1) Introduction and Contact Information of the Data Controller

1.1 We are pleased that you are visiting our website and thank you for your interest. In the following, we will inform you about how we handle your personal data when you use our website. Personal data refers to any data that can personally identify you.

1.2 The data controller for the processing of data on this website, as defined by the General Data Protection Regulation (GDPR), is ITS – Industrial Turbine Services GmbH, Heinz-Bäcker-Str. 19, 45356 Essen, Germany, Tel.: 0049 (0) 201 43 728 – 0, Fax: 0049 (0) 201 43 728 – 20, Email: contact@turbineservices.de. The data controller is the natural or legal person who alone or jointly with others determines the purposes and means of processing personal data.

1.3 For security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the data controller), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the string “https://” and the lock symbol in your browser’s address bar.

2) Data Collection When Visiting Our Website

When you visit our website for informational purposes only, i.e., if you do not register or otherwise provide us with information, we only collect the data that your browser sends to our server (so-called “server log files”). When you access our website, we collect the following data, which are technically necessary for us to display the website to you:

• The website you visited
• Date and time of the access
• Amount of data sent in bytes
• Source/reference from which you accessed the page
• Browser used
• Operating system used
• IP address used (possibly in anonymized form)

The processing is carried out in accordance with Art. 6(1)(f) of the GDPR based on our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or used in any other way. However, we reserve the right to check the server log files retrospectively if there are concrete indications of unlawful use.

3) Cookies

In order to make your visit to our website attractive and to enable the use of certain functions, we use cookies, which are small text files that are stored on your device. Some of the cookies we use are deleted after the end of the browser session, i.e., after you close your browser (so-called “session cookies”). Other cookies remain on your device and enable us or our partner companies to recognize your browser on your next visit (persistent cookies). You can find the storage duration of the cookies in the overview of the cookie settings in your web browser.

If personal data is also processed by individual cookies we use, the processing is carried out in accordance with Art. 6(1)(b) of the GDPR for the performance of a contract, in accordance with Art. 6(1)(a) of the GDPR based on your consent, or in accordance with Art. 6(1)(f) of the GDPR for our legitimate interests in ensuring the best possible functionality of the website and a customer-friendly and effective design of the site visit.

You can configure your browser settings according to your preferences and, for example, refuse to accept cookies. Please note that if you do not accept cookies, the functionality of our website may be limited.

4) Contact

When contacting us (e.g., via contact form or email), personal data is collected. The data collected is evident from the respective contact form used. This data is stored and used solely for the purpose of responding to your request or for establishing contact and the associated technical administration.

The legal basis for processing this data is our legitimate interest in responding to your inquiry, in accordance with Art. 6(1)(f) of the General Data Protection Regulation (GDPR). If your contact aims to conclude a contract, an additional legal basis for processing is Art. 6(1)(b) of the GDPR. Your data will be deleted after the final processing of your request if it can be inferred from the circumstances that the matter in question has been conclusively clarified and there are no legal retention obligations.

5) Site Functionality

hCaptcha

This website uses the CAPTCHA service provided by the following provider: Intuition Machines, Inc., 350 Alabama St, San Francisco, CA 94110, USA.

The service verifies whether an input is made by a natural person or is being misused through automated processing, and it blocks spam, DDoS attacks, and similar automated malicious access attempts. To ensure that an action is performed by a human rather than an automated bot, hCaptcha collects the IP address of the device used, detection data of the browser and operating system type, as well as the date and duration of the visit, and transmits this data to the provider’s servers for evaluation.

The legal basis is our legitimate interest in determining individual responsibility on the internet and preventing abuse and spam, in accordance with Art. 6(1)(f) of the GDPR.

We have concluded a data processing agreement with the provider, ensuring the protection of our website visitors’ data and prohibiting unauthorized disclosure to third parties.

For the transfer of data to the USA, the provider relies on standard contractual clauses of the European Commission, which are intended to ensure compliance with the European level of data protection.

6) Tools and Miscellaneous

6.1 Cookie Consent Tool

This website uses a “Cookie Consent Tool” to obtain effective user consent for consent-required cookies and cookie-based applications. The Cookie Consent Tool is presented to users as an interactive user interface, allowing them to provide consent for specific cookies and/or cookie-based applications by checking a box. Through the use of the tool, all consent-required cookies/services are loaded only if the respective user grants consent by checking the box. This ensures that such cookies are only set on the user’s device if consent has been granted.

The tool sets technically necessary cookies to store your cookie preferences. Personal user data is generally not processed in this context.

If personal data is processed for the purpose of storing, assigning, or logging cookie settings, such as the IP address, this processing is based on our legitimate interest in a legally compliant, user-specific, and user-friendly cookie consent management, in accordance with Art. 6(1)(f) of the GDPR. Another legal basis for processing is Art. 6(1)(c) of the GDPR. As the data controller, we are legally obligated to make the use of technically unnecessary cookies dependent on the respective user’s consent.

We have concluded a data processing agreement with the provider, ensuring the protection of our website visitors’ data and prohibiting unauthorized disclosure to third parties.

For more information about the operator and the settings options of the Cookie Consent Tool, please refer to the corresponding user interface on our website.

6.2 Google Maps

This website uses an online mapping service provided by the following provider: Google Maps (API) by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.

Google Maps is a web service for displaying interactive (land) maps to visually represent geographical information. By using this service, our location will be displayed to you, making it easier for you to find directions if needed.

When accessing the subpages that contain the Google Maps map, information about your use of our website (such as your IP address) is transmitted to and stored on Google servers, which may also be located in the servers of Google LLC. in the United States. This happens regardless of whether Google provides a user account through which you are logged in or whether you have a user account. If you are logged in to Google, your data will be directly associated with your account. If you do not wish for this association with your Google profile, you must log out before activating the button. Google stores your data (even for users who are not logged in) as usage profiles and analyzes them.

The collection, storage, and analysis are carried out in accordance with Art. 6(1)(f) of the GDPR based on Google’s legitimate interest in displaying personalized advertising, conducting market research, and/or designing Google websites to meet users’ needs. You have the right to object to the creation of these user profiles, and to exercise this right, you must contact Google. If you do not agree to the future transmission of your data to Google when using Google Maps, you also have the option to completely deactivate the Google Maps web service by disabling the JavaScript application in your browser. Google Maps, and therefore the map display on this website, cannot be used in this case.

To the extent legally required, we have obtained your consent in accordance with Art. 6(1)(a) of the GDPR for the above-mentioned processing of your data. You can revoke your consent at any time with future effect. To exercise your revocation, please follow the above-mentioned option to object.

6.3 Wordfence

For security purposes, this website uses the service of the following provider: Defiant Inc., 800 5th Ave Ste 4100, Seattle, WA 98104, USA.

The provider protects the website and its associated IT infrastructure from unauthorized third-party access, cyber attacks, viruses, and malware. The provider collects users’ IP addresses and, if necessary, additional data about your behavior on our website (especially accessed URLs and header information) to detect and prevent illegitimate page access and threats. The collected IP address is compared with a list of known attackers. If the IP address is identified as a security risk, the provider can automatically block access to the website. The information collected is transferred to and stored on a server operated by the provider.

The described data processing is carried out in accordance with Art. 6(1)(f) of the GDPR based on our legitimate interests in protecting the website from harmful cyber attacks and maintaining the structure, integrity, and security of data.

If website visitors have login privileges, the provider also sets cookies (small text files) on the visitor’s device. These cookies can read certain location and device information, enabling an assessment of whether the authorized login access originates from a legitimate person. At the same time, the cookies can evaluate access rights and grant access through an internal firewall according to the permission level. Finally, the cookies are used to detect irregular access by page administrators from new devices or locations and notify other administrators.

These cookies are only set if a user has login privileges. The provider does not set cookies for visitors without login authorization.

If personal data is processed through the cookies, the processing is carried out in accordance with Art. 6(1)(f) of the General Data Protection Regulation (GDPR) based on our legitimate interest in preventing illegitimate access to page management and defending against unauthorized administrator access.

We have concluded a data processing agreement with the provider to ensure the protection of data of our website visitors and prohibit unauthorized disclosure to third parties.

For the transfer of data to the United States, the provider relies on standard contractual clauses of the European Commission, which are intended to ensure compliance with the European level of data protection.

7) Rights of the Data Subject

7.1 The applicable data protection law grants you the following rights as a data subject (rights of information and intervention), with reference to the respective legal basis for the exercise requirements:

Right to information pursuant to Art. 15 of the GDPR; Right to rectification pursuant to Art. 16 of the GDPR; Right to erasure (“right to be forgotten”) pursuant to Art. 17 of the GDPR; Right to restriction of processing pursuant to Art. 18 of the GDPR; Right to notification pursuant to Art. 19 of the GDPR; Right to data portability pursuant to Art. 20 of the GDPR; Right to withdraw consent pursuant to Art. 7(3) of the GDPR; Right to lodge a complaint pursuant to Art. 77 of the GDPR.

7.2 RIGHT TO OBJECT

IF WE PROCESS YOUR PERSONAL DATA BASED ON OUR OVERRIDING LEGITIMATE INTEREST, YOU HAVE THE RIGHT TO OBJECT TO SUCH PROCESSING AT ANY TIME, ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE DATA IN QUESTION. HOWEVER, FURTHER PROCESSING WILL BE RESERVED IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, RIGHTS, AND FREEDOMS, OR IF THE PROCESSING SERVES THE ASSERTION, EXERCISE, OR DEFENSE OF LEGAL CLAIMS.

IF WE PROCESS YOUR PERSONAL DATA FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR THE PURPOSE OF SUCH ADVERTISING. YOU CAN EXERCISE THE OBJECTION AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE DATA IN QUESTION FOR DIRECT MARKETING PURPOSES.

8) Duration of the Storage of Personal Data

The duration of the storage of personal data is determined by the respective legal basis, the purpose of processing, and – if applicable – by the respective statutory retention period (e.g., commercial and tax retention periods).

When processing personal data based on explicit consent according to Art. 6(1)(a) of the GDPR, the respective data will be stored until you withdraw your consent.

If there are legal retention periods for data processed within the scope of contractual or quasi-contractual obligations based on Art. 6(1)(b) of the GDPR, this data will be routinely deleted after the expiration of the retention periods, provided that it is no longer necessary for contract fulfillment or initiation and/or there is no legitimate interest on our part to continue storing it.

When processing personal data based on Art. 6(1)(f) of the GDPR, the data will be stored until you exercise your right to object according to Art. 21(1) of the GDPR, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or if the processing serves the establishment, exercise, or defense of legal claims.

When processing personal data for the purpose of direct marketing based on Art. 6(1)(f) of the GDPR, the data will be stored until you exercise your right to object according to Art. 21(2) of the GDPR.

Unless otherwise indicated by the other information in this statement regarding specific processing situations, stored personal data will be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.H