Thank you for your interest in the content of our website.
We place great importance to the protection of your personal data and the protection of your privacy. Personal data is all data with which you can be personally identified (hereinafter also referred to as "data"). In order to ensure that you are informed about the collection and use of your data on our website, please take note of the following information about the type, scope and purpose of the processing of personal data. Please take some time for this.
1. Meaning of terms according to the GDPR:
"Responsible body" is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data (e.g. names, e-mail addresses, etc.).
"Personal data" means any information relating to an identified or identifiable natural person. An identifiable natural person is one who can be identified directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier (e.g. a cookie) or to one or more specific characteristics that express the physical, physiological, genetic, psychological, economic, cultural or social identity of that natural person.
"Processing" refers to any operation or set of operations which is carried out with or without the aid of automated means relating to personal data, such as collection, recording, organisation, sorting, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or association, qualification, erasure or destruction. This term covers virtually every handling of data.
"Third party" means any natural or legal person, public authority, agency or other body, other than the data subject, the controller, the processor and the persons authorised to process the personal data under the direct responsibility of the controller or processor.
"Profiling" means any automated processing of personal data consisting of the use of such personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects relating to the work performance, economic situation, personal preferences, interests, conduct, whereabouts or movements of that natural person.
2. Basic and mandatory information:
(1) Responsible body pursuant to Art. 4 of the Basic Data Protection Regulation (GDPR)
The responsible body for data processing on this website is:
51469 Bergisch Gladbach
Managing Directors with power of representation:
AG Köln HRB 46478
Sales tax identification number:
(2) Data protection officer:
We have appointed a data protection officer for our company.
SBB Consulting UG, Salierring 32, 50667 Köln
T +49 221-9977699
(3) Types of data processed by us:
– Inventory data (e.g. names, addresses).
– Contact data (e.g. e-mail, telephone numbers).
– Content data (e.g. text input, photographs, videos).
– Usage data (e.g. websites visited, interest in content, access times).
– Meta/communication data (e.g. device information, IP addresses).
(4) Purpose of our processing
– Provision of the website, its functions and contents.
– Answering contact requests and communicating with users.
– Security measures.
– Range measurement/marketing
(5) Business-related processing
Additionally we process if necessary:
– Contract data (e.g, subject matter of contract, duration, customer category).
– Payment data (e.g. bank details, payment history)
by our customers, interested parties and business partners for the purpose of providing contractual services, service and customer care, marketing, advertising and market research.
(6) Legal basis of our data processing
The legal basis for obtaining consent is Art. 6 para. 1 lit. a and Art. 7 GDPR.
The legal basis for the processing for the fulfilment of our services and the implementation of contractual measures as well as the answering of inquiries is Art. 6 para. 1 lit. b GDPR.
The legal basis for the processing for the fulfilment of our legal obligations is Art. 6 para. 1 lit. c GDPR.
The legal basis for processing to safeguard our legitimate interests is Art. 6 Para. 1 lit. f GDPR.
(7) How do we collect data?
On the one hand, your data is collected by us by you communicating it to us. This may be data that you enter in a contact form.
Other data is automatically collected by our IT systems when you visit the website without your active participation. This is mainly technical data (e.g. web browser, operating system or time the page was accessed). This data is collected automatically as soon as you access our website.
(8) What is your data used for?
Part of the data is collected to ensure that the website is error-free. Other data may be used to analyse your user behaviour.
(9) What rights do you have in relation to your data?
Pursuant to Art. 15 GDPR, you have the right to request confirmation as to whether relevant data will be processed and to request information about this data, such as its origin and recipient and the purpose of the data processing. Furthermore, you may have the right to have this data corrected, blocked or deleted and to have a copy of your processed data.
Pursuant to Art. 16 GDPR, you have the right to request the completion of the data concerning you or the rectification of inaccurate data concerning you.
Pursuant to Art. 17 GDPR, you have the right to demand that the data concerned be deleted immediately or, alternatively, to demand that the processing of the data be restricted in accordance with Art. 18 GDPR.
Pursuant to Art. 20 GDPR, you have the right to have data which we process automatically on the basis of your consent or in the fulfilment of a contract handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another responsible party, this will only be done as far as it is technically feasible.
You can contact us at any time regarding your rights above and further questions on the data protection subject at the address given in the imprint and/or via our data protection officer using the contact details given in 2.(2).
In addition, pursuant to Art. 77 GDPR, you have the right to file a complaint with the competent supervisory authority in the event of violations of data protection law. The competent supervisory authority for data protection issues is the data protection officer of the federal state in which our company is based.
(10) Right to withdraw your consent
You can revoke your consent to the processing of your data according to § 7 para. 3 GDPR at any time. For this purpose, an informal notification by e-mail to us or our data protection officer is sufficient. However, the legality of the data processing carried out until the revocation remains unaffected by this.
(11) Right of objection
Pursuant to Art. 21 GDPR, you may object to the future processing of the data concerning you at any time. In particular, you may object to the processing of your data for the purposes of direct marketing.
(12) Objection to advertising mails from third parties
The sending of unsolicited advertising and information material to our contact details published in the imprint is hereby expressly prohibited. The operator and person responsible for this website expressly reserves the right to take legal action in the event of unsolicited sending of advertising information, such as spam e-mails.
(13) SSL or TLS encryption
This website uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or enquiries that you send to us as the site operator. You can recognise an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line.
(14) Web Hosting
The web hosting services of our provider used by us serve the provision of the following services:
Infrastructure and platform services, computing capacity, storage space and database services, security services, as well as technical maintenance services which we use for the purpose of operating this website.
In doing so, we or our hosting provider process inventory data, contact data, content data, contract data, usage data, meta and communication data of customers, interested parties and visitors to this website on the basis of our legitimate interests in the efficient and secure provision of this website in accordance with Art. 6 Para. 1 lit. f GDPR in connection with Art. 28 GDPR. In this regard, we have concluded an order processing contract with our hosting provider.
3. Data collection on our website
This website partly uses so-called cookies. Cookies do not damage your computer and do not contain viruses. Cookies serve to make our offer more user-friendly, more effective and safer. Cookies are small text files that are stored on your computer by your browser. Most of the cookies we use are so-called "session cookies". They are automatically deleted at the end of your visit.
We use the following cookie:
Session cookie: 1frontend
You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, accept cookies for certain cases or generally exclude them and activate the automatic deletion of cookies when closing the browser.
If cookies are deactivated, however, the functionality of this website may be restricted.
(2) Server log files
Based on our legitimate interests, we or our hosting provider automatically collect and store information in so-called server log files, which your browser automatically transmits to us. These are:
–Browser type and browser version
– Operating system
– Referrer URL
– Hostname of the accessing computer
– Time of the server request
– IP address
This data is not merged with other data sources.
The basis for data processing is Art. 6 para. 1 lit. f GDPR.
(3) Contact form/contact by e-mail
(a) If you send us enquiries via the contact form, your details from the enquiry form, including the contact data provided by you there, will be stored by us for the purpose of processing the enquiry and in the event of follow-up enquiries. This data will not be passed on to third parties without your consent.
The processing of the data entered in the contact form is therefore carried out exclusively on the basis of your consent in accordance with Art. 6 Para. 1 lit. a GDPR or for the implementation of pre-contractual measures in accordance with Art. 6 Para. 1 lit. b GDPR. You can revoke this consent at any time. An informal e-mail notification to us is sufficient for this purpose. The legality of the data processing operations carried out until the revocation remains unaffected by the revocation.
The data entered by you in the contact form will remain with us until you request deletion, revoke your consent to storage, or the purpose for data storage no longer applies (e.g. after your request has been processed). Mandatory legal provisions – in particular legal retention periods – remain unaffected by this.
(b) Alternatively, it is possible to contact us via our e-mail address. In this case, the personal data of the user transmitted with the e-mail will be stored. In this context, the data will also not be passed on to third parties. The data will be used exclusively for the processing of the conversation.
Legal basis for the processing of the data that is transmitted in the course of a transmission of an e-mail, is art. 6 para.1 lit. f GDPR. If the purpose of the e-mail contact is to conclude a contract, the additional legal basis for the processing is Art. 6 para.1 lit. b GDPR.
If the user contacts us by e-mail, they can object to the storage of their personal data at any time. In such a case, the conversation cannot be continued. In this case, all personal data stored in the course of establishing contact will be deleted. We draw your attention to the fact that data transmission over the internet (e.g. communication by e-mail) can be subject to security loopholes. A complete protection of the data against access by third parties is unfortunately not possible for us.
(4) Processing of customer data
We collect, process and use personal data only to the extent necessary for the establishment, content or modification of the legal relationship (inventory data). This is done on the basis of Art. 6 para. 1 lit. b GDPR, which permits the processing of data for the fulfilment of a contract or pre-contractual measures. We collect, process and use personal data relating to the use of our websites (usage data) only to the extent necessary to enable the user to make use of the service or to bill the user.
The customer data collected will be deleted as soon as it is no longer required for the intended purpose or after completion of the order or termination of the business relationship, provided that there are no legal retention periods to prevent the deletion.
According to legal requirements in Germany, the storage is carried out in particular for 6 years in accordance with § 257 Para. 1 HGB (e.g. for commercial books, annual financial statements, commercial letters, accounting receipts, etc.) and for 10 years in accordance with § 147 Para. 1 AO (e.g. books, records, accounting receipts, commercial and business letters, documents relevant for taxation, etc.).
4. Our Newsletter
(1) General information
With the following information, we inform you about the contents of our newsletter as well as the registration, dispatch and statistical evaluation procedures and about your rights of objection.
By subscribing to our newsletter, you declare your agreement with the receipt and the described procedures.
We send newsletters, e-mails and other electronic notifications containing advertising information only with the consent of the recipient or a legal permission. If the contents of the newsletter are specifically described within the scope of registration, they are decisive for the consent of the user. In addition, our newsletters contain information about our services and ourselves.
The registration to our newsletter takes place in a so-called double opt-in procedure. Within the framework of this procedure, you will receive an e-mail after registration in which you will be asked to confirm your registration. This confirmation is necessary so that nobody can register with external e-mail addresses. The registrations for the newsletter are logged in order to be able to prove the registration process according to the legal requirements. This includes the storage of the registration and confirmation time, as well as the IP address. Likewise the changes of your data stored with the shipping providers are logged.
To subscribe to the newsletter, it is sufficient to enter your e-mail address. Optionally, we ask you on a voluntary basis to enter your name in the newsletter for the purposes of addressing you personally. On a purely voluntary basis, you also have the option of providing us with your address data and, if applicable, your telephone number. The personal data collected from you as part of the newsletter service will not be passed on to third parties for advertising purposes.
The dispatch of the newsletter and the performance measurement associated with it is based on the consent of the recipients in accordance with Art. 6 Para. 1 lit. a, Art. 7 GDPR in conjunction with § 7 Para. 2 No. 3 UWG or on legal permission in accordance with § 7 Para. 3 UWG.
The registration procedure is recorded on the basis of our legitimate interests pursuant to Art. 6 para. 1 lit. f GDPR. Our interest is directed towards the use of a user-friendly and secure newsletter system that serves our business interests as well as the expectations of the users and furthermore allows us to provide evidence of consent.
(2) Cancellation/revocation of newsletter subscription:
You can cancel the receipt of our newsletter at any time, i.e. revoke your consent. You will find a link to cancel the newsletter at the end of each newsletter.
We may store the unsubscribed e-mail addresses for up to three years on the basis of our legitimate interests before deleting them for newsletter dispatch purposes in order to be able to prove that we have previously given our consent. The processing of this data is limited to the purpose of a possible defence against claims. An individual deletion request is possible at any time, provided that the former existence of consent is confirmed at the same time.
(3) Newsletter dispatch by CleverReach
This website uses CleverReach to send newsletters. The provider is CleverReach GmbH & Co. KG, Mühlenstr. 43, 26180 Rastede. CleverReach is a service with which the newsletter dispatch can be organised and analysed. The data you enter for the purposes of receiving the newsletter (e.g. e-mail address) is stored on the CleverReach servers in Germany and Ireland.
Our newsletters sent with CleverReach enable us to analyse the behaviour of newsletter recipients. Among other things, it can be analysed how many recipients have opened the newsletter message and how often which link was clicked in the newsletter. With the help of so-called conversion tracking, it can also be analysed whether a predefined action (e.g. purchase of a product on our website) has taken place after clicking on the link in the newsletter. Further information on data analysis through the CleverReach newsletter can be found at: https://www.cleverreach.com/de/funktionen/reporting-und-tracking/.
Data processing is based on your consent in accordance with Art. 6 Para. 1 lit. a GDPR. You can revoke this consent at any time by unsubscribing from the newsletter. The legality of the data processing operations that have already taken place remains unaffected by the revocation.
If you do not want an analysis by CleverReach, you must unsubscribe from the newsletter. For this purpose, we provide a corresponding link in every newsletter message. You can also unsubscribe from the newsletter directly on the website.
The data you have stored with us for the purpose of subscribing to the newsletter will be stored there until you unsubscribe from the newsletter and will be deleted both from our servers and from CleverReach's servers after you have cancelled the newsletter, provided that the former existence of your consent is confirmed by you in advance. Otherwise, we may store the unsubscribed e-mail addresses for up to three years on the basis of our legitimate interests before deleting them for newsletter dispatch purposes in order to be able to prove that we have previously given our consent. The processing of this data is limited to the purpose of a possible defence against claims.
You can find more details in CleverReach's data protection regulations at: https://www.cleverreach.com/de/datenschutz/.
(4) Conclusion of a contract for order data processing
We have concluded a contract with CleverReach for order data processing and fully implement the strict requirements of the German data protection authorities when using CleverReach.
5. Analysis Tools and Advertising
(1) Google Analytics
This website uses functions of the web analysis service Google Analytics. Provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google Analytics uses so-called "cookies". These are text files that are stored on your computer and enable an analysis of your use of the website. The information generated by the cookie about your use of the website will generally be transmitted to and stored by Google on servers in the United States.
Google is certified under the Privacy Shield Agreement and thus offers a guarantee of compliance with European data protection law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).
Google Analytics cookies are stored on the basis of Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in analysing user behaviour in order to optimise both its website and its advertising.
We have activated the IP anonymisation function on this website. This will cause Google to shorten your IP address within member states of the European Union or other signatory states to the Agreement on the European Economic Area before it is transmitted to the United States. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity, and to provide other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics is not combined with other data from Google.
Objection to data collection
You can prevent Google Analytics from collecting your data by clicking on the following link. An opt-out cookie is set to prevent your information from being collected on future visits to this website: Disable Google Analytics.
Order data processing
We have concluded a contract with Google for order data processing and fully implement the strict requirements of the German data protection authorities when using Google Analytics.
(2) Matomo (formerly Piwik)
This website uses the open source web analysis service Matomo. Matomo uses so-called "cookies". These are text files that are stored on your computer and enable an analysis of your use of the website. For this purpose, the information generated by the cookie about the use of this website is stored on our server. The IP address is anonymised before it is stored. Matomo cookies remain on your terminal until you delete them.
Matomo cookies are stored on the basis of Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in analysing anonymised user behaviour in order to optimise both its website and its advertising.
If you do not agree with the storage and use of your data, you can deactivate the storage and use. In this case, an opt-out cookie will be stored in your browser to prevent Matomo from storing usage data. If you delete your cookies, the Matomo Opt-Out-Cookie will also be deleted. The opt-out must be reactivated when you visit our site again.
(3) Google AdWords and Google Conversion Tracking
This website uses Google AdWords. AdWords is an online advertising program of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States ("Google").
Within the framework of Google AdWords, we use so-called conversion tracking. When you click on an ad placed by Google, a cookie is set for conversion tracking. Cookies are small text files that the web browser saves on the user's computer. These cookies expire after 30 days and are not used to personally identify users. If the user visits certain pages of this website and the cookie has not expired, both us and Google may recognise that the user clicked on the ad and was directed to that page.
Each Google AdWords customer receives a different cookie. Cookies cannot be tracked through AdWords customer websites. The information collected from the Conversion cookie is used to generate conversion statistics for AdWords customers who have opted for Conversion Tracking. Customers will know the total number of users who clicked on their ad and were directed to a page with a conversion tracking tag. However, they will not receive information that personally identifies users. If you do not wish to participate in tracking, you can opt out of this use by easily turning off the Google Conversion Tracking cookie in your web browser's user preferences. You will then not be included in the conversion tracking statistics.
“Conversion cookies” are stored on the basis of Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in analysing user behaviour in order to optimise both its website and its advertising.
You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, accept cookies for certain cases or generally exclude them and activate the automatic deletion of cookies when closing the browser. If cookies are deactivated, the functionality of this website may be restricted.
6. Use of social media, tools and plug-ins
(1) Accounts on social networks
We have accounts on social networking platforms in order to communicate with our customers, interested parties and users and to inform them about our services . When opening the respective networks and platforms, the terms and conditions and data processing guidelines of their respective operators apply.
(2) Use of content and service offers of third parties
On the basis of our legitimate interests, i.e. our interest in the analysis, optimisation and economic operation of our website within the meaning of Art. 6 Para. 1 lit. f. of the GDPR, we use content or service offers from third parties within our website in order to integrate their content and services, such as videos and map data.
This presupposes that the third party providers of these contents perceive the IP address of the user, since they would not be able to send the contents to their browser without the IP address. The IP address is therefore required for the presentation of this content. We make every effort to use only those contents whose respective providers only use the IP address to deliver the contents. Third party providers may also use so-called pixel tags, i.e. invisible graphics (so-called web beacons) for statistical or marketing purposes. These pixel tags can be used to evaluate information such as visitor traffic on the pages of this website. The pseudonymous information may also be stored in cookies on the user's device(s) and may include technical information about the browser and operating system, referring websites, visiting times and other information about the use of our website, as well as may be linked to such information from other sources.
(3) The following content and service offers of third parties are used by us:
We use "Google reCAPTCHA" (hereinafter "reCAPTCHA") on our websites. Provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”).
The purpose of reCAPTCHA is to check whether the data input on our websites (e.g. in a contact form) is made by a person or by an automated program. For this purpose, reCAPTCHA analyses the behaviour of the website visitor on the basis of various characteristics. This analysis begins automatically as soon as the website visitor enters the website. For the analysis, reCAPTCHA evaluates various information (e.g. IP address, length of stay of the website, visitor on the website or mouse movements made by the user). The data collected during the analysis is forwarded to Google.
The reCAPTCHA analyses run completely in the background. Website visitors are not informed that an analysis is taking place.
Data processing is based on Art. 6 Para. 1 lit. f GDPR. The website operator has a legitimate interest in protecting their website from abusive automated spying and from SPAM.
This page uses the Google Maps map service via an API. Provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
To use the functions of Google Maps, it is necessary to store your IP address. This information is usually transferred to a Google server in the USA and stored there. The website operator of this site has no influence on this data transfer.
The use of Google Maps is in the interest of an appealing presentation of our website and an easy retrievability of the places indicated by us on the website. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR.
Google Web Fonts
This page uses so-called web fonts provided by Google for the uniform display of fonts. When you open a page, your browser loads the required web fonts into its browser cache in order to display texts and fonts correctly.
For this purpose, the browser you are using must connect to Google's servers. This enables Google to know that your IP address has been used to access our website. The use of Google Web Fonts is in the interest of a uniform and appealing presentation of our online services. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR.
If your browser does not support web fonts, a standard font will be used by your computer.
(4) Use of Social Media – Social Plugins
Share content via plugins (Facebook, Google+1, etc.)
The content on our pages can be shared on social networks such as Facebook, Google+, Instagram, Xing, Linkedin in accordance with data protection regulations. This site uses a safe sharing tool. This tool establishes direct contact between networks and users only when the user actively clicks on one of these buttons.
This tool does not automatically transfer user data to the operators of these platforms. If the user is registered with one of the social networks, an information window appears when using the social buttons in which the user can confirm the text before sending it.
Our users can share the contents of this page in social networks in accordance with data protection regulations, without complete surf profiles being created by the network operators.
Facebook plugins (Follow Button, Like Button)
On our pages, plugins of the social network Facebook, provider Facebook Inc., 1 Hacker Way, Menlo Park, California 94025, USA are integrated. You can recognise the Facebook plugins by the Facebook logo on our page. An overview of the Facebook plugins can be found here: https://developers.facebook.com/docs/plugins/.
When you visit our pages, the plugin establishes a direct connection between your browser and the Facebook server. Facebook receives the information that you have visited our site with your IP address. If you click either of the Facebook "Follow" or "Like " buttons while logged into your Facebook account, you can link the content of our pages to your Facebook profile. This allows Facebook to associate visiting our pages with your user account. We would like to point out that, as the provider of the pages, we do not have any knowledge of the content of the transmitted data or its use by Facebook.
If you do not want Facebook to be able to assign visits to our pages to your Facebook user account, please log out of your Facebook user account.
Our pages use Google+ features. Provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Collecting and sharing information: You can use the Google+ button to publish information worldwide. The Google+ button gives you and other users personalised content from Google and our partners. Google stores both information that you provided for a +1 item and information about the page you viewed when you clicked +1. Your +1 may appear as clues along with your profile name and photo in Google services, such as search results or your Google profile, or elsewhere on websites and ads on the internet.
Google records information about your +1 activity to improve Google services for you and others. To use the Google+ button, you need a globally visible, public Google profile that includes at least the name you choose for the profile. This name is used in all Google services. In some cases, this name may also replace another name you used when sharing content through your Google Account. The identity of your Google profile may be displayed to users who know your email address or have other identifying information about you.
In addition to the uses described above, the information you provide will be used in accordance with applicable Google privacy policies. Google may publish or share aggregated statistics about users' +1 activity with users and partners, such as publishers, advertisers, or affiliates.
Our pages include features of the Instagram service. These features are offered by Instagram Inc, 1601 Willow Road, Menlo Park, CA 94025, USA.
If you are logged into your Instagram account, you can link the contents of our pages to your Instagram profile by clicking the Instagram button. This allows Instagram to associate visiting our pages with your user account. We would like to point out that, as the provider of the pages, we do not have any knowledge of the content of the transmitted data or its use by Instagram.
7. Automated decision making in individual cases (profiling)
We do not use purely automated decision-making procedures in accordance with Art. 22 GDPR, which allows us to evaluate your personal preferences, surfing behaviour etc. (so-called profiling). If we do use such a procedure in individual cases in the future, we will inform you separately if this is required by law.
In the Flora
From midday sun to evening light