Website analysis

Our privacy policy

Thank you for your interest in our website and the processing of data associated with it. Our privacy policy below shall, among other things, provide you with information
on which personal user data is processed during your visit to our website, the legal basis upon which this data is processed and the rights you are entitled to as a data subject.
This information is provided in recognition of our transparency obligations pursuant to Art. 12 and 13 of the General Data Protection Regulation (GDPR).

Responsibility for this website within the meaning of the GDPR, the German Federal Data Protection Act (BDSG n.s.) and other data protection regulations lies with:

CHOCOTECH GmbH
Dornbergsweg 32
38855 Wernigerode

Email: info@chocotech.de
Telephone: +49 3943 5506-0

Further information about our company and contact options is contained in our legal notice.

I Data Protection Officer

We have appointed a Data Protection Officer for our company. You can contact our DPF through the following details:

Mrs. Antonia Schreiber
DATA 4.0 Gesellschaft für 
Datenschutz und Datensicherheit mbH
Dornbergsweg 2
38855 Wernigerode

E-Mail: a.schreiber@data40.de
Telefon: +49 3943 5099490

II Provision of our website and log files

i Description and scope of data processing

Our system (web server) automatically collects the following information from your system each time you visit our website:

- Access date and time
- Browser type and version
- Operating system of your device
- Your internet service provider
-
 Your IP address
- Website from which you accessed our website
- Files or information accessed

ii Legal basis for data processing

The legal basis for temporary storage of the aforementioned data and its logging in so-called log files is our legitimate interest as a website operator pursuant to Art. 6 (1) lit. (f) GDPR.

iii Purpose of data processing

Temporary storage of your IP address by our system is necessary to implement delivery of the website to your computer. Your IP address must be stored for this purpose
for the duration of your website visit.

Storage of data in log files serves to ensure the functionality of our website. It also helps us to optimise the website and ensure the security of our information technology systems
(e.g. by detecting an attack). An evaluation of this data for marketing purposes does not take place.

iv Duration of storage

The abovementioned data shall be deleted as soon as it is no longer required for the stated purpose. In the case of processing that serves the provision of the website, this deletion
occurs at the end of your visit to the website.

Data stored in log files shall be deleted after 14 days at the latest. Storage above and beyond this can occur. In this event, your IP address shall be deleted or anonymised
so that no further personal reference to your system is possible.

III Cookies

i Description and scope of data processing

We use cookies on our website. Cookies are text files that are stored on your device. A differentiation should be made here between cookies
that are technically necessary and cookies from possible third-party providers.

ii Legal basis for data processing

The legal basis for the use of technically necessary cookies is our legitimate interest as a website operator pursuant to Art. 6 (1) lit. (f) GDPR.

The legal basis for setting third-party cookies which are not technically necessary, but serve our tracking and marketing interests, is derived from your consent
granted pursuant to Art. 6 (1) lit. (a) GDPR.

iii Purpose of data processing

The use of cookies for marketing purposes allows us to improve the user experience of our website constantly and generate individual offers.

iv Duration of storage

You can delete stored cookies at any time in your browser settings. In addition, you can configure individual preferences in your browser by generally objecting to the setting of cookies
by websites or third-party providers. We wish to point out that, by excluding cookies, you may not be able to use the full functionality of our website. 

The following overview provides you with information on the type, purpose and storage duration of the cookies used on our website:

Name of cookie

Type of cookie (session, permanent, third-party cookie)

Purpose

Storage duration

PHPSESSID

Session

Retains the status of the user for all website inquiries

After termination of browser session 

COOKIEBAR_1

Permanent 

Confirmation of cookie indication

12 months 

__cfduid

Third-party cookie

Anonymisation of IP addresses of website visitors

12 months

IV. Contact via email or contact form

i Description and scope of data processing

You can contact us through the following channels:

- Contact form
- Email address provided in legal notice
- Via electronic contact details of our employees

We shall process your personal data submitted with the inquiry if you contact us through these channels. Details of the data concerned can be discerned from the input fields on our form. In addition, all other data which you have voluntarily provided us with as part of your inquiry shall be transmitted.

ii Legal basis for data processing

The legal basis for processing of the data transmitted in the course of your inquiry is our legitimate interest as a website operator pursuant to Art. 6 (1) lit. (f) GDPR.

If your inquiry aims to conclude a contract, the additional legal basis for this data processing is the initiation or performance of a contract pursuant to Art. 6 (1) lit. (b) GDPR.

iii Purpose of data processing

Processing of the aforementioned personal data is realised solely for the purpose of processing your contact.

iv Duration of storage

The abovementioned data shall be deleted as soon as it is no longer required for the stated purpose. This is the case for the personal data that you have sent us by email or our contact form if the respective conversation with you is terminated. The conversation is regarded as terminated when it can be inferred from the circumstances that the matter in question has been finally clarified.

v Right to object

You have the right to object to this data processing at any time. You can send an objection to the following email address: a.schreiber@data40.de

All personal data stored during the course of contacting shall be deleted in this case.

V. Integration of OpenStreetMap

i Description and scope of data processing

We integrate maps from the OpenStreetMap (https://www.openstreetmap.org) service on our website. This service is provided by OpenStreetMap Foundation, St John’s Innovation Centre, Cowley Road, Cambridge, CB4 0WS, United Kingdom. OpenStreetMap is provided on the basis of the Open Database License (ODbL) published by Open Data Commons. The IP address, information on the use of this website and the user's location data are forwarded to OpenStreetMap for correct presentation of map material and short-term storage of the settings made. 

ii Legal basis for data processing

The legal basis for integration of the map material of OpenStreetMap and, consequently, for the needs-based design of our website is our legitimate interest as a website operator pursuant to Art. 6 (1) lit. (f) GDPR.

iii. Further information on data processing

Further data processing is the responsibility of OpenStreetMap. For further information concerning data processing by OpenStreetMap, please refer to the privacy policy https://wiki.openstreetmap.org/wiki/Privacy_Policy .

VI. Publication of job vacancy advertisements / Online application

i Description and scope of data processing

If necessary, we publish job vacancy advertisements on our website which you can apply for by post or electronically. In the case of electronic transmission of your applicant data, we collect and store all your personal data communicated to us.

ii Legal basis for data processing

We process your applicant data pursuant to Art. 6 (1) lit. (f) GDPR from our legitimate interest to fill vacant jobs in our company on the basis of task-orientation and qualification.

If employment results from your application, the processing of your applicant data pursuant to Art. 6 (1) lit. (b) GDPR is legally recognised as the implementation of pre-contractual measures.

iii Purpose of data processing

The assistance of your applicant data enables us to make a candidate selection for job vacancies.

iv Duration of storage

Your data shall be stored by us until the application process is completed. If no employment results from your application, we shall delete or destroy your data following the issuing of a rejection, taking into account legally stipulated objection periods.

If you have granted us your consent to the storage of data above and beyond this, the storage period defined therein shall apply.

v Right to object

You can revoke any consent granted to us for the further storage of your applicant data at any time without stating reasons. Please contact us by post or send your objection to the following address: a.schreiber@data40.de

Your rights as a data subject

If personal data from you, as a user, is processed, you shall be deemed to be the data subject pursuant to the GDPR.  Data subjects have the following rights with regard to the controller:

- Right to information (Article 15 GDPR)
- Right to rectification or erasure of personal data (Articles 16, 17 GDPR)
- Right to restriction of processing (Article 18 GDPR)
- Right to be notified with regard to the rectification or erasure of your personal data
  or restriction of processing (Article 19 GDPR)
- Right to data portability (Article 20 GDPR)
- Right to object (Art. 21 GDPR)
- Right of revocation of consent declarations issued. The legality of data processing realised until revocation
  remains unaffected on the basis of the consent which is still currently valid
  (Article 7 (3) GDPR).
- Right to complain to the supervisory authority (Article 77 GDPR)

External links

Our website may contain links to websites of third parties subject to data protection law. If you access these links and allow third parties to process your personal data (e.g. your IP address), we have no control over this processing and cannot be held responsible for it.

Security

The protection your privacy is a serious concern for us. We therefore take appropriate technical and organisational measures to protect your personal data against misuse, alteration and loss.

Your data is protected by an SSL or TLS certificate during transmission to our website. The fact that such a certificate is used can be recognised by the web address as https:// or a closed lock symbol next to the web address.

Despite carefully selected security measures, we wish to point out that 100% protection cannot be guaranteed, especially when transmitting via email or our web forms. For the transmission of confidential information, we ask you to please send your communication by post to the address provided in our legal notice.

Timeliness of our privacy policy

Our website is subject to the technological advances associated with the operation and use of websites. Accordingly, we reserve the right to modify our privacy policy to reflect changes in our security and data protection measures and possible extended data processing requirements, and to provide them here for you in the currently valid version.

Objection to advertising mail

We reserve the right to take legal action against the sender in the event of unreasonable harassment through use of the email address specified in the legal notice (e.g. spam emails).

Updated: November 2019

This website uses cookies. By continuing to use this website, you agree to our Privacy Policy, Terms of Use, and Disclaimer. Read more »