Privacy

Privacy Policy
1) Introduction and contact details of the data controller
1.1 We are delighted that you are visiting our website and thank you for your
interest. Below, we provide information on how we handle your
personal data when you use our website. Personal data
refers to any data that can be used to identify you personally.
1.2 The data controller for this website within the meaning of the
General Data Protection Regulation (GDPR) is Protorio GmbH, Dammstrasse 4, 74360
Ilsfeld, Germany, Tel.: (+49) 07062-97891-0, Email: kontakt@protorio.com. The
data controller is the natural
or legal person who, alone or jointly with others, determines the purposes and
means of the processing of personal data.
1.3 The data controller has appointed a data protection officer, who can be contacted as follows:
“Martin Gauger, Dammstr. 4, 74360 Ilsfeld, Tel. 07062978910, office@protorio.com”

2) Data collection when visiting our website
2.1 When using our website purely for information purposes – that is, if you do not
register or otherwise provide us with information – we only collect the
data that your browser transmits to the website server (so-called ‘server log files’). When
you access our website, we collect the following data, which is technically
necessary for us to display the website to you:
- The page visited
- Date and time of access
- Amount of data transmitted in bytes
- Source/referrer from which you accessed the page
- Browser used
- Operating system used
- IP address used (where applicable: in anonymised form)
Processing is carried out in accordance with Article 6(1)(f) of the GDPR on the basis of our legitimate
interest in improving the stability and functionality of our website. The
data will not be disclosed or used for any other purpose. However, we reserve
the right to review the server log files retrospectively should there be specific
indications of unlawful use.
2.2 For security reasons and to protect the transmission of
personal data and other confidential content (e.g. orders or
enquiries to the controller), this website uses SSL or TLS encryption. You can recognise an
encrypted connection by the string ‘https://’ and the padlock symbol in

from your browser address bar.
3) Hosting & Content Delivery Network
To host our website and display its content, we use a
provider which delivers its services – either itself or through selected subcontractors –
exclusively on servers located within the European Union.
All data collected on our website is processed on these servers.
We have entered into a data processing agreement with the provider, which ensures the
protection of our website visitors’ data and prohibits unauthorised
disclosure to third parties.
4) Cookies
To make your visit to our website more engaging and to enable the use of certain
features, we use cookies – small text files that are stored on
your device. Some of these cookies are automatically deleted when you close your
browser (so-called ‘session cookies’), whilst others remain
on your device for longer and enable the storage of
website settings (so-called ‘persistent cookies’). In the latter case, you can find the
storage period in the overview of your web browser’s cookie settings.

Where personal data is also processed by individual cookies we use,
such processing is carried out in accordance with Article 6(1)(b) of the GDPR, either
for the performance of a contract, in accordance with Article 6(1)(a) of the GDPR in the event of
consent has been given, or in accordance with Article 6(1)(f) of the GDPR to safeguard our
legitimate interests in ensuring the best possible functionality of the website and a
user-friendly and effective experience for visitors.
You can configure your browser so that you are informed when cookies are set
and can decide on a case-by-case basis whether to accept them, or you can
disable the acceptance of cookies
in specific cases or generally.
Please note that if you do not accept cookies, the functionality of our
website may be restricted.
5) Contacting us
When you contact us (e.g. via the contact form or by email),
personal data is collected. The data collected when using a
contact form is specified in the relevant contact form.
This data is stored and used exclusively for the purpose of responding to your enquiry or
for establishing contact and the associated technical administration.

The legal basis for the processing of this data is our legitimate interest in responding to your enquiry in accordance with Article 6(1)(f) of the GDPR. If your
enquiry is aimed at concluding a contract, the additional legal basis
for the processing is Article 6(1)(b) of the GDPR. Your data will be deleted once
your enquiry has been fully processed. This is the case when it can be inferred from the circumstances
that the matter in question has been conclusively resolved and provided that
there are no statutory retention obligations to the contrary.
6) Use of customer data for direct marketing
6.1 Subscription to our email newsletter
If you subscribe to our email newsletter, we will send you
regular updates on our offers. The only mandatory information required to receive
the newsletter is your email address. The provision of further data is voluntary and
is used to enable us to address you personally. For the dispatch of the
newsletter, we use the so-called double opt-in procedure. This means that we
will only send you an email newsletter once you have expressly
confirmed that you consent to receiving the newsletter. We will then send you
a confirmation email asking you to click on a
corresponding link to confirm that you wish to receive the newsletter in future.

6) Use of customer data for direct marketing
6.1 Subscription to our email newsletter
If you subscribe to our email newsletter, we will send you
regular updates on our offers. The only mandatory information required to receive
the newsletter is your email address. Providing any further details is voluntary and
is used to enable us to address you personally. For the distribution of the
newsletter, we use the so-called double opt-in procedure. This means that we
will only send you an email newsletter once you have expressly
confirmed that you consent to receiving the newsletter. We will then send you
a confirmation email asking you to click on a
corresponding link to confirm that you wish to receive the newsletter in future.
By activating the confirmation link, you give us your consent to the
use of your personal data in accordance with Article 6(1)(a) of the GDPR. When you
subscribe to the newsletter, we store your IP address as provided by your Internet Service Provider (ISP)
, as well as the date and time of your subscription, so that we can
trace any potential misuse of your email address at a later date.

The data we collect when you subscribe to the newsletter will be
used exclusively for the purpose of sending you promotional communications via the newsletter.
You can unsubscribe from the newsletter at any time via the link provided in the newsletter
or by sending a message to the data controller named at the beginning of this notice. Once you have unsubscribed, your email address will be deleted immediately from our
newsletter distribution list, unless you have expressly consented to the continued use of your
data or we reserve the right to use your data for other purposes
which are permitted by law and about which we inform you in this statement.

6.2 Advertising by post
On the basis of our legitimate interest in personalised direct marketing,
we reserve the right to store your first name and surname, your postal address and – insofar as we
have received this additional information from you within the context of the contractual relationship
– your title, academic degree, year of birth and your professional, sector-specific or
business title in accordance with Article 6(1)(f) of the GDPR and to use them for the
purpose of sending you interesting offers and information about our products by
post.
You may object to the storage and use of your data for this purpose at any time by
notifying us.

7) Website features
YouTube
This website uses plugins to display and play videos from the following
provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland
Data may also be transferred to: Google LLC, USA
When you visit a page on our website that contains such a plugin,
your browser establishes a direct
connection to the provider’s servers at the latest when the video is played, in order to load the content. In doing so,
certain information, including your IP address, is transmitted to the provider.
If the playback of embedded videos is started via the plugin, the provider
also uses cookies to collect information about user behaviour,
compile playback statistics and prevent misuse.
If you are logged into a user account with the provider whilst visiting the site,
your data will be directly linked to your account when you click on a video. If you do not
wish for this data to be linked to your account, you must log out before clicking the
play button.

All the aforementioned processing activities, in particular the setting of cookies for the
retrieval of information from the device you are using, will only take place if you have
given us your explicit consent to do so in accordance with Article 6(1)(a) of the GDPR. You
may withdraw the consent you have given at any time with future effect by
deactivating this service via the ‘Cookie Consent Tool’ provided on the website
.
For data transfers to the USA, the provider has adhered to the EU-US Data Privacy Framework,
which, on the basis of
an adequacy decision by the European Commission, ensures compliance with
European data protection standards.

8) Tools and Miscellaneous
8.1 Cookie Consent Tool
This website uses a so-called ‘Cookie
Consent Tool’ to obtain valid user consent for
cookies and cookie-based applications that require consent. The ‘Cookie Consent Tool’ is displayed to users when they visit the site in the form of an
interactive user interface, on which they can
consent can be given for specific cookies and/or cookie-based applications
by ticking the relevant boxes. Through the use of this tool, all cookies and services requiring consent
are only loaded if the respective user has given the relevant
consent by ticking the relevant boxes. This ensures that such cookies are only set on the user’s respective device
if consent has been given.

The tool sets technically necessary cookies to store your cookie preferences.
Personal user data is not processed in this context.
Should the processing of personal data (such as
of cookie settings (such as
the IP address), this is carried out in accordance with Article 6(1)(f) of the GDPR on the basis of our
legitimate interest in legally compliant, user-specific and
user-friendly consent management for cookies and, consequently, in the
legally compliant design of our website.
A further legal basis for the processing is Article 6(1)(c) of the GDPR. As the
data controller, we are subject to the legal obligation to make the use of technically
non-essential cookies conditional upon the user’s consent.
Where necessary, we have entered into a data processing agreement with the provider
which ensures the protection of our website visitors’ data and prohibits
unauthorised disclosure to third parties.
Further information on the operator and the settings options for the cookie
consent tool can be found directly in the relevant user interface on our
website.

8.2 DATEV
To carry out our bookkeeping, we use the cloud-based
accounting software service provided by the following provider: DATEV eG, Paumgartnerstr. 6–14, 90429
Nuremberg, Germany
The provider processes incoming and outgoing invoices and, where applicable, also the
bank transactions of our company in order to automatically record invoices,
match them to the relevant transactions and, through a semi-automated process,
prepare the financial accounts.
Where personal data is also processed in this context, such
processing is carried out on the basis of our legitimate interest in the efficient organisation
and documentation of our business processes in accordance with Article 6(1)(f) of the GDPR.

9) Rights of the data subject
9.1 Applicable data protection law grants you the following
rights as a data subject (rights of access and intervention) vis-à-vis the controller
with regard to the processing of your personal data; for the respective
conditions for exercising these rights, please refer to the legal basis cited:
- Right of access pursuant to Article 15 of the GDPR;
- Right to rectification pursuant to Article 16 of the GDPR;
- Right to erasure pursuant to Article 17 of the GDPR;
- Right to restriction of processing pursuant to Article 18 of the GDPR;
- Right to be informed pursuant to Article 19 of the GDPR;- Right to data portability under Article 20 of the GDPR;
- Right to withdraw consent under Article 7(3) of the GDPR;
- Right to lodge a complaint under Article 77 of the GDPR.

9.2 RIGHT TO OBJECT
IF, AS PART OF A BALANCING OF INTERESTS, WE PROCESS YOUR PERSONAL
DATA ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTEREST
, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO SUCH PROCESSING
ON GROUNDS RELATING TO
YOUR PARTICULAR SITUATION, WITH EFFECT FOR THE FUTURE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE
PROCESSING THE PERSONAL DATA IN QUESTION. HOWEVER, WE RESERVE THE RIGHT TO CONTINUE
PROCESSING IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE
which override your interests, fundamental rights and
fundamental freedoms, or where the processing is
necessary for the establishment, exercise or defence of legal claims
.
IF WE PROCESS YOUR PERSONAL DATA FOR THE PURPOSE OF
CARRYING OUT DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME
TO THE PROCESSING OF YOUR PERSONAL DATA FOR
FOR THE PURPOSES OF SUCH MARKETING. YOU MAY EXERCISE YOUR RIGHT TO OBJECT AS
DESCRIBED ABOVE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE
PROCESSING THE RELEVANT DATA FOR DIRECT MARKETING PURPOSES.

10) Duration of storage of personal data
The duration for which personal data is stored is determined by the
relevant legal basis, the purpose of processing and – where applicable –
also by the relevant statutory retention period (e.g. retention periods under commercial and
tax law).
Where personal data is processed on the basis of explicit
consent in accordance with Article 6(1)(a) of the GDPR, the data in question will be
retained until you withdraw your consent.
Where statutory retention periods apply to data processed in the context of
contractual or quasi-contractual obligations on the basis of
Article 6(1)(b) of the GDPR, this data will be routinely deleted upon expiry of the
retention periods, provided that it is no longer required for the
performance of a contract or for entering into a contract and/or we no longer have a
legitimate interest in continuing to store it

When processing personal data on the basis of Article 6(1)(f) of the GDPR, this data will be stored until you exercise your right to object under
Article 21(1) of the GDPR, unless we can demonstrate compelling legitimate
for the processing that override your interests, rights and freedoms,
or the processing is necessary for the establishment, exercise or
defence of legal claims.
When processing personal data for the purposes of direct marketing on
the basis of Article 6(1)(f) of the GDPR, this data will be stored until
you exercise your right to object under Article 21(2) of the GDPR.
Unless otherwise specified in the other information contained in this statement regarding specific
processing situations, stored personal
data will otherwise be erased when it is no longer necessary for the purposes for which it was collected or
otherwise processed.