Privacy Policy

Responsible party

constancy GmbH
August-Bebel-Strasse 27bD-07743 Jena
(Germany)

Phone: 03641 3105970

E-Mail: info@constancy.de

constancy GmbH website: www.constancy.de

Managing Director: Tobias Reich

Tax number: 162/107/03601

VAT ID no.: DE 263322098

Commercial Register - Jena District Court: HRB 502413,

Data Protection Officer

The data protection officer for the responsible party is:

Ronny Liem
Attorney at Law
Sophienstraße 53
D-07743 Jena
Germany

Definitions of Terms

This privacy policy uses terms from the General Data Protection Regulation “Datenschutz-Grundverordnung (DSGVO-Act)”. These terms are defined in more detail in Article 4 of the DSGVO-Act. They are briefly explained below.

PERSONAL DATA

Personal data comprises all information relating to an identified or identifiable natural person. The latter is referred to as the data subject. Identifiable means that a person can be identified by one or more characteristics.

PROCESSING

Processing is any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means. This means that any process related to personal data constitutes processing.

RESPONSIBLE PARTY

Responsible party is the natural or legal person, public authority, agency, or other body which, alone or jointly with others, decides on the purposes and means of processing personal data.

Data Subjects

Visitors to this website and users of the services offered are affected by the processing.

Types of data processed

Metadata and communication data (IP addresses, information about the operating system transmitted by the browser, etc.) and usage data (websites visited, date, time, etc.) are processed on the website.

Purpose of processing

The purpose of processing is to operate the website with information about the company and its services.

Legal basis for the processing of personal data

The basis for the processing of personal data is set out in Art. 6 DSGVO-Act. Unless otherwise stated in this document, we process personal data based on consent pursuant to Art. 6 (1) (a) DSGVO-Act, for the performance of a contract pursuant to Art. 6 (1) (b) DSGVO-Act, or to protect our legitimate interests within the meaning of Art. 6 (1) (f) DSGVO-Act.

Rights of data subjects

The General Data Protection Regulation grants you the following rights as a data subject.

RIGHT OF WITHDRAWAL

If the data processing is based on consent, Art. 7 (3) DSGVO-Act allows you to withdraw this consent at any time. The revocation of consent then affects all future processing operations.

RIGHT TO INFORMATION

According to Art. 15 DSGVO-Act, you have the right to request confirmation as to whether personal data concerning you is being processed, as well as information about this personal data and other information specified in Art. 15 (1) DSGVO-Act.

RIGHT TO CORRECTION

Art. 16 DSGVO-Act grants you the right to request the rectification of inaccurate personal data. Furthermore, you can complete this data.

RIGHT TO ERASURE ("RIGHT TO BE FORGOTTEN")

You can request the erasure of your personal data in accordance with Art. 17 DSGVO-Act or request a restriction of processing in accordance with Art. 18 DSGVO-Act.

RIGHT TO DATA PORTABILITY

You can request to receive your personal data in a structured, common, and machine-readable format in accordance with Art. 20 DSGVO-Act. Furthermore, you can request that we transmit your personal data to another controller.

RIGHT OF OBJECTION

You can object to the processing of your personal data at any time in accordance with Art. 21 DSGVO-Act.

RIGHT TO INFORMATION

Under the Federal Data Protection Act, you have the right to free information about your stored data and, if applicable, the right to have this data corrected, blocked, or deleted.

RIGHT TO LODGE A SUPERVISORY AUTHORITY

You can lodge a complaint with a supervisory authority in accordance with Art. 77 DSGVO-Act. For the Federal State of Thuringia, this task is carried out by the Thuringian State Commissioner for Data Protection and Freedom of Information, located at Häßlerstr. 8, 99096 Erfurt.

Transfer of Data to third countries

The website uses various services that transmit personal data to third countries (Google Web Fonts, Google Maps, etc.). Before processing this data, the requirements of Chapter 5 DSGVO-Act, in particular Articles 44 et seq. DSGVO-Act, are checked. Processing is therefore based on special data protection guarantees, such as the Privacy Shield in the case of transmission to the USA.

Data Security

Your personal data is transmitted over the internet using SSL encryption. We protect our website and other systems through technical and organizational measures against loss, destruction, access, alteration, and distribution of your data by unauthorized persons.

Collection, Processing, and Use of Personal Data

You can visit our website without providing any personal information. We only store access data without personal reference, such as the name of your Internet service provider, the page from which you visited us, or the name of the requested file. This data is evaluated exclusively to improve our service and does not allow any conclusions to be drawn about you personally. Personal data is only collected if you voluntarily provide it to us when using the contact form or registering for our newsletter. When you subscribe to the newsletter, your email address will be used for our own advertising purposes until you unsubscribe. You can unsubscribe at any time.

DATA PROCESSING BY THE WEB HOST

In order to deliver our website, we use the services of a hosting company. This company collects meta, communication, usage, and content data as defined in the section "Types of Data Processed." In particular, the company stores log files. These are files that contain the following information:

• IP address
• Date and time of access
• Name and path of the accessed page
• Status of the access (success, failure, etc. as a numerical code)
• File size of the accessed resource
• Name of the previous page (referrer)
• User's browser and operating system

Processing is based on the legitimate interest pursuant to Art. 6 (1) (f) DSGVO-ACT.

USE OF COOKIES

Our website uses so-called cookies. These are text files that are stored by the browser on the user's device. The websites use two types of cookies: Temporary cookies (session cookies): These are stored only for the duration of the session and are deleted when you leave the website or close the browser. Persistent cookies: These are stored beyond the session and the closing of the browser. You can set your browser to inform you about the use of cookies and to decide individually whether to accept them or to exclude cookies for certain cases or generally. If you do not accept cookies, the functionality of our website may be limited.

CONTACT FORM

If you contact us via the contact form, we will collect the following data from you: name, email address, and, if applicable, telephone number (optional). We will use the data you provide via the contact form without your express consent exclusively to fulfill and process your request. The personal data obtained via the contact form will be deleted once your request has been answered.

NEWSLETTER

We send a newsletter to subscribers who have expressly given their consent. Registration for the newsletter is done using a double opt-in process. This means that after you have entered your email address, first and last name, and confirmed the form, you will receive an email requesting confirmation of your registration. This ensures that no one can inadvertently enter your email address in our newsletter. Email address management and newsletter distribution are handled by Rapidmail. Rapidmail is a project of rapidmail GmbH, Augustinerplatz 2, 79098 Freiburg im Breisgau, Germany. Their privacy policy can be found at https://www.rapidmail.de/datenschutz. The service provider was selected based on a balance of interests in accordance with Art. 6 (1) (f) DSGVO-Act, and a contract for order processing was concluded in accordance with Art. 28 (3) DSGVO-Act. The newsletters contain tools for measuring success. This means that opening the email will access content from the delivery service provider. This provides the service provider with information such as the IP address, time of access, browser details, and the operating system used. The service provider uses this information to measure whether the newsletter was opened, when it was opened, and which links were clicked. These measurements are assigned to individual newsletter subscribers and serve to identify and improve their interests. The newsletter can be canceled at any time. A link to unsubscribe from the newsletter is provided at the end of each newsletter.

OPEN STREET MAP

This site uses the open-source mapping tool "OpenStreetMap" via an API. The provider is the OpenStreetMap Foundation. To use the features of OpenStreetMap, it is necessary to save your IP address. This information is usually transferred to an OpenStreetMap server and stored there. OpenStreetMap is used in the interest of making the locations we list on our website easy to find. This constitutes a legitimate interest within the meaning of Art. 6 (1) (f) DSGVO-Act. Further information on how user data is handled can be found on OpenStreetMap's privacy policy page: http://wiki.openstreetmap.org/wiki/Privacy_Policy and http://wiki.openstreetmap.org/wiki/Legal_FAQ.

GOOGLE ANALYTICS

This website uses Google (Universal) Analytics, a web analysis service provided by Google Inc. (www.google.de). Google (Universal) Analytics uses methods that enable an analysis of your website use, such as so-called "cookies", text files stored on your computer. The information generated about your use of this website is usually transferred to a Google server in the USA and stored there. By activating IP anonymization on this website, the IP address is shortened before transmission within the member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. The anonymized IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. You can prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by downloading and installing the browser plug-in available under the following link: https://tools.google.com/dlpage/gaoptout?hl=de. Alternatively to the browser plug-in, you can click here to prevent Google Analytics from collecting data on this website. This will store an opt-out cookie on your device. If you delete your cookies, you will need to click the link again.

GOOGLE FONTS & GOOGLE MAPS

We integrate the fonts (Google Fonts) and maps from Google Maps, provided by Google LLC, 1600 Amphitheatre Pkwy, Mountain View, California 94043. Their privacy policy can be found at https://policies.google.com/privacy, and their Privacy Shield certification is listed at https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active. You can adjust your privacy settings at https://adssettings.google.com/authenticated, including opting out of personalized advertising.

YOUTUBE

We embed videos from YouTube, operated by Google LLC, 1600 Amphitheatre Pkwy, Mountain View, California 94043. Their privacy policy can be found at https://policies.google.com/privacy, and their Privacy Shield certification is listed at https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active. You can adjust your privacy settings at https://adssettings.google.com/authenticated, including the option to opt out of personalized advertising.

SOCIAL MEDIA PLUGINS

Our website uses so-called social plugins (“plugins”) from Facebook, Twitter, Instagram, Linked-In and Xing. These services are offered by the companies Facebook Inc., Google Inc., Twitter Inc., Instagram LLC., LinkedIn Corporation and XING AG (“providers”). When you visit a page on our website that contains such a plugin, your browser establishes a direct connection to the servers of Facebook, Twitter, Instagram, Linked-In and Xing. The content of the plugin is transmitted directly to your browser by the respective provider and integrated into the page. By integrating the plugins, the providers receive the information that your browser has accessed the corresponding page on our website, even if you do not have a profile or are not currently logged in. This information (including your IP address) is transmitted from your browser directly to a server of the respective provider in the USA and stored there. If you are logged in to one of the services, the providers can directly assign your visit to our website to your profile on Facebook, Twitter, Instagram, Linked-In and Xing. If you interact with the plugins, for example, by clicking the "Like," "+1," "Tweet," or "Instagram" button, the corresponding information is also transmitted directly to a server of the provider and stored there. The information is also published on the social network, on your Twitter or Instagram account, and displayed there to your contacts. For information about the purpose and scope of data collection, the further processing and use of the data by the provider, as well as your related rights and setting options for protecting your privacy, please refer to the provider's privacy policy. Facebook privacy policy: http://www.facebook.com/policy.php Google privacy policy: http://www.google.com/intl/de/+/policy/+1button.html Twitter privacy policy: https://twitter.com/privacy Instagram privacy policy https://help.instagram.com/155833707900388/ LinkedIn privacy policy https://www.linkedin.com/legal/privacy-policy/ XING privacy policy https://www.xing.com/app/share?op=data_protection If you do not want Facebook, Twitter, Instagram, Linked-In, and Xing to directly assign the data collected via our website to your profile on the respective service, you must log out of the respective service before visiting our website. You can also completely prevent the plugins from loading using add-ons for your browser, e.g., the script blocker "NoScript" (http://noscript.net/).

WEBSECURITY-QUICKCHECK

We offer a Web Security Quick Check on our website to inform you about our services and to advertise the sale of software. The processing of personal data is based on our legitimate interests (Article 6 (1) (f) DSGVO-Act). In particular, we require the IP address to detect potential misuse and take countermeasures. Recital 49 of the DSGVO-Act therefore gives us a legitimate interest. We store IP addresses for a period of three days. After this time, your data will be deleted.

The URL and IP addresses will be transmitted briefly to Enginsight GmbH for analysis. After the report has been created, this data will be immediately deleted by Enginsight GmbH.

“COMPETITION FOR THE "DIGITALIZATION OF STATIONARY RETAIL" SURVEY

We process personal data for the competition. These are:

• Email address
• Content data
• Cookies to prevent multiple entries

The data of all participants will be processed for the purpose of conducting the competition. The legal basis is Art. 6 (1) (b) DSGVO-Act (performance of contracts).
This is done in compliance with data protection regulations. To conduct the competition, we process, in particular, your email addresses. These are stored within a local version of LimeSurvey. The email addresses are stored separately from the survey data.
After the competition ends, or as soon as storage is no longer necessary, the data of all participants will be deleted. The data will be deleted no later than six months after the end of the competition. If necessary, the data of the winners will be processed for a longer period.

LEADINFO

We use the lead generation service provided by Leadinfo B.V., Rotterdam, Netherlands. This service recognizes company visits to our website based on IP addresses and shows us publicly available information, such as company names or addresses. In addition, Leadinfo sets two first-party cookies to evaluate user behavior on our website and processes domains from form entries (e.g., "leadinfo.com") to correlate IP addresses with companies and improve services. Further information can be found at www.leadinfo.com. You have the option to opt out on this page: www.leadinfo.com/en/opt-out. If you opt out, your data will no longer be collected by Leadinfo.

As of: July 2025