Source: https://www.isri.de/en/company/legal-notice/data-privacy/
Timestamp: 2019-04-26 15:56:34+00:00

Document:
We, ISRINGHAUSEN GmbH & Co. KG, are responsible for the collection, processing and storage of your data. You can find details about us in our imprint <https://www.isri.de/en/company/legal-notice.html> at any time.
This data protection declaration applies to all websites of our company that can be accessed under our domains (www.isri.de , www.isri.com, www.isri.it). If you switch to websites of other operators within the scope of our offer, their own data protection regulations apply, for the content of which the respective operators of these websites are responsible.
If separate or additional conditions apply to individual services or we ask you for your consent, we will point this out to you separately before using the respective service (e.g. for newsletter subscription or purchase in our online shop).
You can use our website without disclosing your identity. If you would like to register for one of our personalised services, use our online shop, subscribe to our newsletter or contact us, we will ask you for your name and other personal information. It is your free decision whether you enter this (extended) data. Data that we absolutely need from you to provide our services are marked as such.
We collect different categories of personal data from you. Personal data is all information relating to an identified or identifiable natural person; an identifiable natural person is one who can be identified directly or indirectly, in particular by assignment to an identifier such as a name. Personal data includes, for example, information such as your name, your address, your telephone number and your date of birth (if stated). Statistical information that cannot be directly or indirectly associated with you - such as the popularity of individual websites of our offer or the number of users of a page – does not qualify as personal data. Data is collected directly and indirectly. In both cases, data will only be collected to the extent necessary; the data will only be processed for the purposes stated under point 2. It is your decision whether you want to transmit data to us that optimizes the use of our services for you, yet is not necessary. Corresponding data fields are marked as 'voluntary'.
Technical connection data, e.g. the page called up on our website, your IP address, date and time of the call, terminal device used. This is done to verify the authorization of actions and the authentication of the requesting user of our services. The legal basis is Art. 6 (1) lit. c) in conjunction with Art. 32 and Art. 6 (1) lit. f) DSGVO. Our legitimate interest is to secure our web server, for example to defend ourselves against attacks, and to ensure the functionality of our services.
If persons under the age of 16 transmit personal data to us, this is only permitted if the parent/guardian has consented or has consented to the consent of the minor. For this purpose, the contact data of the legal guardian must be communicated to us in accordance with Art. 8 (2) GDPR in order to convince us of the consent or the consent of the legal guardian. These data as well as the data of the minor will then be processed in accordance with this data protection declaration.
We also use service providers to provide services and process your data (e.g. hosting). Insofar as these special provisions apply, we have carried them out for you in the following way for the respective service. The service providers process the data exclusively on our instructions and are obliged to comply with the applicable data protection regulations. All contractors have been carefully selected and will only have access to your data to the extent and for the time required to provide the services or to the extent to which you have consented to the processing and use of your data.
Data exchange within the group of companies to which we belong takes place exclusively within the EU/EEA and serves only internal administrative purposes. By group of companies we mean affiliated companies within the meaning of Art. 4 No. 19 GDPR.
The servers of some of the service providers we use are located in the US and other countries outside the European Union. Companies in these countries are subject to a data protection law that does not generally protect personal data to the same extent as is the case in the Member States of the European Union. If your data are processed in a country that does not have a recognised high level of data protection such as the European Union, we use contractual regulations or other recognised instruments to ensure that your personal data are adequately protected. We expressly point this out to you again within the scope of the individual services.
Insofar as personal data is transferred to third countries, this is done on the basis of the EU Commission's decision on appropriateness to the EU-U.S. Privacy Shield pursuant to Art. 45 GDPR or the EU Standard Contractual Clauses 2010 pursuant to Art. 46 (2) lit. c GDPR in conjunction with the decision of the EU Commission of 05.02.2010 (2010/87/EU) or your consent pursuant to Art. 49 (1) lit. a) GDPR.
We store the personal data until the purposes for which they were collected cease to apply (e.g. at the end of a contractual relationship or through the last activity, if no continuing obligation exists, or in the case of a revocation of your consent for the specific data processing).
another exception pursuant to Art. 17 (3) DSGVO applies.
You have a right of information about the personal data we process concerning you at any time.
If the data processing is based on your consent or according to Art. 6 (1) lit. b) GDPR on a contract, you can also demand in accordance with Art. 20 (1) GDPR to receive the personal data stored about you in a structured, current and machine-readable format. At your request, we will also forward the data directly to the recipient of your choice.
Furthermore, in accordance with Articles 16 to 18 GDPR, you can request us to correct, restrict (block) or delete your personal data if we have processed the data incorrectly, if there is a reason to restrict further data processing, or if data processing has become illegal for various reasons, or if its storage is inadmissible for other legal reasons. We would like to point out that your right to deletion may be restricted by legal retention periods.
If our data processing is based exclusively on our legitimate interest pursuant to Art. 6 (1) lit. f) GDPR, you may object to this processing pursuant to Art. 21 (1) GDPR. Then we will stop processing your data unless we can prove grounds for processing worthy of protection which outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend a legal claim. Furthermore, you always have the right to object to the use of your data for the purpose of direct advertising with effect for the future pursuant to Art. 21 (2) GDPR.
If you have allowed us to process your personal data by giving your consent, you have a right of revocation with effect for the future pursuant to Art. 7 (3) GDPR.
You are free to complain to a supervisory authority if you believe that our processing of your personal data violates the european General Data Protection Regulation or other national and international data protection laws.
We use so-called cookies in some areas of our website, e.g. to recognize the preferences of visitors and to be able to design the website accordingly. This facilitates navigation and a high degree of user-friendliness of a website. Cookies also help us to identify particularly popular areas of our website. Cookies are small files that are stored on a visitor's hard drive of the used device. They allow information to be stored for a certain period of time and to identify the visitor's computer. For better user guidance and individual service presentation, we use permanent cookies.
We only set non-technically necessary cookies after your express consent, which you can of course revoke at any time.
We use the website analysis software Matomo to optimize and statistically evaluate visitor access to our website.
Matomo uses so-called cookies, small text files that are stored locally on your end device and enable us to analyze the use of our website. We ensure that your IP address is anonymized immediately after it has been converted into a hash value and even before it is stored, so that no conclusions can be drawn about you. The data obtained in this way is processed exclusively on our own servers in Germany. The data will not be accessed by third parties.
In addition, our website analysis naturally takes into account your 'Do not track' preference as transmitted by your browser.
Data that you transmit to us via our contact form will be processed for the purpose of communication and data exchange, i.e. to respond to your specific request. These data are stored as long as their processing is necessary for these purposes or until the expiry of any subsequent retention periods.
To use our download area, please register with us. We will ask you for your first name and surname, your function and your professional contact details. We compare this data with our customer and suppliers base, only our business-partners may register with us for this access. You can then define a user name and a password with which you can log in in the future.

References: Art. 6
 Art. 32
 Art. 6
 Art. 8
 Art. 4
 Art. 45
 Art. 46
 Art. 49
 Art. 17
 Art. 6
 Art. 20
 Art. 6
 Art. 21
 Art. 21
 Art. 7