The use of our website is possible without the provision of personal data as a rule. If personal data are collected when you visit our websites, we will process these data exclusively in compliance with the stipulations of the General Data Protection Regulation (VO (EU) 2016/679; GDPR) and the German Federal Data Protection Act (BDSG), as well as the German Telemedia Act (TMG). Personal data are processed solely in compliance with this privacy statement. This privacy statement is valid for the use of the website at the address: http://www.insta.de, as well as the various sub-domains. For the linked contents of other providers, the privacy statement deposited on the linked website is relevant.
The following company is responsible for the processing of personal data in the scope of the use of this website:
Hohe Steinert 10
Phone: + 49 2351 936-0
Dipl.-Ing. Alexander Burgbacher
Data protection officer
We have appointed the following person as data protection officer:
Dr. Gregor Scheja
Data protection officer
Phone: +49 (0) 228-227 226-0
Fax: +49 (0) 228-227 226-26
When you visit our website, automated data are collected and stored in log files on the server of our hosting provider. These data can indicate references to persons. The collected data include:
– name of the website called up
– date and time of call up
– IP addresses (anonymised)
The legal basis for the processing of data is Art. 6(1)(f) GDPR.
We process the collected data to operate the website and to ensure IT security. If necessary, the log files are subsequently analysed in case of concrete indications.
The data are automatically deleted after 7 days.
Contact possibilities (form / e-mail)
There is a possibility to contact us per e-mail / contact form on our website. In this connection, your personal data are stored and processed for the purpose of communication. The data collected for this purpose (name, address, telephone number, e-mail address) are not passed on to third parties. The data are not merged with other data collected on this website. If required, the data are stored as part of the Customer Relations Management (CRM) if you are already a customer of our company. The legal basis for data collection in accordance with Art. 6(1)(1) GDPR is: the consent you have given (lit. a); if necessary, the processing of information for the contractual performance or contract initiation (lit. b), if necessary, the fulfilment of a legal obligation (lit. b) as well as the justified interest of our company in the communication you initiated (lit. f). The data are deleted as soon as the objective of the communication has been achieved.
On our website you have the possibility to subscribe for a newsletter that is sent per e-mail. The newsletter is sent to your e-mail address on the basis of your personal registration with subsequent confirmation (double opt-in), where you consent to receiving the newsletter. The legal basis for the processing of the data is Art. 6(1)(a) GDPR.
To send the newsletter we save your e-mail address as well as your first name and surname and the lists you have subscribed to. The data is not passed on to third parties.
Our newsletter system has a function that allows us to track at what time which recipients have opened the newsletter. These data are stored and used for an evaluation of the reach of individual campaigns.
The data are passed on to our service provider MailChimp to send the newsletter.
MailChimp is a service of:
The Rocket Science Group, LLC
675 Ponce de Leon Ave NE
Suite 5000, Atlanta, GA 30308 USA
With regard to this service, we have concluded an agreement with MailChimp, which you can view here.
Revocation of consent: You can revoke your consent to the processing of your data for sending the newsletter at any time with effect for the future. You will find a possibility to unsubscribe from the newsletter at the end of every newsletter mail or at this link: »Revoke consent«
Google Tag Manager
This website uses the Google Tag Manager. Google Tag Manager is a solution that allows marketers to manage website tags using a single interface. The tool itself (that implements the tags) is a cookie-less domain and does not store any personal data. The tool triggers other tags, which in turn may collect data. Google Tag Manager does not access these data. If a deactivation has been made at domain or cookie level, this will remain in place for all tracking tags implemented with Google Tag Manager. The legal basis for the processing of data is Art. 6(1)(f) GDPR.
Information of the third-party provider: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland. So-called standard contractual clauses in accordance with Art. 46 GDPR have been concluded with this service provider as suitable guarantees. You will find further information here
We use Google Analytics on our website. The service is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter “Google”). If necessary, Google will save cookies on your end device for the provision of the service. Cookies are small text files, which enable the recognition of your device. Google stores the following data as part of your website usage: Beside the IP address, the time, place, duration and frequency of your visits to the website are stored. The legal basis for the processing of data is your consent in accordance with Art. 6(1)(a) GDPR. We have set up Google Analytics in such a way that your IP address is anonymised. The IP address is shortened for this purpose. Google uses the data to compile reports about the usage of our website for us. By these means, we identify user flows on our website and optimise our website on the basis of these findings. Google passes on the information to third parties if this is legally prescribed. Under no circumstances will Google merge your IP address with other Google data. As part of the processing by Google Analytics, personal data is transferred to the USA. In this case, the anonymisation of your IP address is always be carried out prior to the transfer to the USA on servers within the member states of the European Union.
Objection to the data collection. You can object to the collection of data by Google Analytics as shown below: Google provides a deactivation add-on that you can install in your browser. As long as this is properly installed in your browser, data collection by Google as part of the Analytics program does not take place. The objection option as part of the Analytics program has no impacts on a possible data transfer to other web services. The deactivation add-on can be downloaded from the Google web pages under this link: https://tools.google.com/dlpage/gaoptout?hl=de
Alternatively, you can click on the following link and set a so-called “opt-out cookie” for the browser used:
When you visit this website, no more data will then be passed on to Google Analytics in the future. Please note that the opt-out cookie can be deleted if necessary. The deletion of the opt-out cookie is dependent on your individual browser settings. If the cookie is deleted, it must be set again by re-clicking the link indicated above. In the case of an objection to the data collection by Google Analytics, it is possible that not all services provided by us can be used properly.
Use of Vimeo
On our website we use components of the provider Vimeo. The service is provided by Vimeo LCC, 555 West 18th Street, New York, New York 10011, USA. Every time you call up our web pages that are linked with such a component, this component causes the browser you use to download a corresponding display of the component from Vimeo. If you call up such a Vimeo component on our web pages and are logged in to Vimeo during this process, Vimeo recognises through the information collected by the component which specific page you are visiting and assigns this information to your personal account with Vimeo. If you press the “Play” button or make corresponding comments, this information will be transmitted to your personal Vimeo member account, where it will be stored. Moreover, the information that you have visited our web pages is passed on to Vimeo. This happens regardless of whether you click the components and issue comments or not.
You can prevent this by logging out of your Vimeo member account before visiting our website.
The legal basis for the processing of data is your consent in accordance with Art. 6(1)(a) GDPR.
Further information on data protection, especially on the collection and use of the data by Vimeo, is provided by Vimeo under the following link: https://vimeo.com/privacy
This website uses Smartlook, provider is Smartlook.com, s.r.o., Šumavská 524/31, 602 00 Brno., Czech Republic. Smartlook is a tool to analyse your user behaviour on this website. The legal basis for the processing of data is your consent in accordance with Art. 6(1)(a) GDPR. You can influence the data collection by Smartlook in advance via the cookie banner for cookie control. You can find more detailed information about Smartlook and the collectable data under the following link: https://help.smartlook.com/docs/privacy-policy
If you do not want Smartlook to record your user behaviour, you can deactivate it via the following link: https://www.smartlook.com/opt-out/
With Smartlook this website only records anonymously your mouse and scroll movements as well as clicks. Based on this information, Smartlook creates so-called heatmaps that are used to determine which website sectors are preferentially viewed by website visitors. Moreover, we can establish how long you remain on a page and when you have exited the page. We can also determine at which point you have cancelled your entries in a contact form (so-called conversion funnels). In addition, Smartlook can be used to obtain direct feedback from website visitors. This function serves to improve the web offers of the website owner. Smartlook uses technologies that enable the recognition of the user for the purpose of analysing of the user behaviour (e.g. cookies or the use of device fingerprinting). The collected data are stored for a period of 180 days and then deleted.
Your rights and assertion of rights
You are entitled to the rights stated below. You may assert these rights against us. To assert your rights, please use the details given above under “Controller” or write us an e-mail to: email@example.com.
Right to information: You have the right to obtain information on whether we process your personal data, for which purpose we process the data, which categories of your personal data we process, to whom the data are passed on, how long the data are stored and what your rights are.
Right to rectification: You are entitled to have any inaccurate personal data relating to you that is stored by us corrected. You also have the right to have an incomplete data record stored with us completed by us.
Erasure: You can demand that we delete personal data concerning you if (1) the data has been processed unlawfully, (2) the purpose for which the data were collected has been achieved, (3) you have revoked your consent to data processing and there is no other legal basis prevailing for the processing, (4) we are subject to a legal obligation to delete the data, (5) you are under the age of 16 or (6) you have objected to the processing and there are no primarily justified reasons prevailing for the processing on our part.
Right to restriction of processing: You can demand the restriction of processing in the following cases. In these cases, we will mark the data with a non-disclosure notice and discontinue the processing. (1) If you dispute the correctness of the personal data for the duration of our investigation. (2) If you have demanded deletion and we cannot or may not delete the data. (3) If you need the data for the assertion of claims, but we would be obligated to deletion because the purpose of the processing has been achieved. (4) If you have objected to the processing and a final decision has not yet been made.
Objection to the processing
If the processing of personal data concerning you is based on legitimate interests on our part, you can object to the processing for reasons resulting from your particular situation.
Right to data portability: You have the right to request data from us that you have provided as part of a contract or on the basis of consent and that is processed automatically in a common machine-readable format (data record).
Revocation of consent: If you have given your consent for the processing of personal data, you may revoke your consent at any time with effect for the future. Please address your revocation to the details given above under “Controller” or send us an e-mail to: firstname.lastname@example.org
Right to complain to the data protection supervisory authority: You have the right to submit a complaint, based on data protection regulations to the relevant supervisory authorities. The supervisory authority responsible for us is: Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (State Officer for Data Protection and Freedom of Information North-Rhine Westphalia). The complaint can submitted to every supervisory authority regardless of responsibility.
Last update: July 2023