Data protection notice

This data protection information applies for data processing by:

Controller: W. KÖPP GmbH & Co. KG (henceforth: W. KÖPP),
Address: Hergelsbendenstr. 20, 52080 Aachen
Email: nfkppd
Tel.: +49(0) 241 166 05-0
Fax: +49 (0) 241 166 05-55

Limited partnership:

Commercial register: Aachen District Court HRA 472
VAT ID no.: DE123603105

General partner:

KÖPP Verwaltungs GmbH
Commercial register: Aachen District Court HRB 13367

Director: 

Achim Raab (Dipl.-Kfm.)

The internal data protection officer of W.Köpp is Mr Ralph Kelleter. He can be contacted at the address listed above, for attention of Mr Ralph Kelleter, or at dtnschtzkppd.

Upon opening our website, http://www.koepp.de, the browser used on your device automatically sends information to our website’s server. This information is saved temporarily in what is known as a log file. The following information is gathered without your taking any action, and saved until automatically deleted:

• IP address of the computer making the request,
• date and time of access,
• name and URL of the file requested,
• website from which access was gained (referrer URL),
• browser used and, if applicable, the operating system of your computer and the name of our access provider.

We process the data listed for the following purposes:

• to ensure a smooth connection is made with the website,
• to ensure convenient use of our website,
• to evaluate system security and stability and
• for other administrative purposes.

The legal basis for data processing is point (f) of Article 6(1) sentence 1 GDPR. Our legitimate interestes stems from the data collection purposes listed above. Under no circumstances will we use the data collected for the purposes of drawing conclusions about you.

We also use cookies and analytical services during visits to our website. For more detailed information, see points 8 and 9 of this data protection statement.

If you have any questions, you have the option of contacting us using a contact form provided on the website. This requires you to provide a valid email address, so we know who the enquiry comes from, and so that we can respond. You can provide further information if you want. Data processing for the purpose of making contact with us is carried out in accordance with point (a) of Article 6(1) Sentence 1 GDPR on the basis of the consent that you have freely given. The personal data we gather when the contact form is used is automatically deleted your enquiry has been handled. Our contact form is encrypted, so the data entered there cannot be viewed by third parties.

Your personal data will not be transferred to third parties except for the purposes listed below.

We only disclose your personal data to third parties if:

• it is legally permitted and in accordance with point (b) of Article 6(1) Sentence 1 GDPR for carrying out our contractual relationship with you,
• disclosure as per point (f) of Article 6(1) sentence 1 GDPR is necessary for the establishment, exercise or defence of legal claims, and there is no reason to assume
• that you have an overriding, legitimate interest in non-disclosure of your data,
• there is a legal basis for disclosure as per point (c) of Article 6(1) sentence 1 GDPR,
• you explicitly consent to it as per point (a) of Article 6(1) Sentence 1 GDPR.

There will be no other disclosure of your data to other third parties or use thereof for the purposes of marketing, except for sending a newsletter with your consent. If we disclose your data to third parties as described above, we have carefully selected and contracted these third parties, they are bound to follow our instructions, and they are regularly checked.

We use cookies for needs-based website design and for optimisation. Cookies are small text files that are stored on your hard disk and assigned to the browser that you are using. They send certain information to an address that they specify. Cookies cannot run any programs or transfer viruses to your computer. They are used to make our overall internet presence more user-friendly and effective.

We use the following types of cookies, the scope and functioning of which are described below:

• transient cookies (see a)
• persistent cookies (see b)

(a) Transient cookies are automatically deleted when you close the browser. This particularly includes session cookies. These save what is known as a session ID, which makes it possible to assign different enquiries from your browser to the same session. This makes it possible to recognise your computer when you return to our website. The session cookies are deleted when you log out or close the browser.

(b) Persistent cookies are automatically deleted after a specified period, which may differ depending on the cookie. You can delete the cookies at any time using the safety settings of your browser.

You can configure your browser settings as you wish and you may, for example, reject third-party cookies or all cookies. We would like to draw your attention to the fact that in this case you may not be able to use all the functions of this website.

We use cookies in order to be able to identify you for subsequent visits.

The data processed by cookies is necessary for the protection of our legitimate interests and that of third parties as per point (f) of Article 6(1) sentence 1 GDPR.

Tracking tools

The tracking tools that we use, which are listed here, are used on the basis of point (f) of Article 6(1) sentence 1 GDPR. We use these tracking tools for

needs-based design and ongoing optimisation of our website. We also use the tracking tools to gather statistics on use of our website and for evaluation to optimise our website for you. These interests should be seen as legitimate interests in the terms of the regulation cited above. The relevant data processing purposes and data categories can be seen under the corresponding tracking tool.

(1) Google Analytics

We use Google Analytics, a web analysis service from Google Inc. (https://www.google.de/intl/de/about/) (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; henceforth “Google”), for needs-based design and ongoing optimisation of our website.

 In this context, pseudonymised usage profiles are created and cookies are used (see point 8). The cookie produces information about your use of the website, such as:

• browser type/version,
• operating system used,
• referrer URL (the previous website you visited),
• host name of the computer accessing the site (IP address),
• time of server request.

This information is transferred to a Google server in the USA and stored there. It is used to evaluate use of the website, to compile reports on website activity, and to provide further services related to website use and Internet use, for the purposes of market research and needs-based design of our website. This information may also be transferred to third parties, if this is legally required or if third parties will process this data on our behalf. Under no circumstances will your IP address be put together with other Google data. IP addresses are anonymised, so it would not be possible to assign your address to data (IP masking). You can prevent installation of cookies using an appropriate setting in your browser software; however we would like to draw your attention to the fact that in this case it

may not be possible to make full use of all the functions of this website.

You can also prevent Google from gathering and processing the data produced by the cookie about your use of the website (including your IP address) by downloading and installing a browser add-on (https://tools.google.com/dlpage/gaoptout?hl=de). As an alternative to the browser add-on, particularly for browsers on mobile devices, you can also prevent Google Analytics from gathering data by clicking on this link. An opt-out cookie is placed, to prevent your data from being gathered when you visit this website in future. The opt-out cookie only applies in this browser and for our website, and it is saved on your device. If you delete the cookies in this browser, you must set the opt-out cookie again. For further information on data protection in relation to Google Analytics, see Google Analytics help (https://support.google.com/analytics/answer/6004245?hl=de).

(2) Use of eTracker

We use the analytical tool eTracker, which is provided by etracker GmbH, Erste Brunnenstraße 1, 20459 Hamburg (www.etracker.com). We can use this analytical tool to create pseudonymised usage profiles. Pseudonymising means replacing the name and other identifying features with a substitute, for the purpose of making it significantly more difficult or impossible to determine the identity of the data subject. The usage profiles are used for analysis of user behaviour. We analyse this behaviour to optimise what we offer. This analytical tool also uses cookies. The pseudonymised usage profiles are not put together with personal data, unless you give your explicit consent.

You can reject data gathering and use for the purposes of web analysis at any time.

If you click here to reject use of eTracker, we will then exclude you from eTracker counts.

The data gathered is saved permanently and analysed in pseudonymised form. The legal basis for use of eTracker is point (f) of Article 6(1) sentence 1 GDPR. 

(3) DoubleClick by Google

(a) This website also uses the online marketing tool DoubleClick by Google. DoubleClick by Google is a service of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google“). DoubleClick uses cookies, to show advertisements that are relevant to users, to improve reports on campaign performance or to prevent a user from seeing the same advertisements several times. Google uses a cookie ID to record which advertisements are shown in which browser, so it can prevent them from being shown multiple times. DoubleClick can also use cookie IDs to record conversions, which are related to ad requests. This is the case, for example, if a user sees a DoubleClick advert and later opens the website of the advertiser using the same browser, and buys something there. According to Google, DoubleClick cookies contain no personal information.

(b) Through the marketing tools that are used, your browser automatically creates a direct connection with the Google server. We have no influence on the scope and further use of the data that is gathered by Google through the use of this tool, and we therefore inform you of the facts of which we are aware: Integrating DoubleClick informs Google that you have opened the relevant part of our website or clicked on one of our adverts. If you are registered with a Google service, Google can assign this visit to your account. Even if you are not registered with Google, or you are not logged in, there is a possibility that the provider may find out your IP address and store it.

(c) You can opt out of this tracking process in various ways: a) change the relevant settings in your browser software - blocking third-party cookies in particular means that you will not get any ads from third-party providers; b) disable cookies for conversion tracking, by changing the settings in your browser so that cookies from the domain “www.googleadservices.com” are blocked, https://www.google.de/settings/ads - this setting is deleted when you delete your cookies; c) disable interest-based ads from providers that are part of the self-regulation campaign “About Ads”, using the link http://www.aboutads.info/choices - this setting is deleted when you delete your cookies; d) disable permanently in your Firefox, Internet Explorer or Google Chrome browsers using the link http://www.google.com/settings/ads/plugin. We would like to draw your attention to the fact that in this case you may not be able to fully use all the functions of this website.

(d) The legal basis for processing your data is point (f) of Article 6(1) sentence 1 GDPR. For further information on DoubleClick by Google see https://www.google.de/doubleclick, and for more information on data protection at Google in general, see: https://policies.google.com/privacy?hl=de. Alternatively you can go the website of the Network Advertising Initiative (NAI) at http://www.networkadvertising.org. Google complies with the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework

Your rights:

• to demand information about your personal data that we have processed as per Article 15 GDPR. Specifically, you can demand information about: the purposes of the processing; the categories of personal data concerned; the categories of recipients, to whom your data has been or will be disclosed; the planned duration of storage; the existence of a right to rectification, erasure, restriction of the processing or a right to object; the existence of the right to lodge a complaint with a supervisory authority; the origin of your data, if we did not collect it; and about the existence of automated decision making including profiling as per Article 22(1) and (4) GDPR and significant information about the logic involved and the scope and desired effects of this type of processing for the data subject. You have the right to demand information about whether your personal data is sent to a third country or an international organisation. In this context you can demand to be informed about the appropriate guarantees as per Article 46 GDPR in connection with the transfer;
• to demand immediate rectification or completion of your personal data that we are storing, as per Article 16 GDPR;
• to demand erasure of your personal data we are storing, as per Article 17 GDPR, in the following cases:
  
  • the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed.
  • your withdraw consent on which the processing is based according to point (a) of Article 6(1), or point (a) of Article 9(2), and where there is no other legal ground for the processing.
  • you object to the processing pursuant to Article 21(1) and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing pursuant to Article 21(2) GDPR.
  • your personal data have been unlawfully processed.
  • the personal data have to be erased for compliance with a legal obligation in Union or Member State law to which the controller is subject.

  • your personal data have been collected in relation to the offer of information society services referred to in Article 8(1) GDPR.
    

  Where the controller has made the personal data public and is obliged pursuant to Article 17(1) GDPR to erase the personal data, the controller, taking account of available technology and the cost of implementation, shall take reasonable steps, including technical measures, to inform controllers which are processing the personal data that the data subject has requested the erasure by such controllers of any links to, or copy or replication of, those personal data.
  
  There is no right to erasure if the processing is required
• for exercising the right to freedom of expression and information;
• for compliance with a legal obligation which requires processing by Union or Member state law to which the controller is subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller
• for reasons of public interest in the area of public health in accordance with points (h) and (i) of Article 9(2) as well as Article 9(3) GDPR;

• for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Article 89(1) in so far as the right referred to in paragraph 1 is likely to render impossible or seriously impair the achievement of the objectives of that processing; or

• for the establishment, exercise or defence of legal claims.

• as per Article 18 GDPR you can demand the restriction of the processing of your personal data if:
  • you contest the accuracy of your personal data, for a period enabling the controller to verify the accuracy of the personal data;
  • the processing is unlawful and you oppose the erasure of the personal data and request the restriction of its use instead;
  • the controller no longer needs the personal data for the purposes of the processing, but you require them for the establishment, exercise or defence of legal claims; or
  • you have objected to processing pursuant to Article 21(1) GDPR pending the verification whether the legitimate grounds of the controller override yours.
  Where processing of your personal data has been restricted, such personal data shall, with the exception of storage, only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the European Union or of a Member state. 
  
  If the processing was restricted in accordance with the requirements listed above, you will be informed by the controller before the restriction is lifted;
• as per Article 20 GDPR, you have the right to receive the personal data with which you have provided us in a structured, current and machine-readable format or to demand that it be transferred to another controller. You also have the right to transfer this data to another controller without hindrance by the controller to whom the personal data was provided, provided that:

  • the processing is based on consent as per point (a) of Article 6(1) GDPR or point (a) of Article 9(2) GDPR or on a contract as per point (b) of Article 6(1) GDPR and

  • the processing is carried out using automated processes.
   

  In exercising these rights, you also have the right to have the personal data transmitted directly from one controller to another, where technically feasible. However this must not affect the freedoms and rights of other people.

  The right to data portability does not apply for processing of personal data that is required for performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
• as per Article 7(3) GDPR you have the right to withdraw the consent you have given at any time. This means that we must not continue in the future with the data processing that was based on this consent and
• as per Article 77 GDPR you have the right to complain to a supervisory authority. You can generally contact the supervisory authority in your normal place of residence or your place of work or our company headquarters, for this purpose.

If your personal data is being processed on the basis of legitimate interests as per point (f) of Article 6(1) sentence 1 GDPR, you have the right, as per Article 21 GDPR, to submit an objection to the processing of your personal data, provided that there are reasons for this, stemming from your particular situation, or you are objecting to direct advertising. In the latter case, you have a general right to object, which we will observe without the need to specify any specific situation. If you would like to make use of your right to revocation or your right to object, all you need to do is send an email to nfkppd.

Of course, you are free to object to the processing of your personal data for the purposes of advertising and data analysis at any time. You can inform us of your objection to advertising using the email address above.

This data protection statement is currently valid, and it is the May 2018 version. It may become necessary to change this data protection statement due to the further development of our website and related offerings, or due to changes in requirements in the law or from the authorities. You can view and print out the most current data protection statement at any time on our website.