Source: https://swstahl.de/datenschutz/page/
Timestamp: 2019-04-19 04:47:55+00:00

Document:
We are very delighted that you have shown interest in our enterprise. Data protection is of a particularly high priority for the management of the SW-Stahl GmbH. The use of the Internet pages of the SW-Stahl GmbH is possible without any indication of personal data; however, if a data subject wants to use special enterprise services via our website, processing of personal data could become necessary. If the processing of personal data is necessary and there is no statutory basis for such processing, we generally obtain consent from the data subject.
The processing of personal data, such as the name, address, e-mail address, or telephone number of a data subject shall always be in line with the General Data Protection Regulation (GDPR), and in accordance with the country-specific data protection regulations applicable to the SW-Stahl GmbH. By means of this data protection declaration, our enterprise would like to inform the general public of the nature, scope, and purpose of the personal data we collect, use and process. Furthermore, data subjects are informed, by means of this data protection declaration, of the rights to which they are entitled.
As the controller, the SW-Stahl GmbH has implemented numerous technical and organizational measures to ensure the most complete protection of personal data processed through this website. However, Internet-based data transmissions may in principle have security gaps, so absolute protection may not be guaranteed. For this reason, every data subject is free to transfer personal data to us via alternative means, e.g. by telephone.
The data protection declaration of the SW-Stahl GmbH is based on the terms used by the European legislator for the adoption of the General Data Protection Regulation (GDPR). Our data protection declaration should be legible and understandable for the general public, as well as our customers and business partners. To ensure this, we would like to first explain the terminology used.
The website of the SW-Stahl GmbH collects a series of general data and information when a data subject or automated system calls up the website. This general data and information are stored in the server log files. Collected may be (1) the browser types and versions used, (2) the operating system used by the accessing system, (3) the website from which an accessing system reaches our website (so-called referrers), (4) the sub-websites, (5) the date and time of access to the Internet site, (6) an Internet protocol address (IP address), (7) the Internet service provider of the accessing system, and (8) any other similar data and information that may be used in the event of attacks on our information technology systems.
When using these general data and information, the SW-Stahl GmbH does not draw any conclusions about the data subject. Rather, this information is needed to (1) deliver the content of our website correctly, (2) optimize the content of our website as well as its advertisement, (3) ensure the long-term viability of our information technology systems and website technology, and (4) provide law enforcement authorities with the information necessary for criminal prosecution in case of a cyber-attack. Therefore, the SW-Stahl GmbH analyzes anonymously collected data and information statistically, with the aim of increasing the data protection and data security of our enterprise, and to ensure an optimal level of protection for the personal data we process. The anonymous data of the server log files are stored separately from all personal data provided by a data subject.
On the website of the SW-Stahl GmbH, users are given the opportunity to subscribe to our enterprise's newsletter. The input mask used for this purpose determines what personal data are transmitted, as well as when the newsletter is ordered from the controller.
The SW-Stahl GmbH informs its customers and business partners regularly by means of a newsletter about enterprise offers. The enterprise's newsletter may only be received by the data subject if (1) the data subject has a valid e-mail address and (2) the data subject registers for the newsletter shipping. A confirmation e-mail will be sent to the e-mail address registered by a data subject for the first time for newsletter shipping, for legal reasons, in the double opt-in procedure. This confirmation e-mail is used to prove whether the owner of the e-mail address as the data subject is authorized to receive the newsletter.
The newsletter of the SW-Stahl GmbH contains so-called tracking pixels. A tracking pixel is a miniature graphic embedded in such e-mails, which are sent in HTML format to enable log file recording and analysis. This allows a statistical analysis of the success or failure of online marketing campaigns. Based on the embedded tracking pixel, the SW-Stahl GmbH may see if and when an e-mail was opened by a data subject, and which links in the e-mail were called up by data subjects.
Such personal data collected in the tracking pixels contained in the newsletters are stored and analyzed by the controller in order to optimize the shipping of the newsletter, as well as to adapt the content of future newsletters even better to the interests of the data subject. These personal data will not be passed on to third parties. Data subjects are at any time entitled to revoke the respective separate declaration of consent issued by means of the double-opt-in procedure. After a revocation, these personal data will be deleted by the controller. The SW-Stahl GmbH automatically regards a withdrawal from the receipt of the newsletter as a revocation.
The website of the SW-Stahl GmbH contains information that enables a quick electronic contact to our enterprise, as well as direct communication with us, which also includes a general address of the so-called electronic mail (e-mail address). If a data subject contacts the controller by e-mail or via a contact form, the personal data transmitted by the data subject are automatically stored. Such personal data transmitted on a voluntary basis by a data subject to the data controller are stored for the purpose of processing or contacting the data subject. There is no transfer of this personal data to third parties.
If one of the aforementioned reasons applies, and a data subject wishes to request the erasure of personal data stored by the SW-Stahl GmbH, he or she may, at any time, contact any employee of the controller. An employee of SW-Stahl GmbH shall promptly ensure that the erasure request is complied with immediately.
Where the controller has made personal data public and is obliged pursuant to Article 17(1) to erase the personal data, the controller, taking account of available technology and the cost of implementation, shall take reasonable steps, including technical measures, to inform other controllers processing the personal data that the data subject has requested erasure by such controllers of any links to, or copy or replication of, those personal data, as far as processing is not required. An employees of the SW-Stahl GmbH will arrange the necessary measures in individual cases.
If one of the aforementioned conditions is met, and a data subject wishes to request the restriction of the processing of personal data stored by the SW-Stahl GmbH, he or she may at any time contact any employee of the controller. The employee of the SW-Stahl GmbH will arrange the restriction of the processing.
In order to assert the right to data portability, the data subject may at any time contact any employee of the SW-Stahl GmbH.
The SW-Stahl GmbH shall no longer process the personal data in the event of the objection, unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or for the establishment, exercise or defence of legal claims.
If the SW-Stahl GmbH processes personal data for direct marketing purposes, the data subject shall have the right to object at any time to processing of personal data concerning him or her for such marketing. This applies to profiling to the extent that it is related to such direct marketing. If the data subject objects to the SW-Stahl GmbH to the processing for direct marketing purposes, the SW-Stahl GmbH will no longer process the personal data for these purposes.
In addition, the data subject has the right, on grounds relating to his or her particular situation, to object to processing of personal data concerning him or her by the SW-Stahl GmbH for scientific or historical research purposes, or for statistical purposes pursuant to Article 89(1) of the GDPR, unless the processing is necessary for the performance of a task carried out for reasons of public interest.
In order to exercise the right to object, the data subject may contact any employee of the SW-Stahl GmbH. In addition, the data subject is free in the context of the use of information society services, and notwithstanding Directive 2002/58/EC, to use his or her right to object by automated means using technical specifications.
If the decision (1) is necessary for entering into, or the performance of, a contract between the data subject and a data controller, or (2) it is based on the data subject's explicit consent, the SW-Stahl GmbH shall implement suitable measures to safeguard the data subject's rights and freedoms and legitimate interests, at least the right to obtain human intervention on the part of the controller, to express his or her point of view and contest the decision.
If the data subject wishes to exercise the rights concerning automated individual decision-making, he or she may, at any time, contact any employee of the SW-Stahl GmbH.
If the data subject wishes to exercise the right to withdraw the consent, he or she may, at any time, contact any employee of the SW-Stahl GmbH.
other personal data which we require in order to fulfil our contractual obligations towards our customers and suppliers.
to allow us to fulfil our contractual obligations towards our customers and suppliers.
6 (1) lit. f GDPR, Sec. 4 BDSG (legitimate interest of the controller or a third party).
protection of property (material property, contact details and information as well as company and trade secrets).
We also pass on your data to external parties when we are legally obligated to do so.
Personal data that has been stored due to statutory storage obligations will be deleted as soon as the obligation to store the data no longer applies.
Otherwise, personal data will be deleted as soon as the purpose of processing no longer applies or the data is no longer required for the purpose. Personal data obtained by means of video surveillance will be deleted automatically after 30 days, provided we are not required to store it for longer to be used as evidence.
Personal data that we store on the basis of consent granted by the data subject according to Art. 6 (1) lit. a GDPR will be deleted if the purpose of processing ceases to apply or the consent is withdrawn.
According to Art. 7 (3) GDPR you have the right to revoke the consent you have granted us at any time. This means that we will no longer be able to carry out any further data processing that is dependent on this consent. The legality of any processing that has already been carried out on the basis of this consent will not be affected if consent is withdrawn.
According to Art. 15 GDPR you have the right to request information regarding any personal data relating to you which is processed by us. In particular, you can request information about the purposes of processing, the categories of personal data that are processed, the categories of recipients to whom your data has been or will be disclosed, the planned duration of storage, whether or not you have the right to rectify or erase your personal data, restrict processing or object to processing, whether or not you have the right to lodge a complain with a supervisory authority, the origin of your data if it was not collected by us, and whether or not automated decision-making, including profiling, is carried out, with the right to request meaningful information regarding the details of such where applicable.
According to Art. 16 GDPR you have the right to request the immediate rectification of incorrect personal data or completion of personal data stored by us.
According to Art. 17 GDPR you have the right to request the erasure of personal data stored by us, provided that there is no legal basis that entitles or requires us to continue storing the data.
you have filed an objection to the processing in accordance with Art. 21 (1) GDPR, but it has yet to be established if our legitimate reasons outweigh your legitimate reasons.
According to Art. 20 GDPR you have the right to receive the personal data which you have disclosed to us in a structured, commonly used and machine-readable format and to transmit this data to another controller.
According to Art. 77 GDPR you have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data is in violation of the GDPR.
If your personal data is processed on the basis of legitimate interests according to Art. 6 (1) sentence 1 lit. f GDPR, you have the right, according to Art. 21 GDPR, to object to the processing of your personal data, provided there are grounds relating to your particular situation.
The provision of certain customer-related information is necessary if we are to provide our order processing services or act as a supplier for our clients. If this data is not provided, we may be unable to provide these services in certain cases. Suppliers are generally not required to provide us with personal data.

References: Art. 6
 Art. 7
 Art. 15
 Art. 16
 Art. 17
 Art. 21
 Art. 20
 Art. 77
 Art. 6
 Art. 21