Privacy policy

This English version is provided for convenience. Only the German version is legally binding.

Data protection notice

Controller

The controller within the meaning of data protection law, in particular the EU General Data Protection Regulation (GDPR), is:

THDS GmbH
Storchsbaumstraße 109
46282 Dorsten
Germany

Commercial register: 15378
Registry court: Amtsgericht Gelsenkirchen (Gelsenkirchen Local Court)

Represented by: Torben Schwanz

Phone: +49 2362 974 097 - 2

Email address of the provider: torben.schwanz@thds.tech

Your rights as a data subject

Using the contact details given, you can exercise the following rights under the EU General Data Protection Regulation (GDPR) at any time:

access to the data we hold about you and how it is processed (Art. 15 GDPR),
rectification of inaccurate personal data (Art. 16 GDPR),
erasure of the data we hold about you (Art. 17 GDPR),
restriction of processing, where we are not yet allowed to erase your data because of legal obligations (Art. 18 GDPR),
objection to the processing of your data by us (Art. 21 GDPR) and
data portability, where you have consented to the processing or concluded a contract with us (Art. 20 GDPR).

Where you have given us your consent, you can withdraw it at any time with effect for the future.

You can lodge a complaint with a supervisory authority at any time, for example the competent supervisory authority of the German federal state in which you live, or the authority responsible for us as the controller.

Use of an agency

We use an external agency to build, technically maintain and operate our website. Where the agency gains access to personal data in doing so, this takes place as processing on our behalf under Art. 28 GDPR. The agency is bound by our instructions and contractually obliged to handle your data in compliance with data protection law.

A list of supervisory authorities (for the non-public sector) with their addresses is available at: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.

Processing activities

Provision of our online services

To provide our online services we use an external service provider: Perspective Software GmbH, Mailbox 659770, D-96035 Bamberg, Germany (“Perspective”). Perspective itself stores your data exclusively on European servers. However, your data may be accessible to entities in the United States of America, because Perspective uses sub-processors based in the USA. Since July 2023, the EU-US Data Privacy Framework (DPF) adopted by the European Commission has served as the legal basis for these potential transfers. Perspective’s sub-processors thereby commit to a high level of data protection. Nevertheless, there remains a risk that your data could be processed by US authorities for control and surveillance purposes. Perspective therefore provides additional measures and safeguards for such transfers to the United States in line with the requirements of the GDPR in order to ensure an adequate level of protection, for example by concluding standard contractual clauses between Perspective and its sub-processors.

I. Description and scope of data processing

Perspective processes your data on our behalf so that we can provide our online services to you. For this purpose, your IP address is automatically transmitted to Perspective so that the content and functions of our online services can be delivered to your browser or device.

The following data may be collected:

Information about the browser type and version used
The operating system of your computer
The internet service provider you use
The IP address of your device
Date and time of your access to the funnel
Websites from which you reached our website (“referrer”)

II. Legal basis for data processing

Perspective stores the data listed under I. in log files. This is done to ensure

a smooth connection to the website,
convenient use of our website,
the evaluation of system security and stability, and
for further administrative purposes.

The temporary storage of the IP address by the system is also necessary to deliver the website to your computer. For this, the IP address of your computer must remain stored for the duration of the session.

These purposes also constitute our legitimate interest in the data processing. The legal basis for the data processing is therefore Art. 6 (1) sentence 1 lit. f GDPR.

III. Duration of processing

The personal data processed by Perspective is deleted as soon as it is no longer required for the purpose for which it was collected:

Where data is collected to provide the website, this is the case when the respective session has ended.
Where the IP address is stored in log files, this is the case after 7 days at the latest.

IV. Rights of data subjects

You have the right at any time to obtain information free of charge about the origin, recipients and purpose of the personal data stored about you. You also have the right to request the rectification, blocking or erasure of this data. For this and for any other questions on data protection, you can contact us at any time at the address given in the legal notice. Furthermore, you have the right to lodge a complaint with the competent supervisory authority in the event of infringements of the GDPR.

Because the data processing is based on Art. 6 (1) sentence 1 lit. f GDPR, you have the right at any time to object to the processing of your personal data on grounds relating to your particular situation. If you object, we will no longer process the personal data concerned, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims (objection under Art. 21 (1) GDPR). Since collecting the data to provide the website and storing the data in log files is essential for operating our website, you will usually have no possibility to object.

You also have the right, under certain circumstances, to request the restriction of processing of your personal data. The right to restriction of processing applies in the following cases:

If you contest the accuracy of the personal data we hold about you, we usually need time to verify this. For the duration of the verification, you have the right to request the restriction of processing of your personal data.
If the processing of your personal data was or is unlawful, you can request the restriction of processing instead of erasure.
If we no longer need your personal data but you need it for the exercise, defence or establishment of legal claims, you have the right to request the restriction of processing of your personal data instead of erasure.
If you have lodged an objection under Art. 21 (1) GDPR, your interests and ours must be weighed against each other. As long as it has not yet been determined whose interests prevail, you have the right to request the restriction of processing of your personal data.

If you have restricted the processing of your personal data, this data may, apart from being stored, only be processed with your consent, for the establishment, exercise or defence of legal claims, for the protection of the rights of another natural or legal person, or for reasons of important public interest of the European Union or of a Member State.

Collection of general information when you visit our website

Nature and purpose of processing

When you access our website, i.e. when you do not register or otherwise submit information, information of a general nature is collected automatically. This information (server log files) includes, for example, the type of web browser, the operating system used, the domain name of your internet service provider, your IP address and similar data.

It is processed in particular for the following purposes:

to display the website correctly and to optimise it

We do not use your data to draw conclusions about you as a person. However, we reserve the right to review the server log files retrospectively should there be specific indications of unlawful use.

Legal basis and legitimate interest

The processing is carried out in accordance with Art. 6 (1) lit. f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website and in ensuring system security and detecting misuse.

Recipients

Recipients of the data may be technical service providers who act as processors for the operation and maintenance of our website.

Storage period

Data is stored in server log files in a form that allows the data subjects to be identified for a maximum of [please add information], unless a security-relevant event occurs (e.g. a DDoS attack).

In the event of such an event, server log files are stored until the security-relevant event has been eliminated and fully investigated.

Whether provision is mandatory or necessary

Providing the personal data mentioned above is neither required by law nor by contract. Without the IP address, however, the service and the functioning of our website cannot be guaranteed. In addition, individual services may be unavailable or restricted.

Objection

Please see the information on your right to object under Art. 21 GDPR below.

Contacting us

Nature and purpose of processing

You can contact us via the email addresses provided. In this case, the user’s personal data transmitted with the email is stored. This includes the date and time the email was sent, the email address, IP addresses and information about the servers involved in the email communication.

You can contact us via the telephone numbers provided. In this case, we collect log data that includes your telephone number and the duration of the call.

Regardless of the method of communication you choose, we collect the content of your enquiry. Your data is stored for the purpose of communicating with you individually.

Legal basis

The data is processed on the basis of a legitimate interest (Art. 6 (1) lit. f GDPR).

Our legitimate interest in processing your data is to make it easy for you to get in touch with us.

If you contact us to request a quotation, the data is processed to take steps prior to entering into a contract (Art. 6 (1) lit. b GDPR).

Recipients

Recipients of the data may be technical service providers who act as processors for the operation and maintenance of our website.

Storage period

Data is deleted no later than [please add information] after your enquiry has been dealt with.

If a contractual relationship is established, we are subject to the statutory retention periods. These are generally 6 or 10 years for reasons of proper bookkeeping and tax law requirements.

Whether provision is mandatory or necessary

Providing your personal data is voluntary. However, we can only process your enquiry if you give us the necessary data and the reason for your enquiry.

Objection

Please see the information on your right to object under Art. 21 GDPR below.

Contact and enquiry management

To provide contact, enquiry or application forms we use an external service provider: Perspective Software GmbH, Mailbox 659770, D-96035 Bamberg, Germany (“Perspective”). Perspective itself stores your data exclusively on European servers. However, your data may be accessible to entities in the United States of America, because Perspective uses sub-processors based in the USA. Since July 2023, the EU-US Data Privacy Framework (DPF) adopted by the European Commission has served as the legal basis for these potential transfers. Perspective’s sub-processors thereby commit to a high level of data protection. Nevertheless, there remains a risk that your data could be processed by US authorities for control and surveillance purposes. Perspective therefore provides additional measures and safeguards for such transfers to the United States in line with the requirements of the GDPR in order to ensure an adequate level of protection, for example by concluding standard contractual clauses between Perspective and its sub-processors.

I. Description and scope of data processing

When you use Perspective’s contact, enquiry or application forms, the following data is transmitted to Perspective’s servers:

Date and time of access
Websites from which you reached our website (“referrer”)
Context information (e.g. button clicks on the pages, selections made on the pages)
The content of all completed text fields (for example contact details such as your name or address, or other personal data, depending on the question asked in the specific text field)
Files you upload

II. Purpose and legal basis of data processing

The purpose of this data processing is to ensure the communication you have initiated.

The processing of your data from contact, enquiry or application forms is therefore initially based on your consent. The legal basis is Art. 6 (1) sentence 1 lit. a GDPR. Where an enquiry form leads to the initiation of a contract, the legal basis is also Art. 6 (1) sentence 1 lit. b GDPR. The legal basis for processing data in an application form may, in addition to Art. 6 (1) sentence 1 lit. f GDPR, also be Art. 88 GDPR in conjunction with Section 26 BDSG (German Federal Data Protection Act).

III. Duration of processing

Your personal data is kept for as long as it is required to fulfil the purpose of processing, or until you withdraw your consent. Exempt from this principle is data that Perspective must retain because of legal obligations. These include, for example, retention obligations under commercial and tax law. These retention periods are currently up to ten years. For application data: if no employment relationship is established, your data will be deleted no later than six months after the end of the application process, unless you have expressly agreed to longer storage.

IV. Rights of data subjects

You can withdraw your consent to the data processing at any time by informal notice to us (for example by email). The withdrawal does not affect the lawfulness of the processing carried out on the basis of the consent before its withdrawal.

You also have the right, under certain circumstances, to request the restriction of processing of your personal data. The right to restriction of processing applies in the following cases:

If you contest the accuracy of the personal data we hold about you, we usually need time to verify this. For the duration of the verification, you have the right to request the restriction of processing of your personal data.
If the processing of your personal data was or is unlawful, you can request the restriction of processing instead of erasure.
If we no longer need your personal data but you need it for the exercise, defence or establishment of legal claims, you have the right to request the restriction of processing of your personal data instead of erasure.
If you have lodged an objection under Art. 21 (1) GDPR, your interests and ours must be weighed against each other. As long as it has not yet been determined whose interests prevail, you have the right to request the restriction of processing of your personal data.

Landing pages and white paper via WhatsApp

Our landing pages for advertisements (e.g. for the white paper “Effizienzsteigerung im Maschinenbau”, on increasing efficiency in machine building) are hosted at info-material.thds.tech on a server that we operate with Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany (processing on our behalf under Art. 28 GDPR). The pages do not set cookies and do not load content from third parties.

I. Description and scope of data processing

When a page is accessed: IP address, time, page accessed and browser identifier in the server log. We count page views and forms started per day without any personal reference.
When the form is submitted: first name, last name, company, mobile number, your consent and the origin from the advertisement link (e.g. campaign name, click ID). We use this to create you as a contact in our CRM.
We send you the requested white paper via the WhatsApp Business Platform of Meta Platforms Ireland Ltd., Merrion Road, Dublin 4, D04 X2K5, Ireland (“Meta”). For this purpose, Meta receives your mobile number, your last name (for the salutation) and the content of the message. We store the delivery status and your replies with your contact record.

II. Purpose and legal basis of data processing

We process the data to send you the requested white paper and to arrange the free efficiency check with you. The legal basis is Art. 6 (1) sentence 1 lit. b GDPR (steps taken at your request) and your consent given on submission (Art. 6 (1) sentence 1 lit. a GDPR). The server log serves the secure operation of the server (Art. 6 (1) sentence 1 lit. f GDPR).

Meta may also process data in the USA. Meta is certified under the EU-US Data Privacy Framework; standard contractual clauses also apply.

III. Duration of processing

We delete the form data from the queue as soon as the contact has been created in the CRM. We store contact details and messages for as long as they are required for your enquiry and a possible business relationship, or until you withdraw your consent; statutory retention obligations remain unaffected.

Measuring the success of advertisements on Meta (Conversions API)

Only if you tick the optional box for this in the form does our server report your enquiry to Meta as a “Lead” event. This lets Meta recognise which advertisement led to an enquiry and show our advertisements to suitable people. There is no Meta Pixel and there are no cookies on the page itself for this purpose.

The following is transmitted: first name, last name and mobile number only as a hash value (SHA-256, not in plain text), IP address, browser identifier, the click ID from the advertisement link (fbclid), time and address of the page. Meta matches the hash values against its own user data and may also use the data for its own purposes. We are joint controllers with Meta for the transmission (Art. 26 GDPR, agreement: https://www.facebook.com/legal/controller_addendum). How Meta processes data: https://www.facebook.com/privacy/policy/.

The legal basis is your consent (Art. 6 (1) sentence 1 lit. a GDPR). You can withdraw it at any time with effect for the future, e.g. by email to torben.schwanz@thds.tech. Meta may also process the data in the USA (EU-US Data Privacy Framework). On our side, the event is deleted once it has been sent.

Cookies

A cookie is a small data record that is created when you visit a website and is temporarily stored on the website visitor’s system. If the user of the website accesses the server of this website again, the user’s browser sends the previously received cookie back to the server. The server can evaluate the information obtained in this way. Cookies can, in particular, make it easier to navigate a website.

We store your consent as a signed receipt in a first-party cookie (cc_receipt), without a user account and without a random visitor identifier.

Detailed information on cookies, and on which cookies are used on this website and for what purpose, is available at any time in the cookie settings.

Deleting cookies

You can delete individual cookies or all cookies. You can also obtain information and instructions on how to delete these cookies or block them from being stored in advance. Depending on your browser provider, you will find the necessary information at the following links:

Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-loeschen-daten-von-websites-entfernen
Microsoft Edge: https://support.microsoft.com/de-de/help/4027947/microsoft-edge-delete-cookies
Google Chrome: https://support.google.com/chrome/answer/95647?hl=de
Opera: https://help.opera.com/de/latest/web-preferences/#cookies
Safari: https://support.apple.com/kb/PH17191?locale=de_DE&viewlocale=de_DE

In addition, you can prevent so-called scripts from loading by default. NoScript only allows JavaScript, Java and other plugins to run on trusted domains of your choice.

Information and instructions on how to configure this function are available from your browser provider (e.g. for Mozilla Firefox: https://addons.mozilla.org/de/firefox/addon/noscript/).

Technically necessary cookies

Nature and purpose of processing

We use cookies to make our website more user-friendly. Some elements of our website require that the accessing browser can be identified even after a page change.

The purpose of using technically necessary cookies is to make websites easier to use. Some functions of our website cannot be offered without the use of cookies. For these, the browser must be recognised even after a page change.

We need cookies for the following applications:

An overview of the cookies used can be found in our cookie consent tool.

Legal basis and legitimate interest

To this extent, the data processing is based solely on our legitimate interest in a user-friendly design of our website and in documenting consent under Art. 6 (1) lit. f GDPR in conjunction with an assessment under Section 25 (2) TDDDG (German Telecommunications Digital Services Data Protection Act).

Recipients

Recipients of the data may be technical service providers who act as processors for the operation and maintenance of our website.

Storage period

Please refer to the cookie consent tool for the storage period of each cookie.

Whether provision is mandatory or necessary

Providing the personal data mentioned above is neither required by law nor by contract. Without this data, however, the service and the functioning of our website cannot be guaranteed. In addition, individual services may be unavailable or restricted.

Objection

Please see the information on your right to object under Art. 21 GDPR below.

Information on your right to object under Art. 21 GDPR

Right to object in individual cases

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is based on Art. 6 (1) lit. f GDPR (data processing on the basis of a balancing of interests); this also applies to profiling based on this provision within the meaning of Art. 4 No. 4 GDPR.

If you object, we will no longer process your personal data, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

Recipient of an objection

Torben Schwanz
THDS GmbH
Storchsbaumstraße 109
46282 Dorsten
Germany

Phone: +49 2362 974 097 - 2

Email: torben.schwanz@thds.tech

Changes to our privacy policy

We reserve the right to amend this privacy policy so that it always meets current legal requirements, or to reflect changes to our services in the privacy policy, e.g. when introducing new services. The new privacy policy will then apply to your next visit.

Questions about data protection

If you have any questions about data protection, please send an email to the controller named above.

Copyright notice

This privacy policy was prepared with the help of activeMind AG, experts in external data protection officers (version #2024-10-25).