Source: http://www.vintageharleysupply.com/privacy-policy/-c46853/
Timestamp: 2019-04-18 10:56:03+00:00

Document:
for the handling of personal data of applicants (clause 2.3).
external data protection officer (certified by TÜV and udis gGmbH - Ulmer Akademie für Datenschutz und Datensicherheit gGmbH).
He is at the same time the data protection officer of TOX PRESSOTECHNIK INTERNA-TIONAL GmbH & Co. KG.
1.3 Personal data are all data that can be related to you personally, e.g. name, address, e-mail addresses, information about your use of our websites (see also clause 2 below).
Processing is any process in connection with personal data. Processing includes, for exam-ple, the collection, recording, organization, sorting, storage, adaptation or modification, read-ing, calling-up, use, disclosure by transmission, dissemination or any other form of provision, reconciliation or linking, restriction, deletion or destruction of personal data.
the language and version of the browser software.
The purpose of the processing of this data is to display our websites to you and to guarantee stability and security. The legal basis is Art. 6 para. 1 sentence 1 lit. f) of the GDPR. It states that the processing of personal data is legal in order to protect our legitimate interests, unless the interests or fundamental rights or freedoms of the data subject prevail.
This personal data will only be stored for the duration of your visit to our website.
When you contact us by e-mail or via a contact form, the data you provide (your e-mail ad-dress, if applicable, your name and your telephone number) will be stored by us for the pur-pose of answering your questions. We delete the data generated in this context after the stor-age is no longer necessary, or restrict the processing if statutory retention obligations exist. The legal basis for these processing operations is Art. 6 para. 1 sentence 1 lit. f) GDPR unless there are legal obligations to retain data, then the legal basis for storage is Art. 6 para 1 sen-tence 1 lit. c) GDPR according to which processing is legal provided this is necessary to fulfil a legal obligation.
a) Additionally to the aforementioned data, cookies are stored on your computer when you use our websites. Cookies are small text files that are stored on your hard drive in the browser you use and through which certain information is transmitted to the person setting the cookie (here: us). Cookies cannot run any programs or transfer viruses to your computer. Their purpose is to make the Internet offer in general more user-friendly and more effective. The legal basis for this is your consent – which can be revoked at any time – in accordance with Art. 6 para. 1 sentence 1 lit. a) GDPR which you give at the start of your visit to our website or Art. 6 para. 1 sentence 1 lit. f) GDPR.
aa) Transient cookies will automatically be deleted when your close your browser. These include in particular the session cookies. These store the so-called session ID with which different requests of your browser can be assigned to the shared session. This allows your computer to be recognized when you return to our website. The session cookies will be deleted when you log out and close the browser.
bb) Persistent cookies will automatically be deleted after a period specified by us, which may vary depending on the cookie. You can delete cookies any time in the security settings of your browser. By deleting the cookies, you also revoke your consent to the processing of the respective cookies.
c) You can configure your browser settings according to your wishes and for example refuse the acceptance of third party cookies or all cookies. Please note that in that case you might not be able to use all the functions of our website.
a) These websites use Google Analytics, a web analysis service of Google Inc. ("Google“). Google Analytics uses so-called "cookies“, text files which are stored on your computer and which allow an analysis of your use of the websites. The information created by the cookie about your use of our websites (such as your anonymized IP address) is generally transmitted to a Google server in the USA and stored there. If IP anonymization is activated on these websites, your IP address is first shortened by Google within the member states of the Euro-pean Union and in other countries which are contracting parties to the Agreement on the Eu-ropean Economic Area. It is only in exceptional cases that the IP address is transmitted to a Google server in the USA and shortened there. On behalf of the operator of these websites Google will use this information to analyze your use of the websites to create reports about the website activities and provide further services for the website operator in connection with the use of the websites and the Internet.
b) The IP address transmitted by your browser in connection with Google Analytics will not be linked to other data by Google.
You can also prevent the collection by Google Analytics by clicking on the following link. An opt-out cookie is set with this link which prevents the collection of your data in the future dur-ing your visit of these websites: Deactivate Google Analytics.
d) These websites use Google Analytics with the extension "_anonymizeIp()“. As a result, IP addresses are further processed in shortened form, so that they cannot be linked to a particu-lar individual. As far as the data collected about you contain personal reference, it will be ex-cluded immediately and the personal data will be deleted immediately.
e) We use Google Analytics to analyze and regularly improve the use of our websites. With the help of the obtained statistics we can improve our offer and make it more interesting for you as a user. For the exceptional cases in which personal data is transferred to the USA, Google has submitted to the EU-US Privacy Shield . The legal basis for the use of Google Analytics is Art. 6 para. 1 sentence 1 lit. f) GDPR.
g) These websites also use Google Analytics for an analysis of visitor flows across devices which is carried out via a user ID. You can deactivate the analysis of your use across multiple devices in you customer account under "My data“, "Personal data“.
a) We integrated YouTube videos in our online offer which are stored at and can be played directly from your websites.
b) When you visit the websites YouTube will receive the information that you accessed the ac-cording subsite of our websites. Additionally, the data mentioned under clause 2.1.1 of this policy are transmitted. This is independent of whether YouTube provides a user account through which you are logged in or whether no user account exists. When you are logged into Google your data will be allocated directly to your account. If you do not want the allocation to your profile on YouTube, you must log out before activating the button. YouTube stores your data as user profiles and uses them for the purposes of advertising, market research and/or demand-oriented design of its websites. Such an evaluation takes place in particular (even for users which are not logged-in) to provide demand-oriented advertising and to inform other us-ers of the social network about your activities on our websites. You have a right of objection to the creation of these user profiles, and you must contact YouTube to exercise this right.
business contact details (e-mail, postal address, telephone number; the information "indus-try" is optional). You must assign a sufficiently secure password for this data.
b) For the registration for our CAD download we use the so-called double-opt-in procedure. This means that after entering your registration data, we will send you an e-mail to the e-mail ad-dress you provided in which we ask you to confirm your registration details. If you do not con-firm your registration, your information will be blocked and deleted after the legal storage pe-riods have expired (at least until the expiry of the limitation period for any claims). In addition, we store your IP addresses and the time at which your registration data was entered and con-firmed. The purpose of the procedure is to be able to prove your registration and, if neces-sary, to clarify any possible misuse of your personal data. The legal basis for this is Art. 6 pa-ra. 1 sentence 1 lit. f) of the GDPR.
During the registration process you have the opportunity to subscribe to our newsletter with current information about our company and our range of services. The declaration of the option to subscribe to our newsletter is optional. You can register to download the CAD data without subscribing to the newsletter. After your subscription to the newsletter, we will carry out the so-called "double opt-in proce-dure", as described above under letter b). If you have subscribed to the newsletter during reg-istration, you also confirm your consent to receiving the newsletter by means of the double opt-in procedure. For the newsletter we only process your e-mail address, your name and the name of the company you work for, so that we can send you the newsletter and address you personally. The legal basis for the processing of your personal data is Art. 6 para. 1 sen-tence 1 lit. a) GDPR. You can revoke your consent to receiving the newsletter and unsub-scribe from the newsletter at any time. You can declare your revocation by e-mail to in-fo@tox-de.com or by sending a message to the contact details in the imprint.
for visitors: date and time of the visit, arrival at and departure from the company premises, contact partner of the visitor in our company, number plate of the car the visitor parked on our company premises.
for all other communication partners: to handle the communication requested by the data subject concerned.
In all cases the legal basis is Art. 6 para. 1 sentence 1 lit. f) of the GDPR. Unless there is a permanent contractual or other legal relationship with the company and/or the authority of the person concerned, his or her personal data will only be processed or stored to perform the respective specific task.
2.2.3 In addition, we process personal data of our customers or their contact persons (first name, last name, company and in some circumstances date of birth) also in order to fulfil our obliga-tions under public law towards authorities, for example for tax and commercial law documen-tation as well as export control. The legal basis for this is Art. 6 para. 1 sentence 1 lit. c) of the GDPR.
first name, last name, e-mail address, address, telephone number (if provided) as well as the application data transmitted to us.
2.3.2 Subject to a separately declared consent, we only process the data in order to carry out the application procedure on which the respective application is based. The data will not be stored without consent after the end of the application procedure and the storage periods applicable in this respect.
As a principle, we do not disclose your data to third parties without your consent.
Sometimes we use the support of third-party companies for processing electronic data. These are reliable service providers that we have carefully selected to process your data in accord-ance with our instructions. The legal basis for this is Art. 28 GDPR. Our service providers are, of course, obligated to handle the data carefully, to act only in accordance with our instruc-tions and according to the applicable data protection regulations, and especially not to use the data for their own purposes nor pass them on to third parties.
In addition, individual cases may arise in which we are legally obliged to pass on your data on official orders as and insofar as this is necessary for the purposes of criminal prosecution or to avert danger by police or other authorities. The legal basis for the passing on of the data in these cases is Art. 6 para. 1 lit. c) of the GDPR.
Finally, there may be cases in which your data is disclosed to companies associated with TOX® PRESSOTECHNIK GmbH & Co. KG (subsidiary or sister company) for one of the purposes mentioned under clause 2 for distribution of work within the TOX group. The purpose of the disclosure is to fulfil the tasks arising in the pursuit of business objectives within a group of companies in a structured manner within our group of companies and in ac-cordance with our division of labour; the legal basis for this is Article 6 para. 1 sentence 1 lit. f) GDPR.
Insofar as personal data is processed outside the states of the European Economic Area ("EEA"), we protect your personal data by transmitting them and processing them within our group of companies exclusively in accordance with the standard contractual clauses stipulat-ed by the EU Commission in the sense of Art. 46 para. 2 lit c GDPR. The standard contractu-al clauses are available at: .
4.2 In addition, you have the right to complain to a data protection supervisory authority about our processing of your personal data.

References: Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 28
 Art. 6
 Art. 46