Information on data protection for our website visitors
Information on data protection for our website visitors
We, <STEPHAN Machinery GmbH, Stephanplatz 2, 31789, Hameln, +49 5151 583-0, firstname.lastname@example.org> would like to explain to you hereinafter what data we process from you. In case of any queries regarding data protection, please contact our Data Protection Officer at email@example.com.
Purpose, legal basis, categories of recipients, storage period of data processing
The purpose of processing data on this website is information about products and services of our company, associated with the option for users to make contact with the in-house contact persons.
Apart from that, we process personal data according to the following legal bases:
- Art. 6 Section 1 lit. a GDPR for processing personal data with the consent of the data subject.
- Art. 6 Section 1 lit. b GDPR for the required processing of personal data for performance of a contract concluded with the data subject as well as for performing the appropriate pre-contractual measures.
- Art. 6 Section 1 lit. c GDPR for the required processing of personal data for compliance with a legal obligation to which we are subject in accordance with the applicable law of the EU or in accordance with the applicable law of a country, wherein the GDPR applies partly or wholly.
- Art. 6 Section 1 lit. f GDPR for the required processing of personal data to maintain the legitimate interests pursued by us or by third parties, if the fundamental rights and freedoms of the data subject are not outweighed. Legitimate interests are particularly our business-management interests to be able to provide our website, information security, implementation of own legal claims and the compliance of other legal provisions.
For this purpose, we use secrecy and duty-based service providers as a part of the provision of a service. A transfer to authorities will only take place if the legal provisions are in place.
When you visit the website, a connection is established with your browser. The information collected below is temporarily stored in system files and automatically documented: IP address of your device, date and time of access, name and URL of the opened files, website from which access was made or from which you were directed to our website (Referrer-URL), the browser used and where necessary, the operating system of your device and the name of your provider.
The data stated above is processed by us to ensure a smooth connection and for the safety of the system. The arising connection data is automatically deleted, after a maximum 60 days as a rule. If the website is misused, then log-data, which must be preserved further as evidence, is abolished until the incident is clarified.
We use Google Maps for embedding cards and YouTube for embedding videos (legal basis according to GDPR: Art. 6 Section 1 lit. f with the operation of our website and the inclusion of interests of the data subject by deactivating the tracking functions in YouTube-Code). Google LLC in the USA is obligated to ensure appropriate data protection in accordance with the American-European Privacy Shield. Refer to the detailed Data Protection Declaration from Google for more information.
If you have declared your consent, Google Analytics will be used on this website, which is a web-analysis service of Google Inc. The use includes the operating mode. It is thus possible to allocate data, meetings and interactions across multiple devices to a pseudonymous User ID and to analyse the activities of a user across devices. This statement on data protection is provided by www.intersoft-consulting.de at www.intersoft-consulting.de.
Purpose of processing: Google will use this information on behalf of the operator of this website to evaluate your usage of the website, to assemble reports on the website activities and to provide other services associated with the use of the website and of the internet to the website operator. The legal basis for using Google Analytics is your consent according to https://dsgvo-gesetz.de/art-6-dsgvo/ Art. 6 Section 1 S.1 lit. a GDPR
Recipients / Categories of recipients: Google is the recipient of the collected data.
Transmission to third countries: The personal data is transmitted to USA under the EU-US Privacy Shield on the basis of an adequacy decision of the European Union. Refer to https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI for the certificate.
Duration of storing data: The data sent by us and data which is linked to cookies, user IDs or Advertising IDs are automatically deleted after 14 months. Data, the storage period for which is ended, is deleted automatically once a month.
Rights of the data subject: You can revoke your consent at all times with effect for the future by preventing the saving of cookies by activating the specific setting of your browser-software; we would like to point out to you that you cannot then make full use of all of the functions of this website.
Moreover, you can prevent the collection of data generated by the cookie and the data based on your usage of the website (incl. your IP address) by Google as well as the processing of this data by Google by downloading and installing the Browser-Add-On tools.google.com/dlpage/gaoptout. Opt-Out-Cookies prevent the future collection of your data when visiting this website. To prevent Universal Analytics from collecting across devices, you must opt-out on all systems you use.
Your right of Access, Right to Rectification, Deletion, Objection and Data Portability
You can exercise your right of access, rectification and deletion of data at all times. Simply contact us using the means given above. If you want to delete data, but we are still legally obligated to keep the data, access to your data will be restricted (blocked). The same applies to an objection. You can exercise your right to data portability if it is technically feasible for the recipient and for us.
Right to lodge a complaint
You can always lodge a complaint with a Data protection supervisory authority.
Data security/ Encryption
This website uses “Hypertext Transfer Protocol Secure” (https). The connection between your browser and our server is encrypted.
Up-to-dateness and change of this data protection declaration
We reserve the right to customise the content of this data protection regulation at all times. This is usually done when further developing or customising the used services. You can view the current Data protection declaration on our website. Status of this declaration: 24.05.2018
May we evaluate your use of our website to improve our offer and capture your interests?
Stephan Machinery GmbH