Privacy Policy

Thank you for your interest in our company. Data protection is a very high priority for the Management  Board of pde Integrale Planung GmbH. The use of the internet pages of pde is essentially possible without providing any personal data. If a data subject wants to use certain special services of our company via our website, then processing of personal data may be necessary. If processing is necessary, we obtain the consent of the data subject.

The processing of personal data is always carried out in compliance with the General Data Protection Regulation (GDPR) and in accordance with national data protection regulations. With this Data Protection Declaration, our company would like to inform visitors about the content and purpose of the personal data we collect and process. In addition, data subjects are informed via this Data Protection Declaration about the rights they have as data subjects.

As the operator of this website, pde has implemented extensive technical and organizational measures to ensure the reliable protection of the data processed within the framework of this website. Nevertheless, data transmissions between your terminal device and our server may in principle have vulnerabilities, especially if you communicate with our server via a device that is under third-party access. If you have any concerns about security, you can also obtain information through other means, by telephone or at one of our offices.

The Data Protection Declaration of pde is based on the provisions and definitions of the General Data Protection Regulation (GDPR). Our Data Protection Declaration should be easy to read and understand for visitors as well as for customers and business partners. To ensure this, we would like to explain the terms used in advance: 

1. Personal data
   Personal data is any information relating to an identifiable natural person.
2. Data subject
   Data subject is any identifiable natural person whose personal data is processed by a controller.
3. Responsible party
   Responsible party is the company that collects the data from data subjects and decides on the purposes and means of processing.
4. Processor
   Processor is a natural person or a company involved in a processing operation by the controller.
5. Recipient
   Recipient is a natural or legal person or public body to whom personal data is made accessible.
6. Third party
   Third party is a natural or legal person or public body that processes personal data for the controller or processor.
7. Processing
   Processing is any operation carried out in relation to personal data. This ranges from the collection to the storage to the restriction or deletion of the data.
8. Restriction of processing
   Restriction of processing means a reduction in the use of personal data.
9. Consent
   Consent is any statement made by an individual that s/he consents to the processing of personal data relating to him or her.
10. Revocation
    Revocation describes a person withdrawing from the controller the right of processing based on consent.
11. Pseudonymisation
    Pseudonymisation separates the data from the identifiable person. This connection can only be re-established with the help of further, specially secured information. The process of pseudonymisation corresponds to so-called data minimisation.
12. Profiling
    Profiling is any type of automated assessment of personal data.

The responsible person in the sense of the GDPR is:
pde Integrale Planung GmbH
Absberggasse 47
1100 Vienna
Austria
Tel.: +43 50 626-0
E-Mail: datenschutz@porr.at
Website: https://pde-porr.com

This pde website collects a series of data and information every time the website is accessed, which is stored in log files on the server. Data recorded in this way includes:

1. Browser types and versions
2. Your computer’s operating system
3. The website that redirected you to us
4. Pages accessed on our web server
5. Date and time of your visit
6. Your IP address
7. Your internet service provider

When using this information, which is collected anonymously for us, pde does not attempt to draw any conclusions about the data subject. However, this data is required in order to deliver the content of our website correctly and to present it optimally for you, and in order to provide the authorities with the necessary information in the event of a hacker attack. This data is therefore processed by PORR AG on the one hand for statistics purposes and on the other hand as a technical measure to ensure the data protection and information security of this processing and your data.

You have the option of registering on our website. The data entered by the data subject will be processed exclusively for internal use by the data controller for its own purposes. We collect the following data as part of the registration process: Salutation, name, email address, password for registration.
You have the option of stating the name of your company and your telephone number if you would like us to contact you by telephone in the future. 

By registering on our website, the IP address assigned by your internet service provider, the date and the time of registration are stored. In principle, this data is not passed on to third parties unless there is a legal obligation to pass it on or the passing on serves the purpose of criminal prosecution.

The registration enables us to offer you content or services that can only be offered to registered users such as videos, whitepapers or extended studies. As a registered user, you are free at any time to change the data provided or to have it completely deleted from our database.

The internet pages of pde use cookies – these are text files that are stored in the file system of a computer via an internet browser. Cookies contain a cookie ID, which is a unique identifier. They enable pde to distinguish the browser of the person concerned from other internet browsers and to display content individually in order to respond to the wishes and results of the person concerned.

One example is the cookie of a shopping cart in the online store. The online store remembers the items that a customer has placed in the virtual shopping cart via a cookie.

You can conveniently set which cookies you want to use at any time via our Cookie Settings
Cookies already on your computer can be deleted at any time via the internet browser or directly in the file system. We would like to point out that if cookies are deactivated, then the functional set of the website may be limited.

About Cookies

Cookies are small text files that are stored on your computer, tablet computer or smartphone when you visit a website using your browser. These files do no harm and serve only to recognize the website visitor. On your next visit to the website using the same device, the information stored in cookies may subsequently be returned either to the website ("First Party Cookie") or to another website to which the cookie belongs ("Third Party Cookie"). You can set your browser so that the storage of cookies is generally prevented or you are asked each time whether you agree to the setting of cookies. Once set, you can delete cookies at any time. How this works can be found in the help function of your browser. An explanation for the browsers Firefox, Microsoft Internet Explorer and Google Chrome can be found at this link: http://www.meine-cookies.org/cookies_verwalten/index.html.

Required

These cookies are necessary for the website to function and cannot be disabled in your systems. As a rule, these cookies are only set in response to actions taken by them, such as setting your privacy preferences, logging in or filling out forms. Our consent management thus also prevents cookies from being set by third parties in the absence of consent. You can set your browser to block these cookies or to notify you of these cookies. 

Statistics

These cookies allow us to count visits and traffic sources so that we can measure and improve the performance of our website.
This involves collecting information about how the website is used, such as which pages are visited most often and how visitors move around the website. This is to help us improve the usability of the website and therefore the user experience. If you are logged into your Google during your visit, Google may associate your visit to our websites with your account. 

Marketing

Marketing cookies (also called targeting or advertising cookies) are used to display personalised advertisements on third-party websites that are more relevant to the user and their interests. They are also used to limit the frequency of appearance of an ad based on these interests and to measure and control the effectiveness of advertising campaigns. Video services are used when users visit websites that play embedded videos. YouTube.com is a video hosting and sharing platform operated by Google. If you are logged into your Google or Facebook account during your visit, the two platforms can associate your visit to our websites with your account. 

On our website, users are given the opportunity to subscribe to our newsletter. We inform our customers and business partners at regular intervals by means of newsletters or information updates about our offers. In the course of registration, we collect your name and email address. Further data like your telephone number and company are optional and only required if you wish to be contacted by us in the future. 

To secure the website against automated attacks, the registration is secured with the service “FriendlyCaptcha”, operated by Friendly Captcha GmbH, Am Anger 3-5, 82237 Woerthsee, Germany. This ensures that the entry is made by a natural person. The legal basis for the security is our legitimate interest in the secure operation of our website. 

After your registration, a confirmation email is sent to the registered email address using the double opt-in method. This confirmation email serves to ensure that you, as the owner of the email address, have actually authorized the receipt of the newsletter and have consented to it in accordance with Art. 6 (1)a GDPR.
By subscribing to the newsletter on our website, your email address, the IP address assigned by your internet service provider, as well as the date and time of registration are stored. In principle, this data is not passed on to third parties, unless there is a legal obligation to pass it on or the passing on serves the purpose of criminal prosecution.

The sent messages contain a tracking pixel, which helps us to note the successful receipt and opening of the sent messages and to work on the basis of our legitimate interest in improving the range we offer. 

You can avoid calling up the tracking pixel if you do not load the graphics from the mail sent and only call up the text version.
For technical reasons, the receipt of our mailings cannot be separated from the sending of the tracking pixel. 

The tracking pixel collects the following data:

• Email
• Contact details
• Device specifications
• IP address
• Timestamp of the call-up

Of course, you can cancel our newsletter at any time, which will result in the immediate deletion of your data for this processing. You can find the necessary information and an unsubscribe link at the end of each mailing. Alternatively, you can also revoke your consent using the contact details provided.

Our publications (magazine and e-paper) focus on national and international projects and the sharing of knowledge and experience from all areas of the construction industry.

The publications provide readers with a holistic view of the complex challenges and innovative solutions along the value chain of the construction industry. Another special feature: The articles are written by our experts themselves.

To send the current publication, we need to process the name, address and, in the case of electronic delivery, the email address of the recipient.

The legal basis is either your consent or our legitimate interest to inform the recipients about current topics in the construction industry. If you do not wish to receive our publications in the future, we request that you inform us at datenschutz@porr.at or by post at the address given under item C. In this case, we will delete your contact data from this processing and stop any further sending.

In the course of our events, photos and videos are taken that are subsequently used for publication on websites, in social media channels, as well as in our publications and other print media. Our aim is to promote our products and events, as well as the company itself, and to raise awareness in the construction industry.
The legal basis for this is our legitimate interest as defined by Art. 6 (1)a GDPR and Sections 12 and 13 of the Austrian Data Protection Regulation: Public relations and presentation of the activities of the responsible party.
If you do not agree to be photographed or videotaped during our events, please contact a representative of our company during the event.
We have carefully weighed the interests of data subjects and our company in this processing and are convinced that we are not violating any rights of data subjects. Of course, you still have the right to object to the processing of the photo and video recordings made. To do so, please simply send an email with a brief description of the objection to datenschutz@porr.at. 

When you use our products or subscribe to information channels, we record your data and preferences in our customer management system. 

Any objections to advertising measures are also stored there to ensure that you do not receive any mailings that go against your interests.

 
This data is not forwarded to third parties. IT service providers with whom a contract has been concluded in accordance with Art. 28 GDPR support us in operating the system. 

Due to legal requirements, our website contains information for uncomplicated contact. If you contact us by email, the data you provide will be automatically stored and used exclusively for responding to your contact.

If you use a contact form on our websites, we collect the following data from you:

• Salutation
• Name
• Email
• Telephone number (optional)
• Company name (optional)
• Your personal message

By entering your data, you also consent to its use for the purpose of responding to your request in accordance with Art 6 (1)a GDPR.
Unless other purposes arise from the response, about which we will inform you separately, the data entered will be deleted after the response or processing of your enquiry.

To secure the website against automated attacks, the input is secured with the service “FriendlyCaptcha”, operated by Friendly Captcha GmbH, Am Anger 3-5, 82237 Woerthsee, Germany. This ensures that the entry is made by a natural person. The legal basis for the security is our legitimate interest in the secure operation of our website. 

pde processes and stores personal data of the data subject only for the period of time that is necessary to achieve the purpose of storage or that has been provided for by legal requirements.
If the purpose or legal basis for processing ceases to apply, your personal data will be blocked or deleted in accordance with the law on the basis of our processes.

Extensive rights of data subjects apply to the processing of personal data under the GDPR. The following is a rough list of these rights for your information:

1. Right to information
   
   Every data subject has the right to obtain from the data controller, at any time, information about the personal data stored about him or her and a copy of such data.
    
2. Right to rectification
   
   Any data subject has the right to request that inaccurate personal data concerning him or her be corrected or completed without undue delay.
    
3. Right to deletion
   
   Any data subject has the right to obtain from the controller the erasure of personal data concerning him or her if the purposes for processing have ceased to exist the legal basis for processing no longer exists (end of contract, withdrawal of consent). You can contact an employee – in particular electronically at datenschutz@porr.at – at any time for the deletion of your data stored with us.
    
4. Right to restriction
   
   Any person concerned by the processing of personal data has the right to obtain from the controller the restriction of processing if the purposes for processing have ceased to exist the legal basis for processing no longer exists (end of contract, withdrawal of consent). You can contact an employee – in particular electronically at datenschutz@porr.at – at any time to have your data stored by us restricted.
    
5. Right to data portability
   
   Every data subject has the right to receive his or her personally provided personal data, in a structured, common and machine-readable format, or to transmit it to another controller without hindrance by the controller, if the processing is based on consent or on a contract and is carried out electronically. You can contact an employee – in particular electronically at datenschutz@porr.at – at any time for the transfer of your data stored with us.
    
6. Right of objection
   
   Any person affected by the processing of personal data has the right to object to the processing of personal data concerning him or her which is carried out on the basis of a legitimate interest. PORR AG shall no longer process the personal data in the event of an objection, unless we can demonstrate compelling grounds for the processing which override the interests, rights and freedoms of the data subject, or for the assertion, exercise or defence of legal claims.
   To exercise the right of objection, you can contact a member of staff at any time - in particular electronically at datenschutz@porr.at.
    
7. Automated decisions in individual cases including profiling
   
   As a responsible company, we do not use automatic decision-making or profiling.
    
8. Right to revoke a declaration of consent
   
   Every data subject has the right to withdraw consent to the processing of personal data at any time.
   To exercise your right of revocation, you may contact any employee at any time – in particular electronically at datenschutz@porr.at.
    
9. Right to complain to the supervisory authority
   
   You have the right to lodge a complaint with a competent supervisory authority pursuant to Article 77 of the GDPR if you believe that the processing of personal data relating to you infringes the provisions of the GDPR.
    
10. You can contact the Austrian Data Protection Authority at Barichgasse 40-42, 1030 Vienna.

pde collects and processes the personal data of applicants for the purpose of processing the application. The processing may also take place electronically. This is particularly the case if an applicant submits corresponding application documents to us electronically, for example by email or via the careers site porr-group.com/en/career/. If PORR AG concludes a service contract with an applicant, the transmitted data is stored for the implementation of the employment relationship. If PORR AG does not conclude a service contract with the applicant, his/her documents will be automatically deleted no later than thirteen months after receipt of the application, provided that no other legitimate interests of PORR AG or the applicant’s consent to further processing preclude deletion.
If an applicant asserts his or her right to deletion, the data can already be deleted after seven months.
If your application is not for a specific position in the careers site (unsolicited application), your data may be forwarded to a PORR Group company out of mutual legitimate interest in accordance with your qualifications.

What data is collected?
For the automated processing of your application, the following data will be collected and processed:

1. First name, surname, email and, if applicable, also address/city, date of birth, title, telephone number, citizenship
2. Additional questions depending on the respective advertisement (e.g. driver’s license)
3. Curriculum vitae
4. Professional experience and education
5. Skills (e.g. Photoshop, MS Office)
6. Application photo
7. Qualifications, awards and language skills
8. Cover letter
9. Files and documents that you upload, if applicable.

1. Privacy Policy on the Use and Application of Google Analytics (with anonymisation function)

Our website uses “Google Analytics”, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland. Google Ireland ist a subsidiary of Google LLC., 1600 Amphitheatre Parkway, Mountain View, CA 94043-1351, USA.. Google Analytics uses cookies, which are stored on your computer and which allow an analysis of your use of the website. The information generated by the cookie about your use of this website, such as browser type/version, operating system used, referrer URL (the previously visited page), IP address, and time of server request are usually transmitted to and stored by Google on servers in the United States.
The information is used to perform analyses of internet and website usage, such as anonymized evaluations and graphics on page views and visits. The data is processed exclusively for market research, website optimization and the provision of other services related to internet use. This information may also be transferred to third parties if required by law or if third parties process the data on our behalf. In no case will your IP address be merged with other data from Google. The IP addresses are anonymized so that an assignment is not possible (IP masking).
You can prevent the installation of cookies by selecting the appropriate settings on your browser software; in addition, the collection of data generated by the cookie and related to your use of the website (including your IP address) and the processing of this data by Google can be prevented by downloading and installing a browser add-on tools.google.com/dlpage/gaoptout?hl=en.
An opt-out cookie is set that prevents the future collection of your data when visiting this website. The opt-out cookie is only valid in this browser and only for our website and is stored on your device. If you delete the cookies in this browser, you must set the opt-out cookie again.
Further information on data protection in connection with Google Analytics can be found, for example, in the Google Analytics help: support.google.com/analytics/answer/6004245?hl=en.

The parent company of Google is a US company, whose level of data protection is confirmed by the E.U.- US Data Privacy Framework. The legal basis for the processing of personal data lies in your informed and at any time revocable consent pursuant to Art 6 para 1 lit a DSGVO.

2. Privacy Policy on the Use and Application of LinkedIn

On our website you will find plugins of the social network LinkedIn or LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA (“LinkedIn”). You can recognize the LinkedIn plugins by the corresponding logo or the “Recommend” button. Please note that when you use the button, a connection is established between your respective internet browser and the server of LinkedIn. LinkedIn is thereby informed that our website has been visited with your IP address. If you click on the LinkedIn Recommend" button and are logged into your LinkedIn account at the same time, you have the option of linking content from our website to your LinkedIn profile page.
In doing so, you enable LinkedIn to assign your visit to our website to you or your user account. Please note that we do not gain any knowledge of the content of the transmitted data and its use by LinkedIn.
For further details on the collection of data and your legal options as well as setting options, please contact LinkedIn. These are made available to
you at  www.linkedin.com/legal/privacy-policy-summary.

LinkedIn Insight Tag:
The LinkedIn Insight Tag is a JavaScript code that has been embedded on our web pages. It is a tracking tool that captures and analyses LinkedIn members on our website. It gives us insights into our target audience, the attractiveness of our offers and the performance of ad campaigns on LinkedIn.
The LinkedIn tag sets a cookie in the browser of the website visitor via which the following data is collected: 

- URL
- Referrer URL
- Specification of your device
- Properties of your web browser
- Your IP address

LinkedIn associates this information with your LinkedIn account if you are logged in, but anonymizes the data collected via the cookie after 7 days and deletes it completely after 90 days.
We do not receive any personal data of our visitors as a result or purpose of this data processing, instead we receive a report about the demographic breakdown of our visitors and the performance of our ads on LinkedIn.
LinkedIn is a US company, whose level of data protection is confirmed by the E.U.- US Data Privacy Framework. The legal basis for the processing of personal data lies in your informed and at any time revocable consent pursuant to Art 6 para 1 lit a DSGVO.

3. Privacy Policy on the Use and Application of Shariff

pde has integrated the Shariff component on this website. The Shariff component provides social media buttons that are privacy compliant. Shariff was developed for the German computer magazine c't and is published via GitHub, Inc.
The developer of the component is GitHub, Inc. 88 Colin P. Kelly Junior Street, San Francisco, CA 94107, USA.
Usually, the button solutions provided by the social networks already transmit personal data to the respective social network when a user visits a website in which a social media button has been integrated. By using the Shariff component, personal data is only transmitted to social networks when the visitor to a website actively clicks one of the social media buttons. Further information on the Shariff component is provided by the computer magazine c't at www.heise.de/newsticker/meldung/Datenschutz-und-Social-Media.
The purpose of using the Shariff component is to protect the personal data of visitors to our website and at the same time to enable us to integrate a button solution for social networks on this website.

4. Privacy Policy on the Use and Application of XING

This website uses the “Share” button from XING. Therefore, when you use this button, a connection is established via your browser to the servers of XING AG, Gänsemarkt 43, 20354 Hamburg, Germany. This provides the share functions (e.g. displays the counter value). Your personal data relating to the call-up of this website is not stored in the process. In particular, no IP addresses are stored by XING. Your usage behaviour is also not evaluated. You can read the current information on data protection with regard to the “Share” button as well as other relevant information in this regard at www.xing.com/app/share.

5. Privacy Policy on the Use and Application of YouTube

This website contains at least one plugin from YouTube. The operating company of YouTube is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland. . Google Ireland is a subsidiary of Google LLC., 1600 Amphitheatre Parkway, Mountain View, CA 94043-1351, USA.
As soon as you visit a page of our website equipped with a YouTube plugin, a connection to the YouTube servers is established. In doing so, the YouTube server is informed which specific page of our Internet presence you have visited. If, on top of this, you are logged in to your YouTube account, you would enable YouTube to assign your surfing behaviour directly to your personal profile. You can exclude this possibility of assignment if you log out of your account before visiting our websites.
For more information on the collection and use of your data by YouTube, please refer to the privacy notices under the privacy policy published by Google, which can be viewed at:  policies.google.com/privacy.
Google LLC is a US company, whose level of data protection is confirmed by the E.U.- US Data Privacy Framework. The legal basis for the processing of personal data lies in your informed and at any time revocable consent pursuant to Art 6 para 1 lit a DSGVO

6. Consent Management with CCM19

Our website utilizes the cookie consent technology provided by our data processor CCM19, Papoo Software & Media GmbH, Auguststr. 4, 53229 Bonn, to obtain your voluntary and informed consent or withdrawal for storing certain cookies in your browser and to document this in compliance with data protection regulations.

The time and IP address of your consent are stored by us to manage your consent in accordance with Art. 6(1)(a) GDPR and to fulfill accountability obligations as per Art. 5 GDPR. The legal basis for the use of CCM19 is Art. 6(1)(c) GDPR.

7. Privacy Policy on the Use and Application of kununu

pde has integrated kununu components on this website. kununu is currently the largest employer rating platform in Europe with over 2.4 million ratings for more than 650,000 companies. The operating company of kununu is kununu GmbH, a subsidiary of XING SE, Dammtorstraße 30, 20354 Hamburg, Germany. Each time one of the individual pages of this website operated by PORR AG on which a kununu component has been integrated is called up, the internet browser on the information technology system of the data subject is automatically caused by the respective kununu component to download a representation of the corresponding kununu component from kununu. Within the scope of this technical procedure, kununu receives information about which specific subpage of our website the data subject visits.
If the data subject is logged in to kununu at the same time, kununu recognizes which specific subpage of our website the data subject is visiting each time the data subject calls up our website and for the entire duration of the respective stay on our website. This information is collected by the kununu component and assigned by kununu to the respective kununu account of the data subject. If the data subject activates one of the buttons integrated on our website, for example the “Rate employer” button, kununu assigns this information to the personal kununu user account of the data subject and stores this personal data.
kununu always receives information via the kununu component that the data subject has visited our website if the data subject is logged into kununu at the same time as calling up our website; this takes place regardless of whether the data subject clicks on the kununu component or not. If the data subject does not want this information to be transmitted to kununu, he or she can prevent the transmission by logging out of his or her kununu account before accessing our website.
The published privacy policy applicable to kununu, which is available at privacy.xing.com/de/datenschutzerklaerung, provides information about the collection, processing and use of personal data by kununu.
The integration of kununu is based on our legitimate interest in the transparent presentation of employee satisfaction in the PORR Group (Art. 6 (1)f GDPR).

8. Facebook & Instagram

Instagram is a social media service provided by Facebook Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland  (“Facebook”) for sharing photos and videos. Users can follow other users on the service, post pictures and videos, and “Like” media from other users and make comments. We use Instagram to report on services, events and offers of the PORR Group, to inform customers, interested parties, employees and applicants by providing them with interesting content and to establish a lasting relationship.
The following data is collected when using Instagram: 

- Email address
- Phone number
- IP address
- Device specification
- Operating system
- Information from the address book of the Instagram user, if s/he allows it

Instagram uses this data for its advertising network, providers of other services, and search engines.
Instagram provides us with so-called “Page insights” regarding the visitors to our company website on Instagram and thereby establishes joint responsibility pursuant to Art. 26 GDPR. “Page insights” are page statistics on “Likes”, post reach and other topics that we use primarily on an anonymised basis. Details on this joint responsibility can be found at: www.facebook.com/legal/terms/page_controller_addendum
This agreement states that Facebook has primary responsibility for processing. However, if you have concerns about security on our Instagram page, you can also contact us at any time at our privacy contact address and we will forward your request to Facebook.
As Facebook is a global social network, we have no influence on the technical and organizational aspects and can only influence the content regarding PORR AG’s appearance and events.
A social network is a social meeting place operated on the internet, an online community that generally enables users to communicate with each other and interact in virtual space. A social network can serve as a platform for sharing opinions and experiences or enables the internet community to provide personal or business-related information. Facebook allows users of the social network, among other things, to create private profiles, upload photos and network via friend requests.
Contractual partner for services is Facebook Ireland Ltd,4 Grand Canal Square Grand Canal Harbour, Dublin 2, Ireland, a subsidiary of Meta Platforms,Inc., Menlo Park, California.
Meta Platforms Inc. is a US company, whose level of data protection is confirmed by the E.U.- US Data Privacy Framework.
The legal basis for the processing of personal data lies in your informed and at any time revocable consent pursuant to Art 6 para 1 lit a DSGVO.

pde may arrange for your contact data to be passed on to one or more processors, for example an IT service provider, who will also use the personal data exclusively for internal use attributable to PORR AG as the responsible party.
We have contracts with all potential processors, which ensure that the regulations of the GDPR are also adhered to by these service providers.
Data subject rights received by us are also forwarded to data recipients for implementation in accordance with Art. 19 GDPR, so that your rights can also be implemented there. 

The legal basis for the processing of personal data on our website is either by legitimate interest to provide you with information about our products and services, or to attract you as a customer in the future, e.g. as a pre-contractual measure or for the performance of a contract with you as a data subject, if there is an order for which delivery of goods becomes necessary. As a result, legal obligations to retain or present data to the authorities may themselves become the legal basis.
For all other processing, such as newsletters, we obtain your consent, which can be revoked at any time.