Privacy Policy
1. Contact Details of the Controller and Data Protection Officer
1.1 Controller:
KNECHT GmbH
Ziegeleistraße 1, 72555 Metzingen
Represented by: Managing Director Frank Klutsch
Phone: +49 (0)7123-965-0
Fax: +49 (0)7123-965-100
E-Mail: info(at)knechtgmbh.com
1.2 Data Protection Officer:
The Data Protection Officer can be contacted at the address above, marked “For the attention of the Data Protection Officer”, or by email at datenschutz@knechtgmbh.com.
2. Purposes of Processing
2.1 Consent (Art. 6(1)(a) GDPR)
We process personal data for specific purposes (e.g. sending our newsletter by email after you have clicked the confirmation link sent to you, disclosure to other third parties, production of photographs and videos with sound, publication of attendee lists in connection with events, data processing when voluntary services are used, and evaluation of data for marketing purposes) where you have given us your consent.
2.2 Contractual or Pre-contractual Obligations (Art. 6(1)(b) GDPR)
We process personal data that must be provided in order to perform a contract to which you are a party or to take pre-contractual steps at your request, for example via the contact form on our website. The purposes of data processing depend on the specific contract (e.g. purchase, supply, service or employment contract) and may include analyses, advice and the implementation of further measures. Where we organise events, we process your data to plan, organise and hold those events, including event-related communications, accommodation (e.g. at conference hotels), catering for participants and, where applicable, reimbursement of travel expenses. We process employees’ personal data for employment-related purposes where necessary to decide whether to establish an employment relationship or, once established, to carry it out or terminate it, or to exercise or fulfil rights and obligations arising from legislation. Data is shared within the KNECHT Group on the basis of a balancing of interests (an up-to-date overview can be found here).ì
2.3 Legal Requirements (Art. 6(1)(c) GDPR)
We process data to comply with legal obligations, for example to prevent fraud and money laundering, fulfil tax-related monitoring and reporting obligations, and provide information to authorities.
2.4 Balancing of Interests (Art. 6(1)(f) GDPR)
We also process data for specific purposes to safeguard our legitimate interests or those of third parties, following a prior balancing of interests. These purposes may include enforcing our premises rights, asserting legal claims, investigating criminal offences, assessing default risks, optimising product development, supplier management and recruitment, recording and analysing the use of our newsletters and digital services such as websites and apps, conducting surveys and competitions, optimising approaches to customers for advertising purposes such as contacting other companies by telephone, sending advertising information by post (e.g. invitations to events and information on new products and services), making image and sound recordings at events for promotional publication, displaying and publishing lists of participants, optimising demand planning and ensuring data security.
3. Additional Data Processing When Using Our Website
3.1 Contact Form
We will use the email address collected through our contact form solely to process enquiries received through that form. Further details may be provided voluntarily; we process these data with your consent. Once an enquiry has been dealt with, the collected data will remain in our prospect database until consent is withdrawn or the purpose no longer applies.
3.2 Newsletter
You can subscribe to our newsletter through our website. To do so, we require your email address and confirmation that you agree to receive the newsletter. In order to provide you with targeted information, we also collect and process voluntarily supplied details, such as your name and address. Once you have registered for the newsletter, we send you a confirmation email with a link to confirm your subscription. You can unsubscribe at any time by clicking the unsubscribe link. We will then promptly delete your data relating to newsletter distribution.
To distribute our newsletter, we use the third-party service provider Schmid Consulting GmbH, An der Valleroy 30, 87634 Obergünzburg, Germany (hereinafter “Schmid GmbH”). Schmid GmbH provides extensive analysis options showing how newsletters are opened and used. These analyses relate to groups and are not used by us to evaluate individual newsletter recipients. Further information about Schmid GmbH and its data protection measures is available at https://as-marketing-allgaeu.de/datenschutz.ì
3.3 Essential Cookies
We use cookies that are necessary to transmit or facilitate the transmission of a message over an electronic communications network. We also use essential cookies to provide an information society service that you have expressly requested. Details of essential cookies:
|
Name |
Purpose |
Storage Period |
|
Contao HTTPS CSRF Token |
Protects against cross-site request forgery attacks |
Browser session |
|
PHP SESSION ID |
Stores the current PHP session |
Browser session |
3.4 Options for Anonymous or Pseudonymous Use
In principle, you can visit our websites without providing us with personal data. Pseudonymised usage data is not combined with data identifying the holder of the pseudonym. We do not create pseudonymous usage profiles.
Details of Convenience Cookies: to be specified
3.5 Statistical Analysis of Visits to This Website
When this website or individual files on it are accessed, we collect, process and store the following data: IP address, website from which the file was accessed, file name, date and time of access, volume of data transferred and a message indicating whether access was successful (web log). We use these access data exclusively in non-personalised form to continuously improve our online services and for statistical purposes.
3.6 Social Media: Instagram, Facebook
On our website, we offer you the option of accessing our social media profiles through “social media buttons”. To protect your data, these buttons have been incorporated into the website only as images or links directing you to the relevant provider’s website. Clicking the image or link therefore redirects you to the relevant provider’s services. Only then will your data be transmitted to the respective provider. If you do not click the image or link, no information is exchanged between you and the social media platform providers.
Please note that you use our social media profiles and their functions at your own responsibility. This applies in particular to interactive functions such as commenting or rating. When you visit our social media profiles, the providers collect, among other things, your IP address and other information, such as cookies stored on your device. As operators of the social media profiles, we receive statistical information about their use. If you are logged into a social media service, the providers can directly associate your visit to our social media profiles with your profile. If you interact with plugins, the relevant information is also transmitted directly to a provider’s server and stored there. Information about the collection and use of your data on social networks can be found in the respective providers’ privacy notices and terms of use:
Instagram and Facebook (Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland)
https://help.instagram.com/519522125107875?helpref=page_content
https://www.facebook.com/privacy/policy/?locale=de_DE
This Privacy Policy also applies to the following social media pages:
Instagram page: https://www.instagram.com/knecht_gewaechshaus_linear/
Facebook page: https://www.facebook.com/cannabench
3.7 Embedding Vimeo Videos
On our website, we embed videos from the Vimeo video portal operated by Vimeo.com Inc., 330 West 34th Street, 5th Floor, New York 10001, USA (“Vimeo”).
To improve the protection of your personal data when visiting our website, the videos are embedded using a “two-click solution”. This ensures that when you open a page of our website containing a Vimeo video, no connection to Vimeo’s servers is initially established. Only when you activate the video and thereby consent to the transfer of data does your browser establish a direct connection to Vimeo’s servers. The video content is then transmitted by Vimeo directly to your browser and integrated into our website. By embedding the video, Vimeo receives information that your browser has accessed the relevant page of our website. This applies regardless of whether you have a Vimeo user account or are logged in. Personal data, in particular your IP address and information about your browser and device, may be transmitted to Vimeo and processed there. The transfer of personal data to the USA cannot be ruled out.
If you are logged in to Vimeo, Vimeo may associate your visit to our website with your user account. Further data may also be transmitted to Vimeo when you play and use the videos. For details of the purpose and scope of data collection, Vimeo’s further processing and use of your data, your rights and the settings available to protect your privacy, please refer to Vimeo’s privacy notice:
https://vimeo.com/legal/terms/de/datenschutz/policy
4. Categories of Recipients
To fulfil the intended purposes, employees in different departments of our company and of other group companies may have access to the data required in each case. Processors engaged by us may also receive data for certain purposes, such as IT services, document destruction and marketing. Other recipients of personal data may include public bodies, credit and financial institutions, lawyers, tax advisers and credit agencies.
5. Transfers to Third Countries or International Organisations
Personal data is transferred to third countries only where, for example, this is necessary to perform a contract, required by law or covered by your consent. In connection with the maintenance of IT components, it also cannot be ruled out that an IT service provider based in a third country (e.g. the USA) may, in rare cases, gain access to personal data. Otherwise, personal data is not transferred to third countries or international organisations.
6. Data Retention Period
We store personal data for the duration of the contractual relationship. In addition, statutory limitation periods are generally three years. After completion of a recruitment process, we will generally delete your data within six months if you are not employed by our company. Various retention and documentation obligations apply, for example under the German Commercial Code (HGB), the German Fiscal Code (AO) and product liability law (ProdHaftG), and may extend to 15 years.
7. Rights of Access, Rectification, Erasure, Restriction and Data Portability
You have the right of access under Art. 15 GDPR, the right to rectification under Art. 16 GDPR, the right to erasure under Art. 17 GDPR, the right to restriction of processing under Art. 18 GDPR and the right to data portability under Art. 20 GDPR. To exercise these rights, please contact us.
8. Withdrawal of Consent
You can withdraw consent you have given us at any time. You can also object to receiving our newsletter by clicking the unsubscribe link in the newsletter. Please note that withdrawal of consent only takes effect for the future.
9. Right to Lodge a Complaint
You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). Our competent supervisory authority is the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg, Heilbronner Straße 35, 70191 Stuttgart, poststelle@lfdi.bwl.de.
10. Obligation to Provide Data
You are required to provide only the personal data necessary to establish, carry out and terminate a contract or which we are legally obliged to collect. If you do not provide the necessary information and documents, we may not establish or continue the business relationship you request.
11. Automated Individual Decision-Making
As a general rule, we do not use fully automated decision-making to establish or conduct business relationships. Should we use such procedures in individual cases, we will inform you separately if required by law.
12. Profiling
In some cases, we process your data automatically in order to evaluate certain personal aspects (profiling), for example to analyse data for targeted customer contact, improve our digital services, provide needs-based advertising, including market and opinion research, and carry out scoring or rating. Such assessments may take account of payment behaviour (e.g. account transactions and balances) as well as criteria such as industry affiliation and experience from the existing business relationship.
13. Categories of Personal Data
For example, we process the following categories of personal data: personal master data, contractual master data, data relating to the performance and termination of contracts, order data, data required to fulfil legal obligations, creditworthiness data, scoring/rating data, advertising and sales data, data about your use of the digital services we offer (e.g. times when you access our websites, apps or newsletters, pages or entries you click), and other data comparable to these categories.
14. Data Sources
We process data received from you in the course of our business relationship, as well as data lawfully provided to us by other third parties. We also collect data from publicly accessible sources (e.g. industry directories, debtor registers, commercial registers and the press).
|
Information on Your Right to Object Pursuant to Art. 21 of the General Data Protection Regulation (GDPR) Right to Object on Grounds Relating to Your Particular Situation You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you based on Article 6(1)(e) GDPR (processing in the public interest) or Article 6(1)(f) GDPR (processing based on a balancing of interests); this also applies to profiling based on these provisions. If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for processing that override your interests, rights and freedoms, or the processing is necessary for the establishment, exercise or defence of legal claims. Right to Object to Processing for Direct Marketing Purposes We process your personal data for direct marketing. You have the right to object at any time to the processing of personal data concerning you for such marketing; this also applies to profiling insofar as it is related to such direct marketing. If you object to processing for direct marketing purposes, we will no longer process your personal data for these purposes. You may object without any formal requirements and should preferably address your objection to: KNECHT GmbH, Ziegeleistraße 1, 72555 Metzingen, info(at)knechtgmbh.com |
Status/Version: 10-2026
