Source: https://www.capicard.de/en/capicard-international/data-privacy-statement/
Timestamp: 2019-04-25 16:09:00+00:00

Document:
The following data privacy statement applies to the use of the website www.capicard.de (hereinafter referred to as "website").
Data privacy is of utmost importance to us. The collections and processing of your personal data takes place in accordance with the applicable data protection regulations, in particular the EU General Data Protection Regulation (GDPR). In our data privacy statement we would like to inform you to what extent and for which purpose personal data is collected, processed and used via our website.
By using this website, you agree to the collection, use and transfer of your data in accordance with this data privacy statement.
If you wish to object to the collection, processing or use of your data by us in its entirety, or individual measures in accordance with this data privacy statement, please address your objection to the aforementioned data controller.
We collect information about you when you use this website. We automatically record information about your usage behaviour and interaction with us, and register data about your computer or mobile device. We collect, store and use data about every access to our online services (known as server log files). Access data includes name and URL of the accessed file, if necessary a user name if authentification takes place, date and time of access, size of the request and server response, message about successful access (HTTP response code), browser type and version, operating system, referrer URL (i.e. the page visited previously), IP address and the visitor's actual request.
We use this log data without assignment to you or other profiling for statistical evaluations for the purpose of operation, security and optimisation of our online services, and also for the anonymous recording of the number of visitors to our website (traffic) and the extent and nature of use of our website and services. Based on this information, we can provide personalised and location-based content and analyse data traffic, troubleshoot and improve our services. We reserve the right to retrospectively review the log data if, on the basis of concrete evidence, there is a legitimate reason to suspect unlawful use. We store IP addresses in the log files for a limited time if this is required for security purposes. We also store IP addresses if we have a specific suspicion of a crime in connection with the use of our website.
If you contact us (e.g. using the contact form or via e-mail), we store your details in order to process your enquiry and in case any subsequent queries arise. We only store and use further personal data if you provide consent or this is legally permissible without your consent.
We use Google Analytics, a web analytics service provided by Google Inc. ('Google'). Google Analytics uses so-called 'cookies', which are text files saved on your computer that make an analysis of your use of the website possible. The information generated by the cookie on the use of the website by visitors is generally transmitted to a Google server in the USA and stored there.
If IP anonymisation is activated on this website, however, your IP address will be abbreviated by Google beforehand in Member States of the European Union or a state party to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the USA and abbreviated there. We use IP anonymisation on this website. As requested by us, Google will use this information to evaluate your use of the website, to create reports concerning website activity and to carry out other services related to the use of the website and the Internet for us.
The IP address provided by your browser as part of Google Analytics will not be merged with other Google data. You can prevent the storage of cookies by configuring your browser software accordingly; however, please note that if you do this, you may not be able to use all the features of this website to the fullest extent possible.
You can also prevent the logging of data generated through cookies and associated with your use of the website (including your IP address) by Google and the processing of this data through Google by downloading and installing the browser plug-in available via the following link: http://tools.google.com/dlpage/gaoptout?hl=de.
To opt out of the recording of data generated by Matomo relating to your use of the website, deactivate the checkbox below.
For processing operations where we can obtain consent for a particular processing purpose, Art. 6 Para. 1 lit. a of the GDPR serves as the legal basis.
For the processing of personal data that is required for the fulfilment of a contract, Art. 6 Para. 1 lit. b of the GDPR serves as the legal basis. For example, this is the case if data pertaining to the data subject is required for the provision of a service or for the implementation of contractual measures.
If the processing of personal data is required by legal obligation, such as to meet tax obligations, said processing is based on Art. 6 Para.1 lit. c of the GDPR.
Processing operations may ultimately be based on Art. 6 Para. 1 lit. f of the GDPR. This article serves as the legal basis for processing operations if the processing is required to safeguard the legitimate interests of our company, unless the interests, fundamental rights and freedoms of the data subject prevail. Our interests in data processing are, above all, ensuring the operation and security of the website, examining the way the website is used by visitors and simplifying website use.
Unless specifically stated, we only store personal data as long as is necessary to fulfil the purposes pursued.
Under applicable legislation, you have various rights concerning your personal data. If you would like to assert these rights, please send your request by e-mail or post with clear identification of yourself to the address specified in section 1.
the existence of an automated decision-making process including profiling in accordance with Art. 22 Paras.1 and 4 of the GDPR and - at least in these cases - meaningful information concerning the logic involved and the implications and intended consequences of such processing for you.
If personal data is transmitted to a third country or international organisation, you have the right to be informed of the appropriate safeguards in connection with said transmission as per Art. 46 of the GDPR.
You have the right to request the immediate rectification of inaccurate personal data relating to you. Under consideration of the purposes of the processing, you have the right to request the completion of incomplete personal data, including by means of a supplementary statement.
The personal data is no longer required for the purpose for which it was collected or otherwise processed.
You revoke your consent to processing as per Art. 6 Para. 1 lit. a or Art. 9 Para. 2 lit. a of the GDPR and there is no other legal basis for processing.
You object to processing in accordance with Art. 21 Para. 1 of the GDPR and there are no prevailing, legitimate reasons for the processing, or you object to processing in accordance with Art. 21 Para 2 of the GDPR.
The deletion of personal data relating to you is required to fulfil a legal obligation in accordance with European Union legislation or the law of the Member States to which we are subject.
If we have made the personal data relating to you public and are obliged to delete it in accordance with Art. 17 Para 1 of the GDPR, we shall, under consideration of the available technology and implementation costs, take appropriate measures including technical means to inform other data controllers who process the personal data that you have requested the deletion of all links to the personal data or copies or replications thereof.
you have objected to processing in accordance with Art. 21 Para. 1 of the GDPR and it is not yet certain whether legitimate reasons of our company prevail over your reasons.
the processing is carried out using an automated procedure.
In exercising your right to data portability in accordance with Para. 1, you have the right to request the direct transfer of the personal data from us to another data controller, as far as is technically feasible.
For reasons that arise from your particular situation, you have the right to object at any time to the processing of your personal data pursuant to Art. 6 Para. 1 lit. e or f of the GDPR; this also applies to profiling based on these provisions. We shall no longer process your personal data unless we can prove compelling, legitimate reasons for the processing that prevail over your interests, rights and freedoms or the processing is required for the purpose of enforcing, exercising or defending legal claims.
If the personal data is processed by us for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such advertising; this also applies to profiling insofar as it is associated with such direct advertising.
For reasons that arise from your particular situation, you have the right to object to the processing of your personal data for scientific or historical research purposes, or for statistical purposes in accordance with Art. 89 Para. 1 of the GDPR, unless this processing is required to fulfil a task in the reasons of public interest.
You have the right to revoke your consent to personal data processing at any time.
You have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your place of residence, employment or the place of the alleged breach if you believe that the processing of your personal data is unlawful.
We transmit your personal data in encrypted form. We use the SSL (Secure Socket Layer) coding system. Please note, however, that data transmission over the Internet (e.g. via e-mail communication) may have security vulnerabilities. It is impossible to guarantee complete data protection against access by third parties.
To secure your data, we take technical and organisational security measures that are always adapted to state-of-the-art technology.
We cannot guarantee that our service will be available at specific times; faults, interruptions and failures cannot be excluded. The servers used by us are regularly and diligently backed up.
No automated decision-making takes place using the personal data collected.
In general, your personal data will only be used within our company.
If and insofar as we engage with third parties to fulfil contracts (such as logistics service providers), they only receive personal data to the extent necessary for the corresponding service.
In the case that we outsource certain aspects of data processing ("order processing"), we contractually obligate processors to use personal data only in accordance with the requirements of data protection laws and to ensure the protection of the data subject's rights.
Apart from those cases stipulated in Point 2.3, data transmission to agencies or persons outside the EU does not take place and is not planned.

References: Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 22
 Art. 46
 Art. 6
 Art. 9
 Art. 21
 Art. 21
 Art. 17
 Art. 21
 Art. 6
 Art. 89