Data Protection Policy

1. Name and contact data of the person responsible for processing as well as the company data protection officer

This Data Protection Policy applies to data processing by:

Responsible party: SternEnzym GmbH &Co. KG, Kurt-Fischer-Strasse 55, 22926 Ahrensburg, Germany; Email: data@sternenzym.de, Telephone: +49 / (0) 41 02 / 202-002

The company data protection officer can be reached at the above address, C/O Sven Naucke, or at data@sternenzym.de.

2. Collection and storage of personal data, nature and purpose of its use.

2 a) When you visit the website

When you visit our website, www.sternenzym.de, the browser on your device automatically sends information to our website server. This information is temporarily stored in a “logfile”. The following information is gathered without your involvement, and saved until it is automatically deleted:

IP address of the accessing computer,
Date and time of access,
Name and URL of the file called,
Website the access came from (referrer URL),
Browser used, and where applicable your computer’s operating system and the name of your access provider.

We use the above data for the following purposes:

Ensuring smooth connection to the website,
Ensuring the easy use of our website,
Evaluation of system security and stability, and
Further administrative purposes.

The legal basis for data processing is Art. 6 Para. 1 S. 1 lit. f) GDPR. Our legitimate interest follows from the above purposes for data-gathering. In no case do we use the data to draw conclusions about your person.

In addition, we use cookies and analysis services when you visit our website. For more details, see Sec. 4 and 5 of this Data Protection Policy.

2 b) When you sign up for our newsletter

If you have explicitly given permission per Art. 6 Para. 1 S. 1 lit. a) GDPR, we will use your e-mail address to send you our newsletter regularly. The only information we need for this is your e-mail address.

Cancellation is possible at any time, for example using a link provided at the end of each newsletter. You can also request cancellation by e-mail to data@sternenzym.de at any time.

2 c) When you use our contact form

If you have questions of any kind, we offer the option of getting in touch with us by means of a contact form on the website. This requires that you give us a valid e-mail address so we know who the question is from and can respond. Further information can be given voluntarily.

Data processing for the purposes of your contact is based on your voluntary consent per Art. 6 Para. 1 S. 1 lit. a) GDPR.

The personal data we gather pursuant to the contact form is automatically deleted once we have finished handling your inquiry.

3. Transfer of data to third parties

We will not transfer your personal data to third parties for purposes other than those listed here.

We will transfer your personal data to third parties only when:

You have given your express consent per Art. 6 Para. 1 S. 1 lit. a) GDPR,
The transfer per Art. 6 Para. 1 lit. f) GDPR is required for the assertion, exercise or defence of legal claims and there is no reason to assume that you have an overriding interest in being protected from such transfer of your data,
There is a legal obligation to transfer per Art. 6 Para. 1 lit. c) GDPR, and
This is permitted by law, and per Art. 6 Para. 1 lit. b) GDPR is necessary in order to meet contractual obligations towards you.

4. Cookies

We use cookies on our website. These are small text files that your browser automatically creates and installs on your device (laptop, tablet, smartphone etc.) when you visit our website. Cookies do no harm on your device, and contain no viruses, trojans or other malware.

Cookies store information relating to the specific device used. However, this does not mean that they give us direct knowledge of your identity.

One purpose of cookies is to make your use of our website more convenient for you. Thus, we use session cookies to see which pages of our website you’ve already visited. They are automatically deleted after you leave our site.

In addition, in order to improve user-friendliness our site installs temporary cookies on your device for a limited time. When you visit our site again, for example to use our services, it automatically recognises that you’ve visited it before, and what entries and settings you made, so that you don’t have to repeat them.

Another way we use cookies is to gain statistics on the use of our website so we can improve our offerings for you (see Sec. 5). These cookies enable us to automatically recognise you as a repeat visitor if you visit our website again. These cookies are automatically deleted after a defined period.

Data processed by cookies for the above purposes is necessary to maintain our legitimate interests and those of third parties per Art. 6 Abs. 1 lit. f) GDPR.

Most browsers automatically accept cookies. You can configure your browser so that no cookies are installed on your computer, or to always show a message before a new cookie is installed. However, deactivating all cookies may lead to not all of the functions of our website being available to you.

5. Analysis tools

5. a) Tracking tools

The tracking measures described here and used by us are based on Art. 6 Para. 1 S. 1 lit. f) GDPR. Our intention with these tracking measures is to enable continuous improvement and to ensure that the website design meets user needs. We also use them to gather statistics on the use of our website, and for the purpose of improving our website for you. These constitute legitimate interests under the aforementioned legislation.

The data processing purposes and data categories can be identified from the respective tracking tools.

5. b) Google Analytics¹

We use Google Analytics for the needs-based design and continuous improvement of our websites. Google Analytics is a web analysis service of Google Inc. (https://www.google.de/intl/de/about/) (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter “Google”). Pseudonymised use profiles are made and cookies (see Sec. 4) are used in this context. The information generated by the cookie about your use of this website, such as

Browser type/version,
Operating system used,
Referrer URL (the site visited previously),
Host name of the accessing computer (IP address),
Clock time of the server request,

will go to a Google server in the US and be stored there. The information will be used to evaluate the use of the site, in order to compile reports on website activity and provide further services relating to website use and the internet use of linked services, for the purpose of market research and the needs-based design of these web pages. This information will also be passed to third parties where legally mandated or if such third parties are engaged to process the data. In no case will Google combine your IP address with other data. The IP address will be anonymised so that it cannot be connected to you (IP masking).

You can prevent the installation of cookies by setting your browser accordingly; however, note that if you do this you may not be able to make full use of all functions of this website.

In addition, you can prevent the capture and use of cookie-generated data related to your use of the website (including your IP address) by Google by downloading and installing a browser add-on: https://tools.google.com/dlpage/gaoptout?hl=de).

As an alternative to the browser add-on, especially for browsers on mobile devices, you can prevent data gathering by Google Analytics by clicking on this link. This will set an opt-out cookie that prevents capture of your data on future visits to this website. The opt-out cookie applies only in this browser and our website, and is stored on your device. If you delete the cookies in your browser you will have to reset the opt-out cookie.

For more information on data protection in connection with Google Analytics, see Google Analytics help (https://support.google.com/analytics/answer/6004245?hl=de).

5 b) Google Adwords Conversion Tracking

We also use Google Conversion Tracking to gather statistics on the use of our website so that we can improve our website for you. For this purpose, Google Adwords places a cookie (see Section 4) on your computer if you came to our website from a Google advertisement.

These cookies lose their validity after 30 days and are not used for personal identification. If the user visits certain pages of the website of an Adwords customer and the cookie is still operative, Google and the customer can identify that the user clicked on the ad and was forwarded to the site.

Each Adwords customer gets a different cookie. Thus, cookies cannot be tracked via the websites of Adwords customers. The information gathered with conversion cookies is used to draw up conversion statistics for Adwords customers who are using conversion tracking. These customers learn the overall number of users who clicked on their ad and were forwarded to a website with a conversion tracking tag, but they receive no information that would enable them to identify the user personally.

If you don’t want to be part of the tracking process, you can refuse the cookie for it, for example with a browser setting that deactivates all automatic cookie placements. You can also deactivate conversion tracking cookies by setting your browser to block cookies from the domain www.googleadservices.com. For Google’s data protection information on conversion tracking see: https://services.google.com/sitestats/de.html)

5. c) Matomo

We use the open-source software Matomo for the analysis and statistical evaluation of the use of the website. This involves the use of cookies (see Section 4). The information on the website use generated by the cookie is sent to our server and kept in pseudonymised usage profiles. This information is used to analyse the usage of the website and enable the needs-based design of it. The information is not passed to third parties.

In no case is the IP address combined with other data relating to the user. The IP address is anonymised so that it cannot be associated with a user (IP masking).

Your visit to this website is currently being tracked by Matomo web analysis. Click here (https://www.eff.org/issues/do-not-track) if you do not want your visit to be tracked.

6. Social media plug-ins

Based on the provisions of Art. 6 Para. 1 S. 1 lit. f) GDPR, on our website we use plugins from the social networks Facebook, Twitter and Instagram in order to make our company better known on those networks. The advertising purpose behind this is considered a legitimate interest pursuant to GDPR. Responsibility for operation in accordance with data protection laws lies with the respective operator. Inclusion of these plugins by us is by the two-click method, to protect visitors to our website as well as possible.

6 a) Facebook

Facebook social plugins are included on our website to make its use more personal. For this purpose we use LIKE and SHARE buttons. These are from Facebook.

When you access a page on our website that has such a plugin, your browser will connect directly to Facebook’s servers. The content of the plugin is sent by Facebook directly to your browser and incorporated into the website.

Inclusion of the plugin tells Facebook that your browser has accessed the respective page of our website, even if you don’t have a Facebook account, or have one but are not logged on there. This information (including your IP address) is sent by your browser directly to a Facebook server in the US and stored there.

If you are logged onto Facebook, Facebook can associate your visit to our website directly with your Facebook account. When you interact with the plugins, for example by clicking the LIKE or SHARE button, this information is likewise sent directly to a Facebook server and stored there. The information is also published on Facebook and shown to your Facebook friends.

Facebook can use this information for advertising, market research and the needs-based design of Facebook pages. Facebook creates usage, interest and relationship profiles, for example to evaluate your use of our website with regard to the advertising shown to you on Facebook, to inform other Facebook users of your activities on our website, and to provide other services related to the use of Facebook.

If you do not want Facebook to associate data gathered by our website directly with your Facebook account, you must log off Facebook before visiting our website.

For information on the purpose and extent of data-gathering and the further processing and use of data by Facebook, and your rights and the settings you can make to protect your privacy, please see Facebook’s privacy policy (https://www.facebook.com/about/privacy/).

6. b) Twitter

Our web pages include plugins from the short message network of Twitter Inc. (Twitter). The Twitter plugins (tweet buttons) are shown by the Twitter logo on our site. Information on tweet buttons can be found here (https://dev.twitter.com/web/tweet-button).

When you access a page on our website that has such a plugin, your browser will connect directly to Twitter’s servers. Twitter will be notified that someone from your IP address visited our site. If you click the tweet button while you are logged onto your Twitter account, you can link the content on our pages to your Twitter profile. That means that Twitter can associate the visit to our site with your user account. Note that we as site operator have no knowledge of the content of the data communicated in this process or its use by Twitter.

If you do not want Twitter to associate the visit to our site with your profile, log out of your Twitter account.

For more information, see the Twitter Privacy Policy (https://twitter.com/privacy)).

6. c) Instagram

Our website includes Instagram social plugins (“plugins”) that are operated by Instagram LLC., 1601 Willow Road, Menlo Park, CA 94025, USA (“Instagram”).

These plugins are marked by an Instagram logo, for example in the form of an Instagram camera.

When you access a page on our website that has such a plugin, your browser will connect directly to Instagram’s servers. The content of the plugin is sent by Instagram directly to your browser and incorporated into the page. This tells Instagram that your browser has accessed the respective page of our website, even if you don’t have an Instagram profile or have one but are not logged on there.

This information (including your IP address) is sent by your browser directly to an Instagram server in the US and stored there. If you are logged onto Instagram, Instagram can associate your visit to our website directly with your Instagram account. When you interact with the plugins, for example by clicking the “Instagram” button, this information is likewise sent directly to an Instagram server and stored there.

The information is also published on your Instagram account and shown to your contacts there.

If you don’t want Instagram to associated data gathered by our website directly with your Instagram account, you must log off Instagram before visiting our website.

For more information on this, see the Instagram Privacy Policy (https://help.instagram.com/155833707900388)).

7. Google Maps

In the contact area of our website you have the possibility to call up the service “Google Maps” of the provider Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. The use of the link is voluntary. The data processed by Google may include, in particular, IP addresses and location data of users. The data may be processed in the USA. The use of Google Maps is in the interest of the visitor to find the location better. The legal bases are granted consent pursuant to Art. 6 para. 1 lit. a GDPR or legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR. Further information on the handling of user data can be found in Google’s privacy policy: https://www.google.com/policies/privacy/

8. Rights of affected persons

You have the right:

Per Art. 15 GDPR, to demand information on your personal data we process. In particular, you can demand information on the purposes of personal data processing, the categories of recipients to whom your data is or will be revealed, the planned duration of storage, the existence of a right to rectification, erasure and restriction of processing of data, the right to object to processing, the right to lodge a complaint, the source of your data if not collected by us, the existence of automated decision-making including profiling and, where applicable, meaningful information on the details thereof,
Per Art. 16 GDPR, to demand the prompt rectification of your incorrect or incomplete personal data stored by us,
Per Art. 17 GDPR, the right to demand the erasure of your personal data stored by us, except when its processing is necessary for exercising the right of freedom of expression and information, to meet a legal obligation, for reasons of public interest, or for the assertion, exercise or defence of legal claims,
Per Art. 18 GDPR, the right to demand the restriction of processing of your personal data if you contest the correctness of the data, if processing is unlawful, if you reject its erasure and we no longer need the data but you need it for the assertion, exercise or defence of legal claims, or per Art. 21 GDPR if you have contested such processing,
Per Art. 20 GDPR you have the right to receive your personal data that you have provided to us in a structured, common, and machine-readable form, or to demand its transfer to another responsible party,
Per Art 7 Para 3 GDPR you have the right to withdraw consent at any time, meaning that we cannot continue data processing that was based on such consent,
Per Art. 77 GDPR, the right to make a complaint with a regulatory authority. As a rule, you can direct such complaints to the regulatory authority of your normal place of residence or workplace, or our office address.

9. Right to object

If your personal data is processed based on legitimate interests per Art. 6 Para. 1 S. 1 lit. f) GDPR, per Art. 21 GDPR you have the right to object to such processing if there are reasons to do so arising from your special situation or if the objection is against direct advertising. In the latter case you have a general right to object without reference to a special situation.

An e-mail to data@sternenzym.de is sufficient for you to exercise this right of objection or revocation.

10. Data security

For website visits we use the widespread SSL (Secure Socket Layer) process with the highest encryption level supported by your browser. Typically this will be 256 bit encryption. If your browser does not support 256 bit encryption, we revert to 128 bit v3 technology. The closed key or lock symbol in the lower status bar of your browser shows you that the current page of our website is transmitted in encrypted form.

We also take suitable technical and organisational measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction and unauthorised access. Our safety precautions are continuously upgraded to stay abreast of technological developments.

11. Status and changes to this Data Protection Policy

This Data Protection Policy is currently valid and is in the status of May 2018.

The ongoing development of our website and offerings, and changes in legal requirements, can make it necessary to edit this Data Protection Policy from time to time. You can always access and print out the latest Data Protection Policy at www.sternenzym.de.

¹ Data security authorities require a valid contract data processing agreement for the permissible use of Google Analytics. A template for such a contract is offered by Google at http://www.google.com/analytics/terms/de.pdf.