Source: https://banater-eisen.com/privacy-policy/
Timestamp: 2019-04-22 04:58:34+00:00

Document:
If we process data in a third country (ie outside the European Union (EU) or the European Economic Area (EEA)) or in the context of the use of third party services or disclosure or transmission of data to third parties, this will only be done if it is to fulfill our (pre) contractual obligations, on the basis of your consent, on the basis of a legal obligation or on the basis of our legitimate interests. Subject to legal or contractual permissions, we process or have the data processed in a third country only in the presence of the special conditions of Art. 44 et seq. GDPR. That the processing is e.g. on the basis of specific guarantees, such as the officially recognized level of data protection (e.g. for the US through the Privacy Shield) or compliance with officially recognized special contractual obligations (so-called “standard contractual clauses”).
You have acc. Art. 77 GDPR the right to file a complaint with the competent supervisory authority.
Processing is based on Art. 6 para. 1 lit. b (execution of order transactions) and c (legally required archiving) GDPR. The information marked as required for the establishment and fulfillment of the contract is required. We disclose the data to third parties only in the context of extradition, payment or in the context of legal permissions and obligations to legal advisors and authorities. The data will be processed in third countries only if necessary for the fulfillment of the contract (for example, on customer’s request upon delivery or payment).
In order to run our business economically, to recognize market trends, customer and user needs, we analyze the data we have about business transactions, contracts, inquiries, and so on. We process stock data, communication data, contract data, payment data, usage data, metadata on the basis of Art. 6 para. 1 lit. f. GDPR, whereby the persons concerned include customers, prospects, business partners, visitors and users of the online offer.
The analyzes are conducted for business analysis, marketing and market research. In this way we can view the profiles of the registered users with ads e.g. to consider their purchase transactions. The analyzes serve to increase the user-friendliness, the optimization of our offer and the business administration. The analyzes are for us alone and are not disclosed externally, unless they are anonymous, aggregated value analyzes.
If these analyzes or profiles are personal, they will be deleted or anonymised upon termination of use, otherwise after two years from the conclusion of the contract. Incidentally, the overall business analyzes and the general trend provisions are created as anonymously as possible.
When contacting (eg via contact form, e-mail, telephone or via social media), the information of the user is processed to process the contact request and its processing according to. Art. 6 para. 1 lit. b) GDPR processed. User information may be stored in a customer relationship management system (“CRM system”) or similar request organization.
We delete the requests when they are no longer needed. We check the need every two years; In addition, the statutory archiving obligations apply.
When users leave comments or other posts, their IP addresses may be based on our legitimate interests in the manner of Art. 6 para. 1 lit. f. GDPR is stored for 7 days. This is for our own safety when someone leaves behind inappropriate content (insults, prohibited political propaganda, etc.) in comments and posts. In this case, we may be sued for the comment or post and are therefore interested in the identity of the author.
In addition, we reserve the right to be consistent with our legitimate interests. Art. 6 para. 1 lit. f. GDPR processes the information of users for the purpose of spam detection.

References: Art. 44
 Art. 77
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6