Data Protection Policy

cosnova GmbH (hereinafter referred to as "we") welcome your interest in our company. It is therefore our concern that you feel safe with respect to the protection of your personal data when visiting our website consnova.com (hereinafter referred to as "website").

With this Data Protection Policy, we inform you about the type, scope and purpose of the personal data collected, used and processed by us when using our website. Personal data includes all data personally related to you, such as name, address, email addresses and user behaviour.

Via the following links, you can connect directly with the respective topics to find out how we use your personal data. You can also read, save and print this Data Protection Policy as an entire document.

Content of the Data Protection Policy

Please click on the following links in order to directly access the respective topics.

  1. 1. Information on the responsible data protection controller, data protection officer
  2. 2. Collection of personal data when visiting our website
  3. 3. Use of Google Analytics
  4. 4. DoubleClick by Google
  5. 5. Google Tag Manager
  6. 6. Our presence in social media
  7. 7. Incorporation of Google Maps
  8. 8. Your rights as data subject
  9. 9. Updating of the Data Protection Policy
  10. 10. Your contact to us, data processing when contacting us

 

1. Information on the responsible data protection controller, data protection officer

(a) The responsible data protection controller in terms of the Basic Data Protection Regulations and other national Data Protection Acts of the member states as well as other provisions according to the Data Protection Act is:

cosnova GmbH
Am Limespark 2
D-65843 Sulzbach
Phone: +49 (0)6196 / 76156-0
Fax: +49 (0)6196 / 76156-1298
Email: info@cosnova.com

More information about us is available in the imprint under www.cosnova.com/en/imprint.

(b) The data protection officer of the controller is:
Moritz Görmann
CTM-COM GmbH
Wilhelm-Leuschner-Straße 33
D-64380 Roßdorf
Phone: +49 (0)6154 - 57605-0
Fax: +49 (0)6154 - 57605-29
www.ctm-com.de

2. Collection of personal data when visiting our website

(a) During the mere informational usage of the website, i.e. if you do not otherwise transmit information to us, we only collect the personal data transmitted to our server by your browser. If you wish to view our website, we collect the following data, which is technically necessary for us to display to you our website and to ensure stability and security (legal basis is Article 6 (1) S. 1 lit. f GDPR):

  • - IP address
  • - Date and time of enquiry
  • - Content of requirement (specific page)
  • - Website from which the enquiry originates
  • - Browser
  • - Operating system

The above-mentioned data is erased immediately if they are no longer required for the above-mentioned purposes, however maximally 30 days after we have collected the data.

(b) In addition to the previously specified data, Cookies are stored on your computer during the usage of our website. Cookies are small text files which are stored on your hard drive allocated to the browser used by you and through which the location which places the Cookie (in this case we) receives certain information. Cookies cannot execute programs or transfer viruses to your computer. They serve to make the overall internet offer more user-friendly and effective.

(c) Use of Cookies:

aa) This website uses the following types of Cookies; their extent and functionality is explained below:

  • - Transient cookies (see bb)
  • - Persistent cookies (see cc).

bb) Transient Cookies are automatically deleted as soon as you close the browser. They particularly include the session Cookies. These store a so-called session ID, with which different requests of your browser can be assigned to the common session. As a result, your computer can be recognised when you return to our website. The Session Cookies are deleted when you log out or close the browser. Such a Cookie can, e.g., store the content of a shopping cart in an online shop or a log-in status.

cc) Persistent Cookies are automatically deleted after a specified duration, which may vary depending on the Cookie. You can delete the Cookies at any time in the security settings of your browser.

dd) You can configure your browser settings in accordance with your desires and, for example, reject the acceptance of Third-Party Cookies or all Cookies. Saved Cookies can be deleted in the systems settings of the browser. Please be aware that in this case you may not be able to use all functions of this website.

3. Use of Google Analytics

(a) This website uses Google analytics, a web analysis service of Google Inc. ("Google"). Google analytics uses so-called "Cookies", text files which are stored on your computer and permit the analysis of your usage of the website. The information regarding your usage of this website created with the Cookie is generally transmitted to a server of Google in the USA and stored there. However, if IP anonymization is activated on this website, your IP-address is initially limited within the member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP-address be transmitted to a Google server and limited there. Google will use this information on behalf of the operator of this website in order to evaluate your usage of the website, to compile reports on website activity and to provide further services to the operator of the website related to the usage of the website and the Internet.

(b) The IP-address transmitted by your browser in the context of Google analytics is not linked with other data by Google.

(c) You can prevent the storing of Cookies with a respective setting of your browser software; however, we would like to inform you that in this case you might not be able to use all functions of this website to their full extent. You can furthermore prevent the compilation of data (incl. your IP-address) generated by the Cookie and related to your usage of the website to Google as well as the processing of this data by Google by downloading and installing the browser-Plugin available under the following link: http://tools.google.com/dlpage/gaoptout?hl=de.

(d) This website uses Google Analytics with the addendum "_anonymizeIp()". Thereby, IP addresses are processed in a truncated form and any personal association can be excluded. If the data collected about you can be allocated to a person, the reference is excluded immediately and the personal data is thus deleted without delay.

(e) We use Google Analytics to analyse the usage of our website and improve it regularly. The obtained statistics help us to improve our offer and make it more interesting for you as the user. In the exceptional cases in which personal data is transferred to the USA, Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. Legal basis for the usage of Google Analytics is Article 6 (1) S. 1 lit. f GDPR.

(f) Information of the provider of Google Analytics: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. User conditions: http://www.google.com/analytics/terms/us.html,
Overview of data protection: https://support.google.com/analytics/answer/6004245?hl=en,
as well as the Data Protection Policy: https://policies.google.com/privacy?hl=en&gl=en.

4. DoubleClick by Google

(a) This website continues to use the online marketing tool DoubleClick by Google. DoubleClick utilises Cookies in order to provide relevant adverts for the users, to improve the reports for the campaign service or to avoid that a user sees the same advertisement several times. Via a Cookie ID, Google records which adverts are placed in which browser and can thus prevent that it is shown multiple times. In addition, DoubleClick can record so-called conversions with the assistance of Cookie IDs, which refer to advertisement enquiries. That may be the case if a user sees a DoubleClick advert and later accesses the website of the advertiser with the same browser and makes a purchase there. According to Google, DoubleClick Cookies contain no personal information.

(b) Based on the applied marketing tools, your browser automatically establishes a direct connection with the server of Google. We have no influence over the extent and further utilisation of the data collected by Google with the use of this tool and therefore inform you according to our knowledge: by using DoubleClick, Google receives the information that you have accessed the respective part of our website or have clicked on one of our adverts. If you are registered at a service of Google, Google can allocate the visit to your account. If you are not registered at Google or are not logged in, it is possible that the provider finds out your IP address and stores it.

(c) You can prevent the participation in this tracking process in various ways: a) by respectively setting your browser software, the suppression of third Cookies results in you not receiving adverts from third providers; b) by deactivating the Cookies for conversion tracking by setting your browser so that Cookies from the domain "www.googleadservices.com" are blocked, https://www.google.de/settings/ads, whereby this setting is erased when you delete your Cookies; c) by deactivating the interest-related adverts of the providers which are a part of the self-regulation campaign "About Ads“ via the link http://www.aboutads.info/choices, whereby this setting is deleted when you delete your Cookies; d) by permanent deactivation in your browsers Firefox, Internet explorer or Google Chrome under the link http://www.google.com/settings/ads/plugin. We point out that you may not be able to utilise all functions of this offer in this case.

(d) Legal basis for the processing of your data is Article 6 (1) S. 1 lit. f GDPR (General Data Protection Regulations). Further information regarding DoubleClick by Google is available under https://www.google.de/doubleclick and https://support.google.com/dcm/partner/answer/2839090?hl=en, as well as regarding Google in general: https://policies.google.com/privacy?hl=en&gl=en. Alternatively, you can visit the website of Network Advertising Initiative (NAI) at http://www.networkadvertising.org. Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

5. Google Tag Manager

Google Tag Manager is a solution which enables marketers to administrate website tags via a surface. The Tool Tag Manager itself (which implements the tags) is a no-cookie domain and does not record personal data. The tool triggers other tags, which in turn may record data. Google Tag Manager does not access this data. If a deactivation has been performed on domain or cookie level, it remains in existence for all tracking tags which are implemented with Google Tag Manager. https://www.google.com/analytics/tag-manager/use-policy/

6. Our presence in social media

(a) We also maintain online presence in social media, such as Facebook and Instagram for which we provide a link on our website. This occurs based on our legitimate interests to inform about our offer and to communicate with customers, prospective customers and users. Legal basis for this process is Article 6 (1) lit. f. GDPR. When accessing the respective networks and platforms, the general terms and conditions and data protection directives of the respective operators apply, which are beyond our sphere of influence. In the process, data can also be processed outside of the European Union.

(b) When you use such a social network, your data is generally processed for market research and advertising purposes. Thus, it is possible to established usage profiles from the usage pattern and the resulting interests of the users. In turn, the user profiles can be used to, for example, advertisements in an outside of the platform, which presumably equates to the interests of the users. For these purposes, Cookies are generally stored on the computers of the users, in which the usage pattern and the interests of the users are stored. Furthermore, also data irrespective of the devises utilised by the users can be stored (particularly if the users are members of the respective platforms and are logged in to them).

(c) For a detailed illustration of the respective processing and the options to object (opt-out), we refer to the information links of the providers below.

We also point out that any information enquiries and the assertion of rights are most effective if directed to the providers. Only the providers have respective access to user data, can take appropriate measures and provide information directly. If you still require assistance, please do not hesitate to contact us.

(aa) Facebook (Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland) – Data Protection Policy: https://www.facebook.com/about/privacy/, Opt-Out: https://www.facebook.com/settings?tab=ads and http://www.youronlinechoices.com, Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active.

(bb) Instagram (Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA) – Data Protection Policy/ Opt-Out: http://instagram.com/about/legal/privacy/.

7. Incorporation of Google Maps

(a) Based on our justified interests (i.e. interest in the optimisation of our online offer in terms of Article 6 (1) lit f GDPR), we use the offer of Google Maps on this website. This allows us to show you interactive maps directly in the website and provide you with the comfortable usage of the map function, e.g. when using our Storefinder. This function is incorporated in such a manner that no data regarding you as user is transferred to Google if you do not use Google Maps. The data specified in paragraph 2 is only transferred once you exercise the respective function linked with Google Maps (e.g. Storefinder). We have no influence over this data transfer.

(b) By visiting the website, Google receives your IP address and the information that you have accessed the respective subpage of our website. This occurs regardless of whether Google provides a user account through which you are logged on, or whether a user account does not exist. If you log in at Google, your data is allocated directly to your account. If you do not wish the allocation with your profile at Google, you have to log out prior to the activation of the button. Google stores your data as usage profile and uses it for purposes of advertising, market research and/or the need-based design of its website. Such analysis occurs particularly (even for users who are not logged on) to provide need-based advertising and to inform other users of the social network of your activities on our website. You have the right of objection to the establishment of this user profile, whereby you have to contact Google to exercise this right.

(c) The Data Protection Policies of the provider furnishes you with further information regarding purpose and extent of the data collection and its processing by the plug-in provider. There, you also receive further information regarding your respective rights in this context and setting options to protect your privacy: https://policies.google.com/privacy?hl=en&gl=en. Google processes your personal data also in the USA and has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework .

8. Your rights as a data subject

(a) Right of access by the data subject

Upon request, you are entitled to receive information from us at any time regarding your personal data processed by us in accordance with Article 15 GDPR. For this purpose, you can send an application by post or email to the address listed below.

(b) Right to the rectification of incorrect personal data

You are entitled to demand the immediate correction of any errors pertaining to your personal data. For this purpose, please contact the address listed below.

(c) Right to erasure

According to the prerequisites specified in Article 17 GDPR, you are entitled to demand the erasure of your personal data. These prerequisites for erasure particularly include if the personal data is no longer necessary for purposes for which it was collected or processed in any other manner, as well as in cases of illegal processing, the existence of an objection or the obligation for erasure according to the laws of the European Union or the laws of the member state governing us. In order to assert your rights, please contact the addresses listed below.

(d) Right to restriction of processing

You are entitled to demand the restriction of processing according to the specifications of Article 18 GDPR. This right exists particularly if the correctness of the personal data is disputed between the user and us, for the duration required to verify the correctness as well as in the event that the user demands a limited processing in the case of an existing right to erasure instead of erasure, furthermore in the event that the data is no longer required for the purposes pursued by us, yet the user requires them to assert, exercise or defend legal claims, if the successful execution of an objection between the customer and us is still contested. In order to assert your right of restriction of processing, please contact the addresses listed below.

(e) Right to data portability

You have the right to receive the personal data concerning you, which you have provided to the responsible data protection controller, in a structured, commonly used and machine-readable format according to the specifications of Article 20 GDPR. In order to assert your right of data portability, please contact the addresses listed below.

(f) Right to object

According to Article 21 GDPR, you have the right to lodge an objection to the processing of your personal data for reasons arising from your special situation, among other based on Article 6 (1) lit. e) or f) GDPR. We will stop the processing of your personal data, unless we are able to prove mandatory reasons for the processing worthy of protection which outweigh your interests, rights and freedoms or if the processing serves to assert, exercise or defend legal claims.

(g) Right to withdraw (in the event of a granted consent)

According to Article 7 (3) GDPR, you are entitled to withdraw your granted consents with effect for the future at any time. The withdrawal of consent shall not affect the legality of the processing carried out on the basis of the consent until withdrawal.

(h) Right to lodge a complaint

You are furthermore entitled to contact the supervisory authority in case of complaints. The supervisory authority responsible for us is:

The Hessian Data Protection Controller

Gustav-Stresemann-Ring 1, 65189 Wiesbaden

P O Box 31 63, D-65021 Wiesbaden

Phone: +49 (0)611 14080

Fax: +49 (0)611 1408 - 900

Email:  poststelle@datenschutz.hessen.de

Internet:  http://www.datenschutz.hessen.de

9. Updating of the Data Protection Policy

The status of this Data Protection Policy is 25.5.2018. Changes of our offer may make it necessary to also change this Data Protection Policy. For this reason, please inform yourself of the content of this Data Protection Policy on a regular basis. We will furthermore inform you as soon as the changes require your cooperation (e.g. consent) or if any other individual notification is required.

10. Your contact to us, data processing when contacting us

(a) If you have questions regarding the handling of your personal data in connection with the use of our website, you are welcome to contact  info@cosnova.com . You can also contact us by using the respective contact form on our website.

(b) If you contact us via email (e.g. to the address specified above), or via the contact form, the personal data transmitted with your message is stored, i.e. generally at least your email address as well as your concern. The data is not transmitted to third parties. The data is used exclusively to process the conversation.

(c) Article 6 (1) lit f. GDPR is the legal basis for the processing of the data transmitted in the course of forwarding an email. This data serves solely for our processing of the contact; this also includes the necessary legitimate interest in the processing of the data in terms of Article 6 (1) lit. f GDPR. The data is deleted as soon as the purpose of its recording ceases to exist, which is the case if the respective conversation with the user is terminated. The conversation is terminated once the circumstances reveal that the respective situation is conclusively settled.