We appreciate your interest in our company. Data protection is of a particularly high priority for the management of Apontis GmbH. The use of the website of Apontis is possible without any indication of personal data. However, if a data subject wants to use special services of our enterprise via our website, processing of personal data could become necessary. In this case, for example, if a data subject submits an application via one of our websites, we will generally obtain the consent of the data subject.

This data protection declaration only concerns data that may arise in connection with the use of our Internet pages. Enclosed you will find a more detailed Information Sheet on the handling of your data, e.g. interviews, CRM or online tools. 

The processing of personal data, such as the name, address, e-mail address, or telephone number of a data subject shall always be in line with the General Data Protection Regulation (Datenschutz-Grundverordnung - DS-GVO) and the BDSG neu (Bundesdatenschutzgesetz) and in accordance with the country-specific data protection regulations applicable to Apontis.

As the controller, Apontis has implemented numerous technical and organizational measures to ensure the most complete protection of the personal data processed through this website. Nevertheless, Internet-based data transmissions can always be subject to security vulnerabilities, so that absolute protection cannot be guaranteed. For this reason, every data subject is free to transmit personal data to us by alternative means, for example by telephone.

1. Definition of terms
The data protection declaration of Apontis is based on the terms used by the European Directive and Ordinance when issuing the General Data Protection Regulation (DS-GVO). Our privacy policy is intended to be easily readable and understandable for the public as well as for our customers and business partners.

2. Name and address of the responsible party
The responsible party within the meaning of the General Data Protection Regulation (DS-GVO), other data protection laws applicable in the Member States of the European Union and other provisions of a data protection nature is the:

Apontis GmbH
Stefan Küpper, Geschäftsführung
Türlenstraße 2
70191 Stuttgart

3. Name and address of the data protection officer
The data protection officer of the responsible party is:

Apontis GmbH
Michael Elbs
Stuttgarter Straße 9/11
70469 Stuttgart
E-Mail: datenschutz@remove-this.biwe.de

Any data subject may contact our data protection officer directly at any time with any questions or suggestions regarding data protection.

4. Collection of general data and information
The website of Apontis collects a series of general data and information with each access to the website by a data subject or automated system. This general data and information is stored in the log files of the server. The following data may be collected: (1) the browser types and versions used, (2) the operating system used by the accessing system, (3) the website from which an accessing system accesses our website (so-called referrer), (4) the sub-websites that are accessed via an accessing system on our website, (5) the date and time of access to the website, (6) an Internet protocol address (IP address), (7) the Internet service provider of the accessing system, and (8) other similar data and information that serve to avert danger in the event of attacks on our information technology systems.

5. Contact option via the website
Based on statutory provisions, the website of Apontis contains information that enables a quick electronic contact to our enterprise, as well as direct communication with us, which also includes a general address of the so-called electronic mail (e-mail address). If a data subject contacts the responsible party by e-mail or by using a contact form, the personal data transmitted by the data subject will be stored automatically. Such personal data transmitted on a voluntary basis by a data subject to the responsible party will be stored for the purposes of processing or contacting the data subject. No disclosure of this personal data to third parties will take place.

6. Routine deletion and blocking of personal data
The responsible party processes and stores personal data of the data subject only for the period necessary to achieve the purpose of storage or where provided for by the European Directive and Regulation or other legislator in laws or regulations to which the controller is subject. If the storage purpose no longer applies or if a storage period prescribed by the European Directive and Regulation Maker or another competent legislator expires, the personal data will be routinely blocked or deleted in accordance with the legal provisions.

7. Rights of the data subject
a) Right to confirmation
b) Right to information
c) Right to rectification
d) Right to erasure (right to be forgotten)
e) Right to restriction of processing
f) Right to data portability
g) Right to object
h) Right to revoke consent given under data protection law

8. Privacy policy on the use of cookies
The responsible party of this website has installed cookies. Cookies are small pieces of information that our web server sends to your browser and that your computer stores in its memory with the appropriate default settings. Cookies cannot execute programs or transfer viruses to your computer. They serve to make our Internet offer more user-friendly overall and more comfortable for you. Without the use of cookies, for example, the contact form or the map function on Google Maps can not be used.

Cookies can be controlled with all Internet browsers. Most browsers are set to accept all cookies without asking the user. You can disable individual cookies via your browser setting by deactivating the respective described cookie settings of this website. In addition, you can also technically prevent the storage and use of all cookies by using free browser add-ons. If you prevent the storage of all cookies, this may lead to functional limitations of the website.

Custom cookies
In order for you to use the login functionality and our contact forms on the website, we use so-called session cookies. Session cookies are small pieces of information that a provider stores in the memory of the visitor's computer. A randomly generated unique identification number is stored in a session cookie, a so-called session ID. It also contains information about its origin and the storage period. These cookies cannot store any other data.

If you want to use the login function or the contact forms on the website, you should set your browser to accept session cookies. If you disable these cookies, the login function and contact form on this website cannot be used.

9. Privacy policy on the use of web tracking
The Apontis website uses AWStats, an open source software for statistical analysis of visitor access. AWStats does not use cookie files for the analysis. The statistical analysis is performed anonymously via the log files, which also contain shortened IP addresses. This data is generally not assignable to specific persons. This data is not merged with other data sources, and the data is also deleted after statistical analysis. In contrast to other statistical programs, AWStats does not transmit any data to a third-party server. The program is installed on the own hosting package. This also avoids, for example, the transfer of data abroad, as our server is localized in Germany.

10. Privacy policy on the use and application of Google Analytics (with anonymization function)

The responsible party has integrated the Google Analytics component (with anonymization function) on this website. Google Analytics is a web analysis service. Web analysis is the collection, compilation and analysis of data about the behavior of visitors to websites. A web analysis service collects, among other things, data on the website from which a data subject came to a website (so-called referrers), which sub-pages of the website were accessed or how often and for how long a sub-page was viewed. A web analysis is mainly used for the optimization of a website and for the cost-benefit analysis of internet advertising.

The operating company of the Google Analytics component is Google Inc, 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.

Further information and the applicable data protection provisions of Google can be found at www.google.de/intl/en/policies/privacy/ and at marketingplatform.google.com/about/analytics/terms/us/. Google Analytics is explained in more detail under this link www.google.com/intl/de_de/analytics/.

11. Privacy policy for the use of Google Maps
This website uses Google Maps, a mapping service provided by Google Inc. ("Google"), to display maps and directions. By using Google Maps, information about your use of this website (including your IP address) may be transmitted to and stored by Google on servers in the United States. Google may transfer this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf. It would be possible for Google to create personality profiles of users of this website using the personal data collected via the Google Maps service and to process these or the users' personal data for other purposes over which we have and can have no influence.

You have the option to deactivate the Google Maps service in a simple way and thus prevent the transfer of data to Google: To do so, deactivate JavaScript in your browser. However, we would like to point out that in this case you will not be able to use the map display.

12. Privacy policy on the use and application of Youtube
The responsible party has integrated content and videos from YouTube on this website. The privacy policy of YouTube, a subsidiary of Google Inc, Amphitheatre Parkway, Mountain View, CA 94043, USA, applies. Further information at www.youtube.com/intl/de/yt/about/policies/.

The YouTube videos, which can be played directly from this website, are stored on www.youtube.com and are embedded in "enhanced privacy mode". This means that according to YouTube, no data about you as a user is transmitted to YouTube if you do not play the videos.

13. Legal basis of processing
Article 6 I lit. a DS-GVO (Datenschutz-Grundverordnung) serves our company as the legal basis for processing operations in which we obtain consent for a specific processing purpose. If the processing of personal data is necessary for the performance of a contract to which the data subject is a party, as is the case, for example, with processing operations that are necessary for the delivery of goods or the provision of another service or consideration, the processing is based on Article 6 I lit. b DS-GVO. The same applies to such processing operations that are necessary for the implementation of pre-contractual measures, for example in cases of inquiries about our products or services.

Ultimately, processing operations could be based on Art. 6 I lit. f DS-GVO. Processing operations which are not covered by any of the aforementioned legal bases are based on this legal basis if the processing is necessary for the protection of a legitimate interest of our company or a third party, provided that the interests, fundamental rights and freedoms of the data subject are not overridden. Such processing operations are permitted to us in particular because they were specifically mentioned by the European legislator. In this respect, the European legislator took the view that a legitimate interest could be assumed if the data subject is a customer of the responsible party (recital 47, sentence 2 of the GDPR).

14. Legitimate interests in the processing pursued by the responsible party or a third party
If the processing of personal data is based on Article 6 I lit. f DS-GVO, our legitimate interest is the performance of our business activities for the benefit of the well-being of all our employees and our shareholders.

15. Duration for which the personal data are stored
The criterion for the duration of storage of personal data is the respective statutory retention period. After expiry of the period, the corresponding data is routinely deleted, provided that it is no longer required for the fulfillment or initiation of a contract.

16. Existence of automated decision making
As a responsible company, we do not use automated decision-making.