Name and contact details of the person responsible for processing your personal data
Caeli Wind GmbH (hereinafter Caeli)
Phone: +49 30 617 85 310
Fax: +49 30 617 85 330
Name and contact details of the external data protection officer
c/o secjur GmbH
T: +49 40 228 599 520
1. Collection and storage of personal data and the type and purpose of their use
1.1 When visiting the website
When you visit our website www.caeli-wind.de, the browser used on your device automatically sends information to our website server. This information is temporarily stored in a so-called log file. The following information is recorded without your intervention and stored until it is automatically deleted:
• IP address of the requesting computer,
• date and time of access,
• Name and URL of the retrieved file,
• Website from which access is made (referrer URL),
• Browser used and, if applicable, the operating system of your computer and the name of your access provider.
The data mentioned are processed by us for the following purposes:
• Ensuring a smooth connection establishment of the website,
• Ensuring comfortable use of our website,
• System security and stability as well as for other administrative purposes.
The legal basis for data processing is Art. 6 Para. 1 S. 1 lit. f GDPR. Our legitimate interest follows from the data collection purposes listed above. Under no circumstances do we use the collected data for the purpose of drawing conclusions about your person. The data will be deleted after the end of the respective browser session, at the latest after seven days, unless further storage is required for the above-mentioned purposes.
1.2 When subscribing to our newsletter
When registering for our newsletter, we need an e-mail address from you as well as information that allows us to verify that you are the owner of the e-mail address provided and that you agree to receive the newsletter. For this purpose, after your entry, an e-mail will be sent to the specified e-mail address with a confirmation link (double opt-in). If you do not confirm your registration within 14 days, your information will be blocked and automatically deleted after one month.
The only mandatory information for sending the newsletter is your e-mail address. The specification of further, separately marked data is voluntary. In addition, we store the IP addresses you use and the times of registration and confirmation. The purpose of the procedure is to be able to prove your registration and, if necessary, to be able to clarify any possible misuse of your personal data. We do not collect any further data in this context. We use this data exclusively for sending the requested newsletter. Insofar as we use a processor to send the newsletter, we naturally comply with the applicable data protection laws.
The data is processed on the basis of your consent in accordance with Article 6 (1) (a) GDPR. You can revoke your consent to the sending of the newsletter at any time and unsubscribe from the newsletter. You can declare your revocation by clicking on the link provided in every newsletter e-mail, or by sending a message to the above contact details (e.g. e-mail, fax, letter). You can revoke your consent at any time. The legality of the data processing operations that have already taken place remains unaffected by the revocation.
1.3 For your inquiries
We process the data that you provide us with an inquiry to fulfill contractual and pre-contractual obligations in connection with (the initiation of) our business relationship (Art. 6 Para. 1 lit. b DSGVO) or - if your inquiry is not related with (pre-)contractual measures - to protect legitimate interests (Article 6 (1) (f) GDPR). Our legitimate interest lies in being able to answer your inquiries.
1.4 Data processing for applications
Insofar as personal data is transmitted to us by you in applications, we process your data for the examination, processing and answering of your application and, if necessary, for the preparation of the employment relationship.
The data is processed in accordance with Art. 6 Para. 1 S. 1 lit. b GDPR, § 26 BDSG. The personal data collected for the application process will be stored six months after completion of the application process and then deleted, unless an employment relationship is established with the applicant or longer storage is necessary due to legal requirements or if the person concerned consented to longer storage.
2. Sharing of Data
Within our organization, those departments that need your data to fulfill our contractual and legal obligations will have access to it.
Processors employed by us (Article 28 GDPR) may also receive data for these purposes. These are companies in the categories of IT services, logistics, printing and shipping services, telecommunications, debt collection, sales and marketing.
Your personal data will not be passed on to third parties for purposes other than those listed below.
We only pass on your personal data to third parties if:
• You have given your express consent in accordance with Article 6 Paragraph 1 Sentence 1 Letter a GDPR,
• disclosure pursuant to Article 6 Paragraph 1 Clause 1 Letter f GDPR is necessary to safeguard legitimate interests, in particular to assert, exercise or defend legal claims, and there is no reason to assume that you have an overriding legitimate interest in non-disclosure have your data
• there is a legal obligation for the disclosure according to Article 6 Paragraph 1 Clause 1 Letter c GDPR and
• this is legally permissible and required for the processing of contractual relationships with you in accordance with Article 6 Paragraph 1 Sentence 1 Letter b GDPR.
3. Data Security
We use appropriate technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or against unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.
4. Duration of Data Storage
If necessary, we process and store your personal data for the duration of our business relationship, which also includes, for example, the initiation and execution of a contract.
In addition, we are subject to various storage and documentation obligations, which result from the German Commercial Code (HGB) and the Fiscal Code (AO), among other things. The periods for storage and documentation specified there are 6 years for correspondence in connection with the conclusion of a contract and 10 years for accounting documents (§ 238, § 257 Para. 1 and 4 HGB, § 147 Para. 1 and 3 AO). Such storage and documentation obligations exist in particular if you conclude a contract with us (e.g. for consulting services).
Finally, the storage period is also assessed according to the statutory limitation periods, which, for example, according to §§ 195 et seq. of the German Civil Code (Bürgerliches Gesetzbuch - BGB), can usually be three years, but can also be up to thirty years in certain cases.
After expiry of the storage and documentation obligations as well as the relevant limitation periods, we delete the data.
5. Cookies, Tracking and Analysis Tools
Information is stored in the cookie that arises in connection with the specific end device used. However, this does not mean that we are immediately informed of your identity.
We use Google Analytics, a web analytics service provided by Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA ("Google"). In this context, pseudonymised usage profiles are created and cookies are used. The information generated by the cookie about your use of this website such as
• browser type/version,
• operating system used,
• referrer URL (the previously visited page),
• host name of the accessing computer (IP address),
• time of server request,
are transferred to a Google server in the USA and stored there. The information is used to evaluate the use of the website, to compile reports on website activity and to provide other services related to website activity and internet usage for the purposes of market research and the needs-based design of these websites. This information may also be transferred to third parties if this is required by law or if third parties process this data on our behalf. Under no circumstances will your IP address be merged with other Google data.
The transfer of your information to a third country outside the EU is covered by an adequacy decision of the Commission (C/2016/4176 of July 12, 2016) within the meaning of Art. 45 DSGVO, because Google has committed itself to the principles of the EU-US to comply with Privacy Shield. Google works for us as a processor within the meaning of Art. 28 GDPR.
You can prevent the installation of cookies by setting the browser software accordingly; we would like to point out to you however that in this case not all functions of this website can be used in full.
You can also prevent the collection of the data generated by the cookie and related to your use of the website (including your IP address) and the processing of this data by Google by downloading and installing a browser add-on.
As an alternative to the browser add-on, especially for browsers on mobile devices, you can also prevent Google Analytics from collecting data by clicking on this link. An opt-out cookie will be set to prevent future collection of your data when you visit this website. The opt-out cookie is only valid in this browser and only for our website and is stored on your device. If you delete the cookies in this browser, you must set the opt-out cookie again.
We use external fonts from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google") on our website. We have taken the greatest possible care to ensure that personal data is not passed on to Google. Nevertheless, we would like to offer you the opportunity to find out about the handling of personal data in Google's data protection regulations and to provide an opt-out link stored by Google.
This website uses an analysis service provided by StatCounter (www.statcounter.com), Guinness Enterprise Centre, Taylor's Lane, Dublin 8, Ireland. The collected data can be used to analyze the use of this website. Every time you visit this website, »statcounter.com« collects data such as e.g.
• IP address,
• used browser,
• Operating Systems
• the visited pages of this website,
• Date and duration of the visit
The information generated by the cookie about your use of this online offer is stored on a server operated by StatCounter. User profiles can be created from the processed data, which are only used for analysis and not for advertising purposes.
You can object to the collection and storage of data at any time with effect for the future. In order to object to data collection and storage of your visitor data for the future, you can obtain a refusal cookie from StatCounter under the following link, which means that no visitor data from your browser will be collected and stored at StatCounter in the future: https://statcounter.com /about/set-refusal-cookie/.
We use the Google reCaptcha service to determine whether a person or a computer makes a specific entry in our contact or newsletter form (see point 1.2). Google uses the following data to check whether you are a human or a computer: IP address of the terminal device used, the website that you are visiting and on which the Captcha is integrated, the date and duration of the visit, the identification data of the device used Browser and operating system type, Google account if you are logged in to Google, mouse movements on the reCaptcha areas and tasks that require you to identify images. The legal basis for the data processing described is Article 6 Paragraph 1 Letter f of the General Data Protection Regulation. There is a legitimate interest on our part in this data processing, to ensure the security of our website and to protect us from automated input (attacks).
6. Social Media Plugins
We use social media plugins from the following providers on our website:
LinkedIn Corporation, 2029 Stierlin Court, Mountain View, California 94043, USA ("LinkedIn")
XING AG, Dammtorstrasse 29-32, 20354 Hamburg, Germany and
YouTube LLC, 901 Cherry Ave, San Bruno, CA 94066, USA
The processing of data in the context of our online presence in social networks is based on our legitimate interest in effective information and direct communication with interested parties and customers of our company. The basis for data processing is Art. 6 (1) lit. f GDPR, which allows the processing of data to protect the legitimate interests of the person responsible, provided that the interests or fundamental rights and freedoms of the person concerned do not prevail.
Further information on the purpose and scope of the data collection and its processing by the plugin provider can be found in the data protection declarations of these providers communicated below. There you will also receive further information on your rights in this regard and setting options to protect your privacy.
We do not collect or store any data in connection with your use of the Google Maps functions embedded on our website.
8. Transfer of data to third countries
Data is transferred to third countries (countries outside the European Economic Area - EEA) if this is necessary for the execution of contracts or is required by law or if you have given us your consent. We will inform you separately about details, if required by law. In addition, the processors in third countries (e.g. Google) named in these data protection regulations have access to your data.
9. Obligation to provide data
As part of our business relationship, you only have to provide the personal data that is necessary for the establishment, implementation and termination of a business relationship or that we are legally obliged to collect. Without this data, we will generally have to refuse to conclude the contract or execute the order, or we will no longer be able to carry out an existing contract and may have to terminate it.
Mandatory information is marked as such on our website.
10. No automated decision-making in individual cases
In principle, we do not use fully automated decision-making in accordance with Art. 22 GDPR to establish and implement the business relationship. If we use these procedures in individual cases, we will inform you separately if this is required by law.
11. Data subject rights
With regard to the personal data we have stored about you, you have the following rights: Information (Art. 15 GDPR, § 34 BDSG), correction (Art. 16 GDPR), restriction of processing (Art. 18 GDPR), deletion (Art . 17 GDPR, § 35 BDSG) and data transferability in a structured, common and machine-readable format (Art. 20 GDPR). You also have the right to object to data processing (Art. 21 GDPR). Insofar as the data processing is based on your consent, you have the right to revoke your consent to us at any time in accordance with Art. 7 Para. 3 DSGVO. As a result, we are no longer allowed to continue the data processing based on this consent for the future.
You can contact us at any time by e-mail (firstname.lastname@example.org) or at our postal address (see above) to assert all of these rights and to have further questions on the subject of personal data.
Irrespective of this, you have the right to lodge a complaint with a supervisory authority - in particular in the EU member state where you live, your place of work or the place of the alleged infringement - if you believe that the processing of your personal data violates applicable data protection regulations (Art. 77 GDPR, § 19 BDSG).
This data protection declaration is currently valid and has the status of September 2019.
Due to the further development of our website and offers on it or due to changed legal or official requirements, it may become necessary to change this data protection declaration. You can access the current data protection declaration at any time on the Caeli website.