Source: http://www.alexandernutgroup.com/data-protection-information.html
Timestamp: 2019-04-24 22:48:43+00:00

Document:
We, the Alexander Nut Group Holding GmbH (hereinafter also referred to as “Responsible party”), take the protection of personal data very seriously. We adhere to the pertinent data protection regulations, in particular the EU General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG). In the following, we would especially like to inform you of when and what type of data we collect within the scope of the use of our website and how we use this data.
We generally only collect and use personal data from our users if this is required in order to ensure the functionality of our website, and insofar as it is required for providing our content and services. The collection and use of personal data from our users is only conducted if the processing of the data is permitted by statutory regulations or the user has provided their express consent.
Insofar as we receive the user’s consent for the processing of their personal data on our website, Art. 6, Sec. 1, Letter (a) GDPR serves as the legal framework for the processing of personal data.
In the processing of personal data, which is required to fulfill the contract to which the user is a contractual party, Art. 6, Sec. 1, Letter (b) GDPR serves as the legal framework. This also applies to processing operations that are required for the implementation of a contractual obligation or contractual measures.
Insofar as a processing of personal data is required for the fulfillment of a legal obligation to which our company is subject, then Art. 6, Sec. 1, Letter (c) GDPR serves as the legal framework.
If the processing is necessary to protect a legitimate interest of our company or a third party, and if the interests, fundamental rights and basic freedoms of the affected user do not supersede the first interest, then Art. 6, Sec. 1, Letter (f) GDPR serves as the legal framework (so called balancing of interests).
In addition, there are further legal grounds for the processing of personal data that we have listed – insofar as pertinent – in the following.
The user’s personal data is deleted or locked as soon as the grounds for storage have been eliminated. Beyond that, data can be stored if this has been approved by European or national laws, in Union bylaws, laws or other regulations to which our company is subject. A deletion or blocking of data also occurs if a storage period prescribed by the said standards expires, unless there is a necessity for the further storage of the data for the conclusion or fulfillment of a contract.
The processing of the personal data stored by you is exclusively performed in countries of the European Economic Area.
With each access to our website, our system automatically records and stores data and information from the accessing computer's system.
This data is also stored in our system’s log files. This does not include the user's IP address or any other data that would enable the allocation of the data to a user. Storage of this data together with other personal user data is not processed.
Legal basis for the temporary storage of the data is Art. 6 Sec. 1, Letter (f) GDPR.
The temporary storage of the IP address by the system is required in order to enable the delivery of the website to the user's computer. For this, the user’s IP address must be stored for the duration of the session.
Our legitimate interest also lies in these purposes in the data processing as per Art. 6, Sec 1, Letter (f) GDPR.
The data is deleted as soon as it is no longer required for the realization of the purpose, and its collection is therefore no longer necessary. This is the case – in the event that data is collected for provisioning the website – if the respective session has terminated.
The collection of data for provisioning the website and the storage of data in log files is required for the operation of the website. Therefore, there is no possibility of objection on the part of the user.
You can contact us via the e-mail address appearing on our website. In this case, the personal data provided by the user in the e-mail will be stored by us.
There will be no forwarding of this information to third parties. The data is exclusively used for the processing of the conversation.
The legal framework for the processing of data is Art. 6, Sec. 1, Letter (f) GDPR. If the e-mail contact targets the conclusion of a contract or a similar contractual obligation, then the additional legal framework for the processing is Art. 6, Sec. 1, Letter (b) GDPR.
The processing of personal data only serves contact processing purposes. In case of contact processing, this includes a legitimate interest in the processing of data.
The data is deleted as soon as it is no longer required for the realization of the purpose and its collection is therefore no longer necessary. For the personal data sent by e-mail, this is then the case once the respective conversation has ended with the user. The conversation is considered terminated once the issue concerned has been finally clarified.
If the user contacts us via e-mail, then the user can object to the storage of their personal data at any time. This objection can be made through notification to the contact person listed at the end of our data protection information. In case of an objection, the conversation with the user cannot be continued and all personal data that has been stored within the establishment of the contact, is deleted by us.
We use “cookies” in order to make the visit to our website as attractive as possible and to enable the use of certain functions. Cookies are small text files that are stored in the browser (or by the browser) of the user’s device. If the user accesses a website, a cookie can be stored on the user's operating system. This cookie contains a characteristic character string that enables a specific identification of the browser once the website is accessed again.
Most browsers are configured in such a way that they automatically accept cookies. However, the user is able to block the storage of cookies on their computer by making the corresponding browser settings. However, this may restrict the functionality of our website.
The legal framework for the processing of personal data is Art. 6 Sec. 1, Letter (a) GDPR upon presentation of the user's consent in this regard.
Otherwise, the legal framework for the processing of personal data under application of cookies is Art. 6, Sec. 1, Letter (f) GDPR.
The uses of technically unnecessary cookies are used for the purpose of improving the quality of our website and website content.
In the aforementioned purposes, our legitimate interest lies in the processing of the personal data as per Art. 6, Sec. 1, Letter (f) GDPR.
You can request confirmation from the responsible party regarding whether or not your personal data is processed by us.
The existence of automated decision making including profiling as per Art. 22, Sec. 1 and 4 GDPR and – at least in the most cases – meaningful information concerning the logic involved as well as the scope and the intended effects of this type of processing for the affected person or party.
You have the right to demand information pertaining to whether or not your personal data has been transferred to a third-party country or to an international organization. In this regard, you can demand to receive information regarding the appropriate guarantees as per Art. 46 GDPR in connection with the transfer of personal data.
You have a right to correction and/or completion of the data towards the responsible party, insofar as the processed personal data affecting you is incorrect or incomplete. The responsible party must immediately correct or complete the data.
If you have filed an objection to the processing pursuant to Art. 21, Sec. 1 GDPR and it has not yet been determined whether or not the legitimate reasons of the person responsible outweigh your reasons.
If the processing of your personal data has been limited, then this data ― aside from its storage ― may only be processed with your consent or for the assertion, exercising or defense of rights or for the protection of the rights of another natural or legal person, or on grounds of an important public interest of the European Union or of a Member State.
If the limitation of processing was limited as per the above requirements, you will be informed by the responsible party prior to the limitation being lifted.
The grounds for which your personal data was collected or otherwise processed, no longer exists.
You may withdraw your consent upon which the processing of the data as per Art. 6, Sec. 1, Letter (a) or Art. 9, Sec. 2, Letter (a) GDPR is based, and there is no other legal basis for processing.
As per Art. 21, Sec. 1 GDPR, you withdraw your consent against the processing of your data and there are no overriding legitimate grounds for processing, or you file an objection as per Art. 21, Sec. 2 GDPR against the processing.
Your personal data was processed illegally.
The deletion of your personal data is required for the fulfillment of a legal requirement as per European Union law or the laws of the Member States – which the responsible party is subject to.
Your personal data was collected in relation to the offered information society services as per Art. 8, Sec. 1 GDPR.
If the responsible party has made your personal data public and if it is obligated to its deletion as per Art. 17, Sec.1 GDPR, then it takes ― under consideration of the available technologies and the implementation costs ― suitable measures (also of a technical nature) in order to inform the parties responsible for the processing of the personal data that you, as the affected party, have demanded the deletion of all links to this personal data or the deletion of copies or duplicates of this personal data.
Enforcement, exercising or defense of legal claims.
If you have exercised the right to correction, deletion or limitation of the processing of your data towards the responsible party, then this party is obligated to inform all recipients that have been disclosed the affected personal data, to inform them of the correction, deletion or limitation of the personal data, unless this turns out to be impossible or only possible with an unreasonable effort.
Towards the responsible party, you have the right to be informed about the recipient(s).
The data is processed with the help of automated processes.
In the exercising of this right, you also have the right to affect that the relevant personal data is transferred directly from one responsible party to the other, insofar as this is technically feasible. Freedom and rights of other parties must not be infringed upon during this process.
The right to data transfer is not applicable for the processing of personal data that is required for the performance of a task that is in the public interest or in the exercise of public authority that was assigned to the responsible party.
You have the right, for grounds resulting from a special situation, to object to the processing of your personal data, which is performed pursuant to Art. 6, Sec. 1, Letter (e) or (f) GDPR at any time; this also applies to the use of the data for purposes of profiling.
The responsible party no longer processes the relevant personal data unless it can provide evidence of compelling grounds for processing worthy of protection that supersedes your interests, rights and freedoms, or the processing serves the enforcement, exercising or defense of legal claims.
If your personal data is processed for the purposes of direct marketing, you have the right to object at any time to the processing of your personal data for the purpose of such advertising; this also applies to profiling, insofar as this is connected to this type of direct marketing activity.
If you object to the processing of your data for purposes of direct marketing, then your data will no longer be used for such purposes.
You have the ability, in connection with use of information society services ― notwithstanding the Regulation 2002/58/EC ― to exercise your right to objection using an automated process in which technical specifications are used.
You have the right to revoke your data protection-relevant declaration of consent at any time. The revocation of consent does not affect the legality of the processing carried out on the basis of the consent until revocation.
Has been expressly approved by you.
However, these decisions cannot be based on special categories of personal data as per Art. 9, Sec. 1 GDPR insofar as Art. 9, Sec. 2, Letters (a) or (g) applies and suitable measures were made for the safeguarding of rights and freedoms as well as your legitimate interest.
In terms of the cases noted in the previous list of items (1) and (3), the responsible party takes suitable measures in order to ensure the rights and freedoms as well as your legitimate interests. This at least includes the right to obtain intervention of a person on behalf of the responsible party, on the statement of one's own position, and on appeal against the decision.
Without prejudice to any other administrative or judicial remedy, you have the right to object with a supervisory authority, in particular in the Member State of your place of residence, your place of work, or the place of the perceived violation if you are of the opinion that the processing of your personal data is in violation of the GDPR.
The Supervisory Board, where the objection is submitted, notifies the protester regarding the current status and the result of the objection including the possibility of a judicial remedy as per Art. 78 GDPR.
Our website may contain links that refer to third-party websites. Insofar as this is not clearly recognizable, we will notify you that you are accessing a third-party link. We do not have any influence on the content and the design of third-party websites. This data protection information is therefore not applicable there.
The continuous development of the Internet and, therefore, the ongoing changes to the applicable legal standards require that we adjust and amend our data protection information from time to time. We will inform you here about any corresponding changes.

References: Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 22
 Art. 46
 Art. 21
 Art. 6
 Art. 9
 Art. 21
 Art. 21
 Art. 8
 Art. 17
 Art. 6
 Art. 9
 Art. 9
 Art. 78