APLGO GmbH Privacy Policy

Table of Contents

1. Introduction and general information
  1.1. Responsible authority and data protection officer
  1.2. Purposes and Legal Grounds for Data Processing
2. Your rights as a data subject
3. Exercise of Your Rights and the Right to File a Complaint
4. Use of Analysis Tools and Other Tools
  4.1. Your options for control and objections regarding analysis tools
  4.2. Data protection during analysis
  4.3. Used Tools and Specific Information 
5. Data Collection on Our Website in Detail 
  5.2. Cookie files 
  5.3. Your Control Options for Cookies 
  5.4. Server Log Files 
6. Contact Form 
7. Plugins and Tools 
  7.1. YouTube Integration 
  7.2. Google Web Fonts 
  7.3. Font Awesome 
  7.4. Google Maps 
  7.5. FedEx Delivery Processing 
  7.6. Browser Privacy Settings 
  7.7. Payment Processing (InfinitePay) 
8. Data Transmission Security 
9. Changes to Our Privacy Policy  

APLGO GmbH Privacy Policy

1. Introduction and general information

Protecting your personal data is very important to us, APLGO GmbH. We want you to feel secure when visiting our website. This privacy policy provides you with a clear overview of what personal data we collect, how and for what purposes it is processed when you use our website. Personal data refers to all information relating to an identified or identifiable natural person, i.e., data that can be used to personally identify you.

1.1. Responsible authority and data protection officer

The responsible authority for data processing on this website, in accordance with the General Data Protection Regulation (GDPR) and other national data protection laws and relevant data protection provisions:

APLGO GmbH
Breithauptstraße 5
64404 Bickenbach 
Germany
Telephone: +49 6257-9982000
E-Mail: europe@aplgo.com

We have also appointed an external Data Protection Officer, whom you can contact regarding specific questions related to data protection:

Thilo Noack
Shared IT professional GmbH & Co. KG
Website: www.sharedit-pro.de
E-Mail: thilo.noack@shared-it.de

1.2. Purposes and Legal Grounds for Data Processing

We process your personal data for various purposes, always in accordance with the provisions of the GDPR and only when permitted by legal grounds.

• Functional processing: Certain data processing is essential to ensure the stable and secure operation of our website. This includes the proper display of content on your device, optimizing website performance, and preventing and detecting cases of misuse or security breaches. This processing is based on our legitimate interests in accordance with Article 6(1)(f) of the GDPR, as we are interested in providing you with a functional and secure website.
• Analysis and optimization: If you have given us your consent (Article 6(1)(a) GDPR), we use certain data to analyze user behavior on our website. This helps us continuously improve our online services and optimize our offerings. If desired and with your consent, content may also be personalized. We typically obtain consent through our cookie consent banner.
• Contractual obligations and requests If you contact us, for example, via the contact form, email, or as part of an order, we process your data to handle your request or to fulfill our contractual obligations to you (Article 6(1)(b) GDPR). This includes providing the services or information you have requested.
• Legal obligations: in some cases, we are legally obliged to process data, for example, to fulfill obligations related to tax retention (Article 6(1)(c) GDPR).

You have the right to object to the processing based on our legitimate interests or to withdraw your consent at any time, with effect for the future. Additional information about this and your other rights can be found in the section "Your Rights as a Data Subject."

2. Your rights as a data subject

The General Data Protection Regulation (GDPR) grants you, as a data subject, extensive rights regarding your personal data. You can assert these rights against us at any time free of charge.

• The right to information (Article 15 GDPR): You have the right to request from us confirmation as to whether personal data concerning you is being processed. If so, you have the right to access these data, as well as additional information such as the purposes of processing, categories of data being processed, recipients or categories of recipients, and the planned retention period. We are ready to provide you with a copy of the data being processed upon your request.
• The right to rectification (Article 16 GDPR): if the data concerning you is incorrect or incomplete, you can immediately request the correction or completion of that data.
• The right to erasure ("right to be forgotten") (Article 17 GDPR): You can request the deletion of your personal data if you believe it is no longer necessary for the purposes for which it was collected, if you withdraw your consent to its processing or you have objected to the processing and there are no overriding legal grounds for the processing.
• The right to restriction of processing (Article 18 GDPR): under certain conditions, you can request that the processing of your data be restricted. This means that the data will continue to be stored but—beyond their storage—they can only be processed with your consent or for the establishment, exercise, or defense of legal claims, to protect the rights of another person, or for reasons of significant public interest.
• The right to data portability (Article 20 GDPR): You have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used, and machine-readable format. You also have the right to transmit these data to another controller without hindrance from us, provided that the processing is based on your consent or a contract and is carried out using automated procedures.
• The right to object (Article 21 GDPR): You have the right to object at any time to the processing of your personal data based on Article 6(1)(e) or (f) GDPR, for reasons related to your particular situation. This also applies to profiling based on these provisions. Afterward, we will no longer process your personal data unless we can demonstrate compelling legal grounds for the processing that outweigh your interests, rights, and freedoms, or if the processing is necessary for establishing, exercising, or defending legal claims. If your data is processed for direct marketing purposes, you have the right to object at any time to the processing for such marketing; this also applies to profiling to the extent that it is related to such direct marketing.
• The right not to be subject to automated individual decision-making (Article 22 GDPR): You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.

3. Exercise of Your Rights and the Right to File a Complaint

You can contact us at any time to exercise your rights. Please use one of the following contact options:

• By email: [Insert specific email address here, e.g. datenschutz@aplgo.comor DPO email address]
• In writing to our postal address above. 
• Using the contact form on our website, if available.
• Directly to our Data Protection Officer using the contact details above.

We will process your request and respond to you promptly, but no later than one month after receipt. This period may be extended by an additional two months for complex requests or a large volume of requests. In this case, we will notify you of the extension and the reasons within the first month.

Please note that in order to process your request, we may need to take steps to verify your identity to ensure that your data is not disclosed to unauthorized persons. All requests will, of course, be handled confidentially and documented in accordance with legal requirements.

Without prejudice to any other administrative or judicial remedies, you also have the right to lodge a complaint with a data protection authority, particularly in the member state of your residence, place of work, or where the alleged violation occurred, if you believe that the processing of your personal data violates the GDPR. A list of data protection officers of the federal states and their contact details can be found at the following link: 
https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.
 
4. Use of Analysis Tools and Other Tools

We use various technologies on our website to analyze usage, improve our offering and provide certain features. Your data is processed in connection with these tools based on various legal grounds.

Primarily, statistical analysis of your browsing behavior and the use of marketing technologies are carried out only with your explicit consent, in accordance with Article 6(1)(a) GDPR. We obtain this consent through our cookie consent banner (consent management platform) before placing the relevant cookies or processing data. For this purpose, special cookies and analysis programs are used.

In some cases, processing may also be based on our legitimate interests in accordance with Article 6(1)(f) GDPR, if it is necessary for the proper technical operation of the website or to provide a function you have explicitly requested, and your interests or fundamental rights and freedoms do not override them. This applies in particular to technically necessary cookies and certain server log files.

4.1. Your options for control and objections regarding analysis tools

You have various options to control the collection and processing of your data using the analysis tools:

• Withdrawal of consent: You may withdraw your consent given to us at any time with effect for the future. To do this, use the settings in our cookie consent banner, which you can access via the link in the footer of our website. Additionally, you can send us an informal message using the contact details provided above.
• Browser settings: You can prevent or restrict the storage of cookies entirely or in specific cases by adjusting the settings in your web browser. You can also set cookies to be automatically deleted when you close your browser. Instructions can be found in your browser's help section or by following the links in the Plugins and Tools / Browser Privacy Settings section. However, please note that the functionality of our website may be limited if cookies are disabled.
• The right to object: if the processing is based on our legitimate interests (Article 6(1)(f) GDPR), you have the right to object to this processing for reasons arising from your particular situation. Please send us an informal objection stating the reasons to our contacts.

4.2. Data protection during analysis

We give higher priority to protecting your data when using analysis tools. Whenever possible, the analysis is conducted in an anonymous or coded form, meaning that direct identification of you becomes difficult or impossible (for example, by truncating the IP address). Personal data are processed only to the extent that is technically necessary and for the specific purpose, and are stored only for as long as required for analysis purposes or in accordance with established legal retention periods.

4.3. Used Tools and Specific Information

Detailed information about the individual analysis tools and external technologies we use, information on how they operate, about the data collected, legal bases, retention periods, as well as your specific settings and options to object, can be found in the following sections of this privacy policy and in the settings of our cookie consent banner.

5. Data Collection on Our Website in Detail

When you visit our website, various data is collected. Below, we explain what these data are and how they are processed.

5.2. Cookie files

We use cookie files on our website. Cookies are small text files that are sent from our web server to your browser and stored on your device (computer, tablet, smartphone, etc.) when you visit our website.

They do not cause any harm to your device and do not contain viruses. Cookies are used to make our service more convenient, efficient and secure.

There are different types of cookies on our website:

• Functional cookies (mandatory cookies): these cookies are essential for the core functions of our website and cannot be disabled within our systems. They are usually set only in response to actions you take that correspond to service requests, such as adjusting your privacy settings, logging in, or filling out forms. These also include session cookies, which, for example, store the contents of your shopping cart or ensure that your consent to the use of cookies is saved (consent management). The legal basis for processing data using functional cookies is our legitimate interest in providing a functional website, in accordance with Article 6(1)(f) GDPR. According to Section 25(2) of the TTDSG (Telecommunications and Telemedia Data Protection Act) and the ePrivacy Directive, consent is not required for these cookies.
• Optional cookies (preferences, statistical, marketing cookies): These cookies are not strictly necessary for the operation of the website but enhance usability features or provide additional features such as analytics or personalized advertising.
  • Analytical or statistical cookies help us understand how visitors interact with our website by collecting and reporting information anonymously (if anonymization is enabled). They help us to determine the number of visitors and measure and improve the performance of our website.
  • We or our advertising partners can set marketing cookies using our website. They may be used to create a profile of your interests and show you relevant advertising on other websites.
  • These optional cookies will only be set if you have given us your explicit consent in accordance with Article 6(1)(a) GDPR and Section 25(1) of the TTDSG. You give your consent through our cookie consent banner.

5.3. Your Options to control Cookies

You have complete control over the use of cookies.

• Cookie consent banner: upon your first visit to our website (and periodically thereafter or until you change your settings), you will be prompted to give consent for the use of additional cookies through our banner. There you can make detailed settings for different cookie categories or reject all optional cookies. You can change or withdraw your consent at any time with future effect via a link (usually in the footer of the website).
• Browser settings: regardless of our banner, you can configure your browser to inform you about cookie usage and allow cookies only in specific cases, exclude cookies for certain situations or in general , and enable automatic deletion of cookies when closing the browser. The procedure varies depending on the browser (see section "Plugins and tools / Browser privacy settings"). Please note that if cookies are completely disabled, the functionality of our website may be limited.

5.4. Server Log Files

Our web server automatically records information that your browser transmits to us each time you visit our website. This information is stored in so-called server log files. Typically it is:

• Browser type and version
• Operating system used
• Referrer URL (the previously visited page from which you came to our site)
• The host name of the accessing computer (or its IP address)
• Date and time of server request
• Pages accessed on our domain

This data will not be combined with other data sources. This data is collected on the basis of Article 6(1)(f) GDPR. Our legitimate interest is in the technical necessity to ensure the error-free operation, security, and stability of the system, as well as in investigating cases of misuse or security incidents. IP addresses are usually anonymized or deleted after a short period unless they are needed for a longer duration for evidentiary purposes in the event of a security incident.

6. Contact form

If you send us requests using the contact form available on our website, the data from the form, including the contact details you provided (such as your name, email address, phone number, subject, and message content), as well as the time of submission, will be stored and processed by us for the purpose of handling your request and in case of further questions.

This data will be processed solely on the basis of your consent (Article 6 (1) (a) GDPR), which you provide by submitting the form. You can withdraw this consent at any time. An informal email notification is sufficient. The legality of data processing operations carried out prior to the withdrawal remains unaffected by the withdrawal.

The data you enter into the contact form will remain with us until you request its deletion, withdraw your consent to storage, or until the purpose of data retention is no longer relevant (for example, after processing your request). Mandatory legal provisions, in particular retention periods, remain unaffected. Your data will not be transferred to third parties without your explicit consent. The transmission of your data via the contact form is encrypted using SSL/TLS technology.]

7. Plugins and tools

We use various third-party plugins and tools on our website to implement specific functions or improve the presentation of our content.

7.1. YouTube Integration

On some of our web pages, we embed videos from the YouTube platform. The operator of the respective plugins is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA, a subsidiary of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

When you visit a page with an embedded YouTube video, a YouTube's servers are connected. This informs the YouTube server about which of our pages you have visited. If you are logged into your YouTube account, you allow YouTube to directly associate your viewing activity with your personal profile. You can prevent this by logging out of your YouTube account in advance. YouTube is used to enhance the attraction of our online offerings. This constitutes a legitimate interest within the meaning of Article 6(1)(f) GDPR. If the appropriate consent has been obtained (for example, via a cookie banner), the processing is carried out solely on the basis of Article 6(1)(a) of the GDPR; consent can be withdrawn at any time. Since YouTube and Google also process data in the USA, we would like to note that data transfer to the USA is based on the Standard Contractual Clauses (SCCs) of the European Commission to ensure an adequate level of data protection. Additional information on how user data is processed can be found in YouTube (Google) Privacy Policy: https://policies.google.com/privacy?hl=en&gl=en.

We embed YouTube videos in "enhanced privacy mode". According to YouTube, this means that no information about visitors to our website is stored until they watch a video.

7.2. Google Web Fonts

This website uses so-called web fonts provided by Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland or Google LLC, Mountain View, CA, USA) to ensure consistent font display. When you visit a page, your browser downloads the necessary web fonts into your browser cache to display text and fonts correctly. To do this, the browser you are using must establish a connection to Google servers. This allows Google to know that our website was accessed via your IP address. Google Web Fonts are used for a consistent and attractive presentation of our online offerings. This constitutes a legitimate interest within the meaning of Article 6(1)(f) GDPR. If the appropriate consent has been obtained, the processing is carried out solely on the basis of Article 6(1)(a) of the GDPR; consent can be withdrawn at any time. Data transfer to the USA is based on standard contractual clauses.

If your browser does not support web fonts, a standard font from your computer will be used.

More information about Google Web Fonts can be found at https://developers.google.com/fonts/faq and in Google's privacy policy: https://www.google.com/policies/privacy/.

We host the fonts locally on our server. In this case, there is no connection to Google servers and your IP address is not transmitted to Google to download fonts.

7.3. Font Awesome

We use Font Awesome on this website to ensure consistent display of symbols and icons. The supplier is Fonticons, Inc., 6 Porter Road Apartment 3R, Cambridge, MA 02140, USA. When you visit a page, your browser downloads the necessary icons into your browser cache to display them correctly. To do this, your browser must establish a connection to the Fonticons servers and your IP address is transmitted to Fonticons.  Font Awesome is used for a consistent and attractive presentation of our online offerings and therefore constitutes a legitimate interest according to Article 6(1)(f) of the GDPR. If the appropriate consent has been obtained, the processing is carried out solely on the basis of Article 6(1)(a) of the GDPR ( consent can be withdrawn at any time). Data transfer to the USA is based on standard contractual clauses. For more information, please see Font Awesome's privacy policy:

https://fontawesome.com/privacy/.
We host Font Awesome locally on our server. There is no connection to Fonticons servers.

7.4. Google Maps

Our website uses the Google Maps mapping service via API. The supplier is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, or Google LLC, Mountain View, CA, USA. To use Google Maps features, it is necessary to save your IP address. This information is usually transferred to a Google server in the USA and stored there. We, as the provider of this website, have no influence on this data transfer. Google Maps is used to provide an attractive presentation of our online offerings and to make the locations we specify on the website easy to find. This constitutes a legitimate interest within the meaning of Article 6(1)(f) GDPR. If the appropriate consent has been obtained (for example, bedore downloading a map), the processing is carried out solely on the basis of Article 6(1)(a) of the GDPR; consent can be withdrawn at any time. Data transfer to the USA is based on standard contractual clauses. For more information on how user data is processed, please see Google's privacy policy: https://www.google.com/intl/en/policies/privacy/.

7.5. FedEx Delivery Processing

[It is necessary to clarify whether this has any significance in the context of the website; see question 4] 
If you choose FedEx delivery as part of an order placed through our website or another business transaction, or if we arrange this service, we will transmit the necessary data for this purpose to FedEx (FedEx Express Germany GmbH or the relevant FedEx company) for contract processing in accordance with Article 6(1)(b) GDPR or based on your consent (Article 6(1)(a) GDPR). This typically includes your name, shipping address, and, if applicable, your email address and phone number for tracking and delivery notification. You can withdraw your consent to the transfer of data for these purposes at any time. Detailed information on FedEx data protection can be found at: https://www.fedex.com/en-de/privacy-policy.html.

7.6. Browser Privacy Settings

You can protect your privacy by selecting the appropriate settings in your web browser. Most browsers offer options for managing cookies and website data. You can disable or restrict the transmission of cookies, delete already stored cookies or enable automatic deletion when you close your browser. Instructions can be found in your browser's help or at the following links for common browsers:

• Internet Explorer: https://support.microsoft.com/de-de/help/17442/
• Firefox: http://support.mozilla.org/de/kb/cookies-informationen-websites
• Chrome: http://support.google.com/chrome/bin/answer.py?hl=de&answer=95647
• Safari: https://support.apple.com/de-de/guide/safari/sfri11471/mac
• Opera: https://help.opera.com/de/latest/web-preferences

7.7. Payment Processing (InfinitePay)

[It is necessary to clarify whether this applies in the context of the website; see question 4] 
If we offer payment methods such as "purchase on account" or "direct debit" on our website through the provider InfinitePay (service of FMS Financial Management Solutions GmbH, Lise-Meitner-Straße 5-9, 55129 Mainz) and you choose one of these payment methods, we will transmit our purchase claim to InfinitePay. For the purpose of processing the payment and conducting the necessary identity verification and credit check, we transmit your order data (name, address, date of birth, email address, phone number, shopping cart details) and payment-related information to InfinitePay. InfinitePay may make inquiries to credit agencies to check your creditworthiness.

This data is processed based on our legitimate interests in accordance with Article 6(1)(f) of the GDPR, in order to offer you various payment options while simultaneously protecting ourselves against non-payment. You can object to this processing at any time on grounds relating to your particular situation. Your right to information about the data stored by InfinitePay remains unchanged. Additional information about InfinitePay's data processing and its data protection officer (datenschutz@fms-mainz.de) can be found in the InfinitePay privacy policy: https://www.infinitepay.de/datenschutzhinweise.

8. Data communication security 

To protect the security of your data during transmission, we use the latest encryption methods (e.g. SSL/TLS) over HTTPS. You can recognize an encrypted connection by the fact that the browser's address bar changes from "http://" to "https://", as well as by the padlock symbol in the browser's address bar.

9. Changes to Our Privacy Policy

We reserve the right to adapt this privacy policy to ensure its ongoing compliance with current legal requirements or to make changes to our services reflected in the privacy policy, for example, when implementing new services. The new privacy policy will apply to your next visit.