Data Privacy Policy

Cookie-Settings: You can access your Cookie Settings (1) again at any time to manage your preferences.

General
ITENOS attaches great importance to protecting your personal data. We always inform you what personal data we collect, how your data is used, and how you can influence the process.

1. What data is recorded, how is it used, and how long is it stored?
Technical characteristics: When you visit our websites, the web server temporarily records the domain name or your computer’s IP address, the file requested (file name and URL) by the client, the http response code, and the website from which you are visiting us.
The recorded data is used solely for data security purposes, particularly to protect against attempted attacks on our web server (Article 6 (1f) GDPR). We do not use it to create individual user profiles nor do we share this information with third parties. It is erased after seven days at the latest. We reserve the right to statistically analyze anonymized data records.

2. Controlling data used by social-media plug-ins and links to social media platforms
Some web pages may contain social media buttons (Facebook-Like-Button, Google +1, Twitter-Button, LinkedIn) you can use to recommend the services of ITENOS to your friends and family.
To ensure you retain full control of the data, the used buttons provide direct contact between the respective social network and the visitor only once you actively click on the button (one-click solution).
When the social media plug-in or link is activated by clicking on the pictogram, including when sharing content, (Art. 6 (1) a GDPR) the following data may be forwarded to the social media provider: IP address, browser information, operating system, screen resolution, installed browser plug-ins (such as Adobe Flash Player), previous web page if you followed a link (referrer), URL of the current web page etc…
The next time you visit the website, the social media plug-ins are again provided in the default disabled mode, thus ensuring that no data is transferred during a repeat visit to the website.
Further information on social media plug-ins and the scope and purpose of data processing by their providers, as well as additional data privacy-relevant information can be found in the data privacy information published by the respective controller and in the information on the <<1-click solution (ger)>>.

3. Will my usage habits be evaluated, e.g. for advertising purposes or tracking?

Explanations and definitions
We want you to enjoy using our websites and take advantage of our products and services. We have an economic interest in ensuring this is the case. We analyze your usage habits on the basis of anonymized or pseudonymized data so you can find the products that interest you and so we can make our websites user-friendly. ITENOS or its contract data processors create usage profiles that comply with the legal requirements. This information cannot be traced back to you directly. The following information is intended to provide you with general information on the various purposes of processing data. The cookie message displayed when visiting our webpages gives you the opportunity to permit or reject the use of cookies. Cookies that are strictly necessary to provide the web service cannot be rejected (see explanation at 1. above).

Tag management (strictly necessary)
Tag management allows us to manage the use of tools on the different web pages of our web portal. A tag is set for each page to do this. The tag content determines which tools will be used for this page. Tag management is used to assure that the tools are in each individual case only used where appropriate.

Market research / Reach measurement (opt-in)
Reach measurement provides statistics on a website’s usage intensity and the number of users, along with comparable figures for all the connected services. Market research is designed to learn more about the target groups that use services or applications and view advertisements. Individual users are not identified at any time. Your identity is always protected.

Profiles for a user-geared presentation of the web portal (opt-in)
The compilation of clickstream analyses assists us in continuously improving our web pages. The clickstream corresponds to your movement on the websites. Analyzing the movement provides us with an insight into usage habits on our websites. This allows us to detect any existing structural deficiencies in our web pages and thereby improve them accordingly.

Profiles for personalized recommendations (opt-in)
ITENOS would like to offer you individually targeted and personalized take-action and click recommendations for special offers, services or products. This involves our service providers compiling a pseudonymous profile about the services and websites accessed by you and assigning categories to the profile. The system displays content or information that matches your profile.

Required cookies
These cookies are required to enable you to navigate through the web pages and use key functions. They support basic functions, such as order processing in the online shop and access to secured areas of the web page. They also serve the purpose of performing an anonymous analysis of user patterns, which we use to continuously develop and improve our web pages for you. The legal basis for these cookies is Article 6 (1) b GDPR respectively for third Countries Art. 49 (1) b GDPR.

Company	Cookie	Purpose	Storage period	Country of processing
ITENOS	allow_cookies, cookie-opt-in-accepted, cookie-opt-in-keys	Saves the cookie settings	2 years	Germany
ITENOS	last-visited-pages	Used to optimise the usability of the page and to display suitable solutions	2 years	Germany
ITENOS	num_visits_day	Used to optimise the usability of the page and to display suitable solutions	2 years	Germay
ITENOS	PHPSESSID	The PHP Session ID is a random string of characters that stores the user’s login status on the website. When the user leaves the site, the cookie is deleted.	Session	Germany

Cookie settings: You can revisit your Cookie settings (1) at any time to manage your preferences.

Services from other companies (self-responsible third-party providers)

We have integrated services from third-party providers who provide their services independently or under joint responsibility with ITENOS. When using our digital service, data is collected by means of cookies or similar technologies and transmitted to the respective third party, in some cases for ITENOS’s own purposes. The legal basis for this data processing is Art. 6 (1) (a) and Art. 49 (1a) GDPR. For information on further processing for the third-party provider’s own purposes, please refer to the third-party provider’s privacy policy (purposes, storage period and legal basis). Insofar as data processing is also carried out under joint responsibility of ITENOS, we inform you about the possible risks as follows.

LinkedIn

The re-targeting and conversion tracking of LinkedIn (LinkedIn Ireland Ltd., Wilton Plaza, Wilton Place, Dublin 2, Ireland) by means of the LinkedIn Insight Tag enables the collection of statistical, pseudonymous data (referrer URL, IP address (abbreviated), device and browser characteristics) via the LinkedIn Insight Tag. In addition, this information is used to display interest-specific and relevant offers and recommendations after you have shown interest in certain products, information and offers on our digital service. This information is stored in a cookie for 6 months. You can find out about data processing by LinkedIn at any time under https://www.linkedin.com/legal/privacy-policy?trk=registration_footer-privacy-policy and object to it or revoke your consent via the cookie settings. ITENOS GmbH and LinkedIn are joint controllers for this processing in accordance with Art. 26 GDPR. If you have any questions, you can  contact datenschutz@itenos.de or LinkedIn.

Google 

Google Analytics:
Provided that you have given your consent, Google Analytics 4, a web analysis service of Google LLC, will be used on this website. The controller of the data file for users in the EU/EEA and Switzerland is Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”).

Scope of processing
Google Analytics applies cookies, which allow for an analysis of your use of our websites. As a general rule, the information generated by means of the cookies about your use of our website will be transferred to a Google server in the USA and stored there.

We utilize a user ID function. With the aid of the user ID, we can assign a unique, permanent ID to one or multiple sessions (and the activities within these sessions) and analyze user behavior across devices.

At Google Analytics 4, IP address anonymization is standard by default. Based on IP anonymization, your IP address will be abbreviated by Google within the member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a server in the USA and abbreviated there. According to Google, the IP address transmitted by your browser within the scope of Google Analytics will not be combined with other data of Google.
During a website visit, your user behavior is collected in the form of “events. Events can be:

• page loads
• a first-time visit to the website
• the start of the session
• your “click path” interaction with the website
• scrolls (always if a user scrolls to the end of the page (90%))
• clicks on external links
• internal search queries
• interaction with videos
• file downloads
• advertisements viewed/clicked
• language setting

Also collected is:

• your approximate location (region)
• your IP address (in abbreviated form)
• technical information on your browser and the terminal devices you use (e.g., language setting, screen resolution)
• your Internet provider
• the referrer URL (by which website/by which advertisements you came to this website)

Purposes of the processing
Google will utilize this information on behalf of the website operator in order to analyze your use of the website and to compile reports about the website activities. The reports supplied by Google Analytics serve to provide an analysis of our website performance and the success of our marketing campaigns.

Recipients
The recipients of the data are/may be:

• Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (as the processor pursuant to art. 28 GDPR)
• Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA
• Alphabet Inc., 1600 Amphitheatre Parkway Mountain View, CA 94043, USA

It cannot be precluded that US-American regulatory authorities gain access to the data stored by Google.

Third-country transfer
To the extent that data is processed outside of the EU/EEA and there is no data protection level corresponding to the European standard, we have concluded EU standard contract clauses with the service provider to establish a commensurate level of data protection. The parent company of Google Ireland, Google LLC, has its registered office in California, USA. A transfer of data to the USA and access to the data stored with Google by US-American regulatory authorities cannot be precluded. The USA is currently considered to be a third country from a data protection law perspective. You do not have the same rights there as exist in the EU/EEA. It is possible that you have no legal remedies against access by regulatory authorities.

Storage duration
The data we transmit and that is associated with cookies will be automatically deleted after 2 months. The deletion of data that has reached its storage term will automatically occur once per month.

Legal basis
The legal basis for this data processing is your consent according to art. 6 par.1 clause 1 lit. a GDPR [IF PERTINENT: art. 49a GDPR].

Withdrawal
You can withdraw your consent at any time with effect for the future by retrieving the cookie settings and changing your selection there. The legality of the processing done based on consent up until the withdrawal remains unaffected thereby.

You may also prevent the storage of cookies in the first place through a corresponding setting in your browser software. However, if you configure your browser so that all cookies are refused, this may result in limitations on the functionalities on this and other websites. In addition, you can prevent the collection of the data generated by the cookie and related to your use of the website (including your IP address) as well as its processing by Google in that you:

1. do not grant your consent to setting the cookie, or
   b. download and install the browser add-on to deactivate Google Analytics HERE.

You may find more detailed information on the terms of use for Google Analytics and on data protection at Google at https://marketingplatform.google.com/about/analytics/terms/de/ and at https://policies.google.com/?hl=de.

Google Maps: 

We use Google Maps for maps, locations and route planning on individual websites, e.g. in the Store Locator, which you can access via the tab “Service” and menu item “Shops” on the top section of ITENOS product pages. Google Maps is operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States. By embedding Google Maps your IP address is transferred directly to Google and a cookie stored as soon as you visit this kind of website. You can obtain information and opt out at any time from data processing by Google at https://policies.google.com/privacy?hl=en.

Google Ads: 

We use the Google Ads and Floodlight function of Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland (“Google”) in our digital service. This function is used to present interest-based advertisements to visitors within the Google advertising network. In the digital service, the visitor can then be presented with advertisements that refer to content that the visitor has previously accessed in other digital services that use Google’s remarketing function. If you still do not want Google’s remarketing function, you can deactivate it by making the appropriate settings under http://www.google.com/settings/ads. Alternatively, you can opt out of the use of interest-based advertising through the Network Initiative by following the instructions in http://www.networkadvertising.org/managing/opt_out.asp . You can find more information about Google Ads and Google’s privacy policy at: https://policies.google.com/technologies/ads?hl=de/.

If you have accessed our digital service via a Google ad, Google AdWords will store a cookie on your device. This cookie expires after 90 days. The information collected with the help of this so-called conversion cookie is used to compile statistics about our conversion rate. This means that we learn how many users have come to our websites through a Google ad and purchase a product within 90 days. If you do not wish to participate in the tracking process, you can disable cookies for conversion tracking by setting your browser settings to block cookies from the corresponding domain: Google Ads: googleadservices.com

Google YouTube Videos:

YouTube collects data to provide better services to users, from determining basic information, such as your language, to more complex questions, such as advertising. What data YouTube collects and how it is used depends on how you use the Services and how you manage your privacy settings. If you’re not signed in to a Google Account, the data collected is stored with unique identifiers associated with the browser, app, or device. This can ensure, for example, that the language settings are maintained for all sessions. If you’re signed in to a Google Account, we’ll also collect information that’s stored in your Google Account and is considered personal information. For more information, please visit: https://policies.google.com/privacy?hl=de&gl=de

Company	Cookie	Purpose	Storage period	Country of processing
Google	_ga	Used to distinguish users.	2 Months	Ireland
Google	_ga_EKBZJ0ZCTF	Used to persist session state.	2 Months	Ireland
Google	_gid	Used to store and count pageviews.	2 Monate	Irland
Google	_gcl_au	Used to store and track conversions.	2 Monate	Irland
Google	_gcl_aw	Used to provide ad delivery or retargeting.	2 Monate	Irland
Google	NID	Used to provide ad delivery or retargeting, store user preferences.	2 Monate	Irland
Google	DSID	Used to store user preferences.	2 Monate	Irland
Google	IDE	Used to provide ad delivery or retargeting.	2 Monate	Irland
Google	__utma	These cookies are used to collect information about how visitors use our website. We use this information to create reports and improve the website. The cookies collect information in anonymous form, including the number of visitors to the website, where visitors came from to visit the website, and which pages they visited. For more information, please see an overview of Google’s privacy policy.	2 years	Ireland
Google	__utmc	These cookies are used to collect information about how visitors use our website. We use this information to create reports and improve the website. The cookies collect information in anonymous form, including the number of visitors to the website, where visitors came from to visit the website, and which pages they visited. For more information, please see an overview of Google’s privacy policy.	Expires at the end of the browser session	Ireland
Google	__utmz	These cookies are used to collect information about how visitors use our website. We use this information to create reports and improve the website. The cookies collect information in anonymous form, including the number of visitors to the website, where visitors came from to visit the website, and which pages they visited. For more information, please see an overview of Google’s privacy policy.	6 months	Ireland
Google	_ga	These cookies are used to collect information about how visitors use our website. We use this information to create reports and improve the website. The cookies collect information in anonymous form, including the number of visitors to the website, where visitors came from to visit the website, and which pages they visited. For more information, please see an overview of Google’s privacy policy.	2 years	Ireland
Google	test_cookie	Will be set as a test to check whether the browser allows cookies to be set. Does not contain any identifiers.	15 min.	Ireland
Twitter	_twitter_sess	This cookie is set due to Twitter integration and social media sharing options.	Session	Ireland, United States of America
Twitter	eu_cn	This cookie is set due to Twitter integration and social media sharing options.	1 year	Ireland, United States
Twitter	guest_id	This cookie is set due to Twitter integration and social media sharing options.	2 years	Ireland, United States
Twitter	personalization_id	This cookie is set due to Twitter integration and social media sharing options.	2 years	Ireland, United States
Twitter	syndication_guest_id	This cookie is set due to Twitter integration and social media sharing options.	2 years	Ireland, United States
Twitter	tfw_exp	This cookie is set due to Twitter integration and social media sharing options.	2 weeks	Ireland, United States

Cookie settings: You can revisit your Cookie Settings (1) at any time to manage your preferences.

4. Where can I find the information that is important to me?
This data privacy information provides an overview of the items which apply to ITENOS processing your data in this web portal.

5. Who is responsible for data processing? Who should I contact if I have any queries regarding data privacy at ITENOS?
ITENOS acts as the data controller. If you have any queries, please contact our Customer Services department or the Global Data Privacy Officer, Dr. Claus D. Ulmer, Friedrich-Ebert-Allee 140, 53113 Bonn, Germany, datenschutz@telekom.de or datenschutz@itenos.de.

6. What rights do I have?
You have the right

1. To request information on the categories of personal data concerned, the purposes of the processing, any recipients of the data, and the envisaged storage period (Art. 15 GDPR);
2. To request that incorrect or incomplete data be rectified or supplemented (Article 16 GDPR);
3. To withdraw consent at any time with effect for the future (Art. 7 (3) GDPR);
4. To object to the processing of data on the grounds of legitimate interests, for reasons relating to your particular situation (Article 21 (1) GDPR);
5. To request the erasure of data in certain cases under Art. 17 GDPR – especially if the data is no longer necessary in relation to the purposes for which it was collected or is unlawfully processed, or you withdraw your consent according to (c) above or object according to (d) above;
6. To demand, under certain circumstances, the restriction of data where erasure is not possible or the erasure obligation is disputed (Art. 18 GDPR);
7. To data portability, i.e., you can receive the data that you provided to us in a commonly used and machine-readable format such as CSV, and can, where necessary, transfer the data to others (Art. 20 GDPR);
8. to file a complaint about the data processing with the responsible supervisory authority (for telecommunications contracts: the German Federal Commissioner for Data Protection and Freedom of Information (Bundesbeauftragter für den Datenschutz und die Informationsfreiheit); for any other matters: State Commissioner for Data Protection and Freedom of Information, North Rhine-Westphalia (Landesbeauftragter für den Datenschutz und die Informationsfreiheit Nordrhein-Westfalen)).

7. Who does ITENOS pass my data on to?
To processors, i.e., companies we engage to process data within the legally defined scope, Article 28 GDPR (service providers, agents). In this case, ITENOS also remains responsible for protecting your data. We engage companies particularly in the following areas: IT, sales, marketing, finance, consulting, customer services, HR, logistics, and printing.
To cooperation partners who, on their own responsibility, provide services for you or in conjunction with your ITENOS contract. This is the case if you order services of these partners from us, if you consent to the involvement of the partner, or if we involve the partner on the basis of legal permission.
Owing to legal obligations: In certain cases, we are legally obliged to transfer certain data to a state authority that requests it.

8. Where is my data processed?
Your data will be processed in Germany and other European countries. If, in exceptional cases, your data is processed in countries outside the European Union (in so-called third countries), this will take place

1. 1. if you have expressly consented to this (Article 49 (1) a GDPR). (In most countries outside the EU, the level of data protection does not meet EU standards. This concerns in particular comprehensive monitoring and control rights of state authorities, e. g. in the USA, which disproportionately interfere with the data protection of European citizens,
   2. or to the extent necessary for our service provision to you (Article 49 (1) b GDPR),
   3. or to the extent required by law (Article 49 (1) c GDPR).

Furthermore, your data will only be processed in third countries if certain measures ensure a suitable level of data protection (e.g., EU Commission’s adequacy decision or suitable guarantees, Art. 44 et seq. GDPR).