The controller for data processing is:
sanotact GmbH
Hessenweg 10
48157 Münster, Germany
Telefon: +49 (0)251 14210
Thank you for your interest in our website. Protecting your privacy is very important to us. Below we have provided you with detailed information about how we handle your data.
1. Access data and hosting
You can visit our website without providing any personal information. Whenever our website is accessed, the web server simply stores a so-called server logfile automatically, which includes, for example, the name of the requested file, your IP address, the time and date of access, the data volume transmitted and the requesting provider (access data), and documents that access. This access data is evaluated exclusively for the purpose of ensuring fault-free operation of the site and to improve our service. It is used to pursue our legitimate, overriding interests in correct presentation of our website, in accordance with Art. 6(1) sentence (1) point (f) GDPR. All access data is erased at the latest seven days after your visit to the site.
Hosting
The services for hosting and displaying the website are delivered in part by our service providers as commissioned data processing. Unless specified otherwise in this privacy policy, all access data and all data collected on the forms provided for this purpose on our website are processed on their servers. If you have any questions about our service providers or the basis of our collaboration with them, please use the contact option provided in this privacy policy.
2. Data processing for executing a contract and making contact
2.1 Data processing
Making contact
In the context of customer communication, we collect the personal data required to process your query in accordance with Art. 6(1) sentence (1) point (b) GDPR, assuming that you provide it to us voluntarily when you make contact with us (e.g. by contact form or email). Obligatory fields are marked as such, as that data is essential for us to process your query and make contact with you. The data we collect can be seen on each input form. When your query has been processed in full, your data is erased unless you have given your consent to further use of your data in accordance with Art. 6(1) sentence (1) point (a) GDPR or we have reserved the right to use your data in another way which is permitted by law and of which we have informed you in this policy.
3. Cookies and other technologies
3.1 General information
In order to make visiting our website attractive and to facilitate the use of certain functions, we use technologies including so-called cookies on various pages. Cookies are small text files that are saved automatically on your end device. Some of the cookies we use are erased at the end of the browser session, i.e. when you close your browser (so-called session cookies). Other cookies remain on your end device and make it possible for us to recognise your browser the next time you visit us (persistent cookies).
Protection of privacy on end devices
When using our online service, we use technologies that are absolutely essential to provide the tele-media service expressly required. Storage of information on your end device and access to information that is already stored on your end device do not require consent to this extent.
In the case of functions that are not essential, storage of information on your end device and access to information that is already stored on your end device require your consent. Please note that if you do not give your consent, some parts of the website may not be usable without restriction. Any consent you give remains in place until you change or reset the relevant settings on your end device.
Downstream data processing using cookies and other technologies
We use technologies that are essential for the use of certain functions of our website (e.g. shopping basket function). By means of those technologies, your IP address, the time of your visit, your device and browser information and information about the use of our website (e.g. information about the contents of the shopping basket) is collected and processed. It is used to pursue our legitimate, overriding interests in an optimised presentation of our website, in accordance with Art. 6(1) sentence (1) point (f) GDPR.
We also use technologies to fulfil the legal obligations to which we are subject (e.g. to be able to demonstrate that we have obtained consent to processing of personal data) and for web analysis and online marketing. Further information about this, including the relevant legal basis for the data processing, can be found in the following sections of this privacy policy.
Insofar as you have given your consent to the use of the technologies pursuant to Art. 6(1) sentence (1) point (a) GDPR, you may withdraw that consent at any time by notifying us using the contact option provided in this privacy policy. Alternatively, you can use the following link:
www.sanotact-group.de If you do not accept cookies, the functionality of our website may be restricted.
3.2 Cookiebot consent management platform
We use Cookiebot to inform you about cookies and the other technologies that we use on our website and to obtain, manage and document any consent to the processing of your personal data by these technologies that we require. This is necessary pursuant to Art. 6(1) sentence (1) point (c) GDPR to fulfil the legal obligation incumbent upon us under Art. 7(1) GDPR to be able to demonstrate your consent to the processing of your personal data. Cookiebot is a service of Cybot A/S, Havnegade 39, 1058 Copenhagen, Denmark, which processes your data on our behalf.
When you have submitted your cookie declaration on our website, the Cookiebot webserver stores your anonymised IP address, the date and time of your declaration, your browser information, the URL from which the declaration was sent, information about your consent behaviour and an anonymous random key. A cookie is also set that contains the information about your consent behaviour and the key. Your data is erased after twelve months unless you have given your consent to further use of it in accordance with Art. 6(1) sentence (1) point (a) GDPR or we have reserved the right to use your data in another way which is permitted by law and of which we have informed you in this policy.
4. Use of cookies and other technologies
Provided that you have given your consent pursuant to Art. 6(1) sentence (1) point (a) GDPR, we use the following cookies and other third-party technologies on our website. When the purpose of processing no longer exists and at the end of our use of the technology in question, the data collected in this connection is erased. You can revoke your consent at any time with effect for the future. Further information about your options for revoking consent can be found in the section “Cookies and other technologies”. Further information, including the basis of our collaboration with the specific providers, can be found under the individual technologies. If you have any questions about our service providers or the basis of our collaboration with them, please use the contact option provided in this privacy policy.
4.1 Use of Google services
We use the technologies of Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”) described below. The information collected automatically by Google technologies about your use of our website is generally transferred to a server of Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA and stored there. There is no adequacy decision of the European Commission for the USA. Our collaboration with Facebook is based on standard data protection clauses of the European Commission. If your IP address is collected via the Google technologies, it is truncated before it is saved on the Google servers by activation of IP anonymisation. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. Unless specified otherwise for the individual technologies, the data processing is carried out on the basis of an agreement concluded for the technology in question between joint controllers in accordance with Art. 26 GDPR. You will find further information about data processing by Google in the
Google privacy policy.
Google Analytics
Data (IP address, time of visit, device and browser information and information about the use of our website) is collected automatically and stored for the purpose of website analysis with Google Analytics; the data is used to create pseudonymised user profiles. Cookies may be used for this purpose. Your IP address is never merged with other Google data. The data processing is carried out on the basis of a commissioned data processing agreement with Google.
We use the so-called User ID function for the purpose of optimised marketing of our website. With the help of this function, we can allocate a unique, permanent ID to your interaction data for one or several sessions and thus analyse your user behaviour across devices and sessions.
So-called “cross-device tracking” is made possible for web analysis by the Google Signals extension function of Google Analytics. If your internet-enabled devices are connected to your Google account and you have activated the “personalised advertising” setting in your Google account, Google can create reports about your user behaviour (in particular the cross-device user numbers), even if you change your end device. We do not process your personal data in this context; we simply receive statistics drawn up on the basis of Google Signals.
Google Ads
For marketing purposes in the Google search results and on the websites of third parties, when you visit our website the so-called Google Remarketing cookie is set, which automatically facilitates interest-based advertising with a pseudonymised cookie ID by collecting and processing data (IP address, device and browser information and information about your use of our website) and on the basis of the sites you have visited. No further data processing takes place, provided that you have activated the “personalised advertising” setting in your Google account. If, in this case, you are logged in to Google while you are visiting our website, Google uses your data together with Google Analytics data to create and define target group lists for cross-device remarketing.
For the purpose of website analysis and event tracking, we measure your subsequent user behaviour by means of Google Ads Conversion Tracking if you have come to our website via an advertisement of Google Ads. Cookies may be used and data (IP address, time of visit, device and browser information and information about the use of our website using events specified by us e.g. a visit to our website or subscription to the newsletter) collected to create pseudonymised user profiles.
YouTube Video Plugin
In order to integrate third-party content, data (IP address, time of visit, device and browser information) is collected via the YouTube video plug-in in privacy-enhanced mode (which we have activated), transmitted to Google and then processed by Google only if you play a video.
4.2 Use of Facebook services
Use of Facebook pixel
We use the Facebook pixel in the context of the technologies of Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland (“Facebook (by Meta)” and “Meta Platforms Ireland”) described below. With the Facebook pixel, data (IP address, time of visit, device and browser information and information about the use of our website using events specified by us e.g. a visit to our website or subscription to the newsletter) is collected automatically and stored; that data is used to create pseudonymised user profiles. For this purpose, a cookie is set automatically by the Facebook pixel when you visit our website which automatically allows your browser to be recognised when you visit other websites by means of a pseudonymise cookie ID. Facebook (by Meta) will merge this information with other data from your Facebook account and use it to compile reports about website activities and to provide other services associated with your website use, in particular personalised and group-based advertising.
The information collected automatically by Facebook (by Meta) technologies about your use of our website is generally transferred to a server of Meta Platforms, Inc., 1 Hacker Way, Menlo Park, California 94025, USA and stored there. There is no adequacy decision of the European Commission for the USA. Where we control the data transmission to the USA, our cooperation is based on standard data protection clauses of the European Commission. You will find further information about data processing by Facebook in the Facebook (by Meta) privacy policy.
Facebook Ads (marketing manager)
We advertise this website via Facebook Ads on Facebook (by Meta) and other platforms. We set the parameters of the advertising campaign in question. Facebook (by Meta) is responsible for its specific implementation, in particular the decision about placement of the ads for individual users. Unless specified otherwise for the individual technologies, the data processing is carried out on the basis of an agreement concluded between joint controllers in accordance with Art. 26 GDPR. Our responsibility as a joint controller is restricted to the collection of data and its transmission to Meta Platforms Ireland. Subsequent data processing by Meta Platforms Ireland is not included in this.x
5. Social media
Our online presence on Facebook (by Meta), Instagram (by Meta), YouTube
If you have given your consent to the operator of the social media platform in question pursuant to Art. 6(1) sentence (1) point (a) GDPR, when you visit our online presence on the social media platforms specified above your data will be collected and stored automatically for market research and advertising purposes; the data is used to create pseudonymous user profiles. These can be used, for example, to place advertising intended to correspond to your interests on and outside the platforms. Cookies are usually used for this purpose. For detailed information about processing and use of the data by the relevant social media operator, their contact details, your rights in this connection and setting options to protect your privacy, please see the privacy policies of the providers, links to which are included below. If, however, you require help in this connection, you are welcome to contact us.
Facebook (by Meta) Facebook (by Meta) is a service of Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland (“Meta Platforms Ireland”). The information collected automatically by Meta Platforms Ireland about your use of our Facebook (by Meta) page is generally transferred to a server of Meta Platforms, Inc., 1 Hacker Way, Menlo Park, California 94025, USA and stored there. There is no adequacy decision of the European Commission for the USA. Our collaboration with Facebook is based on standard data protection clauses of the European Commission. Data processing in the context of a visit to a Facebook (by Meta) fan page is carried out on the basis of an agreement concluded between joint controllers in accordance with Art. 26 GDPR. You will find further information (information about Insights data)
here.
Instagram (by Meta) is a service of Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland (“Meta Platforms Ireland”). The information collected automatically by Meta Platforms Ireland about your use of our Instagram page is generally transferred to a server of Meta Platforms, Inc., 1 Hacker Way, Menlo Park, California 94025, USA and stored there. There is no adequacy decision of the European Commission for the USA. Our collaboration with Facebook is based on standard data protection clauses of the European Commission. Data processing in the context of a visit to an Instagram (by Meta) fan page is carried out on the basis of an agreement concluded between joint controllers in accordance with Art. 26 GDPR. You will find further information (information about Insights data)
here.
YouTube is a service of Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). The information collected automatically by Google about your use of our YouTube presence is generally transferred to a server of Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA and stored there. There is no adequacy decision of the European Commission for the USA. Our collaboration with Google is based on standard data protection clauses of the European Commission.
6. Contact details and your rights
6.1 Your rights
As a data subject, you have the following rights:
- pursuant to Art. 15 GDPR, the right to access information about your personal data processed by us to the extent specified therein;
- pursuant to Art. 16 GDPR, the right to demand prompt rectification of incorrect personal data stored by us about you and completion of incomplete data;
- pursuant to Art. 17 GDPR, the right to demand erasure of personal data stored by us about you, except where further processing is necessary
- to exercise the right to freedom of expression and information;
- to fulfil a legal obligation;
- for reasons of public interest;
- to pursue, exercise or defend legal claims;
- pursuant to Art. 18 GDPR, the right to restrict processing of your personal data where
-
the correctness of the data is contested by you;
-
the processing is unlawful but you reject erasure of the data;
-
we no longer require the data but you need it to pursue, exercise or defend legal claims;
-
you have objected to the processing pursuant to Art. 21 GDPR;
- pursuant to Art. 20 GDPR, the right to obtain the personal data that you have provided to us, in a structured, standard, machine-readable format or to demand its transfer to another data controller;
- pursuant to Art. 77 GDPR, the right to lodge a complaint with a supervisory authority. You can usually do this with the supervisory authority that covers your usual place of residence or workplace or our registered company office.
Right to object
Insofar as we process personal data for our overriding, legitimate interest as explained above, you can object to that processing with effect for the future. If the processing is carried out for the purpose of direct marketing, you can exercise this right at any time, as described above. If the processing is carried out for other purposes, you have a right to object only on grounds resulting from your particular situation.
When you exercise your right to object, we will no longer use your personal data for that purpose unless we can demonstrate compelling legitimate reasons that override your interests, rights and freedoms or if the processing is to assert, exercise or defend legal claims.
This does not apply if the processing is for the purposes of direct marketing. In that case, we will no longer process your personal data.
6.2 Contact options
If you have questions about the collection, processing or use of your personal data, if you require access to information about, correction, restriction or erasure of data or if you wish to revoke your consent or object to a specific use of your data, please get in touch with us directly using the contact details in our legal notice.