Privacy policy

Our company attaches great importance to protecting personal data and respects your desire for privacy. In the following, we provide information on how we collect personal data when you use our website. If you have any further questions regarding the handling of your personal data, please do not hesitate to contact our data protection officer.

Data controller

The data controller within the meaning of the General Data Protection Regulation (GDPR) is:

ALANOD GMBH & CO. KG
Street No: Egerstrasse 12
Postcode, City, Country: 58256 Ennepetal, Germany
Commercial Register/No: HRA 4567
Managing Director: Milan W. Krumbe | CCO; Ralf Hillebrand | COO; Frank Weigand | CFO
Phone number: +49 2333 986-500
Email address: info@alanod.de

Our data protection officer will be happy to answer your inquiries:

Personal / Confidential
To the Data Protection Officer
Street No: Egerstrasse 12
Postcode, City, Country: 58556 Ennepetal, Germany
Email address dsb (at) alanod.de

Data security

We have taken extensive technical and operational precautions to protect your data from accidental or intentional manipulation, loss, destruction or access by unauthorized persons. Our security procedures are regularly reviewed and adapted to technological progress.

Legal basis of our data processing

The processing of personal data may be based on various legal grounds. If we require your data to fulfil a contract with you or to respond to inquiries from you regarding a contract, the legal basis for this data processing is Article 6(1)(1)(b) GDPR. If we obtain your consent for certain data processing, the legal basis is Article 6(1)(1)(a) GDPR. We carry out some data processing on the basis of our legitimate interest, always weighing your interests which require protection against our legitimate interests. The legal basis for this is Article 6(1)(f) GDPR. Insofar as the processing is necessary to fulfil a legal obligation to which we are subject, the legal basis is Article 6(1)(1)(c) GDPR.

Below, we explain how we process personal data via our website:

Data processing when you visit our website

If you use the website solely for information purposes, i.e., if you do not register or otherwise transmit information to us (e.g., via a contact form), we collect the following technical information (log file data):

– Operating system of the end device with which you visit our website
– Browser (type, version & language settings)
– Amount of data retrieved
– Current IP address of the terminal device with which you visit our website
– Date and time of access
– URL of the previously visited website (referrer)
– URL of the (sub)page you are accessing on the website
– Internet service provider of the accessing system

Collecting this data is technically necessary so that we can display our website to you and ensure stability and security. We (and our service provider) regularly do not know who is behind an IP address. We do not merge the above data with any other data.

The legal basis is Article 6(1)(1)(f) GDPR. Since the collection of data for the provision of the website and the storage in log files are absolutely necessary to operate the website and to protect against misuse, our legitimate interest in data processing prevails at this point

Contact

When you contact us by email or via a contact form, the data you provide (your email address, the country from which your request originates and your name, if applicable) will be stored by us in order to answer your questions and process your requests. The legal basis in this respect is Article 6(1)(1)(f) GDPR. If we use our contact form to request information that is not required to establish contact, it will always be marked as optional. These details help us answer your inquiry and to improve the processing of your request. This information is provided expressly on a voluntary basis and with your consent, Article 6(1)(1)(a) GDPR. If this includes information on communication channels (e.g. email address, telephone number), you also agree that we may contact you via this communication channel in order to respond to your request. Of course, you can withdraw this consent at any time with future effect.

Your data, which we have received in the course of contact with you, will be deleted as soon as it is no longer required to achieve the purpose for which it was collected, your request has been fully processed and no further communication with you is necessary or desired by you.

Applications

You can apply to our company electronically, e.g. via email. Please note that unencrypted emails are not transmitted with access protection.

Your information will be used to process your application and decide on establishing an employment relationship. The legal basis is Section 26(1) in conjunction with (8)(2) BDSG (Federal Data Protection Act). Furthermore, your personal data may be processed insofar as this is necessary for us to defend against legal claims asserted against us arising from the application process. The legal basis for this is Article 6(1)(1)(f) GDPR. The stated purposes also constitute the legitimate interest in the processing.

Insofar as an employment relationship arises between you and us, we may, in accordance with Section 26(1) BDSG, further process the personal data already received from you for the purposes of the employment relationship, if this is necessary for the execution or termination of the employment relationship or for the exercise or fulfilment of the rights and obligations of the representation of the interests of the employee resulting from a law or a collective agreement, a company or service agreement (collective agreement).

Your application data will not be processed beyond the use described.

After completion of the application process, your personal data will be deleted after 6 months at the latest, unless there are other legitimate interests on our part that prevent deletion or you have given us permission to store it for a longer period. Other legitimate interest in this sense is, for example, a duty to provide evidence in proceedings under the General Equal Treatment Act (AGG).

General information
You can subscribe to our newsletter via our website, which we use to inform you about our company's activities, current information about our services, special offers, promotions and events . The legal basis for sending the respective newsletter is your consent pursuant to Article 6(1)(1)(a) GDPR in conjunction with Section 7(2)(3) UWG (Unfair Competition Act) or the legal permission pursuant to Section 7(3) UWG.

For our newsletter registration we use what is known as the double-opt-in procedure. This means that after you have registered, we will send you an email to the email address provided, in which we will ask you to confirm that you wish to receive the newsletter. If you do not confirm your registration, your information will be automatically deleted after 3 days.

The only information we require to send the newsletter is your email address. The provision of further data is voluntary: This data is used to be able to address you personally. After your confirmation, we store your email address for the purpose of sending the newsletter and until revoked. We also store your current IP address at the time of registration, the time of registration and the confirmation for up to three years after registration (statute of limitations). The purpose of this procedure is to be able to prove your registration in case of doubt and, if necessary, to clarify any misuse of your personal data. The legal basis for logging the registration is our legitimate interest pursuant to Article 6(1)(1)(f) GDPR in proving a formerly given consent, see also Article 7(1) GDPR.

You can withdraw your consent to receive the newsletter and unsubscribe at any time. You can declare your withdrawal by clicking on the link provided in each newsletter email or by sending an email to info@alanod.de.

Newsletter tracking
We would like to point out that we evaluate your user behaviour when sending the newsletter in order to determine whether and when the newsletter was opened. For this evaluation, the emails sent contain what are known as web beacons or tracking pixels that are stored on our server and loaded when the newsletter is opened. Technical information such as browser type, time of opening and IP address are transmitted. For evaluation purposes, we link the above data and web beacons to your email address and an individual ID.

The data is processed pseudonymously, i.e. the IDs are not directly linked to your other personal data, a direct personal reference is excluded. The legal basis for this data processing is your consent, Article 6(1)(a) GDPR.

You can withdraw your consent at any time with effect for the future. In this case, the withdrawal includes the entire newsletter, since a separate withdrawal of the tracking is unfortunately not technically possible. To do so, simply click the unsubscribe link provided in each email.

Moreover, such tracking is not possible if you have disabled the display of images by default in your email program. In this case, the newsletter will not be displayed in its entirety and you may not be able to use all of its features. When you display the images manually, the tracking mentioned above takes place.

The information from the tracking is stored for as long as you are subscribed to the newsletter. After unsubscribing, the data is anonymized and used for purely statistical purposes.

The data you provide for the purpose of receiving the newsletter will be stored by us until you unsubscribe from the newsletter and will be deleted after you unsubscribe from the newsletter. Data that has been stored by us for other purposes remains unaffected by this.

Cookies and third-party tools

Cookies are data that are stored on your computer by a website you visit and allow your browser to be reassigned. Cookies transmit information to the entity that sets the cookie. Cookies can store various information, such as your language setting, the duration of your visit to our website or the entries you have made there. This avoids, for example, having to re-enter required form data each time you use it. The information stored in cookies can also be used to recognize preferences and to target content according to areas of interest.

There are different types of cookies: Session cookies are sets of data that are only saved temporarily in your computer storage and are deleted when you close your browser. Permanent or persistent cookies are automatically deleted after a predefined duration, which may differ depending on the cookie. The information can also be stored in text files on your computer with this type of cookie. However, you can also delete these cookies at any time via your browser settings.

First-party cookies are set by the website you are currently visiting. Only this website may read information from these cookies. Third-party cookies are set by organizations that are not operators of the website you are visiting. These cookies are used by marketing companies, for example.

The legal basis for possible processing of personal data by means of cookies and their storage period may vary. If you have given us your consent, the legal basis is Article 6(1)(1)(a) GDPR. Insofar as the data processing is based on our overriding legitimate interests, the legal basis is Article 6(1)(1)(f) GDPR. The stated purpose then corresponds to our legitimate interest.

We use cookies to ensure the proper operation of the website, to provide basic functionality, and – with your consent – to measure reach and tailor our services to preferred areas of interest.

The cookies used on this website are:

Neos_Session: A Neos session cookie is a cookie used by the Neos CMS to store user login information during a session. It is necessary to identify the user in the Neos environment and allow them access to the backend when they are logged in. This is a temporary cookie that is deleted when the browser is closed.

hCaptcha
On our website, we use hCaptcha to ensure that interactions on our website are conducted by humans and not by automated bots. By using hCaptcha, data such as your IP address and information about your behavior on our website may be collected. This data is used exclusively to verify human interaction and is not used for other purposes. For more information on privacy with hCaptcha, please refer to hCaptcha's privacy policy.

Matomo
We use self-hosted Matomo to analyze user behavior on our website. Matomo is an open-source web analytics software that allows us to analyze user behavior to improve our website and user experience. Data such as your IP address (which is anonymized), pages visited, time spent on the website, and other usage data may be collected. Since Matomo is self-hosted, all data remains on our servers and is not shared with third parties. We take appropriate technical and organizational measures to ensure the security of your data.

Vimeo
We use the provider Vimeo, among others, to integrate our videos. Vimeo is operated by Vimeo, LLC, headquartered at 555 West 18th Street, New York, New York 10011. With the integration of Vimeo videos, we pursue the purpose of making our website more interesting and attractive for our visitors and to achieve a better presentation of content or facts.

We use a data protection-friendly implementation technique (2-click method). When you visit a page that has a Vimeo video embedded, a connection to Vimeo's servers is not created until you click on the video's thumbnail. This transmits certain information (e.g. your IP address) to Vimeo. Vimeo may also place cookies on your device. We do not obtain knowledge of the type and scope of the data collected by Vimeo and have no influence on its use. Through the integration, Vimeo can also receive the information that your browser has accessed the corresponding page of this website, even if you do not have a user account with Vimeo or are not logged in to Vimeo.

By clicking on the video, you give your consent for your data to be transferred to the respective provider. The legal basis for the use of the Vimeo services is Article 6(1)(1)(a) GDPR.

For more information on the purpose and scope of data collection and processing by Vimeo, please see the privacy policy. There you will also receive further information about your rights and setting options to protect your privacy: Vimeo, Inc, 555 West 18th Street, New York, New York 10011, USA vimeo.com/privacy.

Data transmission

As a matter of principle, your personal data will not be transferred to third parties unless we are required to do so by law, or the transfer of data is necessary for the performance of the contractual relationship, or you have previously given your express consent to the transfer of your data.

External service providers and partner companies or a shipping company commissioned to deliver goods to you will only receive your data to the extent necessary to process your order. In these cases, however, the scope of the data transmitted is limited to the minimum required. Insofar as our service providers process your personal data on our behalf, we ensure within the scope of commissioned processing pursuant to Article 28 GDPR that they comply with the provisions of the data protection laws in the same manner. The respective service provider is responsible for the content of third-party services, whereby we check the services for compliance with legal requirements within the scope of reasonableness.

We attach importance to processing your data within the EU/EEA. However, we may use service providers that process data outside the EU/EEA. In these cases, we ensure that an adequate level of data protection comparable to the standards within the EU is established at the recipient prior to the transfer of your personal data. This is usually ensured by concluding the EU standard contracts or by means of Binding Corporate Rules.

Your rights

We will be happy to provide you with information on whether personal data concerning you is being processed. If this is the case, you have a right of access to this personal data and to the information listed in detail in Article 15 GDPR. In addition, you have the right to rectification (Article 16 GDPR), the right to restriction of processing (Article 18 GDPR), the right to erasure (Article 17 GDPR) and the right to data portability (Article 20 GDPR) under the respective legal conditions.

You have the right to object to the processing under the legal conditions (Article 21 GDPR).

To exercise your foregoing rights, please contact us by email to info@alanod.de or by post to:

ALANOD GMBH & CO. KG
Egerstrasse 12
58256 Ennepetal, Germany

Exercising your abovementioned rights is free of charge for you.

Without prejudice to these rights and the possibility of seeking any other administrative or judicial remedy, you may at any time exercise your right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, place of work or the place of the alleged infringement, if you consider that the processing of personal data relating to you infringes data protection law (Article 77 GDPR).

The supervisory authority responsible for us is:

Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen
Kavalleriestr. 2-4
40213 Düsseldorf
Phone: 0211/38424-0
Fax: 0211/38424-999
Email: poststelle (at) ldi.nrw.de

Updated July 2022