Source: https://www.kraemer-germany.com/en/contact/data-protection/
Timestamp: 2019-04-19 12:20:03+00:00

Document:
We take the protection of your personal data very seriously, and observe the data protection provisions of the EU General Data Protection Regulation (GDPR), which came into force on 25 May 2018). Below we want to provide you with information about how we handle your data. This Data Privacy Statement will explain to you the nature, scope and purpose of the processing of personal data (referred to below in brief as “data”) within our website. We refer you to the definitions in Art. 4 of the General Data Protection Regulation (GDPR) in respect of the terms used, such as “processing” or “controller.
We strictly only collect and use personal data from our users insofar as this is necessary to provide a functional website and our content and services. The personal data of our users are collected and used regularly only after the user has consented. An exception applies in cases in which for factual reasons it is not possible to obtain their consent in advance and the processing of the data is permitted by legal provisions.
Insofar as we obtain the data subject’s consent to the processing operations for personal data, Art. 6 Para. 1 (a) of the EU General Data Protection Regulation (GDPR) serves as the legal basis for processing personal data.
For the processing of personal data that is necessary for the performance of a contract where the data subject is a party to the contract, Art. 6 Para. 1 (b) GDPR serves as the legal basis. This also applies to processing operations that are necessary for the implementation of pre-contractual measures. Insofar as the processing of personal data is necessary for the fulfilment of a legal obligation to which our company is subject, Art. 6 Para. 1 (c) GDPR serves as the legal basis. If the processing is necessary for the preservation of a legitimate interest of our company or a third party, and if the interests, basic rights and basic freedoms of the data subject do not override the first-mentioned interest, Art. 6 Para. 1 (f) GDPR serves as the legal basis for such processing.
The personal data of the person concerned are deleted or blocked in accordance with Art. 17 and 18 GDPR as soon as the purpose of storage no longer applies and no legal retention obligations oppose such deletion. If the data are not deleted because they are necessary for other purposes that are legally permitted, the processing of the data will be restricted, i.e. the data will be blocked and not processed for other purposes. This applies for example to data that has to be retained for reasons of commercial or tax law. In accordance with the legal requirements in Germany, such retention takes place in particular for 6 years in accordance with Section 257 Para. 1 HGB [Commercial Code] (trading books, inventories, opening balance sheets, annual financial statements, commercial letters, accounting records, etc.) and for 10 years in accordance with Section 147 Para. 1 AO [Fiscal Code] (books, records, management reports, accounting records, commercial and business letters, documents of relevance for taxation, etc.).
We process data within the context of administrative activities and the organisation of our business, financial accounting and compliance with our statutory duties, such as archiving. For this we process the same data as we process within the context of providing our contractual services. The bases of processing are Art. 6 Para. 1 (c) GDPR, Art. 6 Para. 1 (f) GDPR. This processing applies to customers, prospective customers, business partners and website visitors. The purpose of and our interest in such processing lie in the administration, financial accounting, office organisation and data archiving, in other words tasks that serve for maintaining our business activities, performing our duties and providing our services. The deletion of the data in respect of contractual services and contractual communication corresponds to the details mentioned in respect of these processing activities.
In this context we disclose or transmit data to the tax authorities, advisers such as tax advisers or auditors, and other payment offices and payment service providers.
These data are not associated with other data sources.
The storage in logfiles takes place to ensure the functionality of the website. The data also serve for us to optimise the website and ensure the security of our IT systems. These purposes also include our legitimate interest in processing the data in accordance with Art. 6 Para. 1 (f) GDPR. No evaluation of the data for marketing purposes takes place in this context.
The data are deleted as soon as they are no longer required for achieving the purpose for which they were collected. In the case of collecting the data in order to provide the website, this is the case when the respective session has ended. In the case of storing the data in logfiles, this is the case after no more than 14 days. Storage for longer than this is possible. In this case the users’ IP addresses are deleted or altered so that it is impossible for them to be allocated to the client undertaking the data retrieval.
The collection of the data for providing the website and the storage of the data in logfiles are essential for the operation of the website. Consequently the user has no possibility of objecting.
Cookies that are necessary for the implementation of electronic communication processes or for the provision of particular functions desired by you are stored on the basis of Art. 6 Para. 1 (f) GDPR. We have a legitimate interest in the storage of cookies for the optimised provision of our services free from technical faults. Insofar as other cookies are stored (for example cookies to analyse your surfing behaviour), these are dealt with separately in this Data Privacy Statement.
When interviewers log in via the website, contact details are collected such as their interviewer number, via which further contact details such as their name, address, phone number can then in turn be identified.
Allocating interviewers when processing telephone surveys.
The legal basis for the performance of a contract, here an interviewer agreement (for processing surveys), is Art. 6 Para. 1 (a) and (b) GDPR.
Storage period: The data are deleted as soon as they are no longer required for achieving the purpose for which they were collected. In the case of being able to allocate interviewers for processing market research studies, deletion takes place after their employment has come to an end.
When test persons /participants in surveys first contact us, contact details such as their name, postal address, date of birth, sector, email addresses and phone numbers are collected.
Making contact for participation in surveys such as group discussions, telephone interviews, face-to-face interviews, etc..
The legal basis for processing and answering initial enquiries is Art. 6 Para. 1 (a) and (b) GDPR.
The data are deleted as soon as they are no longer required for achieving the purpose for which they were collected. These personal data are deleted immediately after a retraction of consent.
The content management system we use offers statistics on the page views of our website. For this, only the number of views, the date and the URL are stored. No personal data such as your IP address are stored.
On this website we have enabled the IP anonymisation function, which means that your IP address will be abridged by Google within the member states of the European Union or in other states signatory to the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases will the full IP address be transmitted to Google for storage on servers in the United States and abridged there. Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage. Google will not associate your IP address transmitted by your browser within the context of Google Analytics with any other data held by Google.
You may prevent the storage of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent the acquisition of data relating to the use of the website (including your IP address) generated by the cookies and the processing of such data by Google by downloading and installing the browser plug-in from the following address: (This link opens in a new tab) https://tools.google.com/dlpage/gaoptout?hl=de.
You can prevent Google Analytics collecting your data by clicking on the following link. An opt-out cookie will be placed on your browser which will prevent the collection of your data on future visits to this website: Deactivate Google Analytics. More information about the way in which Google Analytics handles user data can be found in Google’s data privacy statement: (This link opens in a new tab) https://support.google.com/analytics/answer/6004245?hl=de.
We have concluded a commissioned data processing agreement with Google, and fully implement the strict requirements of the German data protection authorities when using Google Analytics.
The aim of reCAPTCHA is to check whether the data input on our websites (e.g. in a contact form) is being undertaken by a person or by an automated program. For this reCAPTCHA analyses the website visitor’s behaviour using various characteristics. This analysis starts automatically as soon as the website visitor enters the website. reCAPTCHA evaluates various information for its analysis (e.g. IP address, length of time the website visitor stays on the website, or mouse movements made by the user). The data collected during this analysis are forwarded to Google.
The data processing takes place on the basis of Art. 6 Para. 1 (f) GDPR. The website operator has a legitimate interest in protecting its web offerings against improper automated skimming and against SPAM.
Further information on Google reCAPTCHA and Google’s data privacy statement can be found via the following links:(This link opens in a new tab) https://www.google.com/intl/de/policies/privacy/ and (This link opens in a new tab) https://www.google.com/recaptcha/intro/android.html.
This site uses the map service Google Maps via an API. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. To use the functions of Google Maps it is necessary to for your IP address to be stored. This information is generally sent to and stored on a Google server in the USA. The provider of this site has no influence over this data transmission.
The use of Google Maps takes place in the interest of showing our online offerings appropriately and making it easy to find the places we mention on the website. This represents a legitimate interest within the meaning of Art. 6 Para. 1 (f) GDPR. You can find more information about the way in which user data is handled in Google’s data privacy statement: (This link opens in a new tab) https://www.google.de/intl/de/policies/privacy/.
In order to display fonts consistently, this site uses web fonts provided by Google. When you access a page, your browser will load the required web fonts in your browser cache to display texts and fonts correctly.
For this purpose, the browser you are using has to contact the Google servers, as a result of which Google learns that your IP address has accessed our website. We use Google web fonts in the interest of displaying our online offerings consistently and attractively. This represents a legitimate interest within the meaning of Art. 6 Para. 1 (f) GDPR.
You can find further information about Google web fonts at (This link opens in a new tab) https://developers.google.com/fonts/faq and in Google’s data privacy statement: (This link opens in a new tab) https://www.google.com/policies/privacy/.
If you want to subscribe to our newsletter, for this we need at least your email address to which the newsletter should be sent. Further personal details are merely optional in connection with sending the newsletter.
To register you for our newsletter service we use the so-called “double opt-in process”. This process requires the respective user to confirm their registration for our newsletter service by clicking on a link contained in an email we send to them after they have registered for our service to the address they have provided for this. The registration and confirmation are logged. This method aims to prevent unauthorised persons registering for our newsletter service by using another person’s email address.
You can retract any consent you have issued at any time with future effect. Please use the unsubscribe function in our newsletters for this.
Our website uses social plugins (“plugins”) from the social networks facebook.com, google.com (Google+), twitter.com, instagram.com, pinterest.com and LinkedIn (also referred to jointly below as “the providers”). The plugins are identified by the corresponding logos of the providers.
When you access our web pages, your browser establishes a direct connection with the providers’ servers. Through the integration of the plugin, the providers receive at least the information that you have accessed the website concerned, and as the case may be also further information depending on the respective plugin or service. If you are registered with and logged in with the respective provider, this provider can allocate your visit to your user account with them. If you interact with the plugin, for example by using the Facebook “Like” button or making a comment, the corresponding information will be transmitted directly from your browser to the provider and stored there, and also further processed if applicable.
Insofar as within the context of our processing we disclose data to other persons and companies (commissioned processors or third parties), transmit data to them or grant them access to data otherwise, this only takes place on the basis of legal permission (e.g. if it is necessary to transmit the data to third parties or to payment service providers in accordance with Art. 6 Para. 1 (b) GDPR for the performance of a contract), if you have consented to this, if this is provided for by a legal obligation or on the basis of our legitimate interests (e.g. when using agents, web hosting providers, etc.). If we instruct third parties to process data on the basis of a so-called “commissioned data processing agreement”, this takes place on the basis of Art. 28 GDPR.
Insofar as we process data in a third country (i.e. outside the European Union (EU) or the European Economic Area (EEA)) or if this takes place within the framework of using the services of third parties or the disclosure or transmission of data to third parties, it only takes place if this is for the performance of our (pre-)contractual duties, on the basis of your consent, on the basis of a legal obligation or on the basis of our legitimate interests. Subject to any statutory or contractual permissions, we process data or have data processed in a third country only when the particular requirements of Art. 44 ff. GDPR are met. In other words, this processing takes place for example on the basis of particular guarantees, such as the officially recognised ascertainment of a level of data protection corresponding to that of the EU (e.g. for the USA via the “Privacy Shield”) or with the observation of officially recognised special contractual obligations (so-called “standard contractual clauses”).
In accordance with Art. 15 GDPR you have the right to ask for confirmation as to whether respective data are processed and information about these data, as well as to further information and copies of the data.
In accordance with Art. 16 GDPR you have the right to ask for the data concerning you to be completed, or the incorrect data concerning you to be corrected.
In accordance with Art. 17 GDPR you have the right to ask for data concerning you to be deleted immediately, or alternatively in accordance with Art. 18 GDPR for the processing of such data to be restricted.
In accordance with Art. 18 GDPR you have the right to restriction of the processing of your data.
In accordance with Art. 20 GDPR you have the right to ask to receive the data concerning you that you have provided to us. Furthermore you can request that these data be transmitted to other controllers.
In accordance with Art. 77 GDPR you have the right to submit a complaint to the competent supervisory authority.
In accordance with Art. 7 Para. 3 GDPR you have the right to withdraw consents you have issued with future effect.
In accordance with Art. 21 GDPR you have the right to object at any time to the future processing of the data concerning you.

References: Art. 4
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 17
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 28
 Art. 44
 Art. 15
 Art. 16
 Art. 17
 Art. 18
 Art. 18
 Art. 20
 Art. 77
 Art. 7
 Art. 21