Server log files
Furthermore, every time you visit our website, your browser automatically transmits the following information to us: your IP address, identification (manufacturer, version, operating system), and language settings of your web browser, the time of your visit and sub-pages visited on our website, your referrer URL (i.e. the URL of the page from which you are visiting us), as well as the data volume accrued during your visit to our website (hereinafter “access data”). We process your access data to ensure system security (e.g. to fend off hacker attacks) and to compile usage statistics. These processing operations are carried out on the basis of our legitimate overriding interest (Art. 6(1)(1)(f) EU GDPR). You have neither a legal nor contractual obligation to provide your access data, nor is this necessary for the conclusion of a contract. However, you must provide us with your access data so that you can access our website and use the offers and services provided on it. The server log files are stored for one year and are then automatically deleted or overwritten.
Social media plug-ins – YouTube
We use YouTube on our website. This is a video portal of YouTube LLC, 901 Cherry Ave., 94066 San Bruno, CA, USA, hereinafter only referred to as “YouTube”.
YouTube is a subsidiary of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA, hereinafter only referred to as “Google”.
We use YouTube in conjunction with the privacy-enhanced mode to show you videos. According to YouTube, the privacy-enhanced mode has the effect that the data described in more detail below is only transmitted to the YouTube server when you actually start a video; i.e. all of these plug-ins are deactivated as long as you do not activate the respective click box by clicking it. Your IP address and your referrer URL (hereinafter “social media data”) are only transmitted to YouTube or Google when you click the field. This also applies if you do not have your own account with Google or are not logged in. If you are logged in on Google, your social media data collected by us will be directly assigned to your existing Google account. We recommend that you log out regularly after using a social network, but especially before activating the click box, as you can then avoid being personally assigned to your Google profile.
We use YouTube to show you videos about our products, for example, so that we can improve our offer and make it more interesting for you as a user. The legal basis for our use of YouTube is Art. 6(1)(1)(f) EU GDPR. If personal data is transferred to the USA, an adequate level of data protection is ensured by appropriate safeguards. EU standard contractual clauses have been concluded with the provider for this purpose. Copies can be obtained from the controller or directly from the European Union under the following link:
You have no legal or contractual obligation to provide your social media data, nor is this necessary to conclude a contract.
YouTube/Google stores your social media data in user profiles created on you in order to process them for the purposes of advertising, market research, and/or demand-oriented design of their websites. This evaluation is particularly (also for users who are not logged in) for the purpose of presenting need-based advertising and to inform other users of the social network about your activities on our website. You have a right of objection to the creation of these user profiles, whereby you must contact the respective provider to exercise this right.
We have no influence on the collected data and data processing procedures of YouTube/Google, nor are we aware of the full extent of data collection, the purposes of processing or the storage periods. We also have no information on the deletion of the data collected by YouTube/Google. Further information on the purpose and scope of their data collection can be found in the data protection declarations listed below. You will also receive further information on your rights and optional settings to protect your privacy here:
- Google Inc., 1600 Amphitheater Parkway, Mountainview, California 94043, USA. The provider provides further information on data processing here:
- YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. The provider provides further information on data processing here:
a) Categories of data concerned, recipients, processing purposes
Your IP address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area beforehand. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there. If personal data is transferred to the USA, an adequate level of data protection is ensured by appropriate safeguards. EU standard contractual clauses have been concluded with the provider for this purpose. Copies can be obtained from the controller or directly from the European Union under the following link:
We would like to point out that Google Analytics has been extended on our websites by the AnonymizeIP plug-in in order to guarantee an anonymized recording of your IP address even in these exceptional cases.
The IP address transmitted by your browser within the framework of Google Analytics is not merged with other Google data.
b) Legal basis, storage period
The legal basis for the use of Google Analytics is Art. 6 (1)(a) or (f) EU GDPR. Sessions are regularly terminated after 30 minutes of inactivity and campaigns after six months; data on campaigns can be stored for a maximum period of two years.
c) Right of appeal
If Google Analytics processes your data in personalized form, you can object to this at any time; in this case the processing will be stopped immediately.
You can send your informal objection to our data protection officer: legal(at)krueger.de.
In particular, you can also exercise your right of objection by preventing the storage of cookies used by Google Analytics by activating the corresponding setting in your browser software; further information on this can be found here:
Internet Explorer™: http://windows.microsoft.com/de-DE/windows-vista/Block-or-allow-cookies
However, we would like to point out that in this case you may not be able to use all the website’s functions to their full extent. You can also prevent the data generated by the cookie and related to your use of the website (including your IP address) from being passed on to Google and the processing of this data by Google by downloading and installing the browser plug-in available under the following link: http://tools.google.com/dlpage/gaoptout?hl=de.
Please note that by doing so, you will leave our website.
d) Information about Google
Google Dublin, Google Ireland Ltd.
Gordon House, Barrow Street, Dublin 4, Ireland
Fax: +353 (1) 436 1001.
You may contact us directly via a contact form provided on our website. If you do so, you must provide your name, email address, and a subject for your request. We also offer you the option of contacting us directly via email. If you contact us via the web form, we will also collect your IP address and the time at which you sent us your message.
You have neither a legal nor contractual obligation to provide your aforementioned data, nor is this necessary for the conclusion of a contract. Without this data, however, it is not possible to process your request. We use the information you send us via the contact form exclusively to process your request. The legal basis for this processing is Art. 6(1)(1)(b) EU GDPR. We process your IP address and the time of your request on the basis of Art. 6(1)(1)(f) EU GDPR in our legitimate interest in order to identify and ward off automated access and hacker attacks. In principle, we delete this data one week after answering or otherwise dealing with your inquiry; in individual cases, however, we retain this data for a longer period if we are legally entitled or obliged to do so (e.g. by virtue of retention periods under commercial or tax law).
Rights of data subjects
In the following paragraphs, we would like to inform you about the further rights to which you as a data subject are entitled in accordance with Art. 15–21 and Art. 77(1) EU GDPR. To assert these rights, you can contact our data protection officer by email at legal(at)krueger.de.
a) Right to information
In accordance with Art. 15 EU GDPR, you have the right to obtain information on the data processing of the processed data. Within this framework, you also have the right to receive a copy of your personal data processed by us, in accordance with Art. 15(3–4) EU GDPR.
b) Right of rectification
In accordance with Art.16 EU GDPR you have the right to ask us to correct or complete your personal data.
c) Right of deletion
In accordance with Art. 17(1) EU GDPR, you have the right to demand that we delete your personal data. If we have published your personal data, you also have the right, in accordance with Art. 17(2) EU GDPR, to demand that we inform other responsible parties of your request to delete all links to and/or copies or replications of your personal data.
d) Right to restrict processing
In accordance with Art. 18 EU GDPR, you have the right to demand that we restrict the processing of your personal data.
e) Right to data portability
Pursuant to Art. 20 EU GDPR, you have the right to receive the personal data concerning you that you have provided to us, in a structured, common, and machine-readable format and to request that these data be transferred to another controller.
f) Revocation of your consent
If you have given us your consent to process your personal data, you can revoke this consent at any time, in total or with regard to individual processing purposes, without giving reasons, in all circumstances.
Please note that a lawful processing of your personal data, which took place up to the time of your revocation, does not become retroactively illegal by this revocation.
You can revoke any consent you have given us for the processing purposes listed in paragraphs 1–9 above, in particular by clicking on the hyperlinks provided there. You can also send your revocation by email to legal(at)krueger.de.
In the event of revocation of your consent given for a particular service, you will no longer be able to use the corresponding service; apart from this you will not suffer any further disadvantages.
g) Right of objection
Pursuant to Art. 21 EU GDPR, you have the right to object to the processing of your personal data by us if this is done for the purpose of direct marketing and/or on the basis of a “legitimate interest” within the meaning of Art. 6 (1)(1)(f) EU GDPR.
h) Complaints to supervisory authorities
In accordance with Art. 77(1) EU GDPR, you have the right to lodge a complaint with a supervisory authority against the processing of your personal data by us, if you believe that the processing of your personal data violates data protection regulations.
Landesbeauftragte für Datenschutz und Informationsfreiheit
Postfach 20 04 44
In addition, you may assert other legal remedies to which you are entitled (e.g. courts or authorities).
Version: February 2020