Please note that data transmitted via the internet (e.g. via email communication) may be subject to security breaches. Complete protection of your data from third-party access is not possible.
2. Notice concerning the party responsible for this website
The party responsible for processing data on this website is:
CST GmbH Customer Savings Technology
Telefon: +49 2043 4811-0
The responsible party is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data (names, email addresses, etc.).
Data protection officer
We have appointed a data protection officer for our company.
3. Overview of data processing
How do we collect your data?
Some data are collected when you provide it to us. This could, for example, be data you enter on a contact form.
Other data are collected automatically by our IT systems when you visit the website. These data are primarily technical data such as the browser and operating system you are using or when you accessed the page. These data are collected automatically as soon as you enter our website.
What do we use your data for?
Part of the data is collected to ensure the proper functioning of the website. Other data can be used to analyse how visitors use the site.
4. Data collection on our website
Our websites use so-called cookies. Cookies are small text files and do no damage to your device. They are either stored temporarily on your device for the duration of a session (session cookies) or permanently (permanent cookies). Session cookies are automatically deleted at the end of your visit. Permanent cookies remain on your device until you delete them yourself or an automatic solution is implemented by your web browser.
In some instances, cookies from third-party companies can also be stored on your device when you enter our site (third-party cookies). These enable us or you to use certain services of the third-party company (e.g. cookies for statistics). These cookies are stored on your device for 12 months.
Cookies have different functions. Numerous cookies are technically necessary because certain website functions would not work without them (e.g. the shopping cart function or the showing of videos). Other cookies are used to evaluate user behaviour or to display advertising.
Technically necessary cookies (e.g. shopping cart cookies) are stored on the basis of Art. 6 Para. 1 lit. f) of the General Data Protection Regulation (GDPR). We have a legitimate interest in the storage of cookies in order to provide our services in a technically faultless and optimised manner. Other cookies will only be stored with your consent on the basis of Art. 6 Para. 1 lit. a) GDPR. Consent can be revoked at any time with future effect. You can also object to the processing of your data by cookie technologies in accordance with Art. 21 GDPR.
Server log files
The website provider automatically collects and stores information that your browser automatically transmits to us in "server log files". These are:
- Browser type and browser version
- Operating system used
- Referrer URL
- Host name of the accessing computer
- Time of the server request
- IP addresse
These data will not be combined with data from other sources.
These data are collected on the basis of Art. 6 Para. 1 lit. f) GDPR. The website provider has a legitimate interest in the technically faultless presentation and optimisation of its website; for this purpose, it is necessary to collect the server log files.
Request by email, phone or fax
If you contact us by email, phone or fax, your request, including all resulting personal data (name, request), is only stored and processed by us for the purposes of processing your subject for concern. We will not disclose these data without your permission.
These data are processed on the basis of Art. 6 Para. 1 lit. b) GDPR, provided your request is related to the fulfilment of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on your consent (Art. 6 Para. 1 lit. a) GDPR) and / or on our legitimate interests (Art. 6 Para. 1 lit. f) GDPR), as we have a legitimate interest in effectively processing the requests addressed to us.
We will retain the data you provide via contact requests until you ask us to delete them, you revoke your consent for storage or the purpose for their storage is no longer applicable (e. g. after the processing of your subject for concern has been completed). Any mandatory statutory provisions - especially mandatory retention periods - remain unaffected.
SSL or TLS encryption
This site uses SSL or TLS encryption for security reasons and for the protection of the transmission of confidential content, such as the inquiries you send to us as the site operator. You can recognize an encrypted connection in your browser's address line when it changes from "http://" to "https://" and the lock icon is displayed in your browser's address bar.
If SSL or TLS encryption is activated, the data you transfer to us cannot be read by third parties.
5. Hosting and Content Delivery Networks (CDN)
This website is hosted by an external service provider (host). The personal data collected on this website are stored on the host's servers. This can primarily be IP addresses, contact requests, meta and communication data, contract data, contact details, names, website access and other data generated via a website.
The host is used for the purpose of fulfilling contracts with our potential and existing customers (Art. 6 Par. 1 lit. b) GDPR) and in the interest of a safe, fast and efficient provision of our website by a professional provider (Art. 6 Par. 1 lit. f) GDPR).
Our host will only process your data to the extent required to fulfil its performance obligations and to follow our instructions in relation to these data.
Conclusion of an order processing contract
In order to guarantee privacy-compliant processing, we have concluded a contract for order processing with our host.
6. Rights of the persons concerned
Information, deletion and correction
Sie haben im Rahmen der geltenden gesetzlichen Bestimmungen jederzeit das Recht auf unentgeltliche Auskunft über Ihre gespeicherten personenbezogenen Daten, deren Herkunft und Empfänger und den Zweck der Datenverarbeitung und ggf. ein Recht auf Berichtigung oder Löschung dieser Daten. Hierzu sowie zu weiteren Fragen zum Thema personenbezogene Daten können Sie sich jederzeit unter der im Impressum angegebenen Adresse an uns wenden.'
Revocation of your consent to the processing of your data
Many data processing operations are only possible with your express consent. You may revoke your consent at any time with future effect. An informal email making this request is sufficient. The data processed before we receive your request may still be legally processed.
Right to object to the collection of data in special cases and to direct advertising (Art. 21 GDPR)
IF YOUR PERSONAL DATA IS PROCESSED FOR DIRECT ADVERTISING PURPOSES, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THE PROCESSING OF PERSONAL DATA RELATING TO YOU FOR THE PURPOSES OF SUCH ADVERTISING, INCLUDING PROFILING - INSOFAR AS IT IS RELATED TO SUCH DIRECT ADVERTISING. IF YOU OBJECT, YOUR PERSONAL DATA WILL NO LONGER BE USED FOR PURPOSES OF DIRECT ADVERTISING (OBJECTION PURSUANT TO ART. 21 PAR. 2 GDPR).
Right to file complaints with regulatory authorities
In the event of infringements of the GDPR, the persons concerned shall have the right to file complaints with a supervisory authority, particularly in the member state of their habitual residence, workplace or the place of presumed infringement. The right to file complaints exists without prejudice to other administrative or judicial remedies.
Right to data portability
You have the right to have data which we process based on your consent or in fulfilment of a contract automatically delivered to yourself or to a third party in a standard, machine-readable format. If you require the direct transfer of data to another responsible party, this will only be done to the extent technically feasible.
Right to restrict processing
You have the right to request that the processing of your personal data be restricted. To this end, you can contact us at any time at the address stated on our site's legal notice page. The right to restrict processing exists in the following cases:
- If you dispute the accuracy of your personal data stored with us, we usually need time to verify this. You have the right to request that the processing of your personal data be restricted for the duration of the verification.
- If the processing of your personal data has taken/is taking place unlawfully, you can request restriction of data processing instead of data deletion.
- If we no longer require your personal data but you do in order to exercise, defend or assert legal claims, you have the right to request restriction of processing of your personal data instead of data deletion.
- If you have lodged an objection pursuant to Art. 21 Para. 1 GDPR, it is necessary to weigh up your interests against ours. As long as it has not been ascertained whose interests prevail, you have the right to request that the processing of your personal data be restricted.
- If you have restricted the processing of your personal data, such data, apart from being stored, may be processed only with your consent, or for the purpose of asserting, exercising or defending legal claims or protecting the rights of another natural or legal person, or on the grounds of an important public interest of the European Union or of a member state.
7. Analysis tools and advertising
This website uses functions of Google Analytics, a web analysis service. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics uses so-called cookies. These are text files that are stored on your computer and that allow website use to be analysed. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the United States of America, where it is stored.
The storage of Google Analytics cookies and the use of this analysis tool are based on Art. 6 Para. 1 lit. f) GDPR. The website operator has a legitimate interest in analysing user behaviour in order to optimise both its website and its advertising. If appropriate consent has been requested (e.g. consent to store cookies), the processing takes place exclusively on the basis of Art. 6 Para. 1 lit. a) GDPR; the consent can be revoked at any time.
On this website we have enabled the IP anonymisation feature. Thus, within member states of the European Union or in other contracting states of the Agreement on the European Economic Area your IP address is shortened by Google before it is transferred to the USA. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to analyse your use of the website, compile reports regarding website activity, and provide other services to the website operator related to website usage and Internet usage. The IP address transmitted by your browser in the content of Google Analytics will not be combined with other data from Google.
You can prevent the storage of cookies by means of an appropriate setting in your browser software; however, we would like to point out that if you do this, you may not be able to fully utilise all the features of this website. You can also prevent the collection of data generated by cookies and related to your use of the website (incl. your IP address) passing to Google, and the processing of these data by Google, by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en.
Objection to data collection
You can prevent the collection of your data by Google Analytics by clicking on the following link. An opt-out cookie will be set that prevents your data from being collected on future visits to this site: Disable Google Analytics.
We have entered into a data processing contract with Google and fully implement the strict requirements of the German data protection authorities when using Google Analytics.
Demographic Features of Google Analytics
This website uses the "Demographic Features" function of Google Analytics. This allows reports to be generated, which contain statements about the age, gender and interests of visitors to the site. These data come from interest-based advertising from Google and third-party visitor data. These data cannot be attributed to a specific person. You can deactivate this feature at any time by means of the advertisement settings in your Google account, or you can generally forbid the collection of your data by Google Analytics as described in the section "Objection to data collection".
Data stored at Google at user and event level that are linked to cookies, user IDs (e. g. user ID) or advertising IDs (e. g. DoubleClick cookies, Android advertising ID) will be anonymised or deleted after 14 months. For details, see the following link: https://support.google.com/analytics/answer/7667196?hl=en
We use Google Analytics to enable us to analyse and regularly improve the use of our website. The statistics gained in this way enable us to improve our offer and make it more interesting for you as a user. Google has agreed to comply with the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework, for the exceptional cases in which personal data are transferred to the USA. The legal basis for the use of Google Analytics is Art. 6 Par. 1 S. 1 lit. f) GDPR.
8. Plugins and Tools
YouTube with enhanced privacy
This website integrates videos from YouTube. The site provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.
We use YouTube in the privacy-enhanced mode. According to YouTube, this mode causes YouTube not to store any information about visitors to this website before they watch the video. The disclosure of data to YouTube partners is, however, not mandatorily excluded by the privacy-enhanced mode. Thus, YouTube establishes a connection to the Google DoubleClick network, regardless of whether you are viewing a video or not.
As soon as you start a YouTube video on this website, a connection is established to the YouTube servers. The YouTube server is then informed which of our pages you have visited. If you are logged in to your YouTube account, you allow YouTube to directly associate your surfing habits with your personal profile. You can prevent this by logging out of your YouTube account. If you are logged in to Google, your data will be directly associated with your account. If you do not wish to be associated with your profile when using YouTube, you must log out before activating the button.
In addition, YouTube can store different cookies on your device once you have started a video. YouTube can use these cookies to gather information about visitors to this website. This information is among other things used to record video statistics, to improve user-friendliness, and to prevent attempted fraud. The cookies remain on your device until you delete them.
Starting a YouTube video may possibly trigger further data processing operations which are beyond our control.
YouTube is used in the interests of making our website appealing. This represents a legitimate interest within the meaning of Art. 6 Para. 1 lit. f) GDPR. If appropriate consent has been requested (e.g. consent to store cookies), the processing takes place exclusively on the basis of Art. 6 Para. 1 lit. a) GDPR; the consent can be revoked at any time.
We use the map service of OpenStreetMap (OSM). The provider is the Open Street Map Foundation (OSMF), 132 Maney Hill Road, Sutton Coldfield, West Midlands, B72 1JU, United Kingdom.
If you visit a website on which OpenStreetMap is integrated, your IP address and further information about your behaviour on this website will among other things be forwarded to the OSMF. To this end, OpenStreetMap possibly saves cookies in your browser. These are text files that are stored on your computer and that allow your website use to be analysed. You can prevent the storage of cookies by means of an appropriate setting in your browser software; however, we would like to point out that if you do this, you may not be able to fully utilise all the features of this website.
The use of OpenStreetMap is in the interest of making our website appealing and to facilitate locating the places we specify on the website. This represents a legitimate interest within the meaning of Art. 6 Para. 1 lit. f) GDPR. If appropriate consent has been requested (e.g. consent to store cookies), the processing takes place exclusively on the basis of Art. 6 Para. 1 lit. a) GDPR; the consent can be revoked at any time.