Privacy Policy

We appreciate your visit to our website www.zenner-connect.com and your interest in our company.

The protection of your personal data, such as your name, telephone number, address, etc., is an important concern for us.

The purpose of this privacy policy is to inform you about the processing of your personal data that we collect when you visit our website. Our data protection practices comply with the legal requirements of the EU General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG). This privacy policy serves to fulfill the information obligations arising from the GDPR, particularly Articles 13 and 14 et seq. GDPR.

CONTROLLER

The controller within the meaning of Article 4 No. 7 GDPR is the person who alone or jointly with others determines the purposes and means of the processing of personal data.

With regard to our website, the controller is:

ZENNER Connect GmbH
Nikolaus-Otto Str. 25
70771 Leinfelden – Echterdingen
E-mail: info@zenner-connect.com

CONTACT DETAILS OF THE DATA PROTECTION OFFICER

We have appointed a data protection officer in accordance with Article 37 GDPR. You can contact our data protection officer at:

dacuro GmbH
Otto-Hahn-Straße 3
69190 Walldorf
E-Mail: datenschutz@zenner-connect.com

PROVISION OF THE WEBSITE AND CREATION OF LOG FILES

Every time our website is accessed, our system automatically collects data and information from the accessing device (e.g., computer, mobile phone, tablet, etc.).

WHAT PERSONAL DATA IS COLLECTED AND TO WHAT EXTENT IS IT PROCESSED?

(1) Information about the browser type and version;
(2) The operating system of the accessing device;
(3) Hostname of the accessing computer;
(4) The IP address of the accessing device;
(5) Date and time of access;
(6) Websites and resources (images, files, other page content) that were accessed on our website;
(7) Websites from which the user’s system accessed our website (referrer tracking);
(8) Notification of whether the retrieval was successful;
(9) Amount of data transferred

This data is stored in the log files of our system. This data is not stored together with personal data of a specific user, so individual site visitors cannot be identified.

LEGAL BASIS FOR THE PROCESSING OF PERSONAL DATA

Art. 6 para. 1 lit. f GDPR (legitimate interest). Our legitimate interest is to ensure that we achieve the purpose as outlined below.

PURPOSE OF THE DATA PROCESSING

Whenever the website is visited, the temporary (automated) storage of data is required for the duration of this visit to permit access to the website. The storage and processing of personal data is moreover intended to ensure the compatibility of our website for as many visitors as possible and in order to combat misuse and rectify faults. With this in mind, it is necessary to log the technical data of the device accessing the site to permit us to respond as quickly as possible to display errors, attacks on our IT systems and/or failings in the functionality of our website. In addition, the data is used to optimise the website and to generally ensure the security of our information technology systems.

DURATION OF STORAGE

The aforementioned technical data is deleted as soon as it is no longer required to ensure the compatibility of the website for all visitors, but no later than 3 months after our website was accessed.

OPTION FOR OBJECTION AND ERASURE

You may object to the processing at any time pursuant to Art. 21 GDPR and request the erasure of your data in accordance with Art. 17 GDPR. You can find out what rights you have and how to exercise them in the section at the bottom of this privacy policy.

SPECIFIC FUNCTIONS OF THE WEBSITE

Our site offers you various functions and when you use these, personal data is collected, processed and stored by us. Below we explain what happens with this data:

CONTACT FORM(S)

• What personal data is collected and to what extent is it processed?
  We will process the data you have entered in the input mask of our contact forms to fulfil the purpose stated below.
• Legal basis for the processing of personal data
  The legal basis for the transfer of data to us is your consent when submitting the contact form. Consent to the processing and transfer of data is therefore based on Art. 6 (1) (a) GDPR. Please note that other legal bases may be relevant in the course of processing the enquiry, such as the performance of a contract or the fulfilment of a legal obligation. If your contact is aimed at concluding a contract or constitutes another pre-contractual measure, data from your contact and about your person will be processed to respond to your request on the basis of Art. 6 (1) lit. b GDPR. For other enquiries, we use the data and information contained therein relating to your person on the basis of our legitimate interests in responding to enquiries and using the information provided in accordance with Art. 6 (1) lit. f GDPR.
• Purpose of the data processing
  We will use the data recorded via our contact form or contact forms only for processing the specific contact request received through the contact form.
• Duration of storage
  Except where there are statutory retention periods, the collected data will be deleted immediately after processing your request.
• Option for withdrawal and erasure
  The options for withdrawal and erasure are based on the general regulations on the right of withdrawal and right to erasure provided for under data protection laws as described below in this privacy policy.
• Need for the provision of personal data
  Use of the contact forms is optional and is neither contractually nor statutorily required. You are not obliged to use the contact form to contact us, but can rather use the other contact options also provided on our site. If you would like to use our contact form, you must fill in the fields marked as mandatory. If you do not complete the contact form by filling in the necessary details, you will either not be able to send the enquiry or we will unfortunately not be able to process your enquiry.

Newsletter registration form

• What personal data is collected and to what extent is it processed?
  By registering for the newsletter on our website, you provide us with the e-mail address entered by you in the registration field and, where applicable, further contact details, should you provide us with these in the newsletter registration form.
• Legal basis for the processing of personal data
  Art. 6 para. 1 lit. a GDPR (consent through clear affirmative action or behaviour)
• Purpose of the data processing
  We will use the data recorded in the registration mask of our newsletter exclusively to send you our newsletter, in which we inform you all about our services and our news. After registration, we will send you a confirmation e-mail containing a link that you must click to complete the registration for our newsletter (double opt-in).
• Duration of storage
  Your subscription to our newsletter can be discontinued at any time by clicking on the unsubscribe link, which is also included in every newsletter. We will delete your data immediately after you unsubscribe. Likewise, we will immediately delete your data should your registration not be completed. We reserve the right to delete data without giving reasons and without prior or subsequent notification.
• Option for withdrawal and erasure
  You can withdraw your consent in accordance with Art. 7 para.3 GDPR at any time. This shall however not affect data processed on the basis of such consent before its withdrawal. With regard to the other rights, we would refer to the overview at the end of this privacy policy.
• Need for the provision of personal data
  If you would like to use our newsletter, you must fill in the fields marked as mandatory and confirm your e-mail address by clicking on the double opt-in link. The newsletter registration details are neither necessary in order to enter into a contract with us nor legally binding. They are used exclusively for sending our newsletter. If you do not complete the registration by filling in the necessary details, we will not be able to provide you with our newsletter service.

Statistical analysis of visits to this website – web trackers

When you view this website or individual files on the website, we collect, process and store the following data: IP address, website from which the file was accessed, name of the file, date and time of access, amount of data transferred and report on the success of such access (so-called web log). We use this access data exclusively in a non-personalised form for the continuous improvement of our online offering and for statistical purposes.

We also use the following web trackers to evaluate visits to this website:

• Matomo (lokal)
  We use the Matomo service (local) provided by InnoCraft Ltd, 150 Willis St, 6011 Wellington, New Zealand, email: privacy@matomo.org, website: https://matomo.org/ on our website. Personal data is only transferred to servers in the European Union.
  
  The legal basis for the processing of personal data is our legitimate interest pursuant to Art. 6 (1) lit. f GDPR. Our legitimate interest lies in achieving the purpose described below.
  
  Matomo is hosted on our own server infrastructure and configured by us in such a way that no data is transferred to Matomo, InnoCraft Ltd. or other third parties. The collection of statistical data serves to monitor the functionality and user-friendliness of our website and to optimise it by analysing anonymised user flows. This enables us to identify which content is relevant to our site visitors and users and to expand our offering accordingly. We can also use the collected data to create anonymous usage profiles and extract general statistical information. The data collected in this context will not be merged with other personal data without separate consent.
  
  For processing purposes, the service or we collect the following data: parts of your IP address in anonymised form, user activities (e.g. referrer links, time spent on certain URLs, clickstream, shopping cart or order IDs), data about your browser settings, browser provider, browser version, screen resolution and the operating system used.
  
  Data collection by our local Matomo instance is also set up to be privacy-friendly. Collected IP addresses are anonymised before collection and processing. We have also activated the ‘Do Not Track Preference’ in Matomo. This ensures that a ‘Do Not Track’ request from your browser is observed by Matomo when you visit our website and, regardless of our other measures, the page user is not tracked. You can prevent Matomo from collecting data at any time by activating the ‘Do Not Track’ setting in your browser.
  
  With regard to processing, you have the right to object as set out in Art. 21. Further information can be found at the end of this privacy policy.
  
  Further information on the handling of the transferred data can be found in the provider’s privacy policy at https://matomo.org/faq/general/faq_18254/.
  
• Matomo Tag Manager
  We use the Matomo Tag Manager on our website in a self-hosted (on-premise) version. The Tag Manager enables the central management and control of tracking codes and scripts, for example for web analysis or to measure the success of campaigns.
  
  Matomo Tag Manager itself does not process any personal data. It merely ensures that other services are loaded and executed. Which data may be collected and processed in this process depends on the services involved – in particular the web analytics tool Matomo, which is also operated locally on our servers.
  
  The use of the Matomo Tag Manager is based on our legitimate interest pursuant to Art. 6 (1) lit. f GDPR in the data protection-friendly, secure and efficient administration of services on our website.
  
  Further information on the handling of the transferred data can be found in the provider’s privacy policy at https://matomo.org/faq/general/faq_18254/.

Integration of external web services and processing of data outside the EU

On our website, we use active content from external providers, so-called web services. When you visit our website, these external providers may receive personal information about your visit to our website. This may involve data being processed outside the EU. You can prevent this by installing an appropriate browser plugin or by disabling the execution of scripts in your browser. This may result in functional restrictions on websites that you visit.

We use the following external web services:

• CloudFlare
  
  We use on our site the CloudFlare service from the company Cloudflare, Inc., 101 Townsend St, 94107 San Francisco, United States, e-mail: support@cloudflare.com, website: https://www.cloudflare.com/de-de/. Also, the data is processed in a third country for which there is no Commission adequacy decision. Therefore, the level of protection which is customary under the GDPR cannot be guaranteed for the data transmitted, since we cannot rule out the possibility that in the third country, e.g. authorities may have access to the data collected.
  
  The legal basis for the transmission of the personal data is Art. 6 para. 1 lit. f GDPR, namely our legitimate interest in processing. Our legitimate interest consists in achieving the purpose as outlined below.
  
  Cloudflare is a so-called content delivery network which, in addition to distributing the website across several servers, also provides security functions. In addition, Cloudflare acts as a reverse proxy for our website.
  
  In terms of the processing, you have the right to object as set out in Art. 21. More detailed information may be found at the end of this privacy policy.
  
  For further information on the handling of the data transmitted, please refer to the provider’s privacy policy at https://www.cloudflare.com/privacypolicy/.
  
• Google
  
  We use on our site the Google service from the company Google Ireland Ltd, Gordon House, Barrow Street, 4 Dublin, Ireland, e-mail: support-deutschland@google.com, website: http://www.google.com/. Also, the data is processed in a third country for which there is no Commission adequacy decision. Therefore, the level of protection which is customary under the GDPR cannot be guaranteed for the data transmitted, since we cannot rule out the possibility that in the third country, e.g. authorities may have access to the data collected.
  
  The legal basis for the transmission of personal data is your consent in accordance with Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR, which you gave on our website.
  
  We use Google to permit us to download further services from Google onto the website.
  
  As part of the order processing, personal data may also be transmitted to the servers of the company Google LLC, 1600 Amphitheatre Parkway, 94043 Mountain View, United States.
  
  You may withdraw your consent at any time. You can find more detailed information about withdrawing your consent either when giving such consent or at the end of this privacy policy.
  
  For further information on the handling of the data transmitted, please refer to the provider’s privacy policy at https://policies.google.com/privacy.
  
  
• Google APIs
  
  We use on our site the Google APIs service from the company Google Ireland Ltd, Gordon House, Barrow Street, 4 Dublin, Ireland, e-mail: support-deutschland@google.com, website: http://www.google.com/. Also, the data is processed in a third country for which there is no Commission adequacy decision. Therefore, the level of protection which is customary under the GDPR cannot be guaranteed for the data transmitted, since we cannot rule out the possibility that in the third country, e.g. authorities may have access to the data collected.
  
  The legal basis for the transmission of personal data is your consent in accordance with Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR, which you gave on our website.
  
  We use Google APIs to permit us to download further services from Google onto the website. Google Apis is a collection of interfaces for communication between the various Google services used on your website.
  
  As for the actual processing, the following data is collected either by the service or by us: IP address
  
  As part of the order processing, personal data may also be transmitted to the servers of the company Google LLC, 1600 Amphitheatre Parkway, 94043 Mountain View, United States.
  
  You may withdraw your consent at any time. You can find more detailed information about withdrawing your consent either when giving such consent or at the end of this privacy policy.
  
  For further information on the handling of the data transmitted, please refer to the provider’s privacy policy at https://policies.google.com/privacy.
  
  
• Google Fonts
  
  We use on our site the Google Fonts service from the company Google Ireland Ltd, Gordon House, Barrow Street, 4 Dublin, Ireland, e-mail: support-deutschland@google.com, website: http://www.google.com/. Also, the data is processed in a third country for which there is no Commission adequacy decision. Therefore, the level of protection which is customary under the GDPR cannot be guaranteed for the data transmitted, since we cannot rule out the possibility that in the third country, e.g. authorities may have access to the data collected.
  
  The legal basis for the transmission of personal data is your consent in accordance with Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR, which you gave on our website.
  
  The Google Fonts service is used to download fonts onto our site to permit us to display an optically improved version of the site to you.
  
  As part of the order processing, personal data may also be transmitted to the servers of the company Google LLC, 1600 Amphitheatre Parkway, 94043 Mountain View, United States.
  
  You may withdraw your consent at any time. You can find more detailed information about withdrawing your consent either when giving such consent or at the end of this privacy policy.
  
  For further information on the handling of the data transmitted, please refer to the provider’s privacy policy at https://policies.google.com/privacy.
  
• Google Maps
  
  On our website we use the maps service of the company Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter: Google Maps). Google Maps is integrated into the website via the Google API to permit location information to be viewed and displayed in the form of a map. For the map to be displayed, for technical reasons, the IP address needs to be processed by Google Maps. The provisions contained in the relevant section of this privacy policy relating to Google APIs apply with regard to the other web services included via Google APIs. To display the map, Google Maps downloads the additional Google service Google Fonts.
  
  The legal basis for the transmission of personal data is your consent in accordance with Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR, which you gave on our website.
  
  On our behalf, Google will use the information obtained via Google Maps to display the map to you. Using Google Maps, you can find us faster and more accurately than with mere non-interactive directions.
  
  Google will store the data relevant to the function of Google Maps for as long as is necessary to fulfil the web service that has been signed up for. The data is collected and stored in anonymised form. Should there nevertheless be a reference to a person, the data will be deleted immediately except where it is subject to statutory retention requirements. In any case, the data will be deleted after the retention period has expired.
  
  You can prevent the collection and transfer of personal data to Google (especially your IP address) as well as the processing of this data by Google by disabling the execution of script code in your browser, installing a script blocker in your browser or activating the “Do Not Track” setting of your browser. Google’s security and privacy policies can be found at https://policies.google.com/privacy.
  
  We have concluded a joint processing agreement with Google with regard to Google Maps. The content of this can be found at https://privacy.google.com/intl/de/businesses/mapscontrollerterms/.
  
• Gstatic
  
  We use the Gstatic service provided by Google Ireland Limited, Gordon House, Barrow Street, 4 Dublin, Ireland, email: support-deutschland@google.com, website: https://www.google.com/ on our website. Personal data is also transferred to the United States. With regard to the transfer of personal data to the USA, there is an adequacy decision on the EU-US Data Privacy Framework of the EU Commission within the meaning of Art. 45 GDPR (hereinafter: DPF – https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en ). . The operator of the service is certified under the DPF, so that the usual level of protection under the GDPR applies to the transfer.
  
  The legal basis for the processing of personal data is your consent pursuant to Art. 6 (1) lit. a GDPR or Art. 9 (2) lit. a GDPR, which you have given on our website.
  
  Gstatic is a background service used by Google to retrieve static content in order to reduce bandwidth usage and preload required catalogue files. In particular, the service loads background data for Google Fonts and Google Maps.
  
  Within the scope of order processing, personal data may also be transferred to the servers of Google LLC, 1600 Amphitheatre Parkway, 94043 Mountain View, United States. You can view the provider’s certification under the EU-US Data Privacy Framework at https://www.dataprivacyframework.gov/list.
  
  You can revoke your consent at any time. For more information on revoking your consent, please refer to the consent form itself or the end of this privacy policy. Further information on the handling of the transferred data can be found in the provider’s privacy policy at https://policies.google.com/privacy. The provider also offers an opt-out option at https://support.google.com/My-Ad-Center-Help/answer/12155451?hl=de.
  
• YouTube
  
  We use the YouTube service provided by Google Ireland Limited, Gordon House, Barrow Street, 4 Dublin, Ireland, email: support-deutschland@google.com, website: https://www.google.com/ on our website. Personal data is also transferred to the United States. With regard to the transfer of personal data to the USA, there is an adequacy decision on the EU-US Data Privacy Framework of the EU Commission within the meaning of Art. 45 GDPR (hereinafter: DPF – https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en ). . The operator of the service is certified under the DPF, so that the usual level of protection under the GDPR applies to the transfer.
  
  The legal basis for the processing of personal data is your consent in accordance with Art. 6 (1) lit. a GDPR or Art. 9 (2) lit. a GDPR, which you have given on our website. Videos from the YouTube platform are integrated into our website via the YouTube service. This integration allows us to display videos directly on our website. This allows visitors to the site to view information about our services without having to visit the YouTube platform.
  
  For processing purposes, the service or we collect the following data: data for displaying the stream, data on videos clicked on, playlists created, ratings and comments, information on the device used, the user’s IP address and browser, and other data from Google services for providing the video in accordance with Google’s privacy policy.
  
  If YouTube is active on our website and a video is played, our website establishes a connection to the servers of Google Ireland Limited and transmits the data required to display the stream or video. Within the scope of order processing, personal data may also be transferred to the servers of Google LLC, 1600 Amphitheatre Parkway, 94043 Mountain View, United States. Personal data is also transferred to the USA. With regard to the transfer of personal data to the USA, there is an adequacy decision on the EU-US Data Privacy Framework of the EU Commission within the meaning of Art. 45 GDPR (hereinafter: DPF – https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en).
  
  The operator of the service is certified under the DPF, meaning that the usual level of protection under the GDPR applies to the transmission. When YouTube videos are displayed on our website, YouTube may transmit and process information from other Google services in order to provide background services for the video, such as streaming data. For this purpose, data may also be transferred to the Google services Google Fonts, Google APIs, Google Video and Doubleclick. You can view the provider’s certification under the EU-US Data Privacy Framework at https://www.dataprivacyframework.gov/list.
  
  You can revoke your consent at any time. For more information on revoking your consent, please refer to the consent form itself or the end of this privacy policy. For more information on the handling of the transferred data, please refer to the provider’s privacy policy at https://policies.google.com/privacy.
  
  The provider also offers an opt-out option at https://support.google.com/My-Ad-Center-Help/answer/12155451?hl=de.

• Mapbox
  
  Our website uses Mapbox Tiles on some subpages to display interactive maps. The Mapbox Tiles API is a map service provided by Mapbox Inc. (Mapbox). By using the Mapbox Tiles API, information about the use of this website, including your IP address, may be transmitted to Mapbox in the U.S.A.When you visit a page that contains Mapbox Tiles maps, your browser establishes a direct connection with Mapbox’s servers.
  
  The map content is transmitted by Mapbox directly to your browser, which then integrates it into the website. Therefore, we have no control over the amount of data collected by Mapbox in this way. If you do not wish Mapbox to collect, process or use data about you via our website, you can disable JavaScript in your browser settings. In this case, however, you will not be able to use the map display.
  
  For further information on the purpose and scope of such data collection and on the further processing and use of the data by Mapbox, as well as your rights in this regard and the settings options for the protection of your privacy, please refer to Mapbox’s privacy policy at https://www.mapbox.com/privacy/. It states there, inter alia, that they store the visitor’s IP address, the address of the page visited, the date and time and the pages accessed. According to Mapbox, it uses this information solely to improve the service provided for diagnostic and analytical purposes.
  
  Mapbox does not share personal data with third parties. You also have the option to prevent cookies from Mapbox by disabling third-party cookies in your browser settings.
  

Information on the use of cookies

• What personal data is collected and to what extent is it processed?
  We integrate and use cookies on various pages to enable certain functions of our website and to integrate external web services. So-called “cookies” are small text files that your browser can store on the device you use to access the site. These text files contain a character string that clearly identifies the browser whenever you return to our website. The process of saving a cookie file is also called “setting a cookie”. Cookies can for such purposes be set both by the website itself and by external web services. Cookies are set by our website or the external web services in order to maintain full functionality of our website, to improve usability or to pursue the purpose specified with your consent. Cookie technology also allows us to recognise individual visitors by pseudonyms, e.g. a unique or random ID, permitting us to offer more personalised services. Details are given in the following table.
  
• Legal basis for the processing of personal data
  Insofar as cookies are processed on the basis of consent in accordance with Art. 6 para. 1 lit. a GDPR, this consent is also deemed to be consent within the meaning of Section 25 para. 1 TTDSG [Telecommunications-Telemedia Data Protection Act] as far as concerns the setting of the cookie on the user’s device. Should any other legal basis under the GDPR be specified (e.g. for the performance of a contract or for compliance with legal obligations), the cookie is stored or set on the basis of an exception in accordance with Section 25 (2) TTDSG. This is the case “where the sole purpose of storing information on the end user’s terminal equipment or the sole purpose of accessing information already stored on the end user’s terminal equipment is to ensure the transmission of a communication over a public telecommunications network” or “where the storage of information on the end user’s terminal equipment or the access to information already stored on the end user’s terminal equipment is strictly necessary to enable the provider of a teleservice to provide a teleservice explicitly requested by the user”. The relevant legal basis can be found in the cookie table provided further down in this section.
  
• Purpose of the data processing
  Cookies are set by our website or the external web services in order to maintain full functionality of our website, to improve usability or to pursue the purpose specified with your consent. Cookie technology also allows us to recognise individual visitors by pseudonyms, e.g. a unique or random ID, permitting us to offer more personalised services. Details are given in the following table.
  
• Duration of storage
  Our cookies are stored until they are deleted in your browser or, if they are session cookies, until the session has expired. Details are given in the following table.
  
• Option for objection and erasure
  Should you so wish, you can set your browser in such a way as to generally prevent the setting of cookies. You can then either decide on a case-by-case basis whether to accept cookies or you can accept cookies in principle. Cookies can be used for various purposes, e.g. to recognise the fact that the device you use to access our website is already connected to it (permanent cookies) or to store recently viewed offers (session cookies). If you have expressly given us permission to process your personal data, you may withdraw this consent at any time. Please note that such a withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

Your rights

Right to information

You have the right to request confirmation as to whether we process your personal data. If this is the case, you have the right to information specified in Art. 15 (1), (2) GDPR. We will also be happy to provide you with a copy of the data, provided that this does not affect the rights and freedoms of other persons (cf. Art. 15 (4) GDPR).

Right to rectification

In accordance with Art. 16 GDPR, you have the right to have any incorrect personal data (such as address, name, etc.) stored by us corrected at any time. You can also request that the data stored by us be completed at any time. Any necessary adjustments will be made immediately.

Right to erasure

Pursuant to Art. 17 (1) GDPR, you have the right to have us delete the personal data collected about you if

• the data is no longer needed;
• the legal basis for processing has ceased to exist without replacement due to the withdrawal of your consent;
• you have objected to the processing and there are no overriding legitimate reasons for the processing;
• your data is being processed unlawfully;
• a legal obligation requires this
• collection has taken place in accordance with Art. 8(1) GDPR.

According to Art. 17(3) GDPR, this right does not apply if

• the processing is necessary for exercising the right of freedom of expression and information;
• your data has been collected on the basis of a legal obligation;
• the processing is necessary for reasons of public interest;
• the data is necessary for the establishment, exercise or defence of legal claims.

Right to restriction of processing

Pursuant to Art. 18(1) GDPR, you have the right to request the restriction of the processing of your personal data in certain cases.

This is the case if:

• the accuracy of the personal data is disputed by you;
• the processing is unlawful and you do not consent to its erasure;
• the data is no longer required for the processing purpose, but the collected data serves to assert, exercise or defend legal claims;
• an objection to the processing has been lodged in accordance with Art. 21(1) GDPR and it is still unclear which interests prevail.

Right of revocation

If you have given us your express consent to the processing of your personal data (Art. 6 (1) (a) GDPR), you can revoke this consent at any time. Please note that this does not affect the lawfulness of the processing carried out on the basis of the consent until revocation.

Right to object

If, due to a particular situation, you no longer wish us to process your data, you can object at any time to data that we have collected on the basis of Art. 6 (1) lit. f GDPR (legitimate interest) in accordance with Art. 21 GDPR.

Right to data portability

Upon request, we will provide you or a representative designated by you with the following data in a commonly used machine-readable format in accordance with Art. 20 (1) GDPR:

Data collected on the basis of express consent in accordance with Art. 6 (1) (a) GDPR or Art. 9 (2) (a) GDPR;
Data that we have received from you in accordance with Art. 6 (1) lit. b GDPR within the framework of existing contracts; insofar as the data has been processed within the framework of an automated procedure.

How can you exercise your rights?

You can exercise your rights at any time by contacting us using the contact details below:

ZENNER Connect GmbH
Nikolaus-Otto Str. 25
70771 Leinfelden – Echterdingen
E-mail: info@zenner-connect.com

Right to lodge a complaint with a supervisory authority pursuant to Art. 77(1) GDPR

If you suspect that your data is being processed unlawfully on our website, you can, of course, seek legal clarification of the issue at any time. In addition, you have every other legal option available to you. Irrespective of this, you have the option of contacting a supervisory authority in accordance with Art. 77 (1) GDPR. You have the right to lodge a complaint pursuant to Art. 77 GDPR in the EU Member State of your residence, your place of work and/or the place of the alleged infringement, i.e. you can choose the supervisory authority to which you wish to lodge your complaint from the above-mentioned locations. The supervisory authority to which the complaint was lodged will then inform you of the status and results of your submission, including the possibility of a judicial remedy in accordance with Art. 78 GDPR.