Source: https://www.possehlelectronics.de/en/service/data-protection-statement.html
Timestamp: 2019-04-19 16:32:59+00:00

Document:
Data protection is an area that our company holds in very high regard. It is fundamentally possible to use this website without providing any personal data. Personal data may need to be processed, however, should a data subject wish to use certain services offered by our company. Should personal data need to be processed and no statutory basis exist for such processing, it is our general practice to obtain the consent of the data subject.
The processing of personal data, such as the name, address, e-mail address, or telephone number of a data subject, always occurs in compliance with the German Federal Data Protection Act (BDSG), the General Data Protection Regulation (GDPR) – which is set to come into effect as of 25.5.2018 – and other applicable legislation. With this data protection statement, our company would like to outline the nature, scope and purpose of the personal data that we process and inform data subjects of their corresponding rights.
Our company has implemented numerous technical and organisational measures to ensure that the processed personal data is as fully and completely protected as possible. Given, however, that Internet-based data transmissions may, in principle, have security gaps, it is not possible to provide any absolute security guarantees.
Personal data means “any information relating to an identified or identifiable natural person (hereinafter referred to as the ‘data subject’). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person" (GDPR Art. 4 (1)).
Please consult the Imprint section for this information.
Any data subject may, at any time, contact our Data Protection Officer directly with any questions or suggestions concerning data protection.
The data subject may, at any time, prevent the setting of cookies through our website by making the setting changes to their Internet browser and may thus permanently deny the setting of cookies. Moreover, cookies that have previously been placed may be deleted at any time via an Internet browser or other software program. This is possible with all popular Internet browsers. If the data subject disables the setting of cookies in the Internet browser used, it is very possible that the full functionality of our website may not be used.
Our web servers collect a series of general data and information when a data subject or automated system visits the website. These general data and information are stored in the server log files. The following may be collected: the types of browser and the versions used; the operating system used by the accessing system; the website from which an accessing system reaches our website; the sub-pages that are accessed via an accessing system on our website; the date and time the website is accessed; an Internet protocol address (IP address); the Internet service provider of the accessing system; and any other similar data and information that may serve to ward off attacks on our IT systems.
When using these general data and information, Possehl Electronics does not draw any conclusions about the data subject. Instead, this information is needed to provide our website content accurately; to optimise the content of our website as well as its advertisement; to ensure the long-term viability of our information technology systems and website technology; and to provide law enforcement authorities with the information necessary for criminal prosecution in the event of a cyber-attack. To this end, Possehl Electronics analyses this anonymously collected data and information statistically and also with the aim of increasing our company’s data protection and data security so as ultimately to ensure the optimal level of protection for the personal data that we process. The anonymous data in the server log files are stored separately from any and all personal data provided by a data subject.
Owing to statutory regulations, our company’s website contains information that enables you to contact our company quickly through electronic means and also to communicate with us directly via multiple general addresses using so-called electronic mail (e-mail address). If a data subject contacts the controller by e-mail or via a contact form, the personal data transmitted by the data subject are automatically stored. Such personal data which are transmitted voluntarily by a data subject to the data controller are stored for the purpose of processing the request or contacting the data subject. None of this personal data is disclosed to third parties.
The data controller will only process and store the personal data provided by the data subject for as long as is necessary in order to accomplish the purpose for which the data are stored or if so prescribed by the European legislator through laws or regulations with which the controller must comply. Once the purpose of storing the data ceases to exist, or if a prescribed retention period defined by the European legislator expires, the personal data are routinely blocked or erased in accordance with legal requirements.
Every data subject has the right to obtain confirmation from the controller as to whether or not personal data concerning them are being processed. Should a data subject wish to make use of this right of confirmation, they may, at any time, contact our Data Protection Officer or any other employee of the controller.
the existence of automated decision-making, including profiling, pursuant to Art. 22 (1) and (4) GDPR and – at least in these cases – detailed information about the logic involved as well as the significance and the envisaged consequences of such processing for the data subject.
The data subject furthermore has a right to obtain information as to whether personal data have been transferred to a third country or an international organisation. Where this is the case, the data subject moreover has the right to be informed of the appropriate safeguards relating to the transfer of such data.
In respect of the processing of their personal data, every data subject has the right to require the immediate rectification of any inaccurate personal data concerning them. The data subject furthermore has the right, having due consideration to the purpose of processing such data, to require that incomplete personal data be completed — including by means of a supplementary statement.
The data subject withdraws their consent underlying the processing of such data in accordance with Art. 6(1) (a) GDPR, Art. 9(2)(a) GDPR, and where there are no other legal grounds for the processing of such data.
The data subject objects to the processing of such data pursuant to Art. 21(1) GDPR and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing of such data pursuant to Art. 21(2) GDPR.
The personal data must be erased in order to comply with a legal obligation under Union or Member State law to which the controller is subject.
The personal data have been collected in relation to the offer of information society services pursuant to Art. 8(1) GDPR.
If any of the aforementioned reasons applies and a data subject wishes to request the erasure of personal data stored at our company, they may contact our Data Protection Officer at any time. Our Data Protection Officer will arrange for the erasure request to be complied with immediately.
If our company has made personal data public and should our company, as the controller, be obliged under Art. 17(1) GDPR to erase the personal data, our company, taking account of the available technology and the implementation costs, will take reasonable steps, including technical measures, to inform other controllers processing the personal data that has been made public that the data subject has requested that these other controllers processing the personal data erase any and all links to said personal data or any and all copies or replications of such personal data insofar as the processing of such data is not required. The Data Protection Officer will arrange for the necessary measures in individual cases.
The accuracy of the personal data is contested by the data subject, namely for a period that enables the controller to verify the accuracy of the personal data.
The processing is unlawful and the data subject opposes the erasure of the personal data and instead requests that use of the personal data be restricted.
The controller no longer needs the personal data for processing purposes but the data subject requires them to assert, exercise or defend against legal claims.
The data subject has objected to their personal data being processed pursuant to Art. 21(1) GDPR pending verification as to whether the legitimate grounds of the controller override those of the data subject.
If any of the aforementioned conditions is met and a data subject wishes to request that the processing of their personal data stored at our company be restricted, they contact our Data Protection Officer at any time. The Data Protection Officer will arrange for the restriction to be implemented.
In respect of the processing of data, every data subject has the right to receive any personal data concerning them, which they have provided to a controller, in a structured, commonly used and machine-readable format. The data subject also has the right to transmit such data to another controller without hindrance from the controller to which the personal data was provided, provided that the processing of the personal data is based on the consent issued pursuant to Art. 6(1) a GDPR or Art. 9(2) a GDPR, or based on a contract as defined in Art. 6(1) b GDPR, and the processing is carried out by automated means, provided that such processing is not necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
Moreover, in exercising their right to data portability pursuant to Art. 20(1) GDPR, the data subject has the right to have personal data transmitted directly from one controller to another, where technically feasible and provided that this does not adversely affect the rights and freedoms of others.
In order to assert the right to data portability, the data subject may contact Data Protection Officer at any time.
In respect of the processing of personal data, every data subject has the right, on grounds relating to their particular situation, to object, at any time, to their personal data being processed pursuant to Art. 6 (1) e or f GDPR. This also applies to any profiling based on these provisions.
Our company will cease processing the personal data in the event of such an objection being raised, unless we can present compelling legitimate grounds for processing such personal data which override the interests, rights and freedoms of the data subject, or where the processing of such personal data serves to assert, exercise or defend legal claims.
If our company processes personal data for direct marketing purposes, the data subject has the right to object, at any time, to their personal data being processed for such marketing. This equally applies to profiling to the extent that it is related to such direct marketing. If the data subject lodges an objection with our company in respect of their personal data being processed for direct marketing purposes, we will cease processing the personal data for such purposes.
The data subject furthermore has the right, on grounds relating to their particular situation, to object to their personal data being processed at our company for scientific or historical research purposes, or for statistical purposes pursuant to Art. 89(1) GDPR, unless the processing of such data is necessary for the performance of a task carried out for reasons of public interest.
In order to exercise their right to object, the data subject may contact the Data Protection Officer directly.
In respect of the processing of personal data, every data subject has the right to withdraw their consent, at any time, to their personal data being processed. If the data subject wishes to exercise their right to withdraw their consent, they may contact the Data Protection Officer at any time.
The data controller collects and processes the personal data of applicants for the purpose of carrying out the application procedure. The processing may also be carried out electronically. This is especially the case if an applicant submits the corresponding application documents to our company electronically, e.g. by e-mail or a web form on the website. If our company concludes an employment contract with an applicant, the submitted data will be stored for the purpose of processing the employment relationship in compliance with the legal requirements. If no employment contract is concluded between our company and the applicant, the application documents will be erased automatically six (6) months after the decision to reject the candidate has been made known, provided that the controller has no other legitimate interests that would oppose their erasure. Other legitimate interests in this regard are e.g. the burden of proof in a lawsuit as prescribed under the General Act on Equal Treatment (Allgemeines Gleichbehandlungsgesetz [AGG]).
On this website, the controller has incorporated widgets belonging to the Facebook company. Facebook is a social network. A social network is a place for social meetings on the Internet; an online community, which typically allows users to communicate with each other and interact in a virtual space. A social network may serve as a platform for sharing opinions and experiences or enable the Internet community to provide personal or business-related information. Among other things, Facebook allows social network users to create private profiles, upload photos, and network through friend requests.
The company operating Facebook is Facebook, Inc., 1 Hacker Way, Menlo Park, CA 94025, USA. If a data subject lives outside of the United States or Canada, the controller in respect of the processing of personal data is Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
Each time one of the website pages which is operated by the controller and which incorporates a Facebook widget (Facebook plug-in) is accessed, the web browser on the information technology system of the data subject is automatically prompted by the corresponding Facebook widget to download the Facebook widget in question from Facebook. An overview of all the Facebook plug-ins can be accessed at https://developers.facebook.com/docs/plugins/?locale=de_DE. In the course of this technical procedure, Facebook receives a notification as to what specific sub-page of our website the data subject is visiting.
If the data subject is logged in on Facebook at the same time, then each time our website is visited by the data subject – and for the entire duration of their stay on our website – Facebook detects which specific sub-page on our website the data subject is visiting. This information is collected through the Facebook widget and associated with the respective Facebook account of the data subject. If the data subject clicks on one of the Facebook buttons incorporated into our website, for example the "Like" button, or if the data subject submits a comment, Facebook associates this information with the personal Facebook user account of the data subject and stores the personal data.
Through the Facebook widget, Facebook always receives a notification that the data subject has visited our website whenever the data subject is logged in on Facebook at the same time that they access our website. This occurs regardless of whether the data subject clicks on the Facebook widget. If the data subject does not wish such information to be transmitted to Facebook, they can prevent this from happening by logging out of their Facebook account before accessing our website.
The data protection guideline published by Facebook, which is available at https://de-de.facebook.com/about/privacy/, provides information about how Facebook collects, processes and uses personal data. The guideline also explains what settings Facebook offers in order to protect the data subject’s privacy. Various applications are also available for those wanting to prevent data from being transmitted to Facebook, such as the Facebook blocker offered by Webgraph and available at http://webgraph.com/resources/facebookblocker/. The data subject can use applications like this to prevent data from being transmitted to Facebook.
On this website, the controller has incorporated widgets belonging to Twitter. Twitter is a multilingual, publicly accessible microblogging service on which users may publish and spread so-called “tweets”, i.e. short messages limited to 140 characters. These short messages are available for everyone, including those who are not registered with Twitter. The tweets are also displayed to so-called followers of the respective user, however. Followers are other Twitter users who follow a user’s tweets. Twitter also offers the option of using hashtags, links or retweets to reach a wide audience.
Each time one of the website pages which is operated by the controller and which incorporates a Twitter widget (Twitter button) is accessed, the web browser on the information technology system of the data subject is automatically prompted by the corresponding Twitter widget to download a display of the corresponding Twitter widget from Twitter. Further information about the Twitter buttons is available at https://about.twitter.com/de/resources/buttons. In the course of this technical procedure, Twitter receives a notification as to what specific sub-page of our website the data subject is visiting. The purpose of incorporating the Twitter widget into our website is to enable our users to retransmit the contents of this website to publicise the web page in the digital world and to raise the number of visitors to it.
If the data subject is logged in on Twitter at the same time, then each time our website is visited by the data subject – and for the entire duration of their stay on our website – Twitter detects which specific sub-page on our website the data subject is visiting. This information is collected through the Twitter widget and associated with the respective Twitter account of the data subject. If the data subject clicks on one of the Twitter buttons incorporated into our website, Twitter associates the transmitted data and information with the personal Twitter user account of the data subject and stores and processes the personal data.
Through the Twitter widget, Twitter always receives a notification that the data subject has visited our website whenever the data subject is logged in on Twitter at the same time that they access our website. This occurs regardless of whether the data subject clicks on the Twitter widget. If the data subject does not wish such information to be transmitted to Twitter, they can prevent this from happening by logging out of their Twitter account before accessing our website.
The applicable data protection provisions of Twitter can be accessed at https://twitter.com/privacy?lang=en.
On this website, the controller has incorporated widgets belonging to Xing. Xing is an Internet-based social network that enables users to connect with existing business contacts and to create new business contacts. Those using Xing can create a personal profile of themselves. Companies may, for example, create company profiles or post job vacancies on Xing.
The company operating Xing is XING AG, Dammtorstrasse 30, 20354 Hamburg, Germany.
Each time one of the website pages which is operated by the controller and which incorporates a Xing widget (Xing plug-in) is accessed, the web browser on the information technology system of the data subject is automatically prompted by the corresponding Xing widget to download a display of the corresponding Xing widget from Xing. Further information about the Xing plug-ins is available at https://dev.xing.com/plugins. In the course of this technical procedure, Xing receives a notification as to what specific sub-page of our website the data subject is visiting.
If the data subject is logged in on Xing at the same time, then each time our website is visited by the data subject – and for the entire duration of their stay on our website – Xing detects which specific sub-page on our website the data subject is visiting. This information is collected through the Xing widget and associated with the respective Xing account of the data subject. If the data subject clicks on one of the Xing buttons incorporated into our website, for example the “Share” button, Xing associates this information with the personal Xing user account of the data subject and stores this personal data.
Through the Xing widget, Xing always receives a notification that the data subject has visited our website whenever the data subject is logged in on Xing at the same time that they access our website. This occurs regardless of whether the data subject clicks on the Xing widget. If the data subject does not wish such information to be transmitted to Xing, they can prevent this from happening by logging out of their Xing account before accessing our website.
The data protection provisions published by Xing, which are available at https://www.xing.com/privacy, provide information about how Xing collects, processes and uses personal data. XING has also published a privacy notice for the XING Share button at https://www.xing.com/app/share?op=data_protection.
On this website, the controller has incorporated widgets belonging to YouTube. YouTube is an Internet video portal that enables video publishers to post video clips free of charge and also other users to view, review and comment on these video clips free of charge. As YouTube allows all kinds of videos to be posted, it is possible to access entire movies and TV broadcasts as well as music videos, trailers or videos made by users themselves via the Internet portal.
Each time one of the website pages which is operated by the controller and which incorporates a YouTube widget (YouTube video) is accessed, the web browser on the information technology system of the data subject is automatically prompted by the corresponding YouTube widget to download a display of the corresponding YouTube widget from YouTube. Further information about YouTube is available at https://www.youtube.com/yt/about. In the course of this technical procedure, YouTube and Google receive a notification as to what specific sub-page of our website the data subject is visiting.
If the data subject is logged in on YouTube at the same time, YouTube detects, each time a sub-page containing a YouTube video is visited, which specific sub-page on our website the data subject is visiting. This information is collected through the YouTube and Google and associated with the respective YouTube account of the data subject.
Through the YouTube widget, YouTube and Google always receive a notification that the data subject has visited our website whenever the data subject is logged in on YouTube at the same time that they access our website. This occurs regardless of whether the data subject clicks on the YouTube video. If the data subject does not wish such information to be transmitted to YouTube and Google, they can prevent this from happening by logging out of their YouTube account before accessing our website.
The data protection provisions published by YouTube, which are available at https://policies.google.com/privacy, provide information about how YouTube and Google collect, process and use personal data.
We reserve the right to amend our security and data protection provisions to the extent that technical developments render this necessary. In such instances, we will also adapt our data protection notices accordingly. Our data protection statement in its most recent version, as amended from time to time, applies.

References: Art. 4
 Art. 22
 Art. 6
 Art. 9
 Art. 21
 Art. 21
 Art. 8
 Art. 17
 Art. 21
 Art. 6
 Art. 9
 Art. 6
 Art. 20
 Art. 6
 Art. 89