PRIVACY POLICY
Introduction
We, Glasmalerei Peters GmbH, Am Hilligenbusch 25 - 27, 33098 Paderborn, Germany, as the operator of the online service, are responsible for processing the personal data of users of the online service. Our contact details can be found in the imprint of the online offer, the contact persons for questions regarding the processing of personal data are named directly in this privacy policy.
We take the protection of your privacy and your private data very seriously. We collect, store and use your personal data only in accordance with the content of this privacy policy and the applicable data protection regulations, in particular the European General Data Protection Regulation (GDPR) and the national data protection regulations.
With this data protection declaration, we inform you to what extent and for what purposes personal data is processed in connection with the use of the online offer.
Personal data
Personal data is information relating to an identified or identifiable natural person. This includes all information about your identity, such as your name, your e-mail address or your postal address. However, information that cannot be linked to your identity (such as statistical data, for example on the number of users of the online service) is not considered personal data.
In principle, you can use our online offer without disclosing your identity and without providing personal data. We will then only collect general information about your visit to our website. However, personal data is collected from you for some of the services offered. This data is then only processed by us for the purposes of using this online service, in particular for providing the requested information. When collecting personal data, only the data that is absolutely necessary must be provided. In addition, further information may be possible, in which case it is voluntary. We will indicate in each case whether the fields are mandatory or voluntary. We will then provide information on the specific details in the corresponding section of this privacy policy.
Automated decision-making based on your personal data does not take place in connection with the use of our online offer.
Processing of personal information
Your data is stored by us on specially protected servers within the European Union. These are protected by technical and organizational measures against loss, destruction, access, modification or dissemination of your data by unauthorized persons. Access to your data is only possible for a few authorized persons. These persons are responsible for the technical, commercial or editorial support of the servers. Despite regular checks, however, complete protection against all risks is not possible.
Your personal data is transmitted in encrypted form over the Internet. We use TLS / SSL encryption (Transport Layer Security / Secure Socket Layer) for data transmission.
Disclosure of personal data to third parties
We only use your personal information to provide the services you have requested. If external service providers are used by us in the course of providing the service, their access to the data is also exclusively for the purpose of providing the service. We take technical and organizational measures to ensure compliance with data protection regulations and also oblige our external service providers to do the same.
Furthermore, we do not pass on the data to third parties without your express consent, in particular not for advertising purposes. Your personal data will only be passed on if you yourself have consented to the data being passed on or if we are entitled or obliged to do so on the basis of statutory provisions and/or official or court orders. In particular, this may involve providing information for the purposes of criminal prosecution, averting danger or enforcing intellectual property rights.
Insofar as we transfer your personal data ourselves or through service providers to countries outside the European Union, we comply with the special provisions of Art. 44 et seq. GDPR and also oblige our service providers to comply with these regulations. We will therefore only transfer your data to countries outside the European Union subject to the level of protection guaranteed by the GDPR. This level of protection is guaranteed in particular by an adequacy decision of the EU Commission or by suitable guarantees in accordance with Art. 46 GDPR.
Legal basis for data processing
Insofar as we obtain consent for the processing of your personal data, Art. 6 para. 1 lit. a) GDPR is the legal basis for data processing.
Insofar as we process your personal data because this is necessary to fulfill a contract or in the context of a contract-like relationship with you, Art. 6 para. 1 lit. b) GDPR is the legal basis for data processing.
Insofar as we process your personal data to fulfill a legal obligation, Art. 6 para. 1 lit. c) GDPR is the legal basis for data processing.
The legal basis for data processing is also Art. 6 (1) (f) GDPR if the processing of your personal data is necessary to safeguard a legitimate interest of our company or a third party and your interests, fundamental rights and freedoms do not require the protection of personal data.
In this privacy policy, we always indicate the legal basis on which we base the processing of your personal data.
Data erasure and storage duration
We always delete or block your personal data when the purpose of storage no longer applies. However, data may be stored beyond this if this is provided for by legal requirements to which we are subject, for example with regard to statutory retention and documentation obligations. In such a case, we delete or block your personal data after the end of the corresponding requirements.
Use of our online offer
Information about your computer
Each time you access our online offer, we collect the following information about your computer, regardless of your registration: the IP address of your computer, the request from your browser and the time of this request. In addition, the status and the amount of data transferred are recorded as part of this request. We also collect product and version information about the browser used and the computer's operating system. We also record the website from which the online offer was accessed. The IP address of your computer is only stored for the duration of your use of the website and is then deleted or anonymized by shortening it. The other data is stored for a limited period of time.
We use this data for the operation of the online offering, in particular to detect and eliminate errors, to determine the utilization of the online offering and to make adjustments or improvements. These purposes also constitute our legitimate interest in data processing in accordance with Art. 6 para. 1 lit. f) GDPR.
Use of cookies
Cookies are used for our online offer - as on many websites. Cookies are small text files that are stored on your computer and save certain settings and data for exchange with our online offer via your browser. A cookie usually contains the name of the domain from which the cookie file was sent as well as information about the age of the cookie and an alphanumeric identifier.
Cookies enable us to recognize your computer and make any pre-settings and preferences immediately available. The cookies we use are - as far as possible - so-called session cookies, which are automatically deleted at the end of the browser session. Occasionally, cookies with a longer storage period may also be used so that your pre-settings and preferences can also be taken into account the next time you visit our website.
Most browsers are set to accept cookies automatically. However, you can deactivate the storage of cookies or set your browser so that it notifies you as soon as cookies are sent. It is also possible to delete cookies that have already been saved manually via the browser settings. Please note that you may only be able to use our online services to a limited extent or not at all if you reject the storage of cookies or delete necessary cookies.
If cookies are not required for our online offer, we ask you to consent to the use of cookies when you access the online offer for the first time. With regard to the non-essential cookies from third-party providers, you will find a more detailed description of the services we use from these third-party providers below. The legal basis for the associated data processing, including any data transfer, is your consent within the meaning of Art. 6 para. 1 lit. a) GDPR. Once consent has been given, it can be revoked at any time with effect for the future, in particular by changing the selected settings.
The legal basis for the use of necessary cookies is our legitimate interest in the proper provision of our online offer within the meaning of Art. 6 para. 1 lit. f) GDPR and - insofar as contracts are concluded or fulfilled via our online offer - the fulfillment of the contract within the meaning of Art. 6 para. 1 lit. b) GDPR.
Integration of the services of third-party providers
We use third-party services for some of the functions on our website. The corresponding services are mainly optional functions that must be explicitly selected or used by you. We have concluded contractual agreements with the respective providers for the provision or integration of their services and are committed, as far as possible, to ensuring that the third-party providers also provide transparent information about the scope of the processing of personal data and comply with data protection regulations.
External hosting
Our online offer is hosted by STRATO GmbH (Otto-Ostrowski-Straße 7, 10249 Berlin). STRATO provides the infrastructure through which the content of this online offer is delivered. STRATO automatically collects information that your browser transmits when you use the website, including your IP address. This data is processed to protect our legitimate interest in the secure and stable provision of our online offer in accordance with Art. 6 para. 1 lit. f GDPR. We have concluded an order processing contract with STRATO in accordance with Art. 28 GDPR, which ensures that STRATO processes personal data only in accordance with our instructions and in compliance with the applicable data protection regulations.
Use of YouTube
YouTube videos are integrated into our online offering, for the playback of which we use a plugin of the YouTube service operated by Google (hereinafter: "YouTube"). The operator of the service is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").
Cookies are used for the use of YouTube, which enable the integrated videos to be played. When you play the video, Google's YouTube servers are informed, for example, which page of our website you are using to play the video. Google may also set cookies to analyze your user behavior. When using YouTube, however, cookies are only set after you have given your consent.
It cannot be ruled out that data will be transmitted to Google in the USA in this context and that US security authorities may gain access to the data under certain circumstances.
If you are logged into your Google account, you enable Google or YouTube to assign your surfing behavior directly to your personal Google profile. We therefore recommend that you only play embedded YouTube videos if you agree to the associated data processing by Google. You can prevent the assignment of data to your Google profile by logging out of your YouTube account. Further information on the handling of user data can be found in Google's privacy policy at https://www.google.de/intl/de/policies/privacy/, which also applies to YouTube.
We use YouTube to show you videos so that we can better inform you about us and our services. The legal basis for the integration of the videos is our legitimate interest within the meaning of Art. 6 para. 1 lit. f) GDPR; however, the videos are only played and the associated further data processing is only carried out on the basis of your consent within the meaning of Art. 6 para. 1 lit. a) GDPR.
Use of Vimeo
Videos from the Vimeo video platform are integrated into our online offering. The operator of the service is Vimeo LLC, 555 West 18th Street, New York 10011, USA. (hereinafter: "Vimeo").
When you access a website of our online offer on which a video is integrated via Vimeo, a connection to the Vimeo servers is established. Vimeo may set cookies to analyze your user behavior. The server is informed, for example, which pages of our website you have visited.
If you are logged into your Vimeo account, you enable the provider to assign your surfing behavior directly to your personal profile. You can prevent this by logging out of your account. Further information on the handling of user data can be found in Vimeo's privacy policy at https://vimeo.com/privacy.
We use Vimeo so that we can show you videos and inform you about us and our services. The legal basis for the integration of the videos is our legitimate interest within the meaning of Art. 6 para. 1 lit. f) GDPR; however, the playback of the videos and the associated further data processing only take place on the basis of your consent within the meaning of Art. 6 para. 1 lit. a) GDPR.
Applications
You can use the contact details provided in our online offer to apply for a job with us and submit all the necessary information and documents. The use of the e-mail addresses provided is voluntary; you can also send us your application by other means, for example by post.
Upon receipt of an application, your documents will be forwarded to the responsible employee. If an application is received by e-mail, it will be forwarded electronically. If you have applied for an advertised position, the documents will be automatically deleted three months after completion of the recruitment process, provided that no other legitimate interests prevent deletion. Such legitimate interests in this sense are, for example, obligations to provide evidence in proceedings under the General Equal Treatment Act (AGG). In the case of an application without reference to an advertised position (unsolicited application), the application will be kept for as long as there is a possibility that the application may be of interest. You have the option of requesting the deletion of your application at any time, even before the expiry of the specified retention periods. In the event of a successful application, the transmitted data will be stored for the purpose of processing the employment relationship in compliance with the legal requirements. In all other cases, the legal basis for the storage of your applicant data is your consent pursuant to Art. 6 para. 1 lit. a) GDPR.
Facebook Fanpage
In addition to our own online offering, we also operate a fan page on the social network Facebook. We use the fan page to provide information about our activities and offer a channel for communication. The Facebook social network is operated by Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland (hereinafter: "Meta").
Delimitation of responsibility
We would like to point out that you use the fan page and its functions on your own responsibility, especially with regard to interactive functions such as commenting, sharing or rating. Alternatively, you can also access the information offered via the fan page on our homepage.
As far as possible, we try to ensure the protection of your privacy and your private data on Facebook. Insofar as your personal data is processed by us in connection with your visit to the fan page, the explanations in this privacy policy apply without restriction. Due to the integration of the fan page into the Facebook service, it should also be noted that personal data from Meta is processed at the same time. We have no influence on data processing by Facebook; in particular, Meta does not act as a processor for us under our responsibility. Facebook's data processing - at least according to Meta - is governed by Facebook's guidelines, which are available at https://de-de.facebook.com/policy.php. We would like to point out that the data collected about you by Meta in this context may also be transferred outside the European Union.
In terms of data protection law, it can be assumed that Meta and we are jointly responsible for the operation of the Fanpage and the analysis of user data when visiting the Fanpage. In accordance with the requirements of data protection law, we have reached an agreement with Meta on the internal delimitation of responsibility.
Facebook Insights
Meta offers fan page operators the opportunity to obtain an overview of the use of the fan page and its users via the Page Insights functions. Page Insights can be used primarily to access and analyze statistical data. We use the data from Page Insights to make the fan page as attractive and efficient as possible. For this purpose, Meta provides us with data that Meta has generated itself. Further information on how the Page Insights function works and who is responsible for it can be found at Meta at https://www.facebook.com/legal/terms/page_controller_addendum.
Messenger
Facebook offers users who are registered with Facebook the opportunity to communicate directly via Facebook Messenger. If you contact us via Messenger, the data transmitted will be stored and used by us exclusively for the purpose of responding to your inquiry. The legal basis for the processing of your data is your consent within the meaning of Art. 6 para. 1 lit. a) GDPR and our legitimate interest within the meaning of Art. 6 para. 1 lit. f) GDPR. Our legitimate interest lies in the recording and processing of customer inquiries, the evaluation of customer inquiries and the monitoring of misuse.
The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. For your personal data, this is the case when the respective conversation has ended. For us, the conversation has ended when it can be inferred from the circumstances that the matter in question has been conclusively clarified. You have the option of withdrawing your consent to the processing of personal data at any time; in this case, we will delete the data immediately if there is no basis for further storage.
Further information about Facebook
If you have any questions about the use of personal data by us in connection with the use of the Facebook fan page, you are welcome to contact us and our data protection officer at any time. The contact details and communication channels are explained in our privacy policy. If you have any questions about data protection at Meta, please contact Meta directly.
Instagram account
In addition to our own online offering and our Facebook fan page, we also operate an account on the social network Instagram. We use the Instagram account to provide information about our activities and offer a channel for communication. The Instagram social network is operated Meta.
Responsibility under data protection law
As far as possible, we try to ensure the protection of your privacy and your private data on Instagram. Insofar as your personal data is processed by us in connection with your visit to the Instagram account, the explanations in this privacy policy apply without restriction. Due to the integration of the account into the offer of Meta, it should also be noted that personal data is processed by Meta at the same time. When you access our Instagram content, Meta collects, among other things, your IP address and other information that may be stored in the form of cookies and similar technologies on the device you are using or in the respective browser.
We may instruct Meta to match user IDs with other user information and to combine these matched user IDs with event data. Meta then processes the event data for us in order to provide measurement and analysis services and products. The information provided to us by Meta is generally statistical data that we can use to determine the impact of our advertising and content and to gain insights into the use of our online offerings. The data is only used for these purposes. In this respect, Meta acts as our processor in accordance with our instructions.
Insofar as personal information about the use of our online services is processed in event data as part of the Meta Business Tools used by us, it can be assumed that Meta and we are jointly responsible for the operation of our social media channel and the evaluation of user data when visiting the channel. In accordance with data protection regulations, we have reached an agreement with Meta on the internal delimitation of responsibility. The Meta Business Tool we use is Instagram Insights, about which you can find more information in the following section of this privacy policy.
With regard to the further data processing that takes place, it can be assumed that Meta and we have two separate responsibilities for the operation of the Instagram account and the associated communication and analysis options. Insofar as your personal data is processed by us in connection with your visit to our Instagram presence and we alone decide on the purposes and means of this data processing, we are responsible for this data processing. This is usually the case if you communicate directly with us via the "Instagram Direct Messaging" function and transmit your data to us in the process. Insofar as your personal data is processed Meta by and Meta alone decides on the purposes and means of data processing, Meta is solely responsible for this data processing. This applies in particular to the analysis of user behavior by Meta for its own purposes.
We have no influence on data processing by Meta under its responsibility. Meta's data processing is governed - at least according to Meta - by Meta's guidelines, which are available at https://privacycenter.instagram.com/ . Please note that the data Meta collects about you may also be transferred outside the European Union.
Instagram Insights
Facebook offers the operators of Instagram accounts the opportunity to obtain an overview of the use of the account and its users via the "Instagram Insights" function. Instagram Insights can be used primarily to access and analyze statistical data. We use the data from Instagram Insights to make the Instagram account as attractive and efficient as possible. For this purpose, Meta provides us with metadata generated by Meta . The data we receive from Meta is mostly anonymized data and statistics. Insofar as we receive personal data in this context , we are responsible for our further processing of this data to evaluate the use of our Instagram account.
Facebook provides further information on Instagram Insights at https://help.instagram.com/1533933820244654 .
Instagram Direct Messaging
Instagram gives you the opportunity to communicate directly with us via the "Instagram Direct Messaging" function. If you contact us via the Instagram Direct Messaging function, the data transmitted will be stored and used by us exclusively for the purpose of responding to your request. The legal basis for the processing of your data is your consent within the meaning of Art. 6 para. 1 lit. a) GDPR and our legitimate interest within the meaning of Art. 6 para. 1 lit. f) GDPR. Our legitimate interest lies in the recording and processing of customer inquiries, the evaluation of customer inquiries and the monitoring of misuse.
The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. For your personal data, this is the case when the respective conversation has ended. For us, the conversation has ended when it can be inferred from the circumstances that the matter in question has been conclusively clarified. You have the option of withdrawing your consent to the processing of personal data at any time; in this case, we will delete the data immediately if there is no basis for further storage.
Further information about Instagram
If you have any questions about the use of personal data by us in connection with the use of our Instagram account, you are welcome to contact us and our data protection officer at any time. The contact details and communication channels are explained in our privacy policy. If you have any questions about data protection on the Instagram social network offered by Meta, please contact Meta directly.
Communication with us
You can contact us in various ways, including via the e-mail addresses provided in our online offer. We are also happy to keep you regularly informed with our newsletter by e-mail.
Newsletter
When you register for our newsletter, your e-mail address will be used for our own advertising purposes until you unsubscribe. You will receive regular information by e-mail on current topics as well as e-mails on special occasions, such as special promotions. The e-mails may be personalized and individualized based on our information about you.
Unless you have given us your consent in writing, we use the so-called double opt-in procedure to subscribe to our newsletter, i.e. we will only send you a newsletter by e-mail if you have expressly confirmed to us beforehand that we should activate the newsletter dispatch. We will then send you a notification e-mail and ask you to confirm that you wish to receive our newsletter by clicking on a link contained in this e-mail.
The legal basis for the processing of your data is your consent in accordance with Art. 6 para. 1 lit. a) GDPR if you have expressly registered for the newsletter. Within the scope of the legal requirements, it may also be possible for you to receive our newsletter from us without express consent because you have ordered goods or services from us, we have received your email address in this context and you have not objected to receiving information by email. In this case, the legal basis is our legitimate interest in sending direct advertising in accordance with Art. 6 para. 1 lit. f) GDPR.
If you no longer wish to receive newsletters from us, you can revoke your consent at any time with effect for the future or object to the further receipt of the newsletter without incurring any costs other than the transmission costs according to the basic rates. Simply use the unsubscribe link contained in every newsletter or send a message to us or our data protection officer.
Mailchimp
We use MailChimp to send our newsletter. MailChimp is a service provided by The Rocket Science Group, LLC, 512 Means Street, Suite 404, Atlanta, GA 30318 (hereinafter: "Mailchimp").
The email addresses of our newsletter recipients as well as the other data processed in the course of sending the newsletter are stored on MailChimp's servers in the USA, so that it cannot be ruled out that US authorities may also have access to them. MailChimp also offers various options for analyzing the extent to which the newsletters sent are opened and used, for example how many users an email was sent to, whether emails were rejected and whether users unsubscribed from the list after receiving an email. The analyses are carried out on a group basis and are not used by us for individual evaluation. Further information on data protection in connection with MailChimp can be found at: http://mailchimp.com/legal/privacy/.
MailChimp uses the information provided and collected to send and analyze the newsletter on our behalf. We have concluded a "Data Processing Agreement" with MailChimp. This is a contract in which MailChimp undertakes to protect the data of our users, to process it on our behalf in accordance with its data protection provisions and, in particular, not to pass it on to third parties.
The legal basis for the cooperation with MailChimp is your express consent in accordance with Art. 6 para. 1 lit. a) GDPR.
Social Media
You will find links to the social networks Facebook and Instagram on our website. You can recognize the links by the respective provider's logo.
Clicking on the links opens the corresponding social media pages, for which this privacy policy does not apply. For details on the provisions applicable there, please refer to the corresponding data protection declarations of the individual providers; you can find these at:
Facebook: http://www.facebook.com/policy.php
Instagram: https://help.instagram.com/519522125107875
No personal information is transmitted to the respective providers before the corresponding links are called up. Your access to the linked page is also the basis for data processing by the respective provider.
Your rights and contact
We attach great importance to explaining the processing of your personal data as transparently as possible and to informing you of the rights to which you are entitled. If you would like more information or wish to exercise your rights, you can contact us at any time so that we can take care of your request.
Rights of data subjects
You have extensive rights with regard to the processing of your personal data. First of all, you have a comprehensive right to information and can request the correction and/or deletion or blocking of your personal data if necessary. You can also request a restriction of processing and have the right to object. With regard to the personal data you have provided to us, you also have the right to data portability .
If you would like to assert one of your rights and/or receive more information about this, please contact our customer service. Alternatively, you can also contact our data protection officer.
Withdrawal of consent and objection
Once you have given your consent, you can freely withdraw it at any time with effect for the future. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. Contact persons for this are also our customer service and our data protection officer.
If the processing of your personal data is not based on consent, but on another legal basis, you can object to this data processing. Your objection will lead to a review and, if necessary, termination of the data processing. You will be informed of the result of the review and - if the data processing is nevertheless to be continued - you will receive more detailed information from us as to why the data processing is permissible.
Data protection officer and contact
We have appointed an external data protection officer who supports us in data protection issues and whom you can also contact directly. Our data protection officer and his team will be happy to answer any questions you may have regarding our handling of personal data or further information on data protection issues:
Attorney Dr. Christoph
c/o BRANDI Rechtsanwälte
Adenauerplatz 1, 33602 Bielefeld
Telephone: 0521 / 96535- 875
E-mail: datenschutz@brandi.net
If you would like to contact our data protection officer personally by e-mail, you can also reach him at christoph.rempe@brandi.net.
Complaints
If you are of the opinion that the processing of your personal data by us does not comply with this privacy policy or the applicable data protection regulations, you have the right to lodge a complaint with the supervisory authority. You can also lodge a complaint with our data protection officer. The data protection officer will then investigate the matter and inform you of the outcome of the investigation.
Further information and changes
Links to other websites
Our online offer may contain links to other websites. These links are generally identified as such. We have no influence on the extent to which the applicable data protection regulations are complied with on the linked websites. We therefore recommend that you also inform yourself about the data protection declarations of other websites.
Changes to this privacy policy
The status of this privacy policy is indicated by the date (below). We reserve the right to amend this privacy policy at any time with effect for the future. A change will be made in particular in the event of technical adjustments to the online offer or changes to the data protection regulations. The current version of the data protection declaration can always be accessed directly via the online offer. We recommend that you inform yourself regularly about changes to this privacy policy.
Status of this privacy policy: May 2025