Privacy Policy
1. Definitions
This policy uses definitions from the GDPR. The following terms are explained:
Personal data: "any information relating to an identified or identifiable natural person"
Data subject: Any person whose data is processed
Processing: "any operation performed on data, whether or not by automated means"
Restriction of processing: Marking of data to limit its future use
Profiling: Automated data analysis to evaluate personal aspects
Pseudonymisation: Processing of data without direct attribution to a person
Controller: Person or organisation that decides on the purposes of processing
Processor: Processes data on behalf of the controller
Recipient: Organisation to which data is disclosed
Third party: External party other than the data subject, the controller and the processor
Consent: "freely given, specific, informed and unambiguous indication of the data subject's wishes"
2. Controller
IntegraTools GmbH
Industriezeile 35
4020 Linz
Austria
Phone: +43 660 892 6366
Email: datenschutz@integratools.at
Website: www.integratools.at
3. Data Protection Officer
Data Protection Officer, IntegraTools GmbH
Industriezeile 35
4020 Linz
Austria
Phone: +43 660 892 6366
Email: datenschutzbeauftragter@integratools.at
Website: www.integratools.at
Data subjects may contact the Data Protection Officer at any time.
4. Cookies
This site uses cookies – text files stored in your browser. Cookies enable:
- More user-friendly services
- Optimisation of content and offers
- Recognition of visitors
- Automatic filling-in of login details
- Storage of shopping cart contents
Visitors can prevent or delete cookies via their browser settings. Disabling them may limit functionality.
Technically necessary cookies (e.g. to store your cookie choice) are always set. Google Analytics cookies, on the other hand, are only set once you have actively consented in the cookie banner shown on your first visit. You can change your decision at any time via the "Cookie settings" link in the footer (see section 9).
5. General Data and Information
This site collects on every visit:
- Browser type and version
- Operating system
- Referrer
- Pages visited
- Date and time of access
- IP address
- Internet service provider
- Security-relevant data
This data is not used to identify the visitor. It is needed for:
- Correct delivery of content
- Optimisation
- Ensuring functionality
- Providing information to law enforcement in the event of cyberattacks
Server log files are stored separately from personal data.
6. Hosting with Netlify
This website is hosted and delivered by Netlify, Inc. The server log files mentioned in section 5, as well as data submitted via the contact form, are technically processed through Netlify's infrastructure.
Provider: Netlify, Inc., 101 2nd Street, San Francisco, CA 94105, USA
Function:
- Provision of the website infrastructure, content delivery network, and SSL encryption
- Technical receipt and forwarding of data submitted via the contact form (Netlify Forms)
Legal basis & data transfer:
- Legitimate interest in a stable, secure and performant provision of the website, Art. 6 (1) lit. f GDPR
- Netlify acts as a processor under the Netlify Data Processing Addendum (part of the Netlify Self-Serve Subscription Agreement for our account)
- Data is transferred to the USA on the basis of the EU Standard Contractual Clauses (Art. 46 GDPR)
Further information: netlify.com/privacy
7. Contact Form
You can send us an inquiry via the contact form on this website.
Data collected: Name, email address, optionally a phone number, subject and message text – i.e. exactly what you enter into the form yourself.
Purpose: Processing of your inquiry by a member of the IntegraTools GmbH team.
Legal basis: Art. 6 (1) lit. b GDPR (e.g. for product inquiries) or Art. 6 (1) lit. f GDPR (legitimate interest in responding to other inquiries).
Retention period: We keep your inquiry as part of our usual email correspondence for as long as this is useful for processing it, for any follow-up questions, and to safeguard legitimate interests. Individual inquiries are not automatically and immediately deleted. However, we will delete your data at any time on request (see "Rights of the data subject", section 8).
Forwarding: Transmission technically runs through Netlify (see section 6). Data is not passed on to any other third parties.
8. Rights of the Data Subject
8.1 Right to confirmation
Data subjects may request confirmation as to whether their data is being processed.
8.2 Right of access
Right to free information about stored data and copies. The information must include:
- Purposes of processing
- Categories of data processed
- Recipients or categories of recipients
- Planned retention period or criteria
- Rights to rectification, erasure, restriction
- Right to lodge a complaint with a supervisory authority
- Origin of the data (if not collected from the data subject)
- Information on automated decision-making
- Information on transfers to third countries
Competent supervisory authority: Austrian Data Protection Authority, Barichgasse 40–42, 1030 Vienna, Austria, www.dsb.gv.at
8.3 Right to rectification
Data subjects may request immediate correction of inaccurate data and completion of incomplete data.
8.4 Right to erasure ("right to be forgotten")
Data subjects may request erasure where:
- Data is no longer necessary for the purposes for which it was collected
- Consent is withdrawn and there is no other legal basis
- An objection is raised to processing and there are no overriding grounds
- Data was processed unlawfully
- Erasure is legally required
- Data was collected in relation to information society services offered to children
If data has been made public, IntegraTools GmbH takes reasonable measures to inform other controllers.
8.5 Right to restriction of processing
Data subjects may request restriction where:
- The accuracy of the data is contested
- Processing is unlawful, but erasure is refused
- Data is no longer needed, but is required for legal claims
- An objection has been lodged (pending review)
8.6 Right to data portability
Data subjects have the right to:
- Receive their data in a structured, commonly used, machine-readable format
- Transfer it to another controller without hindrance
- Have it transmitted directly between controllers (where technically feasible)
This applies where processing is based on consent or a contract and is carried out by automated means.
8.7 Right to object
Data subjects may object to processing based on:
- Legitimate interests
- Direct marketing (in which case processing for that purpose ceases)
- Scientific, historical or statistical purposes
Following an objection, IntegraTools GmbH no longer processes the data unless compelling legitimate grounds override this.
8.8 Automated decision-making
Data subjects have the right not to be subject to a decision based solely on automated processing that produces legal effects or similarly significantly affects them, except where:
- It is necessary for entering into or performing a contract
- It is permitted by law with appropriate safeguards
- It is based on explicit consent
For automated decisions, IntegraTools GmbH must take measures to safeguard rights and freedoms, including the right to obtain human intervention.
8.9 Right to withdraw consent
Data subjects may withdraw their consent at any time.
9. Google Analytics
IntegraTools GmbH uses Google Analytics 4 (GA4) on this website to measure reach – but only once you have actively consented in the cookie banner.
Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (parent company: Google LLC, USA)
Function:
- Web analytics service for the statistical evaluation of visitor numbers and behaviour
- Records, among other things, pages visited, time spent, referrer, device type
- Used exclusively to optimise the website's content, not for advertising
Consent instead of automatic loading:
- Google Analytics is only loaded once you have selected "Accept" in the cookie banner
- Without consent, no data whatsoever is transmitted to Google
- You can revoke or change your decision at any time via "Cookie settings" in the footer
- The legal basis is your consent, Art. 6 (1) lit. a GDPR
Data transfer & storage:
- Once you consent, a cookie is set and your usage behaviour is recorded in pseudonymised form
- GA4 no longer stores complete IP addresses by design
- Data is transferred to the USA on the basis of the EU Standard Contractual Clauses (Art. 46 GDPR)
- User and event data is automatically deleted by Google after 14 months
Additional objection:
- Even if you have consented, you can additionally prevent tracking by Google Analytics via a browser add-on: tools.google.com/dlpage/gaoptout
- The add-on must be reinstalled if the system is reinstalled
Further information:
policies.google.com/privacy
10. YouTube Integration
IntegraTools GmbH embeds YouTube videos on individual pages (e.g. in video guides).
Provider: YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA (a subsidiary of Google LLC)
Enhanced privacy mode:
- Videos are embedded in "privacy-enhanced mode" (youtube-nocookie.com)
- YouTube therefore only sets cookies once a video is actively started
- No cookies are set on a mere page visit without starting the video
Once a video is started:
- A connection is established to YouTube/Google servers
- YouTube learns which video was accessed on which page
- If the data subject is logged into YouTube, this can be linked to their account
Privacy: YouTube's privacy policy: policies.google.com/privacy
11. Legal Basis for Processing
Processing is based on various legal bases under Article 6 GDPR:
- Art. 6 (1) lit. a GDPR: Consent for a specific processing purpose
- Art. 6 (1) lit. b GDPR: Performance of a contract (goods, services, pre-contractual measures)
- Art. 6 (1) lit. c GDPR: Compliance with legal obligations (e.g. tax-related)
- Art. 6 (1) lit. d GDPR: Protection of vital interests (e.g. emergency data)
- Art. 6 (1) lit. f GDPR: Legitimate interests of the company or a third party, unless overridden
12. Legitimate Interests
Where processing is based on Article 6 (1) lit. f GDPR, our legitimate interests are in particular the secure, stable and performant provision of this website (section 6) and the processing of inquiries received via the contact form or by other means (section 7).
13. Retention Period
Personal data is stored for as long as the applicable statutory retention period requires. After this period expires, the data is routinely deleted, unless it is still required for the performance or initiation of a contract.
14. Statutory or Contractual Requirements to Provide Data
The provision of personal data may be:
- Legally required (e.g. tax regulations)
- Contractually required (e.g. details of the contracting party)
- Required in order to enter into a contract
Failure to provide the data may mean that the contract cannot be concluded.
Data subjects should contact a member of staff before providing personal data, who will explain in each individual case:
- Whether provision is legally or contractually required
- Any obligations to provide the data
- The consequences of not providing it
15. Automated Decision-Making
As a responsible company, IntegraTools GmbH does not use automated decision-making or profiling.
This privacy policy was created using the privacy policy generator of DGD Deutsche Gesellschaft für Datenschutz GmbH in cooperation with the data protection lawyers of WILDE BEUGER SOLMECKE | Rechtsanwälte.
IntegraTools GmbH
Industriezeile 35
4020 Linz
Austria
Phone: +43 660 892 6366
Website: www.integratools.at
Email: office@integratools.at
We are delighted that you are interested in our company. Data protection is of particularly high importance to the management of IntegraTools GmbH. It is generally possible to use the IntegraTools GmbH website without providing any personal data. However, if a data subject wishes to use special services offered by our company via our website, the processing of personal data may become necessary. Where the processing of personal data is necessary and there is no statutory basis for such processing, we generally obtain the consent of the data subject.
The processing of personal data, such as the name, address, e-mail address or telephone number of a data subject, is always carried out in accordance with the General Data Protection Regulation and in line with the country-specific data protection provisions applicable to IntegraTools GmbH. By means of this privacy policy, our company wishes to inform the public about the nature, scope and purpose of the personal data we collect, use and process. Furthermore, data subjects are informed by means of this privacy policy of the rights to which they are entitled.
As the controller, IntegraTools GmbH has implemented numerous technical and organisational measures to ensure the most complete protection possible of personal data processed via this website. Nevertheless, internet-based data transmissions may in principle have security gaps, so that absolute protection cannot be guaranteed. For this reason, every data subject is free to transmit personal data to us by alternative means, for example by telephone.
1. Definitions
The privacy policy of IntegraTools GmbH is based on the terms used by the European legislator when adopting the General Data Protection Regulation (GDPR). Our privacy policy should be easy to read and understand for the general public as well as for our customers and business partners. To ensure this, we would like to explain the terminology used in advance.
In this privacy policy, we use, among others, the following terms:
1.1. personal data
Personal data means any information relating to an identified or identifiable natural person ("data subject"). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
1.2. data subject
Data subject means any identified or identifiable natural person whose personal data is processed by the controller.
1.3. Processing
Processing means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
1.4. Restriction of processing
Restriction of processing is the marking of stored personal data with the aim of limiting its processing in the future.
1.5. Profiling
Profiling means any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects concerning that natural person's performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements.
1.6. Pseudonymisation
Pseudonymisation means the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures to ensure that the personal data are not attributed to an identified or identifiable natural person.
1.7. Controller or controller responsible for the processing
Controller or controller responsible for the processing means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data. Where the purposes and means of such processing are determined by Union or Member State law, the controller, or the specific criteria for its nomination, may be provided for by Union or Member State law.
1.8. Processor
Processor means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.
1.9. Recipient
Recipient means a natural or legal person, public authority, agency or another body to which the personal data are disclosed, whether a third party or not. However, public authorities which may receive personal data in the framework of a particular inquiry in accordance with Union or Member State law are not regarded as recipients.
1.10. Third party
Third party means a natural or legal person, public authority, agency or body other than the data subject, the controller, the processor, and persons who, under the direct authority of the controller or processor, are authorised to process personal data.
1.11. Consent
Consent means any freely given, specific, informed and unambiguous indication of the data subject's wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.
2. Name and address of the controller
Controller for the purposes of the General Data Protection Regulation, other data protection laws applicable in Member States of the European Union, and other provisions related to data protection law is:
IntegraTools GmbH
Industriezeile 35
4020 Linz
Austria
Phone: +43 660 892 6366
Email: datenschutz@integratools.at
Website: www.integratools.at
3. Contact details of the Data Protection Officer
The Data Protection Officer of the controller can be contacted as follows:
Data Protection Officer, IntegraTools GmbH
IntegraTools GmbH
Industriezeile 35
4020 Linz
Austria
Phone: +43 660 892 6366
Email: datenschutzbeauftragter@integratools.at
Website: www.integratools.at
Any data subject may contact our Data Protection Officer directly at any time with any questions or suggestions concerning data protection.
4. Cookies
The website of IntegraTools GmbH uses cookies. Cookies are text files that are stored and saved on a computer system via an internet browser.
Numerous websites and servers use cookies. Many cookies contain a so-called cookie ID. A cookie ID is a unique identifier of the cookie. It consists of a string of characters through which websites and servers can be assigned to the specific internet browser in which the cookie was stored. This allows visited websites and servers to distinguish the individual browser of the data subject from other internet browsers that contain other cookies. A specific internet browser can be recognised and identified using the unique cookie ID.
Through the use of cookies, IntegraTools GmbH can provide the users of this website with more user-friendly services that would not be possible without the cookie setting.
By means of a cookie, the information and offers on our website can be optimised with the user in mind. Cookies allow us, as previously mentioned, to recognise our website's users. The purpose of this recognition is to make it easier for users to use our website. For example, a user of a website that uses cookies does not have to re-enter their login details every time they visit the website, because this is handled by the website and the cookie stored on the user's computer system. Another example is the cookie of a shopping cart in an online shop. The online shop remembers the items a customer has placed in the virtual shopping cart via a cookie.
The data subject may, at any time, prevent the setting of cookies through our website by means of a corresponding setting of the internet browser used, and may thus permanently object to the setting of cookies. Furthermore, already set cookies may be deleted at any time via an internet browser or other software programs. This is possible in all common internet browsers. If the data subject deactivates the setting of cookies in the internet browser used, not all functions of our website may be entirely usable.
We set technically necessary cookies, for example to store your cookie choice, regardless of any separate consent. Cookies related to Google Analytics, on the other hand, are only set once you have expressly consented in the cookie banner shown on your first visit to this website. You can find more information on this in section 9 of this policy. You can change your choice at any time via the "Cookie settings" link in the footer.
5. Collection of general data and information
The website of IntegraTools GmbH collects a series of general data and information whenever a data subject or an automated system calls up the website. This general data and information is stored in the server's log files. The following may be collected: (1) the browser types and versions used, (2) the operating system used by the accessing system, (3) the website from which an accessing system reaches our website (so-called referrers), (4) the sub-websites accessed via an accessing system on our website, (5) the date and time of access to the website, (6) an Internet Protocol address (IP address), (7) the internet service provider of the accessing system, and (8) any other similar data and information that may be used in the event of attacks on our information technology systems.
When using this general data and information, IntegraTools GmbH does not draw any conclusions about the data subject. Rather, this information is needed to (1) correctly deliver the content of our website, (2) optimise the content of our website and the advertising for it, (3) ensure the long-term viability of our information technology systems and website technology, and (4) provide law enforcement authorities with the information necessary for prosecution in the event of a cyberattack. This anonymously collected data and information is therefore evaluated statistically by IntegraTools GmbH, and further with the aim of increasing data protection and data security in our company, in order to ultimately ensure an optimal level of protection for the personal data we process. The anonymous data of the server log files is stored separately from all personal data provided by a data subject.
6. Hosting with Netlify
This website is hosted by Netlify, Inc. and delivered via its infrastructure. The server log files described in section 5, as well as the data submitted via the contact form on this website, are technically processed via Netlify's servers.
The operating company is Netlify, Inc., 101 2nd Street, San Francisco, CA 94105, USA.
Netlify provides the technical infrastructure of this website, in particular delivery via a content delivery network, SSL encryption of data transmission, and the technical receipt and forwarding of messages sent via the contact form (so-called "Netlify Forms"). Netlify acts as a processor of IntegraTools GmbH on the basis of the Netlify Data Processing Addendum, which applies as part of the Netlify Self-Serve Subscription Agreement for our account.
As Netlify, Inc. is based in the United States of America, a transfer of personal data to the USA in connection with the hosting of this website cannot be ruled out. This transfer takes place on the basis of the Standard Contractual Clauses approved by the European Commission (Art. 46 GDPR). The legal basis for the processing is the legitimate interest in a stable, secure and performant provision of this website, Art. 6 (1) lit. f GDPR.
Further information on how Netlify handles personal data can be found at netlify.com/privacy.
7. Contact Form
Via the contact form provided on this website, the data subject has the opportunity to get in touch with the controller. Which personal data is transmitted in doing so is determined by the input mask used for this purpose: name, e-mail address, optionally a telephone number, as well as the subject and content of the message.
The purpose of processing this data is to handle the respective inquiry by a member of staff of IntegraTools GmbH. Depending on the content of the inquiry, the legal basis is either Art. 6 (1) lit. b GDPR (e.g. for a pre-contractual inquiry about the product) or Art. 6 (1) lit. f GDPR (legitimate interest in responding to other inquiries).
We keep the personal data collected via the form as part of our usual business correspondence for as long as this is useful for processing the inquiry, for any follow-up questions, and to safeguard legitimate interests. Individual inquiries are not automatically and immediately deleted once they have been dealt with. If the data subject wishes their data to be deleted, this wish will be complied with at any time (see section 8, "Rights of the data subject").
The technical transmission and receipt of the form data takes place via the Netlify infrastructure described in section 6. The form data is not passed on to any other third parties.
8. Rights of the data subject
8.1. Right to confirmation
Every data subject has the right, granted by the European legislator, to obtain from the controller confirmation as to whether or not personal data concerning them is being processed. If a data subject wishes to exercise this right of confirmation, they may at any time contact a member of staff of the controller.
8.2. Right of access
Every data subject affected by the processing of personal data has the right, granted by the European legislator, to obtain from the controller, at any time and free of charge, information about the personal data stored about them and a copy of this information. Furthermore, the European legislator has granted the data subject access to the following information:
- the purposes of the processing
- the categories of personal data concerned
- the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organisations
- where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period
- the existence of the right to request from the controller rectification or erasure of personal data, or restriction of processing, or to object to such processing
- the existence of the right to lodge a complaint with a supervisory authority
- where the personal data are not collected from the data subject: any available information as to their source
- the existence of automated decision-making, including profiling, referred to in Article 22(1) and (4) GDPR and, at least in those cases, meaningful information about the logic involved, as well as the significance and envisaged consequences of such processing for the data subject
The supervisory authority responsible for IntegraTools GmbH is the Austrian Data Protection Authority, Barichgasse 40–42, 1030 Vienna, Austria, www.dsb.gv.at.
Furthermore, the data subject has the right of access as to whether personal data has been transferred to a third country or to an international organisation. If this is the case, the data subject also has the right to obtain information on the appropriate safeguards relating to the transfer. If a data subject wishes to exercise this right of access, they may at any time contact a member of staff of the controller.
8.3. Right to rectification
Every data subject affected by the processing of personal data has the right, granted by the European legislator, to obtain from the controller, without undue delay, the rectification of inaccurate personal data concerning them. Furthermore, taking into account the purposes of the processing, the data subject has the right to request the completion of incomplete personal data, including by means of providing a supplementary statement.
If a data subject wishes to exercise this right to rectification, they may at any time contact a member of staff of the controller.
8.4. Right to erasure ("right to be forgotten")
Every data subject affected by the processing of personal data has the right, granted by the European legislator, to obtain from the controller the erasure of personal data concerning them without undue delay, where one of the following grounds applies and insofar as the processing is not necessary:
The personal data were collected or otherwise processed for purposes for which they are no longer necessary.
The data subject withdraws the consent on which the processing was based pursuant to Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR, and there is no other legal basis for the processing.
The data subject objects to the processing pursuant to Art. 21(1) GDPR and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing pursuant to Art. 21(2) GDPR.
The personal data have been processed unlawfully.
Erasure of the personal data is required for compliance with a legal obligation under Union or Member State law to which the controller is subject.
The personal data have been collected in relation to the offer of information society services referred to in Art. 8(1) GDPR.
If one of the above-mentioned reasons applies and a data subject wishes to have personal data stored by IntegraTools GmbH erased, they may at any time contact a member of staff of the controller. The staff member of IntegraTools GmbH will ensure that the erasure request is complied with without undue delay.
Where IntegraTools GmbH has made the personal data public and is obliged, as controller, to erase the personal data pursuant to Art. 17(1) GDPR, IntegraTools GmbH shall take reasonable steps, including technical measures, taking into account available technology and the cost of implementation, to inform other controllers processing the published personal data that the data subject has requested erasure of any links to, or copies or replications of, that personal data, insofar as processing is not required. The staff member of IntegraTools GmbH will arrange for the necessary action to be taken in individual cases.
8.5. Right to restriction of processing
Every data subject affected by the processing of personal data has the right, granted by the European legislator, to obtain from the controller restriction of processing where one of the following applies:
The accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal data.
The processing is unlawful, the data subject opposes the erasure of the personal data and requests the restriction of its use instead.
The controller no longer needs the personal data for the purposes of the processing, but the data subject requires them for the establishment, exercise or defence of legal claims.
The data subject has objected to processing pursuant to Art. 21(1) GDPR, pending verification of whether the legitimate grounds of the controller override those of the data subject.
Where one of the above conditions is met and a data subject wishes to request the restriction of personal data stored by IntegraTools GmbH, they may at any time contact a member of staff of the controller. The staff member of IntegraTools GmbH will arrange for the restriction of the processing.
8.6. Right to data portability
Every data subject affected by the processing of personal data has the right, granted by the European legislator, to receive the personal data concerning them, which was provided to a controller by the data subject, in a structured, commonly used and machine-readable format. They also have the right to transmit this data to another controller without hindrance from the controller to which the personal data was provided, provided that the processing is based on consent pursuant to Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR, or on a contract pursuant to Art. 6(1)(b) GDPR, and the processing is carried out by automated means, unless the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
Furthermore, in exercising their right to data portability pursuant to Art. 20(1) GDPR, the data subject has the right to have personal data transmitted directly from one controller to another, where technically feasible and where this does not adversely affect the rights and freedoms of others.
To assert the right to data portability, the data subject may at any time contact a member of staff of IntegraTools GmbH.
8.7. Right to object
Every data subject affected by the processing of personal data has the right, granted by the European legislator, to object, on grounds relating to their particular situation, at any time to the processing of personal data concerning them which is based on Art. 6(1)(e) or (f) GDPR. This also applies to profiling based on these provisions.
In the event of an objection, IntegraTools GmbH will no longer process the personal data, unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or the processing serves the establishment, exercise or defence of legal claims.
Where IntegraTools GmbH processes personal data for direct marketing purposes, the data subject has the right to object at any time to the processing of personal data for the purpose of such marketing. This also applies to profiling, to the extent that it is related to such direct marketing. If the data subject objects to IntegraTools GmbH's processing for direct marketing purposes, IntegraTools GmbH will no longer process the personal data for these purposes.
In addition, the data subject has the right, on grounds relating to their particular situation, to object to the processing of personal data concerning them carried out by IntegraTools GmbH for scientific or historical research purposes, or for statistical purposes pursuant to Art. 89(1) GDPR, unless such processing is necessary for the performance of a task carried out for reasons of public interest.
To exercise the right to object, the data subject may contact any member of staff of IntegraTools GmbH directly. In the context of the use of information society services, and notwithstanding Directive 2002/58/EC, the data subject is also free to exercise their right to object by automated means using technical specifications.
8.8. Automated individual decision-making, including profiling
Every data subject affected by the processing of personal data has the right, granted by the European legislator, not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning them, or similarly significantly affects them, provided the decision (1) is not necessary for entering into, or the performance of, a contract between the data subject and the controller, or (2) is authorised by Union or Member State law to which the controller is subject and which also lays down suitable measures to safeguard the data subject's rights and freedoms and legitimate interests, or (3) is based on the data subject's explicit consent.
If the decision (1) is necessary for entering into, or the performance of, a contract between the data subject and the controller, or (2) is based on the data subject's explicit consent, IntegraTools GmbH will take appropriate measures to safeguard the data subject's rights and freedoms and legitimate interests, at least including the right to obtain human intervention on the part of the controller, to express their point of view, and to contest the decision.
If the data subject wishes to exercise their rights concerning automated decisions, they may at any time contact a member of staff of the controller.
8.9. Right to withdraw data protection consent
Every data subject affected by the processing of personal data has the right, granted by the European legislator, to withdraw their consent to the processing of personal data at any time.
If the data subject wishes to exercise their right to withdraw consent, they may at any time contact a member of staff of the controller.
9. Privacy policy provisions on the use of Google Analytics
The controller has integrated the Google Analytics component on this website. Google Analytics is a web analytics service. Web analytics involves the collection, gathering and evaluation of data on the behaviour of visitors to websites. A web analytics service collects, among other things, data on the website from which a data subject came to a website (so-called referrers), which sub-pages of the website were accessed, or how often and for what duration a sub-page was viewed. Web analytics is used exclusively to optimise this website, not to serve advertising.
The operating company of the Google Analytics component is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (parent company: Google LLC, 1600 Amphitheatre Pkwy, Mountain View, CA 94043, USA).
Unlike a classic tracking component that loads automatically, we only use Google Analytics after you have expressly consented via the cookie banner on this website. On your first visit to our website, you are shown a cookie banner through which you can consent to, or decline, the use of Google Analytics. Only once you have given your consent is the analytics script loaded and a cookie set on your device; if you decline or make no selection, no data whatsoever is transmitted to Google. The legal basis for this processing is exclusively your consent pursuant to Art. 6(1)(a) GDPR. You may withdraw your consent at any time with future effect by opening "Cookie settings" in the footer and making a different choice there.
The purpose of the Google Analytics component is to analyse the flow of visitors on our website. Google uses the data and information obtained, among other things, to evaluate the use of our website and to compile online reports for us showing the activities on our websites.
Provided you have consented, Google Analytics sets a cookie on the data subject's information technology system. What cookies are has already been explained above. With each call to one of the individual pages of this website on which a Google Analytics component has been integrated, the internet browser is automatically prompted by the respective Google Analytics component to transmit data for the purpose of online analysis to Google. Unlike the previous "Universal Analytics" technology, Google Analytics 4 no longer processes a complete IP address as a matter of principle; the IP address is used by Google only briefly to determine an approximate location region and is then discarded.
By means of the cookie, pseudonymised information is stored, such as the access time, the approximate region of origin, and the frequency of the data subject's visits to our website. If you have consented, this data is transferred to, and stored by, Google in the United States of America. The transfer to the USA takes place on the basis of the Standard Contractual Clauses approved by the European Commission (Art. 46 GDPR). User and event data is automatically deleted by Google after 14 months.
Even where consent has been given, the data subject can additionally object to collection by Google Analytics: firstly, by opening "Cookie settings" in the footer of this website again, and secondly, by installing a browser add-on available at tools.google.com/dlpage/gaoptout. This browser add-on tells Google Analytics via JavaScript that no data or information on visits to websites may be transmitted to Google Analytics. The installation of the browser add-on is regarded by Google as an objection. If the data subject's information technology system is later deleted, formatted or reinstalled, the data subject must reinstall the browser add-on in order to disable Google Analytics.
Further information and Google's applicable data protection provisions can be accessed at https://policies.google.com/privacy.
10. Privacy policy provisions on the use of YouTube
The controller embeds videos from YouTube on individual pages of this website (for example, in video guides). YouTube is an internet video portal that allows video publishers to post video clips free of charge, and allows other users to view them, likewise free of charge.
The operating company of YouTube is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. YouTube, LLC is a subsidiary of Google LLC, 1600 Amphitheatre Pkwy, Mountain View, CA 94043, USA.
The embedded videos are used exclusively in YouTube's "privacy-enhanced mode" (domain youtube-nocookie.com). In this mode, according to Google, YouTube only sets cookies and establishes a connection to its servers once the data subject actively starts an embedded video. Merely visiting a page with an embedded but unstarted video therefore does not result in any data being transmitted to YouTube.
If the data subject starts a video, the internet browser is prompted by the YouTube component to establish a connection to YouTube's and Google's servers. In the course of this technical process, YouTube and Google become aware of which video was accessed on which page of our website. If the data subject is logged into YouTube at that time, this information may be associated with their YouTube account. If the data subject does not wish for such an association to be made, they can prevent this by logging out of their YouTube account before starting the video.
The privacy policy published by YouTube, available at https://policies.google.com/privacy, provides information about the collection, processing and use of personal data by YouTube and Google.
11. Legal basis for the processing
Art. 6(1)(a) GDPR serves as the legal basis for processing operations for which we obtain consent for a specific processing purpose. If the processing of personal data is necessary for the performance of a contract to which the data subject is party, as is the case, for example, where processing operations are necessary for the supply of goods or the provision of any other service or consideration, the processing is based on Art. 6(1)(b) GDPR. The same applies to processing operations necessary for carrying out pre-contractual measures, for example in the case of inquiries concerning our products or services. Where our company is subject to a legal obligation by which the processing of personal data is required, such as for the fulfilment of tax obligations, the processing is based on Art. 6(1)(c) GDPR. In rare cases, the processing of personal data may become necessary to protect the vital interests of the data subject or of another natural person. This would be the case, for example, if a visitor were injured at our premises and their name, age, health insurance details or other vital information had to be passed on to a doctor, hospital or other third party. In that case, the processing would be based on Art. 6(1)(d) GDPR. Finally, processing operations could be based on Art. 6(1)(f) GDPR. This legal basis is used for processing operations which are not covered by any of the above legal bases, where the processing is necessary to safeguard a legitimate interest of our company or of a third party, provided the interests, fundamental rights and freedoms of the data subject do not override that interest. We are permitted to carry out such processing operations in particular because they have been specifically mentioned by the European legislator, who took the view that a legitimate interest could be assumed where the data subject is a customer of the controller (recital 47, sentence 2 GDPR).
12. Legitimate interests pursued by the controller or by a third party
Where the processing of personal data is based on Article 6(1)(f) GDPR, our legitimate interests are, in particular, the secure, stable and performant provision of this website (see section 6) and the processing and answering of inquiries that reach us via the contact form or by other means (see section 7).
13. Duration for which personal data is stored
The criterion for the duration of storage of personal data is the applicable statutory retention period. After expiry of that period, the corresponding data is routinely deleted, provided it is no longer required for the performance or initiation of a contract.
14. Statutory or contractual provisions for the provision of personal data; requirement for the conclusion of a contract; obligation of the data subject to provide personal data; possible consequences of failure to provide it
We inform you that the provision of personal data is partly required by law (e.g. tax regulations) or may also result from contractual provisions (e.g. information about the contractual partner). It may sometimes be necessary for the conclusion of a contract for a data subject to provide us with personal data which must subsequently be processed by us. The data subject is, for example, obliged to provide us with personal data if our company concludes a contract with them. Failure to provide the personal data would mean that the contract with the data subject could not be concluded. Before providing personal data, the data subject should contact one of our staff members. Our staff member will clarify, on a case-by-case basis, whether the provision of the personal data is required by law or contract, or is necessary for the conclusion of the contract, whether there is an obligation to provide the personal data, and what consequences the failure to provide the personal data would have.
15. Existence of automated decision-making
As a responsible company, we refrain from automated decision-making or profiling.
This privacy policy was created using the privacy policy generator of DGD Deutsche Gesellschaft für Datenschutz GmbH, which acts as a data protection officer, in cooperation with the data protection lawyers of WILDE BEUGER SOLMECKE | Rechtsanwälte.