Source: http://www.sattlerkunststoffwerk.de/joomla/index.php?option=com_content&view=article&id=213&Itemid=100006&lang=en
Timestamp: 2019-04-25 10:01:40+00:00

Document:
The terms on this homepage refer both male and female users.
We only process the personal data of our users to the extent this is necessary for the provision of a functional website as well as for the provision of our contents and services. The personal data of our users are only processed regularly with the consent of the user. An exception is made if it is not possible to obtain the consent beforehand for practical reasons and if the data processing is permitted by legal provisions.
Provided that we obtain the consent of the affected person for personal data processing, art. 6 par. 1(a) of the EU General Data Protection Regulation (GDPR) serves as legal basis.
In case of the processing of personal data, which are necessary for the performance of a contract, to which the affected person is a contractual party, art. 6 par. 1(b) GDPR serves as legal basis. This also applies to processing operations which are necessary for the implementation of precontractual measures.
Provided that the processing of personal data is necessary for the fulfilment of a legal obligation of our company, art. 6 par. 1(c) GDPR serves as legal basis.
If vital interests of the affected person or of another natural person require the processing of personal data, art. 6 par. 1(d) GDPR serves as legal basis.
If the processing is necessary for ensuring a legitimate interest of our company or of a third party and if the interests, fundamental rights and fundamental freedoms of the affected person do not outweigh the interest mentioned first, art. 6 par. 1(f) GDPR serves as the legal basis for data processing.
The personal data of the affected person are deleted or blocked as soon as the purpose of storage ceases to apply. The personal data can also be stored, if this is provided for by the European or national legislature in European Union regulations, laws or other provisions, to which the person responsible is subject. The data are also blocked or deleted when a storage period prescribed by the mentioned standards expires unless it is necessary to further store the data for the conclusion of a contract or the performance of a contract.
Fields marked with *) are obligatory fields.
The data are not transferred to third parties in this context. The data are used exclusively for processing the conversation.
The legal basis for data processing is art. 6 par. 1(a) GDPR if the user has given his consent.
The legal basis for the processing of the data transferred together with an e-mail is art. 6 par. 1(f) GDPR. If an e-mail contact aims at the conclusion of a contract, art. 6 par. 1(b) GDPR is an additional legal basis for data processing.
We only process the personal data from the input mask for contacting the sender. In case of a contact via e-mail, this also represents the necessary legitimate interest in the processing of these data.
The other personal data processed during the sending process are used to prevent an abuse of the contact form and to ensure the safety of our information technology systems.
The data are deleted as soon as they are no longer necessary for achieving the purpose of their collection. For the personal data from the input mask of the contact form and for those transferred via e-mail, this is the case when the respective conversation with the user is ended. The conversation is ended, when it may be assumed from the circumstances that the respective issue could be resolved.
The personal data collected additionally during the sending process are deleted after a period of seven days at the latest.
The user can revoke his consent for personal data processing at any time. If the user contacts us via e-mail, he can informally object to the storage of his personal data at any time. In such a case, the conversation cannot be continued.
All personal data stored in the frame of contacting are deleted in this case.
You can request a confirmation from the person responsible if we process your personal data.
(8) the existence of an automatic decision making, including profiling according to art. 22 par. 1 and 4 GDPR and – at least in these cases – conclusive information on the involved logic as well as the scope and the pursued effects of such a processing for the affected person.
You have the right to demand information on whether your personal data are transferred to a third country or to an international organisation. In this context, you may demand to be informed about the adequate guarantees according to art. 46 GDPR in connection with the transfer.
You have a right of correction and/or completion against the person responsible, provided that your personal data are incorrect or incomplete. The person responsible shall correct the data immediately.
(4) if you filed an objection against the processing according to art. 21 par. 1 GDPR and it is not yet clear if the legitimate reasons of the person responsible outweigh your reasons.
If the processing of your personal data was limited, these data – except for their storage – may only be processed with your consent or for the assertion, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of a substantial public interest of the European Union or of a member state.
If the processing was limited according to the above-mentioned conditions, you will be informed by the person responsible before the limitation is removed.
(1) Your personal data are not necessary anymore for the purposes for which they were collected or processed in another way.
(2) You revoke your consent on which the processing according to art. 6 par. 1(a) or art. 9 par. 2(a) GDPR was based and there is no other legal basis for the processing.
(3) You file an objection against the processing according to art. 21 par. 1 GDPR and there are no overriding legitimate reasons for the processing, or you file an objection against the processing according to art. 21 par. 2 GDPR.
(4) Your personal data were processed illegally.
(5) The deletion of your personal data is necessary for the compliance with a legal obligation according to the European Union law or according to the law of the member state to which the person responsible is subject.
(6) Your personal data were collected with regard to the offered services of the information society according to art. 8 par. 1 GDPR.
If the person responsible made your personal data public and if he is obliged to the deletion of these data according to art. 17 par. 1 GDPR, he will take appropriate measures, also of a technical nature, under consideration of the available technology and the implementation costs in order to inform the person responsible for processing the personal data that you as the affected person demanded the deletion of all links to these personal data and of copies or replications of these personal data.
If you asserted the right of correction, deletion or limitation of processing against the person responsible, he is obliged to inform all the recipients to which your personal data have been disclosed about this correction or deletion of the data or the limitation of processing, unless this turns out to be impossible or is connected with a disproportionate effort.
You have the right against the person responsible to be informed about these recipients.
(2) the data are processed by means of automatic procedures.
With the exercise of this right you also have the right to effect that your personal data are transferred directly from a person responsible to another person responsible, provided that this is technically possible. The freedoms and rights of other persons must not be affected by this.
The right to data portability does not apply for a personal data processing which is necessary for the performance of a task of public interest or in exercise of an official authority assigned to the person responsible.
You have the right to file an objection, for reasons resulting from your particular situation, against the processing of your personal data, which takes place on the basis of art. 6 par. 1(e) or (f) GDPR, at any time; this also applies for profiling based on these provisions.
The person responsible does not process your personal data anymore, unless he can proof compelling and legitimate reasons for the processing, which outweigh your interests, rights and freedoms, or unless the data are processed for the assertion, exercise or defence of legal claims.
If your personal data are processed for direct advertising, you have the right to file an objection against the processing of your personal data for the purposes of such advertising at any time; this also applies for profiling, provided that it is connected with such direct advertising.
If you object to the processing for purposes of direct advertising, your personal data won´t be processed for these purposes anymore.
You have the possibility to exercise your right of objection by means of an automatic procedure in the context of the use of services from the information society, irrespective of guideline 2002/58/EC, for which technical specifications are used.
You have the right to revoke your declaration of consent according to the data protection law at any time. The revocation of the consent will not affect the legality of the processing prior to the revocation due to the previous consent.
These decisions, however, must not be based on special categories of personal data according to art. 9 par. 1 GDPR, unless art. 9 par. 2(a) or (g) GDPR applies and appropriate measures have been taken for the protection of your rights and freedoms as well as of your legitimate interests.
With regard to the cases mentioned in (1) and (3), the person responsible shall take appropriate measures in order to protect your rights and freedoms as well as your legitimate interests, which at least includes the right to effect the intervention of a person on the part of the person responsible, the right to statement of the own point of view and the right to contest the decision.
Without prejudice to another administrative or judicial remedy, you have the right of appeal to a supervisory authority, in particular in the member state of your residence, of your workplace or of the location of the presumed infringement, if you think that the processing of your personal data infringes the GDPR.
The supervisory authority to which the appeal has been filed shall inform the complainant about the status and the results of the appeal, including the possibility of a judicial remedy according to art. 78 GDPR.

References: art. 6
 art. 6
 art. 6
 art. 6
 art. 6
 art. 6
 art. 6
 art. 6
 art. 22
 art. 46
 art. 21
 art. 6
 art. 9
 art. 21
 art. 21
 art. 8
 art. 17
 art. 6
 art. 9
 art. 9
 art. 78