Privacy Policy
Your privacy is important to us. This policy outlines how pyck collects, uses, and
protects your personal information when you use our services.
Preamble
The protection of information relating to you is important to us. Personal data refers to all data that contains information about the personal or factual circumstances of a specific or identifiable person. This includes, for example, your name, email address, home address, gender, telephone number, or even your date of birth and age (so-called “personal data“).
We therefore operate our websites and the services we offer (“Offers“) in accordance with applicable data protection laws, in particular the EU General Data Protection Regulation (“GDPR“) and the Federal Data Protection Act (“BDSG“).
Below you will find an explanation of how we handle your personal data in this context.
I. Who is responsible?
Responsible for our offers is:
pyck GmbH
Burgstr. 25
74523 Schwäbisch Hall
Email: [email protected]
You can find further information in our imprint here.
II. What do we do with your personal data?
1. When you use one of our websites or contact us
Providing our websites requires the processing of personal data, such as your IP address. This processing is necessary to access the content presented on a website (including its functions) and due to IT security measures.
You also have the option of contacting us. For this purpose, we process the personal data you provide when communicating with us.
Legal basis
The processing of your personal data for the provision of our websites and for communication is based on our overriding legitimate interest. In order to provide one of our websites, it is technically necessary for us to process certain personal data (e.g., your IP address). For your communication with us, it is necessary for us to handle your respective personal data.
Balancing of interests
As part of the necessary balancing of interests, we have weighed your interest in confidentiality against our interest in providing our website and contacting you. Your interest in confidentiality takes precedence in each case. Otherwise, we would not be able to provide you with our website or respond to your contact request.
Recipient categories
We use service providers to provide our websites. We transmit personal data to these service providers for this purpose. These service providers are contractually obligated by us to exercise the same level of care in processing personal data as we do ourselves. Some service providers we use also process your personal data outside the EU/EEA (see the section “Data transfer to third countries“).
2. When you use our services
You can register to use our services on this website or by contacting us. For this purpose, we collect the personal data you provide to us. To use our software, you must register to create a user account.
Legal basis
We process your personal data to initiate, execute and process the corresponding contract.
Recipient categories
We use service providers to provide our websites. We transmit personal data to these service providers for this purpose. These service providers are contractually obligated by us to exercise the same level of care in processing personal data as we do ourselves. Some service providers we use also process your personal data outside the EU/EEA (see the section “Data transfer to third countries“).
3. If you conclude a contract
You can enter into contracts with us (e.g., via our website). For this purpose, we collect the personal data you enter in the contract form. We may also conduct a credit check.
Legal basis
We process your personal data to initiate, execute and process the corresponding contract.
Recipient categories
We may transmit personal data to other companies and service providers to perform the contract.
If you unlawfully refuse to pay, we will transfer your personal data to debt collection agencies.
Mandatory information
The fields marked with * in the respective contract form are mandatory. This personal data is required to conclude a contract. If you do not provide this personal data, we cannot conclude the respective contract.
Providing your email address and/or telephone number as part of your consent to receive advertising is neither legally nor contractually required. If you do not give us your consent to receive advertising, you will not receive information about offers, products, and services unless permitted by law.
4. If you subscribe to our newsletter
You can register for our newsletter(s) by providing your consent. For this purpose, we collect the personal data you provide to us.
Online registration for our newsletter is done using the so-called double opt-in process. This means that after registration, you will receive an email asking you to confirm your registration. This confirmation is necessary to prevent anyone from registering with a false email address.
To subscribe to the newsletter, simply provide your email address. Optionally, we ask you to provide your first and last name. This information is used solely to personalize the newsletter.
Legal basis
Your consent is the legal basis for our data processing. You can revoke your consent at any time with future effect. This will also revoke your consent to receive the newsletter and to statistical analysis.
Unsubscribe
You will find a link to unsubscribe from the newsletter at the end of each newsletter.
5. If you give us your consent to receive advertising
If you give us your consent to receive advertising, we will use your personal data for our own advertising purposes.
Your consent forms the legal basis for our handling of your personal data. You can revoke your consent at any time with future effect.
6. If you have not objected to the use of your email address for our own advertising purposes
If we receive your email address in the context of providing our services, we will process it to send you advertising for our own similar goods or services, unless you have objected to this use.
You have the option to object to this use at any time without incurring any costs other than the transmission costs according to the basic rates. Please send your objection to the contact details listed above. You can also use the opt-out link in one of our promotional emails.
Legal basis
The legal basis is our legitimate interest in connection with a statutory provision (Section 7 (3) UWG).
Balancing of interests
As part of the necessary balancing of interests, we have weighed your interest in confidentiality against our interest in direct advertising in accordance with a statutory provision (Section 7 (3) of the German Unfair Competition Act). Your interest in confidentiality is subordinate. Otherwise, we would not be able to carry out such advertising measures towards you, in accordance with a statutory provision (Section 7 (3) of the German Unfair Competition Act).
Recipient categories
We use service providers for our email marketing. We transmit personal data to these service providers for this purpose. These service providers are contractually obligated to exercise the same level of care in handling personal data as we do.
7. When you apply to us
You can apply to us, for example, via our application portal, by email, or by mail. For this purpose, we process the personal data you provide to us as part of your application.
We process your personal data to initiate, execute and process the corresponding contract.
8. If we sell our company and/or a service
We reserve the right to sell our company and/or a service, in whole or in part. In doing so, we may transfer your personal data to a third party in the future, subject to compliance with the applicable data protection regulations. We will notify you of this with at least 30 days’ notice, including an explanation of the consequences for your continued use of our services.
Legal basis
The processing of your personal data in the context of such a sale is based on our overriding legitimate interest. In order to process a corporate transaction, it may be necessary for us to transfer your personal data to a third party.
Balancing of interests
As part of the necessary balancing of interests, we have weighed your interest in confidentiality against our interest in a corresponding sale. Your interest in confidentiality is prioritized in each case. We would otherwise not be able to complete such a sale.
9. If we anonymize your personal data
We anonymize your personal data in order to evaluate it for statistical purposes.
Legal basis
The processing of your personal data within the framework of such anonymization is based on our overriding legitimate interest.
Balancing of interests
As part of the necessary balancing of interests, we have weighed your interest in confidentiality against our interest in appropriate anonymization. Your interest in confidentiality is secondary. We would not be able to achieve such anonymization otherwise. The GDPR and the Federal Data Protection Act (BDSG) do not apply to anonymous data.
Recipient categories
We use service providers for the anonymization process. We transmit personal data to these service providers for this purpose. These service providers are contractually obligated to exercise the same level of care in handling personal data as we do.
10. If you allow the use of cookies/identifiers and analysis tools in your browser
We use cookies/identifiers and analysis tools to provide our website. Some of the providers we use also process your personal data outside the EU/EEA (see the section “Data transfer to third countries“).
Generally
We use so-called “CookiesCookies are data records that are stored by a web server on the user’s end device (e.g., computer, smartphone, tablet). A cookie is a text file that is stored on your end device and enables an analysis of your respective use of our service.
We use such cookies to store certain information about your use of our service. When you visit our website again using the same device, this information is either transferred to our website (“First Party Cookie“) or to another website to which the cookie belongs (“Third Party Cookie“), returned.
Various information can be used as identifiers (e.g. your browser version).
We use cookies/identifiers to recognize you as a user when you use our service and to store technical data for the correct functioning of our service.
If you do not wish to use cookies, you can block them in your browser. Disabling cookies in your browser does not generally restrict your use of our service. However, you may no longer be able to use certain areas/functions of our service.
You can also prevent the collection and processing of your personal data by preventing the storage of third-party cookies on your device, using the “Do Not Track” function of a supporting browser, deactivating the execution of script code in your browser or using a script blocker such as NoScript (https://noscript.net/) or Ghosts (https://www.ghostery.com) in your browser.
Legal basis
- Legal basis for the use oftechnically necessary cookies/identifiersis our legitimate interest in connection with a legal provision (Section 25 (2) No. 2 TDDDG, Article 6 (1) (f) GDPR). Storing information on your terminal equipment or accessing information already stored on your terminal equipment is absolutely necessary in order for us to be able to provide the telemedia service you have expressly requested as a user.
- Otherwise, the legal basis is generally your consent unless a specific legal basis is stated below (Section 25 (1) TDDDG, Article 6 (1) (a) GDPR). You can revoke your consent at any time, e.g., by deleting cookies set via your device’s browser settings. Please note that, for technical reasons, this procedure only applies to the specific device used.
Use of tracking cookies for advertising purposes
This website works with external performance advertising networks to place and optimize its own advertisements.
As part of the tracking services, cookies are stored on the end devices of users who visit or use websites or other online offerings of its customers to document transactions. These cookies serve solely to correctly attribute the success of an advertisement and the corresponding billing within the advertising network. Personal data is not collected, processed, or used in this process. A cookie merely stores information about when a specific advertisement was clicked from a device. The external partners used are listed below, each with a link to their privacy information.
Use of Google Analytics
We use Google Analytics, a web analysis service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google“).
Google Analytics uses “cookies,” text files placed on your device, to help the website analyze how users use the site. The information generated by the cookie about your use of the website is usually transferred to a Google server in the United States and stored there. However, if IP anonymization is activated, Google will shorten your IP address within member states of the European Union or other parties to the Agreement on the European Economic Area.
Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. Google will use this information on our behalf to evaluate your use of the website, to compile reports on website activity, and to provide us with other services related to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
You can prevent cookies from being saved by selecting the appropriate settings in your browser; however, please note that if you do this, you may not be able to use the full functionality of our website. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by downloading and installing the browser plug-in available under the following link: http://tools.google.com/dlpage/gaoptout?hl=de
We continue to use Google Analytics to evaluate data from the respective DoubleClick cookies and also from Google Ads for statistical purposes. If you do not wish this, you can opt out via the Ads Preferences Manager http://www.google.com/settings/ads/onweb/?hl=de.
You can find an overview of the data Google collects here: https://privacy.google.com/businesses/adsservices/
Google is certified under the EU-U.S. Data Privacy Framework: https://dataprivacyframework.gov/list
Use of Google Tag Manager
We use the Google Tag Manager (https://www.google.com/intl/de/tagmanager/) der Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA („Google“).
With Google Tag Manager, tags from Google and third-party services can be managed and embedded in a bundle on an online presence. Tags are small code elements on an online presence that are used, among other things, to measure visitor numbers and behavior, record the impact of online advertising and social channels, implement remarketing and target audience targeting, and test and optimize online presences. When a user visits the online presence, the current tag configuration is sent to the user’s browser. It contains instructions on which tags should be triggered. Google Tag Manager triggers other tags, which in turn may collect data. Information on this can be found in the sections on the use of the corresponding services in this privacy policy. Google Tag Manager does not access this data.
For more information about Google Tag Manager, see https://www.google.com/intl/de/tagmanager/faq.html and in Google’s privacy policy at https://policies.google.com/privacy?hl=de.
You can prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by downloading and installing the browser plug-in available under the following link: https://tools.google.com/dlpage/gaoptout?hl=de
You can deactivate the use of your personal data by Google using the following link: https://adssettings.google.de
Further information on objection and removal options against Google can be found at: https://policies.google.com/privacy?gl=DE&hl=de
Google is certified under the EU-U.S. Data Privacy Framework: https://dataprivacyframework.gov/list
III. How long do we store your personal data?
We will delete your personal data if the respective purpose for storage no longer applies and there is no legal requirement to retain it (e.g., a retention obligation under the Tax Code and/or the Commercial Code). If, for example, you have given your consent, you can revoke it at any time with future effect.
If deletion is not possible in individual cases, the respective processing will be restricted.
Finally, the storage period also depends on the statutory limitation periods.
IV. What rights do you have as a data subject?
To exercise your rights and to withdraw your consent, please contact us using the contact details above.
- You have the right to request information about all personal data that we process about you at any time.
- If your personal data is incorrect or incomplete, you have the right to have it corrected and completed.
- You can request the deletion of your personal data at any time, unless we are legally obliged or authorized to further process your data.
- If the legal requirements are met, you can request that the processing of your personal data be restricted.
- You have the right to object to the processing of your data if it is carried out for direct marketing or profiling purposes. If the processing is based on a balance of interests, you can object to the processing by stating reasons related to your particular situation.
- If the data processing is based on your consent or within the framework of a contract, you have the right to transfer the data you have provided to another controller, provided that this does not affect the rights and freedoms of other persons.
- If we process your data based on a declaration of consent, you have the right to revoke this consent at any time with future effect. The processing carried out prior to the revocation remains unaffected by the revocation.
- You also have the right to lodge a complaint with a data protection supervisory authority at any time if you believe that data processing has been carried out in violation of applicable law.
We will notify all recipients to whom we have disclosed personal data of any rectification or erasure of your personal data, or restriction of processing, unless doing so proves impossible or involves disproportionate effort. We will inform you of the recipients applicable to you upon your request.
V. In what context do we create automatic profiles?
We generally do not create automatic profiles.
VI. Data transfer to third countries
To ensure the protection of personal data, our international data transfers are based on applicable legal requirements, including recognized mechanisms such as the European Union’s standard contractual clauses or equivalent arrangements.
In some cases, personal data is transferred to recipients in third countries (see the corresponding notice in our privacy policy). Third countries are countries outside the EU and outside the EEA. These third countries include, for example, the USA.
The level of data protection in the USA is not comparable to that in Europe. In particular, it is possible that government agencies may access personal data without our knowledge. Legal action may not be successful.
The legal basis for such data transfer is generally consent, the respective performance of a contract, an adequacy decision of the EU Commission or the use of EU standard data protection clauses. The template for EU standard data protection clauses can here be retrieved
We may also apply other legal bases pursuant to Articles 44 et seq. of the GDPR for such data transfers to recipients in third countries outside the EU and the EEA, e.g., the EU-U.S. Data Privacy Framework.
Where necessary, we may change the legal basis for future international data transfers if this is necessary to comply with changed legal, regulatory or operational requirements.
Any changes will be made in accordance with applicable data protection laws and, where necessary, communicated transparently.
VII. Data security
We take appropriate technical and organizational security measures to protect the personal data we process against accidental or intentional manipulation, loss, destruction, or unauthorized access. The storage and disclosure of personal data are subject to strict security procedures.
In doing so, we take into account in particular the state of the art, implementation costs, type, scope, circumstances and purposes of processing as well as the possible data protection risks for data subjects.
