1.1 This privacy policy provides information on how and which personal data are processed by us, Siloanlagen Achberg GmbH & Co. KG, when you visit our website or our social media sites (Facebook, Instagram, YouTube, LinkedIn).
1.2
Siloanlagen Achberg GmbH & Co. KG
Baind 20
DE – 88147 Achberg
Germany
Telephone: +49 (0) 8380 98335 - 0
E-mail: info@achberg.com
is the controller pursuant to Art. 4 No. 7 of the EU Data Protection Regulation (GDPR) for the processing of personal data in accordance with this privacy policy (see also our Legal Notice).
The rules for our social media sites are different; here we are jointly responsible with the operator of the social media platform in certain aspects. Further information on this is provided in Section 5 below.
Our data protection officer is:
Dr Florian Deusch, specialist lawyer for IT law, law firm Dr Gretter,
external data protection officer (certified by TÜV and udis GmbH – Ulm Academy for Data Protection and Data Security GmbH).
The data protection officer can be reached as follows:
Anwaltskanzlei Dr. Gretter
Eisenbahnstraße 41
88212 Ravensburg
E-mail: datenschutz@gretter-rae.de
He is also the data protection officer of Siloanlagen Achberg Verwaltung GmbH.
1.3 Personal data are all data that can be referenced to you personally, e.g. name, address, e-mail addresses, the information about your use of our website (see Section 2 below).
Processing is any process related to personal data. “Processing” is, for example, the collection, logging, organisation, ordering, storage, adaptation or modification, reading, querying, use, disclosure by transmission, dissemination or any other form of provision, comparison or the linking, restriction, deletion or destruction of personal data.
2.1.1 Informational use of our websites
When using the websites for information purposes only, i.e. if you do not register or otherwise provide us with information, we will only collect the personal data that your browser transmits to our server. When viewing our websites, we collect the following data:
Purpose and legal basis
The purpose of processing this data is to display our websites and ensure stability and security. The legal basis for this is Art. (6) (1) sentence (1) letter (f) of the GDPR. According to this Article, the processing of personal data to safeguard our legitimate interests is lawful, unless the interests or fundamental rights or freedoms of the data subject prevail.
These personal data are only saved for the duration of your visit to our websites.
2.1.2 Contact by e-mail or using the contact form on our websites
When you contact us by e-mail or by using a contact form, the data you provide (your e-mail address, possibly your name and telephone number) will be stored by us in order to enable us to answer your questions. We will erase the data generated in this connection after storage is no longer necessary, or will restrict processing if statutory retention obligations exist. The legal basis for these processing operations is Art. 6 (1) sentence (1) letter (f) of the GDPR, unless there are statutory retention requirements. In that case, the legal basis for storage is Art. 6 (1) sentence (1) letter (c) of the GDPR. According to this, the processing is lawful if this is necessary to fulfil a legal obligation.
2.1.3 Cookies
a) In addition to the above-mentioned data, cookies are stored on your computer when you use our websites. Cookies are small text files that are stored on your hard drive assigned to the browser you are using and through which specific information flows to the location that sets the cookie (us in this case). Cookies cannot be used to run programs or deliver viruses to your computer. Their purpose is to make the website more user-friendly and effective overall. The legal basis for this is your consent, which can be revoked at any time, in accordance with Art. 6 (1) sentence (1) letter (a) of the GDPR, which you issue when you start visiting our websites (for non-essential cookies) or Art. 6 (1) sentence (1) letter (f) of the GDPR (for essential cookies, without which our websites cannot be accessed).
a) These websites use the following types of cookies, whose scope and operation will be explained below:
aa) Transient cookies are deleted automatically when you close your browser. This includes session cookies in particular. These store a so-called session ID, with which your browser’s different requests can be assigned to the common session. This will allow your computer to be recognised when you return to our websites. Session cookies will be deleted when you log out or close the browser.
bb) Persistent cookies are deleted automatically after a specified duration, which may differ depending on the cookie. You can delete cookies at any time in your browser’s security settings. By deleting it, you also revoke your consent to the processing of the respective cookie.
c) You can configure your browser settings as you wish and refuse the acceptance of third party cookies or all cookies, for example. Please note that you may then not be able to use all the functions of our website.
You can check/adjust your cookie settings for our website at any time under the following link:
2.2.1 We process the following data from persons who apply for employment with us using the application form on our website or otherwise:
First name, last name, e-mail address, address, telephone number (if provided) and the application data sent to us.
2.2.2 Subject to separately declared consent, we only process the data in order to carry out the application process on which the respective application is based. Without consent, the data will not be stored after the end of the application process and the relevant storage periods.
2.2.3 Section 5.3 (below) applies to applicant data that we receive via our presence on the online platform LinkedIn.
2.3.1 We process the following data from the contact persons at our customers, suppliers, visitors to our operating facilities and premises and other communication partners (hereinafter also referred to as “data subjects”):
2.3.2 We process the data according to Section 2.3.1 for the following purposes and on the basis of the following legal bases:
The legal basis in all cases is Art. (6) (1) sentence (1) letter (f) of the GDPR.
If there is no permanent contractual or other legal relationship with the company or the authority of the data subject, their personal data will only be processed or stored to complete the specific task.
2.3.3 Furthermore, we also process personal data of our customers or their contact persons (last name, first name, company) in order to fulfil our obligations under public law towards authorities, for example for tax and commercial documentation and for export controls. The legal basis for this s Art. (6) (1) sentence (1) letter (c) of the GDPR.
2.4.1 The access routes to the outside of our company premises are permanently monitored by video.
In the interior of our company, video cameras are installed in the production hall, which only take recordings outside of working hours.
2.4.2 The purposes of video monitoring are:
Legal basis of the data processing is Art. (6) (1) sentence (1) letter (f) of the GDPR. According to this Article, the processing of personal data is permitted if this is necessary to safeguard our legitimate interests, provided that the interests or fundamental rights and freedoms of the data subject do not outweigh the interests. Our legitimate interests in the context of video monitoring are the protection of our company and our employees and to exercise our right to keep out trespassers.
2.4.3 We only evaluate stored video recordings on an ad hoc basis, i.e. if we become aware of facts that require viewing the recordings for one of the purposes in accordance with Section 2.4.2. All stored video recordings are protected by a two-key system, so that they can only be accessed if authorized by both key holders. The recordings are saved for a maximum of four weeks.
In principle, we do not transfer your data to third parties without your prior consent.
Sometimes we hire third parties for electronic data processing. These are reliable service providers that we have carefully selected to process your data according to our instructions. The legal basis for this is Art. 28 of the GDPR. Of course, our service providers are obliged to handle the data carefully, only in accordance with our instructions and as per the applicable data protection regulations, in particular neither to use the data for their own purposes nor to pass them on to third parties.
In addition, individual cases may arise in which we are legally obliged to pass on your data by order of the authorities, if and to the extent that this is necessary for purposes of criminal prosecution or to avert dangers by the police or other authorities. The legal basis for the transfer in these cases is Art. 6 (1) letter (c) of the GDPR.
There may be cases in which your data is passed on to Siloanlagen Achberg Verwaltung GmbH for one of the purposes mentioned in Section 2 due to the division of work within the Siloanlagen Achberg group of companies.
The purpose of the transfer is to fulfil the tasks that occur in the pursuit of corporate goals within a group of companies in a structured manner within our group of companies and according to our work allocation. The legal basis for this is Art. 6 (1) sentence (1) letter (f) of the GDPR.
4.1 You have the following rights with respect to us in relation to the personal data concerning you:
4.2 You also have the right to lodge a complaint with a data protection authority about our processing of your personal data.
We, Siloanlagen Achberg GmbH & Co. KG, are also present on social media, on the platforms of the following operators:
Section 5 informs you about which of your personal data is processed when you visit social media sites.
The two social media platforms www.facebook.com and www.instagram.com are offered and operated by
5.1.1 Which data are processed?
When you visit our sites on Facebook or Instagram, to our knowledge Meta essentially collects the following data:
5.1.2 Who is responsible for processing this data?
We do not collect and receive the usage data in accordance with Section 5.1.1 directly, but only from Meta in a summarized, anonymised form using the Facebook tool “Page Insights”. ( https://de-de.facebook.com/business/pages/manage and https://de-de.facebook.com/legal/terms/information_about_page_insights_data ). We cannot assign this data to a specific person. We only receive statistical evaluations of this data.
However, since Meta would not be able to collect this usage data on www.facebook.com and www.instagram.com without our sites, we are so-called “joint controllers” for the processing of this data together with Meta within the meaning of Art. 26 of the GDPR. In other words: Meta and we have a common purpose in processing this usage data. This purpose consists of better understanding the behaviour of users when they visit our social media sites in order to improve our offers.
As the operator of the platforms, Meta collects personal usage data in accordance with Section 5.1.1. We only receive the statistical and anonymised data from Meta. This means that we have no influence over which of the usage data as per Section 5.1.1 Meta collects and how Meta processes this information. Meta alone makes these decisions.
But since common responsibility does exist within the meaning of Art. 26 of the GDPR, Art. 26 of the GDPR requires that we conclude a special agreement with Meta and inform you about it. You can access this agreement at
https://de-de.facebook.com/legal/terms/page_controller_addendum.
The agreement contains further details and explanations about our joint responsibility with Meta in the context of website insights.
The legal basis for the data processing, which we have presented in Sections 5.1.1 and 5.1.2, is Art. 6 (1) sentence (1) letter (f) of the GDPR, as far as Siloanlagen Achberg GmbH & Co. KG are concerned. Our interest lies in managing and improving our social media sites.
5.1.3 Processing of personal data by Siloanlagen Achberg GmbH & Co. KG when visiting our Facebook and Instagram sites.
We do not collect or process any data ourselves when you use our social media sites.
However, if you post content on our Facebook or Instagram sites, such as leaving comments, we can share them, reply to them or we can also create posts with a reference to your profile. In this respect, we also process the data that you enter when using our Facebook and Instagram sites, in particular your (user) name and the content published under your account. We process this data by including it on our website and making it available to other users of our Facebook or Instagram sites. The legal basis for our data processing in this regard is Art. 6 (1) sentence (1) letter (b), provided you make an inquiry, and otherwise Art. 6 (1) sentence 1 letter (f) of the GDPR, whereby our legitimate interests pertain to the public relations for our company.
We only process this data for as long as required due to the purpose of processing. If you have made an enquire, the purpose ends when the enquiry is completed. As part of our public relations work, we process the data for the duration in which we maintain our Facebook and Instagram sites.
In principle, we do not pass on your data that we process to third parties. Section 3 above applies. Please refer to Section 4 above for information about the rights that you have related to the data we process.
5.1.4 Data processing by Facebook
Irrespective of us, Meta processes all data created when you visit our Facebook and Instagram pages. This applies to all data that we have presented in Sections 5.1.1, 5.1.2 and 5.1.3 Facebook may also collect other data. We have no influence on what data Meta processes, to what extent and how, or whether and how Meta passes it on to third parties, especially in countries outside the European Union. It is your responsibility to familiarize yourself with the facts and decide if you consent to such use. Meta provides information on this in the company’s own privacy policy
If you would like to request information from Meta or assert your data protection rights, you can contact Meta as follows:
By visiting https://de-de.facebook.com/privacy/policy/?section_id=13-HowToContactMeta or by mail to:
Meta Ireland Ltd.
4 Grand Canal Square
Grand Canal Harbour Dublin 2 Ireland.
You can also contact the data protection officer at Meta via the following link: https://www.facebook.com/help/contact/540977946302970
You also have the right to lodge a complaint with the leading supervisory authority responsible for Meta, the Irish Data Protection Commission, or a local supervisory authority.
Further information on data processing and your data protection rights as well as how you can manage or delete your data on Facebook or Instagram can be found on the following Facebook support pages: https://www.facebook.com/about/basics/manage-your-privacy. A privacy check is also possible there as well as optimizing your data protection settings on Facebook and Instagram.
YouTube is an online platform of YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066 (hereinafter “the provider” or “YouTube”). YouTube processes personal data from users who have registered on the online platform and from unregistered website visitors. The provider belongs to Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
The following applies to our site on the YouTube platform (YouTube channel on www.youtube.com):
5.2.1 Which data are processed?
If you use our sites and services on the YouTube platform, YouTube processes personal data from you that is generated when you use the service, in particular with interactive functions such as sharing or commenting. YouTube may also transmit such data to countries outside the European Union. We at Siloanlagen Achberg GmbH & Co. KG have no influence on the type and scope of the data processed by this provider as well as the type of processing and use or the transfer of this data to third parties, especially in countries outside the European Union.
To determine which data is processed by the provider and for which purposes, YouTube provides a privacy policy under the following link: https://policies.google.com/privacy?hl=de&gl=de
As far as we know, YouTube essentially processes the following data:
This facilitates determining the user’s interests based on the usage behaviour, which can be used to create usage profiles. These usage profiles are often used for a wide variety of purposes, for example for advertisements inside and outside of YouTube that are specifically tailored to the supposed interests of the respective user. For this purpose, cookies are usually stored on the users’ computers, which collect and save information about usage behaviour and the interests of the users. They are processed by YouTube and, if necessary, used in connection with the usage profile if the respective user uses the services of the provider Instagram.
However, usage profiles can also be saved independently of the users’ devices. This applies in particular to users who are registered on the YouTube platform or on the platform of a company that is connected to YouTube, for example the other services of Google LLC. In particular, data is collected from users while they are logged into the online platforms. More detailed information about the respective processing and objection options (opt-out) can be found in the privacy policy of YouTube or Google LLC: https://policies.google.com/privacy?hl=de&gl=de.
5.2.2 Processing of your personal data by YouTube
The way in which YouTube uses the data obtained from your visit to the service for its own purposes, the extent to which your interactions with the service are assigned to individual user profiles, how long the provider stores this data and whether data is passed on to third parties is entirely decided by YouTube and cannot be influenced by us and is also not fully known to us.
In some cases, the provider links the YouTube data with data from other Google services. Information on this can be found in the further data protection information of Google LLC, in particular under:
https://policies.google.com/privacy/example/combine-personal-information?hl=de.
Google LLC also links your data from the use of Google services with data from the use of services from other providers, in particular to match advertising, which interests are assigned to your user profile and to match its services to your profile. Google LLC has provided further information on this under https://policies.google.com/privacy/example/your-activity-on-other-sites-and-apps?hl=de
As a registered Google user, you can restrict the processing of your personal data through the privacy settings of your profile. We refer to the corresponding functionality of the provider under https://policies.google.com/privacy?gl=de
You can also use the setting options on mobile devices (e.g. smartphones) to restrict the service's access to contact and calendar data, photos, location data, etc. However, this depends on the operating system used on the end device. Privacy settings are also possible in your browser.
In the case of requests for information and the assertion of user rights, it is most expedient to contact Google LLC directly. Only Google LLC has access to the data of the users and can take appropriate measures and provide information.
You can contact Google LLC as follows:
https://www.google.de/contact/impressum.html
You also have the right to lodge a complaint with the leading supervisory authority responsible for Google Germany GmbH, the Hamburg commissioner for data protection and freedom of information, or with a local supervisory authority.
5.2.3 Processing of your personal data by Siloanlagen Achberg GmbH & Co. KG
We do not collect or process any data ourselves when you use our YouTube site. However, if you post content on our YouTube site, such as leaving comments, we can share them, reply to them or we can also create posts with a reference to your profile. In this respect, we also process the data that you enter when using our YouTube site, in particular your (user) name and the content published under your account. We process this data by including it on our website and making it available to other users of our respective social media sites. The legal basis for our data processing in this regard is Art. 6 (1) sentence (1) letter (b), provided you make an inquiry, and otherwise Art. 6 (1) sentence 1 letter (f) of the GDPR, whereby our legitimate interests pertain to the public relations for our company.
We only process this data for as long as required due to the purpose of processing. If you have made an enquire, the purpose ends when the enquiry is completed. As part of our public relations work, we process the data for the duration in which we maintain our YouTube site.
In principle, we do not pass on your data that we process to third parties. Section 3 above applies. Please refer to Section 4 above for information about the rights that you have related to the data we process.
Siloanlagen Achberg GmbH & Co. KG maintains a profile page on LinkedIn.
LinkedIn is a social network or platform for maintaining existing business contacts and establishing new business connections. The provider of the platform for the territory of the European Union is LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (hereinafter: LinkedIn): LinkedIn belongs to LinkedIn Corporation, headquartered at 1000 W. Maude Avenue Sunnyvale, CA 94085, USA, which belongs to Microsoft Corporation, headquartered at One Microsoft Way Redmond, WA 98052-6399 USA.
It is not necessary to use LinkedIn to contact us or receive information from us. Similar content and contact options are available on our website at https://www.achberg.com/.
5.3.1 Processing of your personal data by LinkedIn
Please be aware that LinkedIn determines which of your data the platform processes when you visit our LinkedIn page. LinkedIn is solely responsible. For certain processing operations (see Section 5.3.3), LinkedIn and Siloanlagen Achberg GmbH & Co. KG are considered joint controllers.
LinkedIn provides information on the processing of personal data when using the platform at https://www.linkedin.com/legal/privacy-policy.
5.3.2 Which data are processed?
When you visit our LinkedIn page, LinkedIn processes your personal data that is generated during your visit to the website and which you disclose in the process. Based on information provided by LinkedIn, these data include information about the device you are using to visit the website, your IP address, and websites that you have visited prior to visiting the LinkedIn site. If you have a LinkedIn user account, data will also be collected and, if necessary, merged with the data of your visit to our LinkedIn page. For further details, please refer to the information provided by LinkedIn at https://www.linkedin.com/legal/privacy-policy.
5.3.3 LinkedIn and Siloanlagen Achberg GmbH & Co. KG as joint controllers
When you visit our LinkedIn page or follow the profile, LinkedIn collects data from you that is generated in the process. Please see LinkedIn's Privacy Policy at https://www.linkedin.com/legal/privacy-policy (see also Section 5.3.1 above). From this data, LinkedIn creates statistics with information about the use of our LinkedIn page and makes them available to us. We, Siloanlagen Achberg GmbH & Co. KG, cannot obtain any personal information from it. Neither can we influence the extent to which LinkedIn uses these data for its own purposes or transmits the data to countries outside the European Union. However, we have reached an agreement with LinkedIn concerning the joint controllership, which delimits the data protection liability of LinkedIn and us. This agreement is available at https://legal.linkedin.com/pages-joint-controller-addendum
In the event that LinkedIn transmits the data to entities in countries outside the European Union, for example to the LinkedIn Corporation, based at 1000 W. Maude Avenue Sunnyvale, CA 94085, USA, LinkedIn has agreed to comply with the standard contractual clauses of the European Union. Our agreement with LinkedIn is available at https://de.linkedin.com/legal/l/dpa.
The purpose of our LinkedIn page and the associated processing of personal data is to represent our company and our range of products and services in order to make them accessible to as many interested persons as possible and to communicate with them. The legal basis for this is Art. (6) Paragraph (1) Sentence (1) Letter (f) of the GDPR. Accordingly, we may process personal data to protect our legitimate interests, provided that the interests and fundamental freedoms of the data subjects in the protection of their data do not prevail. Our legitimate interests are to publicise our company, our products and services, the career opportunities we offer, and to make contact with interested persons for this purpose.
5.3.4 LinkedIn applicant data and recruitment services
Anyone who visits our LinkedIn page also has the option of contacting us in order to apply to our company. We process application details that we receive via our LinkedIn page, as set out in Section 2.3 above. Please be aware that, in this case, your application data will not only be processed by us, but also by LinkedIn. For further details, please see LinkedIn's Privacy Policy at https://www.linkedin.com/legal/privacy-policy.
LinkedIn also allows us to use technical services for recruitment and marketing on the LinkedIn platform. If you have created a user account on the LinkedIn platform, we can also process your data after contacting you, depending on your settings in your LinkedIn user account.
The use of such services is based on an order processing agreement with LinkedIn (available at https://www.linkedin.com/legal/l/dpa).
The processing of these data takes place on the legal basis of Art. 6 Paragraph (1) Sentence (1) letter (f) of the GDPR. Accordingly, we may process personal data to protect our legitimate interests, provided that the interests and fundamental freedoms of the data subjects in the protection of their data do not prevail. Our legitimate interest is to find personnel for hire at our company. If you contact us via LinkedIn, we will process your data in accordance with Art. 6 Paragraph (1) Sentence 1 Letter (b) of the GDPR in conjunction with Art. 88 of the GDPR and Section 26 of the Federal Data Protection Act. These legal regulations allow us to process your data to fulfil your request and to carry out the application process.
5.3.5 Your rights
If you want to request information about the processing of your data in connection with LinkedIn or assert other data protection rights, it is best to contact LinkedIn directly. You may contact LinkedIn and LinkedIn’s Data Protection Officer using the contact information specified in LinkedIn’s Privacy Policy at: https://www.linkedin.com/legal/privacy-policy.
You can reach LinkedIn by post as follows:
LinkedIn Ireland Unlimited Company
Attn: Legal Dept. (Privacy Policy and User Agreement)
Wilton Plaza
Wilton Place, Dublin 2
Ireland
You also have the right to contact the Data Protection Authority to enforce your data protection rights. LinkedIn is managed by the Irish Data Protection Authority as the lead supervisory authority (https://dataprotection.ie/). However, you can also contact any other Data Protection Authority, which will forward your request to the primary Irish Data Protection Authority.
6.1 This website uses the web analysis service Matomo to analyse the use of our website and to improve it regularly. We can improve our offer and make it more interesting for you as a user. The legal basis for the use of Matomo is Art. 6(1)(1)(f) of the GDPR.
6.2 This website uses Matomo with the “AnonymizeIP” extension. As a result, IP addresses will be further processed in truncated form, so that any direct personal reference can be excluded. The IP address transmitted by your browser using Matomo will not be merged with other data collected by us.
6.3 The Matomo program is an open source project. You can obtain information on data protection from the third-party provider at (https://matomo.org/privacy-policy).
6.4 For evaluation of the Matomo web analysis, cookies are stored on your computer (for more details see Section 2.1.3 of our privacy policy). The controller stores the information collected in this way exclusively on his server in Germany. You can stop this analysis by deleting existing cookies and preventing the storage of cookies. If you prevent the storage of cookies, we would like to point out that you may not be able to use these websites to their full extent. You can prevent the storage of cookies by changing your browser settings. It is possible to prevent the use of Matomo by removing the following checkmark and activating the opt-out plug-in:
a) We have integrated YouTube videos into our website, which are stored on www.YouTube.com and can be played directly from our website.
b) When you visit the website, YouTube is informed that you have accessed the corresponding subpage of our website. In addition, the data mentioned in Section 2.1.1 of this declaration are transmitted. This takes place regardless of whether or not YouTube provides a user account that you are logged in to. If you are logged into Google, your data will be assigned directly to your account. If you do not want the information associated to your YouTube profile, you must log out before pressing the button. YouTube stores your data as a user profile and uses it for advertising, market research and/or tailored design of its websites. Such an analysis takes place in particular (even for users who are not logged in) to provide tailored advertising and to inform other users of the social network about your activities on our websites. You have the right to object to the creation of these user profiles, although you must contact YouTube to exercise this right.
c) Further information on the purpose and scope of data collection and processing by YouTube can be found in the privacy policy. There you will also find further information on your rights and setting options to protect your privacy: www.google.de/intl/de/policies/privacy. Google also processes your personal data in the USA. That is why we only offer YouTube to you on our website if you have consented to this. Without your consent, no YouTube content will be displayed to you and your data will not be transmitted to the USA.
Further information on the handling of user data can be found in YouTube’s privacy policy under: https://policies.google.com/privacy?hl=de.
This page uses so-called web fonts from Google to represent all fonts uniformly. The Google Fonts are installed locally. No connection to Google servers takes place for this purpose.
For more information on Google Web Fonts, see https://developers.google.com/fonts/faq and in Google's privacy policy: https://policies.google.com/privacy?hl=de.
a) We use Google Maps on this website. This enables us to show you interactive maps directly on the website and allows you to conveniently use the map function.
b) When you visit our website, Google is informed that you have accessed the corresponding subpage of our website. In addition, the data mentioned in Section 2.1.1 of this declaration are transmitted to Google. This takes place regardless of whether or not Google provides a user account that you are logged in to. If you are logged into Google, your data will be assigned directly to your account. If you do not want the information associated to your Google profile, you must log out before pressing the button. Google stores your data as a user profile and uses it for advertising, market research and/or tailored design of its websites. Such an analysis takes place in particular (even for users who are not logged in) to provide tailored advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, although you must contact Google to exercise this right.
c) Further information on the purpose and scope of data collection and processing by Google can be found in the privacy policy. There you will also find further information on your rights and setting options to protect your privacy: http://www.google.de/intl/de/policies/privacy.
Further information on the handling of user data can be found in Google’s privacy policy under: https://policies.google.com/privacy?hl=de.