Source: https://www.kaup.de/en/privacy-statement.html
Timestamp: 2019-04-19 00:20:34+00:00

Document:
KAUP GmbH & Co. KG (KAUP) processes personal data of our users only to the extent it is needed to provide a functioning web site and for our content and services. The processing of personal data of our users is only carried out on a regular basis with the permission of the user. An exception exists in cases where obtaining permission in advance is not possible for practical reasons and the processing of the data is permitted by legal regulations.
Where we obtain the permission of the data subject for processing personal data, Art. 6 Para. 1 lit. a GDPR serves as the legal basis. When processing personal data necessary for the fulfilment of a contract for which the data subject is a party to the contract, Art. 6 Para. 1 lit. b GDPR serves as the legal basis. This also applies to processing necessary for carrying out pre-contract measures. If the processing is necessary to protect a legitimate interest of our organization or of a third party, and the first named interest does not outweigh the interests, basic rights and basic freedoms of the data subject, Art. 6 Para. 1 lit. f GDPR serves as the legal basis for processing.
The personal data of the data subject will be deleted or locked as soon as it is no longer needed for the purpose it was stored for. Retention of data can also occur if this is provided for by European or national legislators with respect to EU regulations, laws or other provisions applicable to the data subject. Locking or deleting the data also occurs when a retention duration laid down by the specified standards expires, unless a need for continued retention of the data exists to complete or fulfil a contract.
The legal basis for the temporary retention of the data is Art. 6 Para. 1 lit. f GDPR.
Temporary retention of the IP address by the system is necessary to enable the supply of the web site to the user's computer. To do so, the IP address of the user must be retained for the duration of the session. This purpose provides our justified interest in processing the data in accordance with Art. 6 Para. 1 lit. f GDPR.
The data are deleted as soon as they are no longer required to fulfil the purpose they were collected for. In the case of data collection to provide the web site, this is the situation when the respective session is ended.
To protect the security of your data during transmission, we use an encryption process corresponding to the latest technology (e.g. SSL) via HTTPS.
The data created with "etracker" are processed and stored solely in Germany by "etracker" on behalf of the supplier of this web site and are thus subject to the strict German and European data protection laws and standards. "Etracker" has been independently checked in this respect, certified and awarded with the ePrivacyseal data protection seal of approval.
Data processing is carried out on the legal basis of Art. 6 Para.1 lit f (justified interest) of the GDPR. The justified interest of KAUP exists in the optimization of our online offering and our web presence. As the private realm of our visitors is particularly important, the IP address is anonymized at the earliest possible point by "etracker" and login or device identifiers are converted by "etracker" to a unique key that cannot be used to identify an individual. No other use, combination with other data or transfer to third parties is carried out by "etracker".
You can revoke permission for the data processing described above at any time. Revoking permission will have no negative consequences for you.
For further information on data protection with "etracker", see here.
The data recorded in this way are pseudonymised using technical measures. Applying the data to the accessing user is thus no longer possible. The data are not stored together with other personal data of the user.
The legal basis for the processing of personal data using technically required cookies is Art. 6 Para. 1 lit. f GDPR. The legal basis for the processing of personal data when using cookies for analysis purposes when appropriate permission has been granted is Art. 6 Para. 1 lit. a GDPR.
The purpose of the use of technically necessary cookies is to simplify the use of the web site for the user. The user data recorded by the technically necessary cookies are not used to create user profiles. The use of analysis cookies has the purpose of improving the quality of our web site and its content. With the analysis cookies, we find out how the web site is used and can thus continuously optimise our offering. We find out, for example, which routes are used through the web site, where the users come from and what they are searching for on kaup.de.This purpose provides our justified interest in processing personal data in accordance with Art. 6 Para. 1 lit. f GDPR.
In the course of the registration process, the permission of the user to process the data is obtained.
The legal basis for the processing of the data when permission has been granted by the user is Art. 6 Para. 1 lit. a GDPR.
(1) Prices: current prices for our attachments can be viewed on the respective product detail pages.
(2) Price list: the current price list for KAUP is available to download.
(3) Order documentation: all previous orders including the associated documentation can be viewed and downloaded.
(4) eQuotation tool: the independent production of a binding offer is possible.
Our prices can only be viewed by authorised persons. Therefore, registration is necessary in order to be able to check this authorisation. The order documentation and the eQuotation tool represent added value for the registered user. In order to prevent misuse of the information provided in this way and to allow exact allocation, registration is necessary.
The data are deleted as soon as they are no longer required to fulfil the purpose they were collected for.
As the user, you have the possibility to cancel the registration at any time. You can change the data stored about you at any time yourself. To do so, log into your account and the data stored can be edited in the "Edit user data" area. An exception to this is the e-mail address. This cannot be changed independently, as this is fixed as the user name. An account can be deleted via the web site administration for info at: webregistration@kaup.de.
For processing the data, in the course of the sending process your permission is obtained and reference made to this data protection statement.
Alternatively, contact is possible with the e-mail address provided. In this case, the personal data of the user transmitted with the e-mail are stored.
There is no transfer of the data to third parties in this respect. The data are exclusively used for processing the conversation.
The legal basis for processing the data transmitted in the course of sending an e-mail is Art. 6 Para. 1 lit. f GDPR. If the intention of the e-mail contact is to conclude a contract, an additional legal basis for the processing is Art. 6 Para. 1 lit. b GDPR.
Processing of personal data from the input form is used solely to process the approach. In the case of an approach by e-mail, the required justified interest in the processing of the data also exists.
The other personal data processed during the sending procedure serve to prevent misuse of the contact form and to ensure the security of our information systems.
The data are deleted as soon as they are no longer required to fulfil the purpose they were collected for. For personal data from the input mask on the contact form and those sent by e-mail, this is the case if the respective conversation with the user has been concluded. The conversation is ended if it can be assumed from the circumstances that the affected content has been completely clarified.
The personal data additionally collected during the sending process are deleted after a period of seven days at the latest.
The user has the possibility at any time to retract their consent for processing their personal data. If the user makes contact with us by e-mail, they can object to the storage of their personal data. In such a case, the conversation can no longer be continued.
All personal data stored in the course of the approach will be deleted in this case.
(6) all available information about the source of the data if the personal data was not collected from the data subject.
You have the right to demand information about whether your personal data has been transferred to a third country or to an international organisation. In this connection, you can demand to be informed about the appropriate guarantees in accordance with Art. 46 GDPR in connection with the transfer.
You have the right to rectification and/or updating by the data controller where the processed personal data of yours is incorrect or incomplete. The data controller must make the correction without delay.
(4) if you have made an objection against the processing in accordance with Art. 21 Para. 1 GDPR and it is not yet certain whether the legitimate interests of the data controller outweigh your reasons.
If the processing of your personal data has been limited, these data may only, with the exception of their storage, be processed with your permission or for the enforcement, exercise or defence of legal claims or the protection of the rights of other natural or legal persons or for reasons of important public interests of the European Union or a member state.
If the limitation on processing in accordance with the above-mentioned conditions is reduced, you will be informed by the data controller before the limitation is removed.
(1) your personal data are no longer needed for the purposes they were collected or processed in other ways.
(2) you withdraw your agreement on which the processing in accordance with Art. 6 Para. 1 lit. a or Art. 9 Para. 2 lit. a GDPR is based, and there is no other legal basis for the processing.
(3) you make an objection in accordance with Art. 21 Para. 1 GDPR against the processing and there are no overriding justifying reasons, or you make an objection in accordance with Art. 21 Para. 2 GDPR against the processing.
(4) your personal data were processed unlawfully.
(5) the deletion of your personal data is necessary to fulfil a legal duty in accordance with EU law or the law of a member state that the data controller is subject to.
(6) your personal data were collected in relation to services of the information society offered in accordance with Art. 8 Para. 1 GDPR.
If the data controller has made your personal data public and they are obliged to delete them in accordance with Art. 17 Para. 1 GDPR, they will take appropriate measures considering available technologies and the cost of implementation, including of a technical nature, to inform the data processor that you as the data subject have demanded the deletion of all links to these personal data or of copies or replications of these personal data.
(2) for the enforcement, exercise or defence of legal claims.
If you have made a claim for correction, deletion or limitation of the processing to the data controller, they are required to communicate this correction or deletion of the data or limitation on the processing to all recipients who have been given access to these data, unless this is found to be impossible or involves a disproportionate cost.
You have the right to be informed of these recipients by the data controller.
(2) the processing occurs with the aid of an automated procedure.
When exercising this right, you also have the right to effect the direct transfer of your personal data from one data controller to another data controller as long as this is technically feasible. Freedoms and rights of other persons may not be affected as a result.
The right to data portability does not apply to the processing of personal data necessary for executing a task that is of public interest or in the application of public authority delegated to the data controller.
You have the right for reasons arising out of your particular situation at any time to make an objection against the processing of your personal data carried out on the basis of Art. 6 Para. 1 lit. f GDPR.
The data controller no longer processes your personal data unless they can show compelling reasons meriting protection that outweigh your interests, rights and freedoms, or the processing serves to enforce, exercise or defend legal claims.
If your personal data are processed for direct marketing, you have the right at any time to object to the processing of your personal data for the purposes of this type of advertising.
If you object to the processing for the purposes of direct marketing, your personal data will no longer be processed for this purpose.
You have the possibility in connection with the use of services in the information society - notwithstanding Directive 2002/58/EC - to exercise your right to object using an automated procedure for which technical specifications are used.
You have the right to withdraw your data protection declaration of consent at any time. The withdrawal of the consent does not affect the lawfulness of the processing that occurs up to the withdrawal that was based on the consent.
Regardless of any other legal remedies relating to administrative or judicial law, you have the right of complaint to a regulatory authority, in particular in the member state where you are located, where your workplace is or in the location of the alleged offence, if you are of the opinion that the processing of your personal data contravenes the GDPR.
The regulatory authority where the complaint is made will inform the complainant of the progress and the results of the complaint including the possibility of judicial remedies in accordance with Art. 78 GDPR.
KAUP GmbH & Co. KG reserves the right to change these data protection guidelines under consideration of the data protection requirements at any time.

References: Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 46
 Art. 21
 Art. 6
 Art. 9
 Art. 21
 Art. 21
 Art. 8
 Art. 17
 Art. 6
 Art. 78