Data Protection Agreement of CRT Cleanroom-Technology GmbH
(Status: May 2018)
Thank you for your interest in our website www.crt-gmbh.de and in our company, products and services. We are aware that the protection of your privacy is an important concern for you when using our website. Therefore, it goes without saying that we comply with the legal regulations on data protection. Furthermore, it is important to us that you as a customer, know at all times when and how we collect and store your data and how we use it.
In the following, we inform you about the collection and other processing (e.g. storage, retrieval, modification, disclosure) of personal data when using our website. Personal data is all data that can be related to you personally, e.g. name, address, email addresses, user behaviour etc.
If we process personal data in context of the usage of our website, or if we use contracted service providers for individual functions, offers or services of our website with reference to data processing, or if we want to use your data for advertising purposes, we will inform you in detail below about the respective processes, in particular what data is processed in this context. In doing so, we will also state the intended storage period or, in any case, the defined criteria for the storage period, as well as the relevant legal basis for the respective processing.
I. Name and address of the person responsible
The person responsible for General Data Protection Regulation and other national data protection laws of the Member States, as well as other data protection provisions is:
CRT Cleanroom Technology GmbH
Tel.: +49 (0)2404 95690-0
II. . Collection and storage of personal data and the nature, purpose, legal basis and duration of its usage
§ 1 When visiting the website
In the case of merely informative use of the website, i.e. if you do not register or otherwise transmit information to us, we only collect the personal access data in so-called server log files that your browser transmits to our server. The following data is collected as part of the server log files:
- IP Address
- Date and time of your request
- Time-zone difference to Greenwich Mean Time (GMT)
- Content of request (specific page)
- Access Status/HTTP status code
- Data volume transferred in each case
- Website from where the request originated
- Operating system and its interface
- Language and browser software version
This data is evaluated exclusively to ensure trouble-free operation of the site regarding stability and security and to improve our offer and is subsequently discarded. The legal basis for the data processing is Art. 6 para. 1 p.1 lit. f GDPR (DSGVO). Our legitimate interest results from the aforementioned purposes for data collection.
The data is also stored in the log files of our system. Areas not affected by this are the IP addresses of the user or other data that allows the data to be assigned to a user. This data is not stored together with other personal data of the user.
The collection of data for the provision of the website and the storage of the data in log files is absolutely essential for the operation of the website. Consequently, there is no possibility for the user to object.
The data is deleted as soon as it is no longer required to reach the purpose for which it was collected. This is the case when the respective session has ended, when data is collected for the provision of the website.
§ 2 When using our website’s additional services, functions and offers
In addition to the purely informational use of our website, we offer functions that you can use if you are interested. This usually requires you to provide further personal data, which we use to deliver the respective service and to which the aforementioned data processing principles apply. The functions are described in more detail below.
When you contact us via our enquiry form or submit a general enquiry, the data you voluntarily provide (your email address, name, as well as company information) will be stored by us in order to answer your question. It is necessary to provide your email address, name and company. The reply will be sent via email.
The legal basis for the processing is Art. 6 para. 1 lit. a and b) of the GDPR (DSGVO) based on your consent, given voluntarily, and/or in order to respond to your enquiry.
We delete the data accruing in this context after the completion of the enquiry you have made or restrict the processing if there are legal obligations to retain the data.
III. Usage of cookies
§ 1 Scope of data processing
In order to make the visit to our website user-friendly and effective and to enable the use of certain functions, we use so-called cookies on various pages. These are small text files that are stored on your device and save certain settings and data for exchange with our system via your browser. Certain information flows through the cookies to the entity that sets the cookie (in this case us). Cookies cannot execute programs or transmit viruses to your computer.
Cookies do not contain any personal data and can therefore not be directly assigned to any user. Please note that certain cookies are already set as soon as you enter our website. This website uses the following types of cookies:
- Necessary/functional cookies: These cookies are necessary to enable the operation of our website.
- Transient cookies: These are automatically deleted when you close the browser. These include, in particular, session cookies. These store a so-called session ID, with which various requests from your browser can be assigned to the joint session. This enables your computer to be recognised when you return to our website. The session cookies are deleted when you log out or close the browser.
- Persistent cookies: These are automatically deleted after a predefined period of time, which may differ depending on the cookie. You can delete the cookies at any time in the security settings of your browser.
For more information on Analytical Cookies, see IV.
IV. Usage of analytical tools
Web analysis services are used on our website for the purposes of needs-based design and advertising.
We have activated the IP anonymisation function on this website. This means that your IP address is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity, and providing other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser, as part of Google Analytics, will not be merged with other Google data.
Alternatively, to the browser plugin you can prevent the collection of your data by Google Analytics by clicking on the link, especially with mobile device browsers. An opt-out cookie will be set that prevents the collection of your data during future visits to this website.
The opt-out cookie is only valid in this browser and only for our website and is stored on your device. If you delete the cookies in this browser, you must set the opt-out cookie again.
Order data processing
We have concluded an order data processing contract with Google and implement the strict requirements of the German data protection authorities when using Google Analytics.
We use Google Analytics to analyse and continuously improve the use of our website. The statistics obtained enable us to improve our offer and make it more interesting for you as a user. For the exceptional cases in which personal data is transferred to the USA, Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. The legal basis for the use of Google Analytics is Art. 6 para. 1 p. 1 lit. f GDPR (DSGVO). Our legitimate interest results from the aforementioned purposes.
Third-party provider information: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. User conditions: http://www.google.com/analytics/terms/de.html, Overview of data protection: http://www.google.com/intl/de/analytics/learn/privacy.html, as well as the data protection declaration: http://www.google.de/intl/de/policies/privacy.
b. MyFonts Counter
On this website we use MyFonts Counter, a web analytics service provided by MyFonts Inc, 500 Unicorn Park Drive, Woburn, MA 01801, USA. Due to the terms of the licence, page-view tracking is carried out, where the number of visits to the website is counted for statistical purposes and transmitted to MyFonts. MyFonts only collects anonymised data. If necessary, the data is passed on by activating Java Script code in your browser. To prevent the execution of Java Script code from MyFonts completely, you can install a Java Script blocker (e.g. www.noscript.net). You can find further information about MyFonts Counter in the MyFonts data protection information at http://www.myfonts.com/info/terms-and-conditions/#Privacy.
V. Linking to our social media presences
Our website contains links to our social media presences:
When you visit our site, no personal data is initially passed on to the providers of the social network. Only if you click on the link and thereby reach our page on the corresponding social network, the provider of the social network receives the information that you have accessed the appropriate website from our online offer. In addition, the data mentioned under III. §1 of this declaration is transmitted. In the case of Facebook, according to the respective providers in Germany, the IP address is anonymised immediately after collection. By clicking on the link, your personal data is thus transmitted to the respective provider of the social network and stored there (in the case of US providers, in the USA). Since the provider collects the data particularly via cookies, we recommend that you delete all cookies via your browser’s security settings before clicking on the link.
We have no influence on the collected data and data processing procedures, nor are we aware of the full extent of the data collection, the purposes of the processing and the storage periods. We also have no information on the deletion of the collected data by the provider of the social network.
The provider of the social network stores the data collected about you as usage profiles and uses them for the purposes of advertising, market research and/or needs-based design of its website. Such an evaluation is carried out particularly (also for users who are not logged in) for the display of needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact the person responsible for data protection from the respective provider of the social network, in order to exercise this right. Via the links, we offer you the opportunity to interact with the social networks and other users so that we can improve our offer and make it more interesting for you as a user. The legal basis is Art. 6 para. 1 p. 1 lit. f GDPR (DSGVO). Our legitimate interest is derived from the aforementioned purposes.
The data transfer takes place regardless of whether you have an account with the provider of the social network and are logged in. If you are logged in, the data we collect is directly assigned to your account with the respective provider. If you click on the link and, for example, link to the page, the plug-in provider also saves this information in your user account and shares it publicly with your contacts. We recommend that you log out regularly after using a social network, but especially before clicking on the link, as this will prevent it from being assigned to your profile with the provider.
For further information on the purpose and scope of data collection and its processing by the provider of the social network, please refer to the data protection declarations of these providers provided below. There, you will also receive further information on your rights in this respect and setting options for protecting your personal privacy.
Addresses of the respective plug-in providers and URL with their privacy notices:
Facebook Inc, 1601 S California Ave, Palo Alto, California 94304, USA; http://www.facebook.com/policy.php; further information on data collection: http://www.facebook.com/help/186325668085084, http://www.facebook.com/about/privacy/ your-info-on-other#applications and http://www.facebook.com/about/privacy/your-info# everyoneinfo. Facebook has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
VI. Integration of Google reCaptcha and Google Fonts/MyFonts
We use “Google reCAPTCHA” (hereinafter “reCAPTCHA”) on our websites. The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). The purpose of reCAPTCHA is to check whether data entry on our websites (e.g. in a contact form) is made by a human or by an automated program. For this purpose, reCAPTCHA analyses the behaviour of the website visitor based on various characteristics. This analysis begins automatically as soon as the website visitor enters the website. For the analysis, reCAPTCHA evaluates various information (e.g. IP address, time spent by the website visitor on the website or mouse movements made by the user). The data collected during the analysis is forwarded to Google.
However, due to the IP anonymisation on this website (cf. section IV), your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of this service. The IP address transmitted by your browser as part of reCaptcha will not be merged with other Google data.
The data processing is based on Art. 6 para. 1 lit. f GDPR (DSGVO). We have a legitimate interest in protecting our website from abusive, automated spying and SPAM.
b) Google Fonts
Google web fonts (http://www.google.com/webfonts/) are used to improve the visual presentation of various information on this website. The web fonts are installed locally on this website. A connection to Google servers does not take place.
Information on the data protection conditions of Google Web Fonts can be found at: https://developers.google.com/fonts/faq#Privacy
General information on data protection is available in the Google Privacy Center at: http://www.google.com/intl/de-DE/privacy/
To display the fonts on our website, we use web fonts from “myfonts.com”, a font service provided by MyFonts lnc. (“myfonts.com”), 600 Unicorn Park Drive, Woburn, MA 01801, USA. MyFonts provides licensed fonts that can be embedded on Internet pages. For billing and licence control purposes, a so-called tracking pixel/web beacon from MyFonts has been stored on our website. This can be used, for example, to transmit the IP address or technical data of the website visitor’s end device to MyFonts. Further information on data protection at MyFonts can be found at the following link: https://www.myfonts.com/legal/privacy-policy
Use of Google Adwords Conversion
We use the Google Adwords service to draw attention to our attractive offers on external websites with the help of advertising media (so-called Google Adwords). We can determine how successful the individual advertising measures are in relation to the data of the advertising campaigns. In doing so, we pursue the interest of showing you advertising that is of interest to you, of making our website more interesting for you, and of achieving a fair calculation of advertising costs.
These advertisements are delivered by Google via so-called “ad servers”. For this purpose, we use ad server cookies, which can be used to measure certain parameters for measuring success, such as the display of ads or clicks by users. If you access our website via a Google ad, Google Adwords will store a cookie on your PC. These cookies usually lose their validity after 30 days and are not intended to identify you personally. The unique cookie ID, number of ad impressions per placement (frequency), last impression (relevant for post-view conversions) and opt-out information (marking that the user no longer wishes to be addressed) are usually stored as analysis values for this cookie.
These cookies allow Google to recognise your internet browser. If a user visits certain pages of an Adwords’ client’s website and the cookie stored on their computer has not yet expired, Google and the client will be able to detect that the user has clicked on the ad and been redirected to that page. A different cookie is assigned to each Adwords’ customer. Cookies can therefore not be tracked via the websites of Adwords’ customers. We ourselves do not collect and process any personal data in the aforementioned advertising measures. We only receive statistical evaluations from Google. Based on these evaluations, we can see which of the advertising measures used are particularly effective. We do not receive any further data from the use of the advertising media, in particular we cannot identify the users based on this information.
Due to the marketing tools used, your browser automatically establishes a direct connection with Google’s server. We have no influence on the scope and further use of the data collected through the use of this tool by Google and therefore inform you according to the level of our knowledge: Through the integration of AdWords Conversion, Google receives the information that you have called up the corresponding part of our website or clicked on one of our advertisements. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, it is possible that the provider will find out your IP address, store it and link it to other data.
You can prevent participation in this tracking process in various ways:
a) by appropriately setting your browser software, in particular the suppression of third-party cookies means that you do not receive advertisements from third-party providers;
b) by disabling cookies for conversion tracking by setting your browser to block cookies from the domain “www.googleadservices.com”, https://www.google.de/settings/ads, whereby the setting will be deleted when you delete your cookies;
c) by deactivating the interest-based ads of the providers that are part of the self-regulation campaign “About Ads” via the link http://www.aboutads.info/choices, whereby this setting is deleted when you delete your cookies;
d) by permanently deactivating it in your Firefox, Internet Explorer or Google Chrome browsers under the link http://www.google.com/settings/ads/plugin. Please note that in this case you may not be able to use all the functions of this website to their full extent.
The legal basis for the processing of your data is Art. 6 para. 1 p. 1 lit. f GDPR (DSGVO). Our legitimate interest results from the aforementioned purposes.
You can find more information about data protection at Google here:
Google Inc., 1600, Amphitheater Parkway, Mountainview, California, 94043, USA; http://www.google.com/intl/de/policies/privacy and https://services.google.com/sitestats/de.html. Alternatively, you can visit the Network Advertising Initiative (NAI) website at http://www.networkadvertising.org. Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
VIII. Your rights
If your personal data is processed, you have the following rights regarding personal data concerning you:
Right to information, Art. 15 GDPR (DSGVO):
You may request confirmation from the person responsible as to whether personal data relating to you is being processed by them.
If such processing exists, you can request the following information from the person responsible:
- the purposes for which the personal data is processed;
- the categories of personal data which is processed;
- the recipients, or categories of recipients, to whom the personal data concerning you has been or will be disclosed, in particular in the case of recipients in third countries or international organisations; in the latter cases, you may request to be informed about the appropriate safeguards pursuant to Art. 46 of the GDPR (DSGVO) in connection with the transfer;
- the planned duration of the storage of personal data concerning you or, if concrete information on this is not possible, criteria for the determination of the storage duration;
- the existence of a right to rectify or erase personal data concerning you, a right to have processing restricted by the person responsible or a right to object to such processing;
- the existence of a right of appeal to a supervisory authority;
- all available information on the origin of the data if the personal data is not collected from the data subject;
- the existence of automated decision-making, including profiling, pursuant to Article 22(1) and (4) of the GDPR (DSGVO) and – at least in these cases – meaningful information about the logic involved, as well as the scope and intended effects of such processing for the person concerned.
Right to rectification, Art. 16 GDPR (DSGVO):
You have a right to rectification and/or completion vis-à-vis the person responsible for the data, insofar as the personal data processed concerning you is inaccurate or incomplete. The person responsible shall make the correction without delay.
Right to deletion, Art. 17 GDPR (DSGVO):
a) Obligation to delete
You may request that the person responsible must delete the personal data concerning you without delay and the person responsible is obliged to delete such data without delay if one of the following reasons applies:
- The personal data concerning you is no longer necessary for the purposes for which it was collected or otherwise processed.
- You withdraw your consent on which the processing was based pursuant to Art. 6 (1) a or Art. 9 (2) a GDPR (DSGVO), and where there is no other legal basis for the processing.
- You object to the processing pursuant to Article 21(1) of the GDPR (DSGVO) (cf. Section VII) and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Article 21(2) of the GDPR (DSGVO).
- The personal data concerning you has been processed unlawfully.
- The deletion of the personal data concerning you is necessary for compliance with a legal obligation under Union or Member State law to which the person responsible is subject.
- The personal data concerning you was collected in relation to services offered by the information society pursuant to Art. 8(1) GDPR (DGSVO).
b) Information to third parties
If the person responsible has made the personal data concerning you public, and is obliged to erase it pursuant to Article 17(1) of the GDPR (DGSVO), they shall take reasonable steps, including technical measures, regarding the available technology and cost of implementation, to inform the person responsible for the data, who processes the personal data, that you as the data subject have requested they erase all links to and copies or replications of that personal data.
The right to deletion does not exist insofar as the processing is necessary
- to exercise the right to freedom of expression and information;
- for compliance with a legal obligation which requires processing under Union or Member State law to which the person responsible is subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the person responsible;
- for reasons of public interest in the area of public health pursuant to Art. 9 (2) (h) and (i) and Art. 9 (3) GDPR (DSGVO);
- for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes pursuant to Article 89(1) of the GDPR (DSGVO), insofar as the right referred to in Section a) is likely to render impossible or seriously prejudice the achievement of the purposes of such processing, or for the assertion, exercise or defence of legal claims.
Right to restriction of processing, Art. 18 GDPR (DSGVO):
You may request the restriction of the processing of personal data concerning you under the following conditions:
- if you contest the accuracy of the personal data concerning you for a period enabling the person responsible to verify the accuracy of the personal data;
- the processing is unlawful and you refuse the deletion of the personal data and instead request the restriction of the use of the personal data;
- the person responsible no longer needs the personal data for the purposes of processing, but you need it for the assertion, exercise or defence of legal claims, or
- if you have objected to the processing in accordance with Art. 21 (1) GDPR (DGSVO) (cf. point VII) and it has not yet been determined whether the legitimate reasons of the person responsible outweigh your reasons.
Where the processing of personal data relating to you has been restricted, that data may be processed, with the exception of storage, only with your consent or for the establishment, exercise or defence of legal claims, or for the protection of the rights of another natural or legal person, or for reasons of substantial public interest of the Union or of a Member State.
If you have obtained a restriction of processing under the above conditions, you will be informed by the person responsible before the restriction is lifted.
Right to information, Art. 19 GDPR (DGSVO):
If you have exercised the right to rectification, deletion or restriction of processing vis-à-vis the person responsible, this person is obliged to communicate this rectification or deletion of the data or restriction of processing to all recipients to whom the personal data concerning you has been disclosed, unless this proves impossible or involves a disproportionate effort.
You have the to be informed about these recipients from the person responsible.
Right to data portability, Art. 20 GDPR (DSGVO):
You have the right to receive the personal data concerning you that you have provided to the person responsible, in a structured, commonly used and machine-readable format. You also have the right to transmit this data to another person responsible without hindrance from the person responsible to whom the personal data has been provided, provided that
- the processing is based on consent pursuant to Art. 6 para. 1 lit. a GDPR (DSGVO) or Art. 9 para. 2 lit. a GDPR (DSGVO) or on a contract pursuant to Art. 6 para. 1 lit. b GDPR (DSGVO) and
- the processing is carried out with the aid of automated procedures.
In exercising this right, you also have the right to obtain that the personal data concerning you be transferred directly from one person responsible to another person responsible, insofar as this is technically feasible. Freedoms and rights of other persons must not be impaired thereby.
Your right to deletion remains unaffected.
The right to data portability shall not apply to processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the person responsible.
Right to object, Art. 21 GDPR (DSGVO)
You have a right to object on a case-by-case basis and a right to object to the processing of data for advertising purposes. Further information on this can be found in section VII of this data protection declaration.
Right to revoke the declaration of consent under data protection law:
You can revoke your consent to the processing of your personal data at any time vis-à-vis the person responsible. The lawfulness of the processing carried out based on the consent until revocation shall not be affected.
Automated decision in individual cases including profiling, Art. 22 GDPR (DGSVO):
You have the right not to be subject to a decision based solely on automated processing – including profiling – which produces legal effects concerning you or similarly significantly affects you. This shall not apply if the decision
(1) is necessary for the conclusion or fulfilment of a contract between you and the responsible person,
(2) is authorised by legislation of the Union or the Member States to which the person responsible is subject, and that legislation contains adequate measures to safeguard your rights and freedoms and your legitimate interests, or
(3) is done with your express consent.
In cases (1) and (3), the person responsible shall take reasonable steps to safeguard the rights and freedoms and your legitimate interests, including at least the right to obtain the intervention of a person on the part of the person responsible, to express your point of view and to contest the decision.
Furthermore, decisions based exclusively on automated processing may not be based on special categories of personal data pursuant to Article 9(1) of the GDPR (DGSVO), unless Article 9(2)(a) or (g) of the GDPR (DGSVO) applies and appropriate measures have been taken to protect the rights and freedoms of individuals and their legitimate interests.
Right to complain to a supervisory authority, Art. 77 GDPR (DSGVO):
You also have the right to complain to a data protection supervisory authority about the processing of your personal data. You can address your complaint to the supervisory authority in the Member State of your residence, workplace or the place of the alleged infringement. The supervisory authority, to whom the complaint has been lodged shall inform you, as the complainant, of the status and outcome of the complaint, including the possibility of a judicial remedy pursuant to Art. 78 GDPR (DSGVO).
IX. Right of objection according to Art. 21 GDPR (DSGVO)
Right to object on a case-by-case basis:
You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Article 6(1)(e) GDPR (DSGVO) (data processing in the public interest) and Article 6(1)(1)(f) GDPR (DSGVO) (data processing for the purposes of safeguarding the legitimate interests of the person responsible or of a third party); this also applies to profiling based on these provisions. If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the purpose of asserting, exercising or defending legal claims.
Right to object to the processing of data for advertising purposes
In individual cases, we process your personal data in order to carry out direct advertising. You have the right to object at any time to the processing of your personal data for the purpose of such advertising; This also applies to profiling, insofar as it is connected with such direct advertising. If you object to processing for direct marketing purposes, we will no longer process your personal data for these purposes.
The objection in the aforementioned cases can be made without formalities and should be addressed by telephone or, if possible, with the subject “Objection” to:
CRT Cleanroom Technology GmbH
Telephone: +49 (0)2404 95690-0
X. Data security
We make every effort to store your personal data in such a way that it is not accessible to third parties by taking all technical and organisational measures. We cannot guarantee complete data security when communicating by email, so we recommend that you send confidential information by post.
This website uses borlabs cookies which set two technically necessary cookies (borlabsCookie and borlabsCookieUnblockContent) to store your cookie preference.
Borlabs Cookie does not process any personal data.
The cookie borlabsCookie stores your chosen preference that you selected when you entered the website. The cookie borlabsCookieUnblockContent stores which (external) media/content you always want to have automatically unblocked. If you wish to revoke these preferences, simply delete the cookies in your browser. When you re-enter/reload the website, you will be asked again for your cookie preference.