Privacy
Privacy policy
1. Privacy at a glance
General information
The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to identify you personally. For detailed information on data protection, please refer to our privacy policy set out below.
Data collection on this website
Who is responsible for data collection on this website?
Data on this website is processed by the website operator. You can find the operator’s contact details in the “Information about the controller” section of this privacy policy.
How do we collect your data?
Some data is collected when you provide it to us. This may include, for example, data you enter in a contact form.
Other data is collected by our IT systems automatically or with your consent when you visit the website. This is primarily technical data, such as your internet browser, operating system or the time of your visit. This data is collected automatically as soon as you access this website.
What do we use your data for?
Some data is collected to ensure that the website functions correctly. Other data may be used to analyse your usage behaviour. If contracts can be concluded or initiated through the website, the data submitted will also be processed for quotations, orders or other business enquiries.
What rights do you have regarding your data?
You have the right to obtain information free of charge at any time about the origin, recipients and purpose of your stored personal data. You also have the right to request that this data be corrected or erased. If you have given consent to data processing, you may withdraw it at any time with effect for the future. You also have the right, under certain circumstances, to request restriction of the processing of your personal data. In addition, you have the right to lodge a complaint with the competent supervisory authority.
You can contact us at any time about this or any other questions relating to data protection.
2. Hosting
We host the content of our website with the following provider:
IONOS
The provider is IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany (hereinafter “IONOS”). When you visit our website, IONOS records various log files, including your IP addresses. For details, please refer to the IONOS privacy policy: https://www.ionos.de/terms-gtc/terms-privacy.
We use IONOS on the basis of Article 6(1)(f) GDPR. We have a legitimate interest in providing our website as reliably as possible. Where consent has been requested, processing is carried out exclusively on the basis of Article 6(1)(a) GDPR and Section 25(1) TDDDG, insofar as consent covers the storage of cookies or access to information on the user’s device (e.g. device fingerprinting) within the meaning of the TDDDG. Consent may be withdrawn at any time.
Data processing on our behalf
We have entered into a data processing agreement for the use of the service mentioned above. This agreement is required by data protection law and ensures that the provider processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.
Content Delivery Network (CDN) – Cloudflare
This website uses the IONOS Content Delivery Network (CDN), which is based on infrastructure provided by Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA (“Cloudflare”). A CDN is a service that enables website content, particularly large media files such as graphics or scripts, to be delivered more quickly and securely using geographically distributed servers connected via the internet.
We use Cloudflare on the basis of our legitimate interest in providing our website as reliably and securely as possible (Article 6(1)(f) GDPR).
When the CDN is used, a connection is established between your browser and Cloudflare’s servers. Technically necessary data is transmitted, including your IP address, the date and time of the request, the volume of data transferred, your browser type and version, and your operating system. Cloudflare also sets the technically necessary cookie __cfruid, which is used to manage routing within the CDN network and does not allow conclusions to be drawn about your identity.
As Cloudflare, Inc. is based in the USA, a transfer of personal data to a third country outside the EU/EEA cannot be ruled out. Cloudflare has committed to the provisions of the EU-US Data Privacy Framework and/or agreed to the European Commission’s standard contractual clauses as an additional safeguard to ensure an adequate level of data protection. Further information is available in Cloudflare’s privacy policy: https://www.cloudflare.com/privacypolicy/
A data processing agreement pursuant to Article 28 GDPR is in place with IONOS as the intermediary for the CDN service.
3. General information and mandatory disclosures
Data protection
The operators of this website take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data protection requirements and this privacy policy.
Various personal data is collected when you use this website. Personal data is data that can be used to identify you personally. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this is done.
Please note that data transmission over the internet, for example when communicating by email, may have security vulnerabilities. Complete protection of data against access by third parties is not possible.
Information about the controller
The controller responsible for data processing on this website is:
Thyrd GmbH
Auf der Koppel 10
21521 Aumühle
Phone: +491714167006
Email: info@thyrd.de
The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data, such as names, email addresses or similar information.
Retention period
Unless a more specific retention period is stated in this privacy policy, we retain your personal data until the purpose for processing it no longer applies. If you submit a valid request for erasure or withdraw your consent to data processing, your data will be erased unless we have other legally permissible grounds for retaining your personal data, such as retention periods under tax or commercial law. In the latter case, the data will be erased once those grounds no longer apply.
General information on the legal bases for data processing on this website
If you have consented to data processing, we process your personal data on the basis of Article 6(1)(a) GDPR or, where special categories of data under Article 9(1) GDPR are processed, Article 9(2)(a) GDPR. If you have expressly consented to the transfer of personal data to third countries, processing is also based on Article 49(1)(a) GDPR.
If you have consented to the storage of cookies or access to information on your device, for example through device fingerprinting, processing is additionally based on Section 25(1) TDDDG. Consent may be withdrawn at any time. If your data is necessary for the performance of a contract or to take steps prior to entering into a contract, we process it on the basis of Article 6(1)(b) GDPR. We also process your data on the basis of Article 6(1)(c) GDPR where this is necessary to comply with a legal obligation. Data processing may also be based on our legitimate interest under Article 6(1)(f) GDPR. The following sections of this privacy policy explain the legal bases that apply in each case.
Recipients of personal data
We work with various external parties in the course of our business activities. This sometimes requires personal data to be transferred to these external parties. We only disclose personal data to external parties where this is necessary for the performance of a contract, where we are legally obliged to do so, for example when disclosing data to tax authorities, where we have a legitimate interest in disclosure under Article 6(1)(f) GDPR, or where another legal basis permits disclosure. When using processors, we only disclose our customers’ personal data on the basis of a valid data processing agreement. In the case of joint processing, a joint processing agreement is concluded.
Withdrawal of your consent to data processing
Many data processing operations are only possible with your express consent. You may withdraw consent you have already given at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.
Right to object to data collection in particular cases and to direct marketing (Article 21 GDPR)
Where data is processed on the basis of Article 6(1)(e) or (f) GDPR, you have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data. This also applies to profiling based on these provisions. The relevant legal basis for processing is set out in this privacy policy. If you object, we will no longer process the personal data concerned unless we can demonstrate compelling legitimate grounds for processing that override your interests, rights and freedoms, or unless processing serves the establishment, exercise or defence of legal claims (objection under Article 21(1) GDPR).
Where your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for such marketing. This also applies to profiling to the extent that it is related to such direct marketing. If you object, your personal data will no longer be used for direct marketing purposes (objection under Article 21(2) GDPR).
Right to lodge a complaint with the competent supervisory authority
In the event of infringements of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, particularly in the Member State of their habitual residence, place of work or the place of the alleged infringement. This right to complain is without prejudice to any other administrative or judicial remedy.
Right to data portability
You have the right to receive data that we process by automated means on the basis of your consent or in performance of a contract, or to have it provided to a third party, in a commonly used, machine-readable format. If you request direct transfer of the data to another controller, this will only be done where technically feasible.
Access, rectification and erasure
Within the scope of applicable statutory provisions, you have the right at any time to obtain information free of charge about your stored personal data, its origin and recipients, and the purpose of processing, as well as, where applicable, a right to have this data corrected or erased. You can contact us at any time about this or any other questions relating to personal data.
Right to restriction of processing
You have the right to request restriction of the processing of your personal data. You can contact us at any time to do so. The right to restriction of processing applies in the following cases:
- If you contest the accuracy of the personal data we hold about you, we generally need time to verify it. You have the right to request restriction of the processing of your personal data for the duration of this verification.
- If the processing of your personal data was or is unlawful, you may request restriction of processing instead of erasure.
- If we no longer need your personal data, but you require it for the exercise, defence or establishment of legal claims, you have the right to request restriction of processing instead of erasure.
- If you have lodged an objection under Article 21(1) GDPR, your interests must be weighed against ours. Until it has been determined whose interests prevail, you have the right to request restriction of the processing of your personal data.
Where processing of your personal data has been restricted, that data may, apart from storage, only be processed with your consent, for the establishment, exercise or defence of legal claims, for the protection of the rights of another natural or legal person, or for reasons of important public interest of the European Union or a Member State.
SSL or TLS encryption
This website uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or enquiries you send to us as the website operator. You can recognise an encrypted connection when the address in your browser changes from “http://” to “https://” and a padlock icon appears in the browser’s address bar.
When SSL or TLS encryption is enabled, the data you transmit to us cannot be read by third parties.
4. Analytics tools and advertising
IONOS WebAnalytics
This website uses the analytics services of IONOS WebAnalytics (hereinafter “IONOS”). The provider is 1&1 IONOS SE, Elgendorfer Straße 57, D – 56410 Montabaur, Germany. Analytics using IONOS may include visitor numbers and behaviour, such as page views, visit duration and bounce rates, visitor sources (i.e. the website from which visitors arrive), visitor locations and technical data, such as browser and operating system versions. For this purpose, IONOS stores the following data in particular:
- Referrer (previously visited website)
- Requested website or file
- Browser type and version
- Operating system used
- Device type used
- Time of access
- IP address in anonymised form (used only to determine the location of access)
According to IONOS, data is collected in fully anonymised form so that it cannot be traced back to individual persons. IONOS WebAnalytics does not store cookies.
Data is stored and analysed on the basis of Article 6(1)(f) GDPR. The website operator has a legitimate interest in statistically analysing usage behaviour to optimise both the website and its advertising. Where consent has been requested, processing is carried out exclusively on the basis of Article 6(1)(a) GDPR and Section 25(1) TDDDG, insofar as consent covers the storage of cookies or access to information on the user’s device, such as device fingerprinting, within the meaning of the TDDDG. Consent may be withdrawn at any time.
For further information on data collection and processing by IONOS WebAnalytics, please refer to the IONOS privacy policy at: https://www.ionos.de/terms-gtc/datenschutzerklaerung/
Data processing on our behalf
We have entered into a data processing agreement for the use of the service mentioned above. This agreement is required by data protection law and ensures that the provider processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.
