We are pleased that you are visiting our website. The protection and security of your personal information when using our website is very important to us. We would therefore like to inform you at this point which of your personal data we collect when you visit our website and for what purposes it is used.
This data protection declaration applies to the Internet offering of Ingenieurbüro Fritz Spieth Beratende Ingenieure GmbH, which can be accessed under the domain www.ib-spieth.de as well as the various subdomains ("our website").
Who is responsible and how can I reach you?
Responsible
for the processing of personal data within the meaning of the EU General Data Protection Regulation (GDPR)
Ingenieurbüro Fritz Spieth Beratende Ingenieure GmbH
Fritz-Müller-Straße 143
73730 Esslingen am Neckar
DE
+49 (0) 711 931858-0
info@ib-spieth.de
Data Protection Officer
Datenschutzberatung Janthur GmbH
Küferstraße 8
73728 Esslingen
DE
Dirk Janthur
dirk.janthur@janthur.net
What is it about?
This privacy statement complies with the legal requirements for transparency in the processing of personal data. This is any information relating to an identified or identifiable natural person. This includes, for example, information such as your name, age, address, telephone number, date of birth, email address, IP address or user behaviour when visiting a website. Information for which we cannot (or can only with disproportionate effort) establish a link to your person, e.g. through anonymisation, is not personal data. The processing of personal data (e.g. collection, retrieval, use, storage or transmission) always requires a legal basis and a defined purpose.
Stored personal data are deleted as soon as the purpose of the processing has been achieved and there are no legitimate grounds for further storage of the data. We inform you about the specific storage periods or criteria for storage in the individual processing operations. Irrespective of this, we store your personal data in individual cases for the assertion, exercise or defence of legal claims and if there are statutory retention obligations.
Who gets my data?
We only disclose your personal data that we process on our website to third parties if this is necessary for the fulfilment of the purposes and is covered by the legal basis in the individual case (e.g. consent or safeguarding legitimate interests). In addition, we disclose personal data to third parties in individual cases if this serves the assertion, exercise or defence of legal claims. Possible recipients may then be, for example, law enforcement agencies, lawyers, auditors, courts, etc.
Insofar as we use service providers for the operation of our website who process personal data on our behalf within the scope of commissioned processing pursuant to Art. 28 DSGVO, they may be recipients of your personal data. You can find more information on the use of processors and web services in the overview of the individual processing operations.
Do you use cookies?
Cookies are small text files that are sent by us to the browser of your end device when you visit our website and are stored there. As an alternative to the use of cookies, information can also be stored in the local storage of your browser. Some functions of our website cannot be offered without the use of cookies or local storage (technically necessary cookies). Other cookies, however, enable us to carry out various analyses, so that we are able, for example, to recognise the browser you are using when you visit our website again and to transmit various information to us (non-essential cookies). With the help of cookies, we can, among other things, make our website more user-friendly and effective for you, for example by tracking your use of our website and determining your preferred settings (e.g. country and language settings). If third parties process information via cookies, they collect the information directly via your browser. Cookies do not cause any damage to your end device. They cannot execute programs or contain viruses.
We provide information about the respective services for which we use cookies in the individual processing procedures. Detailed information on the cookies used can be found in the [Cookie Settings of this Privacy Policy / Consent Manager].
| DOMAIN | NAME | DESCRIPTION | STORAGE DURATION |
| .ib-spieth.de | _ga | This cookie name is linked to Google Universal Analytics - an important update to Google's more commonly used analytics service. This cookie is used to distinguish unique users by assigning a randomly generated number as a client ID. It is included in every page request in a website and used to calculate visitor, session and campaign data for website analytics reports. By default it expires after 2 years, although this can be adjusted by website owners. | approx. 2 years |
| .ib-spieth.de | _gat_gtag_UA_199969149_1 | Google Analytics | 20 Seconds |
.ib-spieth.de | _gid | This cookie name is associated with google Universal Analytics. This appears to be a new cookie and as of spring 2017 no information is available from Google. It appears to store and update a unique value for each page visited. | 24 Hours |
| www.ib-spieth.de | cookie_optin | Not available | approx. 12 months |
What rights do I have?
Under the conditions of the statutory provisions of the General Data Protection Regulation (DSGVO) and the Federal Data Protection Act (BDSG), you have the following rights as a data subject:
- Information pursuant to Art. 15 DSGVO, § 34 BDSG about the data stored about you in the form of meaningful information about the details of the processing as well as a copy of your data;
- Correction pursuant to Art. 16 DSGVO of incorrect or incomplete data stored by us;
- Erasure pursuant to Art. 17 DSGVO of the data stored by us, unless the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the assertion, exercise or defence of legal claims;
- Restriction of processing pursuant to Art. 18 DSGVO, insofar as the accuracy of the data is disputed, the processing is unlawful, we no longer need the data and you object to their deletion because you need them for the assertion, exercise or defence of legal claims or you have objected to the processing pursuant to Art. 21 DSGVO.
- Data portability pursuant to Art. 20 DSGVO, insofar as you have provided us with personal data within the scope of consent pursuant to Art. 6 Para. 1 lit. a DSGVO or on the basis of a contract pursuant to Art. 6 Para. 1 lit. b DSGVO and these have been processed by us with the aid of automated procedures. You will receive your data in a structured, common and machine-readable format or we will transfer the data directly to another responsible party, insofar as this is technically feasible.
- You have the right to object to the processing of your personal data pursuant to Art. 21 of the German Data Protection Act (DSGVO), insofar as this is carried out on the basis of Art. 6 Para. 1 lit. e, f DSGVO and there are reasons for this which arise from your particular situation or the objection is directed against direct advertising. The right to object does not exist if overriding compelling legitimate grounds for the processing can be demonstrated or the processing is carried out for the assertion, exercise or defence of legal claims. Where the right to object does not exist for individual processing operations, this is indicated there.
- Revocation pursuant to Art. 7 (3) DSGVO of your granted consent with effect for the future.
- Complaint pursuant to Art. 77 of the GDPR to a supervisory authority if you are of the opinion that the processing of your personal data violates the GDPR. As a rule, you can contact the supervisory authority of your usual place of residence, your place of work or our company headquarters.
How is my data processed in detail?
In the following, we inform you about the individual processing operations, the scope and purpose of the data processing, the legal basis, the obligation to provide your data and the respective storage period. An automated decision in individual cases, including profiling, does not take place.
Provision of the website
Nature and scope of the processing
When you call up and use our website, we collect the personal data that your browser automatically transmits to our server. The following information is temporarily stored in a so-called log file:
- IP address of the requesting computer
- Date and time of access
- Name and URL of the file accessed
- Website from which the access was made (referrer URL)
- Browser used and, if applicable, the operating system of your computer, as well as the name of your access provider
Our website is not hosted by ourselves, but by a service provider who processes the aforementioned data on our behalf in accordance with Art. 28 DSGVO for the purpose of providing the website.
Purpose and legal basis
The processing is carried out to protect our overriding legitimate interest in displaying our website and guaranteeing security and stability on the basis of Art. 6 para. lit. f DSGVO. The collection of data and storage in log files is absolutely necessary for the operation of the website. There is no right to object to the processing due to the exception according to Art. 21 (1) DSGVO. Insofar as the further storage of log files is required by law, the processing is carried out on the basis of Art. 6 para. 1 lit. c DSGVO. There is no legal or contractual obligation to provide the data, however, calling up our website is not technically possible without providing the data.
Storage period
The aforementioned data is stored for the duration of the website display and for technical reasons for a maximum of 7 days.
Contact form
Nature and scope of the processing
On our website, we offer you the opportunity to contact us via a form provided. The information collected via mandatory fields is required in order to process the request. Furthermore, you can voluntarily provide additional information that you consider necessary for processing the contact request.
When using the contact form, your personal data will not be passed on to third parties.
Purpose and legal basis
The processing of your data through the use of our contact form is carried out for the purpose of communication and processing your enquiry on the basis of your consent pursuant to Art. 6 (1) lit. a DSGVO. Insofar as your enquiry relates to an existing contractual relationship with us, the processing is carried out for the purpose of fulfilling the contract on the basis of Art. 6 para. 1 lit. b DSGVO. There is no legal or contractual obligation to provide your data, but the processing of your request is not possible without the provision of the information of the mandatory fields. Insofar as you do not wish to provide this data, please contact us by other means.
Storage period
If you use the contact form on the basis of your consent, we store the collected data of each enquiry for a period of three years, starting with the completion of your enquiry or until your consent is revoked.
[Should you use the contact form in the context of a contractual relationship, we store the collected data of each enquiry for a period of [three years] from the end of the contractual relationship].
Contact form for applicants
Nature and scope of the processing
On our website, we offer you the opportunity to submit an application to us via a form provided. The information collected via mandatory fields is required in order to process the request. Furthermore, you can voluntarily provide additional information that you consider necessary for processing the contact request.
If you have given us your separate consent, which is independent of the use of the application form, we will pass on your application to the companies affiliated with us (group companies).
No data will be passed on to third parties when using the application form.
Purpose and legal basis
The processing of your data based on the use of the application form is carried out for the purpose of processing your application and deciding on the establishment of an employment relationship on the basis of § 26 BDSG. There is no legal or contractual obligation to provide your data, but it is not possible to process your application without providing the information in the mandatory fields. If you do not wish to provide this data, please use other options for applying to us.
Storage period
We store the data collected for the duration of the application process and, in the event of non-employment, for six months from the date of rejection and, in the event of employment, for three years after the end of employment.
CDNJS
Nature and scope of the processing
We use CDNJS to properly deliver the content of our website. CDNJS is a service of Cloudflare, Inc. which acts as a content delivery network (CDN) on our website.
A CDN helps to provide content of our online offer, in particular files such as graphics or scripts, more quickly with the help of regionally or internationally distributed servers. When you access this content, you establish a connection to servers of Cloudflare, Inc., whereby your IP address and, if applicable, browser data such as your user agent are transmitted. This data is processed exclusively for the above-mentioned purposes and to maintain the security and functionality of CDNJS.
Purpose and legal basis
The use of the Content Delivery Network is based on our legitimate interests, i.e. interest in a secure and efficient provision and optimisation of our online offer pursuant to Art. 6 para. 1 lit. f. DSGVO.
Storage period
The concrete storage period of the processed data cannot be influenced by us, but is determined by Cloudflare, Inc. Further information can be found in the data protection declaration for CDNJS: https://www.cloudflare.com/privacypolicy/.
Google Analytics
Nature and scope of the processing
We use Google Analytics from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, as an analysis service for the statistical evaluation of our online offer. This includes, for example, the number of views of our online offering, sub-pages visited and the length of stay of visitors.
Google Analytics uses cookies and other browser technologies to evaluate user behaviour and recognise users.
This information is used, among other things, to compile reports on website activity.
Purpose and legal basis
We process data with the help of Google Analytics for the purpose of optimising our website and for marketing purposes on the basis of your consent pursuant to Art. 6 para. 1 lit. a. DSGVO.
Storage period
The concrete storage period of the processed data cannot be influenced by us, but is determined by Google Ireland Limited. Further information can be found in the privacy policy for Google Analytics: policies.google.com/privacy.
Google Fonts
Nature and scope of the processing
We use Google Fonts from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, as a service to provide fonts for our online offer. To obtain these fonts, you establish a connection to servers of Google Ireland Limited, whereby your IP address is transmitted.
Purpose and legal basis
The use of Google Fonts is based on our legitimate interests, i.e. interest in a uniform provision as well as the optimisation of our online offer pursuant to Art. 6 para. 1 lit. f. DSGVO.
Storage period
The concrete storage period of the processed data cannot be influenced by us, but is determined by Google Ireland Limited. Further information can be found in the privacy policy for Google Fonts: policies.google.com/privacy.
Google Tag Manager
Nature and scope of the processing
We use Google Tag Manager provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Tag Manager is used to manage website tags via an interface and allows us to control the precise integration of services on our website.
This allows us to flexibly integrate additional services to evaluate user access to our website.
Purpose and legal basis
The use of Google Tag Manager is based on our legitimate interests, i.e. interest in optimising our services in accordance with Art. 6 para. 1 lit. f. DSGVO.
Storage period
The concrete storage period of the processed data cannot be influenced by us, but is determined by Google Ireland Limited. Further information can be found in the privacy policy for Google Tag Manager: marketingplatform.google.com/about/analytics/tag-manager/use-policy/.
JSDelivr CDN
Nature and scope of the processing
We use JSDelivr CDN to properly deliver the content on our website. JSDelivr CDN is a service of Prospect One, which acts as a content delivery network (CDN) on our website.
A CDN helps to provide content from our online offering, in particular files such as graphics or scripts, more quickly using regionally or internationally distributed servers. When you access this content, you establish a connection to servers of Prospect One, Krolewska 65a, Krakow, Malopolskie 30-081, Poland, whereby your IP address and possibly browser data such as your user agent are transmitted. This data is processed exclusively for the above-mentioned purposes and to maintain the security and functionality of JSDelivr CDN.
Purpose and legal basis
The use of the Content Delivery Network is based on our legitimate interests, i.e. interest in a secure and efficient provision and optimisation of our online offer pursuant to Art. 6 para. 1 lit. f. DSGVO.
Storage period
The specific storage period of the processed data cannot be influenced by us, but is determined by Prospect One. Further information can be found in the data protection declaration for JSDelivr CDN: https://www.jsdelivr.com/privacy-policy-jsdelivr-net.
jQuery CDN
Nature and scope of the processing
We use jQuery CDN to properly deliver the content of our website. jQuery CDN is a service of jQuery, which acts as a Content Delivery Network (CDN) on our website.
A CDN helps to deliver content from our website, in particular files such as graphics or scripts, more quickly using regionally or internationally distributed servers. When you access this content, you establish a connection to servers of jQuery, whereby your IP address and, if applicable, browser data such as your user agent are transmitted. This data is processed exclusively for the above-mentioned purposes and to maintain the security and functionality of jQuery CDN.
Purpose and legal basis
The use of the Content Delivery Network is based on our legitimate interests, i.e. interest in a secure and efficient provision and optimisation of our online offer pursuant to Art. 6 para. 1 lit. f. DSGVO.
Storage period
The concrete storage period of the processed data cannot be influenced by us, but is determined by jQuery. Further information can be found in the privacy policy for jQuery CDN: https://www.stackpath.com/legal/privacy-statement/.