Privacy policy
When you use our website, protecting your privacy is a priority of P.E.C Sun-Invest GmbH, located at Im Kränzliacker 9, 79576 Weil am Rhein. Thus, we have prepared the following information, so you know how we compile, process and use your personal data.
When we collect, process and use your personal data, we follow European data protection law, including data minimization, transparency and data security, to the letter. P.E.C Sun-Invest GmbH, its trade and service partners, only process and use your data as is necessary, legally permissible and desired by you. We use your data to carry through on contracts you have made with us, services you have requested and the resulting customer relationship care.
Table of contents
§ 1 Information on the collection of personal data
§ 2 Our uses of your personal data and the applicable laws
§ 3 Who has access to your personal data (recipients, recipient categories)
§ 4 Your rights
§ 5 SSL or TLS encryption
§ 6 Which personal data is collected and processed?
§ 7 Additional website functions and offers
§ 8 Web analytics
§ 9 Online advertising
- 1 Information on the collection of personal data
(1) Our website’s data protection policy uses the General Data Protection Regulation (GDPR) terminology. Below, we explain the most important terms:
• Personal data means any information relating to an identifiable natural person, known as the data subject in this text. A data subject is someone like you who can be identified, directly or indirectly, by your name, identification number, location data, an online identifier or by one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
• Processing is any operational procedure performed upon personal data. This can be an automatic or manual procedure. Processing can include collecting, recording, organizing, filing, storing, adapting or altering data. It can also be calling up, reading out, using, publishing, sharing or making data accessible to others, as well as comparing, linking, limiting, deleting or destroying data.
• Controller is the natural or legal person, public authority, agency, etc. who determines the purposes and methods for processing of personal data. When EU law or Member State law determines why and how data is processed, these laws may also determine the criteria for appointing a controller.
• Processor means a natural or legal person, public authority, agency, etc. who processes personal data on behalf of the controller.
• Recipient refers to a natural or legal person, public authority, agency, etc. who has access to personal data, whether or not they are a third party. However, public authorities receiving personal data for a specific investigative task under Union or Member State law are not considered recipients. These authorities process data according to applicable data protection rules, depending on the purposes of processing.
• Third party means a natural or legal person, public authority, agency or other body who is not the data subject, the controller, the processor nor their authorized subordinates.
• Consent is a data subject’s freely given, specific, informed and unambiguous agreement to have his or her personal data processed.
(2) The controllers, pursuant to Art. 4 (7) of the EU General Data Protection Regulation (EU GDPR), are Laurin Faeh, Dr. Thomas Ulsamer.
(3) When you contact us by email or via a contact form, we will store the data you provide (your e-mail address, name and telephone number, if applicable) so we can answer your questions. When storage is no longer necessary, we delete the accrued data unless we are obligated by law to continue storing it. In this case, we restrict processing.
(4) If we commission service providers (recipients and third-party providers, in particular processors) to conduct some of our offer procedures, those data processing details are given below. The same applies to using your data for advertising purposes. We will also convey the legal criteria for storing your personal data. - 2 Our uses of your personal data and the applicable laws
(1) P.E.C Sun-Invest GmbH and our commissioned service providers (processors) process your personal data according to the following laws: - Consent (Art. 6 para. 1 p. 1 lit. a GDPR) – You have given us your consent to process your personal data.
• Carrying through on a contract or responding to a pre-contractual enquiry (Art. 6(1) p. 1 lit. b GDPR) – In both cases, we must process your personal data to fulfil your request or contract.
• Legal obligation (Art. 6 para. 1 sentence 1 lit. c GDPR) – Our controller is legally obligated to process your personal data.
• Legitimate interests (Art. 6 (1) p. 1 lit. f GDPR) – Legitimate interests of our controller or third party require processing as long as it does not infringe on your legally protected interests, fundamental rights or freedom. Our legitimate interests – improving our offer, protection against abuse and statistic maintenance – comply with Art. 6 (1) lit. f GDPR.
(2) We process your personal data for the following purposes:
• for responding to your requests,
• for providing our service,
• for contract processing, esp. for processing orders and invoicing,
• for advertising purposes,
• for quality assurance and
• for our statistics. - 3 Who has access to your personal data (recipients, recipient categories)
(1) P.E.C Sun-Invest GmbH processes your data in accordance with Art. 5 ff EU-GDPR. The employees and third-party companies specified below process your personal data:
1. Authorized website administrators providing related services (e.g., customer service, IT department, etc.);
2. Employees in the marketing, finance, administration and accounting departments and other relevant departments;
3. Third-party companies (e.g., IT service providers, hosting providers, etc.) for order processing.
(2) We require all third parties, partners and service providers we work with to respect your personal data, handling it securely and strictly according to law. We have a commissioned processing (AVV) contract with our external service providers. Required by data protection law, this contract legally obligates all our service providers to process your personal data only for specific purposes and follow our instructions in keeping with the GDPR. We do not allow our providers who process your personal data to use this data for their own purposes. - 4 Your rights
You have the right – in specific cases , the conditional right – to: - request certain personal data processing information free of charge. You can, for example, request a copy of your personal data, information on the processing purposes, the personal data categories that are processed, who receives your data (if they are passed on), the storage duration and the criteria for determining the duration.
• complete or correct your data, depending on the processing purposes.
• erase or block your data. Grounds for exercising this right may include you withdraw your consent, you object to the processing, your personal data has been processed unlawfully.
• restrict processing.
• object to your data being processed when processing is based on a balancing of interests and/or when processing is not required to fulfil a contract with you, which we explain below in the description of functions. When exercising your right to object, we kindly ask you to justify your objection. If we find your objection justified, we will cease or adjust data processing. If, however, we have compelling legitimate cause, we will fully inform you of our reasons to continue processing.
• revoke your consent to the processing of your data at any time with effect for the future.
• lodge a complaint with the competent regulatory authorities when you suspect unlawful personal data processing. A list of data protection regulatory authorities, including officers and their contact details, can be found at the following link: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.
The regulatory data protection law authority responsible for P.E.C Sun-Invest GmbH is the State Commissioner for Data Protection and Freedom of Information Baden-Württemberg, where our office is registered. Their contact information is: Lautenschlagerstraße 20, 70173 Stuttgart, Tel.: 0711/615541-0, FAX: 0711/615541-15, E-Mail: poststelle@lfdi.bwl.de (www.baden-wuerttemberg.datenschutz.de).
- 5 SSL or TLS encryption
(1) Our website uses secure SSL or TLS encryption. Encryption protects confidential content, such as orders or enquiries that you send to us, from being read by third parties. You can recognise an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line.
(2) If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties. - 6 Which personal data is collected and processed?
We collect and process the following personal data about you
(1) When you’re merely browsing our website, i.e., you do not register or otherwise transmit information to us, we only collect the personal data that your browser transmits to our server. When you visit our website, we collect technically necessary data which enables our website’s security and stability (legal basis: Art. 6 para. 1 p. 1 lit. f EU GDPR). In this case, we collect the following personal data:
a) Your IP address
b) Date and time of your request
c) Your time zone difference to Greenwich Mean Time (GMT)
d) The content of your request (concrete page)
e) Your access status/HTTP status code
f) The respective amount of data transferred
g) The website from which your request is sent
h) Your browser
i) Your operating system and its interface
j) Your language choice and version of the browser software.
(2) Furthermore, cookies are stored on your computer when using our website. Cookies are small text files that are assigned to your browser and stored on your hard drive. This process provides us with certain information. Cookies neither execute programmes nor transfer viruses to your computer. They are used to make the website on the whole more user-friendly and effective. Our advertising partners help us make our website more interesting for you, so their cookies are also stored on your hard drive when you visit our website (third-party cookies). In the following paragraphs, we define each of these third-party cookies separately, including the scope of the information each cookie collects.
(3) Use of cookies:
a) This website uses the following types of cookies, the scope and functionality of which are explained below:
• Transient cookies (see b)
• Persistent cookies (see c).
b) Transient cookies, also called session cookies, store a so-called session ID which assign various browser requests to a joint session. Session cookies enable your computer to be recognised when you return to our website. They are automatically deleted when you log out or close the browser.
c) Persistent cookies are automatically deleted after a specified period of time, which differs depending on the cookie. You can delete these cookies in your browser’s security settings any time.
d) You can also personally configure your browser settings and refuse to accept third-party cookies or any cookies at all. Please note that this may limit our website’s functionality.
e) If you have an account with us, we use cookies to identify you for subsequent visits. Otherwise, you would have to log in each time you visit our website.
f) The flash cookies we use are not collected by your browser, but by your flash plug-in. Furthermore, we use HTML5 storage objects that store the required data on your end device, independent of the browser you use. HTML5 storage objects have no automatic expiration date. If you do not want flash cookies to be processed, you must install an appropriate add-on, e.g., “Clear Flash Cookies” for Mozilla Firefox (https://addons.mozilla.org/en-US/firefox/addon/clear-browsing-data/) or the Adobe Flash Killer Cookie for Google Chrome. You can prevent the use of HTML5 storage objects by setting your browser to private mode. We also recommend that you manually delete your cookies and browser history from time to time.
(4) Log files
Every time you access our website, your internet browser transmits and stores data in your server’s log files. These records store the following data: Domain you accessed from, date and time, your computer’s IP address, the websites you visited from our pages, amount of data transferred, your browser type and version, your operating system, name of your internet service provider and your success in accessing the website. Log files are anonymised and evaluated to improve the offer and make it more user-friendly, to find and correct errors and to monitor your server’s workload. - 7 Additional website functions and offers
(1) In addition to information, we offer various services on our website. If you are interested, you will usually have to provide further personal data, so we can respond to your enquiry. In this case, the above-mentioned data processing principles apply.
(2) In some cases, we use external service providers to process your data. We have carefully selected and commissioned them. They are legally bound to follow our instructions and are regularly monitored.
(3) Data processing in third countries: If we process data in a third country (i.e. outside the European Union (EU), the European Economic Area (EEA)) or the processing entails third-party services or includes data disclosure or transfer to other persons, bodies or companies, this is done in strict compliance with data protection law. Any of our data transfers subject to express consent or transfers that are contractually or legally required are only processed in third countries with a recognised level of data protection, i.e., contractual obligations with standard EU Commission protection clauses and verifiable certification, or countries with binding national data protection regulations (Art. 44 to 49 GDPR, information page of the EU Commission: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection_en). - 8 Web Analytics
Use of Google Analytics
(1) This website uses Google Analytics, a service provided by Google Ireland Limited (“Google”). Google Analytics uses cookies – text files on user behaviour – to help website operators analyse how you and other users use their website. As a rule, the data compiled in the cookie is transmitted to a Google server in the U.S.A. and stored there. Our website applies active IP anonymisation, which means Google abbreviates your IP address in the European Union or in EEA contract states before it is stored in the U.S.A. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and abbreviated there. On behalf of P.E.C Sun-Invest GmbH, Google will use this information to evaluate your use of our website, to compile reports on website activity and to provide other services relating to website activity and internet usage.
(2) If you have permitted Google to link your web and app browsing history to your Google Account, allowing Google to use information from your Google Account to personalise ads, Google will use this data for cross-device remarketing. This website also uses Google Analytics to analyse cross-device visitor flows, which uses your user ID. You can deactivate the cross-device analysis in your customer account under “My data”, “Personal data”. In this case, the IP address your browser transmits to Google Analytics will not be merged with other Google data.
(3) You can refuse cookies by selecting the appropriate settings on your browser. However, please note that doing so may limit the functionality of our website. In addition, you can prevent Google from collecting and processing cookie-generated data related to our website by downloading and installing the browser plug-in available under the following link: https://tools.google.com/dlpage/gaoptout?hl=de.
(4) Processing personal data relies on your consenting to cookies on our website, pursuant to Art. 6 para. 1 lit. a GDPR. You can withdraw your consent at any time, but any processing done before you withdraw your consent is still legally valid. We use Google Analytics to analyse and regularly improve the use of our website. The ensuing statistics enable us to improve our offer and make it more interesting for you as a user.
(5) Third-party provider information: The responsible party for users in the EU/EEA is Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland, (parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). User terms and conditions: https://www.google.com/analytics/terms/de.html, overview of data protection: https://www.google.com/intl/de/analytics/learn/privacy.html, and data protection declaration: https://www.google.de/intl/de/policies/privacy.
(6) “We have activated IP anonymisation on this website so that Google truncates your IP address within member states of the European Union and EEA before storing the data in the U.S.A.” - 9 Online advertising
Use of Google Ads Conversion
(1) We use Google Ads, a service of Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland, (parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). Google Ads draws attention to and measures the success of our attractive offers on external websites. Data collected on our advertising campaigns tells us how successful they have been. This allows us to show you personalised advertising, making our website more attractive to you while attaining a fair calculation of advertising costs.
(2) Google delivers these advertisements to so-called “ad servers”. For this purpose, we use ad server cookies that measure ad success parameters such as display time or user clicks. If you access our website via a Google ad, Google Ads will store a cookie on your PC. These cookies usually expire after 30 days and do not identify you personally. The unique cookie ID stores analysis values only, such as the number of ad impressions per placement (frequency), last impression (relevant for post-view conversions) and opt-out information (marking that the user no longer wishes to be addressed).
(3) These cookies enable Google to recognise your internet browser. If you visit
certain pages of an Ads customer’s website and the cookie stored on your computer is still active, Google and the customer will register that you clicked on the ad and were redirected to the customer’s website. Google uses cookies to analyse website usage. This is the basis for personalised advertisements. The cookies record visits to the website and generate anonymised data on the website’s use. Website visitors’ personal data is not stored. If you subsequently visit another Google Display Network website, it is highly likely you will see advertisements based on products and information you previously accessed. Google only relays to us statistical evaluations so we can identify which of our advertising measures are particularly effective. We do not receive any further Ads data and, specifically, we cannot identify users.
(4) These marketing tools automatically connect your browser directly to Google’s server. We have no influence over what Google otherwise does with the data they collect through this tool. Here is what we know: With Ads Conversion integrated into our website, Google registers which part of our website or which of our advertisements you accessed. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, it is possible that the provider may obtain and store your IP address.
(5) You can opt out of this tracking process in various ways:
a) Adjust your browser setting to block third-party cookies, which includes third-party ads.
b) Block conversion tracking cookies from www.googleadservices.com and delete the https://www.google.de/settings/ads setting when you clear your cookies cache.
c) Deactivate About Ads – a self-regulating personalised ad campaign – via https://www.aboutads.info/choices, and delete this setting when you delete your cookies cache.
d) Deactivate cookie-generated data on Firefox, Internet Explorer or Google Chrome permanently with this plugin: https://www.google.com/settings/ads/plugin We would like to point out that this may hinder the full functionality of our website.
(6) Processing personal data relies on your consenting to cookies on our website, pursuant to Art. 6 para. 1 lit. a GDPR. You can withdraw your consent at any time, but any processing done before you withdraw your consent is still legally valid. Your data may be transferred to the U.S.A. Further information on Google’s data protection policy can be found here: https://www.google.com/intl/de/policies/privacy and https://services.google.com/sitestats/de.html Alternatively, you can visit the website of the Network Advertising Initiative (NAI) website at https://www.networkadvertising.org
P.E.C Sun-Invest GmbH, Im Kränzliacker 9, 79576 Weil am Rhein ( effective June 1, 2023).
