the video and conference tools will be deleted from our systems immediately after you request us to delete it, revoke your consent to storage, or the reason for storing the data no longer applies. Stored cookies remain on your end device until you delete them. Mandatory legal retention periods remain unaffected. We have no influence on the duration of storage of your data that is stored by the operators of the conference tools for their own purposes. For details, please contact directly the operators of the conference tools.
d) Conference tools used: Zoom
e) Conference tools used: Microsoft Teams
17. Job Applications
We offer website visitors the opportunity to submit job applications to us (e.g. via e-mail, via postal services on by submitting the online job application form). Below, we will brief you on the scope, purpose and use of the personal data collected from you in conjunction with the application process. We assure you that the collection, processing and use of your data will occur in compliance with the applicable data privacy rights and all other statutory provisions and that your data will always be treated as strictly confidential If you submit a job application to us, we will process any affiliated personal data (e.g. contact and communications data, application documents, notes taken during job interviews, etc.), if they are required to make a decision concerning the establishment or an employment relationship. The legal grounds for the aforementioned are § 26 New GDPR according to German Law (Negotiation of an Employment Relationship), Art. 6 Sect. 1 lit. b GDPR (General Contract Negotiations) and – provided you have given us your consent – Art. 6 Sect. 1 lit. a GDPR. You may revoke any consent given at any time. Within our company, your personal data will only be shared with individuals who are involved in the processing of your job application. If your job application should result in your recruitment, the data you have submitted will be archived on the grounds of § 26 New BDSG and Art. 6 Sect. 1 lit. b GDPR for the purpose of implementing the employment relationship in our data processing system. Data Archiving Period If we are unable to make you a job offer or you reject a job offer or withdraw your application, we reserve the right to retain the data you have submitted on the basis of our legitimate interests (Art. 6 para. 1 lit. f GDPR) for up to 6 months from the end of the application procedure (rejection or withdrawal of the application). Afterwards the data will be deleted, and the physical application documents will be destroyed. The storage serves in particular as evidence in the event of a legal dispute. If it is evident that the data will be required after the expiry of the 6-month period (e.g. due to an impending or pending legal dispute), deletion will only take place when the purpose for further storage no longer applies. Longer storage may also take place if you have given your agreement (Article 6 (1) (a) GDPR) or if statutory data retention requirements preclude the deletion.
18. Statutory prescribed data protection officer
If you have any questions regarding the processing and storing of your personal data, please do not hesitate to contact our data protection officer:
Helsper & Helsper – Attorneys
Am Kielshof 18
If you, as the data subject, have any questions or requests regarding your personal data stored with Trebbau that have been submitted in relation to our job as service provider to be able to process the order data, please do not hesitate to contact us directly, or our data protection officer. We will be at your disposal to clarify questions concerning spam, in so far as we are involved in the specific cases, and have influence on the situation.
19. Controller information
Controller means a natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data (e.g. name, email address or similar). The company responsible for data processing on this website is:
Trebbau direct media GmbH
Schönhauser Str. 21
Telephone: +49(0)221/3 76 46-0