DATA PROTECTION

Data protection declaration

(Updated: 01/01/2023)

The protection of your privacy is particularly important to us. We therefore explain below whether and, if so, which data we collect at all, as well as our measures arising from and in connection with data protection.

I. General data protection

§ 1 Information on the collection of personal data

(1) In the following, we inform you about the collection of personal data when using our website. Personal data is all data that can be related to you personally, e.g. name, address, email addresses, user behaviour.

(2) The data controller pursuant to Article 4 No. 7 of the EU General Data Protection Regulation (GDPR) is Friedrich Picard GmbH & Co. KG, Dietrich-Benking-Straße 78, 44805 Bochum, email: post@picard.de, represented by Friedrich Picard Verwaltung GmbH, Dietrich-Benking-Straße 78, 44805 Bochum, email: post@picard.de, which is represented by its managing director holding sole power of representation, Hans-Martin Reinhardt, Dietrich-Benking-Straße 78, 44805 Bochum, email: hans.martin.reinhardt(at)picard.de (see our legal notice as well).

The data protection officer of the data controller is AGAD Service GmbH, Dr Nils Helmke, Waldring 43-47P, 44789 Bochum, email: helmke(at)agad.de.

(3) When you contact us by email or via a contact form, the data you provide (your email address, name and telephone number, if applicable) will be stored by us in order to answer your questions. We delete any data accruing in this context after storage is no longer necessary or restrict processing if there are statutory retention obligations.

(4) If we use commissioned service providers for individual functions of our offer or would like to use your data for advertising purposes, we will inform you in detail about the respective processes below. In doing so, we also state the specified criteria for the storage period.

§ 2 Your rights

(1) You have the following rights in relation to your personal data:

  • Right to information,
  • Right to rectification or erasure,
  • Right to restriction of processing,
  • Right to data portability,
  • Right to object to processing,
  • Right of revocation
  • Right of appeal

(2) You also have the right to lodge a complaint with a data protection authority about our processing of your personal data.

§ 3 Collection of personal data when visiting our website

(1) In the case of mere informational use of the website, i.e. if you do not register or otherwise transmit information to us, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data, all of which is technically necessary for us to display our website to you and to ensure its stability and security (legal basis is Art. 6 para. 1 point f GDPR):

  • IP address
  • Date and time of the request
  • Time zone difference to Greenwich Mean Time (GMT)
  • Content of the request (specific page)
  • Access status/HTTP status code
  • Amount of data transferred in each case
  • Website from which the request comes
  • Browser
  • Operating system and its interface
  • Language and version of the browser software

(2) In addition to the aforementioned data, cookies are stored on your computer when you use our website. Cookies are text files that are stored on your hard drive and associated with the browser you are using and which provide the party setting the cookie (in this case, us) with certain information. Cookies cannot run programs or transmit viruses to your computer. They are used to make the website as a whole more user-friendly and effective.

(3) Use of cookies:
a) This website uses the following types of cookies, the scope and functionality of which are explained below:

  • Transient cookies (see b)
  • Persistent cookies (see c).

b) Transient cookies are automatically deleted when you close the browser. These include session cookies in particular. These store a so-called session ID with which various requests of your browser can be assigned to the joint session. This will allow your computer to be recognized when you return to our website. Session cookies are deleted when you log out or close your browser.

c) Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie. You can delete the cookies in the security settings of your browser at any time.

d) You can configure your browser settings according to your preferences and, for example, refuse to accept third-party cookies or all cookies. Please note that you may not be able to use all the functions of this website.

§ 4 Collection of personal data in the case of job applications

(1) We process the data you have sent us in connection with your application in order to assess your suitability for the position (or other open positions in our companies, if applicable) and to carry out the application process.

(2) The legal basis for the processing of your personal data in this application procedure is primarily § 26 BDSG in the version applicable from 25/5/2018. According to this, the processing of data required in connection with the decision on the establishment of an employment relationship is permissible.

(3) Should the data be required for legal prosecution after completion of the application procedure, data processing may be carried out on the basis of the requirements of Art. 6 GDPR, in particular to safeguard legitimate interests pursuant to Art. 6 para. 1 point f) GDPR. Our interest then consists in asserting or defending any claims.

If an application is rejected, the applicant’s data will be deleted after 6 months.

In the event that you have agreed to further storage of your personal data, we will transfer your data to our applicant pool. This data is deleted after a period of two years.

If you are accepted for a position during the application process, the data from the applicant data system will be transferred to our personnel information system.

(4) In principle, only those persons within the company who require this for the orderly processing of our application procedure have access to your data.
The data is processed exclusively in data centres in the Federal Republic of Germany.

With regard to your data, you are of course also entitled to the rights mentioned under § 2 and § 5.

§ 5 Additional functions and services of our website

(1) In addition to the purely informational use of our website, we offer various services that you can use if you are interested. This usually requires you to provide further personal data which we use to provide the relevant service and to which the aforementioned data processing principles apply.

(2) In some cases, we use external service providers to process your data. They have all been carefully selected and commissioned by us, are bound by our instructions and are regularly inspected.

(3) Furthermore, we may pass your personal data on to third parties if participation in promotions, competitions, conclusion of contracts or similar services are offered by us together with partners. You will receive more information on this when you provide your personal data or below in the description of the services.

(4) Should our service providers or partners have their registered office in a country outside the European Economic Area (EEA), we will inform you of the consequences of this circumstance in the description of the offer.

§ 6 Revocation or objection to the processing of your data

(1) If you have given your consent to the processing of your data, you can revoke this at any time. Such a revocation influences the permissibility of processing your personal data after you have given it to us.

(2) Insofar as we base the processing of your personal data on the consideration of interests, you may object to the processing. This is the case if the processing is not necessary, in particular, in order to fulfil a contract with you, which is illustrated by us in each case in the following description of the functions. When exercising such an objection, we will ask you to explain the reasons why we should not process your personal data as we have done. In the event of your justified objection, we will examine the merits of the case and either discontinue or adapt the data processing or show you our compelling legitimate grounds on the basis of which we will continue the processing.

(3) Of course, you can object to the processing of your personal data for the purposes of advertising and data analysis at any time. You can inform us of your advertising objection using the following contact details: Friedrich PICARD GmbH & Co. KG, Dietrich-Benking-Str. 78, 44805 Bochum; email: post(at)picard.de.

 

II. Special usage services

§ 7 Use of our webshop

(1) If you wish to place an order in our webshop, it may be necessary for you to provide your personal data for the conclusion of the contract, insofar as we require this for the processing of your order. Mandatory information required for the processing of contracts is specifically marked, other information is voluntary. We process the data you provide to process your order. For this purpose, we may pass on your payment details to our main bank. The legal basis for this is Art. 6 para. 1 clause 1 point b GDPR.

You can create a customer account through which we can save your data for future purchases. When you create an account, the data you provide will be stored with the right of revocation. You can always delete all other data, including your user account. You can inform us of your wish to delete your user account using the following contact details: Friedrich PICARD GmbH & Co. KG, Dietrich-Benking-Str. 78, 44805 Bochum; email: post@picard.de.

We may also process the data you provide to inform you about other interesting products from our portfolio or to send you emails with technical information.

(2) We are obliged by commercial and tax law to store your address, payment and order data for a period of ten years.

(3) To prevent unauthorised access to your personal data by third parties, the ordering process is encrypted using SSL or TLS technology.

III. Web analytics

§ 8 Use of Google Analytics

Nature and scope of the processing

We use Google Analytics from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, as an analysis service for the statistical evaluation of our website. This includes, for example, the number of times our website is accessed, sub-pages visited and the length of time visitors stay.
Google Analytics uses cookies and other browser technologies to evaluate user behaviour and recognise users.
This information is used, among other things, to compile reports on website activity.

Purpose and legal basis

The use of Google Analytics is based on your consent in accordance with Art. 6 para. 1 point a. GDPR and § 25 para. 1 TTDSG.

Storage period

The actual storage period of the processed data cannot be influenced by us, but is determined by Google Ireland Limited. Further information can be found in the privacy policy for Google Analytics: policies.google.com/privacy.

§ 9 Google DoubleClick

Nature and scope of the processing

We have integrated components of DoubleClick by Google on our website. DoubleClick is a brand of Google, under which mainly special online marketing solutions are marketed to advertising agencies and publishers. DoubleClick by Google transmits data to the DoubleClick server with every impression as well as with clicks or other activities.
Each of these data transmissions triggers a cookie request to the browser of the data subject. If the browser accepts this request, DoubleClick stores a cookie in your browser.
DoubleClick uses a cookie ID, which is required to carry out the technical procedure. The cookie ID is needed, for example, to display an advertisement in a browser. DoubleClick can also use the cookie ID to record which advertisements have already been displayed in a browser in order to avoid duplicate placements. Furthermore, the cookie ID enables DoubleClick to record conversions. Conversions are recorded, for example, if a DoubleClick ad was previously displayed to a user and the user subsequently makes a purchase on the advertiser’s website using the same internet browser.

A DoubleClick cookie does not contain any personal data, but may contain additional campaign identifiers. A campaign identifier is used to identify the campaigns you have already been in contact with on other websites. As part of this service, Google obtains knowledge of data that Google also uses to generate calculations of commissions. Among other things, Google can track that you have clicked on certain links on our website. In this case, your data will be passed on to the operator of DoubleClick, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Further information and the applicable privacy policy of DoubleClick by Google can be found at https://policies.google.com/privacy.

Purpose and legal basis

We process your data with the help of Double-Click cookies for the purpose of optimising and displaying advertising on the basis of your consent pursuant to Art. 6 para. 1 point a GDPR and § 25 para. 1 TTDSG. You give your consent by setting the use of cookies (cookie banner / consent manager), with which you can also declare your revocation at any time with effect for the future in accordance with Art. 7 para. 3 GDPR. The cookie is used, among other things, to serve and display user-relevant advertising and to create reports on advertising campaigns or to improve them. Furthermore, the cookie helps to avoid displaying the same advertisement more than once. Each time you access one of the individual pages of our website on which a DoubleClick component has been integrated, your browser will automatically be prompted by the respective DoubleClick component to transmit data to Google for the purpose of online advertising and the settlement of commissions. There is no legal or contractual obligation to provide your data. If you do not give us your consent, it is possible to visit our website without restriction, but not all functions may be fully available.

Storage period

The actual storage period of the processed data cannot be influenced by us, but is determined by Google Ireland Limited. Further information can be found in the privacy policy for Google DoubleClick: policies.google.com/privacy.

§ 10 Google Tag Manager

Nature and scope of the processing

We use the Google Tag Manager from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Tag Manager is used to manage website tags through one interface and allows us to control the precise integration of services on our website.
This allows us to flexibly integrate additional services in order to evaluate user access to our website.

Purpose and legal basis

The use of Google Tag Manager is based on your consent in accordance with Art. 6 para. 1 point a. GDPR and § 25 para. 1 TTDSG.

Storage period

The actual storage period of the processed data cannot be influenced by us, but is determined by Google Ireland Limited. Further information can be found in the privacy policy for Google Tag Manager: marketingplatform.google.com/about/analytics/tag-manager/use-policy/.

§ 11 Web fonts from MyFonts

(1) Our website uses fonts provided by MyFonts Inc, 600 Unicorn Park Drive, Woburn, MA 01801, USA. When the website is accessed, data is also retrieved from a server of the company MyFonts, whereby MyFonts at least gains knowledge of your IP address.

In the process, MyFonts also learns, among other things, that you have called up the font via our website, as well as some technical information about your browser, as almost every web browser automatically sends this data to the server every time it is accessed. Some browsers allow you to restrict or modify the data transmitted to the server, but whether this is possible depends on the manufacturer of the browser. Even if MyFonts only requires the transmitted information, in particular the IP address, for the delivery of the retrieved content, it is beyond our knowledge and influence whether and to what extent MyFonts also statistically evaluates or stores this information.

(2) Additional information on data protection at MyFonts can be found at the following link: www.myfonts.com/info/terms-and-conditions.

§ 12 MyFonts Counter

(1) In addition, we use the MyFonts Counter service, a web analytics service provided by MyFonts Inc, 500 Unicorn Park Drive, Woburn, MA 01801, USA. Due to the licence conditions, page view tracking is carried out by counting the number of visits to the Friedrich PICARD GmbH & Co. KG website for statistical purposes and transmitting them to MyFonts. MyFonts collects anonymised data in the process.

(2) The transfer of data takes place through the activation of Java Script code in the user’s browser. To prevent the execution of Java Script code from MyFonts altogether, the user can install a Java Script blocker (e.g. www.noscript.net).

(3) Further information on data protection and the cookies used can be found on the internet at: www.myfonts.com/info/terms-and-conditions/.

§ 13 Use of Live Chat Function (Appworkx)

(1) You can contact us via the live chat function. We use the live chat software Appworkx on this website. Appworkx is a “Software as a Service” (SaaS) offer from cloudware, a business division of CREA Werbeagentur GmbH, Friedhofstraße 1a, 49088 Osnabrück (hereinafter: CREA). Appworkx uses cookies which are stored on your computer and which enable a personal conversation in the form of a real-time chat on the website with you. If you decide to use Appworkx, the chat history including the page history will be collected, processed and stored in Germany by CREA. Location-related information is also collected via your IP address. The data collected will only be linked to registration data if you provide us with this data voluntarily, e.g. in the context of communication in the live chat. The same applies to your other personal data. Your data will be processed by CREA exclusively on our behalf and on the basis of the concluded order processing agreement. We delete any data accruing in this context after storage is no longer necessary. Of course, you can object to the processing of your personal data. You can inform us of your objection using the following contact details: Friedrich PICARD GmbH & Co. KG, Dietrich-Benking-Str. 78, 44805 Bochum; email: post@picard.de.

(2) The legal basis for the processing of personal data in connection with the live chat function is our legitimate interest in the optimisation and economic operation of our website within the meaning of Art. 6 para. 1 point f GDPR and, where applicable, your consent pursuant to Art. 6 para. 1 point a GDPR.

 

IV. SOCIAL MEDIA

§ 14 Integration of YouTube videos

Nature and scope of the processing

We have integrated YouTube Video on our website. YouTube Video is a component of the video platform of YouTube, LLC, where users can upload content, share it over the internet and receive detailed statistics.

YouTube Video allows us to integrate content from the platform into our website.

YouTube Video uses cookies and other browser technologies to analyse user behaviour, recognise users and create user profiles. This information is used, among other things, to analyse the activity of the content listened to and to create reports. If a user is registered with YouTube, LLC, YouTube Video can associate the videos played with the profile.
When you access this content, you connect to servers of YouTube, LLC, Google Ireland Limited, Gordon House, Barrow Street Dublin 4 Ireland, where your IP address and, if applicable, browser data such as your user agent are transmitted.

Purpose and legal basis

The use of the service is based on your consent in accordance with Art. 6 para. 1 point a. GDPR and § 25 para. 1 TTDSG.

We intend to transfer personal data to third countries outside the European Economic Area, in particular the USA. In cases where no adequacy decision of the European Commission exists (e.g. in the USA), we have agreed with the recipients of the data on other suitable guarantees within the meaning of Art. 44 et seq. GDPR. These are – unless otherwise stated – standard contractual clauses of the European Commission pursuant to Implementing Decision (EU) 2021/914 of 4 June 2021. You can view a copy of these standard contractual clauses at eur-lex.europa.eu/legal-content/DE/TXT/HTML/.

In addition, before any such third country transfer, we obtain your consent in accordance with Art. 49 para. 1 clause 1 point a. GDPR, which you provide via the consent in the Consent Manager (or other forms, registrations, etc.). We would like to point out that in the case of third country transfers, there may be unknown risks in detail (e.g. data processing by security agencies of the third country, the exact scope and consequences of which for you we do not know, over which we have no influence and of which you may not become aware).

Storage period

The actual storage period of the processed data cannot be influenced by us, but is determined by YouTube, LLC. Further information can be found in the privacy policy for YouTube Video: policies.google.com/privacy.”.