Source: https://enagiceu.com/page/privacy-policy?lang=en
Timestamp: 2019-04-21 20:37:38+00:00

Document:
In principle, we collect and use personal data of our users only to the extent necessary to provide a functional website, our content and services. The collection and use of personal data of our users take place regularly only with the user’s consent. An exception applies to cases in which prior consent cannot be obtained for reasons of fact and the processing of the data is permitted by law.
Insofar as we obtain the consent of the data subject for the processing of personal data, Art. 6 para. 1 lit. a GDPR shall apply as the legal basis for the processing of personal data. For the processing of personal data necessary for the performance of a contract to which the data subject is a party, Art. 6 para. 1 lit. b GDPR is the legal basis. This also applies to processing operations that are necessary for carrying out pre-contractual measures.
In the event that the vital interests of the data subject or another natural person require the processing of personal data, Article 6 para 1 lit. d GDPR serves as the legal basis. If processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh this first interest, Art. 6 para. 1 lit. f GDPR is the legal basis for processing.
Furthermore, data may be stored if this has been provided for by the European or national legislator in EU regulations, laws or other provisions to which the person responsible is subject. The data will also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or fulfilment of a contract.
Our system generates automatically data and information from the calling computer while calling our webpage.
The data is temporarily saved in our systems log files. Not affected by are the IP addresses of the user or other data that enable the assignment of the data to a user. A storage of these data along with other user personal data is not taking place.
The data will be deleted as soon as they are no longer necessary to achieve the purpose for which they were collected. In the case of the collection of data for the provision of the website, this applies when the respective session has ended.
On our website, we offer users the opportunity to register by providing personal data. The data is entered into an input mask, transmitted to us, and saved. Your data is not transferred to any third parties. The following personal data is collected during the registration process.
In the context of the registration process the user’s consent is being obtained for processing this data.
If the registration is necessary for the fulfilment of a contract or for the implementation of pre-contractual measures, the additional legal basis for the processing of data is Art. 6 para. 1 lit. b GDPR.
A registration of the user is necessary to fulfil a contract with the user or to carry out pre-contractual measures.
On the website you have to possibility to shop items as a registered user.
The collected personal data like name, direction, email address, and phone number are necessary for contract fulfilment and pre- contractually negotiations as well as for purchase agreement.
In order to do so, please contact us via the contact information listed under section II.
If the data is required for fullfilling a contract or for the implementation of pre-contractual measures, a prematurely data deletion is only possible if no other contractual or legal obligations preclude a deletion.
Name, e-mail address, phone number and the message entered in text form by the user.
Please contact us via the contact information listed under section II.
Legal basis for the processing of data of the users is Art. 6 para. 1 lit. f GDPR.
The processing of personal data of the users enables us to analyse the surfing behaviour of our users. By analysing the data obtained, we are able to compile information about the use of the individual components of our website. This helps us to constantly improve our website and its user-friendliness. For these purposes, our legitimate interest lies in the processing of the data according to Art. 6 para. 1 lit. f GDPR. The anonymisation of the IP address sufficiently takes into account the interest of users in their protection of personal data.
You have the right to request information about whether your personal data is or will be transferred to a third country or to an international organization. In this case, regarding the transfer, you can request the appropriate guarantees in accordance with Art. 46 GDPR.
You have the right to have the responsible party amend and/or complete your personal data if they are incorrect or incomplete. The responsible party must make the correction without delay.
(4) if you objected to the processing in accordance with Art. 21 (1) GDPR and it is not yet certain whether the legitimate reasons of the responsible party prevail over your reasons.
If the processing of your personal data has been restricted, this data may only be used with your consent or for the purposes of asserting, exercising or defending legal claims or protecting the rights of another natural or legal person or for reasons of important public interest of the European Union or an EU member state.
If in accordance with the reasons mentioned above the processing has been restricted, you will be informed by the responsible party before the restriction is lifted.
(5) The deletion of your personal data is required to fulfil a legal obligation under European Union law or the law of the member states to which the responsible party is subject.
(6) Your personal data was collected from offers by information services in accordance with Art. 8 (1) GDPR.
If the responsible party has made your personal data public and is obligated to delete them, in accordance with Article 17 (1) of the GDPR, the responsible party shall take appropriate measures, taking into account the available technology and the implementation costs, to inform data controllers who process the personal data that you have been identified as being affected, requesting deletion of any links to such personal data or of copies or replications of such personal data.
If you have exercised your right of amendment, deletion or restriction of processing to the responsible party, he/she is obliged to notify all recipients to whom your personal data have been disclosed to of this correction or deletion of the data or restriction of processing, unless: this proves to be impossible or involves a disproportionate effort.
You have a right to be informed by the responsible party over these recipients.
In exercising this right, you also have the right to have your personal data be transmitted directly from one responsible party to another responsible party, as far as technically feasible. Freedoms and rights of other persons may not be thus affected.
The right of data transferability does not apply to the processing of personal data necessary for the performance of a task in the public interest or in the exercise of official authority delegated to the responsible party.
You have the right at any time, for reasons that arise from your particular situation, to object to the processing of your personal data, which ensued in accordance with Art. 6 §1 lit. e or f DSGVO; this also applies to profiling based on these provisions.
The responsible party will no longer process your personal data unless he/she can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or the processing is intended to assert, exercise or defend legal claims.
If your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for the purpose of such advertising; this also applies to profiling insofar as it is associated with such direct advertising.
Notwithstanding of Directive 2002/58/EC, you have the option, in the context of the use of information services, of exercising your right to object through automated procedures that use technical specifications.
You have the right to revoke your consent to data protection declaration at any time. The revocation of consent does not affect the legality of the processing carried out on the basis of the consent until the revocation.
However, these decisions may not be based on special categories of personal data under Art. 9 (1) GDPR, unless Art. 9 (2) lit. a or g applies and reasonable measures have been taken to protect the rights and freedoms and your legitimate interests.
In reference to the cases referred to in (1) and (3), the responsible party shall take reasonable steps to uphold the rights and freedoms and your legitimate interests, including at least the right to obtain the intervention of a person by the responsible party, to express his/her own position and bear on challenge of the decision.
Without prejudice to any other administrative or legal redress, you shall have the right to appeal to a supervisory authority, in particular in the EU member state of your residence, place of work or place of alleged infringement, if you believe that the processing of your personal data violates DSGVO.
The regulatory authority to which the appeal has been submitted shall inform the complainant of the status and results of the complaint, including the possibility of a judicial remedy in accordance with Article 78 of the GDPR.

References: Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 46
 Art. 21
 Art. 8
 Art. 6
 §1
 Art. 9
 Art. 9