The management of Thomas Frank – Tecpointer, Völklingen, places great importance on protecting users of its website at www.tecpointer.de. You can therefore usually use this website without providing any personal data. If a user (hereinafter: “data subject”) wishes to use particular services, it may be necessary to process personal data. Thomas Frank – Tecpointer will only do so if there is a legal basis for it or if the data subject has actively consented to the processing of their data.

Personal data such as names, addresses and contact details (for example telephone numbers or email addresses) are processed in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation, GDPR) and the corresponding national provisions. This statement informs data subjects about the nature, scope and purpose of the personal data collected and provided when using our website. It also explains the rights data subjects have regarding the handling of their data.

As the controller responsible for processing the data mentioned above, Thomas Frank – Tecpointer has put measures and precautions in place to prevent processing without a legal basis and to protect the information against unauthorised access. However, we must point out that complete protection of data transmitted over the internet is not technically possible. For this reason, you can also contact us by other means, such as by post or telephone.

To explain our processing activities, we use the terms defined in the relevant provisions of the General Data Protection Regulation, with the meanings given to them there. We do this to avoid misunderstandings and ambiguity.

The controller responsible for processing personal data collected and provided through the use of the website at www.tecpointer.de is:

Thomas Frank
Am Schillerpark 3
66333 Völklingen
Germany
Telephone: +49 (0) 6898 / 903225-0
Email: info@tecpointer.de

Every data subject may contact me directly at any time with questions or suggestions about data protection.

Cookies

This website uses cookies. Cookies are text files that an internet browser places and stores on a computer system.

Many websites and servers use cookies. Many cookies contain a so-called cookie ID, which uniquely identifies the cookie. It consists of a string of characters that lets websites and servers link the cookie to the specific browser in which it was stored. This allows the websites and servers visited to distinguish the data subject’s browser from other browsers that contain other cookies. A specific browser can be recognised and identified by its unique cookie ID.

By using cookies, Thomas Frank – Tecpointer can offer users of this website more user-friendly services that would not be possible without them.

Cookies allow us to optimise the information and offers on our website for the user. As mentioned above, cookies enable us to recognise users of our website. The purpose of this recognition is to make our website easier to use. For example, users of a website that uses cookies do not have to re-enter their login details on every visit, because the website and the cookie stored on the user’s computer system take care of this.

The data subject can prevent our website from setting cookies at any time by changing the settings of their browser, and can thereby permanently object to the setting of cookies. Cookies that have already been set can also be deleted at any time using a browser or other software. This is possible in all common browsers. If the data subject disables cookies in their browser, some functions of our website may not be fully usable.

Server log files

Every time a data subject accesses content on our website at the address given above, the transmission technology causes a range of general information and data to be recorded. This information is stored in so-called server log files. The following may be recorded:

1. the type of browser used by the data subject;
2. the operating system installed on the computer from which the data subject accesses the website;
3. the website from which the data subject reached our website (the “referrer URL”);
4. the sub-pages of our website that the data subject accesses;
5. the date and time at which the data subject accessed our website;
6. the Internet Protocol address (IP address) assigned to the internet connection through which the data subject accessed our website;
7. the internet service provider (ISP) that provided the internet connection used to access our website.

Thomas Frank – Tecpointer does not use this general information to draw conclusions about the data subject. The information is needed to:

1. deliver the content of our website correctly;
2. optimise the content of our website and the advertising for it;
3. ensure the long-term functionality of our IT systems and our website; and
4. provide law enforcement authorities with the information needed for prosecution in the event of a cyberattack.

To achieve these purposes, Thomas Frank – Tecpointer analyses this information anonymously for statistical purposes. It is also analysed to ensure data protection and data security for data subjects and to achieve the best possible level of protection. Where server log files are kept until the analysis for these purposes is complete, they are not combined with other information actively provided by the data subject but are stored separately from it.

Newsletter

Thomas Frank – Tecpointer offers users the option of subscribing to the company newsletter. The input form shows which of the data subject’s data are sent to the controller when subscribing.

Thomas Frank – Tecpointer uses the newsletter to inform subscribers regularly about offers and promotions. The newsletter can generally only be received if:

1. the data subject has a valid email address; and
2. the data subject has registered to receive the newsletter.

When a data subject subscribes to the newsletter for the first time, a confirmation email is sent to the email address they provided. This checks that the person subscribing is authorised to use that mailbox. On registration, we store the IP address assigned by the internet service provider to the user’s connection at the time of registration, together with the date and time of registration. We do this so that any misuse can be verified and traced.

Personal data collected for the newsletter are used only for that purpose. However, subscribers may also be contacted by email if this is necessary for operating the newsletter service or for the newsletter registration, or if there are changes to the content or technical aspects of the newsletter service.

The data subject may withdraw their consent to the processing of personal data for the newsletter and cancel the subscription at any time. Every newsletter contains a link for unsubscribing and withdrawing consent. The data subject may also contact the controller through any other communication channel the controller provides to cancel the subscription and withdraw consent.

Newsletter tracking

The newsletters of Thomas Frank – Tecpointer contain tracking pixels. A tracking pixel is a tiny graphic embedded in HTML emails to analyse the newsletter’s reach. It lets the controller see whether a newsletter issue was successful: it shows whether the data subject opened the newsletter and which links in it they clicked.

IAS Vollmond GmbH stores and uses the data obtained in this way to optimise its newsletter and to tailor the content of future issues more closely to subscribers’ interests. The data subject has the right to withdraw consent given through the double opt-in procedure at any time. After withdrawal, all data relating to the data subject are deleted. Thomas Frank – Tecpointer treats unsubscribing from the newsletter as a withdrawal of consent.

Contact options

As required by law, the website of Thomas Frank – Tecpointer provides information that allows quick electronic contact and direct communication with us. You can also contact us using a contact form, but you do not have to use it. If a data subject contacts us by one of these means, the personal data they send will be processed and stored to deal with their enquiry.

Storage period and routine deletion

Thomas Frank – Tecpointer processes and stores personal data only for as long as necessary to achieve the purpose of processing, or for as long as a statutory retention obligation binding on Thomas Frank – Tecpointer requires. Once the purpose no longer applies or the retention period has expired, the personal data are routinely deleted or their further processing is restricted in accordance with the statutory requirements.

Rights of the data subject

Data subjects may contact the controller with any concerns about the handling of their personal data and exercise the following rights:

1. Right to confirmation: the right to obtain confirmation from the controller as to whether personal data relating to the data subject are being processed.
2. Right of access: the right to obtain from the controller, free of charge, information about which personal data relating to the data subject the controller processes, and a copy of that information. In particular, the data subject is entitled to the following information:
   a. the purposes of the processing;
   b. the categories of personal data being processed;
   c. the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organisations, and in such cases, on specific request, information about appropriate data protection safeguards;
   d. where possible, the planned storage period for the personal data or, if not possible, the criteria used to determine that period;
   e. the existence of a right to rectification or erasure of the personal data and of a right to restriction of processing;
   f. the existence of a right to withdraw consent to the controller’s processing of the data subject’s personal data;
   g. the existence of a right to lodge a complaint with a supervisory authority;
   h. the existence of automated decision-making, including profiling, under Article 22(1) and (4) GDPR and, where such decision-making takes place, meaningful information about the logic involved and the significance and intended consequences of the processing for the data subject.
3. Right to rectification: the right to have the controller correct inaccurate personal data concerning the data subject. This includes the right to have incomplete personal data completed, taking the purposes of the processing into account, if necessary by providing a supplementary statement.
4. Right to erasure: the right to have the controller erase personal data concerning the data subject under the following conditions:
   a. the data were collected and processed for purposes for which they are no longer necessary;
   b. the data subject has withdrawn their consent to the processing and there is no other legal basis for it;
   c. the data subject has objected to the processing and there are no overriding legitimate grounds for it;
   d. the personal data have been processed unlawfully;
   e. the controller is legally obliged to erase the personal data concerned. If Thomas Frank – Tecpointer has made the personal data public and we, as controller, are obliged to erase them under Article 17(1) GDPR, we will take reasonable steps, taking into account available technology and the cost of implementation, to inform other controllers processing the published data. We will tell them that the data subject has asked them to erase any links to, copies of or replications of that personal data, unless the processing is necessary.
5. Right to restriction of processing: the right to have the controller restrict processing where one of the following applies:
   a. the data subject contests the accuracy of the personal data, for a period that allows the controller to verify their accuracy;
   b. the processing is unlawful and the data subject opposes erasure of the personal data, requesting restriction of their use instead;
   c. the controller no longer needs the personal data, but the data subject needs them to establish, exercise or defend legal claims;
   d. the data subject has objected to processing under Article 21(1) GDPR and it has not yet been determined whether the controller’s legitimate interests override those of the data subject.
6. Right to data portability: the right to receive the personal data concerning the data subject, which they have provided to the controller, in a structured, commonly used and machine-readable format. The data subject also has the right to transmit these data to another controller without hindrance from Thomas Frank – Tecpointer. This applies where the processing is based on consent under Article 6(1)(a) or Article 9(2)(a) GDPR, or on a contract under Article 6(1)(b) GDPR, and is carried out by automated means. It does not apply where the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller. In this context, the data subject may also ask for the personal data to be transmitted directly from the controller to another controller, where technically feasible and provided that this does not adversely affect the rights and freedoms of others.
7. Right to object: the right to object at any time, on grounds relating to the data subject’s particular situation, to the processing of personal data concerning them that is based on Article 6(1)(e) GDPR. This also covers any profiling. After an objection, Thomas Frank – Tecpointer will no longer process the personal data concerned, unless it can demonstrate compelling legitimate grounds for the processing that override the interests, rights and freedoms of the data subject, or the processing serves to establish, exercise or defend legal claims. Where personal data are processed for direct marketing, the data subject has the right to object to such processing at any time. This also covers profiling related to such direct marketing. If the data subject exercises this right, Thomas Frank – Tecpointer will no longer process the personal data concerned for these purposes. The data subject also has the right, on grounds relating to their particular situation, to object to the processing of their personal data for scientific or historical research purposes under Article 89(1) GDPR. The personal data concerned will no longer be processed unless the processing is necessary for the performance of a task carried out in the public interest.
8. Automated individual decision-making: the right not to be subject to a decision by the controller based solely on automated processing, including profiling, that produces legal effects concerning the data subject or similarly significantly affects them. This does not apply where the decision:
   a. is necessary for entering into or performing a contract between the data subject and the controller; or
   b. is authorised by Union or Member State law to which the controller is subject, and that law lays down suitable measures to safeguard the data subject’s rights, freedoms and legitimate interests; or
   c. is based on the data subject’s explicit consent. Where the processing is necessary for entering into or performing a contract between Thomas Frank – Tecpointer and the data subject, or is based on the data subject’s consent, Thomas Frank – Tecpointer will take suitable measures to safeguard the data subject’s rights, freedoms and legitimate interests. As a minimum, these include the right to obtain human intervention on the part of the controller and the right of the data subject to express their point of view to the controller.
9. Right to withdraw consent: the right to withdraw, at any time, consent previously given to the controller for the processing of personal data concerning the data subject.

Google Analytics

Thomas Frank – Tecpointer has integrated the Google Analytics service with the “Anonymize IP” function into this website. Google Analytics only works if JavaScript is enabled on the computer system being used.

Google Analytics is a web analytics service. Web analytics is the collection, gathering and analysis of data about the behaviour of website visitors. Among other things, a web analytics service records which website a data subject came from (the “referrer”), which sub-pages were accessed, and how often and for how long a sub-page was viewed. Web analytics is mainly used to optimise a website and to carry out cost-benefit analyses of online advertising.

The Google Analytics component is operated by Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.

For web analytics via Google Analytics, the controller uses the extension “_gat._anonymizeIp”. With this extension, Google shortens and anonymises the IP address of the data subject’s internet connection when our website is accessed from a Member State of the European Union or another state party to the Agreement on the European Economic Area.

The purpose of the Google Analytics component is to analyse visitor flows on our website. Among other things, Google uses the data and information obtained to evaluate the use of our website, to compile online reports for us showing activity on our website, and to provide other services related to the use of our website.

Google Analytics places a cookie on the data subject’s IT system. Cookies were explained above. The cookie enables Google to analyse the use of our website. Each time one of the individual pages of this website is accessed, if it is operated by the controller and contains a Google Analytics component, the Google Analytics component automatically causes the browser on the data subject’s IT system to send data to Google for online analysis. As part of this technical process, Google obtains personal data such as the data subject’s IP address. Among other things, Google uses these to trace the origin of visitors and clicks and, as a result, to enable commission settlements.

The cookie stores personal information such as the time of access, the location from which the website was accessed and how often the data subject visits our website. Each time our website is visited, these personal data, including the IP address of the internet connection used by the data subject, are transmitted to Google in the United States of America and stored there by Google. Google may pass these personal data, collected through the technical process, on to third parties.

As described above, the data subject can prevent our website from setting cookies at any time by changing the settings of their browser, and can thereby permanently object to the setting of cookies. Such a browser setting would also prevent Google from setting a cookie on the data subject’s IT system. A cookie already set by Google Analytics can also be deleted at any time using the browser or other software.

The data subject can also object to, and prevent, the collection by Google Analytics of data relating to the use of this website and the processing of these data by Google. To do so, the data subject must download and install a browser add-on from https://tools.google.com/dlpage/gaoptout. This add-on uses JavaScript to tell Google Analytics that no data or information about website visits may be sent to Google Analytics. Google treats installing the add-on as an objection. If the data subject’s IT system is later deleted, formatted or reinstalled, the data subject must reinstall the add-on to disable Google Analytics again. If the add-on is uninstalled or disabled by the data subject or by another person within their sphere of control, it can be reinstalled or reactivated.

Further information and Google’s applicable privacy policy can be found at https://www.google.de/intl/de/policies/privacy/ and http://www.google.com/analytics/terms/de.html. Google Analytics is explained in more detail at https://www.google.com/intl/de_de/analytics/.

Google AdWords

The controller has integrated Google AdWords into this website. Google AdWords is an online advertising service that allows advertisers to place ads both in Google’s search engine results and in the Google advertising network. With Google AdWords, advertisers can define specific keywords in advance. An ad then appears in Google’s search results only when a user’s search returns a result relevant to those keywords. In the Google advertising network, an automatic algorithm distributes the ads across topic-related websites based on the keywords defined in advance.

The Google AdWords services are operated by Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.

The purpose of Google AdWords is to promote our website by showing interest-based ads on third-party websites and in Google’s search results, and to show third-party ads on our website.

If a data subject reaches our website through a Google ad, Google places a so-called conversion cookie on the data subject’s IT system. Cookies were explained above. A conversion cookie expires after thirty days and is not used to identify the data subject. As long as it has not expired, the conversion cookie records whether certain sub-pages of our website were accessed, such as the shopping cart of an online shop. The conversion cookie lets both us and Google see whether a data subject who reached our website via an AdWords ad generated revenue, that is, whether they completed or abandoned a purchase.

Google uses the data and information collected through the conversion cookie to compile visit statistics for our website. We in turn use these statistics to determine the total number of users referred to us via AdWords ads. This lets us measure the success or failure of each AdWords ad and optimise our ads in future. Neither our company nor other Google AdWords advertisers receive any information from Google that could identify the data subject.

The conversion cookie stores personal information, such as the websites the data subject visited. Each time our website is visited, personal data, including the IP address of the internet connection used by the data subject, are therefore transmitted to Google in the United States of America and stored there by Google. Google may pass these personal data, collected through the technical process, on to third parties.

As described above, the data subject can prevent our website from setting cookies at any time by changing the settings of their browser, and can thereby permanently object to the setting of cookies. Such a browser setting would also prevent Google from setting a conversion cookie on the data subject’s IT system. A cookie already set by Google AdWords can also be deleted at any time using the browser or other software.

The data subject can also object to interest-based advertising by Google. To do so, they must open www.google.de/settings/ads in each browser they use and choose the settings they want there.

Further information and Google’s applicable privacy policy can be found at https://www.google.de/intl/de/policies/privacy/.

Legal basis for processing

Where Thomas Frank – Tecpointer asks the data subject for consent, the legal basis for processing personal data is Article 6(1)(a) GDPR.

Where the processing of personal data relating to the data subject is necessary to prepare, perform or terminate a contract with the controller, the processing is lawful under Article 6(1)(b) GDPR.

Where the controller is subject to a legal obligation that requires the processing of personal data, the processing is permitted under Article 6(1)(c) GDPR.

In rare cases, processing personal data may be necessary to protect the vital interests of the data subject or of another natural person. This would be the case, for example, if the controller learned that a data subject had been injured and had to call for medical help. In such and similar cases, the processing is based on Article 6(1)(d) GDPR.

Finally, Thomas Frank – Tecpointer may process personal data under Article 6(1)(f) GDPR where this is necessary to protect its legitimate interests or those of a third party, and these are not overridden by the data subject’s fundamental rights and freedoms with regard to the confidentiality of their personal data. The controller has a legitimate interest in particular where the processing serves to conduct its business for the benefit of our employees and our shareholders.

Statutory or contractual requirement to provide personal data

Thomas Frank – Tecpointer hereby expressly points out that providing personal data is in some cases required by law, for example under tax law, and may also result from contractual provisions. A contract with the controller can only be concluded if the contracting party, as data subject, provides all the required information. If you have questions about the basis for this or about which data are required, you can contact the controller using the contact details given above.

> Disable Google Analytics <