Source: http://www.neudorff-trade.co.uk/informations/data-protection-notice.html
Timestamp: 2019-04-18 11:09:23+00:00

Document:
Neudorff GmbH KG (hereinafter also referred to as “Controller”) takes the protection of personal data very seriously and complies with the relevant data protection provisions, in particular the regulations of the EU General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG). Below are the specific details of what data we process regarding the use of our website.
We collect and the use personal data of our users categorically only to the extent as this is required to provide a functional website as well as the contents of our website and our services. We only collect and use the personal data of our users, if the processing of the data is permitted by virtue of statutory provisions or following the consent of the user.
To the extent that we obtain the consent of the user for the processing of personal data on our website, Art. 6 (1) (a) GDPR is the legal basis for the processing of personal data.
The legal basis for the processing of personal data required for the performance of a contract where the contracting party is the user is Art 6 (1) b GDPR. This also applies to processing operations that are required to fulfil a quasi-contractual legal obligation or pre-contractual measures.
Where the processing of personal data is required for the compliance with a legal obligation which we are subject to, Art. 6 (1) (c) GDPR is the legal basis for the processing.
If the processing is required for the protection of a legitimate interest of our company or of a third party and if the interests, fundamental rights and freedoms of the data subject do not override the first-mentioned interest, Art. 6 (1) (f)GDPR provides the legal basis for the data protection (so-called balancing of interests).
In addition, there are other legal bases for the processing of personal data, which we are specifically listing below, insofar as they are relevant.
The personal data of the users is deleted or locked, as soon as the purpose of the storage no longer exists. For log files, the storage period is 30 days. The data can also be stored where this has been intended by the European or national legislature in EU regulations, laws or other provisions governing our company. The data can also be locked or deleted when a storage period specified by one of the above-mentioned standards expires, unless there is a requirement for the continued storage of the data to conclude or perform a contract.
Apart from these circumstances, however, your personal details will not be passed to third parties.
The personal data stored by you is processed in the countries of the European Economic Area as well as in countries outside the Agreement on the European Economic Area. The fact that the required appropriate level of data protection is ensured, may in particular result from a so-called “Adequacy Decision” by the European Commission, the so-called “EU Standard Contractual Terms” or - in the case of recipients in the USA - from the compliance with the principles of the so-called “EU-US Privacy Shield”.
Each time our website is called up, our system automatically captures data and information from the computer system of the calling computer.
The legal basis for the temporary storage of the data is Art 6 (1) f GDPR.
The temporary storage of the IP address by the system is required to enable the delivery of the website to the computer of the user. For this, the IP address of the user must be stored for the duration of the session.
Our legitimate interest in processing the data also lies in these objectives, in accordance with Art. 6 (1) (f) GDPR.
The data is deleted as soon as it is no longer required to achieve the purpose of being collected. If the data was captured for the availability of the website, the data is deleted after 30 days.
The capture of the data for the availability of the website and the storage of the data in logfiles is mandatory for the operation of the website. The user does therefore not have the option to object.
The user has further the option to provide further optional information in the input screen.
Alternatively, we can be contacted by e-mail. In this case, the personal data of the user transmitted with the e-mail is stored.
The data is not passed on to third parties in this connection. The data is used solely for the processing of the conversation.
The legal basis for the processing of the data is Art. 6 (1) (f) GDPR. If the purpose of the e-mail is the conclusion of a contract of a quasi-contract legal obligation, an additional legal basis for the processing is Art. 6 (1) (b) GDPR.
The processing of the personal data from the input screen serves merely for the processing of the contact. If contact is established, therein also lies the required legitimate interest in the processing of the data.
The data is deleted as soon as it is no longer required to achieve the purpose of being collected. Regarding the personal data form the input screen of the contact form and those which were sent by e-mail, this is the case when the respective conversation with the user has ended. The conversation has ended when, due to the circumstances, it can be assumed that the matter has been completed.
The legal basis for the processing of the data is Art. 6 (1) (b) GDPR.
The processing of the personal data from the input screen serves merely for the running of the competition or the promotion.
The data is deleted as soon as it is no longer required to achieve the purpose of being collected. This is often the case with competitions, when the winners have been determined and the prizes have been dispatched. Further details about the competition can be found in the respective terms and conditions of participations.
The majority of browsers are set up so that you accept cookies automatically. The user can prevent the storage of cookies on his computer with the appropriate browser settings, whereby the range of functions of our website may, however, be restricted.
The legal basis for the processing of personal data is Art. 6 (1) (a) GDPR, if the user has given his consent to this effect.
Cookies that are not required for technical reasons and third-party cookies are used to improve the quality of our website and its contents. By way of analysis cookies we learn how the website is being used and we therefore can continuously optimise our online offering.
The user data collected by cookies on our website are not used to create user profiles.
Our legitimate interest in the processing of the personal data in accordance with Art. 6 (1) (f) GDPR lies also in the above-mentioned purposes.
Visitors to our website can access these sites via links. The links are indicated on our website by the respective logo of the relevant social network.
Our website uses Google Maps of Google Inc., Amphitheatre Parkway, Mountain View, CA 94043, USA to display maps. When our website is called up, your browser establishes a direct connection with the Google servers. Please note that Neudorff does not have any information about the actual extent and content of the processing of data by Google. It has to be assumed that at least the IP address will be collected and used. For further information about the extent of the processing of your personal data by Google as well as setting options for the protection of your privacy, please refer to the Google data protection notice ( www.google.com/intl/de_de/policies/privacy/ ).
Our website uses the web analysis tool “Matomo” (formerly Piwik). The analysis of the user behaviour is important, as the demand of contents can be analysed in this way and the online-offering can be optimised.
Our legitimate interest in processing the data also lies in these objectives.
The legal basis for the processing of personal data with the use of web analysis tools in the present form is Art. 6 (1) (f) GDPR.
The user data collected within the scope of Matomo are not used to create user profiles.
If you do not wish usage information from your visit to be stored and evaluated, then you can stop this process of storage and use at any time by a mouse click. This will store a so-called opt-out cookie in your browser, which will prevent Matomo from collecting any usage information. Please be aware that deleting your cookies will also delete the opt-out cookie. In this event you will have reactivate it.
You have the right to obtain confirmation from the controller as to whether or not personal data concerning you is being processed by us.
•	the existence of automated decision-making, including profiling, in accordance with Art. 22(1) and (4) and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.
You have the right to request information on whether personal data concerning you is transferred to a third country or to an international organisation. In this context, you can request to be informed about the appropriate safeguards in accordance with Art. 46 GDPR in connection with the transfer.
You have the right to obtain from the controller the rectification and/or completion, if the processed personal data concerning you is inaccurate or incomplete. The Controller shall carry out the correction immediately.
•	you have objected to the processing in accordance with Art. 21(1) GDPR and it has not yet been determined whether the legitimate grounds of the controller override your grounds.
Where processing of the personal data concerning you, such personal data shall, with the exception of storage, only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the European Union or of a Member State.
If the restriction of processing was restricted under the above-mentioned conditions, you shall be informed by the controller before the restriction is lifted.
•	The personal data concerning you are no longer necessary in relation to the purposes for which they were collected or otherwise processed.
•	You withdraw your consent on which the processing was based according to Art. 6 (1) (a), or Article 9 (2) (a) GDPR, and there is no other legal ground for the processing.
•	You object to the processing in accordance with Art. 21 (1) GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing in accordance with Art. 21 (2) GDPR.
•	The personal data concerning you has been unlawfully processed.
•	The personal data concerning you has to be erased for compliance with a legal obligation in accordance with EU law or the law of a Member State to which the controller is subject.
•	The personal data concerning you has been collected in relation to the offer of information society services in accordance with Art. 8 (1) GDPR.
If the controller has made the personal data concerning you public and is obliged in accordance with Art. 17 (1) GDPR to erase the personal data, the controller, taking account of available technology and the cost of implementation, shall take reasonable steps, including technical measures, to inform controllers which are processing the personal data that you as the data subject have requested the erasure by such controllers of any links to, or copy or replication of, such personal data.
•	or the establishment, exercise or defence of legal claims.
If you have asserted the right to rectifications, erasure or restriction of processing against the controller, the latter is obliged to notify all recipients to whom the personal data has been disclosed, of the rectification or erasure of the data or restriction of processing, unless this proves impossible or involves disproportionate effort.
You have the right to be informed by the controller about those recipients.
You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on Art. 6 (1) (e) or (f) GDPR, including profiling based on these provisions.
The controller shall no longer process the personal data unless the controller can demonstrate compelling legitimate grounds worthy of protection for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.
If the personal data concerning you are processed for the purpose of direct advertisement, you have the right to object at any time to the processing of the personal data concerning you for such purposes; this also applies to profiling, where it is connected to such direct advertisement.
If you object to the processing for direct marketing purposes, the personal data concerning you shall no longer be processed for these purposes.
In the context of the use of information society services, and notwithstanding Directive 2002/58/EC, you have the option to exercise your right to object by automated means using technical specifications.
You have the right to withdraw your consent pursuant to data protection law at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
•	is based on your explicit consent.
However, these decisions must not be based on special categories of personal data in accordance with Article 9 (1), unless Article 9 (2) (a) or (g) applies and suitable measures to safeguard your rights and freedoms and legitimate interests are in place.
With regard to the cases referred to in points (1) and (3) , the data controller shall implement suitable measures to safeguard your rights and freedoms and legitimate interests, at least the right to obtain human intervention on the part of the controller, to express your point of view and to contest the decision.
The supervisory authority with which the complaint has been lodged will inform the complainant on the progress and the outcome of the complaint including the possibility of a judicial remedy in accordance with Art. 78 GDPR.

References: Art. 6
 Art 6
 Art. 6
 Art. 6
 Art 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 22
 Art. 46
 Art. 21
 Art. 6
 Art. 21
 Art. 21
 Art. 8
 Art. 17
 Art. 6
 Art. 78