Data Privacy Statement
Our company attaches great importance to the protection of personal data and respects your wish for privacy. This privacy policy informs you about the type, scope and purpose of the processing of personal data (hereinafter referred to as "data") within our online offer and the websites, functions and content associated with it, as well as external online presences, such as our social media profiles (hereinafter jointly referred to as "online offer"). With regard to the terms used, such as "processing" or "controller", we refer to the definitions in Article 4 of the General Data Protection Regulation (GDPR).
Controller
Controller according to the GDPR is:
iF International Forum Design GmbH
Bahnhofstrasse 8
30159 Hannover, Germany
Phone: +49.511.54224-202
Fax: +49.511.54224-100
Email: info@ifdesign.com
CEO: Uwe Cremering
Link to imprint: https://ifdesign.com/en/data-privacy-statement
For all questions and suggestions on data protection, please contact our data protection officer at info@ifdesign.com.
Data processing during website visit
During the mere informational use of the website, i.e. if you do not register or otherwise transmit information to us (e.g. via a contact form), we collect the following technical information (log file data):
Operating system of the end device with which you visit our website
Browser (type, version & language settings)
the amount of data retrieved
the current IP address of the end device with which you visit our website
Date and time of access
the URL of the previously visited website (referrer)
the URL of the (sub)page you are accessing on the website
the Internet service provider of the accessing system
The collection of this data is technically necessary to display our website to you and to ensure stability and security. We (and our service provider) are regularly unaware of who is the owner of an IP address. We do not combine the data listed above with other data.
The legal basis is Art. 6 s. 1 f GDPR. Since the collection of data for the provision of the website and the storage in log files are absolutely necessary for the operation of the website and to protect against misuse, our legitimate interest in data processing overrides at this point.
Legal basis of our data processing
The processing of personal data can be based on various legal grounds. If we require your data for the performance of a contract with you or to respond to inquiries from you regarding a contract, the legal basis for this data processing is Art. 6 s. 1 b GDPR. If we obtain your consent for certain data processing, the legal basis is Art. 6 s. 1 a GDPR. We carry out some data processing on the basis of our legitimate interest, whereby a balancing of your interests worthy of protection and our legitimate interests is always carried out. The legal basis for this is Art. 6 s. 1 f GDPR. Insofar as the processing is necessary for the fulfilment of a legal obligation to which we are subject, the legal basis is Art. 6 s. 1 c GDPR.
Below we explain how we process personal data via our website.
Data security
We have taken extensive technical and operational precautions to protect your data from accidental or intentional manipulation, loss, destruction or access by unauthorized persons. Our security procedures are regularly reviewed and adapted to technological progress.
Contact
When you contact us by e-mail or using a contact form, the data you provide (your e-mail address, possibly your name and telephone number) will be saved by us in order to answer your questions and process your concerns. The legal basis for this is Art. 6 Paragraph 1 Sentence 1 Letter f GDPR. Insofar as we use our contact form to request information that is not required to establish contact, we have always marked this as optional. This information is used to concretise your request and to improve the processing of your request. This information is provided expressly on a voluntary basis and with your consent, Art. 6 Paragraph 1 Clause 1 lit. a GDPR. Insofar as this concerns information on communication channels (e.g. email address, telephone number), you also consent to us contacting you via this communication channel, if necessary, in order to answer your request. You can of course revoke this consent at any time for the future.
Your data that we received when you contacted us will be deleted as soon as they are no longer required to achieve the purpose for which they were collected, your request has been fully processed and no further communication with you is required or requested by you.
Transfers to third countries
If we process data in a third country (i.e. outside the European Union (EU) or the European Economic Area (EEA)) or if this occurs in the context of the use of third-party services or the disclosure or transfer of data to third parties, this will only occur if it is done in order to fulfil our (pre-)contractual obligations, on the basis of your consent, on the basis of a legal obligation or on the basis of our legitimate interests. Subject to legal or contractual permissions, we will only process or allow data to be processed in a third country if the special requirements of Art. 44 et seq. GDPR are met. This means that the processing is carried out, for example, on the basis of special guarantees, such as the officially recognized determination of a level of data protection corresponding to the or compliance with officially recognized special contractual obligations (so-called "standard contractual clauses").
Rights of data subjects
You have the right to obtain confirmation as to whether data in question are being processed and to obtain information about these data and further information and a copy of the data in accordance with Article 15 of the GDPR.
You have according to. Art. 16 GDPR the right to request the completion of the data concerning you or the correction of incorrect data concerning you.
In accordance with Art. 17 GDPR, you have the right to demand that data concerning you be deleted without delay or, alternatively, in accordance with Art. 18 GDPR, to demand restriction of the processing of the data.
You have the right to request that the data concerning you that you have provided to us be received in accordance with Art. 20 GDPR and to request that it be transferred to other data controllers.
You also have the right to lodge a complaint with the competent supervisory authority in accordance with Article 77 of the GDPR.
Right of withdrawal
You have the right to withdraw your given consents according to Art. 7 s. 3 GDPR with effect for the future.
Right of objection
You may object to the future processing of data relating to you in accordance with Art. 21 GDPR at any time. The objection can be made in particular against the processing for purposes of direct marketing.
Registration function
Users can create a user account. Within the scope of the registration, the required mandatory data is communicated to the users and processed on the basis of Art. 6 s. 1 b GDPR for the purpose of providing the user account. The processed data includes in particular the login information (name, password as well as an email address). The data entered during registration is used for the purposes of using the user account and its purpose.
Users may be informed by e-mail about information relevant to their user account, such as technical changes. If users have terminated their user account, their data relating to the user account will be deleted, subject to any legal obligation to retain it. It is the responsibility of the users to save their data before the end of the contract in the event of termination. We are entitled to irretrievably delete all user data stored during the term of the contract.
We use the so-called double opt in procedure for registration, i.e. your registration is only completed once you have confirmed your registration by clicking on the link contained in a confirmation e-mail sent to you for this purpose. If you do not confirm your registration, it will be automatically deactivated. Once you have registered, you will receive personal, password-protected access and will be able to view and manage the data you have provided. Registration is voluntary, but may be a prerequisite for using certain services.
In the context of the use of our registration and login functions as well as the use of the user account, we store the IP address and the time of the respective user action. The storage is based on our legitimate interests, as well as those of the users in protection against abuse and other unauthorized use. In principle, this data is not passed on to third parties unless it is necessary for the pursuit of our claims or there is a legal obligation to do so in accordance with Art. 6 s. 1 c GDPR. The IP addresses are anonymised or deleted after 7 days at the latest.
What are cookies?
Cookies are data that are stored on your computer by a website you visit and allow your browser to be reassigned. Cookies transmit information to the entity that sets the cookie. Cookies can store various information, such as your language preference, the duration of your visit to our website or the entries you have made there. This prevents you, for example, from having to re-enter required form data each time you use the site. The information stored in cookies can also be used to identify preferences and to tailor content according to areas of interest.
There are different types of cookies: session cookies are sets of data that are only temporarily held in memory and are deleted when you close your browser. Permanent or persistent cookies are automatically deleted after a specified period of time, which may vary depending on the cookie. With this type of cookie, the information can also be stored in text files on your computer. However, you can also delete these cookies at any time via your browser settings.
First-party cookies are set by the website you are currently visiting. Only that website is allowed to read information from these cookies. Third-party cookies are set by organizations that do not operate the website you are visiting. These cookies are used by marketing companies, for example.
The legal basis for possible processing of personal data by means of cookies and their storage period may vary. Insofar as you have given us your consent, the legal basis is Art. 6 s. 1 a GDPR. Insofar as the data processing is based on our overriding legitimate interests, the legal basis is Art. 6 s.1 f GDPR. The stated purpose corresponds with our legitimate interest.
We use cookies to ensure the proper operation of the website, to provide basic functionality, to measure reach and - with your consent - to tailor our services to preferred areas of interest.
When accessing our website, all users of our website are informed by an information banner about our use of cookies and referred to this data protection notice. As a user, you will also be asked for your consent to the use of certain cookies, in particular for the personalisation of services and for marketing measures. Once you have given your consent, you can revoke it at any time with effect for the future by calling up the cookie administration in the footer of this website and "unchecking" the processing to which you had consented.
Deletion of data
The data processed by us will be deleted or restricted in its processing in accordance with Articles 17 and 18 GDPR. Unless expressly stated within the scope of this data protection declaration, the data stored by us will be deleted as soon as they are no longer required for their intended purpose and the deletion does not conflict with any statutory retention obligations. If the data is not deleted because it is required for other and legally permissible purposes, its processing will be restricted. I.e. the data is blocked and not processed for other purposes. This applies, for example, to data that must be retained for reasons of commercial or tax law.
According to legal requirements in Germany, data is stored in particular for 10 years in accordance with para. 147 s. 1 AO (German Fiscal Law or „Abgabenordnung“), 257 s. 1 nos. 1 and 4, s. 4 HGB (German Commercial Code or „Handelsgesetzbuch“) (accounts, records, management reports, accounting vouchers, commercial books, documents relevant for taxation, etc.) and 6 years in accordance with para. 257 s. 1 nos. 2 and 3, s. 4 HGB (commercial letters).
Newsletter
General information
You can subscribe to a newsletter on our website, with which we inform you about the activities of our company, current information about our services, special promotions and events. The content of the individual newsletter is briefly described within the scope of the registration. The legal basis for sending the respective newsletter is your consent in accordance with Art. 6 s. 1 a GDPR in conjunction with. Para. 7 s. 2 no. 3 UWG (Fair Trade Law or „Gesetz gegen den unlauteren Wettbewerb“) or the legal permission according to para. 7 s. 3 UWG.
For the registration to our newsletters we use the so-called double opt in procedure. This means that after your registration we will send you an email to the email address you provided, in which we ask you to confirm that you wish to receive the newsletter. If you do not confirm your registration, your information will be deactivated.
The only mandatory data for sending the newsletter is your e-mail address. The provision of further data is voluntary: this data is used to address you personally. After your confirmation, we store your e-mail address for the purpose of sending the newsletter and until revoked. We also store your IP address current at the time of registration, the time of registration and confirmation for up to three years after registration (statute of limitations). The purpose of this procedure is to be able to prove your registration in case of doubt and, if necessary, to clarify any misuse of your personal data. The legal basis for the logging of the registration is our legitimate interest in accordance with Art. 6 s. 1 f GDPR in the proof of a formerly given consent, see also Art. 7 s. 1 GDPR.
You can withdraw your consent to the sending of the newsletter at any time and unsubscribe from the newsletter. You can declare the revocation by clicking on the link provided in every newsletter e-mail.
Comments and contributions
When users leave comments or other contributions, their IP addresses may be stored for 7 days on the basis of our legitimate interests within the meaning of Art. 6 s. 1 f GDPR are stored for 7 days. This is done for our security in case someone leaves unlawful content in comments and posts (insults, prohibited political propaganda, etc.). In this case, we ourselves can be prosecuted for the comment or post and are therefore interested in the identity of the author.
Furthermore, we reserve the right, on the basis of our legitimate interests pursuant to Art. 6 s. 1 f. GDPR, to process the information provided by users for the purpose of spam detection.
The data provided in the context of comments and contributions will be permanently stored by us until the objection of the user.
Google Analytics
On our websites we use Google Analytics, a web analytics service provided by Google Inc. (https://www.google.de/intl/de/about/) (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter "Google"). In this context, pseudonymised usage profiles are created and cookies are used (see under point 4). The information generated by the cookie about your use of this website such as.
Browser type/version,
operating system used,
Referrer URL (the previously visited page),
Host name of the accessing computer (IP address),
Time of the server request,
will be transmitted to and stored by Google on servers in the United States. The information is used to evaluate the use of the website, to compile reports on website activity and to provide other services associated with the use of the website and the Internet for the purposes of market research and the design of these Internet pages to meet requirements. This information may also be transferred to third parties if this is required by law or if third parties process this data on our behalf. Under no circumstances will your IP address be merged with other Google data. The IP addresses are anonymized so that an assignment is not possible (IP masking).
You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website.
Google Analytics is used exclusively on the legal basis of your consent pursuant to Art. 6 s. 1 a GDPR, provided that you have given this consent in advance. You can revoke your consent at any time with effect for the future by calling up the cookie settings in the footer of this website and changing your selection there.
You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) and the processing of this data by Google by downloading and installing a browser add-on (https://tools.google.com/dlpage/gaoptout?hl=de ).
As an alternative to the browser addon, especially for browsers on mobile devices, you can also prevent the collection by Google Analytics by clicking on the following link: Deactivate Google Analytics. An opt-out cookie will be set, which prevents the future collection of your data when visiting this website. The opt-out cookie is only valid in this browser and only for our website and is stored on your device. If you delete the cookies in this browser, you must set the opt-out cookie again.
Further information on data protection in connection with Google Analytics can be found, for example, in the Google Analytics Help (https://support.google.com/analytics/answer/6004245?hl=de).
YouTube (enhanced privacy mode)
We use services from YouTube, LLC, 901 Cherry Ave, 94066 San Bruno, CA, USA, a subsidiary of Google Inc, Amphitheatre Parkway, Mountain View, CA 94043, USA, on our website. For users who are habitually resident in the European Economic Area or Switzerland, Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland is the data controller for your data.
In order to protect your personal data, we use the extended data protection option provided by YouTube. If you call up a page in which a YouTube video is embedded, a connection is established to the YouTube servers and the content is displayed on the website by informing your browser. According to YouTube's information, however, data is only transmitted to the YouTube server in "extended data protection mode" when you actively start the video. If you are logged in to YouTube at this time, the information about the videos you have viewed will be assigned to your YouTube member account. You can prevent this by logging out of your member account before visiting our website. Insofar as data is processed outside the European Economic Area / the EU, where there is no level of data protection equivalent to the European standard, Google states that it uses standard contractual clauses.
Further information on YouTube's data protection is provided by Google at the following link: https://www.google.de/intl/de/policies/privacy/
Use of Facebook
In case of your consent, we use components of the provider Facebook.com on our site. Facebook is a company of Facebook Inc, 1601 S. California Ave, Palo Alto, CA 94304, USA. Each time you visit our website, this component causes the browser you are using to download a corresponding representation of the component from Facebook. This process informs Facebook which specific page of our website is currently being visited.
If you visit our site while logged in to Facebook, Facebook recognizes through the information collected by the component, which specific page you visit and assigns this information to your personal user account on Facebook.
If you do not want Facebook to be able to assign your visit to our pages to your Facebook user account, please log out of your Facebook user account.
Facebook Custom Audiences (Facebook Pixel)
In the context of usage-based online advertising, we use the Custom Audiences service of Facebook Inc. (1601 S. California Avenue, Palo Alto, CA 94304, USA). For this purpose, we define target groups of users based on certain characteristics in the Facebook ad manager, who are subsequently shown ads within the Facebook network. Users are selected by Facebook based on the profile information they provide and other data provided through their use of Facebook. If a user clicks on an advertisement and subsequently arrives on our website, Facebook receives the information that the user has clicked on the advertising banner via the Facebook pixel embedded on our website. Basically, a non-reversible and non-personal checksum (hash value) is generated from your usage data, which is transmitted to Facebook for analysis and marketing purposes. A Facebook cookie is set in the process. This collects information about your activities on our website (e.g. surfing behaviour, sub-pages visited, etc.). Your IP address is also stored and used for the geographical targeting of advertising. Facebook Customer Audiences via the customer list is not used by us, nor is the "advanced matching" function.
For more information about the purpose and scope of data collection and the further processing and use of data by Facebook, as well as your settings options for protecting your privacy, please refer to Facebook's privacy policy. You can make settings regarding which advertisements are displayed to you on Facebook under this link and in the Facebook account settings.
For more information about Facebook's Custom Audiences service, please visit:
https://de-de.facebook.com/business/help/449542958510885.
Further information on data processing and storage duration is available from the provider or at https://www.facebook.com/about/privacy.
Deactivating the "Facebook Custom Audiences" function is possible for logged-in users at https://www.facebook.com/settings/?tab=ads#_.
Instagram Social PlugIns
Our website also uses so-called social plugins ("plugins") from Instagram, which is operated by Instagram LLC., 1601 Willow Road, Menlo Park, CA 94025, USA ("Instagram"). The plugins are marked with an Instagram logo, for example in the form of an "Instagram camera".
When you access a page of our website that contains such a plugin, your browser establishes a direct connection to the servers of Instagram. The content of the plugin is transmitted by Instagram directly to your browser and integrated into the page. Through this integration, Instagram receives the information that your browser has called up the corresponding page of our website, even if you do not have an Instagram profile or are not currently logged in to Instagram. This information (including your IP address) is transmitted by your browser directly to an Instagram server in the USA and stored there. If you are logged in to Instagram, Instagram can directly assign your visit to our website to your Instagram account. If you interact with the plugins, for example by clicking the "Instagram" button, this information is also transmitted directly to an Instagram server and stored there. The information is also published on your Instagram account and displayed there to your contacts.
If you do not want Instagram to directly assign the data collected via our website to your Instagram account, you must log out of Instagram before visiting our website.
For more information, please see Instagram's privacy policy (https://help.instaqram.com/15583370790Q388).
LinkedIn Services
Plugins from LinkedIn are operated by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland. Information about privacy at LinkedIn can be found here: https:/en.linkedin.com/legal/privacy-policy.
If you have not given your consent within the framework of the Consent Manager, you have the option of giving it subsequently within the framework of the so-called "2-click procedure". If you call up a page in which LinkedIn is embedded, a connection to the LinkedIn servers is only established when you click on the "Confirm" button. In this case, LinkedIn will set cookies and use your visit data for its own purposes. If you are logged in to LinkedIn at this time, the information about the videos you viewed will be assigned to your member account on LinkedIn. You can prevent this by logging out of your member account before visiting our website.
There is a risk that your data will be processed and transferred to the USA, i.e. a third country outside the European Union (EU) or the European Economic Area (EEA). For this country, there is no adequacy decision of the EU Commission that ensures that a level of data protection equivalent to the European standard exists there. According to the European Court of Justice (ECJ), there is a particular risk that data may be processed unnoticed by US authorities for surveillance purposes. The legal basis for the processing of your data is your consent in accordance with Article 49 s. 1 a GDPR. This can be withdrawn at any time with effect for the future.
The legal basis for this data processing is your consent pursuant to Art. 6 s. 1 a GDPR. You can withdraw your consent at any time with effect for the future by calling up the cookie settings in the footer of the website and changing your selection there.
To prevent LinkedIn from collecting data for advertising purposes, you can set a cookie using this link: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out
In addition, you can make further data protection adjustments via this link: https://www.linkedin.com/help/linkedin/answer/62931/manage-advertising-preferences?lang=en.
X
X functions are integrated on our pages. These functions are offered by X Corp. HQ 1355 Market St, Suite 900, San Francisco, CA 94103, USA. By using X and the "Repost" function, the websites you visit are linked to your X account and shared with other users. This data is also transmitted to X.
We would like to point out that, as the provider of the pages, we have no knowledge of the content of the transmitted data or its use by X. Further information can be found in X's privacy policy at https://twitter.com/en/privacy.
You can change your data protection settings on X in your account settings at https://twitter.com/.
If you have given your consent, we use components of the provider Pinterest Europe Ltd, Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland on our website. This allows us to track the effectiveness of our Pinterest ads for statistical and market research purposes by seeing whether users have been redirected to our website after clicking on a Pinterest ad ("conversion").
Information on data protection at Pinterest can be found at: https://policy.pinterest.com/en/privacy-policy