Information on data protection for our website visitors
Information on data protection for our website visitors
We, <STEPHAN Machinery GmbH, Stephanplatz 2, 31789, Hameln, +49 5151 583-0, email@example.com> would like to explain to you hereinafter what data we process from you. In case of any queries regarding data protection, please contact our Data Protection Officer at firstname.lastname@example.org.
Purpose, legal basis, categories of recipients, storage period of data processing
The purpose of processing data on this website is information about products and services of our company, associated with the option for users to make contact with the in-house contact persons.
Apart from that, we process personal data according to the following legal bases:
- Art. 6 Section 1 lit. a GDPR for processing personal data with the consent of the data subject.
- Art. 6 Section 1 lit. b GDPR for the required processing of personal data for performance of a contract concluded with the data subject as well as for performing the appropriate pre-contractual measures.
- Art. 6 Section 1 lit. c GDPR for the required processing of personal data for compliance with a legal obligation to which we are subject in accordance with the applicable law of the EU or in accordance with the applicable law of a country, wherein the GDPR applies partly or wholly.
- Art. 6 Section 1 lit. f GDPR for the required processing of personal data to maintain the legitimate interests pursued by us or by third parties, if the fundamental rights and freedoms of the data subject are not outweighed. Legitimate interests are particularly our business-management interests to be able to provide our website, information security, implementation of own legal claims and the compliance of other legal provisions.
For this purpose, we use secrecy and duty-based service providers as a part of the provision of a service. A transfer to authorities will only take place if the legal provisions are in place.
When you visit the website, a connection is established with your browser. The information collected below is temporarily stored in system files and automatically documented: IP address of your device, date and time of access, name and URL of the opened files, website from which access was made or from which you were directed to our website (Referrer-URL), the browser used and where necessary, the operating system of your device and the name of your provider.
The data stated above is processed by us to ensure a smooth connection and for the safety of the system. The arising connection data is automatically deleted, after a maximum 60 days as a rule. If the website is misused, then log-data, which must be preserved further as evidence, is abolished until the incident is clarified.
We use Google Maps for embedding cards and YouTube for embedding videos (legal basis according to GDPR: Art. 6 Section 1 lit. f with the operation of our website and the inclusion of interests of the data subject by deactivating the tracking functions in YouTube-Code). Google LLC in the USA is obligated to ensure appropriate data protection in accordance with the American-European Privacy Shield. Refer to the detailed Data Protection Declaration from Google for more information.
If you have declared your consent, Google Analytics will be used on this website, which is a web-analysis service of Google Inc. The use includes the operating mode. It is thus possible to allocate data, meetings and interactions across multiple devices to a pseudonymous User ID and to analyse the activities of a user across devices. This statement on data protection is provided by www.intersoft-consulting.de at www.intersoft-consulting.de.
Purpose of processing: Google will use this information on behalf of the operator of this website to evaluate your usage of the website, to assemble reports on the website activities and to provide other services associated with the use of the website and of the internet to the website operator. The legal basis for using Google Analytics is your consent according to https://dsgvo-gesetz.de/art-6-dsgvo/ Art. 6 Section 1 S.1 lit. a GDPR
Recipients / Categories of recipients: Google is the recipient of the collected data.
Transmission to third countries: The personal data is transmitted to USA under the EU-US Privacy Shield on the basis of an adequacy decision of the European Union. Refer to https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI for the certificate.
Duration of storing data: The data sent by us and data which is linked to cookies, user IDs or Advertising IDs are automatically deleted after 14 months. Data, the storage period for which is ended, is deleted automatically once a month.
Rights of the data subject: You can revoke your consent at all times with effect for the future by preventing the saving of cookies by activating the specific setting of your browser-software; we would like to point out to you that you cannot then make full use of all of the functions of this website.
Moreover, you can prevent the collection of data generated by the cookie and the data based on your usage of the website (incl. your IP address) by Google as well as the processing of this data by Google by downloading and installing the Browser-Add-On tools.google.com/dlpage/gaoptout. Opt-Out-Cookies prevent the future collection of your data when visiting this website. To prevent Universal Analytics from collecting across devices, you must opt-out on all systems you use.
Your right of Access, Right to Rectification, Deletion, Objection and Data Portability
You can exercise your right of access, rectification and deletion of data at all times. Simply contact us using the means given above. If you want to delete data, but we are still legally obligated to keep the data, access to your data will be restricted (blocked). The same applies to an objection. You can exercise your right to data portability if it is technically feasible for the recipient and for us.
Right to lodge a complaint
You can always lodge a complaint with a Data protection supervisory authority.
Data security/ Encryption
This website uses “Hypertext Transfer Protocol Secure” (https). The connection between your browser and our server is encrypted.
Up-to-dateness and change of this data protection declaration
We reserve the right to customise the content of this data protection regulation at all times. This is usually done when further developing or customising the used services. You can view the current Data protection de
claration on our website. Status of this declaration: 24.05.2018
(1) Responsible person, purpose and necessity of data processing
The data controller (STEPHAN Machinery, Stephanplatz 2, D-31789 Hameln, Germany) collects personal data (name, first name, address, contact details such as e-mail or telephone number, account details, data relating to the contracted services such as measurements, dimensions, drawings, plans, photographs, virtual representations and agreed contract terms) for the performance of the contract.
(2) Advertising and right of objection
The name, surname and address are also collected for advertising purposes (sending offers, information about additional services). The processing for advertising purposes can be
at any time contradicted under the following contact information: email@example.com
(3) Storage duration
After the performance of the contract, your personal data will be processed and stored for the purpose of statutory warranty, fulfillment of the warranty conditions, at the time of conclusion of the contract or at a later date desired execution of follow-up orders and for tax purposes according to the statutory Deadlines.
(4) Opposition to data storage
For the purpose of carrying out follow-up orders (from the point of view of the conclusion of the contract or at a later date), legitimate business interests are pursued from the point of view of data protection law for data processing according to the legal deadlines. You can object to this processing at any time using the following contact information: firstname.lastname@example.org
(5) Data deletion
At the latest after expiration of the above periods your personal data will be deleted.
(6) General data protection rights and the right of appeal to the supervisory authority
In accordance with the provisions of Art. 15 et seq. of the General Data Protection Regulation, you have the right of information about your personal data as well as rights to correction, deletion, limitation of processing, a right to object to processing and a right of data transferability against the STEPHAN Machinery.
If you believe that the processing of personal data concerning you is contrary to the General Data Protection Regulation, you have a right of complaining to the Data Protection Supervisory Authority ´Landesbeauftragte für das Datenschutz Niedersachsen´, Prinzenstraße 5, 30159 Hannover, email@example.com) and any other data protection supervisory authority.
We process data that we receive in the course of processing our business relationship with you. We receive the data directly from you when placing the order or processing the order
Specifically, we process for the performance of our services:
Master data for implementation and fulfillment of the service. (e.g., name and address, e-mail address, telephone number), data related to payment processing, correspondence (e.g., correspondence or e-mail traffic with you), and advertising and sales data (e.g., about new potentially interesting offers).
(8) Privacy Notice for Applicants
You have the opportunity to apply online at: firstname.lastname@example.org or by post at the company address (STEPHAN Machinery, Stephanplatz 2, 31789 Hameln) to one of the advertised positions or to send us an unsolicited application. Your application with your personal data will be accepted by the HR department and forwarded only to the department heads responsible for the advertised position or to the persons entrusted with processing the application procedure. The company requires employees who have access to personal information to keep it confidential and to protect its privacy in accordance with local laws and regulations. The legal basis for the described data processing are Article 6 (1) (b) of the General Data Protection Regulation and Article 26 (1) (1) of the BDSG (decision on the creation of an employment relationship). The company uses this personal information only as part of the recruitment process. A transfer to other companies outside the corporate group or use for other purposes is excluded.
An online application is transmitted over the Internet. Please note that this transmission method is not secure and that your data can be transmitted regardless of the location of the sender or recipient. Neither the Group Companies nor any of our third party service providers accepts any form of liability (whether for injury, loss or otherwise) to applicants for consequences of transferring their personal information over the Internet.
If you do not inform us otherwise, the data will be deleted 6 months after completing the application process or destroyed in postal applications.
You have the following rights, if the respective legal requirements are met: Right to information about your data stored by us; Correction, deletion, restriction of the processing of your data or objection to the processing, as well as on data portability.
Furthermore, you have of course at any time the opportunity to initiate the cancellation or destruction of all your application documents by sending us an e-mail to: email@example.com
For the purpose of protecting the company, the trade secrets and facilitating work processes, a video surveillance is installed at the location (STEPHAN Machinery, Stephanplatz 2, 31789 Hameln), which can be viewed by authorized persons during working hours. After the work has ended, the data is forwarded to an external security company, which stores the footage in a confidential and privacy-compliant manner, evaluates it and deletes it after a specified legal deadline.
May we evaluate your use of our website to improve our offer and capture your interests?
Stephan Machinery GmbH