1. Data protection at a glance
Data collection on our website
Who is responsible for data collection on this website?
The data processing on this website is carried out by the website operator. The contact details can be found on the Imprint page of this website.
How do we collect your data?
On one hand, your data is collected by you directly communicating it to us. This can be data that you enter in a contact form, for example.
Other data is automatically collected by our IT systems when you visit the website. This is primarily technical data (e.g. Internet browser, operating system, or time of the page visit). This data is collected automatically as soon as you enter our website.
Why do we need your data?
Some of the data is collected to ensure that the website remains error-free. Other data may be used to analyse your user behaviour.
What rights do you have regarding your data?
You have the right at any time (and free of charge) to receive information about the origin, recipient, and purpose of your stored personal data. You also have the right to request the correction, blockage, or deletion of this data. You can contact us at any time at the address provided on the Imprint page for this and other questions on the subject of data protection. Furthermore, you have the right to appeal to the responsible supervisory authority.
Analysis Tools and Third-Party Provider Tools
2. General Information and Mandatory Information
Please note that data transmission over the Internet (e.g. e-mail communication) can be subject to security vulnerabilities. Complete protection of the data from access by third-parties is not possible.
Information on the Responsible Body
The responsible body for the data processing of this website is:
Industriering Ost 66
Telephone: +49 (0) 2152 / 8942 - 0
The responsible body is the legally-named person who alone (or, with the cooperation of others) decides on the purposes and means of processing personal data (e.g. names, e-mail addresses, etc.).
Name and Address of the Data Protection Registrar
The name and address of the Data Protection Registrar is:
Dr. Patrick Schweisthal
Revocation of your Consent to Data Processing
Many data processing operations are only possible with your express consent. You can revoke your consent at any time. For this purpose, an informal notification by e-mail to us is sufficient. The legality of the data processing operations already in place remains unaffected by the revocation.
Right of Appeal to the Responsible Supervisory Authority
In the event of breaches of data protection law, the person concerned shall have the right to file a complaint with the responsible supervisory authority. The responsible supervisory authority for data protection issues is the data protection registrar of the federal state in which our company is based. A list of data protection registrars and their contact details can be found on the following site: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.
Right of Data Portability
You have the right to receive data which we process automatically, either on the basis of your consent or in fulfilment of a contract, sent directly to you or to a third-party, in a common, electronic format. If you request the direct transfer of the data to another responsible person, then this will only be done as far as it is technically feasible.
SSL or TLS Encryption
This site uses either SSL or TLS encryption for security reasons, and to protect the transmission of confidential content, such as orders or requests that you send to us. An encrypted connection is indicated by your browser's address bar changing from "http://" to "https://" and the lock icon in your browser bar.
If either SSL or TLS encryption is enabled, the data you submit to us will not be able to be read by third-parties.
Disclosure, Blocking, Deletion
Within the framework of the applicable legal provisions, you have the right (at any time) to free-and-open information about your stored personal data, its origin, recipient, and the purpose of data processing and, if applicable, a right to the correction, blocking, or the deletion of this data. You can contact us at any time at the address provided on the Imprint page for this and other questions on the subject of data protection.
3. Data Collection on our Website
Some of our internet pages use so-called cookies. Cookies do not harm your computer and do not contain viruses. Cookies serve to make our offer more user-friendly, more effective, and secure. Cookies are small text files which are stored on your computer by your web browser.
Most of the cookies we use are called "session cookies". They are automatically deleted at the end of your visit. Other cookies remain stored on your device until you delete them. These cookies enable us to recognise your browser on your next visit.
You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, accept cookies for certain cases, or generally exclude them and activate the automatic deletion of cookies when closing your web browser. Disabling cookies may restrict the functionality of this website.
Server Log Files
The provider of the pages automatically collects and stores information in server log files, which your browser automatically transmits to us. These are:
- Browser Type and Browser Version
- Operating System Used
- Referrer URL
- Hostname of the Accessing Computer
- Time of the Server Request
- IP Address
This data will not be merged with any other data sources.
The basis for data processing is Art. 6 para. 1 lit. f DSGVO, which permits the processing of data for the fulfilment of a contract or pre-contractual measures.
If you send kothes enquiries via the contact form, your details from the enquiry form (including the contact data you provide there) will be stored by kothes for the purpose of processing the enquiry and in the event of follow-up questions. We do not share this data without your consent.
The processing of the data entered on the contact form is therefore carried out exclusively on the basis of your consent (Art. 6 para. 1 lit. a DSGVO). You can revoke your consent at any time. For this purpose, an informal notification by e-mail to us is sufficient. The legality of the data processing operations already in place remains unaffected by the revocation.
Entered data remains with us until you request deletion, revoke your consent to storage or the purpose for data storage is no longer legitimate (e.g. after the completed processing of your application). Mandatory statutory provisions – in particular, retention periods – remain unaffected.
Registration (e.g. smart space web portal, smart space app, and smarty AR app)
You can register on our website to use additional features on the site. We use the data entered strictly for the purpose of using the respective offer or service for which you have registered. The mandatory information requested during registration must be provided in full. Otherwise, we will not accept the registration.
In the case of important changes, for example, within the scope of our services or in the case of technically necessary changes, we will use the e-mail address you provided during registration to inform you.
The processing of the data entered when registering is carried out exclusively on the basis of your consent (Art. 6 para. 1 lit. a GDPR). You can revoke your consent at any time. For this purpose, an informal notification by e-mail to us is sufficient. The legality of the data processing operations already in place remains unaffected by the revocation.
The data collected during registration will be stored by us as long as you are registered on our website and will subsequently be deleted. Legal retention periods remain unaffected.
Processing of Data (Customer and Contract Data)
We collect, process, and use personal data only to the extent necessary for the establishment, content, or modification of the legal relationship (inventory data). This is done on the basis of Art. 6 para. 1 lit. b GDPR, which permits the processing of data for the fulfilment of a contract or pre-contractual measures. We collect, process, and use personal data about the use of our internet pages (usage data) only to the extent necessary to enable the user to make use of the service or to bill the user.
The collected customer data will be deleted after completion of the order or at the conclusion of the business relationship. Legal retention periods remain unaffected.
4. Social Media
We use various social media buttons in order to provide a visually and functionally appealing website.
The social media icons in the footer of our website – evident by the logos of the corresponding social networks (Facebook, Twitter, Xing, LinkedIn und YouTube) – are merely static links, which point to our company channels on the respective social networks.
All other social media buttons are generally being utilised in the blog, news or event sections of our website. These buttons are so called sharing buttons, which allow users to share our website content on the respective social media networks. All sharing buttons are embedded according to current european data privacy law using the safe-sharing tool "Shariff". You can find detailed information concerning individual sharing buttons that have been implemented with "Shariff" in the paragraphs below.
Facebook (Like & Share-Button)
Our website includes the safe-sharing plugin "Shariff" for the use of the social network Facebook. The Shariff plugin can be recognized by the Facebook logo or the Like button on our site.
If you do not want Facebook to associate your visit to our site with your Facebook account, please log out of your Facebook account.
Our website includes the safe-sharing plugin "Shariff" for the use of the social network Twitter.
Your privacy preferences with Twitter can be modified in your account settings at https://twitter.com/account/settings.
Our website includes the safe-sharing plugin "Shariff" for the use of features provided by the Xing network.
When you visit our site, no connection between your browser and Xing servers is established and no data is transferred. Only when you access XING features or click on the Xing social buttons, your browser establishes a direct connection to the XING servers. To the best of our knowledge, no personal data is stored in the process. In particular, no IP addresses are stored nor is usage behavior evaluated.
Our website includes the safe-sharing plugin "Shariff" for the use of functions of the LinkedIn network.
When you visit our site, no connection between your browser and LinkedIn servers is established and no data is transferred. Only when you access LinkedIn features or click on the LinkedIn social buttons, your browser establishes a direct connection to the LinkedIn servers. LinkedIn is then informed that you have visited our web pages from your IP address. If you use the LinkedIn “Recommend” button and are logged into your LinkedIn account, it is possible for LinkedIn to associate your visit to our website to your user account. We would like to point out that, as the provider of these pages, we have no knowledge of the content of the data transmitted or how it will be used by LinkedIn.
5. Analytics and advertising
This website uses Google Analytics, a web analytics service. It is operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Google Analytics uses so-called "cookies". These are text files that are stored on your computer and that allow an analysis of the use of the website by you. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there.
Google Analytics cookies are stored based on Art. 6 (1) (f) DSGVO. The website operator has a legitimate interest in analyzing user behavior to optimize both its website and its advertising.
We have activated the IP anonymization feature on this website. Your IP address will be shortened by Google within the European Union or other parties to the Agreement on the European Economic Area prior to transmission to the United States. Only in exceptional cases is the full IP address sent to a Google server in the US and shortened there. Google will use this information on behalf of the operator of this website to evaluate your use of the website, to compile reports on website activity, and to provide other services regarding website activity and Internet usage for the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with any other data held by Google.
You can prevent these cookies being stored by selecting the appropriate settings in your browser. However, we wish to point out that doing so may mean you will not be able to enjoy the full functionality of this website. You can also prevent the data generated by cookies about your use of the website (incl. your IP address) from being passed to Google, and the processing of these data by Google, by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en.
Google AdWords and Google Conversion Tracking
This website uses Google AdWords. AdWords is an online advertising program from Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, United States ("Google").
As part of Google AdWords, we use so-called conversion tracking. When you click on an ad served by Google, a conversion tracking cookie is set. Cookies are small text files that your internet browser stores on your computer. These cookies expire after 30 days and are not used for personal identification of the user. Should the user visit certain pages of the website and the cookie has not yet expired, Google and the website can tell that the user clicked on the ad and proceeded to that page.
Each Google AdWords advertiser has a different cookie. Thus, cookies cannot be tracked using the website of an AdWords advertiser. The information obtained using the conversion cookie is used to create conversion statistics for the AdWords advertisers who have opted for conversion tracking. Customers are told the total number of users who clicked on their ad and were redirected to a conversion tracking tag page. However, advertisers do not obtain any information that can be used to personally identify users. If you do not want to participate in tracking, you can opt-out of this by easily disabling the Google Conversion Tracking cookie by changing your browser settings. In doing so, you will not be included in the conversion tracking statistics.
Conversion cookies are stored based on Art. 6 (1) (f) DSGVO. The website operator has a legitimate interest in analyzing user behavior to optimize both its website and its advertising.
If you would like to receive our newsletter, we require a valid email address as well as information that allows us to verify that you are the owner of the specified email address and that you agree to receive this newsletter. No additional data is collected or is only collected on a voluntary basis. We only use this data to send the requested information and do not pass it on to third parties.
We will, therefore, process any data you enter onto the contact form only with your consent per Art. 6 (1) (a) DSGVO. You can revoke consent to the storage of your data and email address as well as their use for sending the newsletter at any time, e.g. through the "unsubscribe" link in the newsletter. The data processed before we receive your request may still be legally processed.
The data provided when registering for the newsletter will be used to distribute the newsletter until you cancel your subscription when said data will be deleted. Data we have stored for other purposes (e.g. email addresses for the smart space) remain unaffected.
You can find out more about our handling of applicant data in our privacy statement for applicants.
8. Storage and Transfer of Data
How long will your data be stored?
We will store the data you provide only as long as we require them to fulfil the request for which you transferred your data, or as long as required to comply with legal requirements.
Otherwise we will never pass your personal data to third parties unless requested to do so by you, nor will be sell or rent out your data. We do, however, reserve the right to reveal information about you if we are legally required to do so, or if we receive a demand for data handover from authorities or criminal prosecution bodies who are acting within the law.
9. Updates and Modifications
We may modify or update parts of the data privacy statement without prior notice. Please always check our data privacy statement before taking advantage of what we offer; that way, you will be up-to-date whenever there are changes or updates.
Data privacy statement as of: May 2018.