Privacy Policy

§ 1 Information on the collection of personal data

(1) In the following, we inform you about the collection of personal data when using our website. Personal data is any data that can be personally related to you, e.g., name, address, email addresses, user behavior.

(2) The controller pursuant to Art. 4 para. 7 of the EU General Data Protection Regulation (GDPR) is Salamander SPS GmbH & Co. KG, Jakob-Sigle-Straße 58, 86842 Türkheim/Unterallgäu, Telephone: +49 8245 52 0, Fax: +49 8245 52 266. You can reach our data protection officer at datenschutzsps@sip.de or at the following postal address: SNS Systems GmbH, Palmbachstrasse 20, 65510 Hünstetten.

(3) When you contact us by email or via a contact form, the data you provide (your email address, salutation, first name, last name, postal code, and city, as well as your message) will be stored by us to answer your questions. We delete the data arising in this context after storage is no longer necessary, or restrict processing if there are legal retention obligations.

(4) If we rely on commissioned service providers for individual functions of our offer or would like to use your data for advertising purposes, we will inform you in detail about the respective processes below. We also specify the established criteria for the storage duration.

§ 2 Your rights

(1) You have the following rights regarding personal data concerning you: – Right of access – Right to rectification or erasure – Right to restriction of processing – Right to object to processing – Right to data portability (2) You also have the right to lodge a complaint with a data protection supervisory authority about our processing of your personal data.

§ 3 Collection of personal data when visiting our website

(1) If you use the website purely for informational purposes, i.e., if you do not register or otherwise provide us with information, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure stability and security (the legal basis is Art. 6 para. 1 sentence 1 lit. f GDPR):

– IP address

– Date and time of the request

– Time zone difference to Greenwich Mean Time (GMT)

– Content of the request (specific page)

– Access status/HTTP status code

– Amount of data transferred in each case

– Website from which the request comes

– Browser

– Operating system and its interface

– Language and version of the browser software

(2) In addition to the data mentioned above, cookies are stored on your computer when you use our website. Cookies are small text files stored on your hard drive associated with the browser you are using and through which certain information flows to the party that sets the cookie (in this case, us). Cookies cannot execute programs or transfer viruses to your computer. They serve to make the internet offer more user-friendly and effective overall.

(3) Use of Cookies:

a) This website uses the following types of cookies, the scope and functionality of which are explained below:

– Transient cookies (see b)

– Persistent cookies (see c)

b) Transient cookies are automatically deleted when you close the browser. These include session cookies in particular. They store a so-called session ID, with which various requests from your browser can be assigned to the joint session. This allows your computer to be recognized when you return to our website. The session cookies are deleted when you log out or close the browser.

c) Persistent cookies are automatically deleted after a specified period, which can vary depending on the cookie. You can delete the cookies in the security settings of your browser at any time.

d) You can configure your browser settings according to your preferences and, for example, refuse to accept third-party cookies or all cookies. Please note that you may not be able to use all functions of this website.

e) We use cookies to identify you for subsequent visits if you have an account with us. Otherwise, you would have to log in again for each visit.

§ 4 Integration of Google

(1) We use Google Maps on this website. This allows us to display interactive maps directly on the website and enables you to use the map function conveniently.

(2) By visiting the website, Google receives the information that you have accessed the corresponding subpage of our website. Additionally, the data mentioned under § 3 of this declaration is transmitted. This happens regardless of whether Google provides a user account through which you are logged in or if no user account exists. If you are logged in to Google, your data will be directly associated with your account. If you do not want this association with your profile at Google, you must log out before activating the button. Google stores your data as usage profiles and uses them for advertising, market research, and/or needs-based design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact Google to exercise this right.

(3) Further information on the purpose and scope of data collection and processing by the plug-in provider can be found in the provider's privacy policies. There you will also find further information about your rights in this regard and setting options to protect your privacy: http://www.google.de/intl/de/policies/privacy.

§ 5 Use of social media plug-ins

(1) We currently use the following social media plug-ins: Facebook, Twitter, LinkedIn, Instagram. We use the so-called two-click solution. This means that when you visit our site, no personal data is initially passed on to the providers of the plug-ins. You can recognize the provider of the plug-in by the marking on the box above its initial letter or the logo. We enable you to communicate directly with the plug-in provider via the button. Only if you click on the marked field and thereby activate it, the plug-in provider receives the information that you have accessed the corresponding website of our online offer. Additionally, the data mentioned under § 3 of this declaration is transmitted. In the case of Facebook, the IP address is anonymized immediately after collection, according to the respective providers in Germany. By activating the plug-in, personal data is transmitted from you to the respective plug-in provider and stored there (in the case of US providers in the USA). Since the plug-in provider collects data mainly via cookies, we recommend deleting all cookies through your browser's security settings before clicking on the grayed-out box.

(2) We have no influence on the collected data and data processing operations, nor are we aware of the full extent of data collection, the purposes of processing, and the storage periods. We also have no information on the deletion of the collected data by the plug-in provider.

(3) The plug-in provider stores the data collected about you as user profiles and uses them for advertising, market research, and/or needs-based design of its website. Such evaluation is carried out particularly (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact the respective plug-in provider to exercise this right. Through the plug-ins, we offer you the possibility to interact with the social networks and other users so that we can improve our offer and make it more interesting for you as a user. The legal basis for using the plug-ins is Art. 6 para. 1 sentence 1 lit. f GDPR.

(4) The data transfer takes place regardless of whether you have an account with the plug-in provider and are logged in there. If you are logged in with the plug-in provider, your data collected by us will be directly assigned to your existing account with the plug-in provider. If you press the activated button and link to the page, for example, the plug-in provider also stores this information in your user account and shares it publicly with your contacts. We recommend logging out regularly after using a social network, especially before activating the button, as this will prevent an assignment to your profile with the plug-in provider.

(5) Further information on the purpose and scope of data collection and processing by the plug-in provider can be found in the privacy policies of these providers listed below. There you will also find further information on your rights and settings options to protect your privacy.

(6) Addresses of the respective plug-in providers and URL with their privacy notices:
a) Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA; http://www.facebook.com/policy.php; weitere Informationen zur Datenerhebung: http://www.facebook.com/help/186325668085084, http://www.facebook.com/about/privacy/your-info-on-other#applications sowie http://www.facebook.com/about/privacy/your-info#everyoneinfo .
b) Twitter, Inc., 1355 Market St, Suite 900, San Francisco, California 94103, USA; https://twitter.com/privacy .
c) LinkedIn Corporation, 2029 Stierlin Court, Mountain View, California 94043, USA; http://www.linkedin.com/legal/privacy-policy .
d) Instagram; Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland; https://help.instagram.com/519522125107875

§ 6 Use of Google Analytics

(1) This website uses Google Analytics, a web analytics service provided by Google Inc. ("Google"). Google Analytics uses "cookies," text files that are stored on your computer and that allow an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. In the event of IP anonymization being activated on this website, your IP address will be truncated by Google within Member States of the European Union or in other contracting states to the Agreement on the European Economic Area beforehand. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, compile reports on website activity, and provide other services related to website usage and internet usage to the website operator.

(2) The IP address transmitted by your browser as part of Google Analytics is not merged with other Google data.

(3) You can prevent the storage of cookies by selecting the appropriate settings on your browser software; however, please note that in this case, you may not be able to use all the functions of this website to their full extent. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) by Google and the processing of this data by Google by downloading and installing the browser plug-in available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de.

(4) This website uses Google Analytics with the extension "anonymizeIp()." This means that IP addresses are processed in a shortened form, making it impossible to relate them to a specific person. If the data collected about you has a personal reference, this is immediately excluded and the personal data is deleted promptly.

(5) We use Google Analytics to analyze and regularly improve the use of our website. The statistics obtained allow us to improve our offer and make it more interesting for you as a user.

(6) Information of the third-party provider: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. Nutzerbedingungen: http://www.google.com/analytics/terms/de.html, Übersicht zum Datenschutz: http://www.google.com/intl/de/analytics/learn/privacy.html, sowie die Datenschutzerklärung: http://www.google.de/intl/de/policies/privacy.

§ 7 Integration of Vimeo-Videos

(1) We use, among others, the provider Vimeo for embedding videos. Vimeo is operated by Vimeo, LLC with headquarters at 555 West 18th Street, New York, New York 10011.

(2) On some of our internet pages, we use plugins from the provider Vimeo. When you call up the internet pages of our website that are provided with such a plugin, a connection to the Vimeo servers is established and the plugin is displayed. This transmits to the Vimeo server which of our internet pages you have visited. If you are logged in as a member of Vimeo, Vimeo assigns this information to your personal user account. When you use the plugin, such as clicking the start button of a video, this information is also assigned to your user account. You can prevent this assignment by logging out of your Vimeo user account before using our website and deleting the corresponding Vimeo cookies.

(3) For the purpose and scope of data collection and the further processing and use of the data by Vimeo, as well as your rights in this regard and setting options for protecting your privacy, please refer to Vimeo's privacy policy: https://vimeo.com/privacy

§ 8 Google Web Fonts

This site uses so-called web fonts provided by Google for the uniform display of fonts. When you call up a page, your browser loads the required web fonts into your browser cache to display texts and fonts correctly.

For this purpose, the browser you use must connect to Google's servers. Through this, Google gains knowledge that your IP address has accessed our website. The use of Google Web Fonts is in the interest of a uniform and attractive presentation of our online offers. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR.

If your browser does not support web fonts, a standard font from your computer will be used.

Further information about Google Web Fonts can be found at https://developers.google.com/fonts/faq und in der Datenschutzerklärung von Google: https://policies.google.com/privacy?hl=de.

§ 9 Use of Google Ads Conversion

(1) We use the offer of Google Ads to draw attention to our attractive offers with the help of advertising materials (so-called Google Ads) on external websites. In relation to the data of the advertising campaigns, we can determine how successful the individual advertising measures are. We pursue the interest of showing you advertising that is of interest to you, making our website more interesting for you, and achieving a fair calculation of advertising costs.

(2) These advertising materials are delivered by Google via so-called "Ad Servers." For this purpose, we use Ad Server cookies, through which certain parameters for measuring success, such as the display of ads or clicks by users, can be measured. If you access our website via a Google ad, Google Ads stores a cookie on your PC. These cookies usually expire after 30 days and are not intended to identify you personally. Typically, the unique cookie ID, number of ad impressions per placement (frequency), last impression (relevant for post-view conversions), and opt-out information (indicating that the user no longer wishes to be addressed) are stored as analysis values for this cookie.

(3) These cookies allow Google to recognize your internet browser. If a user visits certain pages of an Ads customer's website and the cookie stored on their computer has not yet expired, Google and the customer can recognize that the user clicked on the ad and was redirected to this page. Each Ads customer is assigned a different cookie. Cookies can therefore not be tracked across the websites of Ads customers. We ourselves do not collect and process any personal data in the aforementioned advertising measures. We only receive statistical evaluations from Google. Based on these evaluations, we can identify which of the advertising measures used are particularly effective. We do not receive any further data from the use of the advertising materials, in particular, we cannot identify the users based on this information.

(4) Due to the marketing tools used, your browser automatically establishes a direct connection with Google's server. We have no influence on the extent and further use of the data collected by Google through the use of this tool and therefore inform you according to our knowledge: By integrating Ads Conversion, Google receives the information that you have accessed the corresponding part of our internet presence or clicked on an ad from us. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or are not logged in, it is possible that the provider will obtain and store your IP address.

(5) You can prevent participation in this tracking procedure in various ways: a) by adjusting your browser software settings accordingly, in particular, the suppression of third-party cookies will result in you not receiving ads from third-party providers; b) by disabling the cookies for conversion tracking by setting your browser to block cookies from the domain "www.googleadservices.com," https://www.google.de/settings/ads, whereby this setting will be deleted when you delete your cookies; c) by disabling the interest-based ads of the providers that are part of the self-regulation campaign "About Ads" via the link http://www.aboutads.info/choices, whereby this setting will be deleted when you delete your cookies; d) by permanently disabling it in your browsers Firefox, Internet Explorer, or Google Chrome at the link http://www.google.com/settings/ads/plugin. Please note that in this case, you may not be able to use all the functions of this offer to their full extent.

(6) The legal basis for processing your data is Art. 6 para. 1 sentence 1 lit. f GDPR. Further information on data protection at Google can be found here: http://www.google.com/intl/de/policies/privacy and https://services.google.com/sitestats/de.html. Alternatively, you can visit the Network Advertising Initiative (NAI) website at http://www.networkadvertising.org.

Information on the Processing of Personal Data of Suppliers and Business Customers in Accordance with Articles 13 and 14 GDPR

I. Definitions

These information sheets are based on the definitions used by the European legislator in the adoption of the General Data Protection Regulation (GDPR). We refer you to the definitions in Article 4 of the GDPR. These are available at: http://eur-lex.europa.eu/legal-content/DE/TXT/PDF/?uri=CELEX:32016R0679&from=DE

II. Name and Address of the Controller and Data Protection Officer

The controller within the meaning of the GDPR is:

Salamander SPS GmbH & Co. KG

Jakob-Sigle-Str. 58
86842 Türkheim

Tel.: +49 8245 52 0
Fax: +49 8245 52 226
E-Mail: infosps@sip.de

You can reach our data protection officer:

By mail: at the above address with the addition Data Protection Officer

By email: datenschutzsps@sip.de

III. Information on Data Processing

Scope of the Processing of Personal Data

We process personal data in accordance with data protection principles only to the extent necessary and as permitted by applicable legal requirements or as required by law.

Data Sources / Types of Data

We process the data that you provide to us in the context of our business relationship. This includes in particular the following data:

• Contact details of the contact person(s), in particular, salutation, name, business address, telephone number, and email address;

• changes to master data made by you, e.g., address changes;

• information on the use of email addresses or telephone numbers for advertising

We only process personal data from publicly accessible sources (e.g., commercial registers, authorities, internet) if this is legally permissible, for example, because it is necessary for the provision of our services.

This includes in particular the following data:

• Name and business address of the managing directors and shareholders as far as visible from the commercial registers.

Purpose of Processing and Legal Basis

To the extent that the processing of personal data is based on the consent of the data subject, Art. 6 para. 1 lit. a GDPR serves as the legal basis.

In the processing of personal data necessary for the performance of a contract, Art. 6 para. 1 lit. b GDPR serves as the legal basis. This also applies to processing operations necessary for the implementation of pre-contractual measures.

In addition, we process personal data to the extent necessary for the assertion of legal claims and defense in legal disputes and to fulfill legal obligations. The legal basis for this is Art. 6 para. 1 lit. c GDPR.

If the processing is necessary to protect the legitimate interests of our company or a third party and the interests, fundamental rights, and freedoms of the data subject do not outweigh the first-mentioned interest, Art. 6 para. 1 lit. f GDPR serves as the legal basis for the processing. We have a legitimate interest in processing the data to handle the contractual relationship to conduct credit checks and collect receivables, also within the framework of the assignment to collection agencies.

We also use your email addresses, which we have received in the context of the business relationship, to inform you about our products, Art. 6 para. 1 lit. f GDPR in conjunction with § 7 para. 3 UWG. You can object to the use of your personal data for advertising purposes at any time.

Recipients of Personal Data

Personal data is disclosed only to third parties involved in providing the service you have contracted for, such as subsidiaries, partners, subcontractors.

Personal data of those involved in the service may be disclosed to the client of the service (e.g., delivery receipt).

4.1 Data Transfer to a Third Country

Data transfer to third countries takes place exclusively to fulfill contracted services. Only the necessary data for sending and delivering goods to customers of the clients, to the national and international companies of the Salamander Group, and to external service providers are transferred.

Data transfer to a third country without an adequate level of data protection is permitted to fulfill a contract, provided that the data transfer is necessary for contract fulfillment.

External Service Providers / Processors

Where necessary, agreements with external service providers or processors are in place according to Article 28 GDPR and, if applicable, the EU standard contractual clauses.

Data Retention Period

We process your personal data as long as it is necessary to fulfill the purposes stated under No. 3. If this is no longer the case, the data will be deleted unless temporary further processing is required to fulfill legal retention periods. In particular, the legal retention period for business documents (6 or 10 years according to § 257 para. 4 HGB, § 147 para. 3 AO, § 14 b UStG) is to be mentioned.

In addition, further processing of personal data is carried out if it is necessary to assert, exercise, or defend legal claims.

Automated Decision-Making in Individual Cases

We do not use fully automated decision-making pursuant to Art. 22 GDPR.

Rights of Data Subjects

Regarding the processing of your personal data, you have extensive rights. Below, we would like to familiarize you with these rights:

• Right to Information: You have the right to request information about the data we have stored about you, in particular, the purpose of processing and how long the data will be stored (Article 15 GDPR).

• Right to Rectification: You have the right to request the immediate correction of inaccurate personal data concerning you (Article 16 GDPR).

• Right to Deletion: You have the right to request the deletion of personal data concerning you. The conditions stipulate that you can request the deletion of your data if, for example, we no longer need the personal data for the purposes for which they were collected or otherwise processed, we unlawfully process the data, or you have rightfully objected, or if there is a legal obligation to delete (Article 17 GDPR).

• Right to Data Portability: You have the right to receive the personal data concerning you that you have provided to us in a structured, common, machine-readable format (Article 20 GDPR), as long as these have not already been deleted and the corresponding conditions of Art. 20 GDPR are met.

• Right to Object: You have the right to object at any time to the processing of personal data concerning you for reasons arising from your particular situation (Article 21 GDPR). We will stop processing your personal data unless we can demonstrate compelling legitimate grounds for processing that override your interests, rights, and freedoms or if the processing serves to assert, exercise, or defend legal claims. You can also object at any time to direct marketing, which is processed based on Art. 6 para. 1 lit. f GDPR.

If you wish to object to the processing of your personal data, please send us an email or contact us in writing at the above postal address.

• Right to Lodge a Complaint with the Supervisory Authority: You have the right to contact the above-mentioned data protection officer or a data protection supervisory authority if you believe that the processing of your personal data violates the General Data Protection Regulation. The supervisory authority responsible for us is:

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)

Promenade 18

91522 Ansbach

As of: 06.07.2018