www.troeger-services.com

Data protection information

Name and address of the person responsible

The controller within the meaning of the EU General Data Protection Regulation (GDPR) and other national data protection laws of the member states as well as other data protection regulations is

André Tröger
Managing Director of Tröger IT Business Consulting GmbH
Tannenweg 4a
90522 Oberasbach

Phone: +49 (0)160 94668937
eMail: info (at) troeger-services.com

Name and address of the data protection officer

The data protection officer of the controller is

Bernhard Höllerer
Kreuzbühler Street 23a
91220 Schnaittach

Phone: +49 (0)9153 3776448
eMail: datenschutz (at) troeger-services.com

General information on data processing

We collect and use our users' personal data only insofar as this is necessary to provide a functional website and our content and services, and insofar as a legal basis allows us to do so.

Legal basis for the processing of personal data

Insofar as we obtain the consent of the data subject for the processing of personal data, Art. 6 para. 1 lit. a GDPR serves as the legal basis for the processing of personal data.

Insofar as the processing of personal data is necessary to fulfill a legal obligation to which Tröger IT Business Consulting GmbH is subject, Art. 6 para. 1 lit. c GDPR serves as the legal basis.

In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 para. 1 lit. d GDPR serves as the legal basis.

If the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in Tröger IT Business Consulting GmbH, Art. 6 para. 1 lit. e GDPR serves as the legal basis for the processing.

If the processing is necessary to safeguard a legitimate interest of Tröger IT Business Consulting GmbH or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the former interest, Art. 6 para. 1 lit. f GDPR serves as the legal basis for the processing. This does not apply if Tröger IT Business Consulting GmbH is acting in an official capacity for the corresponding processing.

Duration of storage of personal data

The personal data of the data subject will only be stored by us for as long as the purpose of the storage exists. If the processing is based on the consent of the data subject, the data will only be stored until the data subject withdraws their consent, unless there is another legal basis for the processing.

Right to rectification and erasure of personal data

The data subject has the right to obtain from us without undue delay the rectification of inaccurate personal data concerning him or her. The data subject also has the right to obtain from us the erasure of personal data concerning him or her without undue delay as soon as the purpose of the storage no longer applies or, if the processing is based on the consent of the data subject, if the data subject withdraws his or her consent and there is no other legal basis for the processing.

The personal data of the data subject will also be erased if the data subject objects to the processing pursuant to Article 21(1) GDPR and there are no overriding legitimate grounds for the processing, if the personal data have been unlawfully processed or if the erasure is necessary for compliance with a legal obligation to which Tröger IT Business Consulting GmbH is subject under European or national law.

However, personal data will not be deleted in the cases described above if the processing of personal data is necessary for Tröger IT Business Consulting GmbH to fulfill a legal obligation imposed on it by the European or national legislator or if the processing is necessary for the performance of a task carried out by Tröger IT Business Consulting GmbH in the public interest or in the exercise of official authority vested in Tröger IT Business Consulting GmbH or if the further storage of personal data is necessary for the assertion, exercise or defense of legal claims.

Right of revocation

If the processing of personal data is based on the consent of the data subject, the data subject may withdraw their consent at any time. The processing of personal data carried out until the withdrawal remains lawful despite the withdrawal.

Right to information

The data subject shall have the right to obtain from Tröger IT Business Consulting GmbH confirmation as to whether or not personal data concerning him or her are being processed. If this is the case, the data subject has a right to information about which personal data is involved and for what purposes it is processed. They also have a right to information about the duration of the planned storage of this data and which criteria are used to determine the storage period.

Provision of the website and creation of log files

Scope of data processing

Each time our website is accessed, our system automatically collects data and information from the computer system of the accessing computer.

The following data is collected:

- Information about the browser type and version used

- The user's operating system

- The user's internet service provider

- The IP address of the user (in pseudonymized form)

- Date and time of access

- Websites from which the user's system accesses our website

- Websites that are accessed by the user's system via our website

We only store pseudonymized IP addresses. At web server level, this is done by storing an IP address 123.123.123.XXX in the log file by default instead of the visitor's actual IP address (e.g. 123.123.123.123), where XXX is a random value between 1 and 254. It is therefore no longer possible to establish a personal reference.

The data is also stored in the log files of our system. This data is not stored together with other personal data of the user.

Legal basis for the processing

The legal basis for the temporary storage of data and log files is Art. 6 para. 1 lit. f GDPR.

Purpose of the processing

Temporary storage of the IP address by the system is necessary to enable delivery of the website to the user's computer. For this purpose, the user's IP address must remain stored for the duration of the session.

Data is stored in log files to ensure the functionality of the website. We also use the data to optimize the website and to ensure the security of our information technology systems. The data is not analyzed for marketing purposes in this context.

These purposes also constitute our legitimate interest in data processing in accordance with Art. 6 para. 1 lit. f GDPR.

Duration of storage of personal data

The data is deleted when the respective session has ended.

If the data is stored in log files, it will be deleted after six months at the latest. Storage beyond this period is possible. In this case, the IP addresses of the users are deleted or anonymized so that it is no longer possible to identify the accessing client.

Use of cookies

Scope of data processing

Our website uses cookies. Cookies are text files that are stored in the Internet browser or by the Internet browser on the user's computer system. When a user accesses a website, a cookie may be stored on the user's operating system. This cookie contains a characteristic string of characters that enables the browser to be uniquely identified when the website is called up again.

We use cookies to make our website more user-friendly. Some elements of our website require that the accessing browser can be identified even after a page change. The following data is stored and transmitted in the cookies:

- Log-in information

- Session settings

Cookies are not used for advertising purposes.

Legal basis for the Processing

The legal basis for the processing of personal data using technically necessary cookies is Art. 6 para. 1 lit. f GDPR.

Purpose of the processing

The purpose of using technically necessary cookies is to simplify the use of websites for users. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary for the browser to be recognized even after a page change. For these purposes, our legitimate interest also lies in the processing of personal data in accordance with Art. 6 para. 1 lit. f GDPR.

Duration of storage of personal data

A so-called "session cookie" is deleted immediately after the end of the session.

If you have consented to the use of cookies when visiting our website, another cookie will be set to indicate your consent; you will therefore no longer be asked for your consent when you visit our website in the future. This cookie is stored for one year.

Cookies are stored on the user's computer and transmitted by it to our website. As a user, you therefore have full control over the use of cookies. You can deactivate or restrict the transmission of cookies by changing the settings in your Internet browser. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all functions of the website to their full extent.

E-mail contact

Scope of data processing

It is possible to contact us via the e-mail address provided on our website. In this case, the user's personal data transmitted with the e-mail will be stored.

No data will be passed on to third parties in this context. The data is used exclusively for the processing of contact maintenance.

Legal basis for data processing

The legal basis for the processing of data transmitted in the course of sending an email is Art. 6 para. 1 lit. f GDPR.

Purpose of data processing

The processing of personal data serves us solely to process the contact. This also constitutes the necessary legitimate interest in processing the data.

Duration of storage of personal data

The personal data sent by email will be deleted when the respective conversation with the user has ended. The conversation is ended when it can be inferred from the circumstances that the matter in question has been conclusively clarified.

Hosting

IONOS

We host our website with IONOS SE. The provider is IONOS SE, Elgendorfer Str. 57, 56410 Montabaur (hereinafter referred to as IONOS). When you visit our website, IONOS collects various log files including your IP addresses. For details, please refer to the IONOS privacy policy: https://www.ionos.de/terms-gtc/terms-privacy.

The use of IONOS is based on Art. 6 para. 1 lit. f GDPR. We have a legitimate interest in displaying our website as reliably as possible. If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information in the user's terminal device (e.g. device fingerprinting) within the meaning of the TTDSG. Consent can be revoked at any time.

Data collection on this website

Consent with Usercentrics


This website uses the consent technology of Usercentrics to obtain your consent to the storage of certain cookies on your end device or to the use of certain technologies and to document this in compliance with data protection regulations. The provider of this technology is Usercentrics GmbH, Sendlinger Straße 7, 80331 Munich, Germany, website: https://usercentrics.com/de/ (hereinafter "Usercentrics").

When you enter our website, the following personal data is transmitted to Usercentrics:

Your consent(s) or the withdrawal of your consent(s)
Your IP address
Information about your browser
Information about your end device
Time of your visit to the website
Furthermore, Usercentrics stores a cookie in your browser in order to be able to assign the consents you have given or revoke them. The data collected in this way is stored until you ask us to delete it, delete the Usercentrics cookie yourself or the purpose for storing the data no longer applies. Mandatory statutory retention obligations remain unaffected.

Usercentrics is used to obtain the legally required consent for the use of certain technologies. The legal basis for this is Art. 6 para. 1 lit. c GDPR.

Order processing
We have concluded a data processing agreement (DPA) with the above-mentioned provider. This is a contract prescribed by data protection law, which ensures that the provider only processes the personal data of our website visitors in accordance with our instructions and in compliance with the GDPR.

Calendly

You can make appointments with us on our website. We use the "Calendly" tool to book appointments. The provider is Calendly LLC, 271 17th St NW, 10th Floor, Atlanta, Georgia 30363, USA (hereinafter "Calendly").

To book an appointment, enter the requested data and the desired date in the form provided. The data entered will be used for the planning, execution and, if necessary, follow-up of the appointment. The appointment data is stored for us on the servers of Calendly, whose privacy policy you can view here: https://calendly.com/de/pages/privacy.

The data you enter will remain with us until you ask us to delete it, revoke your consent to storage or the purpose for data storage no longer applies. Mandatory statutory provisions - in particular retention periods - remain unaffected.

The legal basis for data processing is Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in making appointments with interested parties and customers as uncomplicated as possible. If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information in the user's terminal device (e.g. device fingerprinting) within the meaning of the TTDSG. Consent can be revoked at any time.

Data transfer to the USA is based on the standard contractual clauses of the EU Commission. You can find details here: https://calendly.com/pages/dpa.

Order processing
We have concluded a data processing agreement (DPA) with the above-mentioned provider. This is a contract prescribed by data protection law, which ensures that the provider only processes the personal data of our website visitors in accordance with our instructions and in compliance with the GDPR.

Social media LinkedIn

This website uses elements of the LinkedIn network. The provider is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. Each time you access a page of this website that contains elements of LinkedIn, a connection to LinkedIn servers is established. LinkedIn is informed that you have visited this website with your IP address. If you click on the LinkedIn "Recommend" button and are logged into your LinkedIn account, LinkedIn is able to associate your visit to this website with you and your user account.

We would like to point out that, as the provider of the pages, we have no knowledge of the content of the transmitted data or its use by LinkedIn. Insofar as consent has been obtained, the use of the above-mentioned service is based on Art. 6 para. 1 lit. a GDPR and § 25 TTDSG. Consent can be revoked at any time. If no consent has been obtained, the service is used on the basis of our legitimate interest in the widest possible visibility in social media.

Data transfer to the USA is based on the standard contractual clauses of the EU Commission.

Details can be found here: https://www.linkedin.com/help/linkedin/answer/62538/data-transfer-from-the-eu-dem-ewr-and-switzerland?lang=en Further information on this can be found in LinkedIn's privacy policy at: https://www.linkedin.com/legal/privacy-policy.

LinkedIn Insight Tag

This website uses the Insight tag from LinkedIn. The provider of this service is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland

Data processing by LinkedIn Insight Tag

With the help of the LinkedIn Insight Tag, we receive information about visitors to our website. If a website visitor is registered with LinkedIn, we can, among other things, analyze the key professional data (e.g. career level, company size, country, location, industry and job title) of our website visitors and thus better tailor our site to the respective target groups. We can also use LinkedIn Insight Tags to measure whether visitors to our websites make a purchase or take another action (conversion measurement). Conversion measurement can also be carried out across devices (e.g. from PC to tablet). LinkedIn Insight Tag also offers a retargeting function that we can use to display targeted advertising to visitors to our website outside the website, whereby, according to LinkedIn, no identification of the advertising addressee takes place.

LinkedIn itself also collects log files (URL, referrer URL, IP address, device and browser properties and time of access). The IP addresses are shortened or (if they are used to reach LinkedIn members across devices) hashed (pseudonymized). The direct identifiers of LinkedIn members are deleted by LinkedIn after seven days. The remaining pseudonymized data is then deleted within 180 days.

The data collected by LinkedIn cannot be assigned to specific individuals by us as the website operator. LinkedIn will store the personal data collected from website visitors on its servers in the USA and use it for its own advertising purposes. Details can be found in LinkedIn's privacy policy at https://www.linkedin.com/legal/privacy-policy#choices-oblig.

Legal basis

If consent has been obtained, the above-mentioned service is used exclusively on the basis of Art. 6 para. 1 lit. a GDPR and § 25 TTDSG. Consent can be revoked at any time. If consent has not been obtained, this service is used on the basis of Art. 6 para. 1 lit. f GDPR; the website operator has a legitimate interest in effective advertising measures including social media.

Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://www.linkedin.com/legal/l/dpa and https://www.linkedin.com/legal/l/eu-sccs.

Objection to the use of LinkedIn Insight Ta

Object to the analysis of user behavior and targeted advertising by LinkedIn at the following link: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.

Furthermore, LinkedIn members can control the use of their personal data for advertising purposes in the account settings. To prevent LinkedIn from linking data collected on our website to your LinkedIn account, you must log out of your LinkedIn account before visiting our website.

Order processing

We have concluded a data processing agreement (DPA) for the use of the above-mentioned service. This is a contract prescribed by data protection law, which ensures that it processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.

Google Web Fonts (local hosting)

This site uses so-called web fonts provided by Google for the uniform display of fonts. The Google fonts are installed locally. There is no connection to Google servers.

Further information on Google Web Fonts can be found at https://developers.google.com/fonts/faq and in Google's privacy policy: https://policies.google.com/privacy?hl=de.

Newsletter data

If you would like to receive the newsletter offered on the website, we require an e-mail address from you as well as information that allows us to verify that you are the owner of the e-mail address provided and that you agree to receive the newsletter. No further data is collected, or only on a voluntary basis. We use the newsletter service providers described below to process the newsletter.

ActiveCampaign

This website uses ActiveCampaign to send newsletters. The provider is ActiveCampaign, Inc, 1 N Dearborn, 5th Floor Chicago, Illinois 60602, USA.

ActiveCampaign is a service with which, among other things, the sending of newsletters can be organized and analyzed. The data you enter for the purpose of subscribing to the newsletter is stored on ActiveCampaign's servers in the USA

Data analysis through ActiveCampaign

With the help of ActiveCampaign, we are able to analyze our newsletter campaigns. For example, we can see whether a newsletter message has been opened and which links have been clicked on. In this way, we can determine which links were clicked on particularly often.

We can also recognize whether certain previously defined actions were carried out after opening/clicking (conversion rate). For example, we can recognize whether you have made a purchase after clicking on the newsletter.

ActiveCampaign also allows us to subdivide ("cluster") newsletter recipients according to various categories. The newsletter recipients can be subdivided according to age, gender or place of residence, for example. In this way, the newsletters can be better adapted to the respective target groups. If you do not wish to be analyzed by ActiveCampaign, you must unsubscribe from the newsletter. We provide a link for this purpose in every newsletter message

Detailed information on the functions of ActiveCampaign can be found at the following link: https://www.activecampaign.com/email-marketing.

You can find ActiveCampaign's privacy policy at: https://www.activecampaign.com/privacy-policy.

Legal basis

The data processing takes place on the basis of your consent (Art. 6 para. 1 lit. a GDPR). You can withdraw this consent at any time. The legality of the data processing operations that have already taken place remains unaffected by the revocation.

Data transfer to the USA is based on the standard contractual clauses of the EU Commission. You can find details here: https://www.activecampaign.com/legal/scc and

https://www.activecampaign.com/de/legal/gdpr-updates/privacy-shield.

Storage duration

The data you provide us with for the purpose of subscribing to the newsletter will be stored by us or the newsletter service provider until you unsubscribe from the newsletter and deleted from the newsletter distribution list after you unsubscribe from the newsletter. Data stored by us for other purposes remains unaffected by this.

After you unsubscribe from the newsletter distribution list, your e-mail address may be stored by us or the newsletter service provider in a blacklist if this is necessary to prevent future mailings. The data from the blacklist will only be used for this purpose and will not be merged with other data. This serves both your interest and our interest in complying with the legal requirements when sending newsletters (legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR). Storage in the blacklist is not limited in time. You can object to the storage if your interests outweigh our legitimate interest.

Order processing

We have concluded a data processing agreement (DPA) for the use of the above-mentioned service. This is a contract prescribed by data protection law, which ensures that it processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.

Plugins and tools

Google reCAPTCHA

We use "Google reCAPTCHA" (hereinafter "reCAPTCHA") on this website. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.

The purpose of reCAPTCHA is to check whether data is entered on this website (e.g. in a contact form) by a human or by an automated program. For this purpose, reCAPTCHA analyzes the behavior of the website visitor based on various characteristics. This analysis begins automatically as soon as the website visitor enters the website. For the analysis, reCAPTCHA evaluates various information (e.g. IP address, time spent on the website by the website visitor or mouse movements made by the user). The data collected during the analysis is forwarded to Google

The reCAPTCHA analyses run completely in the background. Website visitors are not informed that an analysis is taking place.

The data is stored and analyzed on the basis of Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in protecting its website from abusive automated spying and SPAM. If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information in the user's terminal device (e.g. device fingerprinting) within the meaning of the TTDSG. Consent can be revoked at any time.

For more information about Google reCAPTCHA, please refer to the Google Privacy Policy and the Google Terms of Service at the following links:

https://policies.google.com/privacy?hl=de and

https://policies.google.com/terms?hl=de.

Status: December 2022

en_USEnglish