PRIVACY POLICY

Dear visitors to our web portal,
Thank you for visiting our website. To ensure that you feel safe and comfortable when visiting our website, we would like to inform you below about how we handle your data.

Who we are
This website is operated by Schlothauer & Wauer Ingenieurgesellschaft für Straßenverkehr mbH ("Schlothauer & Wauer"). Schlothauer & Wauer GmbH advises and plans on all topics relating to mobility and transport and is involved in innovative research projects and committees in this field. In addition, Schlothauer & Wauer develops software solutions, such as algorithms for traffic control and the leading software LISA - from practice for practice for the future.

Schlothauer & Wauer is also part of the SWARCO Group, which is a leading manufacturer of signalling systems and offers a market-leading range of products, services and solutions in the areas of urban and interurban traffic management. In addition, the SWARCO Group is recognised as a manufacturer and supplier of the full range of retroreflective marking systems.
When this Privacy Policy refers to "we" or "us", this refers to Schlothauer & Wauer and/or its affiliated companies of the SWARCO Group.[1]

Scope of this privacy policy
The following data protection provisions are intended to inform you as a website visitor and as a customer, supplier, business partner or interested party or as their contact person about our handling of the collection, use and disclosure of personal data.
Schlothauer & Wauer GmbH is responsible for the operation of this website.
The controller for the processing of personal data is - depending on the specific circumstances of data collection and processing - SWARCO AG and/or an affiliated company of the SWARCO Group.

Data protection officer for Schlothauer und Wauer GmbH:
Dipl.-Ing. André Locklair
Specialist for data protection (DEKRA Certification GmbH)
Certificate registration no.: PC 15901-227
M: datenschutz(at)schlothauer.de
T: +49 30 93 66 72-264

Data Protection Officer of SWARCO AG:
Datenschutz süd GmbH
Wörthstraße 15
M: office(at)datenschutz-sued.de
T: +49 931 304 976 0

Enquiries by e-mail/ contact form/ telephone/ post

Purpose of data processing/legal basis:
We will, of course, treat any personal details you provide to us by e-mail, telephone or post as confidential. We use your data exclusively for the purpose of processing your enquiry. The legal basis is the legitimate interest in data processing, which arises from the interest in answering enquiries from our customers, business partners and interested parties and thus maintaining and promoting customer satisfaction.

Storage period/criteria for determining the storage period:
In principle, we store your personal data for as long as is necessary for the purpose for which it was collected. We will delete or securely anonymise all personal data that you send us in response to enquiries no later than 90 days after the final reply to you. The 90-day retention period is explained by the fact that you may occasionally contact us again about the same matter after a reply and we may then refer to the previous correspondence. Experience has shown that, as a rule, there are no more queries about our replies after 90 days.

Processing of data from business partners
Purpose of data processing/legal basis:
As part of the business relationship with you as our customers, business partners, suppliers and interested parties, we process personal data such as, in particular, your name, address, email address, telephone/fax number, tax number, customer number, bank details and, where applicable, place of birth, date of birth, nationality and creditworthiness data as well as other data that you have voluntarily provided to us. The processing is carried out for the purposes of clear identification and the initiation, execution, administration and processing of contracts, the assessment of creditworthiness and collateral, the preparation of statements and credit notes or refunds, the administration and enforcement of claims, compliance with legal regulations, data security and in the interest of comprehensive customer service.
In order to fulfil our legal obligations to prevent white-collar crime or money laundering, we also process data as part of the business relationship to carry out compliance screenings (comparison of data with existing sanctions lists).
The legal basis is the fulfilment of the contract, legal obligations and our legitimate interest.

Storage period/criteria for determining the storage period:
We store your personal data for as long as is necessary for the purpose for which it was collected. Insofar as there are no statutory retention obligations to the contrary, the data required in each case will therefore be stored for the duration of the business relationship with you and until the expiry of the applicable limitation periods for any claims resulting from the business relationship.

Data processing of contact persons
Purpose of data processing/legal basis:
Our company processes the contact details of contact persons at customers, interested parties, suppliers and other business partners for communication by e-mail, telephone, fax and post. The legal basis is the legitimate interest or the fulfilment of contractual / legal obligations. The legitimate interest arises from the interest in conducting or initiating the business relationship with customers, interested parties, suppliers and other business partners and maintaining personal contact with contact persons.
Storage period/criteria for determining the storage period:
Personal data is stored for the purpose of conducting business relationships for as long as there is a legitimate interest in working together.

Data processing for marketing purposes
Purpose of data processing/legal basis:
The companies of the SWARCO Group use personal data for marketing purposes, in particular for advertising by e-mail, telephone and post. The purpose of data processing in the context of marketing measures is to inform the data subjects about products and services of the companies of the SWARCO Group. The legal basis for sending advertising by post is the legitimate interest arising from our interest in sending customers and interested parties information about products and services. The legal basis for marketing measures by e-mail or telephone is usually a declaration of consent given by you. Marketing measures to existing customers (e.g. advertising by e-mail) may also be permissible without prior consent under certain conditions.
You can object to receiving advertising at any time with effect for the future by sending a message to datenschutz(at)schlothauer.de.

Storage period/criteria for determining the storage period:
In principle, we store your personal data for as long as is necessary for the purpose for which it was collected. If you object to receiving advertising, your data will be blocked immediately and then deleted, unless it is also stored for other legally permissible purposes.

Google Analytics
Purposes of data processing/legal basis:
Based on your consent, we use Google Analytics, a web analytics service provided by Google LLC, 1600 Amphitheater Parkway, Mountainview, California 94043 ("Google"), for the purpose of designing and continuously optimising our websites to meet your needs. In this context, pseudonymised user profiles are created and cookies are used. The cookie generates the following information about your use of this website:

• Browser type/version,
• operating system used,
• Referrer URL (the previously visited page),
• Host name of the accessing computer (IP address),
• Time of the server request.

The information is used to analyse the use of our websites, to compile reports on website activity and to provide other services relating to website activity and internet usage for the purposes of market research and the needs-based design of these websites.

You can revoke your consent at any time. To do so, please follow the link at the bottom left of the website (CookieBot).

You can also prevent the installation of cookies by selecting the appropriate settings in your browser software. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) and the processing of this data by Google by downloading and installing this browser add-on.

Recipients/categories of recipients:
As part of Google Analytics, the data collected using cookies is transmitted to Google. Google may use this data for its own purposes and link it to other data records, e.g. your search history or personal accounts known to Google. We have no influence whatsoever on this data processing. The data processing is essentially carried out by Google. Further information on data protection in connection with Google Analytics can be found on the Google Analytics website.
The information generated in the cookie is transferred to a Google server in the USA (third country) and stored there. There is no adequacy decision by the European Commission for the USA and therefore no level of data protection comparable to that of the European Union, so that in particular the exercise of data subject rights is made more difficult and access to the data by state authorities cannot be ruled out. However, we have concluded so-called standard contractual clauses with Google, by means of which Google is obliged to comply with European data protection standards. Please contact our data protection officer if you would like more information or copies.
Storage period/criteria for determining the storage period:
The IP addresses are anonymised immediately after collection (so-called IP masking), so that it is no longer possible to draw conclusions about your person based on the IP address. In addition, the cookies used here and the information they contain are stored for the period specified in the CookieBot cookie policy and then automatically deleted. If "persistent" is specified in the "Expiry" column, the cookie is stored permanently until the corresponding consent is revoked.
If you revoke your consent, your data will be deleted immediately.
There is no longer any personal reference in reports created on the basis of Google Analytics.

The following cookies are set by Google Analytics:

Google Tag Manager
Purposes of data processing/legal basis:
We use Google Tag Manager on the basis of your consent for the purpose of the needs-based design and continuous optimisation of our website. This service allows website tags to be managed via an interface. The Google Tag Manager only implements tags. This means that no cookies are used and no personal data is collected. The Google Tag Manager triggers other tags, which in turn may collect data. However, Google Tag Manager does not access this data. If deactivation has been carried out at domain or cookie level, it remains in place for all tracking tags, provided that these are implemented with Google Tag Manager.

You can revoke your consent at any time. To do so, please follow the link at the bottom left of the website (CookieBot).

You can also prevent the installation of cookies by selecting the appropriate settings in your browser software. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) and the processing of this data by Google by downloading and installing this browser add-on.

Recipients/categories of recipients
Transfer of personal data within the SWARCO Group:
It may be necessary for us to transfer your enquiries sent to us by e-mail, telephone or post, including the personal data contained therein, to other companies within the SWARCO Group if this is necessary for processing.
Furthermore, your data will be passed on to other companies in the SWARCO Group for the purpose of implementing or initiating a business relationship.
Within the SWARCO Group, your data may be passed on to other companies within this group for marketing purposes.

Disclosure of personal data to third parties:
As a matter of principle, data is not passed on to third parties outside the SWARCO Group. We only transfer personal data to third parties if you have expressly consented to the transfer in advance or if we are obliged to do so by law.
In exceptional cases, however, data is processed on our behalf by processors (i.e. by service providers that we commission to process personal data that is not collected by them but provided by us). These processors are carefully selected, audited by us and contractually bound (in particular to maintain suitable technical and organisational security measures).
Personal data may also be disclosed to third parties if this is necessary to protect the vital interests of a person or if the disclosure is otherwise authorised by applicable laws or other legal provisions.
Under no circumstances will we sell or licence your personal data to third parties.

International data exchange:
In order to fulfil the purposes stated in this Privacy Policy, your data may be transferred to recipients in countries outside the European Economic Area (EEA), which may not have the same level of data protection as the country in which you originally provided your data. This is the case, for example, if personal data is exchanged with another SWARCO Group company based in a non-EEA country.
Personal data is only transferred to non-EEA countries under the following conditions:

• the transfer is to a country where the European Commission considers that an adequate level of protection of personal data is ensured, or
• appropriate measures have been taken to protect your data, in particular through the contractual agreement of appropriate data protection measures or guarantees in accordance with the requirements of the European Commission or a data protection authority, or
• if you have consented to the transfer or
• the transfer is necessary for the fulfilment of a contract between you and the controller or for the implementation of pre-contractual measures at your request, or
• there is another legal basis for the data transfer.

Use of our website
The protection of your privacy is very important to us. We have therefore designed our website in such a way that it can be used anonymously. We use information that we receive and store during your visit to our website exclusively for internal purposes and to improve the design of the website. Exceptions apply if data processing is necessary to defend against and prosecute attacks that constitute criminal offences or impair the functionality of our website.

Usage data
When you visit our website, so-called usage data is temporarily stored on our web server as a log for statistical purposes in order to improve the quality of our website. This data record consists of

• the page from which the file was requested,
• the name of the file,
• the date and time of the request,
• the amount of data transferred,
• the access status (file transferred, file not found),
• the description of the type of web browser used,
• the IP address of the requesting computer.

We use this information to enable our website to be accessed, to control and administer our systems and to improve the design of the website. This data is stored in anonymised form. The creation of personal user profiles is therefore excluded. Data about persons or their individual behaviour is not collected.
The legal basis for the processing of this data is our legitimate interest, which consists of the data processing purposes listed above. This data is not transferred to external organisations. The data is stored for a period of 14 days.

Cookies
Some of the Internet pages use so-called cookies. Cookies do not damage your computer and do not contain viruses. Cookies are used to make our website more user-friendly, effective and secure. Cookies are small text files that are stored on your computer and saved by your browser.
Most of the cookies we use are so-called "session cookies". They are automatically deleted at the end of your visit. Other cookies remain stored on your end device until you delete them. These cookies enable us to recognise your browser on your next visit.

You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when closing the browser. If cookies are deactivated, the functionality of this website may be restricted.

You can change the cookie settings at any time using the CookieBot at the bottom left of the screen.

The legal basis for data processing by so-called "necessary cookies" is the legitimate interest. Necessary cookies enable basic functions and are required for the proper functioning of the website. We have a legitimate interest in making the website as user-friendly as possible.

The following cookies, which are set by this website, are necessary for the operation of the website:

Social media plugins
We enable you to use social media plugins. For data protection reasons, however, we only integrate the social media plugins we use in deactivated form. Therefore, when you visit our websites, no data is transmitted to social media services.

However, you have the option of activating and using the social media plugins integrated on our websites. For this purpose, we use a solution which means that, in a first step, all data and functions required to display the social plugin are provided by our web server. Only when you decide to activate the respective social media plugin and click on the corresponding preview image or symbol will your browser establish a connection to the servers of the operator of the respective social media service in a second step.

When you activate a plugin, the social media service receives in particular your IP address and, among other things, information about your visit to our websites. This happens regardless of whether you have an account with the respective social media service. If you are logged in, the data can be assigned directly to your social media profile.

Overall, we have no influence on whether and to what extent the respective social media service processes personal data after activation. However, it is likely that the social media service will create user profiles from your data and use them for the purpose of personalised advertising. In addition, your data will be used to inform other users of the social media service about your activities on our websites.

Embedding takes place on the basis of your consent, provided you have given your consent by clicking on the preview image. Please note that the embedding of many social plugins means that your data will be processed outside the EU or EEA. In some countries, there is a risk that authorities may access the data for security and monitoring purposes without you being informed or being able to take legal action. If we use providers in unsafe third countries and you consent to this, the transfer to an unsafe third country will take place on this basis.

If you no longer wish your personal data to be processed by the activated social plugins, you can prevent future processing by no longer clicking on the preview image or symbol of the respective social plugin.

Embedded videos
We embed videos on our websites that are not stored on our servers. To ensure that accessing our websites with embedded videos does not automatically result in the third-party provider's content being loaded, we only display locally stored preview images of the videos in a first step. This means that the third-party provider does not receive any information.

Only after you click on the preview image will the content of the third-party provider be loaded. This provides the third-party provider with the information that you have accessed our site and the usage data technically required in this context. In addition, the third-party provider is then able to implement tracking technologies. We have no influence on further data processing by the third-party provider. By clicking on the preview image, you give us your consent to load content from the third-party provider.

Embedding is based on your consent, provided that you have given your consent by clicking on the preview image. Please note that embedding many videos means that your data will be processed outside the EU or EEA. In some countries, there is a risk that authorities may access the data for security and surveillance purposes without you being informed or having the right to appeal. If we use providers in unsafe third countries and you consent to this, the transfer to an unsafe third country will take place on this basis.

Cookie consent banner
On our website, we use the consent banner "Cookiebot" from the provider Cybot A/S, Havnegade 39, 1058 Copenhagen, Denmark. Data processing by Cookiebot is based on our legitimate interest in using cookies and similar technologies on our websites in compliance with data protection regulations and to enable you to easily revoke your declarations of consent.
If you give your consent via our consent banner, Cybot processes the following data:

• Your IP address,
• the date and time of consent,
• User agent of the end user's browser,
• the URL from which the consent was sent,
• a pseudonymous, random and encrypted key,
• Your consent status, which serves as proof of your consent.

Your data is logged on Cybot's servers. Your IP address is shortened by removing the last three digits so that a personal reference can no longer be established.
Your key and consent status are also stored in the cookie "CookieConsent" in the browser of your end device for a period of 12 months.

In this way, our website is able to check your consent status for all subsequent and future page views and to activate or deactivate cookies and other technologies in accordance with your decision to use them when you return to the site.
The check is carried out by comparing the key and consent status from the "CookieConsent" cookie with the values transmitted to Cybot when you gave your consent to ensure that the status of your original consent has not changed. Further information on how Cybot handles personal data can be found at https://www.cookiebot.com/de/privacy-policy/.

Google Captcha
To protect our web forms from automated enquiries, we use a so-called captcha from a third-party provider. As part of the captcha function, you may be asked to complete tasks or tick checkboxes. The user entries made in this context and, if applicable, the mouse movements are used to assess whether the entries originate from a human or an automated programme.
As the function is provided by a third-party provider, displaying the captcha results in the third-party provider's content being reloaded. As a result, the third-party provider receives the information that you have accessed our site and the usage data technically required in this context. We have no influence on further data processing by the third-party provider.
Embedding takes place on the basis of your consent and in the interest of protection against spam and misuse.

Encryption
To protect your data from unauthorised access, we use an encryption process on most pages. Your data is then transmitted from your computer to our server and vice versa via the Internet using 128-bit SSL encryption (Secure Socket Layer). You can recognise this by the fact that the lock symbol in the status bar of your browser is closed and the address line begins with https://.

No obligation to provide personal data
Unless otherwise stated in the previous chapters, the provision of personal data is not required by law or contract or necessary for the conclusion of a contract and you are not obliged to provide such data. Failure to provide your personal data may mean that we will not be able to answer your enquiry or provide the information or services you have requested, or that you will not be able to participate in an application process or attend an event.

Your rights as a data subject

Right to information:
You have the right to request confirmation as to whether personal data concerning you is being processed and, if this is the case, to receive information about the personal data we have stored about you.

Right to rectification and erasure:
In addition, you have the right to have inaccurate personal data concerning you rectified and, if necessary, to have incomplete personal data completed.
Furthermore, if certain conditions are met, you have the right to request the deletion of personal data concerning you (e.g. if the data is no longer required for the purposes pursued).

Right to restriction of processing:
You have the right to request the restriction of the processing of your personal data if one of several conditions is met, e.g. if you have objected to the processing, for the duration of any examination of the authorisation for data processing or in the event that personal data is no longer required for the purposes of processing, but must continue to be reserved for the assertion, exercise or defence of legal claims.
Restriction of processing means that the data in question - apart from being stored - may only be processed with your consent or for the establishment, exercise or defence of legal claims, for the protection of the rights of another person or for reasons of important public interest of the European Union or of a Member State.

Right to data portability:
If automated data processing is carried out on the basis of your consent or the processing is necessary for the fulfilment of a contract with you or for the implementation of pre-contractual measures taken at your request, you have the right to receive the personal data provided by you and concerning you in a structured, commonly used and machine-readable format and to transmit this data to another controller without hindrance. You also have the right to request the direct transfer of this data by us to a third party, provided this is technically feasible.

Right of objection:
If the data processing is based on legitimate interests, you have the right to object to the processing at any time for reasons arising from your particular situation. We will then no longer process the personal data unless there are demonstrably compelling legitimate grounds for further processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

Right of cancellation:
If the data processing is based on consent, you can withdraw your consent at any time with effect for the future. However, such a cancellation does not affect the legality of the previous processing.
To exercise the aforementioned rights and in the event of complaints or unanswered questions, please contact the following address: datenschutz(at)schlothauer.de

We will ask you to confirm your identity and, if necessary, ask you to specify the information you require. We will ensure that your enquiry is dealt with in a timely manner and - provided that no unreasonable or disproportionate effort is required to process your request - free of charge.

Right to lodge a complaint with a supervisory authority:
You also have the right to lodge a complaint with a data protection supervisory authority if you are of the opinion that the processing of your personal data violates data protection regulations. The complaint can be lodged in particular with a supervisory authority in the EU Member State of your place of residence, your place of work or the place of the alleged infringement.

Changes to the privacy policy
We reserve the right to amend this privacy policy if necessary. The current privacy policy can always be found on our website and we therefore ask you to check it regularly for changes.

Responsible for the data processing related to the visit of this website:
Schlothauer & Wauer Ingenieurgesellschaft für Straßenverkehr mbH
Storkower Street 142
10407 Berlin, Germany

[1] The SWARCO Group comprises SWARCO AG and all companies affiliated with it in accordance with Section 189a Z 8 UGB (Austria). These are all companies that SWARCO AG controls directly or indirectly within the meaning of Section 244 of the Austrian Commercial Code (UGB) (such as through a majority of voting rights in the company concerned or through the right to exercise a controlling influence over this company).