Privacy policy

Data Protection Notice

In the following, we would like to offer you some information concerning the processing of personal data within the framework of the use of our internet pages.

Responsible Body

The responsible body for these internet pages is Pavana GmbH, Otto-Hahn-Str. 12-16, 25813 Husum

For more information about our company and the authorised representatives, please refer to our legal notice. 

Which data is processed?

Legal basis for data processing

In order to be able to offer our website and the related services, we process personal data on the basis of the following legal principles:

  • consent (Art. 6(1) lit a) GDPR)
  • for the performance of contracts (Art. 6 (1) lit. b) GDPR
  • on the basis of a balancing of interests (Art. 6 (1) lit f) GDPR)
  • for compliance with a legal obligation (Art. 6 (1) lit c) GDPR)

In connection with the respective processing, we will refer to the appropriate terminology so that you can identify the basis on which we process personal data.

If personal data is processed on the basis of consent issued by you, you have the right to revoke said consent vis-a-vis us at any time with effect for the future.  If we process data on the basis of a balancing of interests, as the data subject, you have the right, taking into account the requirements of Art. 21 GDPR to object to the processing of the personal data. 

Access Data
When you visit our website, personal data is processed in order to allow the contents of the website to be viewed on your device. In order that the pages can be displayed in your browser, the IP address of the device used by you will be processed. This includes further information about the browser on your device.  In terms of data protection law, we are obliged to also ensure the confidentiality and integrity of personal data processed with our IT systems.  For this purpose, and as a result of this interest, the following data is logged on the basis of a balancing of interests:

  • IP address of the requesting computer (for a maximum of 7 days)
  • operating system of the requesting computer
  • browser version of the requesting computer
  • name of the requested file - date and time of the retrieval
  • quantity of data transferred
  • referring URL

The IP address is deleted from all the systems used in connection with the operation of these internet pages within 7 days.

We are unable to draw any personal reference from the remaining data. 

The data is also used to detect any errors on the internet pages and to be able to rectify such.

Contact form
On our website, we provide a contact form via which you can request information about our products or services or make general contact. We have marked the mandatory data required for the answering of enquiries as mandatory fields. Information is provided in further data fields on a voluntary basis. We need this information in order to process your enquiry, to address you correctly and to be able to give you an answer. Data processing takes place in the case of specific requests concerning the performance of a contract or the initiation of a contract. In the case of general enquiries, processing is carried out on the basis of a balancing of interests.  Enquiries made via the contact form on our website are processed electronically by us so that we can respond to your enquiry. In this context, other persons or departments and, where applicable, third parties may receive the contents of the form that you have sent.  The transmission of the form data via the Internet is carried out via encrypted connections. 

Cookies are used on our internet pages.
Cookies are small text files stored by your browser on your device. The cookies are necessary in order to enable certain features of our internet pages. In this, we use session cookies, which are automatically deleted by your browser immediately after the completion of the visit to the internet pages.

In terms of web analytics however, we also make use of so-called persistent cookies, which are not automatically deleted after your visit to our website. You have the option of preventing the setting of cookies by selecting the appropriate settings on your browser. However, we would like to point out that the use of our internet pages will potentially then only be possible to a limited extent. Cookies do not install or start programs or other applications on your computer.

Cookies are made use of on the basis of a balancing of interests. Our interest is that of allowing ease-of-use when visiting our internet pages.

Use of Cookiebot

Cookiebot is an online service that helps us design the use of cookies and the online tracking of these cookies in a way that complies with the applicable data protection regulations. By using the web service Cybot A/S (Havnegade 39, 1058 Copenhagen, Denmark), your browser transfers personal data to the aforementioned company. The legal basis for the processing of data is Art. 6(1)(f) GDPR. The legitimate interest is the error-free operation of the website. The data will be deleted as soon as the purpose for which it was collected has been fulfilled. Further information regarding the handling of the data transmitted can be found in the privacy policy of You can prevent the collection and processing of your data by by disabling the execution of script code in your browser or installing a script blocker in your browser (which is available on the following websites, for example: or You have the right to change or revoke your consent at any time.

Web Analysis
The “Google Analytics” web analysis tool is used on this website. The purpose of the use is the "demand-oriented design" of this website, which is carried out on the basis of a balancing of interests. The web analysis also allows us to identify and correct errors on the website, e.g. due to incorrect links. Google Analytics uses so-called “cookies“.

Cookies are text files which are saved on your computer and which make it possible to analyse your use of the website. In this, so-called "Client IDs" are made use of which serve the purpose of creating pseudonymous user profiles, which jointly capture information on the use of the web pages by a user via both desktop computers and mobile devices. In general, the information generated by the cookie relating to your use of this website is transferred to a Google server in the USA and saved there.

As we have activated so-called IP anonymisation on this website and concluded a corresponding order processing agreement with Google, your IP address is however abbreviated in advance by Google within member states of the European Union or in other contracting states to the agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and abbreviated there. 

Google is certified according to the so-called "Privacy Shield" (list entry). Google guarantees an adequate level of data protection. 

You can also prevent the allocation of the data generated by the cookie and relating to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plug-in provided under the following link

Alternatively –particularly in the case of mobile devices–, you can prevent capture by Google Analytics by clicking on the following link. An opt-out cookie is then created, which prevents the future capture of your data when visiting this website: deactivate Google Analytics

More detailed information concerning the Google Analytics terms of use and data protection notices can be found at:

XING and LinkedIn

We use XING, a service of New Work SE, Am Strandkai 1, 20457 Hamburg, Germany, as well as LinkedIn, a service of LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland, to communicate with you and other interested parties and to inform you there about us, for example, about our business activities or vacancies.

In the process, cookies may be stored on your computers by the respective service provider, in which the usage behavior is saved. This user data is made available to us by XING/LinkedIn anonymized and aggregated for evaluation. Furthermore, we only process the data records that you provide to us via XING/LinkedIn.

The legal basis for the processing of personal data in the context of providing the XING or LinkedIn service is Art. 6 (1) lit. f GDPR. Our interest lies in informing you about current job offers. It is also possible that we want to inform you about current events via the respective service.

If you also provide data records via XING/LinkedIn, the legal basis is your consent pursuant to Art. 6 (1) lit. a GDPR. If we use information provided by you to establish, implement or process a contractual relationship, the legal basis is Art. 6 (1) (b) GDPR, and in the case of employment relationships Art. 6 (1) (b) GDPR in connection with Section 26 BDSG.

We delete your data that you have provided to us via XING/LinkedIn when the purpose no longer applies. Since contacting us via XING/LinkedIn can have different purposes, the storage period depends largely on the reason for your contact.

For the time of deletion of your data, for which XING or LinkedIn is responsible, please refer to the privacy policy of XING/LinkedIn:



As a rule, we do not pass on data that we have received from you via XING/LinkedIn to third parties. Regarding the data transfer by the respective service provider, we refer to the respective privacy policy of the provider.

Revocation of data processing based on consent is possible at any time. With regard to the assertion of rights (e.g. data subject rights), we would like to point out that these can ideally be asserted against the respective service provider. This is because the respective service providers have access to the users' data and can take appropriate measures and provide information directly. You can additionally prevent data processing by neither clicking on the XING/LinkedIn icon on our website nor visiting our channel via XING/LinkedIn.

Purposes of the processing of personal data

We process the aforementioned data for the operation of our website and for fulfilment of contractual obligations vis-a-vis our customers and/or the guaranteeing of our legitimate interests. In the case of enquiries from you outside of an active customer relationship, we process the data for purposes of distribution and advertising.

You may object to a use of your personal data for advertising purposes at any time. 

Voluntary information

If you offer us information voluntarily, for example in forms, and this is not required for the fulfilment of our contractual obligations, we will process this data under the justified assumption that the processing and use of this data is in your interest.

Recipients / forwarding of data

Data you provide to us will not be passed on to third parties. In particular, your data will not be passed on to third parties for their marketing purposes. However, where necessary, we make use of service providers for the operation of these internet pages or for that of additional products or services offered by us.

This may result in a service provider receiving knowledge of personal data. We select our service providers carefully - in particular with regard to data protection and data security - and take all the necessary measures in terms of data protection law for permissible data processing.

Data processing outside of the European Union

Whether your personal data is processed outside of the European Union can be inferred from the previous statements.

Data protection officer 


You can address your questions or complaints to our data protection officer.

You can contact our company data protection officer at 

Your rights as a data subject 

You have a right to information concerning the affected personal data. You may turn to us for information at any time. In the case of requests not made in writing, we ask you to understand that we may require you to show proof that you are the person you say you are. 

Furthermore, you also have a right to rectification or erasure or restriction of processing, insofar as you are legally entitled to such.  Finally, you have a right to object to the processing within the framework of the statutory provisions. The same applies for a right to data portability.

Erasure of data

In principle, we erase personal data once a legal requirement to store it no longer exists. A requirement may exist in particular if the data is still required in order to be able to fulfil the contractual services, and to check, grant or defend against guarantee or warranty claims. In the case of statutory retention obligations, a deletion will only be considered after the expiry of the respective retention obligation.

Right of appeal to a supervisory authority 

You have a right to appeal to a supervisory authority for data protection with regard to the processing of personal data by us. 

Changes to this data protection notice 

We will revise this data protection notice when changes are made to this website or on other occasions which make this necessary. The currently valid version will always be found on this website  

Status: 23 May 2018