Stand: 5.2018

Summary of the processing of personal data

Controller
i:FAO Group GmbH

Purposes for which personal data is processed
Use of the personal data to perform and display the request made via the website (contact form)

Legal basis for the processing
We will only process your personal data if we are entitled to by the EU General Data Protection Regulation (GDPR). The legal bases are contained in Article 6 of the GDPR. We may process your personal data for example, when

  • you have given your consent to it,
  • it is necessary for the performance of a contract, or in order to take steps prior to entering into a contract, or
  • we have a legitimate interest in the processing.

In the following privacy policy we explain in detail why we process your personal data and on which legal base.

Recipients of personal data
i:FAO Group GmbH and all third parties with which personal data is shared.

Rights of the data subject
You are entitled to receive information about the personal data relating to you as well as to rectification or erasure or restriction  of processing and a right of objection against the processing as well as the right to data portability. If the processing is based on your consent, you also have the right to withdraw your consent at any time. The right also exists to lodge a complaint at a supervisory authority.

Detailed and further information
Further information is available below.

Purpose of the Privacy Policy

We, the i:FAO Group GmbH, deal seriously with data protection and would like to acquaint you with our procedures for the collection, use and disclosure of personal data (data which identifies you as individual). This Privacy Policy (“Privacy Policy”) valid for this website of the i:FAO Group GmbH describes the procedures applied by us in conjunction with the information we collected via this website (the “website”). They do not refer to the collection, use or disclosure of data which is collected in other ways than via the website.

This Privacy Policy does not apply to personal data we collected from you as traveler or as consumer of the products provided by the cytric system.

We reserve the right to make changes to this Privacy Policy. The indication “Last update” at the top of this site gives you information about the time at which we revised this Privacy Policy last. All changes to our Privacy Policy come into effect as soon as we publish the revised Privacy Policy on the website. The use of the website following such changes implies your consent to the revised Privacy Policy being applicable henceforth.

We would now like to acquaint you with the places you can contact in case of questions:

Name and address of the controller

The controller within the meaning of the General Data Protection Regulation and other national data protection laws of the member states as well as other provisions under data protection law is:

i:FAO Group GmbH
Clemensstraße 9
60487 Frankfurt
Deutschland
Tel +49 (69) 7680-5500
Fax +49 (69) 7680-5100
E-Mail: information@ifao.net

You can find further details in the legal disclaimer.

Should you have any questions relating to this Privacy Policy please contact us by e-mail under the following address: dataprotection@ifao.net.

Contact details of the data protection officer

The data protection officer of i:FAO can be contacted by mailing to Uwe Mayer, DH+P Gesellschaft für Unternehmensberatung mbH, Reichertweg 10, 63069 Offenbach am Main, Germany, or by e-mail to dataprotection@ifao.net.

An initial overview

It is very important to us that you are completely informed about which personal data we collect from you and how we use them. The type and extent of the personal data which we process is mainly determined by how you use our website. Another decisive factor is which information you provide when using the website. We and other service providers process the information provided by you at different times when using the website to different extents, depending on the type of use of this website.

In principle, i:FAO Group GmbH collects and uses personal data only insofar as this is necessary to provide a functioning website as well as our contents and services.

What is personal data and which types are collected on this website?

Personal data is any information, which refers to an identified or identifiable natural person. This is therefore all data, which identifies you as an individual or makes you identifiable. For example name, postal address, telephone number, e-mail address.

The processing of personal data is only carried out if this is permitted by statutory regulations.

We will present to you in detail below, which personal data we collect, how and why we process these and on which legal basis this takes place.

How we use the personal data collected from you

We use the collected personal data for the following purposes:

  • In order to process your inquiries (e.g. in order to have news and updates sent to you and in order to answer your questions).
  • In order to obtain remarks and comments (e.g. within the scope of a survey).
  • In order to send you important information with regard to the website, changes to our business terms and conditions and guidelines and/or other administration-related information.

     

  • If you have given your consent or if permitted by virtue of the law in order to inform you by e-mail about products and services, special and promotion offers and to send you other marketing material that could possibly be of interest to you.

     

  • If you have consented in order to evaluate your usage behavior with regard to the newsletters sent by us, operated websites and the used links or executed downloads for a better and more personal service.

     

  • In order to enable you to participate in prize draws, competitions and similar advertising actions (collectively referred to as “advertising actions”). You should read the rules, if available, of each advertising action, in which you take part, carefully as under certain circumstances they contain important additional information about the use of your personal data. In so far as the provisions of such rules with regard to the handling of personal data stand in contradiction to this Privacy Policy, the provisions of the respective rules shall be deemed as decisive.

     

  • In order to allow you to participate in events.
  • For internal business purposes, e.g. data analysis, audits, development of new products, extension of our website, improvement of our services, identification of trends for use and assessment of the effectiveness of our advertising campaigns.

The legal framework for the use of your personal data

The use of the collected personal data is only carried out as envisaged in the EU General Data Protection Regulation (GDPR):

  • If necessary for the processing of personal data, we will obtain your consent according to Art. 6 Para. 1 lit. a.
  • If the processing of your personal data serves to fulfil a contract, in which you participate as a contractual party, Art. 6 Para. 1 lit. b GDPR is the legal basis. This shall also apply to processing activities, which are necessary for the execution of pre-contractual measures.
  • If we process your personal data in order to fulfil a legal obligation, this is based on Art. 6 Para. 1 lit. c GDPR.
  • If vital interests of the data subject or another natural person renders a processing of personal data necessary this shall take place owing to Art. 6 Para. 1 lit. d GDPR.
  • If the processing is necessary in order to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights and fundamental freedom of the data subject do not outweigh the first mentioned interest then Art. 6 Para. 1 lit. f GDPR will serve as a legal basis for the processing.

If you follow this link you can read the entire text of the GDPR.

Following this general overview of the use of your personal data and its legal basis, we describe for the individual case below how and why we process your personal data, how long we store them and which rights you have.

What happens when you merely pay a visit to our website in order to inform yourself about us?

With the mere informational use of our website, i.e. if you do not register or otherwise send information, we will only collect the personal data, which your browser transmits to our server. If you wish to view our website, we will collect the following data, which are necessary for us from a technical point of view in order to display our website to you and to guarantee the stability and security, the legal basis is Art. 6 Para. 1 S. 1 lit. f GDPR:

  • Technical data:
    These include
    Your IP address,
    Your registration data,
    Type and version of your browser,
    Your time zone setting,
    Type and version of your browser plugins,
    Your operating system and your platform.
  • Location data:
    When you use this website, we collect information on your geographical location. These location data enable us to provide you with location-based products and services at the respective time.
  • Non-personal data:
    Collected information relating to your use of the website, your full URL-click stream (Uniform Resource Locator) via the and from the website (with details of data and time), the products displayed or searched for by you, answer times of the sites, download errors, duration of the display of certain sites, information relating to the site interactions (e.g. scrolling, clicking and mouse-over) as well as the methods used to leave the site.

What happens to your personal data when you have left our website

If you have sufficiently informed yourself about us on our website and leave it again without, for example, having registered for our newsletter or carrying out any further action, we will automatically delete your data, which are necessary for the operation of our homepage when the respective session is ended (i.e. you close the browser window).

The aforementioned shall apply to the visit to our website purely for informational purposes. Our website, however, offers many different possibilities for usage and contact. Depending on which offers you use, your personal data will be stored and processed to a varying extent. Below we have presented for you in detail what the respective type of usage means for the handling of your personal data.

Why we use cookies on our website

i:FAO Group GmbH and other service providers gather information in relation to your person by using cookies.

With the first access to our website an easily perceivable so-called “cookie banner” will appear. With the first access you have the possibility to confirm the “cookie banner”. Please note that the “cookie banner” will no longer be displayed – not with a repeated visit to the website either -, as soon as you have approved the use of cookies. You can of course deactivate cookies again in your browser at all times as requested.

What is a cookie?
A cookie is a text file with small quantities of information, which is downloaded onto your device (computer, mobile device) when a website is visited. A cookie is sent back to the original website with each visit to the website or a website, which recognizes this cookie. Cookies are helpful as websites can recognize the device of a user with the help of cookies.

Which types of cookies are there?
There are two main types of cookies: Session Cookies and Persistent Cookies.

Session Cookies are only allocated to your computer or mobile device for the duration of the visit to a website and will be deleted as soon as you close the browser.

Persistent Cookies, on the other hand, are stored on your device until they are deleted or expire.

Which cookies are used on this website?

Absolutely necessary cookies
These cookies are necessary in order for you to be able to navigate on the website and can use its functions, e.g. with the access to secure areas of the website. Without these cookies services requested by you cannot be made available. These cookies do not collect any information about you, which can be used for marketing purposes. We have a legitimate interest in the use of these cookies as otherwise you cannot use our website, or we cannot present our website to you in a functional manner.

Functionality cookies
With the help of these cookies the website can remember your individual settings, the preferred language or the region, in which you are located. The website subsequently uses this information to provide improved functions. These cookies can also be used in order to remember changes, which you have made to text size, font and other adjustable parts of the website. Even if the information collected by these cookies is anonymous, these cookies can identify you in combination with other data because they track certain information of your internet provider for your settings.

How can cookies be restricted or blocked?

You can adjust the settings of your browser so that cookies which are set by the website (or another website in the internet) are restricted or blocked. In your browser you will find information about the adjustment to your settings. On www.allaboutcookies.org you will find general information about cookies as well as the adjustment of cookie settings for the various browsers.

Below we compiled an overview of the cookies for you which are most commonly used on this website.

What happens to your personal data if you use the contact form on our website or if you contact us by e-mail?

On our website we offer you the possibility to contact us via a contact form. Your personal data which you enter in the contact form, will be transmitted to us and we store these.

As soon as you have sent the contact form to us we will process from you:

–          Your IP address
–          Date and time of the registration

We process the personal data you entered in the contact form in order to handle your request. At the end of the contact form you find a checkbox with a link to the Privacy Policy.

The processing of your personal data is made on the basis of Art. 6 Para. 1 lit. f). We have a legitimate interest in the processing. The handling of your contact request or your concern resulting from your contact request needs processing of the personal data you entered in the contact form.

If you contact us via e-mail we will store and process the personal data transmitted to us with your e-mail.

Your personal data will not be forwarded to third parties if there is no statutory obligation for the forwarding or this serves the purpose of criminal prosecution.

If contact is made per e-mail we will process your personal data based on Art. 6 Para. 1 lit. f GDPR. If the e-mail serves the conclusion of a contract, then Art. 6 Para. 1 lit. b GDPR is the legal basis for the data processing.

The personal data provided by you in the contact form or your e-mail will solely be used to process the communication with you. We require the personal data which are processed during the sending process, for the technical handling of the sending process.

If your personal data is no longer required for the above mentioned purpose, we will erase it. If you contacted us via e-mail or the contact form, the erasure will take place as soon as the concern that ensues from the contact is ended, i.e. has been finally clarified.

We will delete the data which is processed for the sending process, if they are no longer required for the above mentioned purpose.

Web-Analytic Tools

We use so-called Web-Analytic Tools on our website. Below we will explain to you in detail which tools we use, why we do this and which implications this has on your personal data.

The use of Google Analytics on our website

How Google Analytics works and why we use it

On our website we use Google Analytics, a web analysis service of Google Inc. (“Google”).

Google Analytics uses “cookies”, which enable an analysis on how you use the website. The information generated by the cookie regarding your use of this website is as a rule transmitted to a server of Google in the USA and is stored there. In the event of the activation of the IP anonymization on this website, your IP address is however abbreviated previously by Google within member states of the European Union or in other contracting states of the Treaty on the European Economic Area. Your full IP address will not be transmitted to a server of Google in the USA. By order of the operator of this website Google will use this information in order to evaluate your use of the website in order to compile reports on the website-activities and in order to provider further services associated with the website use and the internet use towards the website operator.

The IP address transmitted by your browser within the scope of Google Analytics is not aggregated with other data of Google.

We use Google Analytics in order to analyze the use of our website and in order to be able to improve it regularly. Through the gained statistics we can improve our range of offers and design it more interesting for you. For the exceptional cases, in which personal data is transferred to the USA, Google has submitted itself to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

On our website we use Google Analytics moreover for a cross-device analysis of visitor flows, which is carried out via a user-ID. In your customer account, go to “My data”, “personal data”, you can deactivate the cross-device analysis of your use.

How can the use of Google Analytics be prevented and which consequences will this have?

You can prevent the storage of the cookies by adjusting the setting of your browser software; however we would like to point out that in this case you may not be able to use all functions of this website in full. In addition you can prevent the recording of the data generated by the cookie and which refer to your use of the website (incl. your IP address) to Google as well as the processing of these data by Google by downloading and installing the browser plugin available under the following link: http://tools.google.com/dlpage/gaoptout?hl=en.

This website uses Google Analytics with the extension “_anonymizeIp()”. This way IP addresses will be abbreviated for further use, this way there’s no possibility to make a reference to a person. Insofar as the data collected in relation to you have a reference to persons, this will thus be excluded immediately and the personal data therefore deleted immediately.

The legal basis for the use of Google Analytics is Art. 6 Para. 1 S. 1 lit. f GDPR.

You can find further information here

Information of the third party provider: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. Conditions of use: http://www.google.com/analytics/terms/us.html, Overview regarding data protection: http://www.google.com/intl/en/analytics/learn/privacy.html, as well as the privacy statement: http://www.google.de/intl/en/policies/privacy.

Forwarding of personal data to third parties

At the beginning of this privacy statement we explained to you for which purposes we process your personal data. We are an internationally organized company and part of the Amadeus Group. This entails that we have to forward your personal data to third parties in order to provide optimum services for you. This shall also include a cross-border exchange of personal data. This is decisive for the provision of our services.

Third parties, to which we transmit data are:

  • Business partners, suppliers, subcontractors and service providers for the execution of a contract, which we have concluded with these companies or with you.
  • In order to prove your identity towards all persons, to whom you send messages with information relating to the website directly via the website.
  • Sponsors of advertising actions (irrespective whether the advertising actions are organized by us) or otherwise in compliance with the rules applicable for the respective advertising action. You should read the rules, if available, of each advertising action, in which you take part, carefully as they possibly contain important additional information about the use of your personal data by sponsors or third parties. Insofar as the provisions of such rules with regard to the handling of personal data stand in contradiction to this Privacy Policy, the provisions of the respective rules shall be deemed as decisive.
  • Analysts and providers of search engines, which support us with the improvement and optimization of our website.
  • Group companies or third parties in the event of a restructuring, a merger, a sale, a Joint Venture, an assignment, a transfer or all other disposals over the business operation, the fixed assets or the warehouse stocks/shareholdings in their entirety or in parts (including without a restriction in conjunction with insolvency or comparable proceedings).

It is of upmost importance to us particularly that your personal data is stored and transmitted in a secure manner. For this reason we only transmit data outside of the European Economic Area or the EEA (i.e. the member states of the European Union as well as Norway, Iceland and Liechtenstein) if this complies with the data protection law and the channel for the transmission offers appropriate protection for your personal data.

This is the case:

  • if a data transmission agreement is available, which includes the current standard contractual clauses, which the European Commission envisages for the transmission of personal data by responsible parties in the EEA to responsible parties and contract processors in legal systems without appropriate data protection law, or
  • by the signing of the EU-U.S. Privacy Shield Framework for the transmission of personal data from companies in the EU to companies in the USA or an equivalent agreement between other legal system, or
  • the transmission of your data to a country, in which a standard of data protection exists as stipulated by law that was assessed as appropriate by the European Commission, or
  • if it is necessary for the conclusion or the processing of a contract between us and a third party and the transmission is in your interest for the purpose of this contract (for example if we must transmit data outside of the EEA in order to fulfill our obligations from this contract if you are a customer of our company), or
  • if you have granted your consent for the data transmission.

In order to ensure that your personal data enjoy an appropriate degree of protection we have implemented suitable measures with third parties with which we share your personal data in order to ensure that your personal data is processed by these third parties in a manner that is consistent with the data protection rights that is in line with the data protection laws. You can read the legal provisions of the GDPR concerning the forwarding of data to third parties in the full text here.

Security

In order to guarantee the protection of the personal data controlled by us, we take all organizational, technical and administration-related measures to a reasonable extent. For encryption, we use https-V3. Unfortunately, no 100% security can be guaranteed for data transmissions via the internet or for data storage systems. Please do not send us any confidential information by e-mail. If you have cause to assume that your interaction with us is no longer secure (if, for example, you are convinced that the safety of an account, which you have set up in our company, is no longer guaranteed), you must inform us of the problem without delay by contacting us using the contact information on the website (please note that if you contact us by normal post the processing of your problem by us may be delayed). Moreover, please note that the communication by e-mail is not inevitably secure. Accordingly, you should not enter any credit card information in your e-mail correspondence with us.

Duration of the storage / deletion

We have explained to you above for the respective individual case how long we store your personal data and when we erase them.

In general we will store your personal data during a deadline, which is required in order to fulfill the purposes stated in this Privacy Policy, unless a longer storage deadline is necessary or is permitted by virtue of the law.

If the purpose of the storage ceases to apply or if a storage deadline expires that is stipulated by the European body for the issue of Directives and Regulations or another responsible legislator, the personal data will be blocked or deleted as a routine and in compliance with the statutory regulations.

Instruction regarding the use of the website by children

The website is not oriented to individuals under the age of eighteen (18) years old. We request these persons not to make any personal data available via the website.

Rights of the data subjects

According to the GDPR you are entitled to the following rights against us:

Right of access by the data subject pursuant to Art. 15 GDPR
Right to rectification Art. 16 GDPR
Right to erasure (“right to be forgotten”) Art. 17 GDPR
Right to restriction of processing Art. 18 GDPR
Right to notification Art. 19 GDPR
Right to data portability Art. 20 GDPR

This link leads you directly to the text of the GDPR law.

Separate information relating to the right of the data subject to file an objection Art. 21 GDPR

You have the right, on grounds relating to your particular situation, to file an objection at all times against the processing of the personal data relating to you that is carried out owing to Art. 6 Para. 1 lit. e) or f) GDPR; this shall also apply to a profiling that is supported on these provisions.

We will no longer process the personal data relating to you, unless we can demonstrate compelling legitimate grounds for the processing, which override your interests, rights and freedom, or the processing serves the establishment, exercise or defense against legal claims.

If the personal data relating to you are processed in order to conduct direct marketing you have the right to file an objection against the processing of the personal data relating to you for the purpose of such marketing at any times; this shall include profiling to the extent that it is related to such direct marketing.

If you object to the processing for purposes of direct marketing then the personal data relating to you will no longer be processed for these purposes.

Right to withdraw of the declaration of consent under data protection law

You have the right to withdraw  your consent under data protection law at any times. The withdrawal of the consent shall not affect the lawfulness of processing based on consent before its withdrawal.

This right is concluded from Art. 7 Para. 3 GDPR. This link will lead you directly to the text of the GDPR law.

Right to lodge a complaint at a supervisory authority

Without prejudice to any other administrative or judicial remedy, you are entitled to lodge a complaint at a supervisory authority, in particular in the member state of your habitual residence, your place of work or the place of the alleged infringement if you are considering that the processing of the personal data relating to you infringes the GDPR.

The supervisory authority, at which the complaint was lodged, will inform the complainant on t he progress and the outcome of the complaint including the possibility of a judicial remedy pursuant to Art. 78 GDPR.

Cookie list

Name of the cookie

Google Analytics

Purpose of the cookie

Google Analytics is a web analytics service of Google, Inc. Google Analytics uses cookies, with the help of which we analyze how visitors use our website. Google uses this information in order to analyze your use of the website, to compile reports about the website use for us and to provide other services in connection with the website activity and internet use for us.

Collected data

Anonymous:
Display of advertisements, analysis data, browser information, cookie data, date/time, demographic data, hardware/software type, internet service provider, interaction data, display of sites, operated domains

Personal data:
IP address, search progress, location-based data, device ID, name, address, telephone number, e-mail address, registration information, IP address, clear device ID

Forwarding of the data

Aggregated data are forwarded to third parties. Anonymous data are forwarded to third parties. Personal data are forwarded to third parties.

Storage duration of the cookie

This is a resident cookie, which expires after 2 years. With each renewed visit the expiration date will reset to 2 years again.

Privacy Policy of the cookie provider

Name of the cookie

_icl_current_language

Purpose of the cookie

Saves information for the selected language on the website.

Storage duration of the cookie

Session

Name of the cookie

_icl_visitor_lang_js

Purpose of the cookie

Saves information for the selected language on the website

Storage duration of the cookie

Session

Name of the cookie

_ga

Purpose of the cookie

Registers a unique ID which is used to generate statistical data on how the visitor uses the website.

Storage duration of the cookie

2 years

Name of the cookie

_gat_gtag_UA_59587514_2

Purpose of the cookie

Is used by Google Analytics to limit the requirement rate.

Storage duration of the cookie

Session

Name of the cookie

_gid

Purpose of the cookie

Registers a unique ID which is used to generate statistical data on how the visitor uses the website.

Storage duration of the cookie

Session