Information on data protection according to EU Data Protection Regulation (DS-GVO)
1. Name and address of the responsible person
Bergeshöveder Str. 64
Phone: +49 (0) 5454 – 40 73 463
Fax: +49 (0) 5454 – 40 73 464
2. Contact details of the data protection officer
Responsible for data protection is:
Phone: + 49 (0) 2041 – 75 39 720
3. General information on data processing
3.1. Scope and processing of personal data
As a matter of principle, we process personal data of our users only to the extent necessary to provide a functional website and our content and services. The processing of personal data of our users is regularly carried out only with the consent of the user. An exception applies in those cases where obtaining prior consent is not possible for actual reasons and the processing of the data is permitted by legal regulations.
3.2. Legal basis for the processing of personal data
Insofar as we obtain the consent of the data subject for processing operations involving personal data, Article 6 (1) (a) of the EU General Data Protection Regulation (GDPR) serves as the legal basis.
When processing personal data that is necessary for the performance of a contract to which the data subject is a party, Art. 6 (1) lit. b DS-GVO serves as the legal basis. This also applies to processing operations that are necessary for the implementation of pre-contractual measures.
If processing of personal data is necessary for compliance with a legal obligation to which our company is subject, Art. 6 (1) c DS-GVO serves as the legal basis.
If processing is necessary to protect a legitimate interest of our company or a third party and the interests, fundamen- tal rights and freedoms of the data subject do not outweigh the former interest, Art. 6 (1) f DS-GVO serves as the legal basis for the processing.
3.3. Data deletion and storage period
The personal data of the data subject will be deleted or blocked as soon as the purpose of storage ceases to apply. Storage may take place beyond this if this has been provided for by the European or national legislator in Union regu- lations, laws or other provisions to which the controller is subject. Blocking or deletion of data will also take place if a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or performance of a contract.
4. Provision of the website and creation of log files
4.1. Description and scope of data processing
Each time our website is called up, our system automatically collects data and information from the computer system of the calling computer.
The following data is collected in this process:
- IP address of the user
- Date and time of access
- How the website was called up and which was requested (websites from which the system of the the user’s sys-
tem accesses our website and websites that are called up by the user’s system via our website).
- Error codes
- Browser data (browser type and version used)
- the user’s operating system
- the user’s Internet service provider
The log files contain IP addresses or other data that allow an assignment to a user. This could be the case, for exam- ple, if the link to the website from which the user arrives at the website or the link to the website to which the user goes contains personal data.
The data is also stored in the log files of our system. This data is not stored together with other personal data of the user.
4.2. Legal basis for data processing
The legal basis for the temporary storage of the data and the log files is Art. 6 (1) lit. f DS-GVO.
4.3. Purpose of data processing
The storage in log files takes place in order to ensure the functionality of the website. In addition, we use the data to optimize the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context.
These purposes are also our legitimate interest in data processing according to Art. 6 Para. 1 lit. f DS- GVO.
4.4. Duration of storage
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended.
In the case of storage of data in log files, this is the case after seven days at the latest. Storage beyond this period is possible. In this case, the IP addresses of the users are deleted or alienated, so that an assignment of the calling client is no longer possible.
4.5. Possibility of objection and removal
The collection of data for the provision of the website and the storage of the data in log files is absolutely necessary for the operation of the website. Consequently, there is no possibility of objection on the part of the user.
5.1. Description and scope of data processing
The following data is stored and transmitted in the cookies:
The user data collected in this way is pseudonymized by technical precautions. Therefore, an assignment of the data to the calling user is no longer possible. The data is not stored together with other personal data of the users.
The cookie banner also informs you about the name, origin, function/purpose and storage period of the individual cookies.
5.2. Legal basis for data processing
The legal basis for the processing of personal data using cookies is Art. 6 (1) lit. f DS-GVO for the functional cookies and Art. 6 (1) lit. a DS-GVO for cookies for marketing, personalization and analysis purposes.
5.3. Purpose of data processing
In these purposes also lies our legitimate interest in the processing of personal data according to Art. 6 para. 1 lit. f DS- GVO.
We require cookies for the following applications:
- Adoption of language settings
- Remembering search terms
- Login / Session ID
5.4. Duration of storage, possibility of objection and removal
6. E-mail contact
6.1. Description and scope of data processing
You can contact us via the e-mail address provided. In this case, your personal data transmitted with the e-mail will be stored.
In this context, the data will not be passed on to third parties. The data is used exclusively for processing the conversa- tion.
6.2. Legal basis for data processing
If the e-mail contact aims at the conclusion of a contract, the legal basis for the processing is Art. 6 (1) lit. b DS-GVO. Otherwise, the legal basis for processing the data transmitted in the course of sending an e-mail is our legitimate in- terest pursuant to Art. 6 (1) lit. f DS-GVO.
6.3. Purpose of the data processing
The processing of personal data from your e-mail serves us solely to process the contact. In the case of contact by e- mail, this also constitutes the necessary legitimate interest in processing the data.
The other personal data processed during the sending process serve to prevent misuse of the e-mail function and to ensure the security of our information technology systems.
6.4. Duration of storage, possibility of objection and elimination
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. For personal data sent by e-mail, this is the case when the respective conversation with the user has ended. The conversation is terminated when it can be inferred from the circumstances that the matter in question has been conclusively clarified. The personal data collected for the establishment and execution of a contractual relationship will be stored until the fulfillment of the contract and then deleted, unless we are required to store it for a longer period of time pursuant to Art. 6 para. 1 lit. c DS-GVO, e.g. due to tax and commercial storage and documentation obligations, or the user has consented to additional storage pursuant to Art. 6 para. 1 lit. a DS-GVO.
The additional personal data collected during the sending process will be deleted after a period of seven days at the latest.
The user has the option to revoke the processing of personal data at any time. If the user contacts us by e-mail, he can object to the storage of his personal data at any time. In such a case, the conversation cannot be continued.
The revocation of the storage can be made via the above-mentioned contact options. All personal data stored in the course of contacting us will be deleted in this case.
7. Contact form
7.1. Description and scope of data processing
On our website, there is a contact form for general inquiries, which can be used for electronic contact and via which you can request product-related offers. If a user takes advantage of this option, the data entered in the input mask is transmitted to us and stored. These data are:
- Name (mandatory field)
- E-mail (mandatory field)
- Telephone number (optional field)
- Message (mandatory field)
At the time the message is sent, the following log data is also stored:
the IP address of the user
date and time of the sending process
7.2. Legal basis for data processing
The legal basis for the processing of data transmitted in the course of sending the contact form and your inquiry is Art. 6 (1) lit. b DS-GVO with reference to the implementation of pre-contractual measures or the conclusion of a contract.
7.3. Purpose of data processing
The processing of the personal data from the input mask serves us to process the request. The other log data pro- cessed during the submission process serves to prevent misuse of the contact form and to ensure the security of our information technology systems.
7.4. Duration of storage
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. The personal data from the input mask of the contact form, which are collected for the establishment and implementation of a con- tractual relationship, are stored until the fulfillment of the contract and then deleted, unless we are obliged to store them for a longer period in accordance with Art. 6 para. 1 lit. c DS-GVO, e.g. due to tax and commercial law retention and documentation obligations, or the user has consented to storage beyond this in accordance with Art. 6 para. 1 lit. a DS-GVO.
The log data additionally collected during the sending process will be deleted after a period of seven days at the latest.
7.5. Possibility of objection and removal
The user has the option to object to the processing of personal data at any time. In such a case, however, no contrac- tual relationship can be established.
Please send the objection by e-mail to email@example.com.
All personal data stored in the course of contacting us will be deleted in this case.
8. SSL Encryption
Within our internet presence, the transmission of all data, e.g. that you enter in our forms, is SSL encrypted. SSL is the abbreviation for “Secure Socket Layer”.
9. Rights of the data subject
You have the right to information about the personal data processed by you according to Art. 15 of the DS-GVO, the right to rectification according to Art. 16 of the DS-GVO, the right to erasure according to Art. 17 of the DS-GVO, the right to restriction of processing according to Art. 18 of the DS-GVO, the right to data portability according to Art. 20 of the DS-GVO as well as the right to object to processing based on Art. 21 of the DS-GVO.
If you have given us consent to process your personal data for one or more purposes in accordance with Art. 6(1)(a) and/or Art. 9(2)(a) of the DS-GVO, you may revoke this consent at any time. The lawfulness of the processing up to the time of the revocation remains unaffected. In the event of a revocation, we will no longer process your personal data unless we can demonstrate compelling legitimate interests for the processing which override your interests, rights and freedoms, or the processing serves the purpose of asserting, exercising or defending legal claims.
If you believe that the processing of your personal data violates the GDPR, you have the right to lodge a complaint with a supervisory authority pursuant to Article 77 of the GDPR. In North Rhine- Westphalia, the competent supervi- sory authority is: State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia, P.O. Box 20 04 44, 40102 Düsseldorf, Tel.: 0211/38424-0, Fax: 0211/38424-10, E- Mail: firstname.lastname@example.org
Please contact Dina Knorr directly regarding your data protection rights at email@example.com or at the contact options listed above.
10. modification of our data protection provisions