Almato is committed to protecting your privacy and following our policy to keep your data safe

Privacy Policy__

Almato takes the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the legal data protection regulations and this privacy policy.

The use of our website is usually possible without providing personal data. As far as personal data (such as name, address or e-mail address) is collected on our website, this is done on a voluntary basis, when possible. This data will not be passed on to third parties without your express consent.

We would like to point out that data transmission on the internet (e.g. during communication by e-mail) may have security gaps. We cannot guarantee complete protection of your data against access by any third parties.

1. Data controller in the sense of Art. 4 (7) GDPR

The data controller in the sense of Article 4 (7) of the General Data Protection Regulation (GDPR) is:

Almato AG
Reinsburgstraße 27
70178 Stuttgart
Phone: +49 711 62030-400
Email: almato.info@datagroup.de

Almato is part of DATAGROUP.

2. Communication by email/telephone/mail/contact form

Purpose of data processing/lawful basis:

Personal data that you provide to us by email, telephone, mail or contact form will of course be treated confidentially. We will use your data exclusively for the purpose of dealing with the enquiry. The lawful basis for the data processing is Article 6 (1f) of the GDPR. The legitimate interest on the part of Almato results from the interest to answer inquiries from our customers, business partners and interested parties and thus to maintain and promote customer satisfaction.

Recipient/categories of recipients:

Transfer of your data to third parties outside DATAGROUP is excluded in principle. Data may be processed on our behalf by data processors in exceptional cases. These data processors have been carefully selected, are audited by us and are bound by contract in accordance with Article 28 of the GDPR. Furthermore, it may be necessary for us to forward inquiries to other companies within DATAGROUP, if this is necessary for processing

Storage period/criteria to determine the storage period:

All personal data provided by you in the context of enquiries will be deleted or safely anonymised no later than 90 days after the final response on your enquiry has been given. The storage period of 90 days is explained by the fact that it can happen from time to time that you have to contact us again after a reply on the same matter and have to be able to refer to the previous correspondence. Experience has shown that there are usually no further questions to our response after a period of 90 days.

3. Data processing of contact persons

Purpose of data processing lawful basis:

The companies of DATAGROUP process the contact details of customers, stakeholders, suppliers and other business partners for communication by email, telephone, fax or mail. The lawful basis for the data processing is Article 6 (1f) of the GDPR. The legitimate interest of Almato and DATAGROUP arises from the interest to establish or conduct business relationships with customers, stakeholders, suppliers and other business partners by maintaining personal contact with contact persons.

Recipient/categories of recipients:

As a basic principle, we do not disclose personal data to any third parties outside of DATAGROUP. Within DATAGROUP, data is shared, amongst others, to establish or conduct business relationships. Data may be processed on our behalf by data processors in exceptional cases. These processors have been carefully selected, are audited by us and are bound by contract in accordance with Article 28 of the GDPR.

Storage period/criteria to determine the storage period:

Personal data for the purpose of conducting business relationships is stored as long as there is a legitimate interest.

4. Newsletter

Purpose of data processing/lawful basis:

You have the possibility to order our newsletter through different channels (this website, at trade fairs). The lawful basis for data processing in order to send out newsletters is your consent under Article 6 (1a) of the GDPR as well as § 7 (2) of the Unfair Competition Law. The purpose of data processing within the context of an order of the Almato newsletter is to inform newsletter subscribers about offers, initiatives, news, products, events and services of the companies of DATAGROUP.

If you register for the free Almato newsletter, we need your email address as compulsory information. If you voluntarily provide further personal details (name, surname, company or job title) when registering, we will only use this data for the purpose of analysing the target group and for an internal analysis.

You will receive an email with a confirmation link after sending the registration form. Provided that you click on this link you are subscribed to the newsletter. You will be informed accordingly by another email. By confirming the registration, you give your consent to process your email address and your optional data for the purposes stated herein. We will store the time and the IP address used for ordering the newsletter for evidence purposes.

Your consent to receive the Almato newsletter can be revoked at any time with effect for the future by clicking the unsubscribe link in a newsletter or by sending an email to newsletter@almato.com.

Recipient/categories of recipients:

As a basic principle, we do not disclose data to any third parties outside of DATAGROUP. We have comissioned service provider CleverReach GmbH & Co. KG to send out newsletters. This third party has been carefully selected, is audited by us and is bound by contract in accordance with Article 28 of the GDPR. Within the DATAGROUP group, your data will be passed on by DATAGROUP SE to other companies so that they too can provide you with information.

Storage period/criteria to determine the storage period:

Provided you revoke your consent to receive the Almato newsletter, the data collected for this purpose will be deleted immediately unless they are also needed for another purpose.

5. Data processing for marketing purposes

Purpose of data processing/lawful basis:

Almato and the companies of DATAGROUP use personal data for marketing purposes, especially for advertising sent by email, telephone and mail. The purpose of the data processing for marketing campaigns is to inform the persons concerned about products and services of the DATAGROUP companies. The lawful basis for sending advertising by mail is Article 6 (1f) of the GDPR. The legitimate interest of Almato arises from the interest to provide customers and stakeholders with information on products and services. The lawful basis for marketing campaigns/measures by email or telephone generally is the declaration of consent given by you, while § 7 of the Unfair Competition Law (UWG) can apply for marketing campaigns as well.

You can object to the receipt of advertising at any time with effect for the future by sending a message to widerruf@almato.com.

If you declare an objection to advertising, we will store your data in an advertising ban file on the basis of Article 6 (1f) of the GDPR. The legitimate interest on the part of Almato results from the interest in ensuring that the objection is respected.

Recipient/categories of recipients:

As a basic principle, we do not disclose your data to any external third parties. Provided that external data processors will be used to send advertising, they are contractually obligated under Article 28 of the GDPR and have been controlled to verify that appropriate organisational and technical security measures are in place. Within DATAGROUP, your data may be passed on to other companies for marketing purposes.

Storage period/criteria to determine the storage period:

Provided that you object to the receipt of advertising, your data will be blocked immediately and subsequently deleted unless they have been stored for other purposes as well.

6. Receipt of applications

Purpose of data processing/lawful basis:

In addition to sending us your application by mail, you can also forward your application documents by email. The application documents sent to us will only be used for the application process. Please note that applications sent to us by email will be transferred unencrypted and the data may possibly be noticed by unauthorised persons or may also be modified. You are welcome to also send us your documents by mail.

The purpose of processing your personal data is to deal with the application process in our company and therefore the possible establishment of a new employment relationship.

The lawful basis for the processing is Article 88 (1) of the GDPR, in connection with § 26 (1) of the new Federal Data Protection Act.

Recipient/categories of recipients:

As a basic principle, we do not disclose your data to any third parties. Within the company where you are applying for the job, your personal data is only made available to those persons, who are involved in the decision-making process. A disclosure to other companies within DATAGROUP is only possible with your consent.

Storage period/criteria to determine the storage period:

In case of a successful application, your personal data will be stored for the duration of your employment. After termination of the employment relationship, your tax-relevant data will be archived for a period of up to 10 years in line with the legal retention periods under § 257 (1) point 1 and § 257 (4) of the German Commercial Code, § 147 of the German Fiscal Code. In case of an unsuccessful application, your personal data will be deleted three months after the negative message. A longer storage period despite the negative message is only possible with your consent.

7. Seminar registration and registration for events

Purpose of data processing/lawful basis:

If you wish to book seminars on our website or registrate for events, we would need the information marked as required fields in the booking screen. The input fields that are not specifically marked are optional for you to fill in. As part of the booking you will receive an email from us to confirm your registration. The booking process will only be completed when you activate the link contained in this e-mail. Your data submitted in the context of the booking will be processed by us for the purpose of carrying out the booking and the seminar or for the registration for an event. The lawful basis for this data processing is Article 6 (1b) of the GDPR.

Provided that you have given us your consent do to so, we will also use your data to provide you with marketing information by email, mail or telephone about future events and seminars of Almato, DATAGROUP or third parties which we believe are of interest to you. Your consent can be revoked at any time with effect for the future by confirming the relevant unsubscribe link in one of our emails or by sending an email to widerruf@almato.com. The lawful basis for data processing for the purpose of providing information is your consent under Article 6 (1a) of the GDPR as well as § 7 (2) of the Unfair Competition Law.

Recipient/categories of recipients:

We may disclose the names of the persons who register for an event on our website in part to our event partners who organize the event with us. This partner needs the data for the organisational handling of the event.

Storage period/criteria to determine the storage period:

Where required, we will store the data of participants in seminars and events for the duration of the legal retention periods. Subsequently, and apart from that, the data will generally be deleted. Provided that you have given your consent to receive information, we will store your data for this purpose until you revoke your consent.

8. Cookies

Some of the webpages use so-called cookies. Cookies do not cause damages to your computer and do not contain viruses. Cookies are used to make our offer more user-friendly, more efficient and more secure. Cookies are small text files that are stored by your browser on your computer.

Most of the cookies used by us are so-called “session cookies”. They will be deleted automatically after the end of your visit. Other cookies remain on your terminal device until they are deleted by you. These cookies enable us to recognise your browser on your next visit.

You can adjust your browser to be informed when cookies are placed, to individually allow cookies, accept cookies in certain cases or to generally exclude them as well as to activate an automatic deletion of cookies when the browser is closed. The deactivation of cookies may restrict the functionality of this website.

The legal basis for data processing by so-called “necessary cookies” is Art. 6 Para. 1 lit. f GDPR. Necessary cookies enable basic functions and are necessary for the proper functioning of the website. We have a legitimate interest in making the website as user-friendly as possible.

The following cookies, which are set by this website, are necessary for the operation of the website:

9. Server Log Files

The provider of these websites collects and automatically stores information in so-called server log files that your browser automatically transmits to us. This includes:

• Browser type/browser version
• Operating system used
• Referrer URL
• Host name of the accessing computer
• Time of the server query
• IP address of the requesting internet-enabled device

This data cannot be assigned to specific persons. A combination of this data with other data sources does not take place. We reserve the right to review this data at a later time if we become aware of specific grounds for suspicion of illegal use.

The legal basis for the processing of this data is Art. 6 para. (1f) GDPR. Our legitimate interest lies in the purposes of data processing listed above. These data will not be transferred to external parties. The storage period of the log files is:

• Mail server log: 7 days
• Apachelog: 1 month

10. Google

Google Analytics

This website uses the functions of the Google Analytics web analysis service. The provider is Google Inc. 1600 Amphitheatre Parkway Mountain View, CA 94043, USA. Google Analytics uses so-called “cookies”. These are text files that are stored on your computer and enable an analysis of the use of websites by you. The information generated by the cookie about your use of this website is normally transferred to a server of Google in the USA and stored there. If IP anonymisation is activated on this website, your IP address is abbreviated beforehand by Google within the Member States of the European Union or in other Treaty States of the Agreement on the European Economic Area. The full IP address is only transmitted to a Google server and stored there in exceptional cases.The provider Google LLC is certified according to the US Privacy Shield Agreement. Google will use this information on behalf of the operator of this website to evaluate your use of the website in order to create reports about the website activities and to provide additional services to the website operator associated with the website use and internet use. The IP address sent from your browser in the scope of Google Analytics is not combined with other data by Google. We store user and event data for a period of 14 months.

You can prevent the storage of cookies with the appropriate setting in your browser software. However, please bear in mind that in this case you may not be able to utilise all function of this website to their full extent.

For further information about the terms of use and data protection please visit https://www.google.de/intl/de/policies/. On this website, Google Analytics has been extended by the code “gat._anonymizeIp();” in order to ensure anonymous recording of IP addresses (so-called IP masking).

The legal basis for the use of Google Analytics is the consent granted by you in accordance with Art. 6 Para. 1 lit. a) GDPR. You can revoke this consent at any time.

The following cookies, which are set by this website, are related to Google Analytics:

Google Tag Manager

This website uses Google Tag Manager. This service allows website tags to be managed through an interface. The Google Tool Manager only implements tags. This means no cookies are used and no personal data is collected. The Google Tool Manager triggers other tags, which in turn may collect data. However, Google Tag Manager does not access this data. If a deactivation has been made at the domain or cookie level, it will remain in effect for all tracking tags to the extent that they are implemented with Google Tag Manager.

11. YouTube videos

On some subpages of our website we embed YouTube videos.

Calling up these subpages leads to the reloading of YouTube content. In this context, YouTube also receives your IP address, which is technically necessary to retrieve the content. In principle, we have no influence on the further data processing by YouTube, which is operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. However, when embedding the videos, we activated the extended data protection mode offered by YouTube. The use of YouTube and the resulting transmission of your IP address happens in the interest of an attractive presentation of our online offers. This constitutes a legitimate interest within the meaning of Art. 6 Para. 1 lit. f) GDPR. Further information on the handling of user data can be found in YouTube’s privacy policy: https://policies.google.com/privacy?hl=de&gl=de

The following cookies, which are set by this website, are related to YouTube:

12. Google Maps

We use Google Maps to display maps and to create directions. Google Maps is operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

If you use Google Maps, e.g. by clicking on our locations listed within Google Maps, we do not collect any personal data from you. However, when using Google Maps, we cannot exclude that information about your usage (in particular the IP address of your computer) may, to the best of our knowledge, also be transmitted to a Google LLC server in the USA and be stored there. The processing of personal data using technically required cookies and your IP address is based on Art. 6 para. 1 s. 1 lit. f) GDPR with the purpose of displaying our website as convenient as possible for you. We have no influence on the further processing of data carried out by Google LLC.

Please also read the terms and conditions of Google Maps if you wish to use the service. The terms and conditions for Google Maps can be found at: https://www.google.com/help/terms_maps/

Detailed information on Google’s privacy policy can also be found at: https://policies.google.com/privacy?hl=en-US

If you do not agree with the data processing by Google LLC, please do not use the map or deactivate java script in your browser in order to receive a limited view.

The following cookies, which are set by this website, are related to Google Maps:

13. Web analysis service MyFonts Counter

This website uses the MyFonts Counter, a web analytics service provided by MyFonts Inc., 600 Unicorn Park Drive, Woburn, Massachusetts 01801 USA. Due to the license terms, a page view tracking is performed by counting the number of visits to this website for statistical purposes and transmitting it to MyFonts. In this context, no personal data is processed.

14. Rights of the data subjects

According to Article 15 (1) of the GDPR you have the right to have access to your personal data that has been collected and stored by DATAGROUP free of charge upon request.

If the statutory requirements are given, you also have the right to be informed (Article 16 GDPR) about your personal data, to have your personal data erased (Article 17 GDPR) or to restrict the processing of your personal data (Article 18 GDPR).

Provided that the data processing is based on Article 6 1e) or 1f) of the GDPR you have the right to object under Article 21 of the GDPR. Provided that you object to the data processing, it will be stopped in the future unless the responsible person can provide compelling legitimate grounds for a further processing that override the data subject’s interest in the conflict.

Provided that you have given us the processed data yourself, you have the right to data portability under Article 20 of the GDPR.

Provided that the data processing is based on a consent in accordance with Article 6 (1a) or Article 9 (2a) of the GDPR you can revoke the consent at any time with effect for the future without affecting the lawfulness of the previous processing.

In any of the cases above, for further questions or in the event of a complaint, please contact our data protection officer in writing or by email.

Additionally, you have the right to complain to the data protection supervisory authority. The competent data protection supervisory authority is determined by the federal state in which you reside or in which the data controller has its head office.

15. No obligation to make personal data available

Unless otherwise specified in the previous chapters, the provision of personal data is not required by law or by contract or necessary for signing a contract. You are not obligated to provide any personal data, if no contrary information has been given before. If you do not provide your personal data, this may possibly mean that we cannot answer your contact request or that a participation in the application procedure or a participation in an event is not possible.

16. Contact details of the data protection officer

For further information or any suggestions on the topic of data protection please contact our internal data protection officer:

Dr. iur. Christian Borchers
Datenschutz Süd GmbH
Wörthstraße 15
97082 Würzburg
office@datenschutz-sued.de