Privacy policy
The essential capital of modern companies is your data.
If personal data is processed by you as a user, you are considered a data subject in accordance with the GDPR. Data subjects have the following rights vis-à-vis the controller:
- Right to information (Article 15 DSGVO).
- Right to rectification or erasure of personal data (Articles 16, 17 DSGVO)
- Right to restriction of processing (Article 18 GDPR)
- Right to communication in connection with the rectification or erasure of your personal data or the restriction of processing (Article 19 DSGVO)
- Right to data portability (Article 20 GDPR)
- Right to object (Article 21 GDPR)
- Right to withdraw consent given. The lawfulness of the data processing carried out until the revocation remains unaffected due to the consent valid to date. (Article 7 para. 3 DSGVO)
- Right to complain to the supervisory authority (Article 77 DSGVO)
You can find the competent supervisory authority in data protection matters under the following link.
https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html
This website uses the cookie consent technology of Usercentrics to obtain your consent to the storage of certain cookies on your terminal device and to document this in a data protection compliant manner. The provider of this technology is Usercentrics GmbH, Rosental 4, 80331 Munich.
Website: https://usercentrics.com/de/ (in the following "Usercentrics").
When you enter our website, the following personal data is transferred to Usercentrics:
- Your consent(s) or revocation of your consent(s).
- Your IP address
- Information about your browser
- Information about your terminal device
- Time of your visit to the website
Furthermore, Usercentrics stores a cookie in your browser in order to be able to allocate the consent(s) granted or their revocation to you. The data collected in this way is stored until you request us to delete it, delete the Usercentrics cookie yourself or the purpose for storing the data no longer applies. Mandatory legal storage obligations remain unaffected.
Usercentrics is used to obtain the legally required consent for the use of cookies. The legal basis for this is Article 6 (1) sentence 1 lit. c DSGVO.
We have concluded an order processing contract with Usercentrics. This is a contract required by data protection law, which ensures that Usercentrics only processes the personal data of our website visitors in accordance with our instructions and in compliance with the DS-GVO.
The hosting services we provide serve to make the following services available: Infrastructure and platform services, computing capacity, storage space and database services, e-mail dispatch, security services and technical maintenance services, which we use for the purpose of operating this online service.
In doing so, we process inventory data, contact data, content data, contract data, usage data, meta data and communication data of customers, interested parties and visitors of this online offer on the basis of our legitimate interests in an efficient and secure provision of this online offer pursuant to Article 6 (1) lit. f DSGVO.
a. Type and purpose of processing
The data you enter in the contact form will be stored for the purpose of individual communication with you. For this purpose, it is necessary to provide a valid e-mail address and your name. This serves the purpose of assigning the enquiry and subsequently answering it. The provision of further data is optional.
If you also contact us by e-mail or telephone, we will process the contact data you provide in order to respond to your request.
b. Legal basis of the processing
The processing of your personal data is based on a legitimate interest (Article 6(1)(f) DSGVO). By providing the contact form, we would like to enable you to contact us in an uncomplicated manner. The information you provide will be stored for the purpose of processing the enquiry and for possible follow-up questions. If you contact us to request a quotation, the data provided will be processed to carry out pre-contractual measures (Article 6 (1) (b) DSGVO).
c. Data categories
Contact data and order data
d. Recipients
Recipients of the data are internal employees of the Technology, Marketing, Sales departments and, if applicable, order processors.
e. Storage periods
Data will be deleted at the latest 6 months after processing the enquiry. If there is a contractual relationship, we are subject to the statutory retention periods according to the German Commercial Code (HGB) and delete your data after these periods have expired.
f. Legal / contractual requirement
The provision of your personal data is voluntary. However, we can only process your request if you provide us with your name, e-mail address and the reason for the request.
g. Third country transfer
Processing will not take place outside the European Union (EU) or the European Economic Area (EEA).
h. Right to object
You have the right to object to the processing of your personal data at any time. You can notify us of your revocation at any time using the contact option provided at the beginning of this privacy notice.
i. Automated decision-making and profiling
As a responsible company, we do not use automated decision-making or profiling for this data processing.
VI. Surveys
a. Type and purpose of processing
The following data protection information informs you about the processing of your personal data that we collect from you when you participate in our online surveys.
a) Processing for the purpose of sending the results
In the course of the survey, you may voluntarily provide your contact details. This information is used to send interested participants the results in aggregated form after the survey has been evaluated. In this way, we motivate participants to take part in our online surveys in the future.
If you have given us your consent to use your contact data for the purpose of newsletters, we will use it for this purpose. You can find more information regarding this in section VII.
b) Processing of responses
Generally, no personal data is collected when answering the questions in our survey. In case the wording of the answer, or the answer itself make it possible to draw conclusions about the person of the participant, the data is processed to protect our legitimate interests. The survey serves to further expand and deepen our customer and industry knowledge. This constitutes legitimate interests within the meaning of the aforementioned provision.
We store the questions and answers of the survey. In addition, the results are evaluated and analysed by employees of our company.
The documentation and possible publication of the survey results will be carried out exclusively in anonymous form, without naming you and without providing any information that could be used to draw conclusions about your person.
b. Legal basis of the processing
The processing of your contact data for the purpose of sending you your results is based on your consent pursuant to Art. 6 para. 1 p. 1 lit. a GDPR (German DSGVO).
Insofar as the choice or formulation of the answers makes it possible to draw conclusions about the person of the participant, the data processing is carried out to protect our legitimate interests pursuant to Art. 6 (1) lit. f GDPR (German DSGVO).
c. Data categories
Company name, if applicable name, position, and contact details
d. Recipients
Employees of the marketing and sales departments
Service provider "Surveymonkey" for survey creation within the scope of order processing
e. Storage periods
Your answers will be anonymised or deleted as soon as we have completed the evaluation. Unless there are reasons justifying longer storage (for example, if you have given your consent to the sending of your results in accordance with Art. 6 Para. 1 lit. a GDPR (German DSGVO).
f. Legal / contractual requirement
The provision of your personal data is voluntary, based solely on your consent.
g. Third country transfer
Processing may also take place outside the EU/EEA. We have therefore signed standard contractual clauses with "Surveymonkey".
h. Automated decision making and profiling
As a responsible company, we do not use automated decision-making or profiling for this data processing.
a. Type and purpose of processing
Your data will only be used to send you the newsletter you have subscribed to by e-mail. Your name is given in order to be able to address you personally in the newsletter and, if necessary, to identify you if you wish to exercise your rights as a data subject. To receive the newsletter, it is sufficient to provide your e-mail address. When registering to receive our newsletter, the data you provide will be used exclusively for this purpose. Subscribers may also be informed by e-mail about circumstances relevant to the service or registration (e.g. changes to the newsletter offer or technical circumstances). For an effective registration, we require a valid e-mail address. In order to verify that a registration is actually made by the owner of an e-mail address, we use the "double-opt-in" procedure. For this purpose, we log the order for the newsletter, the sending of a confirmation e-mail and the receipt of the response requested herewith. No further data is collected. The data is used exclusively for sending the newsletter and is not passed on to third parties.
If you have made a purchase of goods and/or services from us, we are entitled to send you information about our own similar goods and services via the e-mail address sent when you made the purchase (§ 7 III UWG). You can object to this use of your e-mail address at any time, either as a whole or for individual measures, e.g. by e-mail info@firstcolo.net or letter firstcolo, Kruppstraße 105, 60388 Frankfurt am Main, without incurring any costs other than the transmission costs according to the basic rates.
b. Legal basis of the processing
On the basis of your express consent (Article 6 para. 1 lit. a DSGVO) or on the basis of legitimate interest (Article 6 para. 1 lit. f DSGVO) in conjunction with the requirements of §7 III UWG (German Unfair Competition Act), we will regularly send you our newsletter or comparable information by e-mail to your specified e-mail address.
c. Data categories
Customer data, contact data and order data
d. Recipients
Recipients of the data are internal employees of the Technology, Marketing, Sales department.
e. Storage periods
The data will only be processed in this context as long as the relevant consent has been given or you have objected to the processing. Afterwards they will be deleted.
f. Third country transfer
Processing will not take place outside the European Union (EU) or the European Economic Area (EEA).
g. Revocation/objection to processing
You can revoke your consent to the storage of your personal data and its use for newsletter dispatch at any time with effect for the future. There is a corresponding link in each newsletter. In addition, you can also unsubscribe directly on this website at any time or inform us of your revocation using the contact option provided at the end of this data protection notice.
h. Automated decision-making and profiling
As a responsible company, we do not use automated decision-making or profiling for this data processing.
a. Nature and purpose of the processing
When you access our website, i.e. if you do not register or otherwise submit information, information of a general nature is automatically collected. This information (server log files) includes, for example, the type of browser, the operating system used, the domain name of your internet service provider, your IP address and the like. This is exclusively information that does not allow any conclusions to be drawn about your person. In particular, they are processed for the following purposes:
- Ensuring a smooth connection setup of the website,
- ensuring the smooth use of our website,
- evaluating system security and stability, and
- for other administrative purposes.
We do not use your data to draw conclusions about your person. Information of this kind may be statistically evaluated by us in order to optimise our website and the technology behind it.
b. Legal basis of the processing
The processing is carried out in accordance with Article 6 (1) f DSGVO on the basis of our legitimate interest in improving the stability and functionality of our website.
c. Data categories
Device, browser, operating system, location and IP address.
d. Recipients
Recipients of the data are internal employees of the technology departments and, where applicable, order processors who act as order processors for the operation and maintenance of our website.
e. Storage periods
Data is deleted as soon as it is no longer required for the purpose for which it was collected. For data used to provide the website, this is generally the case when the respective session has ended.
f. Legal / contractual requirement
The provision of the aforementioned personal data is neither legally nor contractually required. However, without the IP address, the service and functionality of our website cannot be guaranteed. In addition, individual services and services may not be available or may be limited.
g. Third country transfer
Processing does not take place outside the European Union (EU) or the European Economic Area (EEA).
h. Possibility to object
You have the right to object to the processing of your personal data at any time. You can notify us of your revocation at any time using the contact option provided at the beginning of this privacy notice.
i. Automated decision-making and profiling
As a responsible company, we do not use automated decision-making or profiling for this data processing.
a. Type and purpose of processing
Like many other websites, we also use so-called "cookies".
Cookies are simple files that store information about our website and your use of it. These small files are optionally created automatically by your browser when you use our website and are stored locally on your respective end device. This does not mean that we have direct knowledge of your identity as a result. The use of cookies serves to make the use of our offer more pleasant for you.
Most of the cookies we use are so-called "session cookies". They are automatically deleted at the end of your visit. Other cookies remain stored on your end device for longer. These cookies enable us to recognise your browser on your next visit.
We generally distinguish between technically necessary and non-necessary cookies:
Technically necessary cookies ("first party cookies")
are required for the operation of a website and are indispensable for navigating on it and using its functions.
Non-essential cookies, on the other hand, are mostly performance cookies and marketing & third party cookies that allow, for example, the number of visitors and traffic sources to be recorded and counted in order to measure and improve the performance of the website. They are also used to find out if certain pages are experiencing problems or errors, which pages are most popular and how visitors navigate the site.
Performance cookies are used to track visits and individual activities on web pages. They are used to statistically record and evaluate the use of websites.
Marketing & third party cookies come from external advertising companies, among others, and are used to collect information about the websites visited by the user, for example, to create targeted advertising for the user.
The list of cookies used can be found in our cookie banner here.
b. Legal basis of the processing
The use of technically necessary cookies ("first party cookies") is possible without the consent of the website visitor and is subject to a legitimate interest in the economic operation and optimisation of our website and services within the meaning of Article 6 (1) sentence 1 lit. f DSGVO.
The use of cookies that are not necessary, such as performance cookies and marketing & third party cookies, is subject to the consent of the website visitor in accordance with Article 6 para. 1 p. 1 lit. a DSGVO.
c. Data categories
- IP address
- Browser used
- Operating system and end device used
- Internet connection
- Session ID of the cookie
- Time of the visit
d. Recipient
- named in the course of the privacy policy
e. Storage periods
The user can set his web browser in such a way that the storage of cookies on his end device is generally prevented or he is asked each time whether he agrees to the setting of cookies. Once cookies have been set, the user can delete them at any time. How this works is described in the help function of the respective web browser.
A general deactivation of cookies may lead to functional restrictions of this website.
The setting of cookies can also be restricted or deactivated with the help of plug-ins such as https://www.ghostery.com/.
f. Legal / contractual requirement
The provision of your personal data in cookies is voluntary in the case of non-essential cookies, solely on the basis of your consent (so-called opt-in cookies). You can also prevent the use of preset, technically necessary cookies (so-called opt-out cookies) via your browser settings. However, without consent, the service and functionality of our website is not guaranteed. In addition, individual services and services may not be available or may be restricted.
g. Third country transfer
Processing also takes place outside the European Union (EU) or the European Economic Area (EEA). Please see the paragraphs below for more details.
h. Revocation of consent
You can implement the revocation of consent for all cookies at any time with effect for the future in your browser settings or change the selection in the cookie banner. To do this, you can call up the cookie banner here (click).
i. Automated decision making and profiling
As a responsible company, we do not use automated decision-making or profiling when collecting cookies.
a. Type and purpose of processing
Use of Google Tag Manager: Google Tag Manager is a solution that allows marketers to manage website tags through one interface. The Tag Manager tool itself (which implements the tags) is a cookie-less domain and does not collect any personal data. The tool triggers other tags, which in turn may collect data. Google Tag Manager does not access this data. If a deactivation has been made at the domain or cookie level, this remains in place for all tracking tags implemented with Google Tag Manager: http://www.google.de/tagmanager/use-policy.html.
b. Legal basis of the processing
The processing of the data entered is based on our legitimate interest in improving the functionality of our website (Article 6(1)(f) DSGVO).
c. Data categories
No data collected
d. Recipients
Recipients of the data are internal employees of the Marketing, Sales and Google departments as order processors. We have concluded the corresponding order processing agreement with Google for this purpose.
e. Storage periods
Data is only processed in this context for as long as it is necessary. After that, they will be deleted, provided that there are no legal storage obligations to the contrary. To contact us in this context, please use the contact details provided at the beginning of this privacy policy.
f. Legal / contractual requirement
You can object to the processing at any time. If you prevent access, this may result in functional restrictions on the website.
g. Third country transfer
Processing also takes place outside the European Union (EU) or the European Economic Area (EEA). To ensure the level of data protection in this third country, we have concluded standard data protection clauses with Google.
h. Profiling
The Google Tag Manager tool can be used to evaluate the behaviour of visitors to the website and analyse their interests.
a. Nature and purpose of the processing
This website uses Google Analytics, a web analytics service provided by Google Building Gordon House, 4 Barrow Street, Dublin, D04 E5W5, Ireland. Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyse how users use the site. The information generated by the cookie about your use of the website will be transmitted to and stored by Google on servers in the United States. However, due to the activation of IP anonymisation on these websites, your IP address will be truncated beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. The purpose of the data processing is to evaluate the use of the website and to compile reports on activities on the website. Further associated services are then to be provided on the basis of the use of the website and the internet.
b. Legal basis of the processing
The processing of the entered data is based on the user's consent (Article 6 para. 1 lit. a DSGVO).
c. Data categories
- IP address (shortened/anonymised)
-
d. Recipients
- Employees of the IT and marketing department of the own company
- Google Building Gordon House, 4 Barrow Street, Dublin, D04 E5W5, Ireland
e. Storage periods
Data will only be processed in this context as long as the relevant consent has been given. Afterwards, they will be deleted, unless there is a legal obligation to retain them. To contact us in this context, please use the contact details provided at the beginning of this privacy policy.
f. Legal / contractual requirement
The provision of your personal data is voluntary, based solely on your consent. If you prevent access, this may result in functional restrictions on the website.
g. Third country transfer
Processing also takes place outside the European Union (EU) or the European Economic Area (EEA). To ensure the level of data protection in this third country, we have concluded standard data protection clauses with Google (Analytics).
h. Revocation of consent
You can revoke your consent to the storage of your personal data at any time with effect for the future.
You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. In addition, you can prevent the collection of the data generated by the cookie and related to your use of the website (incl. your IP address) to Google as well as the processing of this data by Google by downloading and installing the available browser plugin: "Browser Add On to deactivate Google Analytics".
i. Automatic decision-making and profiling
The tracking tool Google Analytics can be used to evaluate the behaviour of visitors to the website and analyse their interests. For this purpose, we create a pseudonymous user profile.
a. Type and purpose of processing
This website uses Matomo (formerly Piwik), an open source software for statistical analysis of visitor access. The provider of the Matomo software is InnoCraft Ltd, 150 Willis St, 6011 Wellington, New Zealand. Matomo uses cookies, which are text files placed on your computer, to help the website analyse how users use the site. The information generated by the cookie about your use of the website is stored on our server in Germany. The IP address is anonymised immediately after processing and before it is stored. You have the option of preventing the installation of cookies by changing the settings of your browser software. We would like to point out that if you change the setting accordingly, not all functions of this website may be available. You can decide whether a unique web analysis cookie may be stored in your browser to enable the website operator to collect and analyse various statistical data. For more information on the privacy settings of the Matomo software, please see the following link: https://matomo.org/docs/privacy/.
b. Legal basis of the processing
The processing of the data is based on the user's consent (Article 6(1)(a) DSGVO).
c. Data categories
IP address, device operating system, browser language, browser type, usage data, referrer URL, device type, screen resolution, geographical location, sub-pages visited and number of visits.
d. Recipients
Recipients of the data are internal employees of the Marketing, Sales, Technology departments. As we host Matomo ourselves, no connection is made to Matomo's servers.
e. Storage periods
Data is deleted as soon as it is no longer required for our recording purposes.
f. Legal / contractual requirement
The provision of your personal data is voluntary, based solely on your consent. If you prevent access, this may result in functional restrictions on the website.
g. Third country transfer
Although Matomo is based in New Zealand, all data is hosted by Matomo on our own servers located in Germany.
Therefore, the processing does not take place outside the European Union (EU) or the European Economic Area (EEA).
h. Revocation of consent
You can revoke your consent to the storage of your personal data at any time with effect for the future.
You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website.
i. Automated decision-making and profiling
The tracking tool Matomo can be used to evaluate the behaviour of visitors to the website and analyse their interests. For this purpose, we create a pseudonymous user profile.
a. Nature and purpose of the processing
This website uses Yandex Metrica, a web analytics service provided by Yandex LLC, 16 Lva Tolstogo str., Moscow, 119021, Russia. With the help of Yandex Metrica, pseudonymised user profiles are created and evaluated for statistical analysis of user behaviour for optimisation and marketing purposes. Yandex Metrica uses so-called cookies to precisely determine the statistical data. The user's IP address data is also collected, but it is pseudonymised immediately after collection before being stored. The information generated by the cookie (including the pseudonymised IP address) is transmitted to a Yandex server in Russia and stored there.
b. Legal basis of the processing
The processing of the entered data is based on the user's consent (Article 6 para. 1 lit. a DSGVO).
c. Data categories
IP address, usage data, browser information and device data.
d. Recipients
- IT and marketing department employees
- Yandex LLC, 16 Lva Tolstogo str., Moscow, 119021 Russia
e. Storage periods
Data will only be processed in this context as long as the corresponding consent has been given. Afterwards, they will be deleted, unless there is a legal obligation to retain them. To contact us in this context, please use the contact details provided at the beginning of this Privacy Policy.
f. Legal / contractual requirement
The provision of your personal data is voluntary, based solely on your consent. If you prevent access, this may result in functional restrictions on the website.
g. Third country transfer
Your data will be transferred to Russia. The transfer of data takes place under appropriate guarantees in accordance with Article 46 Paragraph 2 lit c DSGVO (standard data protection clauses).
h. Revocation of consent
You can revoke your consent to the storage of your personal data at any time with effect for the future.
You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website.
i. Automatic decision-making and profiling
The tracking tool can be used to evaluate the behaviour of visitors to the website and analyse their interests. For this purpose, we create a pseudonymous user profile.
a. Nature and purpose of the processing
On this website, to avoid non-human and automated input into our contact form, we use the "CleanTalk" service, provided by CleanTalk Inc, 711 S Carson street, Suite 4, Carson City, NV, 89701 USA.
With the help of this service, messages from real people are distinguished from spam messages. For this purpose, parameters such as certain words, IP addresses, email addresses or domain names are sent to a server in the USA and compared there. If CleanTalk identifies one of the transmitted contents as spam, this is returned to C.O.M.E.S as a message and the information is stored in the USA. Our online service has no influence on what information is permanently stored there and cannot view this information. Important: Your data will only be sent to the cloud if you send a message via our contact form. If you do not use our contact form, no data exchange takes place.
Further information on the collection and use of data by Anti-Spam by CleanTalk can be found in the privacy policy of CleanTalk Inc.: https://cleantalk.org/help/cleantalk-gdrp-compliance.
Cleantalk is a pure security application: malware scanner, anti-spam filter for IP networks, protection of contact forms. Please note that your IP address will be sent to the cloud for verification. If you do not want this, you will not be able to use our contact forms.
b. Legal basis for processing
The legal basis for the processing is our legitimate interests in protecting our website against abusive access by bots, i.e. spam protection and protection against attacks (e.g. mass requests), Art. 6 (1) lit. f GDPR.
c. Data categories
{data categories}
d. Recipients
Recipients of the data are internal employees of the {departments/s} and CleanTalk within the scope of commissioned processing.
e. Storage periods
Your data will be processed in the CleanTalk Cloud Service and stored in log files for a maximum of 45 days.
f. Third country transfer
Processing also takes place outside the European Union (EU) or the European Economic Area (EEA). To ensure the level of data protection in the USA, we have concluded standard data protection clauses with CleanTalk.
g. Right to object
You have the right to object to processing at any time.
h. Automated decision making and profiling
As a responsible company, we do not use automated decision-making and profiling.
a. Nature and purpose of the processing
We use the remarketing or "similar target groups" function of Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google") on our website. If you have your habitual residence in the European Economic Area or Switzerland, Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) is the controller of your data. Google Ireland Limited is therefore the company associated with Google which is responsible for processing your data and complying with the applicable data protection laws. The application serves the purpose of analysing visitor behaviour and visitor interests. Google uses cookies to carry out the analysis of website usage, which forms the basis for the creation of interest-based advertisements. The cookies are used to record visits to the website as well as anonymised data on the use of the website. No personal data of visitors to the website is stored. If you subsequently visit another website in the Google Display Network, you will be shown advertisements that are highly likely to take into account previously accessed product and information areas.
b. Legal basis of the processing
The processing of the entered data is based on the user's consent (Article 6 (1) a DSGVO).
c. Data categories
Pages visited, duration of visit, content in which the user is interested, IP address, other information on the use of websites.
d. Recipients
- IT and marketing staff
- Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
e. Storage periods
Data will only be processed in this context as long as the relevant consent has been given. Afterwards, they will be deleted, provided that there are no legal retention obligations to the contrary. To contact us in this context, please use the contact details provided at the beginning of this privacy policy.
f. Legal / contractual requirement
The provision of your personal data is voluntary, based solely on your consent. If you prevent access, this may result in functional restrictions on the website.
g. Third country transfer
Processing also takes place outside the European Union (EU) or the European Economic Area (EEA). To ensure the level of data protection in this third country, we have concluded standard data protection clauses with Google.
h. Revocation of consent
You can revoke your consent to the storage of your personal data at any time with effect for the future.
You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website.
i. Automatic decision-making and profiling
The tracking tool can be used to evaluate the behaviour of visitors to the website and analyse their interests. For this purpose, we create a pseudonymous user profile.
a. Nature and purpose of the processing
We use Microsoft Advertising from Microsoft Corporation (Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA; "Microsoft") on our website. The data processing serves marketing and advertising purposes and the purpose of measuring the success of the advertising measures (conversion tracking). We learn the total number of users who clicked on one of our ads and were redirected to a page marked with a conversion tracking tag. However, this does not allow us to personally identify these users. Microsoft Advertising uses technologies such as cookies and tracking pixels to help analyse how you use the website. When you click on an ad placed by Microsoft Advertising, a cookie for conversion tracking is placed on your computer. This cookie has a limited validity and is not used for personal identification. If you visit certain pages of our website and the cookie has not yet expired, Microsoft and we can recognise that you have clicked on the ad and have been redirected to this page. In doing so, the following information may be collected, among other things: IP address, identifiers assigned by Microsoft (identifiers), information about the browser you are using and the device you are using, referrer URL (web page from which you accessed our website), URL of our website.
b. Legal basis of the processing
The processing of the data entered is based on the user's consent (Article 6 (1) a DSGVO).
c. Data categories
IP address, GUID generated by the UET tag, URL of the page, Microsoft cookie, page title, screen width, digital signature, screen colour depth, UET ID tag, referrer URL, ad click information, page load time, browser language setting, Microsoft click ID and screen height.
d. Recipient
- IT and marketing staff
- Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA
e. Storage periods
Data will only be processed in this context as long as the corresponding consent has been given. Afterwards, they will be deleted, unless there is a legal obligation to retain them. To contact us in this context, please use the contact details provided at the beginning of this privacy policy.
f. Legal / contractual requirement
The provision of your personal data is voluntary, based solely on your consent. If you prevent access, this may result in functional restrictions on the website.
g. Third country transfer
Your data may be transferred to the USA. In order to guarantee an appropriate level of security in this third country, we have agreed the standard data protection clauses with Microsoft.
h. Revocation of consent
You can revoke your consent to the storage of your personal data at any time via the cookie banner with effect for the future.
You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website.
i. Automatic decision-making and profiling
The tracking tool can be used to evaluate the behaviour of visitors to the website and analyse their interests. For this purpose, we create a pseudonymous user profile.
a. Nature and purpose of the processing
We use the online advertising programme "Google Ads" on our website and in this context conversion tracking (visit action evaluation). Google Conversion Tracking is an analysis service provided by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google"). If you have your habitual residence in the European Economic Area or Switzerland, Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) is the controller of your data. Google Ireland Limited is therefore the company associated with Google which is responsible for processing your data and complying with the applicable data protection laws. When you click on an ad placed by Google, a cookie for conversion tracking will be placed on your computer. These cookies have a limited validity, do not contain any personal data and are therefore not used for personal identification. If you visit certain pages of our website and the cookie has not yet expired, Google and we will be able to recognise that you clicked on the ad and were redirected to that page. Each Google Ads customer receives a different cookie. Thus, there is no way that cookies can be tracked across Ads customers' websites. The information obtained with the help of the conversion cookie is used to create conversion statistics. This tells us the total number of users who clicked on one of our ads and were redirected to a page tagged with a conversion tracking tag. However, we do not receive any information that can be used to identify users personally.
b. Legal basis of the processing
The processing of the data entered is based on the user's consent (Article 6(1)(a) DSGVO).
c. Data categories
Ads clicked, web request, cookie ID, cookie information, browser language, IP address, usage data, date and time of visit, error URL and browser type.
d. Recipient
- IT and marketing staff
- Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
e. Storage periods
Data will only be processed in this context as long as the relevant consent has been given. Afterwards, they will be deleted, provided that there are no legal retention obligations to the contrary. To contact us in this context, please use the contact details provided at the beginning of this privacy policy.
f. Legal / contractual requirement
The provision of your personal data is voluntary, based solely on your consent. If you prevent access, this may result in functional restrictions on the website.
g. Third country transfer
Processing also takes place outside the European Union (EU) or the European Economic Area (EEA). To ensure the level of data protection in this third country, we have concluded standard data protection clauses with Google.
h. Revocation of consent
You can revoke your consent to the storage of your personal data at any time with effect for the future.
You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website.
i. Automatic decision-making and profiling
The tracking tool can be used to evaluate the behaviour of visitors to the website and analyse their interests. For this purpose, we create a pseudonymous user profile.
a. Nature and purpose of the processing
This website uses the "LinkedIn Insight Tag", an analytics and tracking tool provided by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland. The LinkedIn Insight Tag enables the collection of data about visits to this website, including URL, referrer URL, IP address, device and browser characteristics, timestamps and page views. LinkedIn does not share any personally identifiable information with the owner of this website, but only provides aggregate reports on website audience and ad performance. LinkedIn also provides retargeting for website visitors so that the owner of this website can use this data to display targeted ads outside of their website without identifying the member. The purpose of the data collection is to analyse visits to our website and campaign results in order to provide you with interesting information.
b. Legal basis of the processing
The processing of the data entered is based on the user's consent (Article 6(1)(a) DSGVO).
c. Data categories
Referrer URL, device information, timestamp, IP address, browser information.
d. Recipients
- IT and marketing staff
- LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland
e. Storage periods
The data is encrypted, anonymised within seven days and the anonymised data is deleted within 90 days. To contact us in this regard, please use the contact details provided at the beginning of this Privacy Policy.
f. Legal / contractual requirement
The provision of your personal data is voluntary, based solely on your consent. If you prevent access, this may result in functional restrictions on the website.
g. Third country transfer
Processing also takes place outside the European Union (EU) or the European Economic Area (EEA). To ensure the level of data protection in this third country, we have concluded standard data protection clauses.
h. Withdrawal of consent
You can revoke your consent to the storage of your personal data at any time via the cookie banner with effect for the future.
You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website.
Members of LinkedIn can control the use of their personal data for advertising purposes in their account settings.
i. Automatic decision-making and profiling
The tracking tool can be used to evaluate the behaviour of visitors to the website and analyse their interests. For this purpose, we create a pseudonymous user profile.
We maintain online presences within social networks in order to inform users active there about our services and to communicate directly via the platforms in the event of interest. We are currently represented in the following networks:
https://twitter.com/firstcolo and https://twitter.com/FirstcoloG
https://linkedin.com/showcase/firstcolo
{e.g. Facebook (direct link)}
{e.g. YouTube (direct link)}
{e.g. Xing (direct link)}
All our social media channels can only be accessed by visitors to the website via an external link. We do not use any plugins or other interfaces on our website that the respective networks offer for embedding the offers on websites.
We have no influence on the collection of data and its further use by the social networks. Thus, we have no knowledge of the extent to which, where and for how long the data is stored, to what extent the networks comply with existing deletion obligations, what evaluations and links are made with the data and to whom the data is passed on. We therefore expressly draw attention to the fact that user data (e.g. personal information, IP address) is stored by the operators of the networks in accordance with their data usage guidelines and used for business purposes.
We process the data of users in the social media presences insofar as they contact and communicate with us via comments or direct messages, for example.
The legal basis for the processing of the user's data is Article 6 (1) lit. b and f DSGVO.
- YouTube
No functions and contents of the Twitter service, offered by Twitter Inc., 795 Folsom Street, Suite600, San Francisco, CA 94107 or 1355 Market Street, Suite 900, San Francisco, CA 94103, USA, are integrated within our online offer. The Twitter channels can only be accessed via an external link. If visitors to the website are members of the Twitter platform, Twitter can assign the call to the social media channel to the user's profile if the user visits our Twitter profile while logged in. We would like to point out that we have no influence on the content or scope of use of the data collected by Twitter Inc. For further information in this regard, please refer to the pages of Twitter Inc. at: http://twitter.com/privacy. Furthermore, we would like to point out that you can make appropriate changes to your Twitter account to protect your privacy.
No functions and contents of the LinkedIn service, offered by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland, are integrated within our online offer. If visitors to our website are members of the LinkedIn platform, LinkedIn can assign the call-up of the social media channel to the user's profile there if the user visits the LinkedIn profile while logged in. We would like to point out that we have no influence on the content, scope of use of the data collected by LinkedIn. For further information in this regard, please refer to LinkedIn's data protection declaration: https://www.linkedin.com/legal/privacy-policy?trk=hb_ft_priv.
You can access the Facebook social media network via external links on our website. All functions in the social media network are offered by Facebook, 4 Grand Canal Square, Dublin 2, Ireland. The Facebook channels can only be accessed via an external link.If you are logged in to Facebook with your own profile and access our social media channel, Facebook can assign your visit to your logged-in profile. If you do not wish your user account to be associated with your IP address, please log out of your Facebook account before using our website.
For further information on the processing of your data, please refer to Facebook's privacy policy: https://facebook.com/privacy/explanation and to our Facebook Fanpage data policy, which you will find below.
No functions and contents of the YouTube service, offered by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, are integrated within our online offer. The YouTube channels can only be accessed via an external link. If visitors to the website are members of the YouTube platform, YouTube can assign the call-up of the social media channel to the user's profile if the user visits our YouTube profile while logged in. We would like to point out that we have no influence on the content or scope of use of the data collected by YouTube. For further information in this regard, please refer to YouTube's privacy policy: https://policies.google.com/privacy?hl=de&gl=de. Furthermore, we would like to point out that you can make appropriate changes to your YouTube account to protect your privacy.
No functions and contents of the Xing service, offered by New Work SE, Dammtorstraße 29-32, 20354 Hamburg, Germany, are integrated within our online offer. The Xing channels are only accessible via an external link. If visitors to our website are members of the Xing platform, Xing can assign the call to the social media channel to the user's profile there if the user visits the Xing profile while logged in. We would like to point out that we have no influence on the content, scope of use of the data collected by Xing. For further information in this regard, please refer to the Xing privacy policy: https://www.xing.com/app/share?op=data_protection.
firstcolo operates an online presence on Facebook, a so-called Facebook Fanpage. The following additional information on data processing applies to visits to our fan page. Information on data protection on Facebook in general can be found here (https://www.facebook.com/about/privacy/).
- joint responsibility, contact details, company data protection officer:
We are jointly responsible with Facebook for the operation of our Facebook Fanpage in accordance with Article 26 DSGVO. To this end, we have entered into an agreement with Facebook to determine who fulfils which obligations with regard to data protection. This agreement can be found here (https://www.facebook.com/legal/terms/page_controller_addendum). Accordingly, Facebook is primarily responsible for providing the data subject with information about the joint processing and enabling him or her to exercise his or her data protection rights. Notwithstanding the above, we hereby inform you about your visit to our Fanpage.
Our contact details are:
diva-e Datacenters GmbH
Kruppstraße 105, 60388 Frankfurt am Main, Germany
info@firstcolo.net
You can reach Facebook at:
Facebook Ireland Ltd.
4 Grand Canal Square,
Grand Canal Harbour,
Dublin 2, Ireland
You can reach Facebook online here (https://www.facebook.com/help/contact/2061665240770586 )
You can reach our company data protection officer at:
Bugl & Kollegen Gesellschaft für Datenschutz und Informationssicherheit mbH
Alexander Bugl
Sedan Street 7
93055 Regensburg
E-mail: kontakt@buglundkollegen.de
You can reach Facebook's data protection officer at
https://www.facebook.com/help/contact/540977946302970.
- collection and storage of personal data as well as type and purpose and use thereof:
- a) Data collected by Facebook:
If you are a Facebook user, Facebook collects the data described in the Facebook Data Policy under "What types of information do we collect?". If you are not a Facebook user, cookies with identifiers, small text files, may still be stored in your browser, which enable so-called tracking of your user behaviour.
As a rule, the user data when visiting Facebook is also processed by Facebook for market research and advertising purposes. Based on user behaviour (including when visiting our fan page), complex user profiles are created which Facebook can use to play personalised advertisements to the visitor within and outside of Facebook. More information on this can also be found in the Facebook data policy.
If you do not agree to this, you can object here (opt-out).
- b) Data used by us ("Page Insights") and legal basis:
Facebook provides us with statistics and usage data that we can use to analyse the use of our Fanpage (so-called "Page Insights"). This enables us to continuously improve our offer on Facebook. As the operator, we do not make any decisions regarding the processing of insights data and all other information resulting from Article 13 of the GDPR, such as the storage period of cookies on user devices. The primary responsibility under the GDPR for the processing of Insights Data lies with Facebook and Facebook fulfils all obligations under the GDPR with regard to the processing of Insights Data.
As the site administrator, we have no other possibility, not even via user tracking, to evaluate user behaviour on our fan page. It is also fundamentally not possible for us to identify the visitor to the fan page on the basis of the page insights. In particular, we have no right under the agreement to demand that Facebook disclose individual visitor data. Identification is only possible for us if we are able to assign individual profile pictures to "Like" Page Views; however, this is only possible to the extent that our Fanpage has been marked with "Like" by the corresponding visitor and the "Like" Page Views is set to "public".
You can find out what information Facebook uses to create page insights here.
The operation of the Faceboook fan page and the use of the page insights serves our legitimate interest in effective external presentation and efficient communication with our customers and interested parties. This interest justifies the operation of the page both in relation to the legitimate interests of Facebook users and in relation to visitors to our fan page who do not have a Facebook account. Accordingly, the legal basis is Article 6 para. 1 lit. f) DSGVO.
- sharing of data with third parties:
Data collected by Facebook is shared and processed throughout the Facebook group. The Facebook group also includes, for example, Instagram, WhatsApp and Oculus. For example, information collected via Facebook is used to display personalised advertising to the user on Instagram, or information from WhatsApp is used to take action on Facebook against accounts that send spam via WhatsApp. This information can be found in the Facebook Data Policy under "How do Facebook companies work together?".
The processing of data by Facebook may involve the transfer of user data outside the European Economic Area (EEA), in particular the USA.
- right to object:
Insofar as your personal data is processed on the basis of legitimate interests pursuant to Article 6(1)(f) DSGVO, you have the right to object to the processing of your personal data pursuant to Article 21 DSGVO, insofar as there are grounds for doing so which arise from your particular situation or the objection is directed against direct marketing. In the latter case, you have a general right of objection, which is implemented by us without specifying a particular situation. If you would like to make use of your right of revocation or objection, it is sufficient to send an e-mail to info@firstcolo.net.
- data subject rights:
You have the right to revoke your consent to us at any time. This has the consequence that we may no longer continue the data processing based on this consent for the future. In addition, you have the right to information under Article 15 of the GDPR, the right to rectification under Article 16 of the GDPR, the right to erasure under Article 17 of the GDPR, the right to restriction of processing under Article 18 of the GDPR, and the right to data portability under Article 21 of the GDPR. Furthermore, you have the right to lodge a complaint with a competent data protection supervisory authority (Article 77 DSGVO).
In principle, you can assert your data subject rights against Facebook as well as against us. Since only Facebook has direct access to your user data, you can most effectively assert your data protection rights against Facebook.
ISO 27001 and ISO 9001 certification
Simultaneously, we have implemented a quality management system according to ISO 9001 in order to always focus on high-quality work that is as error-free as possible, even in the day-to-day operations of our company.
