Source: http://atrimex.com/start.php?action=OA==
Timestamp: 2019-04-20 08:29:07+00:00

Document:
We, the Atrimex GmbH, respect the privacy of the persons who use our offer and our website. We process data on the basis of data protection regulations at any time with care and sense of responsibility in compliance with the relevant data protection regulations and give below a brief overview how we handling personal information.
- Basic data (e.g., names, addresses).
- Content data (e.g. test inputs, photographs, videos).
- User data (e.g., websites visited, interest in content, access times).
- Meta / Communication data (e.g. hardware information, IP addresses).
Interested parties, customers and visitors of the website www.atrimex.com and users of our offer. (In the following, we refer to the affected persons as "users").
- Provision of our offer.
"Personal data" means any information relating to an identified or identifiable natural person (hereinafter the "affected person"); a natural person considered as identifiable, which can be identified directly or indirectly, in particular by means of assignment to an identifier such as a name, to an identification number, to location data, to an online identifier (e.g. Cookie) or to one or more special features, being image of the physical, physiological, genetic, physical, economic, cultural or social identity of this natural person.
"Processing" means any process performed with or without the help of automated procedures, or any such process associated with personal data. The term covers a wide range and comprises practically every handling of data.
"Pseudonymisation" means the processing of personal data in such a way that the personal data can no longer be assigned to a specific affected person without additional information being provided, provided such additional information is kept separate and subject to technical and organizational measures to ensure that the personal data cannot be assigned to an identified or identifiable natural person.
"Profiling" means any kind of automated processing of personal data which involves the use of such personal data to evaluate certain personal aspects relating to a natural person, in particular aspects relating to work performance, economic situation, health, to analyze or predict personal preferences, interests, reliability, behavior, location or change of location of this natural person.
'Party Responsible' means the natural or legal person, public authority, body or other party which, alone or together with others, decides on the purposes and means of processing personal data.
'(Commissioned) Data Processor' means a natural or legal person, public authority, body or party that processes personal data on behalf of the controller.
In accordance with Art. 13 DSGVO, we inform you about the legal basis of our data processing.
As far as the legal basis in the Data Protection Declaration is not mentioned, the following applies: The legal basis for obtaining consent is Article 6 (1) lit. a and Art. 7 DSVGO, the legal basis for the processing for performance of our services and the execution of contractual measures as well as reply to inquiries is Art. 6 (1) lit. b DSGVO, the legal basis for processing in order to fulfill our legal obligations is Art. 6 (1) lit. c DSGVO, and the legal basis for processing in order to safeguard our legitimate interests is Article 6 (1) lit. f DSGVO.
In the event that vital interests of the effected person or another natural person require the processing of personal data, Art. 6 (1) lit. d DSGVO is the legal basis.
If, in the context of our processing, we disclose data to other persons and companies ( (Commissioned) Data Processors or third parties), transmit them or otherwise grant access to the data, this is done only on the basis of a legal permission (eg if a data transmission to third parties like payment service providers is required for performance according to Art. 6 (1) (b) DSGVO), your agreement, required by a legal obligation ,or on the basis of our legitimate interests (e.g. the use of agents, webhosts, etc.).
Insofar as we mandate third parties to process data it is on the basis of a so-called "(Commissioned) Processing Contract”, based on Art. 28 DSGVO.
If we process data in a third country (e g. outside the European Union (EU) or the European Economic Area (EEA)) or in the context of the use of third party services or disclosure resp. transmission of data to third parties, this will only be done if it is to fulfill our (pre) contractual obligations, on the basis of your consent, on the basis of a legal obligation or on the basis of our legitimate interests. Subject to legal or contractual permissions, we process or have the data processed in a third country only in case of the special requirements of Art. 44 et seq. DSGVO. That means the processing is carried out e.g. on the basis of specific guarantees, such as the official recognition of data protection (e.g. for the USA by the “Privacy Shield”) or in compliance with officially recognized special contractual obligations (so-called "standard contractual clauses").
• Right for information (Article 15 DSGVO).
You have the right to repeal your consent according to. Art. 7 (3) DSGVO with effect for the future.
The data processed by us are deleted or limited in their processing in accordance with Articles 17 and 18 DSGVO.
Provided not explicitly stated in this Data Protection Declaration, the data stored by us will be deleted as soon as they are no longer necessary for their intended purpose and the deletion does not conflict with any legal record-keeping requirements.
Provided the data is not deleted because it is required for other and legally permitted purposes, its processing will be limited. This applies for example for data that must be kept due to legal commercial or tax reasons.
- Contract data (e.g. subject of the contract, duration, customer category).
- Payment data (e.g., bank details, payment history) by our customers, interested parties and business partners for the purpose of providing contractual services, service and customer care, marketing, advertising and market research.
We process data in the context of administrative tasks and organization of our business, financial accounting and compliance with legal obligations, such as archiving. In doing so, we process the same data that we process in the course of performing our contractual services. The processing principles are Art. 6 (1) lit. c. DSGVO, Art. 6 (1) lit. f. DSGVO. The processing affects customers, interested parties, business partners and website visitors. The purpose and interest in processing lies in administration, financial accounting, office organization, data archiving, thus tasks that serve to maintain our business, perform our duties and provide our services. The deletion of the data, in terms of contractual services and contractual communication, corresponds to the information provided with these processing activities.
We disclose or transmit data to the financial administration, consultants, such as accountants or auditors as well as other billing centers and payment service providers.
Furthermore, based on our business interests, we store information about suppliers, promoters and other business partners, e.g. for later contact. We generally store this mainly company-related data permanently.
When contacting us (for example, by contact form, e-mail, telephone or via social media), the details of the user are processed for handling and processing the contact request in accordance with. Art. 6 (1) lit. b) DSGVO. User information can be stored in a Customer Relationship Management System ('CRM System') or comparable request organization.
We delete the requests, if they are no longer required. Furthermore, the legal archiving obligations apply.
The hosting services we use are designed to provide the following services: infrastructure and platform services, computing capacity, storage and database services, e-mailing, security, and technical maintenance services we use to operate.
Based on our legitimate interest in an efficient and secure provision of our offer ((Commissioned) Data Processor Contract), we or our hosting provider collect data per Art 6 (1) lit. F. DSGVO and Art 28 DSGVO, about every access to the server on which this service is located (so-called server log files). The access data includes the name of the retrieved web page, file, date and time of retrieval, amount of data transferred, notification of successful retrieval, browser type and version, the user's operating system, referrer URL (the previously visited page), IP address and the requesting provider.
Logfile information is stored for security purposes (for example, to investigate abusive or fraudulent activities) for a maximum of 7 days and is then deleted. Data whose further retention is required for evidential purposes are excluded from the deletion until the final clarification of the incident.

References: Art. 13
 Art. 7
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 28
 Art. 44
 Art. 7
 Art. 6
 Art. 6
 Art. 6
 Art 6
 Art 28