Data Privacy

Public Address Exhibition & Design GmbH

www.public-address.com

1. Data protection at a glance

General information

The following general information provides a simple overview of what happens to your personal data (hereinafter “data”) when you visit our website www.public-address.com (hereinafter the “website” or “web pages”). Personal data is any data by which you can be personally identified and which can be related to you, such as name, address, age, gender, email addresses, user behaviour, etc. Which data we process about you depends on the services you use or request on and via our website and on the further contractual relationship with us. For detailed information on data protection, please refer to the privacy policy set out below this text.

– Data collection on our website –

Who is responsible for the data collection on this website?

The data processing on this website is carried out by the website operator. You will find its contact details in the imprint of this website or below under section 2, “General information and mandatory legal information”, of this privacy policy.

How do we collect your data and which sources do we use?

(1) On the one hand, your data is collected when you provide it to us. This may be data that you enter into a contact form, for example, or that you provide to us by email, fax or telephone.

(2) Other data is collected automatically by our IT systems, or the IT systems of our provider, when you visit our website. This is primarily technical data (e.g. internet browser, operating system or time of the page view). This data is generally collected automatically as soon as you enter our website or select individual functions or offers on our website.

(3) Where applicable, we also process personal data about you that we lawfully obtain from publicly accessible sources (e.g. land registers or commercial and association registers) or that is transmitted to us by other third parties (e.g. credit agencies such as Schufa), provided that this personal data is necessary for our services and/or business relationship and for contacting you.

What do we use your data for?

Some of the data is collected to ensure that the website is provided free of errors. Other data may be used to analyse your user behaviour. Further data is collected in order to offer you our contractual services and to perform our business relationship with you.

What rights do you have regarding your data?

(1) You have the right to obtain information about the origin, recipients and purpose of your stored personal data free of charge at any time. You also have the right to request the correction, blocking or erasure of this data. For this purpose, and for any further questions on the subject of data protection, you may contact the controller named in the imprint or under section 2 of this privacy policy, “General information and mandatory legal information”, or our data protection officer at any time. You also have the right to lodge a complaint with the competent supervisory authority in your country or in the respective member state of the European Union, see section 2 below, “General information and mandatory legal information”.

(2) In addition, you have the right to request the restriction of the processing of your personal data under certain circumstances.

(3) Details of the data protection rights to which you are entitled can be found in section 3 of this privacy policy, “Your data protection rights”.

2. General information and mandatory information

Data protection

(1) We at Public Address Exhibition & Design GmbH, as the operator of the website, take the protection of your personal data very seriously. We always treat your personal data confidentially and in accordance with the statutory data protection provisions and this privacy policy.

(2) In doing so, we process your personal data in particular in accordance with the provisions of the European General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).

(3) When you use this website, various items of personal data are collected. Personal data is data by which you can be personally identified. This privacy policy explains which data we collect and what we use it for. It also explains how and for what purpose this is done and what rights you have in relation to your data.

(4) We point out that data transmission over the internet (e.g. when communicating by email) may have security gaps. Complete protection of data against access by third parties is not possible, and we therefore accept no liability for loss of data, damage arising from or in connection with the use of remote means of communication, or comparable impairments of your data.

Information on the controller

The controller responsible for data processing on this website is:

Public Address Exhibition & Design GmbH

represented by its Managing Director, Mr Markus C. Oehme

Rheingaubogen 30

65239 Hochheim am Main, Germany

Telephone: +49 6146 848 642 00

Fax: +49 6146 848 642-30

Email: info(at)public-address.com

3. Your data protection rights

(1) As a data subject whose data is collected, you have the following rights against us with regard to the personal data concerning you.

Withdrawal of your consent to data processing pursuant to Art. 13 (2) (c) GDPR

Many data processing operations are only possible with your express consent. You may withdraw consent that you have already given at any time. An informal message by email to us is sufficient for this purpose. The lawfulness of the data processing carried out up to the point of withdrawal remains unaffected by the withdrawal.

Right of access pursuant to Art. 15 GDPR

You may exercise your right of access under Art. 15 GDPR against us at any time and request information as to whether personal data concerning you is processed by us, as well as information about your stored personal data, its origin, its recipients and the purpose of the data processing by us.

Right to rectification pursuant to Art. 16 GDPR

You may exercise your right to rectification under Art. 16 GDPR against us at any time and request the correction of inaccurate personal data concerning you.

Right to erasure pursuant to Art. 17 GDPR

You may exercise your right to erasure under Art. 17 GDPR against us at any time and request that personal data concerning you be erased without undue delay where that data is no longer necessary for the purposes for which it was collected or otherwise processed. Other legal obligations (e.g. retention obligations) may conflict with this right to erasure.

Right to object to data collection in particular cases and to direct marketing pursuant to Art. 21 GDPR

Where data processing is carried out on the basis of Art. 6 (1) (e) or (f) GDPR, you have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data; this also applies to profiling based on those provisions. The respective legal basis on which processing is based can be found in this privacy policy. If you object, we will no longer process the personal data concerned unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims (objection pursuant to Art. 21 (1) GDPR).

(2) Where your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing; this also applies to profiling insofar as it is connected with such direct marketing. If you object, your personal data will subsequently no longer be used for direct marketing purposes (objection pursuant to Art. 21 (2) GDPR).

Right to data portability pursuant to Art. 20 GDPR

You have the right to have data that we process automatically on the basis of your consent or in performance of a contract handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another controller, this will only take place insofar as it is technically feasible.

Right to restriction of processing pursuant to Art. 18 GDPR

You have the right to request the restriction of the processing of your personal data. The right to restriction of processing exists in the following cases:

(1) If you contest the accuracy of the personal data we hold about you, we generally need time to verify this. For the duration of that verification, you have the right to request the restriction of the processing of your personal data.

(2) If the processing of your personal data was or is unlawful, you may request the restriction of the data processing instead of its erasure.

(3) If we no longer need your personal data but you need it for the establishment, defence or exercise of legal claims, you have the right to request the restriction of the processing of your personal data instead of its erasure.

(4) If you have lodged an objection pursuant to Art. 21 (1) GDPR, a balance must be struck between your interests and ours. As long as it has not yet been established whose interests prevail, you have the right to request the restriction of the processing of your personal data.

(2) If you have restricted the processing of your personal data, this data may, apart from being stored, only be processed with your consent or for the establishment, exercise or defence of legal claims, or for the protection of the rights of another natural or legal person, or for reasons of important public interest of the European Union or a member state.

(3) Regarding your data protection rights and for any further questions on the subject of personal data, you may contact the controller or the data protection officer named in the imprint or under section 2, “General information and mandatory legal information”, at any time.

Right to lodge a complaint with the competent supervisory authority

(1) If you have a complaint about the processing of your personal data, we will do our utmost to resolve it with you and to provide a remedy as quickly as possible. We are available to you at any time for this purpose.

(2) In the event of infringements of the GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the member state of your habitual residence, your place of work or the place of the alleged infringement. This right to lodge a complaint is without prejudice to any other administrative or judicial remedy.

(3) For a complaint concerning data protection infringements in Germany, the respective competent data protection commissioner pursuant to Art. 77 GDPR in conjunction with Section 19 BDSG is the correct point of contact. The contact details for the Hessian Data Protection Commissioner are:

The Hessian Commissioner for Data Protection and Freedom of Information

Postfach 3163

65021 Wiesbaden, Germany

Email: poststelle@datenschutz.hessen.de

Telephone: +49 611 1408 – 0

Fax: +49 611 1408 – 900

4. Data collection on our website

SSL and TLS encryption

For security reasons and to protect the transmission of confidential content, such as orders or enquiries that you send to us as the site operator, this site uses SSL or TLS encryption. You can recognise an encrypted connection by the fact that the address bar of your browser changes from “http://” to “https://” and by the padlock symbol in your browser bar.

When SSL or TLS encryption is activated, the data you transmit to us cannot normally be read by third parties.

Cookies

(1) Our website partly uses what are known as cookies. Cookies do no harm to your computer and do not contain viruses. Cookies serve to make our offering more user-friendly, more effective and more secure. Cookies are small text files or data records that are stored on your computer and saved by your browser, and through which certain information flows to the party setting the respective cookie (here, to us) for the reasons stated above.

(2) Most of the cookies we use are what are known as “transient” or “session cookies”. They are deleted automatically after the end of your visit and once you close your browser (again). These cookies store what is known as a session ID, which allows various requests from your browser to be assigned to the same session. This enables your computer to be recognised when you return to our website, so that, for example, you do not have to log in again every time you move to another page. Session cookies are deleted or expire when you log out or close your browser.

(3) Other cookies, known as “persistent”, “permanent” or “log” cookies, remain stored on your device until they are deleted automatically after a predefined period, which may vary depending on the cookie, or until you delete them. These cookies allow us to recognise your browser on your next visit and thus to store settings and information. This makes access faster and more convenient, since you do not have to set your language preference for our portal again, for example. You can delete cookies at any time in the security settings of your browser.

(4) Our website uses what are known as third-party cookies from external operators (see section 6 below on YouTube and the analysis tools), which accordingly do not originate from us and are not operated by us. Such third-party cookies are used in particular to collect information for marketing and advertising purposes, to produce and provide customised content and to compile web statistics.

(5) You can set your browser so that you are informed about the setting of cookies by us or by our website and allow certain or all cookies (e.g. third-party cookies) only on a case-by-case basis, exclude the acceptance of cookies in certain cases or generally, and activate the automatic deletion of cookies when you close your browser. If cookies are deactivated, the functionality of this website may be limited. If you wish to use our web pages in full and conveniently, you should accept those cookies that enable the use of certain functions or make use more convenient.

The purposes for which the cookies we use are employed can be found in the overview above.

(6) Cookies that are necessary to carry out the electronic communication process or to provide certain functions requested by you (e.g. video linking or language setting) are stored on the basis of Art. 6 (1) (f) GDPR. The website operator has a legitimate interest in storing cookies for the technically error-free and optimised provision of its services and for the attractive design of its online offering.

Insofar as other cookies are stored (e.g. cookies for analysing your browsing behaviour), these are dealt with separately in this privacy policy.

(7) Insofar as cookies are not strictly technically necessary (in particular analysis, tracking and marketing cookies), these are only set with your express consent pursuant to Art. 6 (1) (a) GDPR in conjunction with Section 25 (1) TDDDG. You may withdraw your consent at any time with effect for the future via the cookie settings on our website. Details of the services used on this basis can be found in section 6 of this privacy policy.

Server log files

(1) In the case of purely informational use, that is, when you visit our website without being registered or otherwise transmitting information to us, we, or the automated system of the website, collect only the personal data that your browser automatically transmits to our server. This general data and information is stored in the server’s log files. If you wish to view our website, we collect the following data, which is technically necessary for us in order to display our website and its content correctly to you and to ensure the functionality and stability of our website as well as the security of our information technology systems. The legal basis for this is Art. 6 (1) sentence 1 (f) GDPR (to safeguard our legitimate interests):

IP address,
date and time of the request,
time zone difference to Greenwich Mean Time (GMT),
content of the request (e.g. in relation to our website),
access status / HTTP status code,
amount of data transferred in each case,
website from which the request originates,
browser,
operating system and its interface,
language and version of the browser software, and
other similar data and information.

(2) This data is not merged with other data sources.

(3) This data is collected on the basis of Art. 6 (1) (f) GDPR. As the website operator, we have a legitimate interest in the technically error-free presentation and the optimisation of our website for visitors and customers, and the server log files must be recorded for this purpose.

Enquiries by email, telephone or fax

(1) If you contact us by email, telephone or fax, your enquiry, including all personal data arising from it (such as name, address, date of birth, occupation, employer, bank details, enquiry), will be stored and processed by us for the purpose of handling your request. We do not pass this data on without your consent (prior approval).

(2) This data is processed on the basis of Art. 6 (1) (b) GDPR, provided that your enquiry is connected with the performance of a contract or is necessary for carrying out or initiating pre-contractual measures, or is intended by the parties involved. In all other cases, the processing of the data listed above by way of example is based on your consent (Art. 6 (1) (a) GDPR) and/or on our legitimate interests (Art. 6 (1) (f) GDPR), as we have a legitimate interest in the effective and customer-oriented handling of the enquiries and customer orders addressed to us.

(3) The data you send us via enquiries of any kind remains with us until you ask us to delete it, withdraw your consent to its storage, or the purpose for storing the data no longer applies (e.g. after your request or customer order has been dealt with). Mandatory statutory provisions, in particular statutory retention periods, remain unaffected.

5. Hosting and technical service providers

Hosting by Vercel

Our website is hosted by Vercel Inc., 440 N Barranca Avenue #4133, Covina, CA 91723, USA (“Vercel”). When our website is accessed, technical data of visitors (in particular IP address, time of access, browser and device information, amount of data transferred) is processed on Vercel’s servers. This data may also be processed in the USA.

The legal basis is Art. 6 (1) (f) GDPR. We have a legitimate interest in providing our website reliably, performantly and securely.

A data processing agreement pursuant to Art. 28 GDPR is in place with Vercel. The transfer of data to the USA is based on the European Commission’s standard contractual clauses.

Further information can be found in Vercel’s privacy policy: https://vercel.com/legal/privacy-policy

Email delivery by Resend

For sending transactional and notification emails (e.g. replies to contact enquiries, confirmations), we use the Resend service provided by Plus Five Five, Inc., 2261 Market Street #5039, San Francisco, CA 94114, USA (“Resend”).

When an email is sent via our website, the data required for this purpose, in particular the email address, the content of the message and technical transmission data such as IP address and time, is transferred to Resend and processed there for the purpose of delivery.

The legal basis is Art. 6 (1) (b) GDPR insofar as the email delivery serves the performance or initiation of a contract, and otherwise Art. 6 (1) (f) GDPR on the basis of our legitimate interest in reliable email delivery.

A data processing agreement pursuant to Art. 28 GDPR is in place with Resend. The transfer of data to the USA is based on the European Commission’s standard contractual clauses.

Further information can be found in Resend’s privacy policy: https://resend.com/legal/privacy-policy

6. Plugins and tools, in particular from third-party providers

YouTube with enhanced data protection

(1) Our website uses plugins from the YouTube website. The site is operated by Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland, telephone: +353 1 543 1000, email: support-deutschland@google.com.

(2) We use YouTube in enhanced data protection mode. According to YouTube, this mode means that YouTube does not store any information about visitors to this website before they watch the video. However, enhanced data protection mode does not necessarily rule out the transfer of data to YouTube partners. For example, YouTube establishes a connection to the Google DoubleClick network regardless of whether you watch a video.

(3) As soon as you start a YouTube video on our website, a connection to YouTube’s servers is established. This tells the YouTube server which of our pages you have visited. If you are logged into your YouTube account, you enable YouTube to assign your browsing behaviour directly to your personal profile. You can prevent this by logging out of your YouTube account.

(4) In addition, after a video has been started, YouTube may store various cookies (known as third-party cookies) on your device. With the help of these cookies, YouTube can obtain information about visitors to our website. This information is used, among other things, to record video statistics, improve user-friendliness and prevent fraud attempts. The cookies remain on your device until you delete them.

(5) Where applicable, further data processing operations may be triggered after a YouTube video has been started, over which we have no influence.

(6) YouTube is used in the interest of presenting our online offerings in an appealing way for advertising and marketing purposes. This constitutes a legitimate interest within the meaning of Art. 6 (1) (f) GDPR.

(7) Further information on data protection at YouTube can be found in their privacy policy at: https://policies.google.com/privacy?hl=en.

Google Tag Manager

We use Google Tag Manager, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”), to manage the services and tags integrated into our website. Google Tag Manager itself does not create user profiles, does not store cookies and does not carry out any analyses of its own; it serves solely to deliver the tools integrated through it.

The legal basis is your consent pursuant to Art. 6 (1) (a) GDPR in conjunction with Section 25 (1) TDDDG, insofar as the consent covers the storage of cookies or access to information on the user’s device. Consent may be withdrawn at any time with effect for the future via the cookie settings on our website.

Further information can be found in Google’s privacy policy: https://policies.google.com/privacy

Google Analytics

This website uses functions of the web analytics service Google Analytics provided by Google Ireland Limited (address as above). Google Analytics enables us to analyse the behaviour of website visitors. Usage data is collected in this context (including page views, time spent on the site, devices used, browser and operating system information and a shortened IP address), which is assigned to a user ID.

Google Analytics uses cookies and comparable technologies that allow a user to be recognised for the purpose of analysing usage behaviour. The information collected by Google is generally transferred to a Google server in the USA and stored there.

The legal basis is your consent pursuant to Art. 6 (1) (a) GDPR in conjunction with Section 25 (1) TDDDG. Consent may be withdrawn at any time with effect for the future via the cookie settings on our website.

We have concluded a data processing agreement with Google pursuant to Art. 28 GDPR. The transfer of data to the USA is based on the European Commission’s standard contractual clauses. Further information: https://privacy.google.com/businesses/controllerterms/mccs/ and https://support.google.com/analytics/answer/6004245?hl=en

Microsoft Clarity

This website uses Microsoft Clarity, an analytics service provided by Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland (“Microsoft”).

Microsoft Clarity collects information about how users interact with our website. In particular, mouse movements, scrolling behaviour, clicks and page views are recorded in the form of what are known as “session recordings” and “heatmaps” in order to understand and improve the user experience. The data collected includes a shortened IP address, device information, browser, approximate location data (country/region) and behavioural data on the website. Microsoft Clarity uses cookies and similar technologies to recognise returning visitors and to assign sessions.

The data collected may be transferred to Microsoft servers, including in the USA.

We have concluded a data processing agreement with Microsoft pursuant to Art. 28 GDPR. The transfer of data to the USA is based on the European Commission’s standard contractual clauses. Further information: https://privacy.microsoft.com/en-gb/privacystatement

7. Our own services

Job applications

We offer you the opportunity to apply to us (e.g. by email or by post). Below we inform you about the scope, purpose and use of the personal data collected from you in the course of the application process. We assure you that the collection, processing and use of your data takes place in accordance with applicable data protection law and all other statutory provisions, and that your data is treated in strict confidence.

Scope and purpose of data collection for job applications

If you send us an application, we process the personal data associated with it (e.g. contact and communication data, application documents, notes taken during job interviews, etc.) insofar as this is necessary in order to decide on the establishment of an employment relationship. The legal basis for this is Section 26 of the new BDSG under German law (initiation of an employment relationship), Art. 6 (1) (b) GDPR (general initiation of a contract) and, where you have given consent, Art. 6 (1) (a) GDPR. Consent may be withdrawn at any time. Within our company, your personal data is only passed on to persons involved in processing your application.

If your application is successful, the data you have submitted will be stored in our data processing systems on the basis of Section 26 of the new BDSG and Art. 6 (1) (b) GDPR for the purpose of carrying out the employment relationship.

8. Duration of data storage

Retention period in general

(1) We process and store your personal data only for the period necessary to achieve the purposes stated in this privacy policy, or where this is provided for in laws or regulations to which we are subject (Art. 6 (1) sentence 1 (c) GDPR). In the latter case, the criterion for the duration of the storage of personal data is the respective statutory retention and/or documentation obligations, such as those provided for in Section 257 of the German Commercial Code (HGB) or Section 147 of the German Fiscal Code (AO). Storage of your personal data beyond sentence 1 is also possible where you have consented to such extended storage pursuant to Art. 6 (1) sentence 1 (a) GDPR.

(2) If the purposes for which your personal data is stored cease to apply, or if the statutory retention period is reached, the corresponding personal data is deleted as a matter of routine, provided it is no longer required for the performance or initiation of a contract or for compliance with legal obligations.

Retention period for application data

(1) If we are unable to make you a job offer, you decline a job offer, you withdraw your application, you withdraw your consent to data processing or you ask us to delete the data, the data you have submitted, including any remaining physical application documents, will be stored or retained for a maximum of 6 months after completion of the application procedure (retention period) in order to be able to trace the details of the application process in the event of any discrepancies (Art. 6 (1) (f) GDPR).

(2) YOU MAY OBJECT TO THIS STORAGE IF YOU HAVE LEGITIMATE INTERESTS THAT OVERRIDE OUR INTERESTS.

(3) After the retention period has expired, the data is deleted unless there is a statutory retention obligation or another legal ground for continued storage. Where it is apparent that the retention of your data will be necessary after the retention period has expired (e.g. because of imminent or pending litigation), deletion will only take place once the data has become irrelevant. Other statutory retention obligations remain unaffected.

9. Automated decision-making and profiling

(1) In order to establish and carry out our contractual and business relationship with you, we generally do not use fully automated decision-making within the meaning of Art. 13 (2) (f) in conjunction with Art. 22 GDPR. Should we use such procedures in individual cases, we will of course inform you separately.

(2) We process your personal data (partly) automatically with the aim of evaluating certain personal aspects on the basis of your personal data (profiling). We use evaluation tools, for example, in order to be able to inform and advise you about products and services in a targeted and tailored manner. This enables us to provide needs-based communication and advertising, including market and opinion research.