Data Security
In the following, we will inform you about the type, scope and purpose of the processing of personal data by our company in accordance with the legal requirements of data protection law (in particular in accordance with BDSG n.F. and the European Data Protection Basic Regulation ‘DS-GVO’). This data protection declaration also applies to our websites and social media profiles. With regard to the definition of terms such as “personal data” or “processing” we refer to Art. 4 DS-GVO.
Name and contact data of the responsible person(s)
Our responsible person(s) (hereinafter “responsible person”) within the meaning of Art. 4 fig. 7 DS-GVO is:
Data types, purposes of processing and categories of data subjects
Below we inform you about the type, scope and purpose of the collection, processing and use of personal data.
1. types of data that we process
Inventory data (name, address etc.), contact data (telephone number, e-mail, fax etc.), contract data (subject of the contract, duration etc.),
2. purposes of processing pursuant to Art. 13 para. 1 c) DS-GVO
Processing of contracts, easy access to the website, fulfillment of contractual obligations, contact in the event of legal complaints by third parties, fulfillment of legal storage obligations, marketing / sales / advertising, avoidance of SPAM and abuse, security measures, uninterrupted, secure operation of our website,
3. categories of data subjects pursuant to Art. 13 para. 1 e) DS-GVO
Visitors/users of the website, customers, interested parties,
The data subjects are collectively referred to as “users”.
Legal basis for the processing of personal data
In the following we inform you about the legal basis of the processing of personal data:
If we have obtained your consent for the processing of personal data, Art. 6 Para. 1 S. 1 lit. a) DS-GVO is the legal basis.
If the processing is necessary for the fulfilment of a contract or for the implementation of pre-contractual measures, which take place at your request, Art. 6 Para. 1 S. 1 lit. b) DS-GVO is the legal basis.
If the processing is necessary to fulfil a legal obligation to which we are subject (e.g. legal storage obligations), Art. 6 para. 1 sentence 1 lit. c) DS-GVO is the legal basis.
If the processing is necessary to protect the vital interests of the data subject or another natural person, Art. 6 para. 1 sentence 1 lit. d) DS-GVO is the legal basis.
If processing is necessary to safeguard our interests or the legitimate interests of a third party and your interests or fundamental rights and freedoms do not prevail in this respect, Art. 6 para. 1 sentence 1 lit. f) DS-GVO is the legal basis.
Disclosure of personal data to third parties and contract processors
Without your consent we do not pass on any data to third parties. Should this nevertheless be the case, then the passing on takes place on the basis of the aforementioned legal bases, e.g. with the passing on of data to on-line payment offerers for the fulfilment of contract or due to judicial arrangement or due to a legal obligation to the publication of the data for the purpose of the criminal prosecution, to the danger defence or to the penetration of the rights at the mental property.
We also use contract processors (external service providers, e.g. for the web hosting of our websites and databases) to process your data. If data is passed on to contract processors within the framework of an agreement on order processing, this is always done in accordance with Art. 28 DS-GVO. We select our contract processors carefully, check them regularly and have been granted the right to issue instructions with regard to the data. In addition, the contract processors must have taken appropriate technical and organisational measures and comply with the data protection regulations according to BDSG n.F. and DS-GVO.
Transfer of data to third countries
The adoption of the European Data Protection Basic Regulation (DS-GVO) created a uniform basis for data protection in Europe. Your data will therefore mainly be processed by companies for which the DS-GVO applies. Should processing by third parties take place outside the European Union or the European Economic Area, they must comply with the special requirements of Art. 44 et seq. of the Data Protection Act. DS-GVO. This means that the processing takes place on the basis of special guarantees, such as the official recognition by the EU Commission of a data protection level corresponding to the EU or the observance of officially recognised special contractual obligations, the so-called “standard contractual clauses”. For US companies, submission to the so-called “Privacy Shield”, the data protection agreement between the EU and the USA, fulfils these requirements.
Deletion of data and storage period
Unless specified in