Data protection

1 Introduction and general provisions

Thank you for your interest in our company. The management of sanotact GmbH takes your privacy and the protection of your data very seriously. While it is, in principle, possible to use the websites of sanotact GmbH without disclosing any personal data, the processing of personal data may be required where visitors wish to use specific services offered by our company through the website. If the processing of personal data is necessary and there is no legal basis for such processing, we will seek the consent of the data subject.

We process personal data, e.g. the name, address, email address or telephone number of a data subject, strictly in accordance with the General Data Protection Regulation (GDPR) and any applicable national data protection provisions. The purpose of this privacy policy is to provide the public with information about the nature, scope and purpose of the collection, use and processing of personal data, and to inform website users about their rights.

Sanotact GmbH, as the data controller, has implemented a range of technical and organisational measures to ensure that the personal data processed via this website are protected to the fullest extent possible. However, it should be noted that transfer of data over the Internet can pose a security risk and cannot be fully protected against third-party access. For this reason, data subjects are may use alternative means, e.g. telephone to communicate personal data to us.

1.1 Name and address of the data controller

The data controller within the meaning of the General Data Protection Regulation (GDPR), other data protection laws applicable in the member states of the European Union and other data protection provisions is:

sanotact GmbH
Hessenweg 10
48157 Münster

Telephone: +49 (0)251 1421.0
Email: info@sanotact.de

1.2 Name and address of the data protection officer

Our data protection officer can be reached through the following address:

sanotact GmbH
Hessenweg 10
48157 Münster

Email: datenschutz@sanotact.de

Visitors to our website and any other interested parties can contact our data protection officer at any time with any questions or suggestions regarding data protection they may have.

1.3 Disclosure of data

We will not transmit your personal data to third parties for purposes other than those listed below.

We will pass your personal data to third parties only if

you have given your explicit consent in accordance with Article 6(1)(a) GDPR for us to disclose your data e.g. to a carrier by ordering goods to be posted to you or by agreeing to separate terms to take part in competitions,
the disclosure is necessary in accordance with Article 6(1)(f) GDPR and there is no reason to assume that you have an overriding legitimate interest in non-disclosure of your data,
the disclosure is necessary for compliance with a legal obligation in accordance with Article 6(1)(c) GDPR, or
it is legally permissible and necessary for the performance of a contract with you in accordance with Article 6(1)(b) GDPR.

2 Data collection policy

2.1 Cookies

The websites of sanotact GmbH use cookies. Cookies are text files that are placed and stored on a computer system by a browser.

Many websites and servers use cookies. Many cookies contain a so-called cookie ID. A cookie ID is a unique identifier of the cookie. It consists of a character string through which websites and servers can be assigned to the specific browser in which the cookie was stored. This allows the visited websites and servers to distinguish the concrete browser of the website visitor from other browsers that contain other cookies. A specific browser can be recognised and identified using the unique cookie ID.

By using cookies, sanotact GmbH can provide users of this website with more user-friendly services that would not otherwise be possible.

Website users can prevent cookies from being installed by our website by changing the settings of their browser to block the acceptance of cookies. Furthermore, users can delete cookies already stored on their computers through their browser or other software. While all popular browsers offer this option, if used, some features of this website may no longer function properly.

2.2 Collection of data and information

a) When visiting the website

When you visit our website, the browser on your device automatically sends information to the server on our website. This information is temporarily stored in a so-called log file. The following information is collected without your intervention and stored until it is automatically deleted:

Name of the accessed file
Date and time of the access
Amount of data transferred
Message indicating whether the access attempt was successful
Type of web browser used
Type of operating system used
Referring website
Name of your ISP
Your IP address

We process this data for the following purposes:

Ensure a smooth connection to the website,
Make our website more user-friendly
Evaluate the security and stability of the system
and for other administrative purposes.

The legal basis for data processing is Article 6(1)(f) GDPR. The purposes listed above constitute legitimate interests as defined by GDPR. We will not, under any circumstances, use the data collected to identify you.

b) When using our contact form

If you have any questions, you can use the form provided on our website to contact us. If a website visitor contacts us, the personal data transmitted by him or her to us on a voluntary basis will be automatically stored – for the purpose of processing or establishing contact. We do not pass personal data on to third parties. We process the data you provide in the contact form based on your consent to the processing of personal data in accordance with Article 6(1)(a) GDPR.

3 Web analysis and website optimisation

Google Tag Manager:

We use the service called Google Tag Manager from Google. ‘Google’ is a group of companies and consists of the companies Google Ireland Ltd. (the service provider), Gordon House, Barrow Street, Dublin 4, Ireland, as well as Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, as well as other affiliated companies of Google LLC. The Google Tag Manager is an auxiliary service and only processes personal data itself for technically essential purposes. The Google Tag Manager ensures the loading of other components, which in turn collect data. The Google Tag Manager does access this data. Further information about Google Tag Manager can be found in Google’s Privacy Policy https://support.google.com/tagmanager/answer/9323295?hl=de

Please note that as a result of American laws such as the Cloud Act, American authorities, such as intelligence agencies, could possibly gain access to personal data that is inevitably exchanged with Google due to the Internet Protocol (TCP) when this service is integrated.

Google Analytics

Insofar as you have given your consent, this website uses Google Analytics 4, a web analytics service provided by Google LLC. The responsible entity for users in the EU/EEA and Switzerland is Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (‘Google’).

Scope of processing
Google Analytics uses cookies that enable an analysis of your use of our websites. The information collected by cookies about your use of this website is generally transferred to a Google server in the USA and stored there.

We use the User ID function. The User ID allows us to assign a unique, persistent ID to one or more sessions (and the activities within those sessions) and to analyse user behaviour across devices.
We use Google Signals. This allows Google Analytics to capture additional information about users who have activated personalised ads (interests and demographics), and ads can be delivered to these users in cross-device remarketing campaigns.

The anonymisation of IP addresses is activated by default in Google Analytics 4. Due to IP anonymisation, your IP address will be truncated by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. According to Google, the IP address transmitted by your browser as part of Google Analytics is not merged with other Google data.

During your visit to the website, your user behaviour is recorded in the form of ‘events’. Events can include:

Page impressions
First visit to the website
Start of the session
Your ‘click path’, interaction with the website
Scrolls (whenever a user scrolls to the end of the page (90%))
Clicks on external links
Internal search queries
Interaction with videos
File downloads
Ads seen/clicked
Language setting

It also records:

Your approximate location (region)
Your IP address (in abbreviated form)
Technical information about your browser and the end devices you use (e.g. language setting, screen resolution)
Your internet provider
The referrer URL (via which website/advertising medium you came to visit this website)

Purposes of processing
On behalf of the operator of this website, Google will use this information for the purpose of evaluating your [pseudonymous [NOT USER ID]] use of the website and compiling reports on website activity. The reports provided by Google Analytics are used to analyse our website’s performance [OPTIONAL: and the success of our marketing campaigns].

Recipients
Recipients of the data are/could be

Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (as the data processor pursuant to Art. 28 GDPR)
Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA
Alphabet Inc., 1600 Amphitheatre Parkway Mountain View, CA 94043, USA

It cannot be ruled out that American authorities will access the data stored by Google.

Third country transfer
Insofar as data is processed outside the EU/EEA and there is no level of data protection corresponding to the European standard, we have concluded standard EU contractual clauses with the service provider in order to establish an appropriate level of data protection. The parent company of Google Ireland, Google LLC, is based in California, USA. A transmission of data to the USA and access by American authorities to the data stored by Google cannot be ruled out. The USA is currently considered a third country from a data protection perspective. They do not have the same rights in the USA as within the EU/EEA. You may not be entitled to legal remedies against access by authorities.

Storage period
The data sent by us and linked to cookies is automatically deleted after 14 months. The deletion of data whose storage period has been reached takes place automatically once a month.

Legal basis
The legal basis for this processing of data is your consent in accordance with Art. 6 (1) (1) a) GDPR.

You can revoke your consent at any time with effect for the future by accessing the Cookie Settings and changing your setting selection there. The lawfulness of processing based on consent up until the point of withdrawal shall not be affected.

You can also prevent the storage of cookies from the outset by setting your browser software accordingly. However, if you configure your browser to reject all cookies, this may result in a restriction of functionalities on this and other websites. In addition, you can prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) by Google and the processing of this data by Google by

a. not giving your consent for the cookie to be set or
b. downloading and installing the browser add-on to deactivate Google Analytics HERE.

Further information on the Google Analytics Terms of Services and on data protection at Google can be found at https://marketingplatform.google.com/about/analytics/terms/de/ and https://policies.google.com/?hl=de.

Insofar as you have given your consent, this website uses Google Analytics, a web analytics service provided by Google LLC. The responsible service provider in the EU is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (‘Google’).

We use the function ‘anonymizeIP’ (so-called ‘IP masking’): Due to the activation of IP anonymisation on this website, your IP address will be truncated by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

During your visit to the website, the following data is collected, among other things:

The pages you have accessed, your ‘click path’
The achievement of ‘website goals’ (conversions, e.g. newsletter sign-ups, downloads, purchases)
Your user behaviour (e.g. clicks, dwell time, bounce rates)
Your approximate location (region)
Your IP address (in abbreviated form)
Technical information about your browser and the end devices you use (e.g. language setting, screen resolution)
Your internet provider
The referrer URL (via which website/advertising medium you came to visit this website)

Purposes of processing
On behalf of the operator of this website, Google will use this information for the purpose of evaluating your (pseudonymous) use of the website and compiling reports on website activity. The reports provided by Google Analytics are used to analyse the performance of our website and the success of our marketing campaigns.

Recipients
The data recipient is

Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland,

as the data processor. We have concluded an order processing agreement with Google for this purpose. Google LLC, based in California, USA, and, where applicable, American authorities may access the data stored by Google.

Third country transfer
A transfer of data to the USA cannot be ruled out.

In addition, you can prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) by Google and the processing of this data by Google by

a. not giving your consent for the cookie to be set or
b. downloading and installing the browser add-on to deactivate Google Analytics HERE.

You can also prevent the storage of cookies by setting your browser software accordingly. However, if you configure your browser to reject all cookies, this may result in a restriction of functionalities on this and other websites.

Legal basis and revocation option
Your consent must be granted in accordance with Art. 6 (1) (1) a) GDPR for this data to be processed. You can revoke your consent at any time with effect for the future by accessing the Cookie Settings and changing your setting selection there.

4 Google-(Re-)Marketing-Services

Google Ads Conversion

We use the Google Ads Conversion service in order to draw attention to our attractive offers on external websites using advertising materials (so-called ‘Google Ads’). We can determine the success of the individual advertising measures based on the advertising campaign data. It is therefore our interest to show you advertising that you may be interested in, to make our website more interesting for you and to achieve a fair calculation of advertising costs.

Google delivers these advertising materials using so-called ‘ad servers’. To this end, we use ad server cookies, which can be used to measure specific parameters to measure success, such as ad display or user clicks. If you visit our website via a Google Ad, Google Ads saves a cookie on your end device. Usually, the following analysis information is recorded in relation to this cookie: unique cookie ID, number of ad impressions per placement (frequency), last impression (relevant for post-view conversions) and opt-out information (flag that the user no longer wants to be addressed).

These cookies enable Google to recognise your internet browser. If a user visits specific pages on an Ads customer’s website and the cookie saved on their computer has not yet expired, Google and the customer can identify that the user clicked on the ad and was forwarded to this page. A different cookie is assigned to each Ads customer. Cookies thus cannot be tracked across the websites of Ads customers. We ourselves do not collect or process personal data as part of the aforementioned advertising measures. We merely receive statistical analyses from Google. These analyses enable us to determine which of the advertising measures used are particularly effective. We do not receive any further data from the use of advertising materials, and in particular, we cannot identify the users based on this information.

Your browser automatically establishes a direct connection to a Google server based on the marketing tools used. We cannot influence the scope and further user of the data, which Google collects with the help of this tool, and therefore provide you with information based on our level of knowledge: Since our website uses Ads Conversion, Google receives the information that you have accessed the relevant part of our website or have clicked on one of our ads. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or are not logged in, Google might still obtain and save your IP address.

Google Ads Remarketing

We use the remarketing function within the Google Ads service. The remarketing function enables us to present our website users with advertisements based on their interests on other websites within the Google advertising network (in Google Search or on YouTube, so-called ‘Google Ads’ or on other websites). For this purpose, the interaction of users on our website is analysed, for instance, which offers a user was interested in, in order to be able to display targeted advertising to users on other sites even after they have visited our website. Google thus stores cookies on the end devices of users who visit specific Google services or websites in the Google display network. These cookies are used to record the visits of these users. The cookies are used to uniquely identify a web browser on a particular end device and not to identify a person.

Cookies/tools used: Information on this topic can be found in the section on ‘Cookies’.

Recipient:
Main service members: Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland.

Transfers to third countries are possible. So-called standard contractual clauses pursuant to Art. 46 GDPR were concluded as suitable guarantees. For third countries/companies for which an adequacy decision exists, the adequacy decision shall also apply. Further information can be found here: https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu_de.

Deletion/revocation:
You can deactivate the tool in the cookie settings here .
Legal basis:
Art. 6 (1) a) GDPR (consent)

Facebook Pixel

The social network Facebook’s ‘Facebook Pixel’ is used on this website in advanced data matching mode. This tool is operated by Meta Platforms Ireland Limited, 4 Grand Canal Quare, Dublin 2, Ireland (‘Facebook’).
On the basis of their explicit consent, when a user clicks on an advertisement played on Facebook and placed by us, an addition is added to the URL of our linked page by Facebook Pixel. Then, after redirection, this URL parameter is inscribed in the user’s browser via a cookie that our linked page sets itself. The cookie is then read by Facebook Pixel and allows the data, including specific customer data, to be forwarded to Facebook.
With the help of Facebook Pixel with advanced data matching, it is possible for Facebook, on the one hand, to precisely determine the visitors to our online offer as a target group for the display of advertisements ‘Facebook ads’). Accordingly, we use Facebook Pixel with advanced data matching to display the Facebook ads placed by us only to those Facebook users who have also shown an interest in our online offer or who have certain characteristics (e.g. interests in certain topics or products determined on the basis of the websites visited), which we transmit to Facebook (so-called ‘custom audiences’). With the help of Facebook Pixel with advanced data matching, we also want to ensure that our Facebook ads correspond to the potential interest of users and do not have a pestering effect. This allows us to further evaluate the effectiveness of the Facebook ads for statistical and market research purposes by tracking whether users were redirected to our website after clicking on a Facebook ad (so-called ‘conversion’). Compared to the standard version of Facebook Pixel, the advanced data matching feature helps us to better measure the effectiveness of our advertising campaigns by capturing more attributed conversions.
All transmitted data is stored and processed by Facebook so that a connection to the respective user profile is possible and Facebook can use the data for its own advertising purposes in accordance with the Facebook Privacy Policy (https://www.facebook.com/about/privacy/). The data may enable Facebook and its partners to place ads on and off Facebook.
These processing operations are carried out exclusively with the granting of explicit consent in accordance with Art. 6 (1) a) GDPR
The information generated by Facebook is usually transmitted to a Facebook server and stored there; this may also involve transmission to the servers of Meta Platforms Inc. in the USA. You can revoke your issued consent at any time with effect for the future by deactivating this service in the ‘Cookie Consent Tool’ provided on the website.

5. Twitter feed integration

We may integrate content and related features of Twitter, which may, for example, be displayed as a feed. Twitter is operated by Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. As part of this use, content such as images, videos and texts as well as buttons for liking and subscribing to Twitter may be downloaded.

If you use these features and have an account on the Twitter platform itself, Twitter can use your account to link your activities to your profile. For more information about Twitter’s privacy policy, please refer to https://twitter.com/en/privacy

You can disable the transmission of data to Twitter by installing an opt-out cookie by clicking on the following link: https://twitter.com/personalization.

6. Rights of data subjects

As a data subject you have the following rights:
a) Right of access
You have the right to obtain from us confirmation as to whether or not personal data concerning you are being processed.

b) Rectification/ erasure/ restriction of processing
Furthermore, you have the right to obtain from us
• without any undue delay the rectification of inaccurate personal data concerning you (right to rectification);
• the erasure of personal data concerning you without undue delay (right to erasure) and
• restriction of processing of your personal data (right to restriction of processing).

c) Right to data portability
You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller.

d) Right of withdrawal
You have the right to withdraw your consent at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

e) Right to object
You have the right to object if the processing of your personal data is necessary for the performance of a task carried out in the public interest (Article 6(1)(e) GDPR) or for the purposes of our legitimate interests (Article 6(1)(f) GDPR).

f) Right to lodge a complaint
Without prejudice to any other legal remedy, you have the right to lodge a complaint with a supervisory authority, if you consider that the processing of personal data relating to you infringes the GDPR; for information about the competent supervisory authority, please visit https://ec.europa.eu/justice/article-29/structure/data-protection-authorities/index_en.html