We guarantee that your privacy and your personal data are protected by implementing and complying with the relevant data protection provisions. Here you can find information about your vested rights.

If there is no statutory basis for the processing of personal data, we generally obtain the consent of the data subject. Your data is processed in accordance with the requirements of the General Data Protection Regulation (GDPR) and exclusively for the fulfillment of contractual purposes, based on consents given or on a statutory basis.

I. Controller

The controller is:

SNP Deutschland GmbH, Speyerer Straße 4, 69115 Heidelberg E-mail: dpo@snpgroup.com

The data protection officer of the controller is: Thomas Steinle, who you can reach via our postal address by specifying "The data protection officer" or at info@xdsb.de

II. Subject of the Data Protection

Personal data is the subject of the data protection.

According to the Federal Data Protection Act (BDSG), personal data is all individual information about personal or material circumstances of a specific or identifiable natural person. The GDPR also defines "personal data" as all information relating to an identified or identifiable natural person; an identifiable person is a person who can be identified directly or indirectly, in particular by assigning them to an identifier such as a name, an identification number, location data or an online identifier.

A data subject is any identified or identifiable natural person whose personal data is processed by the controller responsible.

Processing is any operation or set of operations that is performed upon personal data, whether or not by automatic means, such as collection, recording, organization, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure, or destruction.

1. Collection and Storage of Personal Data as well as the Nature and Purpose of its Use

a) Visiting the Website

When you access our website, the browser used on your terminal device automatically sends information to the server of our website. This information is temporarily stored in a file known as a log file. The following information is recorded without any action on your part and stored until its automated erasure:

• IP address of the requesting computer
• Date and time of the access
• Name and URL of the file accessed
• Website from which access is gained (referrer URL)
• The browser used and, if applicable, the operating system of your computer as well as the name of your access provider

The aforementioned data will be processed by us for the following purposes:

• To ensure a smooth connection to our website
• To ensure comfortable use of our website
• To analyze system security and stability
• For other administrative purposes

The legal basis for the data processing is Art. 6(1) sentence 1 lit. f) GDPR. Our legitimate interest follows from the purposes listed above for data collection. This data cannot be assigned to specific persons. This data is not combined with other data sources; the data is erased after a statistical analysis.

In addition, we use cookies and analysis services when you visit our website.

b) Login

If you register via our website, you must enter certain personal data so that we can process your registration (mandatory information). We will process your personal data collected in this way exclusively for the purpose of processing your registration. The legal basis for this data processing is Art. 6(1) sentence 1 lit. a) GDPR.

c) Cookies

We use cookies on our website. These are small files that your browser automatically creates and that are stored on your terminal device (laptop, tablet, smartphone, etc.) when you visit our website. Cookies do no harm to your terminal device and do not contain viruses, Trojans or other malware.

The cookie stores information that relates to the specific terminal device used in each case. However, this does not mean that we immediately become aware of your identity.

On the one hand, the use of cookies helps to make the use of our services more convenient for you. We use so-called session cookies to recognize that you have already visited individual pages on our website. These cookies are automatically deleted after leaving our website.

In addition, we also use temporary cookies that are stored on your terminal device for a specified period of time to optimize user-friendliness. If you visit our website again to use our services, it will automatically recognize that you have already visited us, as well as the entries you made and the settings you used, so that you do not have to enter them again.

On the other hand, we also use cookies to gather statistical data on the use of our website and analyze it in order to optimize our services for you (see Section 4). When you visit our website again, these cookies enable us to automatically detect that you have visited us before. These cookies are automatically deleted after a defined period of time.

The data processed by these cookies is required for the aforementioned purposes in order to protect our legitimate interests and those of third parties according to Art. 6(1) sentence 1 lit. f) GDPR.

Most browsers automatically accept cookies. However, you can configure your browser to prevent any cookies from being stored on your computer or to always show a notification before a new cookie is created. However, disabling cookies completely may mean that you cannot use all the features of our website.

2. Storage Duration and Data Erasure

The personal data of the data subject will be erased or blocked as soon as the purpose of the storage ceases to apply. The data may be stored beyond this time if this is provided for by the European or national legislator in EU regulations, laws or other provisions to which we are subject. The data will also be blocked or erased if a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or fulfilment of a contract.

3. Social Media Plug-Ins

Our website does not use any social media plug-ins.

4. Google Analytics

In order to continuously optimize our website and structure it to meet demand, we use Google Analytics, a web analysis service from Google Inc. (https://www.google.com/about/) (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter “Google”). This involves the creation of pseudonymized usage profiles and the use of cookies (see Section 1 c)). The information on your use of this website generated by the cookie, such as

• browser type/version,
• operating system used,
• referrer URL (the site visited before),
• host name of the accessing computer (IP address),
• time of the server request,

is usually transmitted to a Google server in the USA and stored there. The information is used to analyze use of the website, compile reports on website activity and provide further services in connection with the use of the website and the Internet for the purposes of market research and to structure these webpages to meet demand. The information may also be transmitted to third parties where this is required by law or if third parties process it on our behalf. Google will never associate your IP address with other Google data. The IP addresses are anonymized so that an assignment is not possible.

You can prevent the installation of cookies by setting your browser software accordingly. However, note that disabling cookies completely may mean that you cannot make full use of all the features of this website. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) as well as the processing of this data by Google by downloading and installing a browser add-on (https://tools.google.com/dlpage/gaoptout?hl=en).

As an alternative to the browser add-on, especially for browsers on mobile terminal devices, you can prevent the collection by Google Analytics by clicking on this link. This sets an opt-out cookie that prevents your data being collected when you visit this website in the future. The opt-out cookie is only valid in this browser and only for our website and is stored on your device. If you delete the cookies in this browser, you must set the opt-out cookie again.

For more information regarding data protection related to Google Analytics, visit the Google Analytics Help pages at https://support.google.com/analytics/answer/6004245?hl=en.

5. Data Subject Rights

You have the right:

• in accordance with Art. 15 GDPR to request information about your personal data processed by us. In particular, you may request information about the purposes of processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of your data if it was not collected by us, and the existence of automated decision-making including profiling and, if applicable, meaningful information on the details thereof;
• in accordance with Art. 16 GDPR to request the rectification of incorrect or incomplete personal data stored by us without undue delay;
• in accordance with Art. 17 GDPR to request the erasure of your personal data stored by us, except where the processing is required for exercising the right to freedom of expression and information, for the fulfillment of a legal obligation, for reasons of public interest, or for the assertion, exercise or defense of legal claims;
• in accordance with Art. 18 GDPR to request the restriction of the processing of your personal data;
• in accordance with Art. 20 GDPR to request your personal data provided to us in a structured, commonly used and machine-readable format or to request the transmission to another controller;
• in accordance with Art. 7(3) GDPR to withdraw your consent once given to us at any time. As a result, we are no longer allowed to continue data processing based on this consent in the future; and
• in accordance with Art. 77 GDPR to lodge a complaint with a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence or work or our company headquarters.

6. Right to Object

If the processing of your personal data is based on legitimate interests in accordance with Art. 6(1) sentence 1 lit. f) GDPR, you have the right to file an objection against the processing of your personal data in accordance with Art. 21 GDPR, provided that there are reasons for this arising from your particular situation.

If you wish to exercise your right to withdraw consent or your right to object, simply send an e-mail to

info@xdsb.de

7. Updating the Privacy Policy

Due to ongoing technical development and changes to legislation in the area of IT technology and the Internet, we reserve the right to make amendments or changes to this Privacy Policy.