Source: https://www.glasklar.com/en/dataprotection
Timestamp: 2019-04-26 14:37:08+00:00

Document:
We are glad that you are interested in GLASKLAR’s website. We attach great importance to protecting your personal data when they are collected, processed and used on your visit to our website. We respect the regulations contained in the EU General Data Protection Regulation, the Federal Data Protection Act, the Telemedia Act as well as any other applicable, particularly country-specific data protection provisions.
As a general principle, GLASKLAR’s website (www.glasklar.com) can be used without supplying any personal details (e.g. the name, address, email address or telephone number of the person concerned). However, if you wish to use special services from our range of products offered through our website, it may be necessary for us to process personal details. We always obtain your consent if it is necessary to process personal data, and the basis for processing them is not already enshrined in law.
This notice informs you of the way in which we collect, process and use personal data, the extent to which we do so, and our purpose in doing so. This data protection notice also informs you of your rights.
We have taken a number of technical and organisational steps to protect any personal details of yours processed through this website as seamlessly as possible. Nevertheless, we point out that due to the transmission of data over the internet and possible security loopholes associated with this technology, it is not possible to guarantee absolute protection. For that reason, you have the option of sending us your personal data by other means (e.g. by phone or post).
A “data subject” is any identified or identifiable natural person whose personal data are processed by the entity responsible for processing.
A “filing system” means any structured set of personal data which are accessible according to specific criteria, whether centralised, decentralised or dispersed on a functional or geographical basis.
“Recipient” means a natural or legal person, public authority, agency or another body, to which the personal data are disclosed, whether a third party or not. However, public authorities which may receive personal data as part of a particular inquiry in accordance with Union or Member State law are not regarded as recipients.
“Consent” of the data subject means any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which they, by a statement or by a clear affirmative action, signal agreement to the processing of personal data relating to them.
GLASKLAR Jörg Bartsch e.K., Servatiusstraße 80, 51109 Köln, Germany, Tel.: +49 221 9226560, Fax: +49 221 92265621, Email: info@glasklar.com, Website: www.glasklar.com.
Oliver Bartsch, c/o GLASKLAR Jörg Bartsch e.K., Servatiusstraße 80, 51109 Köln, Germany, Tel.: +49 221 9226560, Fax: +49 221 92265621, Email: oliver.bartsch@glasklar.com.
When a data subject or an automated system visits our website, general information on their visit is generally stored in the log files of our server. This can relate to the type and version of browser used, the operating system as well as the website from the data subject or automated system arrived on our website, and equally it can refer to the subpages visited on our website, the date and time when the website was accessed, the IP address, the Internet Service Provider of the accessing system and other data and information which we need to avert danger in the event of attacks on our IT systems.
These data are not used by us to enable us to deduce the identity of the data subject. Rather we need the data to correctly transmit content on our website, optimise our site, guarantee its full functionality or provide law enforcement authorities the information they need in the event of a cyber attack. We evaluate these data solely for statistical purposes and also to enhance data protection and data security within our company. The intention is to ensure that the personal data processed by us are given the best possible protection. We store personal data which you communicate to us separately from the anonymous data specified which our server records in log files.
In accordance with statutory requirements, details can be found on the website www.glasklar.com which allow you to make contact with our company electronically and to communicate with us directly. Such information also includes our email address.
If you contact us by email or by using a contact form, the personal data you send us will be automatically stored. These data sent to us voluntarily by you, are stored for the purpose of processing your enquiry or contacting you as a data subject. We do not pass such data on to third parties.
We use SSL encryption to protect the data you send us to best possible effect. You can recognise connections that are encrypted in this way by the prefix “ HYPERLINK “https://” https://” in the address line of your browser. Unencrypted pages bear the prefix “http://”. Data sent to us with SSL encryption activated cannot be read by third parties. We recommend that you only send confidential information, in particular, if SSL encryption is activated, and that your approach us if you have any doubts.
We only process and store personal data for the time required to meet the purpose of storing them, or if there are statutory provisions requiring such storage which we are obliged to respect.
If the purpose for which the data have been stored, no longer applies or if a statutory storage term expires, the personal data routinely blocked or deleted in accordance with statutory regulations.
On the basis of provisions contained in the GDPR, you enjoy the following rights as a data subject.
As a data subject, you have the right to request confirmation from the controller responsible for processing data as to whether personal data relating to yourself are being processed. If you would like to take advantage of this right of confirmation, you are free at any time to approach any Data Protection Officer mentioned in this data protection notice or another of our employees.
If personal data are sent to a third country or an international organisation, you have the right as a data subject to be informed of the appropriate guarantees in accordance with Article 46 GDPR in connection with their transmission.
If you as a data subject would like to take advantage of this right of information, you can approach any Data Protection Officer mentioned in this data protection notice or another of our employees at any time.
As a data subject, you have the right to demand that we immediately correct any false personal data relating to you. Taking account of the purposes of the processing, you have the right as a data subject to demand that incomplete personal data are completed — even by means of a supplementary statement.
If you as a data subject would like to take advantage of this right of correction, you can approach any Data Protection Officer mentioned in this data protection notice or another of employee of GLASKLAR at any time.
a) The personal data are no longer needed for the purposes for which they were collected or otherwise processed.
b) The data subject revokes their consent on which the processing was based in accordance with Art. 6 (1) (a) GDPR or Art. 9 (2) (a), and there is no other legal basis for the processing.
c) The data subject objects to processing in accordance with Art. 21 (1) GDPR, and there are no overriding, justified reasons for the processing, or the data subject objects to the processing in accordance with Art. 21 (2) GDPR.
d) The personal data were illegally processed.
e) Deletion of the personal data is required to meet a legal obligation in accordance with Union or Member State law to which the controller is subject.
f) The personal data were collected with reference to services offered by the information society in accordance with Art. 8 (1) GDPR.
If one of these reasons applies and you as the data subject would like to effect the deletion of your personal data stored by us, you can approach any Data Protection Officer mentioned in this data protection notice or another of our employees at any time. A Data Protection Officer mentioned in this data protection notice or another GLASKLAR employee will ensure that the request for deletion is complied with promptly.
If we have published the personal data and our company is obliged under Art. 17 (1) GDPR to delete the personal data, we will take appropriate steps, including of a technical nature, taking into account the technology available and the implementation costs, to inform other controllers responsible for processing the data who are processing the personal data published that you as the data subject have requested that such other controllers responsible for processing delete all links to these personal data or copies or duplicates of such personal data unless processing is necessary. Any Data Protection Officer of GLASKLAR or another employee will make all the necessary arrangements in each individual case.
a) The accuracy of the personal data is disputed by the data subject for a length of time which allows the controller to review the accuracy of the personal data.
b) The processing is illegal, you as the data subject reject the deletion of your personal data and instead request that the use of the personal data be restricted.
c) We have no further need of the personal data for the purposes of processing, but you as the data subject need them in order to assert, exercise or defend legal interests.
d) You as the data subject have objected to the processing pursuant to Art. 21 (1) GDPR, and it has not yet been determined whether our legitimate reasons outweigh your reasons as the data subject.
If one of these conditions is met and you as the data subject would like to request the restriction of your personal data stored by us, you can approach any Data Protection Officer mentioned in this data protection notice or another of our employees at any time. Any Data Protection Officer of GLASKLAR or another employee will arrange for processing to be restricted.
As a data subject, you have the right to receive the personal data relating to yourself which you have provided to us in a structured, conventional and machine-readable format. You also have the right to transmit these data to another controller without being hindered in doing so by the controller to whom the personal data were provided, provided the processing is based on the consent pursuant to Art. 6 (1) (a) GDPR or Art. 9 (2) (a) GDPR or on a contract pursuant to Art. 6 (1) (b) GDPR and the processing is conducted with the aid of an automated procedure unless the processing is required for performing a task which is in the public interest or is carried out in the exercise of official authority conferred on the controller. As a data subject exercising your right of data portability pursuant to Art. 20 (1) GDPR, you also have the right to have your personal data transmitted directly from one controller to another provided this is technically feasible and unless the rights and freedoms of other persons are impaired by doing so. If you as a data subject would like to take advantage of this right of data portability, you can approach any Data Protection Officer mentioned in this data protection notice or another of our employees at any time.
As the data subject, you have the right, for reasons stemming from your particular situation, to object at any time to the processing of personal data relating to yourself carried out on the basis of Art. 6 (1) (e) or (f) GDPR. This also applies to any profiling based on these provisions.
In the event of an objection, we will no longer process the personal data unless we can show compelling, sensitive reasons for the processing which outweigh the interests, rights and freedoms of yourself as the data subject, or the processing serves to assert, exercise or defend legal interests.
If we process personal data in order to conduct direct advertising, you as the data subject have the right to object at any time to the processing of the personal data relating to yourself for the purpose of such advertising. This also applies to the profiling provided it is associated with such direct advertising. If you as the data subject lodge an objection with us to the processing for the purpose of direct advertising, we will no longer process the personal data for such purposes.
As the data subject, you also have the right, for reasons arising from your particular situation, to object to the processing of personal data relating to yourself carried out on our premises for scientific or historical research purposes or for statistical purposes in accordance with Art. 89 (1) GDPR, unless such processing is required to perform a task which lies in the public interest.
If you as a data subject would like to take advantage of this right of objection, you can approach any Data Protection Officer mentioned in this data protection notice or another of employee of GLASKLAR at any time. As the data subject, you are also free to exercise your right of objection in connection with the use of services of the information society, notwithstanding Directive 2002/58/EC by means of automated procedures in which technical specifications are used.
c) has been made with your explicit consent as the data subject.
If the decision is necessary for concluding or fulfilling a contract between you as the data subject and ourselves, or if it is taken with your explicit consent as the data subject, we will take appropriate steps to preserve your rights and freedoms as well as your legitimate interests as the data subject which at the very least includes the right to have a person from GLASKLAR intervene, set out your own viewpoint and contest the decision.
If you as a data subject would like to take advantage of these rights regarding automated decisions, you can approach any Data Protection Officer mentioned in this data protection notice or another of our employees at any time.
As the data subject affected by the processing of personal data, you have the right at any time to revoke your consent to the processing of personal data.
If you as a data subject would like to take advantage of this right revoke your consent, you can approach any Data Protection Officer mentioned in this data protection notice or another of our employees at any time.
We have integrated the Google Analytics Component (with anonymisation function) on this website.
Google Analytics is a web analysis service. Web analysis is the collection, aggregation and evaluation of data regarding the behaviour of visitors to websites. Among other things, a web analysis service records data on the website from which you as the data subject have arrived on our website (so-called referrer), which subpages of our website you access or how often and the length of time you view any particular subpage. Web analysis is primarily used to optimise our website and to conduct a cost -benefit analysis of internet advertising.
The company operating the Google Analytics Component is Google Inc. 1600 Amphitheatre Parkway Mountain View, CA 94043, USA.
We use the suffix “_gat._anonymizeIp” for web analysis via Google Analytics. Google uses this suffix to truncate and anonymise the IP address of the data subject’s internet connection if our website is accessed from a Member State of the European Union or from another country that is party to the agreement on the European Economic Area.
The purpose of the Google Analytics Component is to analyse visitor traffic on our website. Google uses the data and information gained among other things to evaluate use of our website, compile online reports for us which identify activities on our web pages and to provide further services in connection with the use of our website.
By placing the cookie, Google is able to analyse use of our website. Every time one of the individual pages of this website operated by GLASKLAR and which has a Google Analytics Component installed, is called up, the internet browser on the IT system of the data subject is automatically induced by the relevant Google Analytics Component to transmit data to Google for the purpose of online analysis. As part of this technical process, Google becomes aware of personal data such as the IP address of the data subject which among other things enable Google to trace where visitors come from and what they click on, thereby facilitating commission billing.
Personal information, e.g. time of access, location from which the site was accessed and the frequency of visits to our website by the data subject, are saved by means of cookies. With every visit to our website, these personal data, including the IP address of the internet connection used by the data subject, are transmitted to Google in the United States of America. These personal data are stored by Google in the United States of America. Google may pass on these personal data collected via the technical procedure to third parties under certain circumstances.
The data subject can at any time prevent our website from placing cookies, as described above, by making a corresponding setting in their internet browser, thereby permanently rejecting the installation of cookies. Any such setting in the internet browser used would also prevent Google from installing a cookie on the data subject’s IT system. Any cookie already installed by Google Analytics can also be deleted at any time via the internet browser or other software programmes.
You can call up further information and Google’s latest data protection provisions at https://www.google.de/intl/de/policies/privacy/ and at http://www.google.com/analytics/terms/de.html Google Analytics is explained in greater detail at this link: https://www.google.com/intl/de_de/analytics/.
f) Processing is required to preserve the legitimate interests of the controller or a third party unless the interests or basic rights and basic freedoms of the data subject which require the protection of personal data, predominate, especially if the data subject is a child.
If the processing of personal data is based on Art. 6 (1) (f) EU-GDPR, our legitimate interest is the conduct of our business activities to further the prosperity of all our employees and shareholders.
We store personal data in each case for the period defined by the relevant statutory retention period. After this deadline expires, the corresponding data are deleted as a matter of routine provided they are no longer required to fulfil or initiate a contract.
We inform you that the provision of personal data is partly prescribed in law (e.g. tax regulations) or can result from contractual obligations (e.g. details of contractual partner). Sometimes the conclusion of a contract may require you as the data subject to provide us with personal data which consequently have to be processed by us. For example, as the data subject, you are obliged to provide us with personal data if our company concludes a contract with you. Any failure to provide personal data would mean that no contract could be concluded with you as the data subject. Before you as the data subject provide personal data, you must approach our Data Protection Officer or one of our staff. The latter will clarify for you as the data subject based on the individual case whether the provision of personal data is statutorily or contractually prescribed or is required to conclude the contract, whether there is any obligation to provide personal data and what the consequences would be of not providing personal data.

References: Art. 6
 Art. 9
 Art. 21
 Art. 21
 Art. 8
 Art. 17
 Art. 21
 Art. 6
 Art. 9
 Art. 6
 Art. 20
 Art. 6
 Art. 89
 Art. 6