Privacy Policy

This English translation is provided for convenience only. The German version of this privacy policy is legally binding.

1. Scope and Subject Matter of this Privacy Policy

The subject matter of this privacy policy is information on which personal data we collect via our website and for what purpose we process it. Where links are provided to other websites, we have neither influence nor control over the linked content or the data protection provisions in place there. We recommend reviewing the privacy policies on the linked websites in order to determine whether and to what extent personal data is collected, processed, used or made accessible to third parties.

For reasons of better readability, this document does not differentiate between grammatical gender forms. All references to persons apply equally to all genders (male, female, diverse).

2. Contact Details of the Controller

SHD Solutions GmbH Rennweg 60 56626 Andernach

represented by Dietmar Meding (CEO) and Ralf Gentejohann (CFO)

Phone + 49 2632 295-0 Email info@shd.de

3. Contact Details of the Data Protection Officer

Marcel Erntges, Data Protection Officer, email: datenschutz@shd.de

4. Log Files

When our website is accessed, we collect what is referred to as access data and store it in a log file (so-called log file). This access data also includes the IP address. In addition, the log file stores the name of the webpage accessed, the file retrieved, the date and time of access, the amount of data transferred and confirmation of successful retrieval, the browser type and version, the operating system, the so-called referrer URL (the previously visited page), and the requesting provider.

Personal Data

IP address;

Purpose of the Data Processing

We collect the log file data, including the IP address, to ensure a smooth connection setup for the website and to enable a comfortable use of our website by users. In addition, the log file serves to evaluate system security and stability, as well as for administrative purposes.

Interest in the Data Processing

The log file data, including the IP address, serve solely for the technical and design optimization of the website and for securing our systems (e.g. in the event of an attack on our IT or a security incident). We are unable to establish any reference to a specific person from the log file data, including the IP address, when our website is accessed.

Duration of Data Storage

IP addresses are stored in anonymized form. To this end, the last three digits are removed, i.e. 127.0.0.1 becomes 127.0.0.*. IPv6 addresses are likewise anonymized. Information on the directory protection user employed is anonymized after one day.

Legal Basis

Art. 6(1)(f) GDPR

Provision Required or Mandatory

The provision of the aforementioned personal data is neither legally nor contractually required. However, without the IP address, the service and the functionality of the website are not guaranteed, or are restricted.

5. Cookies

Cookies are small text files that enable us to make the use of our offerings and our website more pleasant for users, for example by allowing us to determine whether you have already visited an individual page of our website, and thereby to store information about your preferred activities on the website, or to tailor our website to your individual interests. As soon as a user accesses our platform, a cookie is stored on the terminal device (laptop, tablet, smartphone or PC) of the respective user. Cookies that are not necessary for the provision of our website are only set on your terminal device after you have given your corresponding consent (Art. 6(1)(a) GDPR).

Necessary Storage:

  • shd-consent-v1 (SHD): Stores your decision in the cookie banner in your browser's local storage (localStorage). No automatic expiry; deletion is possible at any time via the browser settings.

Statistics and Marketing Cookies:

Statistics and marketing cookies are only set after you have selected “Accept all” in the cookie banner.

  • _ga, _ga_* (Google): Registers unique IDs used to generate statistical data on the use of the website (Google Analytics 4). Standard expiry period: 399 days.
  • Zoho PageSense (zab*/zps* cookies, Zoho): Web analytics and optimization, e.g. usage statistics and heatmaps. Standard expiry period: up to 12 months.

You can change or withdraw your consent at any time on the Cookie Settings page.

6. Web and User Analysis

Our website uses what are referred to as tracking or web analytics tools. These are used to describe the collection of access data on our website and the evaluation of our visitors' behavior for the purpose of optimizing our offerings. With the help of these tools, it is possible to examine how and from where visitors arrive at our site, which areas of a website are visited particularly often, and how often and for how long which subpages and categories are viewed. In addition, we can determine which search terms and websites the user has entered and evaluate how many users visit our pages in total and which information or offerings are most in demand. The aim is to use the insights gained in this way to design our offerings and our web presence in a user-friendly manner. Statistical evaluation of the usage profiles allows conclusions to be drawn about the functioning and success of our websites and features, such as answers to questions about how frequently information pages for certain product groups were accessed, or how many visitors clicked on certain offerings. With the help of the tracking tools, we can tailor our offerings more specifically to our customers, visitors and prospective customers.

Personal Data

IP address; cookie identifier

Purpose of the Data Processing

With the help of the tracking tools, the behavior of website visitors can be evaluated and their interests analyzed. For this purpose, we create a pseudonymous user profile.

Recipients

We do not pass on your data to third parties. In the area of web and user analysis, however, we work together with professional service providers who generate user statistics on our behalf. This contractual relationship is based, among other things, on the providers' obligation to have taken special measures to protect your data and to process all personal data solely in accordance with our instructions (Art. 28 GDPR).

Provider

Google

Purpose of the Data Processing

Website and analytics tool

Details/Information on Data Protection

Privacy - Google Analytics Help

Provider

Zoho Corporation B.V., Beneluxlaan 4B, 3527 HT Utrecht, Niederlande

Purpose of the Data Processing

Web analytics and optimization tool Zoho PageSense (usage statistics, heatmaps). Data processing takes place in data centers within the EU; a data processing agreement is in place with Zoho. The tool is only loaded after you have given your consent via the cookie banner.

Details/Information on Data Protection

Zoho Privacy Policy

Duration of Data Storage

Further details about the providers, the functioning of the web tracking as well as information on the technologies used within the scope of these tracking tools, the storage period of the cookies used in this context, and further information, can be found under item 5 Cookies. In addition, you can withdraw your consent and change your cookie settings for our website at any time.

Legal Basis

Art. 6(1)(a) GDPR

Provision Required or Mandatory

The provision of the aforementioned personal data is neither legally nor contractually required.

7. Contact Form

Personal Data

Surname, first name, email address, telephone number and the corresponding message

Purpose of the Data Processing

We use a contact form on our website to communicate with our customers and prospective customers and to respond to their concerns and inquiries. We process the inquiries and information addressed to us in this context exclusively for the purpose of processing their inquiry and getting in touch with them.

Recipients

The forms on our website are integrated via the Zoho Forms service of Zoho Corporation B.V. (Beneluxlaan 4B, 3527 HT Utrecht, Niederlande); processing takes place in data centers within the EU. A data processing agreement is in place with Zoho. Inquiries are further processed in our CRM system (Zoho CRM).

Duration of Data Storage

For the duration of the processing and handling of the inquiry, or until we are requested to delete the data.

Legal Basis

In principle, we do not require personal data in order to respond to inquiries. The legal basis is Art. 6(1)(a) GDPR. If you are already a customer or contractual partner, the data processing is based on Art. 6(1)(b) GDPR.

Provision Required or Mandatory

The provision of the aforementioned personal data is neither legally nor contractually required. However, without providing this information, it is not possible to process your inquiry.

8. Customer Portal

Personal Data

Username, password and the corresponding message

Purpose of the Data Processing

We use a customer portal on our website to offer you not only IT expertise from a single source, but also first-class support for all solutions of the group of companies. Please use the SHD customer portal for the interactive online submission of your service requests and faults. For critical cases, direct contact persons are available to you.

Duration of Data Storage

For the duration of the processing and handling of the inquiry, or until we are requested to delete the data.

Legal Basis

In principle, we do not require personal data in order to respond to inquiries. The legal basis is Art. 6(1)(a) GDPR. If you are already a customer or contractual partner, the data processing is based on Art. 6(1)(b) GDPR.

Provision Required or Mandatory

The provision of the aforementioned personal data is neither legally nor contractually required. However, without providing this information, it is not possible to process your inquiry.

9. Social Networks

We maintain a presence on several online platforms and social networks in order to interact with potential or existing customers, exchange views with prospective customers and users, or to promote offerings and services.

We operate our presences under what is referred to as joint (data protection) responsibility with the providers. We process, as controller, data that you share or publish directly via the online platforms and networks (e.g. via comment and chat functions) in order to interact with you in that regard or to exchange views with you, as applicable. In the course of this interaction, we may also receive statistical data from the platform operators on the use of our “channels and fan pages”. This includes, for example, information on interactions, likes, comments, or aggregated information and statistics (e.g. IP address; origin of followers), which help us learn something about the interactions with our page. The legal basis for the data processing within our area of responsibility is Art. 6(1) sentence 1 (f) GDPR.

However, the aforementioned providers also process data under their own responsibility. We have no influence over data that is processed by the provider under its own responsibility in accordance with its own terms of use and data protection provisions. We would like to point out that when accessing the aforementioned providers, further-reaching data (e.g. from your usage and “browsing behavior”) may be collected and, where applicable, transmitted to the provider. Please also note that in the case of interaction via the aforementioned media, data may also be processed outside the territory of the European Union. Furthermore, user data is generally processed for market research and advertising purposes. For example, usage profiles can be created based on usage behavior and the interests of users derived from it. These usage profiles can in turn be used, for example, to place advertisements within and outside the platforms that are presumed to correspond to the interests of the users. Further information on this can be found in the data protection information of the respective providers. If we hold personal data about you in connection with the use of the online platforms and networks, please direct your concerns to us. Should you also wish to assert rights against a specific provider, please contact the respective provider directly.

Provider

Microsoft Corp.

Purpose of the Data Processing

LinkedIn

Details/Information on Data Protection

LinkedIn Privacy Policy

Provider

New Work SE

Purpose of the Data Processing

Xing

Details/Information on Data Protection

Privacy at XING

Provider

Meta Platforms Inc.

Purpose of the Data Processing

Facebook

Details/Information on Data Protection

Meta Privacy Policy

Provider

NEW WORK AUSTRIA XING kununu onlyfy GmbH

Purpose of the Data Processing

Kununu

Details/Information on Data Protection

Privacy at XING

10. Fonts

The fonts used on this website (Inter) are integrated locally on our server. When the website is accessed, no fonts are loaded from third-party servers, and no data is transmitted to third parties for this purpose.

11. Newsletter

Personal Data

Email, salutation, first name, surname and company

Purpose of the Data Processing

We send newsletters, emails and other electronic notifications (hereinafter “newsletter”) only with the consent of the recipients or on the basis of a statutory permission. Where the content of the newsletter is specifically described as part of a newsletter registration, that description is decisive for the users' consent. Otherwise, our newsletters contain information about our services and about us.

Recipients

Newsletter registration and dispatch take place via the Zoho Forms and Zoho Campaigns services of Zoho Corporation B.V. (Beneluxlaan 4B, 3527 HT Utrecht, Niederlande), with data storage in data centers within the EU. A data processing agreement is in place with Zoho.

Duration of Data Storage

We may store unsubscribed email addresses for up to three years on the basis of our legitimate interests before deleting them, in order to be able to prove a consent that was previously given. The processing of this data is limited to the purpose of a possible defense against claims. An individual request for deletion is possible at any time, provided that the former existence of a consent is confirmed at the same time. In the event of obligations to permanently observe objections, we reserve the right to store the email address solely for this purpose in a blocklist (so-called “blocklist”).

Legal Basis

Registration for our newsletter is generally carried out using what is known as a double opt-in procedure. This means that after registering, you receive an email asking you to confirm your registration. This confirmation is necessary so that no one can register using someone else's email address.

Provision Required or Mandatory

The provision of the aforementioned personal data is neither legally nor contractually required. However, without providing this information, it is not possible to send the newsletter.

12. Seminar / Appointment Scheduling

Personal Data

Company, street, postal code and city, first name, surname, email

Purpose of the Data Processing

You can arrange a presentation for the individual products of the SHD group. The aforementioned personal data is required for this scheduling.

Duration of Data Storage

For the duration of the processing and handling of the inquiry, or until we are requested to delete the data.

Legal Basis

In principle, we do not require personal data in order to respond to inquiries. The legal basis is Art. 6(1)(a) GDPR. If you are already a customer or contractual partner, the data processing is based on Art. 6(1)(b) GDPR.

Provision Required or Mandatory

The provision of the aforementioned personal data is neither legally nor contractually required. However, without providing this information, it is not possible to schedule the appointment.

13. Job Applications

By submitting the application form to the SHD group, you give your consent that your information may be stored, processed and used to contact you during the application process, for the duration of the application procedure. Without this consent, you cannot submit your online application. In the area of data management and the implementation of data protection regulations, SHD exercises a controlling influence over the other companies. Within the meaning of data protection law, SHD controls the processing of personal data in the companies affiliated with the group. A data protection officer has been appointed for the group of companies, who can be easily reached from every location.

Detailed information on what happens to your personal data during the application process can be found in our data protection information for applications, in the applicant portal, before you send your application to us.

14. Data Security

We maintain up-to-date technical measures to ensure data security, in particular to protect your personal data against risks during data transmission and against unauthorized access by third parties. These measures are continuously adapted and reviewed in accordance with the current state of the art. To preserve the confidentiality and integrity of the data you provide on our website, this data is transmitted via “https” and Transport Layer Security (TLS).

B. Your Rights

You have the right to demand confirmation from us at any time as to whether we process personal data concerning you, and the right to information about this personal data. In addition, you have the right to rectification, erasure and restriction of the data processing, as well as the right to object at any time to the processing of your personal data, to withdraw consent to the data processing at any time, or to demand data portability.

Please direct all requests for information, subject access requests, withdrawals or objections regarding the data processing by email to datenschutz@shd.de . In addition, you have the right to lodge a complaint with a supervisory authority in the event of data protection violations.

Privacy Policy: SHD Solutions GmbH