Datenschutzerklärung der FIT AG

Thank you for visiting our website. The protection and security of your personal information when using our website is very important to us. We would therefore like to inform you at this point which of your personal data we collect when you visit our website and for what purposes it is used.
This privacy policy applies to the FIT AG website, which can be accessed under the domain fit.technology and the various subdomains ("our website").

Who is responsible and how can I reach you?
Person responsible for the processing of personal data within the meaning of the EU General Data Protection Regulation (GDPR):

FIT AG
Am Grohberg 1
92331 Lupburg
Phone: +49 (0) 9492 9429 0
Fax: +49 (0) 9492 9429 11
Email: contact@fit.technology

All visitors of our website can reach us in data protection questions under:

Datenschutz Pöllinger GmbH
Dresdner Str. 38
92318 Neumarkt
Phone: +49 (0) 9181-27 05 77 0
E-Mail: dsgvo@fit.technology

What is it about?
This privacy policy meets the legal requirements for transparency in the processing of personal data. This is any information relating to an identified or identifiable natural person. This includes, for example, information such as your name, age, address, telephone number, date of birth, email address, IP address or user behavior when visiting a website. Information for which we cannot (or can only with a disproportionate effort) establish a reference to your person, e.g. by anonymization, is not personal data. The processing of personal data (e.g. collection, retrieval, use, storage or transmission) always requires a legal basis and a defined purpose.
Stored personal data will be deleted as soon as the purpose of the processing has been achieved and there are no legitimate grounds for further storage of the data. We will inform you about the specific storage periods or criteria for storage in the individual processing operations. Irrespective of this, we store your personal data in individual cases for the assertion, exercise or defense of legal claims and if there are statutory retention obligations.
The following data protection notices apply to you if you have concluded a contract or similar with us. They contain information on how your personal data is processed by FIT AG and its affiliated companies in accordance with Section 15ff of the German Stock Corporation Act (AktG) (FIT) and what contact options are available for issues relating to data protection.

Who receives my data?
We only share your personal data that we process on our website with third parties if this is necessary for the fulfillment of the purposes and is covered by the legal basis in the individual case (e.g. consent or safeguarding legitimate interests).
Insofar as we use service providers for the operation of our website who process personal data on our behalf within the scope of commissioned processing pursuant to Art. 28 GDPR, they may be recipients of your personal data.
To the extent permitted by law or contractually agreed with you, we share personal data with companies in our group as well as external service providers:

  • Group companies to execute your contract and for reporting purposes.
  • Sales partners and service providers for targeted approach, conclusion and execution of the contract as well as for commission processing.
  • Credit institutions and payment service providers for settlements as well as processing of payments.
  • IT service provider to maintain our IT infrastructure.
  • Public authorities in justified cases (e.g. social insurance carriers, financial authorities, police, public prosecutor's office, supervisory authorities).

How is my data processed in detail?
In the following, we inform you about the individual processing operations, the scope and purpose of the data processing, the legal basis, the obligation to provide your data and the respective storage period. An automated decision in individual cases, including profiling, does not take place.

Provision of the website
When you call up and use our website, we collect the personal data that your browser automatically transmits to our server. The following information is stored temporarily in a so-called log file:

  • IP address of the requesting computer
  • Date and time of access
  • Name and URL of the retrieved file
  • Website from which the access is made (referrer URL)
  • Browser used and, if applicable, the operating system of your computer
  • and the name of your access provider.

The processing is carried out to protect our overriding legitimate interest to display our website and ensure security and stability based on Art. 6 para. lit. f GDPR. The collection of data and storage in log files is mandatory for the operation of the website. There is no right to object to the processing due to the exception under Art. 21 (1) GDPR. Insofar as the further storage of log files is required by law, the processing is based on Art. 6 (1) lit. c GDPR. There is no legal or contractual obligation to provide the data, however, calling up our website is not technically possible without providing the data. The aforementioned data is stored for the duration of the website display and for technical reasons beyond that for a maximum of 360 days.

Are cookies used?
Cookies are small text files that are sent by us to the browser of your end device during your visit to our website and stored there. As an alternative to the use of cookies, information can also be stored in the local storage of your browser. Some functions of our website cannot be offered without the use of cookies or local storage (technically necessary cookies). Other cookies, on the other hand, enable us to perform various analyses, so that we are able, for example, to recognize the browser you are using when you visit our website again and to transmit various information to us (non-essential cookies). With the help of cookies, we can, among other things, make our website more user-friendly and effective for you, for example by tracking your use of our website and determining your preferred settings (e.g. country and language settings). If third parties process information via cookies, they collect the information directly from your browser. Cookies do not cause any damage to your end device. They cannot execute programs or contain viruses. We provide information about the respective services for which we use cookies in the individual processing procedures. You can find detailed information about the cookies used in the cookie settings or in the Consent Manager of this website.

Google Tag Manager
This website uses the Google Tag Manager. Through this service, website tags can be managed through an interface. The Google Tool Manager only implements tags. This means that no cookies are used and no personal data is collected. The Google Tool Manager triggers other tags, which in turn may collect data. However, the Google Tag Manager does not access this data. If a deactivation has been made at domain or cookie level, it remains in place for all tracking tags, insofar as these are implemented with the Google Tag Manager.

Google Double Click
We have integrated components of Double Click by Google on our website. Double Click is a brand of Google, under which mainly special online marketing solutions are marketed to advertising agencies and publishers. Double Click by Google transfers data to the Double Click server with each impression as well as with clicks or other activities.
Each of these data transfers triggers a cookie request to the browser of the data subject. If the browser accepts this request, Double Click sets a cookie in your browser.
Double Click uses a cookie ID, which is required to process the technical procedure. The cookie ID is required, for example, to display an advertisement in a browser. Double Click can also use the cookie ID to record which advertisements have already been displayed in a browser in order to avoid duplicate placements. Furthermore, the cookie ID enables Double Click to record conversions. Conversions are recorded, for example, if a Double Click ad was previously displayed to a user and the user subsequently makes a purchase on the advertiser's website using the same Internet browser.
A Double Click cookie does not contain any personal data, but may contain additional campaign identifiers. A campaign identifier serves to identify the campaigns with which you have already been in contact on other websites. As part of this service, Google obtains knowledge of data that Google also uses to generate commission statements. Among other things, Google can track that you have clicked on certain links on our website. In this case, your data is passed on to the operator of Double Click, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Further information and the applicable privacy policy of Double Click by Google can be found at https://policies.google.com/privacy.

We process your data with the help of the Double Click cookie for the purpose of optimizing and displaying advertising based on your consent pursuant to Art. 6 (1) lit. a GDPR. You give your consent through your setting for the use of cookies (cookie banner / Consent Manager), with which you can also declare your revocation at any time with effect for the future pursuant to Art. 7 (3) GDPR. The cookie is used, among other things, to place and display user-relevant advertising and to create reports on advertising campaigns or to improve them. Furthermore, the cookie is used to avoid multiple displays of the same advertising. Each time you call up one of the individual pages of our website on which a Double Click component has been integrated, your browser is automatically prompted by the respective Double Click component to transmit data to Google for the purpose of online advertising and the settlement of commissions. There is no legal or contractual obligation to provide your data. If you do not give us your consent, a visit to our website is possible without restriction, but not all functions may be fully available.
The specific storage period of the processed data cannot be influenced by us, but is determined by Google Ireland Limited. Further information can be found in the privacy policy for Google Double Click: https://policies.google.com/privacy.

Google Analytics
This website uses Google Analytics, a web analytics service provided by Google, Inc. ("Google"). Google Analytics uses cookies, which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there.
In the event that IP anonymization is activated on this website, however, your IP address will be truncated beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator.
The IP address transmitted by your browser as part of Google Analytics will not be merged with other data from Google. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout
. Diese website uses Google Analytics with the extension "_anonymizeIp()". IP addresses are therefore only processed in abbreviated form in order to exclude direct personal references. You can find more information about Google's data protection here: https://support.google.com/analytics/answer/6004245?hl=de.

Contact form
On our website, we offer you the opportunity to contact us via a form provided. The information collected via mandatory fields is required to process the request. In addition, you can voluntarily provide additional information that you feel is necessary to process the contact request.When using the contact form, your personal data will not be passed on to third parties.
The processing of your data by using our contact form is carried out for the purpose of communication and processing of your request on the basis of your consent pursuant to Art. 6 para. 1 lit. a GDPR. Insofar as your inquiry relates to an existing contractual relationship with us, the processing is carried out for the purpose of fulfilling the contract on the basis of Art. 6 para. 1 lit. b GDPR. There is no legal or contractual obligation to provide your data, but the processing of your request is not possible without providing the information of the mandatory fields. If you do not wish to provide this data, please contact us by other means.
Insofar as you use the contact form on the basis of your consent, we store the collected data of each request for a period of three years, starting with the completion of your request or until you revoke your consent.
If you use the contact form in the context of a contractual relationship, we store the collected data of each request for a period of three years from the end of the contractual relationship.

Contact form for applicants
On our website, we offer you the opportunity to submit an application to us using a form provided. The information collected via mandatory fields is required to process the request. In addition, you can voluntarily provide additional information that you feel is necessary to process the contact request.
When using the application form, no data is passed on to third parties.
The processing of your data based on the use of the applicant form is carried out for the purpose of processing your application and deciding on the establishment of an employment relationship on the basis of § 26 BDSG. There is no legal or contractual obligation to provide your data, but the processing of your application is not possible without providing the information of the mandatory fields. If you do not wish to provide this data, please use other means of applying to us.
We store the data collected for the duration of the application process and, in the event of non-employment, for a period of six months from the date of rejection and, in the event of employment, for a period of three years after the end of employment.

Newsletter
If you register on our website to receive our newsletter, we collect your title, first name, last name, e-mail address and your preferred language and store this information together with the date of registration and your IP address. Subsequently, you will receive an e-mail in which you must confirm your registration for the newsletter (double opt-in). After successful confirmation, we store your data until you revoke your consent (unsubscribe from the newsletter). After unsubscribing from the newsletter, your data will be deleted immediately. To send the newsletter, we use a service of Backclick GmbH, which processes your personal data on our behalf in accordance with Art. 28 GDPR. Your data will not be passed on to third parties.
We process your data for the purpose of sending the newsletter based on your consent pursuant to Art. 6 para. 1 lit. a GDPR. By unsubscribing from the newsletter, you can declare your revocation at any time with effect for the future pursuant to Art. 7 (3) GDPR. There is no legal or contractual obligation to provide your data, but it is not possible to send the newsletter without providing your data.

Presence on social media platforms
We maintain social media offers on the networks mentioned below in order to provide you with information and offers also within social networks and to offer you further ways to contact us and to inform yourself about our offers. In the following, we inform you about which data we or the respective social network process from you in connection with calling up and using our social media offers.

Data that we process from you
If you wish to contact us via Messenger or via Direct Message via the respective social network, we generally process your user name via which you contact us and, if applicable, store further data provided by you insofar as this is necessary to process/respond to your request.
The legal basis is Art. 6 para. 1 sentence 1 f) GDPR (processing is necessary to protect the legitimate interests of the controller).
Static) usage data we receive from the social networks: We receive statistics regarding our accounts provided automatically via Insights functionalities. The statistics include, among other things, the total number of page views, likes, details on page activities and post interactions, reach, video views/views, and details on the proportion of men/women among our contacts/followers.
The statistics only contain aggregated data that cannot be related to individual persons. You are not identifiable to us via this.

What data the social networks process from you
To view the content of our social media offers or accounts, you do not need to be a member of the respective social network and to this extent no user account for the respective social network is required.
Please note, however, that when you call up the respective social network, the social networks also collect and store data from website visitors without a user account (e.g. technical data in order to be able to display the website to you) and use cookies and similar technologies, over which we have no control. For details, please refer to the privacy policy of the respective social network (see the corresponding links below).
Insofar as you wish to interact with the content on our social media offers accounts, e.g. comment on, share or like our postings/contributions and/or contact us via messenger functions, prior registration with the respective social network and the provision of personal data are required.
We have no influence on the data processing by the social networks within the scope of their use by you. To our knowledge, your data is stored and processed in particular in connection with the provision of the services of the respective social network, as well as for the analysis of user behavior (using cookies, pixels/web beacons and similar technologies), on the basis of which advertising based on your interests is played both within and outside the respective social network. It cannot be ruled out that your data will be stored by the social networks outside the EU/EEA and passed on to third parties.
Information on, among other things, the exact scope and purposes of the processing of your personal data, the storage period/deletion as well as guidelines on the use of cookies and similar technologies in the context of registration and use of the social networks can be found in the privacy policy/cookie policy of the social networks. There you will also find information on your rights and objection options.

Facebook

When you visit our Facebook page, Facebook collects, among other things, your IP address and other information that is present on your PC in the form of cookies. This information is used to provide us, as operators of the Facebook pages, with statistical information about the use of the Facebook page. Facebook provides more detailed information on this at the following link: https://facebook.com/help/pages/insights. With the statistical information transmitted, it is not possible for us to draw conclusions about individual users.
We collect your data via our social media offers only to realize a possible provision for communication and interaction with us. This collection usually includes your name, message content, comment content, and the profile information you provide "publicly".
The processing of your personal data for our above-mentioned purposes is based on our legitimate business and communicative interest in offering an information and communication channel pursuant to Art. 6 (1) f) GDPR. Should you, as a user, have given your consent to the data processing vis-à-vis the respective provider of the social network, the legal basis of the processing extends to Art. 6 (1) a), Art. 7 GDPR.
Due to the fact that the actual data processing is carried out by the provider of the social network, our access to your data is limited. Only the provider of the social network is authorized to fully access your data. Due to this, only the provider can directly take and implement appropriate measures to fulfill your user rights (information request, deletion request, objection, etc.). The assertion of corresponding rights is therefore most effective directly against the respective provider.
We are jointly responsible with Meta Platforms Inc. for the personal content of the social media offerings. Data subject rights can be asserted with Meta Platforms Ireland Ltd. as well as with us.
The primary responsibility for the processing of Insights data lies with Meta under the GDPR and Meta fulfills all obligations under the GDPR with regard to the processing of Insights data, Meta Platforms Ireland Ltd. provides the essence of the Page Insights supplement to data subjects.
We do not make any decisions regarding the processing of Insights data and all other information resulting from Art. 13 GDPR, including legal basis, identity of the controller and storage period of cookies on user terminals.
Further information can be found directly at Meta (Supplemental Agreement with Meta): https://www.facebook.com/legal/terms/page_controller_addendum

Instagram page
When you visit our Instagram page, Instagram collects, among other things, your IP address and other information that is present in the form of cookies on your PC. This information is used to provide us, as operators of the Instagram pages, with statistical information about the use of the Instagram page. Instagram provides more detailed information on this under the following link: https://facebook.com/help/pages/insights. With the transmitted statistical information, it is not possible for us to draw conclusions about individual users. We only use this information to respond to the interests of our users and to continuously improve our online presence and ensure its quality. We collect your data via our social media offers only to realize a possible provision for communication and interaction with you. This collection usually includes your name, message content, comment content, and the profile information you provide "publicly". The processing of your personal data for our above-mentioned purposes is based on our legitimate business and communicative interest in offering an information and communication channel pursuant to Art. 6 (1) f) GDPR. Should you, as a user, have given your consent to the data processing vis-à-vis the respective provider of the social network, the legal basis of the processing extends to Art. 6 (1) a), Art. 7 GDPR. Due to the fact that the actual data processing is carried out by the provider of the social network, our access to your data is limited. Only the provider of the social network is authorized to fully access your data. Due to this, only the provider can directly take and implement appropriate measures to fulfill your user rights (information request, deletion request, objection, etc.). The assertion of corresponding rights is therefore most effective directly against the respective provider. We are jointly responsible with Instagram for the personal content of the social media offerings. Data subject rights can be asserted with Meta Platforms Ireland Ltd. as well as with us. The primary responsibility for the processing of Insights data lies with Instagram under the GDPR and Instagram complies with all obligations under the GDPR with respect to the processing of Insights data, Meta Platforms Ireland Ltd. provides the essence of the Page Insights supplement to data subjects. We do not make any decisions regarding the processing of Insights data and all other information resulting from Art. 13 GDPR, including legal basis, identity of the controller and storage period of cookies on user devices. Further information can be found directly at Instagram (supplementary agreement with Meta): https://www.facebook.com/legal/terms/page_controller_addendum

Twitter-Seite
We are jointly responsible with Twitter for the personal content of the fan page. Data subject rights can be asserted with Twitter Inc. as well as with us. The primary responsibility under the GDPR for the processing of Insights Data lies with Twitter and Twitter complies with all obligations under the GDPR with respect to the processing of Insights Data, Twitter Inc. provides the essence of the Page Insights Supplement to data subjects. We do not make any decisions regarding the processing of Insights data and all other information resulting from Art. 13 GDPR, including legal basis, identity of the controller and storage period of cookies on user terminals. Further information can be found directly at Twitter: privacy policy https://twitter.com/de/privacy. Das Twitter usage concept underlying the offer can be requested at our above mentioned email address (contact@fit.technology) with the keyword "Twitter usage concept".

LinkedIn page
LinkedIn is a social network of LinkedIn Inc. based in Sunnyvale, California, USA, which enables the creation of private and professional profiles. Users can maintain their existing contacts and make new ones. Businesses can create profiles where photos and other company information are uploaded. Other LinkedIn users have access to this information and can write their own articles and share this content with others.
The focus is on professional exchanges on specialized topics with people who share the same professional interests. In addition, LinkedIn is often used by businesses and other organizations to hire employees and present themselves as an interesting employer. For more information about LinkedIn, please visit: https://about.linkedin.com/. For more information about LinkedIn privacy, please visit: https://www.linkedin.com/legal/privacy-policy

What rights do I have?
Under the conditions of the statutory provisions of the General Data Protection Regulation (GDPR), you have the following rights as a data subject:

  • Information according to Art. 15 GDPR about the data stored about you in the form of meaningful information about the details of the processing and a copy of your data;
  • Correction according to Art. 16 GDPR of incorrect or incomplete data stored by us;
  • Deletion pursuant to Art. 17 GDPR of the data stored by us, insofar as the processing is not necessary for the exercise of the right to freedom of expression and information, for the fulfillment of a legal obligation, for reasons of public interest or for the assertion, exercise or defense of legal claims;
  • Restriction of processing pursuant to Art. 18 GDPR, insofar as the accuracy of the data is disputed, the processing is unlawful, we no longer need the data and you object to their deletion because you need them for the assertion, exercise or defense of legal claims or you have objected to the processing pursuant to Art. 21 GDPR.
  • Data portability pursuant to Art. 20 GDPR, insofar as you have provided us with personal data within the scope of consent pursuant to Art. 6 (1) a GDPR or on the basis of a contract pursuant to Art. 6 (1) b GDPR and these have been processed by us with the aid of automated processes. You will receive your data in a structured, common and machine-readable format or we will transfer the data directly to another responsible party, insofar as this is technically feasible.
  • Objection according to Art. 21 GDPR against the processing of your personal data, insofar as this is based on Art. 6 para. 1 lit. e, f GDPR and there are reasons for this that arise from your particular situation, or the objection is directed against direct advertising. The right to object does not exist if overriding compelling legitimate grounds for the processing are demonstrated or the processing is carried out for the assertion, exercise or defense of legal claims. Where the right to object does not exist for individual processing operations, this is indicated there.
  • Revocation according to Art. 7 para. 3 GDPR of your given consent with effect for the future.
  • Complaint pursuant to Art. 77 GDPR to a supervisory authority if you are of the opinion that the processing of your personal data violates the GDPR. As a rule, you can contact the supervisory authority of your usual place of residence, your place of work or our company headquarters.

FIT AG (Am Grohberg 1, 92331 Lupburg) is responsible for processing your data, unless otherwise stated. You can request information from us at any time about the data stored about you and its correction in the event of errors. Furthermore, you can request the restriction of processing, the transferability of the data provided to us by you in a machine-readable format or the deletion of your data - insofar as they are no longer required. In addition, you have the right to object at any time to the use of your data based on public or legitimate interests. For this purpose, please contact:

FIT AG
Subject: Data protection
Am Grohberg 1
92331 Lupburg
Email: dsgvo@fit.technology

Insofar as we process your data on the basis of consent given by you, you can revoke this consent at any time with effect for the future. As of receipt of your revocation, we will no longer process your data for the purposes stated in the consent. Please address your revocation or an advertising objection to:

FIT AG
Am Grohberg 1
92331 Lupburg
Email: dsgvo@fit.technology

You can find our duty to inform according to Art. 13 and 14 GDPR here:
Applicants
Customer/prospects/suppliers
Social Media
Video footage
Visitors