Source: https://www.tadano.nl/data-protection-policy/?lang=en
Timestamp: 2019-04-18 19:14:29+00:00

Document:
Information about the processing of your data in accordance with Article 13 of the European General Data Protection Regulation (GDPR).
References to statutory provisions relate to the General Data Protection Regulation (GDPR) in the version applicable as of 25.05.2018.
This Data Protection Policy applies to the website of TADANO Nederland (www.tadano.nl) and to the personal data collected via that website. For websites of other providers to which reference is made, by means of links for example, their own data protection information and policies apply.
For security reasons, we recommend sending emails in encrypted form only. There are considerable risks associated with the transfer of unencrypted messages. Please do not send us any sensitive data by unencrypted email.
According to Art. 4 GDPR, personal data means any information relating to an identified or identifiable natural person; an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
For reasons of technical security, in particular to avert attempts to attack our web server, these data are saved by us for a short time. We are not able to identify individuals using these data. At the latest after seven days, the data are anonymised at domain level by truncating the IP address, so that it is no longer possible to establish a link to an individual user. The data are also processed for statistical purposes in anonymised form; the data are not compared with other databases or passed on to third parties, including in the form of extracts.
With the exception of the data specified above, personal data are stored only when you provide them yourself, e.g. when registering, completing a survey or executing a contract, and even in those cases only if we are permitted to do so on the basis of the consent you have given us or of applicable legal regulations (you can find more information about this below in the “Legal basis for processing” section below).
You are not obliged either by law or contract to provide your personal data. It may be, however, that certain functions of our website depend on the provision of personal data. If you do not provide your personal data in these cases, the result may be that functions are not available or are only available to a limited extent.
We use the personal data collected when you visit our website to operate it in a way that is as convenient as possible for you and to protect our IT systems from attacks and other unlawful actions.
If you provide us with further personal data, e.g. in the context of registration, on a contact form, in a survey or to execute a contract, we use the data for the specified purpose, for purposes of customer administration and – if necessary – for purposes of processing and invoicing for any business transactions, to the extent necessary in each case.
Cookies are small files that are stored on your desktop, laptop or mobile device when you visit a website. From these we can recognise if there has already been a connection between your device and our website, for example, or which language or other settings you prefer. Cookies may also include personal data.
The default setting of most browsers is to accept cookies automatically. You can change this default setting by activating the *Do not accept cookies* option.
You can delete existing cookies at any time. You can find out how this works individually in your browser or device manufacturer’s operating instructions.
These cookies are essential for the functions of the website. Without them, we may not be able to offer some of the services to you, for example.
These cookies make it easier to use the website and improve its functions. For example, we save your language settings in functional cookies.
These cookies collect information about how you use our website. In this way, we can identify which parts of our website are particularly popular and thus improve our service to you. Please also read the section “Analysis of usage data” in our Data Protection Policy.
These cookies are set up by third parties, e.g. social networks such as Facebook, Twitter and Google+, the content of which you can integrate using the “social plugins” offered on our website. More detailed information about the use and function of the social plugins is available in our Data Protection Policy.
If you subscribe to one of the newsletters offered on our website, the data provided when registering for the newsletter are used only to send the newsletter, unless you consent to any further use. You can end your subscription at any time by using the cancellation option provided in the newsletter.
We implement technical and organisational security measures to protect the data about you that we manage from manipulation, loss, destruction and access by unauthorised persons. We are continuously improving our security measures in accordance with technological progress.
For security reasons and to protect transmission of personal data and other confidential content (e.g. orders or questions to the data controller), this website uses SSL and TLS encryption. You can recognise an encrypted connection by the string “https://” and the padlock icon on your browser bar.
If you have given us your consent to process your personal data, this represents the legal basis for processing (Art. 6 (1) (a) GDPR).
For processing personal data to initiate or fulfil a contract with you, Art. 6 (1) (b) GDPR is the legal basis.
Insofar as processing of your personal data is necessary to fulfil our legal obligations (e.g. retention of data), we are authorised to do so by Art. 6 (1) (c) GDPR.
We also process personal data for purposes of pursuing our legitimate interests and the legitimate interests of third parties pursuant to Art. 6 (1) (f) GDPR. Such legitimate interests include maintenance of the function of our IT systems, but also marketing of our own and third-party products and services and the necessary legal documentation of business contacts.
We erase your IP address and the name of your Internet Service Provider, which we only save for security reasons, after seven days. Otherwise we erase your personal data as soon as the purpose for which we have collected and processed the data no longer applies. Beyond this time, storage takes place only if this is required in accordance with the laws, ordinances or other legal regulations of the European Union or a Member State of the European Union to which we are subject.
You may demand information about your personal data processed by us under Art. 15 GDPR. Your application for information should provide precise information about your request in order to make it easier for us to compile the data required. Please note that your right to information may be restricted under certain circumstances by legal regulations (in particular Section 34 GDPR and Art. 10 of the Bavarian Data Protection Act).
If the information about you is not (or no longer) accurate, you may demand rectification under Art. 16 GDPR. If your data are incomplete, you may demand completion.
You may demand erasure of your personal data under the conditions of Art. 17 GDPR. Your right to erasure depends, among other things, on whether the data about you are still required by us to fulfil statutory duties.
Under the provisions of Art. 18 GDPR, you have the right to demand restriction of processing of the data relating to you.
If you have asserted your right to rectification, erasure or restriction of processing in respect of the data controller, the latter is obliged to notify all recipients to whom your personal data has been disclosed of this rectification or erasure of data or restriction of processing, unless this proves to be impossible or involves a disproportionate amount of work. You have the right to information about such recipients under the provisions of Art. 19 GDPR.
Under the provisions of Art. 20 GDPR, you have the right to receive the personal data that you have provided to us in a structured, standard and machine-readable format or to demand transmission to another data controller, provided that this is technically feasible.
Under Art. 21 GDPR, you have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you. We cannot always comply, however, if we are subject to statutory regulations concerning fulfilment of our processing obligations, for example.
You have the right to withdraw the consent that you have given to process your data from that point forward, in accordance with the provisions of Art. 7 GDPR. If consent is withdrawn, we shall erase the data concerned immediately, insofar as further processing cannot be justified on a legal basis for processing without consent. Withdrawal of consent does not affect the lawfulness of the processing carried out on the basis of that consent up to the point of withdrawal.
If you believe that the processing of your personal data breaches statutory provisions, you have the right to lodge a complaint with the relevant data protection supervisory authority (Art. 77 GDPR).
We may alter this Data Protection Policy at any time by publishing the amended version on this website, including enforcement of the amended version.

References: Art. 4
 Art. 6
 Art. 6
 Art. 6
 Art. 15
 Art. 10
 Art. 16
 Art. 17
 Art. 18
 Art. 19
 Art. 20
 Art. 21
 Art. 7