Source: https://fkt-gmbh.de/datenschutz/?lang=en
Timestamp: 2019-04-18 12:47:42+00:00

Document:
“Personal data” means any information relating to an identified or identifiable natural person (hereinafter referred to as the “data subject”). An identifiable natural person is one who can be identified, either directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
“Recipient” means a natural or legal person, public authority, agency or another body, to which the personal data are disclosed, whether a third party or not. However, public authorities which may receive personal data within the framework of a particular enquiry in accordance with Union or Member State law shall not be regarded as recipients.
“Consent” of the data subject means any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he/she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him/her.
Whenever the website of FKT Faßbender GmbH is accessed by a data subject or automated system, it collects a series of general data and information. These general data and information are stored in server log files.
(8) Further similar data and information that serve to avert any dangers from attacks on our IT systems.
When using these general data and information, FKT Faßbender GmbH does not make any conclusions about the data subject. This information is rather necessary for the correct display of our website contents.
The data subject may register on the controller’s website. This process involves the disclosure of personal data. The type of personal data that will be transferred to the controller during this process depends on the respective input mask for registration. The personal data submitted by the data subject will be collected and saved by the controller exclusively for the controller’s own internal purposes. The controller may arrange for these data to be disclosed to one or several processors, e.g. to a parcel service provider. Again, such processors will use these personal data exclusively for internal purposes which are attributable to the controller.
The IP address assigned by the data subject’s internet service provider (ISP) as well as the registration date and time will also be saved when registering on the controller’s website. These data are saved in view of the fact that this is the only way to protect our services against misuse. If necessary, these data can help investigate any offences committed.
In this respect, it is required to store these data for the purpose of protecting the controller. Unless required by law or for law enforcement purposes, these data will not be transferred to third parties.
Data subject registrations based on the voluntary disclosure of personal data help the controller offer the data subject contents or services which, due to their nature, can only be offered to registered users. Registered persons have the possibility to change the personal data submitted during the registration at any time or to have them completely erased from the controller’s database.
Upon request, the controller will inform the data subject about the saved personal data concerning him/her. If requested by the data subject, the controller will rectify or – provided that there are no contradicting statutory retention requirements – erase the personal data. In the event of any related questions, the data subject may always get in touch with any of the controller’s employees.
Due to statutory provisions, FKT Faßbender GmbH’s website contains information that allows users to contact our company electronically and to get in touch with us directly. This information also includes a general email address. If a data subject contacts the controller by email or using a contact form provided on the website, the data subject’s personal data submitted in this context will be saved automatically. Such personal data submitted by the data subject on a voluntary basis will be used for processing purposes or for getting in touch with the data subject; they will not be forwarded to third parties.
Apart from saving and processing the data subject’s personal data for the period of time required for achieving the storage purpose, the controller will also save and process them for the period of time stipulated by any laws and provisions of the European legislator/regulator or another legislature which the controller is subject to.
If it is no longer required to store the data, or if a storage period stipulated by the European legislator/regulator or another legislature expires, the personal data will be blocked or erased as a matter of routine and in compliance with the statutory provisions.
As stipulated by the European legislator/regulator, every data subject shall have the right to obtain from the controller confirmation as to whether or not data relating to him/her are being processed. If a data subject wishes to make use of his/her right of confirmation, he/she may always get in touch with any of the controller’s employees.
– the recipients or categories of recipients to whom personal data have been or will be disclosed. This applies in particular where recipients are from third countries or international organisations.
– the right to file a complaint with a supervisory authority.
– the existence of automated decision-making, including profiling pursuant to Article 22 Sec. 1 and 4 GDPR and – at least in those cases – meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.
Moreover, the data subject shall be entitled to obtain information as to whether his/her personal data have been transferred to a third country or international organisation. If so, the data subject shall also be entitled to obtain information about the appropriate guarantees given in connection with the transfer. If a data subject wishes to make use of his/her right of access, he/she may always get in touch with any of the controller’s employees.
As stipulated by the European legislator/regulator, every data subject shall have the right to obtain from the controller without undue delay the rectification of inaccurate personal data concerning him/her. Taking into account the purposes of the processing, the data subject shall have the right to have incomplete personal data completed, including by means of providing a supplementary statement. If a data subject wishes to make use of his/her right to rectification, he/she may always get in touch with any of the controller’s employees.
– the data subject withdraws consent on which the processing is based according to Art. 6 Sec. 1 lit. a GDPR or Art. 9 Sec. 2 lit. a GDPR, and there is no other legal ground for the processing.
– the personal data have been collected in relation to the offer of information society services referred to in Art. 8 Sec. 1 GDPR.
Where one of the aforementioned grounds applies and a data subject wishes to have his/her personal data stored with FKT Faßbender GmbH erased, he/she may always get in touch with any of the controller’s employees, who will make sure that the request for erasure will be implemented without delay.
Where FKT Faßbender GmbH has made the personal data public and is obliged to erase the personal data as the controller according to Art. 17 Sec. 1 GDPR, our company, taking into account the available technology and the cost of implementation, shall take reasonable steps, including technical measures, to inform other controllers which are processing the disclosed personal data that the data subject has requested the erasure by such controllers of any links to, or copy or replication of, those personal data.
– the data subject has objected to processing pursuant to Art. 21 Sec. 1 GDPR pending the verification whether the legitimate grounds of the controller override those of the data subject. Where one of the aforementioned conditions is met and a data subject wishes to have the processing of his/her personal data stored with FKT Faßbender GmbH restricted, he/she may always get in touch with any of the controller’s employees, who will make sure that the processing will be restricted.
– the processing is based on consent pursuant to Art. 6 Sec. 1 lit. a or Art. 9 Sec. 2 lit. a GDPR or on a contract pursuant to Art. 6 Sec. 1 lit. b GDPR, and the processing is carried out by automated means, provided that the processing is not required for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
In exercising his/her right to data portability pursuant to Art. 20 Sec. 1 GDPR, the data subject shall moreover have the right to have the personal data transmitted directly from one controller to another, where this is technically feasible and does not affect the rights and freedoms of other persons.
In order to make use of his/her right to data portability, the data subject may always get in touch with any of the controller’s employees.
As stipulated by the European legislator/regulator, every data subject shall have the right to object, on grounds relating to his/her particular situation, at any time to the processing of the personal data concerning him/her, where the processing is based on Art. 6 Sec. 1 lit. e or f GDPR. This shall also apply to profiling based on those provisions.
In the event of objection, FKT Faßbender GmbH will no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or unless the processing serves the establishment, exercise or defence of legal claims.
Where FKT Faßbender GmbH processes personal data for the purpose of direct marketing, the data subject shall have the right to object to the processing of his/her personal data for such promotional purposes. The same applies to profiling, provided that it occurs in connection with such direct marketing activities. If the data subject objects to FKT Faßbender GmbH’s processing of his/her personal data for direct marketing purposes, FKT Faßbender GmbH will no longer process the personal data for these purposes.
Where personal data are processed for scientific or historical research purposes or statistical purposes pursuant to Art. 89 Sec. 1 GDPR, the data subject, on grounds relating to his or her particular situation, shall have the right to object to the processing of his/her personal data, unless the processing is necessary for the performance of a task carried out for reasons of public interest.
In order to make use of his/her right to objection, the data subject may always get in touch with any of FKT Faßbender GmbH’s employees or any other employee. In the context of the use of information society services, and notwithstanding Directive 2002/58/EC, the data subject may furthermore exercise his/her right to object by automated means using technical specifications.
(2) is authorised by Union or Member State law to which the controller is subject and which also lays down suitable measures to safeguard the data subject’s rights and freedoms and legitimate interests or (3) is based on the data subject’s explicit consent.
Where the decision (1) is necessary for entering into, or performance of, a contract between the data subject and the controller or (2) made with the explicit consent of the data subject, FKT Faßbender GmbH will implement appropriate measures to safeguard the data subject’s rights and freedoms and legitimate interests, which shall at least include the right to obtain human intervention on the part of the controller, to express his/her point of view and to contest the decision.
In order to make use of his/her right relating to automated decision-making, the data subject may always get in touch with any of the controller’s employees.
As stipulated by the European legislator/regulator, every data subject shall have the right to withdraw his/her consent at any time.
In order to make use of his/her right to withdraw his/her consent, the data subject may always get in touch with any of the controller’s employees.
Art. 6 I lit. a GDPR serves as the legal basis for our company’s data processing activities which are subject to consent to a certain processing purpose. Where processing is necessary for performance of a contract to which the data subject is a contracting party, as is the case, for example, with processing activities required for the delivery of goods or the rendering of another service or consideration, processing is based on Art. 6 I lit. b GDPR. The same shall apply to processing activities required for the implementation of pre-contractual measures, for example in case of enquiries concerning our products or services. Where our company is subject to a statutory obligation that requires processing of personal data, as is the case when it comes to compliance with tax obligations, processing is based on Art. 6 I lit. c GDPR. In rare cases, the processing of personal data might become necessary to safeguard vital interests of the data subject or another natural person. This would be the case, for example, if a visitor gets injured in our premises, whereupon his/her name, age, health insurance details or other vital information would have to be disclosed to a physician, hospital or another third party. In this case, processing would be based on Art. 6 I lit. d GDPR. Last but not least, processing activities can be based on Art. 6 I lit. f GDPR. This legal basis applies to processing activities that do not fall within the scope of the aforementioned legal bases, where processing is necessary to safeguard a legitimate interest of our company or a third party, provided that the interests, fundamental rights and fundamental freedoms of the data subject are not overriding. We are entitled to perform such processing activities, because they have been emphasised by the European legislator, who has argued that a legitimate interest can be assumed to exist where the data subject is a customer of the controller (Recital 47 Sentence 2 GDPR).
Where personal data processing is based on Art. 6 I lit. f GDPR, our legitimate interest shall be the performance of our business activity in favour of our employees’ and shareholders’ well-being.
The criterion for determining the storage period of personal data shall be the applicable statutory retention period. Upon expiry of this period, the data concerned will be erased as a matter of routine, provided that they are no longer necessary for contract fulfilment or initiation.
We would like to inform you that the provision of personal data is, to a certain extent, required by law (e.g. tax regulations) or necessary due to contractual regulations (e.g. information about the contracting party). Amongst other things, a data subject might be required to disclose personal data which must subsequently be processed by us. The data subject must disclose personal data, for example, when he/she enters into a contract with our company. Failure to provide personal data would result in the fact that the contract cannot be entered into with the data subject. Prior to disclosing any personal data, the data subject must get in touch with one of our employees. Our employee will inform the data subject, on a case-by-case basis, as to whether the provision of personal data is required by law or by the respective contract or necessary for entering into the contract, as to whether there is any obligation to disclose personal data and about the possible consequences of not disclosing personal data.
A responsible company, we abstain from automated decision-making or profiling.

References: Art. 6
 Art. 9
 Art. 8
 Art. 17
 Art. 21
 Art. 6
 Art. 9
 Art. 6
 Art. 20
 Art. 6
 Art. 89

Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6