Source: https://smtscharf.com/en/privacy-policy/
Timestamp: 2019-04-21 23:11:40+00:00

Document:
SMT Scharf AG (“SMT”) takes the protection of personal data very seriously. We have accordingly taken technical and organizational measures to ensure that data protection regulations are complied with at SMT. All online activities are carried out in accordance with the applicable personal data protection and data security regulations. Our security measures are continually improved in line with technological developments. Complete data security cannot be guaranteed when communicating by email; accordingly, we recommend that you send any confidential information by post.
By using our website, you agree to the collection and processing of your personal data in accordance with this data protection statement.
(1) This page provides you with information regarding the collection of personal data during the use of our website. Personal data is any information which can be connected to you personally, such as your name, address, email addresses, user behavior.
(2) SMT Scharf Aktiengesellschaft, Römerstraße 104, D- 59075 Hamm is the data controller within the meaning of art. 4(7) of the EU General Data Protection Regulation (GDPR).
You can contact our data protection officers using our post address (Attn. Datenschutzbeauftragte) or by email at Datenschutz@smtscharf.com.
(3) If you contact us by email or using a contact form, we will save the information that you transmit (your email address and your name) in order to answer your questions. We will delete this data once it is no longer necessary or otherwise limit our processing of it if the data falls under a statutory record keeping obligation.
(4) If we make use of other service providers for the provision of individual functions or services, or if we wish to use your data for commercial purposes, the protocols outlined in detail below will be applicable. This page also sets out criteria regarding the duration of storage.
In accordance with art. 18 GDPR, you have the right to request the restriction of processing of your personal data if you contest the accuracy of the personal data, if the processing is unlawful but you oppose its deletion or if we no longer need the data, but you require it for the establishment, exercise or defense of legal claims, or you have objected to the processing pursuant to art. 21 GDPR.
In accordance with art. 20 GDPR, you have the right to request to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request the transmission of that data to another controller.
(2) if the processing of your personal data occurs for the purposes of legitimate interests within the meaning of art. 6(1)(F) GDPR, you have the right under art. 21 GDPR to object, as long as there are grounds relating to your particular situation, or where the objection relates to direct marketing. In the case of the latter, you have a general right of objection without the need for special grounds.
(3) You also have the right to complain to a data protection regulatory authority regarding our processing of your personal data.
(4) In addition to this, we also use temporary cookies to optimize user friendliness; these are stored on your device for a given period of time. If you visit our site again to make use of our services, you will be automatically recognized as a return visitor and the website will recall your entries and settings so that you do not need to re-enter them.
(6) The data processed by the cookies are processed for the purposes identified and are necessary for our legitimate interests, as well as those of third parties, within the meaning of art. 6(1)(f) GDPR.
(7) Most browsers accept cookies automatically. You can configure your browser such that no cookies are stored on your computer or such that you always receive a notification before a new cookie is placed on your computer. If you completely deactivate cookies, you may not be able to use all of the functions of our website.
(1) In addition to the purely informational use of our website, we also offer various services which you can make use of if you are interested. In order to do so, you will generally have to provide additional personal data which we will use to provide the relevant services and will process in accordance with the foregoing data processing principles.
(2) We may also make use of external service providers for the processing of your data. We have selected these providers carefully. They are bound by our instructions and are regularly audited.
(3) We may provide your personal data to third parties if this is necessary for the performance of our contract, for the exercise of our rights, in particular for the enforcement of contractual claims or to protect our legitimate commercial interests in relation to advising and supporting our customers, or to conclude contracts or offer similar services either independently or with our partners. We will provide you with more detailed information on this when you provide your personal data or in our description of our services.
(4) If any of our service providers or their partners are established in a country outside of the European Economic Area (EEA), we will provide you with information regarding any consequences in our description of our services.
We use the commonly used SSL encryption (Secure Socket Layer) with the highest level of encryption supported by your browser. This is generally 256 bit encryption. If your browser does not support 256 bit encryption, we will use v3 128 bit technology. You can identify whether the transmission of an individual page on our website is encrypted by looking for the key or lock symbol in your browser’s lower status bar.We also take other suitable technical and organizational security measures to protect your data from accidental or intentional manipulation, partial or complete loss or destruction and unauthorized third party access. Our security measures are continually improved in line with technological developments.
We reserve the right to update this data protection statement from time to time, in particular to take changes to the applicable legislation into account. We recommend that you visit this website frequently so that you remain up to date regarding the processing of your data.
At SMT, we also take data protection very seriously internallyThe applicable legal requirements demand that personal data be processed in such a way that the data subjects’ rights to confidentiality and data integrity remain protected. This statement prohibits the unauthorized or unlawful processing of personal data as well as any intentional or unintentional breaches of data security during processing resulting in destruction, loss, alteration or unauthorized disclosure or access.We impose duties of confidentiality on our employees, as well as special duties to comply with confidentiality obligations under data protection law pursuant to art. 5(1)(f) and art. 32(4) GDPR.
Employees are prohibited from unauthorized processing, use or disclosure to third parties of personal data. The first time that any external service provider is engaged by SMT to process personal data, they will be contractually obliged to comply with the requirements of art. 28 GDPR.
Please note: The following information only relates to the processing of shareholders’ personal data. For information regarding the processing of personal data on the website, please refer to the following link DATA PROTECTION.
SMT Scharf Aktiengesellschaft, Römerstraße 104, D- 59075 Hamm is the data controller within the meaning of art. 4(7) of the EU General Data Protection Regulation (GDPR).
SMT Scharf AG processes the following categories of your personal data for shareholder matters: Contact details (e.g. name or email address), information regarding your shares (e.g. number of shares, type of shares) and information regarding general meetings (e.g. the list of attendees of the general meeting which will contain your name, should you wish to participate).
SMT Scharf AG only processes personal data in order to meet its statutory obligations under the German Stock Corporations Act and other laws. This data processing is permissible pursuant to art. 6(1)(c) of the General Data Protection Regulation (GDPR).
Personal data relating to you are, as a rule, not passed on to third parties. As an exception, third parties may be provided with access to this information if they are engaged by SMT Scharf AG to perform shareholder-related services. For example, auditors, lawyers, investor relations advisors and general meeting agencies. These service providers only receive personal data to the extent that it is necessary for the performance of their services.
The aforementioned data will be deleted as soon as they are no longer necessary for the performance of statutory obligations, to the extent that there is not a statutory retention period. The list of attendees for a general meeting is deleted two years after the end of the general meeting.
If the processing of your personal data occurs for the purposes of legitimate interests within the meaning of art. 6(1)(F) GDPR, you have the right under art. 21 GDPR to object, as long as there are grounds relating to your particular situation, or where the objection relates to direct marketing. In the case of the latter, you have a general right of objection without the need for special grounds.
You also have the right to complain to a data protection regulatory authority regarding our processing of your personal data.

References: art. 4
 art. 18
 art. 21
 art. 20
 art. 6
 art. 21
 art. 6
 art. 5
 art. 32
 art. 28
 art. 4
 art. 6
 art. 6
 art. 21