Source: https://www.atr.de/en/meta-navigation/data-privacy/
Timestamp: 2019-04-20 00:25:16+00:00

Document:
The following data protection principles inform you about the collection, processing and use of personal data by the data controller within the scope of visiting this website.
Purpose of the data processing/ Legal basis: Any personal information you provide to us when filling out contact forms, by telephone or in e-mails will be treated confidentially. We use your data exclusively for the purpose of processing your enquiry. The legal basis for the data processing is art. 6 para. 1 f) GDPR. The justified interest on the part of ATR results from the interest to answer the enquiries sent by our customers and visitors to this website and to maintain and promote customer satisfaction.
Recipients/ Categories of recipients: We exclude any transfer of data to third parties outside the ATR group of companies. In exceptional cases, data is processed on our behalf by contract processors. These are carefully selected, audited by us and contractually bound pursuant to art. 28 GDPR. Furthermore, it may be necessary for us to pass on extracts of your enquiry to contractual partners (e.g. suppliers for product-specific enquiries) in order to process your enquiry. In these cases, however, the request will be anonymized beforehand so that the third party cannot establish any reference to you. If, in individual cases, the disclosure of your personal information should be necessary, we will inform you of this in advance and obtain your consent.
Storage duration/ Criteria for determining the storage duration: All the personal data that you provide to us in enquiries (suggestions, praise or criticism) via this website or by e-mail will be deleted or securely anonymized by us at the latest 90 days after the final reply has been given to you. The reason for the storage period of 90 days is that, occasionally, you as a customer may contact us again about the same matter after a reply has been sent out and we must then be able to refer to the previous correspondence. Experience has shown that, as a rule, after 90 days there are no more questions relating to our replies.
Authorized persons may use the Extranet for shareholders and business partners on this website.
Purpose of the data processing/ Legal basis: We need an e-mail address to create the access. Your e-mail address is used solely as a user name for the use of and login into our website www.atr.de.
The legal basis for the data processing within the scope of the use of the Extranet by you is art. 6 para. 1 f) GDPR. The justified interest on the part of ATR results from the interest in being able to provide the business partner with the desired and necessary information required for the partnership.
Processing of your access data beyond this purpose will not take place without your consent.
Recipients/ Categories of recipients: Within the ATR group of companies, the data of your Extranet account can only be used by the responsible departments for the technical administration of the Extranet accounts. Transfer to third parties outside of ATR does not take place.
Storage duration/ Criteria for determining the storage duration: Your Extranet account will generally remain stored indefinitely unless you delete your account, your partnership with ATR ends or you request us to delete it. The data will then be removed from our system if there are no retention periods or if the data is not still required in individual cases (for example, in the case of open claims to collect the claims).
Purpose of the data processing/ Legal basis: On our website, you can take part in various ATR competitions. Unless otherwise stipulated in the specific data protection principles of the respective competition or unless you have given us further express consent, the personal details you provide to us in connection with participation in the competition will be used exclusively for the purpose of processing the competition (determining the winner, notifying the winner, sending the prize). The legal basis for the data processing within the framework of competitions is, should you participate, article 6 para. 1 f) GDPR. The justified interest on the part of ATR results from the interest in being able to carry out the promoted competition.
In the event of the submission of a declaration of consent going beyond this in the context of a competition, art. 6 para. 1 a) GDPR is the legal basis for data processing based on the consent. If you have given your consent in the context of a raffle, you can revoke this consent at any time with effect for the future. In such cases, further details are set out in the specific data protection principles of the competition concerned.
Recipients/ Categories of recipients: The data collected for competition purposes is generally only accessible by the department within the ATR group of companies that carried out the specific competition. The data will only be passed on to third parties if this is absolutely necessary for the execution of the competition or the sending of the prize (e.g. prize dispatch by the sponsor of a competition) or if you have given us express permission to do so.
Storage duration/ Criteria for determining the storage duration: After the end of the competition and the announcement of the winners, the data of the participants will be deleted. The data of the winners will be kept for the duration of the statutory warranty claims in the case of material prizes, in order to arrange for rectification or exchange in the event of a defect in the prize.
The following subsections inform you about the individual purposes of the various cookies that may be used.
When you log into our website in the Extranet, a cookie is set on your device.
These cookies are standard TYPO3 session cookies. With a user login, each cookie stores the session ID with which the logged-in user is recognized and granted access to protected areas. The cookies are deleted at the end of the browser session and do not remain on your computer. If you leave our pages, the temporary cookie is also discarded (session cookies).
The legal basis for this data processing is art. 6 para. 1 f) GDPR. The justified interest results from the interest in offering you a particularly user-friendly and transparent website.
Session cookies are deleted after the end of your Internet session (closure of the browser). Permanent cookies remain stored in your browser until they are manually deleted by you.
We store the IP address transmitted by your web browser, strictly for the purpose intended, for the duration of seven days in order to be able to recognize, limit and eliminate attacks on our website. After this period has expired, we delete or anonymize the IP address.
The legal basis for this and for the processing of the following usage data is art. 6 para. 1 sentence 1 lit. f GDPR.
- the description of the type of web browser used.
This information is used exclusively for the purpose of providing our services, and in no way allows conclusions to be drawn about you as a person.
An evaluation of the data takes place exclusively in anonymous form. At the point where hypothetical conclusions about your person would be possible, e.g. with an IP address, we must ensure that a reference back to you personally is impossible.
Without your express consent, we will not use tracking tools to collect unsolicited personal information about you, to share such information with third parties and marketing platforms, or to associate the information with your personal information (name, address, etc.).
We take technical and organizational security measures in order to protect your data from unwanted access as comprehensively as possible. In addition to securing the operating environment, we use encryption procedures. The information you provide is transmitted in encrypted form using an SSL protocol (Secure Socket Layer) and authenticated to prevent misuse of the data by third parties. You can recognize this by the fact that the lock symbol in the status bar of your browser is closed and the address bar begins with "https...".
Google Maps is used in order to ensure our online offers are presented in an appealing way and in order to ensure that the places indicated by us on the website can be easily located. This constitutes a legitimate interest within the meaning of art. 6 para. 1 lit. f GDPR.
You can apply for positions advertised by us via our website. You yourself determine the scope of the data that you wish to transmit to us as part of your online application. We process your personal data according to the valid data protection regulations on the basis of section 26 of the latest version of the Federal Data Protection Act (BDSG). We process the data that you disclose to us within the scope of your online application exclusively for the purpose of applicant selection. Data processing for other purposes does not take place.
You yourself determine the scope of the data that you wish to transmit to us as part of your application. Depending on how you sent your application to us, applications will be submitted electronically or as reference files to our personnel department, where they will be processed as quickly as possible. The electronic transmission of applications is always encrypted. As a rule, applications are forwarded to the relevant department. No other forwarding of your data takes place. Your data will be treated confidentially in our company. If your application is unsuccessful, your documents will be deleted after [3 months].
In the event that we also wish to consider your application for other or future job advertisements, we will obtain your corresponding consent. We will then process your data on the basis of art. 6 para. 1 sentence 1 lit. a GDPR.
Pursuant to art. 15 para. 1 GDPR, you have the right to request information free of charge on the personal data stored by ATR about you.
In addition, you have a right to correction (art. 16 GDPR), deletion (art. 17 GDPR) and restriction of the processing (art. 18 GDPR) of your personal data if the legal requirements are met.
If the data processing is based on art. 6 para. 1 e) or f) GDPR, you have the right to object according to art. 21 GDPR. If you object to the data processing, this will not take place in the future, unless the data controller can prove compelling reasons worthy of protection for the further processing which outweigh the interest of the data subject in objecting.
If you have provided the processed data yourself, you have the right to data transfer in accordance with art. 20 GDPR.
If the data processing is based on consent pursuant to art. 6 para. 1 a) or art. 9 para. 2 a) GDPR, you may revoke the consent at any time with effect for the future without affecting the legality of the previous processing.
Please contact the data protection officer in writing or by e-mail in the aforementioned cases, for open questions or in the event of complaints.
In addition, you have the right to complain to a data protection supervisory authority. The data protection supervisory authority of the federal state in which you live or in which the data controller is based is responsible.
We take the protection of your personal data very seriously and endeavour to give you comprehensive information about the way in which your personal data is processed. The following data protection information applies to you if you contact us, if contract negotiations take place with us and/or if contractual agreements exist with us and the data of natural persons is processed in connection with these. In particular, the EU General Data Protection Regulation (GDPR) and the Federal Data Protection Act serve as the legal basis. Which data is actually processed largely depends on the agreed services. Therefore, not all parts of this information will be relevant to you.
How do we collect your personal data and which data categories do we use?
We essentially collect your data from you.
However, it may also be necessary to process personal data that we receive from other companies, authorities or other third parties, such as credit agencies, tax offices or similar.
Relevant personal data can include: personal data (e.g. first/last name, address and other contact data, date and place of birth and nationality), identification and authentication data (e.g. extracts from the commercial register, identity-card data, specimen signature), data within the scope of our business relationship (e.g. payment data, data on orders), creditworthiness data, data on company structures and ownership as well as other data comparable with the aforementioned categories.
You always have the choice whether to communicate with us by e-mail or post. Communication by e-mail may be unencrypted for technical reasons.
The purposes of the data processing result from the execution of pre-contractual measures, which precede a contractually regulated business relationship and in the fulfilment of the obligations from the concluded contract.
The purposes of the data processing result in individual cases from statutory requirements. These statutory obligations include, for example, the fulfilment of storage and identification obligations, e.g. as part of the regulations for the prevention of money laundering, tax control and reporting obligations, and the data processing required as a result of enquiries from authorities.
It may be necessary to process the personal data provided by you beyond the actual fulfilment of the contract. The legitimate interests here are in particular the selection of suitable business partners, assertion of legal claims, defence against liability claims, access or access controls, clarification of possible compliance violations, prevention of criminal offences and the settlement of damages resulting from the business relationship.
We use the credit rating data of the credit agencies to check creditworthiness. The credit agencies store data that they receive from banks or companies, for example, and this data includes in particular: surname, first name, date of birth, address and information on payment behaviour. Information on the data stored by you can be obtained directly from the credit agencies.
Who receives the personal data provided by you?
Within our company, the areas that need the data provided by you to fulfil their contractual or legal obligations or to fulfil their legitimate interests are given access to it. As part of the contractual relationship, we also commission contract processors or service providers who may have access to your personal data. Compliance with data protection regulations is contractually ensured.The data may also be transferred to companies within the ATR group of companies in order to fulfil contractual obligations.
Personal data will be kept for as long as is necessary to fulfil the above-mentioned purposes. In particular, the statutory storage obligations from the German Commercial Code (HGB) and the Fiscal Code (AO), which provide for storage for up to twelve years, are relevant here.
Are you obliged to provide the data?
As part of our business relationship, you must provide us with the personal data necessary to establish, conduct and terminate a business relationship and to perform the duties associated therewith, which we are required to collect by law or have the right to do so in our legitimate interests. Without this data, we will usually not be able to enter into a business relationship with you.
If we transfer personal data to recipients outside the European Economic Area (EEA), this transfer will only take place if the third country has been confirmed by the EU Commission as having an adequate level of data protection, if an adequate level of data protection has been agreed with the data recipient (e.g. by means of EU standard contract clauses) or if we have received your consent to do so.
You have the right, upon request and free of charge, to receive information about your personal data stored by us. In addition, you have a right to the correction and deletion of this personal data, a right to data transferability and a right to restriction of processing in accordance with the statutory provisions. If we process your personal data on the basis of your consent, you have the right to at any time revoke this consent with effect for the future. If data is collected on the basis of art. 6 para. 1 page 1 letter e (data processing for the fulfilment of official tasks or the protection of the public interest) or letter f (data processing for the safeguarding of legitimate interests), the data subject shall have the right to object to the processing at any time for reasons arising from their particular situation. We will then no longer process the personal data unless there are verifiable compelling legitimate grounds for processing which outweigh the interests, rights and freedoms of the data subject, or the processing serves the assertion, exercise or defence of legal claims. In such cases, please contact us in writing or by e-mail at the following address: datenschutz@atr.de.
The responsible body is the company with which you are initiating or conducting a business relationship.

References: art. 6
 art. 28
 art. 6
 art. 6
 art. 6
 art. 6
 art. 6
 art. 6
 art. 15
 art. 6
 art. 21
 art. 20
 art. 6
 art. 9
 art. 6