Data Protection

Data protection and privacy statement

1. Privacy at a glance

General guidelines

The following guidance notes provide a simple overview of what happens to personal information when visiting our website. Personal data include all data that make it possible to identify an individual as a person. Detailed information on the subject of data protection can be found in our Data Protection and Privacy Statement stated after this text passage.

The collection of data on our website

Who is responsible for the data collection on this website?
The data processing on this website is performed by the operator of this website. Its contact details are provided in the imprint of this website.

How do we collect your data?
On the one hand, data will be collected by storing the data visitors provide. Such data may be data that visitors e.g., enter into a contact form.

Other data is collected automatically by our IT systems when our website is invoked. Such data is mainly technical data (e.g., Internet browser, operating system or time a web page was invoked). Such data is collected automatically as soon as our website is invoked.

What do we use visitor data for?
Part of the data is collected to ensure a flawless provisioning of the website. Other data can be used to analyse the user behaviour.

What rights do visitors have regarding their data?
Visitors are entitled to obtain information about the origin, recipient and purpose of stored personal data, free of charge at any time. Visitors are also entitled to request the correction, blocking or deletion of such data. For further information on this topic and the protection of personal data, visitors can contact us at any time at the address provided in the imprint. Furthermore, visitors are entitled to file a complaint at the competent supervisory authority.

In addition, visitors are entitled to request the restriction of the processing of their personal data in certain circumstances. Details on this topic are provided under the heading 'Right to restriction of processing' in the Data Protection and Privacy Statement.

Analysis tools and Third-party tools

The surfing behaviour of visitors to our website can be statistically evaluated. This is mainly performed by using Cookies and so-called analysis programmes. The analysis of the surfing behaviour of visitors to our website is usually performed anonymous; I.e., the surfing behaviour can not be traced back to individual visitors. Visitors can object to or prevent such analysis by not using certain tools. Detailed information on this topic are provided in the following Data Protection and Privacy Statement.

Visitors can object to this analysis. Visitors will be informed about the options for raising objections by the Data Protection and Privacy Statement at hand.

2. General notes and mandatory information

Data Protection

The operators of these sites take the protection of personal data very seriously. We treat the personal data of visitors confidentially and in accordance with the data protection legislation and the Data Protection and Privacy Statement at hand.

Different personal data will be collected when using this website. Personal data includes data which makes it possible to identify the visitor as a person. The Data Protection and Privacy Statement at hand explains what information we collect and what we use it for. It also explains how and for what purpose this happens.

We point out that data transmission over the Internet (e.g., when communicating via email) may bare the risk of security gaps. It is impossible to provide complete protection of data against unauthorised access by third parties.

Note regarding the responsible body

The responsible body for processing the data on this website is:

CENARIS GmbH
Industriestraße 20
28199 Bremen, Germany

Phone: +49 421-596608-0
E-Mail: info@cenaris.com

A responsible body is the natural or legal person who, alone or together with others, decides on the purposes and means of processing personal data (e.g., names, e-mail addresses, etc.).

Revocation of the consent to data processing

Many data processing operations are only possible with the express consent of the individual visitor. Visitors are entitled to revoke their consent at any time by sending us an informal e-mail notification. The legitimacy of the data processed until the withdrawal of the approval remains unaffected.

Right to object to data collection in special cases and against direct mail advertising (Art 21 German GDPR)

If the processing of data is based on Art 6 para 1 lit e or f German GDPR, the person affected is entitled at any time to object to the processing of his personal data for reasons that arise from his particular situation; this also applies to profiling that is legally based on the aforementioned provisions. The respective legal basis on which the processing of data is based is stated in the Data Protection and Privacy Statement at hand. In cases where an objection has been entered, we will no longer process the personal information of the respective individual unless we can establish compelling legitimate grounds for such processing that outweigh the interests, rights and freedoms of the affected individual, or where the processing takes place for the purpose of enforcing, pursuing or defending legal claims (objection according to Art 21 para 1 German GDPR).
If and insofar as personal data is processed for direct mail advertising processes, the affected individual shall be entitled to object to the processing of his personal data for the purpose of such advertising at any time; this shall also apply to profiling insofar as it is associated with such direct mail advertising. In cases where an objection has been entered, the personal information of the affected individual will no longer be used for direct marketing purposes (objection according to Art 21 para 2 German GDPR).

Right to complain at the competent supervisory authority

In the case of violations of the GDPR, the affected individuals have a right to complain at the supervisory authority, in particular in the Member State of their habitual residence, their place of work or the place of the alleged infringement. The right to complain applies without prejudice to any other administrative or judicial remedies.

Right to data portability

Affected individuals are entitled to have data that we process on the basis of their consent or in fulfilment of a contract, handed over in a standard, machine-readable format to themselves or to a third party. If and insofar as an affected individual requires the direct transfer of data to another person in charge, this will only be performed to the extent such transfer is technically feasible.

SSL and/or TLS encryption

We use SSL and/or TLS encryption for security reasons and to protect the transmission of sensitive content such as orders or queries sent to us as site operator. Visitors can recognise an encrypted connection by the modification of the address line of the browser from 'http://' to 'https://' and the lock symbol in browser line.

The data transmitted to us cannot be read by third parties if SSL- and/or TLS - encryption is enabled.

Information, blocking, deletion and correction

Visitors have the right to free information about their personal data stored, the origin and recipient of such data and the purpose of the data processing and, where applicable, the right to correct, block or delete such data. For further information on this topic and regarding personal data, visitors can contact us at any time at the address provided in the imprint.

Right to restrict the processing of data

In addition, visitors are entitled to request the restriction of the processing of their personal data in certain circumstances. For this purpose, visitors may contact us at any time at the address provided in the imprint. The right to restrict processing exists in the following cases:

  • If and insofar as the accuracy of personal information stored with us is denied by the individual affected, we usually need time to verify such allegation. In addition, the individual affected is entitled to request the restriction of the processing of his personal data for the duration of such verification.
  • If personal data is being/was illegally processed, the individual affected can request the limitation of data processing in place of the deletion.
  • If we no longer require such personal information, however the individual affected requires this data to exercise, defend or enforce legal claims, this individual shall be entitled to demand that his personal data be restricted rather than be deleted.
  • The interests of both parties must be taken into account, if an objection is filed pursuant to Art 21 para 1 German GDPR. As long as it is not clear whose interests prevail, the individual affected shall be entitled to request the restriction of the processing of his personal data for the duration of such verification.

If the individual has restricted the processing of his personal data, then only with his consent may such data - except for its storage - be processed or used for the assertion, exercise or defence of legal claims or used to protect the rights of another natural person or legal entity or for reasons of important public interest of the European Union or a Member State.

Objection to receiving promotional e-mails

We hereby expressly object to the use of contact data published in the context of the imprint obligation to send unsolicited advertising and information materials that are not expressly requested. The operator of these sites expressly reserves the right to take legal action in the event of unsolicited transmission of advertising information, for example in the form of spam e-mails.

3. The collection of data on our website

Cookies

The websites partly make use of so-called cookies. Cookies do not harm the visitor's device and do not contain viruses. Cookies are used to make our offer more user-friendly, effective and safer. Cookies are small text files that are stored on the visitor's device and stored by his browser.

Most cookies we use are so-called ‘Session cookies’. Session cookies will be automatically deleted after a visit; other cookies will remain on the visitor's device until being deleted. These cookies allow us to recognise the visitor's browser the next time he visits our website.

Visitors can adjust the settings of their browser in a way that they will be informed about the use of cookies and that cookies are only enabled for individual cases, or that cookies are only accepted for specific cases or be generally prohibited. Visitors can also activate the automatic deletion of cookies when closing the browser. The functionality of this site may be limited upon the deactivation of cookies.

Cookies that are required to carry out the electronic communication process or to provide certain functions requested by the visitor (e.g., shopping cart function) are processed and saved pursuant to Art 6 para 1 lit f German GDPR. The website operator has a legitimate interest in the storage of cookies for providing its services technical optimised and free of errors. If and insofar as other cookies (e.g., cookies for the analysis of a visitor’s surfing behaviour) are stored, they will be treated separately under the Data Protection and Privacy Statement at hand.

Server log files

The operator of this website automatically collects and stores data in so-called server log-files, which are automatically transmitted to us by the visitor’s browser. These include:

  • Browser type and Browser version
  • Operating system being used
  • Referrer URL
  • Host name of the accessing computer
  • Time of the server request
  • IP Address

This data will not be consolidated with other data sources.

This data is collected pursuant to and in compliance with Art 6 para 1 lit f German GDPR. The website operator has a legitimate interest in the technically error-free presentation and the optimisation of his website - for this purpose, the server log files must be recorded.

Contact form

If visitors send us inquiries via the contact form, their details from the inquiry form, including the contact details provided in the form, will be stored in order to process the request and in the case of any follow-up questions. We shall not share this information without such visitors prior consent.

The data entered in the contact form is exclusively processes with the prior consent of the respective visitor (Art 6 para 1 lit a German GDPR). Visitors are entitled to revoke this consent at any time by sending us an informal e-mail notification. The legitimacy of the data processed until the withdrawal of the approval remains unaffected.

The data entered in the contact form will remain with us until the visitor entering such data requests us to delete it, revokes his consent to the storage or the purpose for data storage no longer applies (e.g., after processing of the visitors request is concluded). Mandatory statutory provisions - especially retention periods - remain unaffected.

Registration on this website

Visitors can register on our website to use additional features. We only use the data entered for the purpose of using the respective offer or service for which a visitor has registered. The mandatory information requested during registration must be provided in full by the visitor. Otherwise, we will reject the registration.

We shall utilise the e-mail address specified during registration for sending notifications regarding important changes in the scope of an offer or required technical changes.

The processing of the data provided during the registration requires the prior consent of the respective visitor (Art 6 para 1 lit a German GDPR). Visitors are entitled to revoke their consent at any time by sending us an informal e-mail notification. The legitimacy of the already performed data processing remains unaffected by such revocation.

The data collected during registration will be stored by us as long as the respective visitor is registered on our website and will subsequently be deleted. Legal retention periods remain unaffected.

4. Analysis tools and advertising

Google Analytics

This website uses functions of the Google Analytics web analytics service. This service is provided by Google Inc., 1600 Amphitheatre Parkway Mountain View, CA 94043, USA.

Google Analytics uses so-called 'Cookies'. Cookies are text files that are stored on a user's computer and as such enable the analysis of a visitor's use of the website. The information gathered by cookies related to a visitor's use of this website is usually transferred to a Google server in the United States, where it is saved.

The storage of Google Analytics Cookies and the use of this analysis tool are legally based on Art 6 para 1 lit f German GDPR. The operator of this website has a legitimate interest in analysing the behaviour of visitors in order to optimise both its website and its advertising.

IP Anonymisation
We have activated the 'IP anonymisation' function on this website. Thus the IP address of a visitor within the member states of the European Union or other member states of the European Economic Area Agreement are truncated by Google prior to its transmission to the USA. Only in exceptional cases, will the full IP address be transmitted to a Google Server in the USA, where it is subsequently truncated. Google will use this information on behalf of the operator of this website to evaluate the use of the website by the visitors, to create reports on the activities on this web site and in order to provide additional services related to the use of this website and the use of the Internet to the operator of this web site. The IP address transmitted by the browser of a visitor in the context of Google Analytics will not be joined with other data of Google.

Browser Plugin
Visitors may prevent the storage of cookies on their device by adjusting the browser software settings; however, in this case we would like to make visitors aware that they may not be able to use all features of this website to its full extent. Furthermore, visitors can prevent that information regarding their use of this website (incl. their IP address), which is collected and created by a cookie, will be transmitted to and processed by Google, by downloading and installing the browser plugin available via the following link: https://tools.google.com/dlpage/gaoptout?hl=de.

Opposition to data collection
A visitor can prevent the collection of personal data by Google Analytics by clicking the link below. Subsequently an opt-out cookie is set, which prevents the collection of the visitor's data for future visits to this site: Deactivate Google Analytics.

For more information about the handling of visitor data by Google Analytics, please refer to the Google privacy statement: https://policies.google.com/privacy?hl=en

Order processing
We have concluded a contract with Google and fully comply with the strict provisions of the German data protection authorities when using Google Analytics.

Demographics when using Google Analytics
This website utilises the demographic features of Google Analytics. As a result, reports can be generated containing data on age, gender and interests of the website visitors. Such data is derived from interest-based advertising from Google and third-party website visitor data. Such data cannot be assigned to a specific person. Visitors can disable this feature at any time via the ad settings in their Google Account, or as specified in the 'Opposition to Data Collection' section generally prohibit the collection of personal data by Google Analytics.

5. Newsletter

Newsletter data

If a visitor wishes to subscribe to the Newsletter, we shall require a valid email address and information that enables us to verify that the subscriber is the owner of the email address or that the respective owner of the email address used for the subscription, agrees to receive the Newsletter. Further data will not be collected or only collected on a voluntary basis. Such data shall be exclusively deployed for the delivery of the requested information and will not be disclosed to third parties.

The processing of the data entered in the newsletter registration form requires the prior consent of the visitor (Art 6 para 1 lit a German GDPR). Visitors can revoke their consent to the storage and the use of the data and the e-mail address for the dispatch of the Newsletters at any time via the 'Unsubscribe' Link in the Newsletter. The legitimacy of the already performed data processing operations remains unaffected by such revocation.

We will store the personal data provided to subscribe to the newsletter until visitors unsubscribe from the newsletter and we will delete such data following cancellation of the newsletter. Data stored for other purposes on our systems shall remain unaffected hereby.

Newsletter2Go

This website deploys Newsletter2Go to send newsletters. Newsletter2Go GmbH, Nürnberger Straße 8, 10787 Berlin, Germany is the Provider.

Newsletter2Go is a service which can be deployed inter alia to organise and analyse the sending of newsletters. We store the personal data visitors provide to subscribe to the newsletter on the Newsletter2Go servers in Germany.

Visitors must unsubscribe from the newsletter to prevent personal data from being analysed by Newsletter2Go. We provide a corresponding link in every newsletter message for this very purpose. Moreover, visitors can unsubscribe from the newsletter directly on the website.

Data analysis via Newsletter2Go
We are able to analyse our newsletter campaigns by means of Newsletter2Go. We can for example determine whether a newsletter message was opened and if applicable, which links were clicked. In this way, we can inter alia determine, which links were clicked on the most.

We can also determine whether certain predefined actions were performed after opening/clicking (conversion rate). We can for example verify whether a purchase was made after having clicked on the newsletter.

Newsletter2Go also allows us to divide the newsletter recipients into different categories ('clusters'). For example, the newsletter recipients can be clustered according to age, gender or place of residence. In this way, the newsletters can be tailored to adapt better to the respective target groups.

The following link provides detailed information on the Newsletter2Go features:

Legal basis
The processing of data requires the prior consent of the visitor (Art 6 para 1 lit a German GDPR). Visitors are entitled to revoke this consent at any time The legitimacy of the already performed data processing operations remains unaffected by such revocation.

Storage period
We will store the personal data visitors provide to subscribe to the newsletter until they unsubscribe from the newsletter and will delete such data from our servers as well as from the Newsletter2Go servers following cancellation of the newsletter. Data stored for other purposes on our systems shall remain unaffected hereby.

For details, refer to the Newsletter2Go data protection regulations at:

Conclusion of a contract regarding order processing
We have concluded a contract with Newsletter2Go, in which Newsletter2Go is obliged to protect the data of our visitors and to refrain from disclosing such data to third parties. The aforementioned contract can be viewed at the following link:

6. Plugins and Tools

Google Web Fonts

In order to provide a uniform representation of fonts, this site utilises so-called 'Web Fonts' provided by Google. The Google fonts are installed locally. No connection will be established with Google servers for this purpose.

Google Maps

This site utilises the map services of Google Maps via an API. This service is provided by Google Inc., 1600 Amphitheatre Parkway Mountain View, CA 94043, USA.

To use the features of Google Maps, it is necessary to save the visitor's IP address. Such information is usually transferred to a Google Server in the United States, where it is stored. The provider of this website has no influence on such data transfer.

Google Maps is utilised to attractively present our online offers and to make it easy to find the branch locations specified on the website. This constitutes a legitimate interest within the meaning of Art 6 para 1 lit f German GDPR.

For more information about the handling of user data, please refer to the Google privacy statement: