Source: https://www.elspro.de/en/imprint/data-protection-declaration/
Timestamp: 2019-04-22 00:39:17+00:00

Document:
Thank you for your interest in our company. Data protection is particularly important to the management of ELSPRO Elektrotechnik GmbH & Co. KG. Use of the Internet pages of ELSPRO Elektrotechnik GmbH & Co. KG is basically possible without giving any personal data. However, if a data subject wishes to make use of special services of our company via our website, it may be necessary to process personal data. If the processing of personal data is necessary and there is no legal basis for such processing, we generally obtain the consent of the data subject.
The processing of personal data, such as the name, address, e-mail address or telephone number of a data subject, is always carried out in accordance with the GDPR and in accordance with the data protection regulations applicable to ELSPRO Elektrotechnik GmbH & Co. KG is subject to country-specific data protection regulations. By means of this data protection declaration, our company would like to inform the public about the type, scope and purpose of the personal data collected, used and processed by us. Furthermore, data subjects will be informed of their rights by means of this data protection declaration.
The ELSPRO Elektrotechnik GmbH & Co. KG has implemented numerous technical and organisational measures to ensure that the personal data processed via this website is protected as completely as possible. Nevertheless, Internet-based data transmissions can have security gaps, so that absolute protection cannot be guaranteed. For this reason, every person concerned is free to transmit personal data to us by alternative means, for example by telephone.
The data protection declaration of ELSPRO Elektrotechnik GmbH & Co. KG is based on the terms used by the European Directive and Regulation Giver for the adoption of the General Data Protection Regulation (GDPR). Our data protection declaration should be easy to read and understand both for the public and for our customers and business partners. To ensure this, we would like to explain the terms used in advance.
The website of ELSPRO Elektrotechnik GmbH & Co. KG collects a series of general data and information each time a person or an automated system accesses the website. This general data and information is stored in the log files of the server. We may record (1) the browser types and versions used, (2) the operating system used by the accessing system, (3) the website from which an accessing system reaches our website (so-called referrer), (4) the subwebsites which are accessed via an accessing system on our website, (5) the date and time of access to the Website, (6) an Internet Protocol address (IP address), (7) the Internet service providers of the accessing system, and (8) other similar data and information used for security purposes in the event of attacks on our information technology systems.
ELSPRO Elektrotechnik GmbH & Co. KG does not draw any conclusions about the person concerned. Rather, this information is required to (1) correctly deliver the contents of our website, (2) optimize the contents of our website and the advertising for it, (3) ensure the permanent functionality of our information technology systems and the technology of our website, and (4) provide law enforcement authorities with the information necessary for criminal prosecution in the event of a cyber attack. These anonymously collected data and information are collected by ELSPRO Elektrotechnik GmbH & Co. KG is therefore evaluated statistically and with the aim of increasing data protection and data security in our company in order ultimately to ensure an optimal level of protection for the personal data processed by us. The anonymous data of the server log files are stored separately from all personal data provided by a person concerned.
On the website of ELSPRO Elektrotechnik GmbH & Co. KG gives users the opportunity to subscribe to our company’s newsletter. Which personal data are transmitted to the person responsible for processing when ordering the newsletter is determined by the input mask used for this purpose.
The ELSPRO Elektrotechnik GmbH & Co. KG informs its customers and business partners at regular intervals by means of a newsletter about offers of the company. The newsletter of our company can only be received by the person concerned if (1) the person concerned has a valid e-mail address and (2) the person concerned registers for the newsletter dispatch. For legal reasons, a confirmation e-mail in the double opt-in procedure is sent to the e-mail address entered by the person concerned for the first time for sending the newsletter. This confirmation e-mail serves to check whether the owner of the e-mail address has authorized the receipt of the newsletter as the person concerned.
When registering for the newsletter, we also store the IP address of the computer system used by the person concerned at the time of registration assigned by the Internet Service Provider (ISP) as well as the date and time of registration. The collection of this data is necessary in order to be able to trace any possible misuse of the e-mail address of a data subject at a later point in time and therefore serves the legal protection of the data controller.
The ELSPRO Elektrotechnik GmbH & Co. KG contain so-called tracking pixels. A tracking pixel is a miniature graphic embedded in e-mails sent in HTML format to enable log file recording and analysis. This allows a statistical evaluation of the success or failure of online marketing campaigns to be carried out. With the embedded pixel-code ELSPRO Elektrotechnik GmbH & Co. KG will recognize whether and when an e-mail was opened by an affected person and which links in the e-mail were called up by the affected person.
Such personal data collected via the tracking pixels contained in the newsletters are stored and evaluated by the data controller in order to optimise the dispatch of the newsletter and to adapt the content of future newsletters even better to the interests of the person concerned. This personal data will not be passed on to third parties. Persons concerned are entitled at any time to revoke the respective separate declaration of consent given via the double opt-in procedure. After revocation, this personal data will be deleted by the data controller. If you unsubscribe from the newsletter, ELSPRO Elektrotechnik GmbH & Co. KG automatically as a revocation.
The website of ELSPRO Elektrotechnik GmbH & Co. KG contains information due to legal regulations, which enables a quick electronic contact to our company as well as a direct communication with us, which also includes a general address of the so-called electronic mail (e-mail address). If a data subject contacts the data controller via e-mail or a contact form, the personal data transmitted by the data subject will be stored automatically. Such personal data voluntarily provided by a data subject to the controller will be stored for the purpose of processing or contacting the data subject. This personal data is not passed on to third parties.
The data subject also has a right to know whether personal data have been transferred to a third country or to an international organisation. If this is the case, the data subject also has the right to obtain information on the appropriate guarantees in connection with the transfer.
If a data subject wishes to exercise this right of access, he may contact the data protection officer of the controller at any time.
If one of the above-mentioned reasons applies and a person concerned deletes personal data that ELSPRO Elektrotechnik GmbH & Co. KG, it may contact an employee of the data controller at any time. The employee of ELSPRO Elektrotechnik GmbH & Co. KG will arrange for the request for deletion to be complied with without delay.
If the personal data were collected by ELSPRO Elektrotechnik GmbH & Co. KG and if our company, as the person responsible, is obliged to delete personal data in accordance with Art. 17 Para. 1 GDPR, ELSPRO Elektrotechnik GmbH & Co. KG, taking into account the available technology and the implementation costs, to inform other persons responsible for data processing who process the published personal data that the data subject has requested the deletion of all links to this personal data or of copies or replications of this personal data from these other persons responsible for data processing, insofar as the processing is not necessary. The employee of ELSPRO Elektrotechnik GmbH & Co. KG will arrange for the necessary in individual cases.
If one of the above-mentioned conditions is fulfilled and a person concerned restricts personal data that ELSPRO Elektrotechnik GmbH & Co. KG, it may contact an employee of the data controller at any time. The employee of ELSPRO Elektrotechnik GmbH & Co. KG will cause the processing to be restricted.
To assert the right to data transferability, the person concerned may contact the data protection officer of ELSPRO Elektrotechnik GmbH & Co. KG.
The ELSPRO Elektrotechnik GmbH & Co. KG will no longer process personal data in the event of an objection, unless we can prove compelling reasons worthy of protection for the processing, which outweigh the interests, rights and freedoms of the data subject, or the processing serves to assert, exercise or defend legal claims.
ELSPRO Elektrotechnik GmbH & Co. KG, the person concerned has the right to object at any time to the processing of personal data for the purpose of such advertising. This also applies to profiling insofar as it is connected with such direct advertising. If the person concerned objects to ELSPRO Elektrotechnik GmbH & Co. KG of processing for direct advertising purposes, ELSPRO Elektrotechnik GmbH & Co. KG no longer processes personal data for these purposes.
In addition, the data subject has the right, for reasons arising from his/her particular situation, to object to the processing of personal data relating to him/her that is held by ELSPRO Elektrotechnik GmbH & Co. KG for scientific or historical research purposes or for statistical purposes pursuant to Art. 89 para. 1 GDPR, unless such processing is necessary to fulfil a task in the public interest.
To exercise the right of objection, the person concerned may contact the data protection officer of ELSPRO Elektrotechnik GmbH & Co. KG or, alternatively, to any employee. The data subject shall also be free to exercise his right of opposition in relation to the use of information society services by means of automated procedures using technical specifications, notwithstanding Directive 2002/58/EC.
If the decision (1) is necessary for the conclusion or fulfilment of a contract between the data subject and the data controller or (2) is made with the express consent of the data subject, ELSPRO Elektrotechnik GmbH & Co. KG shall take appropriate measures to protect the rights and freedoms as well as the legitimate interests of the data subject, including at least the right to obtain the intervention of a person by the data controller, to state his own position and to challenge the decision.
Art. 6 I lit. a GDPR serves our company as a legal basis for processing operations for which we obtain consent for a specific processing purpose. If the processing of personal data is necessary for the performance of a contract to which the data subject is a party, as is the case for example with processing operations necessary for the delivery of goods or the provision of other services or consideration, the processing is based on Art. 6 I lit. b GDPR. The same applies to such processing processes that are necessary to carry out pre-contractual measures, for example in cases of enquiries about our products or services. If our company is subject to a legal obligation which requires the processing of personal data, for example to fulfil tax obligations, the processing is based on Art. 6 I lit. c GDPR. In rare cases, the processing of personal data may become necessary to protect the vital interests of the data subject or another natural person. This would be the case, for example, if a visitor were injured in our company and his name, age, health insurance data or other vital information had to be passed on to a doctor, a hospital or other third parties. The processing would then be based on Art. 6 I lit. d GDPR. Ultimately, processing operations could be based on Art. 6 I lit. f GDPR. Processing operations which are not covered by any of the aforementioned legal bases are based on this legal basis if processing is necessary to safeguard a legitimate interest of our company or a third party, provided that the interests, fundamental rights and freedoms of the data subject do not prevail. Such processing procedures are permitted to us in particular because they have been specifically mentioned by the European legislator. In this respect, it took the view that a legitimate interest could be assumed if the person concerned is a customer of the person responsible (recital 47, second sentence, GDPR). Where necessary, data are compared against the relevant EU regulations and EU sanctions lists in the fight against terrorism.

References: Art. 17
 Art. 89

Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6