We are pleased that you are visiting our website. The protection and security of your personal information when using our website is very important to us. We would therefore like to inform you at this point about which of your personal data we collect when you visit our website and for what purposes these are used.
This privacy policy applies to the internet presence of PHT Partner für Hygiene und Technologie GmbH, which is accessible under the domain pht.group as well as the various subdomains (“our website”).
Who is responsible and how can I reach them?
Controller
within the meaning of the EU General Data Protection Regulation (GDPR) for the processing of personal data:
PHT Partner für Hygiene und Technologie GmbH
Förchenholzstr. 19
83646 Bad Tölz
Phone: +49 (0) 8041 / 79 92 4-0
E-Mail:
Data Protection Officer:
FX Data UG (Haftungsbeschränkt)
Verhoevenstraße 4
81739 Munich
Contact person: Felix Gebhard
Email:
What is this about?
This privacy policy fulfills the legal requirements for transparency in the processing of personal data. This refers to all information relating to an identified or identifiable natural person. This refers to any information relating to an identified or identifiable natural person. This includes, for example, information such as your name, age, address, phone number, date of birth, email address, IP address, or user behavior when visiting a website. Information for which we cannot establish a link to your person (or can only do so with a disproportionate amount of effort), e.g., through anonymization, does not constitute personal data. The processing of personal data (such as collection, retrieval, use, storage, or transmission) always requires a legal basis and a defined purpose.
Stored personal data will be deleted as soon as the purpose of the processing has been achieved and there are no legitimate grounds for further retention of the data. We will inform you about the specific storage periods or criteria for storage within the individual processing operations. Irrespective of this, we store your personal data in individual cases for the establishment, exercise, or defense of legal claims, and in the event of statutory retention obligations.
Who receives my data?
We only disclose your personal data processed on our website to third parties if this is necessary to fulfill the purposes and is covered by the legal basis in individual cases (e.g., consent or the protection of legitimate interests). Furthermore, we pass on personal data to third parties in individual cases if this serves the establishment, exercise, or defense of legal claims. Potential recipients may then include, for example, law enforcement authorities, lawyers, auditors, courts, etc.
Insofar as we use service providers for the operation of our website who process personal data on our behalf as processors in accordance with Art. 28 GDPR, these may be recipients of your personal data. Further information on the use of processors and web services can be found in the overview of the individual processing operations.
Are cookies used?
Cookies are small text files that are sent by us to the browser of your end device and stored there as part of your visit to our website. As an alternative to the use of cookies, information can also be stored in the local storage of your browser. Some functions of our website cannot be offered without the use of cookies or local storage (technically necessary cookies). Other cookies, on the other hand, enable us to perform various analyses, allowing us, for example, to recognize the browser you are using when you visit our website again and to transmit various pieces of information to us (non-necessary cookies). With the help of cookies, we can, among other things, make our website more user-friendly and effective for you, for example, by tracking your use of our website and determining your preferred settings (such as country and language settings). Insofar as third parties process information via cookies, they collect the information directly via your browser. Cookies do not cause any damage to your end device. They cannot execute programs and cannot contain viruses.
We provide information about the respective services for which we use cookies in the individual processing operations. Detailed information on the cookies used can be found in the cookie settings or in the consent manager of this website.
| Domain | Name | Provider | Purpose | Category | Legal basis | Storage duration |
|---|---|---|---|---|---|---|
| pht.group | borlabs-cookie | Operator (Borlabs Cookie, self-hosted) | Storage of the consent decision so that the query is not repeated on a subsequent visit, as well as proof according to Art. 7 Para. 1 GDPR | Necessary | § 25 Para. 2 No. 2 TDDDG, Art. 6 Para. 1 lit. c GDPR | approx. 12 months |
| pht.group | wp-wpml_current_language | Operator (WPML, self-hosted) | Storage of the selected language version for delivery of the website in the desired language | Necessary | § 25 Para. 2 No. 2 TDDDG, Art. 6 Para. 1 lit. f GDPR | Session |
| .youtube.com | YSC | Google Ireland Limited | Assignment of user interactions to a video session, counting of video views | Marketing | § 25 Para. 1 TDDDG, Art. 6 Para. 1 lit. a GDPR | Session |
| .youtube.com | VISITOR_INFO1_LIVE | Google Ireland Limited | Bandwidth measurement, selection of playback quality, and reach measurement | Marketing | § 25 Para. 1 TDDDG, Art. 6 Para. 1 lit. a GDPR | approx. 6 months |
| .youtube.com | VISITOR_PRIVACY_METADATA | Google Ireland Limited | Storage of the privacy settings made by the user for video playback | Marketing | § 25 Para. 1 TDDDG, Art. 6 Para. 1 lit. a GDPR | approx. 6 months |
| .youtube.com | __Secure-YNID | Google Ireland Limited | Storage of a unique identifier for recognition and for the delivery of personalized content and advertising | Marketing | § 25 Para. 1 TDDDG, Art. 6 Para. 1 lit. a GDPR | approx. 6 months |
| .youtube.com | __Secure-ROLLOUT_TOKEN | Google Ireland Limited | Control of the gradual rollout of video platform functions to individual users | Marketing | § 25 Para. 1 TDDDG, Art. 6 Para. 1 lit. a GDPR | approx. 6 months |
What rights do I have?
Under the conditions of the legal provisions of the General Data Protection Regulation (GDPR), you as a data subject have the following rights:
- Access according to Art. 15 GDPR to the data stored about your person in the form of meaningful information on the details of the processing as well as a copy of your data;
- Rectification according to Art. 16 GDPR of incorrect or incomplete data stored by us;
- Erasure according to Art. 17 GDPR of the data stored by us, insofar as the processing is not necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise, or defense of legal claims;
- Restriction of processing according to Art. 18 GDPR, insofar as the accuracy of the data is contested, the processing is unlawful, we no longer need the data and you refuse their erasure because you need them for the establishment, exercise, or defense of legal claims or you have objected to the processing according to Art. 21 GDPR;
- Data portability according to Art. 20 GDPR, insofar as you have provided us with personal data within the framework of consent according to Art. 6 Para. 1 lit. a GDPR or on the basis of a contract according to Art. 6 Para. 1 lit. b GDPR and these were processed by us using automated procedures. You will receive your data in a structured, commonly used, and machine-readable format or we will transmit the data directly to another controller, insofar as this is technically feasible;
- Objection according to Art. 21 GDPR against the processing of your personal data, insofar as this takes place on the basis of Art. 6 Para. 1 lit. e, f GDPR and there are reasons for this arising from your particular situation or the objection is directed against direct marketing. The right to object does not exist if overriding, compelling legitimate grounds for the processing are demonstrated or the processing takes place for the establishment, exercise, or defense of legal claims. Insofar as the right to object does not exist for individual processing operations, this is stated there;
- Withdrawal according to Art. 7 Para. 3 GDPR of your given consent with effect for the future;
- Complaint according to Art. 77 GDPR to a supervisory authority if you are of the opinion that the processing of your personal data violates the GDPR. As a rule, you can contact the supervisory authority of your usual place of residence, your place of work, or our company headquarters.
How is my data processed in detail?
Below we inform you about the individual processing operations, the scope and purpose of the data processing, the legal basis, the obligation to provide your data, and the respective storage duration. Automated decision-making in individual cases, including profiling, does not take place.
Provision of the website
Type and scope of processing:
When accessing and using our website, we collect the personal data that your browser automatically transmits to our server. The following information is temporarily stored in a so-called log file:
- IP address of the requesting computer
- Date and time of access
- Name and URL of the retrieved file
- Website from which access is made (referrer URL)
- Browser used and, if applicable, the operating system of your computer, as well as the name of your access provider
Our website is not hosted by us, but by a service provider who processes the aforementioned data on our behalf for this purpose in accordance with Art. 28 GDPR.
Purpose and legal basis
The processing is carried out to safeguard our overriding legitimate interest in displaying our website and ensuring security and stability on the basis of Art. 6(1)(f) GDPR. The collection of data and its storage in log files is strictly necessary for the operation of the website. Due to the exception under Art. 21(1) GDPR, there is no right to object to this processing. Insofar as the further storage of log files is required by law, the processing is based on Art. 6(1)(c) GDPR. There is no legal or contractual obligation to provide this data; however, accessing our website is technically impossible without providing it.
Storage period
The aforementioned data is stored for the duration of the website display and, for technical reasons, beyond that for a maximum of 7 days.
Contact form
Type and scope of processing:
On our website, we offer you the opportunity to contact us via a provided form. The information collected via mandatory fields is required to process the request. In addition, you can voluntarily provide additional information that you consider necessary for processing the contact request. When using the contact form, your personal data will not be passed on to third parties.
Purpose and legal basis:
The processing of your data by using our contact form takes place for the purpose of communication and processing your request on the basis of your consent according to Art. 6 Para. 1 lit. a GDPR. Insofar as your request relates to an existing contractual relationship with us, the processing takes place for the purpose of contract fulfillment on the basis of Art. 6 Para. 1 lit. b GDPR. There is no legal or contractual obligation to provide your data, however, processing your request is not possible without providing the information in the mandatory fields. If you do not wish to provide this data, please contact us by other means.
Storage duration:
Insofar as you use the contact form on the basis of your consent, we store the data collected for each request for a period of three years, starting with the completion of your request or until you withdraw your consent. Should you use the contact form within the framework of a contractual relationship, we store the data collected for each request for a period of three years from the end of the contractual relationship.
Newsletter
Type and scope of processing
If you sign up on our website to receive our newsletter, we collect your email address and store this information along with the date of registration and your IP address. You will subsequently receive an email in which you must confirm your subscription to the newsletter (Double Opt-In).
For the dispatch of newsletters, we use the service CleverReach. The provider is CleverReach GmbH & Co. KG, Mühlenstr. 43, 26180 Rastede. CleverReach is a service with which newsletter dispatch can be organized and analyzed. The data you enter for the purpose of receiving the newsletter (e.g., email address) are stored on CleverReach’s servers in Germany or Ireland.
Our newsletters sent with CleverReach allow us to analyze the behavior of newsletter recipients. Among other things, it can be analyzed how many recipients have opened the newsletter message and how often which link in the newsletter was clicked. With the help of so-called conversion tracking, it can also be analyzed whether a predefined action (e.g., purchase of a product on our website) took place after clicking the link in the newsletter. Further information on data analysis by CleverReach newsletters can be found at: https://www.cleverreach.com/en/features/reporting-and-tracking/.
Purpose and legal basis
We process your data for the purpose of sending the newsletter on the basis of your consent pursuant to Art. 6(1)(a) GDPR. By unsubscribing from the newsletter, you can declare your withdrawal of consent pursuant to Art. 7(3) GDPR at any time with effect for the future. There is no legal or contractual obligation to provide your data; however, sending the newsletter is not possible without providing your data. If you do not want your data to be analyzed by CleverReach, you must also unsubscribe from the newsletter.
If you order goods from us, we will subsequently inform you by email about similar products. You will be separately informed of this as part of your order. You can object to the use of your email address for this purpose at any time without incurring any costs other than the transmission costs according to the basic rates. The legal basis for processing is Art. 6 Para. 1 lit. f GDPR in conjunction with § 7 Para. 3 UWG. The dispatch of these recommendation emails serves our legitimate interest in advertising to existing customers.
Storage duration:
After registering for the newsletter, we store the data for a maximum of 12 hours until the registration is confirmed. After successful confirmation, we store your data until you withdraw your consent (unsubscribing from the newsletter). Data stored by us for other purposes (e.g., email addresses of our customers in the customer database) remain unaffected by this.
Borlabs Cookie
Type and scope of processing:
We use Borlabs Cookie, a software from Borlabs GmbH, on our website to obtain and manage your consent to the storage of cookies and access to information on your end device.
The software is operated exclusively on our own servers. No personal data is transmitted to Borlabs GmbH.
When you grant, change, or withdraw your consent, a cookie named borlabs-cookie is stored on your end device. It contains a randomly generated identifier, the time of your consent, the version of the consent text, and the cookie groups you have approved. We also process your shortened IP address and the time of consent for the purpose of proof.
Purpose and legal basis:
The use serves to fulfill our obligation to provide proof according to Art. 7 Para. 1 GDPR as well as compliance with § 25 Para. 1 TDDDG. The legal basis for processing is Art. 6 Para. 1 lit. c GDPR in conjunction with Art. 7 Para. 1 GDPR, supplemented by our legitimate interest in the legally compliant operation of our online presence according to Art. 6 Para. 1 lit. f GDPR.
The storage of the consent cookie is strictly necessary to set up the service you requested and therefore takes place without consent according to § 25 Para. 2 No. 2 TDDDG.
Storage duration
The borlabs-cookie cookie will be deleted after 60 days. We retain the evidence of your consent for a period of three years (corresponding to the standard statutory limitation period) after the end of the year in which consent was given or withdrawn.
Google Analytics 4
Type and scope of processing
We use Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google processes the data collected through Google Analytics on our behalf.
Google Analytics allows us to evaluate the behavior of visitors to our website. This includes, in particular, information about the number and duration of visits, pages viewed, referring pages, approximate geographical location, browser used, operating system, device type, screen resolution, and language settings. Furthermore, interactions with our website, such as clicks, scrolling, downloads, internal search queries, or the use of embedded videos, can be recorded, provided the corresponding measurement functions are activated.
Google Analytics primarily uses the cookies “_ga” and “ga”. These cookies store a randomly generated identifier that can distinguish individual browsers and sessions. The information collected thereby is transmitted to Google servers and processed there.
During data transmission, the IP address of your device is also technically recorded. According to Google, IP addresses of users from the European Union are used on servers within the EU only to determine an approximate geographical location and are then discarded before the remaining analytics data is stored. The full IP address is therefore not permanently logged or stored in Google Analytics.
The evaluations generated by Google Analytics provide us with aggregated information about the use of our website.
Purpose and legal basis
The processing is carried out for the purpose of analyzing the use of our website, measuring its reach, identifying technical and content-related weaknesses, and continuously optimizing our online offering.
Google Analytics is only used if you have previously consented via our consent management to the necessary data processing and the storage of information on your device. The legal bases are Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG.
You can revoke your consent at any time with effect for the future via the cookie settings. The lawfulness of processing carried out until revocation remains unaffected.
Data transfer to the USA
When using Google Analytics, it cannot be ruled out that personal data may be transmitted to or processed by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, or other companies affiliated with Google.
Google LLC is certified under the EU-U.S. Data Privacy Framework. Data transfers to Google LLC can therefore take place on the basis of the European Commission’s adequacy decision pursuant to Art. 45 GDPR. Insofar as personal data is transferred to recipients for whom no adequacy decision applies, Google states that the transfer is based in particular on the standard contractual clauses approved by the European Commission pursuant to Art. 46 para. 2 lit. c GDPR.
Further information on the processing of personal data by Google can be found at: https://policies.google.com/privacy?hl=de
Storage duration
The Google Analytics cookies “_ga” and “ga” are stored by default for a period of up to two years. The duration can be updated upon a renewed visit to the website. You can delete the cookies at any time via your browser settings or by revoking your consent, or prevent their further use.
The retention period we set for user and event-level data in Google Analytics is [2/14 months]. After this period, the corresponding data is automatically deleted according to Google. Aggregated evaluations that no longer have a direct reference to individual users or events may remain stored.
Further information on data retention in Google Analytics can be found at: https://support.google.com/analytics/answer/7667196?hl=de
RocketCDN
Type and scope of processing
We use RocketCDN, a Content Delivery Network from WP Media SAS, 4 rue de la République, 69001 Lyon, France (“WP Media”). The technical infrastructure of the CDN is provided by BunnyWay d.o.o., Dunajska cesta 165, 1000 Ljubljana, Slovenia (“BunnyWay”).
A Content Delivery Network is a globally distributed network of servers. When using RocketCDN, certain content of our website, particularly images, fonts, stylesheets, JavaScript files, and other static files, are cached on the CDN’s servers. When our website is accessed, this content is delivered from a server located as close as possible to the visitor’s location. This can reduce loading times and improve website stability.
When connecting to the CDN servers, technically required connection data is processed. This may include, in particular, the IP address, date and time of access, the requested file or URL, the previously visited page, the browser used, the operating system, the device type, the amount of data transferred, the HTTP status code, and the location of the delivering CDN server.
Processing is carried out by WP Media and BunnyWay on our behalf.
Purpose and legal basis
The processing is carried out for the purpose of providing our website quickly, securely, and with as few disruptions as possible, reducing the load on our web server, and defending against and analyzing technical faults and attacks.
The legal basis is Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in the technically reliable, secure, and efficient provision of our online offering.
Insofar as technically required information is stored in the browser or on the visitor’s device or read from it as part of the delivery of website content, this is done on the basis of § 25 para. 2 no. 2 TDDDG. In this case, the storage or access is necessary to provide the telemedia service expressly requested by the user.
Data transfer to third countries
RocketCDN uses a globally distributed server network. Depending on the visitor’s location and the availability of individual servers, personal data may therefore also be processed outside the European Union or the European Economic Area.
Insofar as data is transferred to a third country for which an adequacy decision of the European Commission exists, the transfer takes place on the basis of Art. 45 GDPR. Otherwise, the transfer takes place on the basis of appropriate safeguards, in particular the standard contractual clauses approved by the European Commission pursuant to Art. 46 para. 2 lit. c GDPR and, if applicable, supplementary technical and organizational protective measures.
Storage duration
Files delivered via RocketCDN are cached on the CDN’s servers until they are updated or deleted, the cache is cleared, or the use of the service is terminated.
Technical access data is stored only as long as necessary for the provision and security of the CDN. According to the technical infrastructure operator, regular CDN access logs are generally kept for up to three days. IP addresses are anonymized by default in the retrievable log data. We have not activated any further permanent storage of access logs.
Further information on data protection can be found at: https://wp-rocket.me/privacy-policy/ and https://bunny.net/privacy/
WordPress
Type and scope of processing
We use the WordPress content management system, an open-source software from the WordPress Foundation, to operate this website. The software is operated exclusively on the servers of our hosting service provider. No personal data is transmitted to the WordPress Foundation or Automattic Inc. through the use of the software as such.
When you access our website, the system processes the usual connection data, in particular your IP address, date and time of access, the page accessed, the amount of data transferred, the referrer, and information about the browser and operating system (user agent). Details can be found in the section “Hosting and server log files”.
WordPress also sets technically necessary cookies if you use a comment form or log into the protected area of the website. For visitors who neither comment nor log in, no cookies are set by WordPress itself.
Purpose and legal basis
WordPress is used for needs-based provision, technical delivery, and to ensure the stability and security of our online offering. The legal basis is our legitimate interest in a functional and secure website pursuant to Art. 6 para. 1 lit. f GDPR.
The storage of the aforementioned cookies on your end device is absolutely necessary to provide the service you have expressly requested. It therefore takes place without consent according to § 25 para. 2 no. 2 TDDDG.
Data transfer to third countries
No personal data is transferred to third countries through the use of WordPress. Processing takes place exclusively on servers within the European Union.
Storage duration
The specific storage duration of the processed data cannot be influenced by us, but is determined by WordPress.
WPML
Type and scope of processing
We use the WPML software for the multilingual provision of our website. The software is operated exclusively on our own servers. No personal data is transmitted to the provider.
To store the language you have selected, a cookie named wp-wpml_current_language is stored on your end device. It exclusively contains the language code of the accessed language version.
Purpose and legal basis
The use serves to deliver our website in the language you have selected. The legal basis is our legitimate interest in a user-friendly provision of our online offering pursuant to Art. 6 para. 1 lit. f GDPR. The storage of the cookie is absolutely necessary to provide the service you have expressly requested and takes place without consent according to § 25 para. 2 no. 2 TDDDG.
Storage duration
The cookie will be deleted after 1 day.
FX Data Privacy Seal
A data protection seal from FX Data UG (haftungsbeschränkt) is integrated on this page to inform website visitors about the legally compliant appointment of an external data protection officer. The seal itself is loaded as a graphic file from FX Data’s servers when the page is accessed. Due to technical reasons, your IP address is processed to transmit the graphic to your browser.
If you click on this seal, you will leave our page and be redirected to the FX Data website.
Further information can be found in FX Data’s privacy policy: https://www.fx-data.de/datenschutzerklaerung/