Source: https://en.teknihall.de/contact/ctc/
Timestamp: 2019-04-20 12:56:58+00:00

Document:
Thank you for visiting our website and for your interest in our company. Please find below details of how we handle your personal data when you use our website. Personal data are all data that allow you to be personally identified. Your data are protected in accordance with statutory regulations, including but not limited to the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (Bundesdatenschutzgesetz, BDSG). We detail below how data is collected during your visit to our website and how those data are used.
The data controller is the natural or legal person which, alone or jointly with others, determines the purposes and means of the processing of personal data.
1.3 On our website, we use SSL or TLS encryption for security reasons and to protect the transfer of personal data and other confidential content (for example orders or enquiries sent to the controller). An encrypted connection is indicated by „https://“ and the padlock symbol in your browser address line.
We subcontract, for example to logistics and other service companies, to process transactions.
The basis for processing is our legitimate interest pursuant to Art.(6)(1)(f) GDPR in improving the stability and functionality of our website. However, we reserve the right to check server log files at a later point if there are concrete indications of unlawful use. Non-anonymised server log files are deleted automatically after seven days at the latest.
Our website is hosted by a hosting provider that provides us with infrastructure and platform services, computing capacity, memory capacity and database services, security services and technical maintenance services. We have a processor contract with that hosting provider. The purpose of data processing is ensuring the availability of our website, in which we have a legitimate interest, Art. 6(1)(f) GDPR.
The server log file data are also collected by third-party providers (see below).
The session cookies we set are deleted at the end of the browser session, in other words when you close your browser. Persistent cookies remain on your terminal device and allow us or our partners (third-party cookies) to recognise your browser the next time you visit our site. These cookies are automatically deleted after a set time, which can vary from cookie to cookie.
Where personal data are also processed by individual cookies implemented by us, said data are processed in accordance with Art. 6(1)(b) GDPR either for the performance of a contract or in accordance with Art. 6(1)(f) GDPR for the purposes of pursuing our legitimate interests in the best possible functionality for our website and effective and customer-friendly pages.
You can reject the use of all cookies for online marketing purposes for many services, in particular in the case of tracking, on the US page https://www.aboutads.info/choices/or the EU page https://www.youronlinechoices.com/.
If you contact us using electronic communication (for example a contact form or e-mail), personal data are collected. The specific data collected in a contact form are clear from the form in question. These data are only saved and used for the purposes of responding to your enquiry or contacting you and for related technical administration. We are unable to process enquiries without this mandatory information. The provision of all other information is voluntary.
The legal basis for processing the data is our legitimate interest pursuant to Art.(6)(1)(f) GDPR in responding to your enquiry. If you are contacting us with a view to concluding a contract, an additional legal basis for processing is Art. 6(1)(b) GDPR. The legal basis for the information you provide voluntarily is Art. 6(1)(a) GDPR.
Your data are deleted when we finish processing your request. This is the case when it can be assumed from the circumstances that the matter in question has been dealt with in full and provided we have no statutory retention obligations.
For our e-mail communication, we have contracted a service provider that provides us with infrastructure and platform services, computing capacity, memory capacity and database services, security services and technical maintenance services. We have a processor contract with that provider. The purpose of data processing is ensuring the availability of our e-mail communication, in which we have a legitimate interest, Art. 6(1)(f) GDPR.
If you open a personal customer account with us, we collect and process your personal data for the performance of the contract with you pursuant to Art. 6(1)(b) GDPR. It is clear from the registration form which details are mandatory. We cannot open a customer account for you without your details. Your data are stored for as long as the contract for the customer account with us is effective. A customer account can be deleted at any time. The legal basis for the information you provide voluntarily is Art. 6(1)(a) GDPR.
If you order goods and/or services from us, we collect and process your personal data for the performance of the contract with you pursuant to Art. 6(1)(b) GDPR. It is clear from the order form which details are mandatory. We cannot process the order without your details. The legal basis for the information you provide voluntarily is Art. 6(1)(a) GDPR.
We work together with external service providers who provide certain or all services for performance of the contracts entered into with you.
The personal data required for delivery are provided to the carriers commissioned with delivery as part of contract processing. We disclose the payment data required for payment processing to the contracted payment service provider or the banks. Disclosure is solely for the purpose of processing the contract with you. The legal basis for the disclosure of the data is Art.(6)(1)(b) GDPR.
If you opt for credit card payment with the payment service provider ConCardis, payments are processed through the payment service provider ConCardis GmbH, Helfmann-Park 7, 65760 Eschborn, to which we provide the information you provided as part of the order process and the information about your order in accordance with Art. 6(1)(b) GDPR. Your data are disclosed solely for the purposes of payment processing with the payment service provider ConCardis and only to the extent necessary for that purpose.
If you pay via PayPal, we disclose your payment data as part of payment processing to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter „PayPal“). Data are disclosed in accordance with Art.(6)(1)(b) GDPR and only to the extent necessary for payment processing.
You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if this is required for contractual payment processing.
When the contract has been processed in full and payment of all outstanding receivables has been made in full, your data shall be blocked for further use and, upon expiry of the retention periods under tax and commercial law, deleted, provided you have not expressly consented to the continued use of your data.
Our website only uses Google Analytics with the extension „_anonymizeIp()“, which ensures that IP addresses are anonymised (shortened) and cannot be directly associated with a specific person. When this extension is used, your IP address is shortened by Google within Member States of the European Union or in other signatories to the Agreement on the European Economic Area prior to transfer. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. In these exceptional cases, the basis for this processing is our legitimate interest pursuant to Art.(6)(1)(f) GDPR in the statistical analysis of user behaviour for optimisation and marketing purposes. Google will use this information on our behalf to evaluate your use of the website, to compile reports on website activity, and to provide us with further services relating to website and Internet use. The IP address transmitted by your browser through Google Analytics shall not be associated with other data held by Google.
to prevent data collection by Google Analytics on this website in future. An opt-out cookie is then saved on your device. If you clear your cookies, you will have to click on the link again.
The anonymised data collected are saved for a period of no more than 14 months. The data are then automatically deleted.
Google, based in the USA, is certified under the US-EU Privacy Shield framework, which guarantees compliance with the privacy standards applicable in the EU.
YOU HAVE THE RIGHT TO OBJECT, ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION, AT ANY TIME TO PROCESSING OF PERSONAL DATA CONCERNING YOU WHICH IS BASED ON OUR OVERRIDING LEGITIMATE INTEREST (ART. 6(1) (E) OR (F) GDPR), WITH EFFECT FOR THE FUTURE. YOU WILL FIND THE APPLICABLE CONDITIONS IN ART. 21 GDPR.
Unless a different retention period is specific above, we store the data for as long as is necessary for their designated purpose and for as long as statutory retention obligations apply. In accordance with statutory requirements, data are retained for six years pursuant to section 257 par. 1 HGB [German Commercial Code] (account books, inventories, opening balance sheets, financial statements, business letters, accounting records, etc.) and for ten years pursuant to section 147 par. 1 AO [German Fiscal Code] (accounts, records, management reports, accounting records, trade or business letters, documents relevant for taxation, etc.).
Upon expiry of the retention period, the data in question are routinely deleted, provided they are no longer required for the performance or initiation of a contract and we have no legitimate interest in continued retention.

References: Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 ART. 21