Source: https://www.ime-actia.de/index.php/en/privacy-policy.html
Timestamp: 2019-04-21 22:13:06+00:00

Document:
The ACTIA® Group has specialized for 30 years on electronic onboard-systems of high quality. Through close and intensive cooperation with our customers, as well as a strategy that is based on quality and innovation, the company has become the market leader in its core business.
With regard to the terms used, such as "personal data" or their "processing", we refer to the definitions in Art. 4 of the General Data Protection Regulations (GDPR).
☒ Meta/communication data (e.g., device information, IP addresses).
☒ No special categories of data are processed.
☒ Customers / interested parties / suppliers.
☒ Visitors and users of the online offer.
☒ Provision of the online offer, its contents and functions.
☒ Response to contact requests and communication with users.
☒ Response to applicant enquiries.
3.1 We shall take appropriate technical and organisational measures to ensure a level of protection appropriate to the risk, in accordance with Article 32 GDPR, taking into account the state of the art, implementation costs and the nature, scope, circumstances and purposes of processing and the different likelihood and severity of the risk to the rights and freedoms of natural persons; the measures shall include in particular safeguarding the confidentiality, integrity and availability of data by controlling physical access to the data, as well as the access, input, transmission, security of availability and its separation. Furthermore, we have established procedures that guarantee the exercise of data subject rights, deletion of data and reaction to data risks. Furthermore, we already consider the protection of personal data during the development or selection of hardware, software and procedures, in accordance with the principle of data protection through technology design and data protection-friendly presettings (Art. 25 GDPR).
If we process data in a third country (i.e. outside the European Union (EU) or the European Economic Area (EEA)) or if this occurs in the context of the use of third-party services or disclosure or transfer of data to third parties, this only takes place if it occurs for the fulfilment of our (pre)contractual obligations, on the basis of your consent, on the basis of a legal obligation or on the basis of our legitimate interests. Subject to legal or contractual permissions, we process or leave the data in a third country only in the presence of the special requirements of Art. 44 ff. GDPR. This means, for example, processing is carried out on the basis of special guarantees, such as the officially recognised determination of a data protection level corresponding to the EU (e.g. for the USA by the "Privacy Shield") or compliance with officially recognised special contractual obligations (so-called "standard contractual clauses").
6.2 According to Art. 16 GDPR, you have the right to request the completion of data concerning you or the correction of inaccurate data concerning you.
6.4 You have the right to request that the data concerning you that you have provided to us be received in accordance with Art. 20 GDPR and to request their transmission to other persons responsible.
6.5 According to Art. 77 GDPR you have the further right to lodge a complaint with the competent supervisory authority.
10.2 In accordance with legal requirements, the storage is carried out in particular for 6 years in accordance with § 257 Para. 1 HGB [German Commercial Code] (trading books, inventories, opening balance sheets, annual financial statements, commercial letters, accounting documents, etc.) as well as for 10 years according to § 147 para. 1 AO [Tax Code] (books, records, management reports, accounting documents, commercial and business letters, documents relevant for taxation, etc.).
11.1 We process inventory data (e.g., names and addresses as well as contact data of users), for the purpose of answering inquiries of customers, prospective customers and applicants, as well as provision of product documents in the customer portal in accordance with. Art. 6 Para. 1 lit. b, GDPR). Entries marked as mandatory in online forms are required to respond to requests or access the Customer Portal.
11.2 Users can optionally obtain a user account, in particular by viewing their specific product documentation. During the registration process, the required information will be communicated to the users. The user accounts are not public and cannot be indexed by search engines. If users have terminated their user account, their data with regard to the user account will be deleted, subject to their retention being required for commercial or tax reasons, according to Art. 6 Para. 1 lit. c GDPR. It is up to the users to save their data before the end of the contract if they have given notice of termination. We are entitled to irretrievably delete all user data stored during the term of the contract.
11.3 When registering, re-registering and using our online services, we store the IP address and the time of the respective user action. The data are stored on the basis of our legitimate interests as well as the user's protection against misuse and other unauthorised use. A passing on of this data to third parties does not take place in principle, unless it is necessary for the pursuit of our claims or there is a legal obligation in accordance with. Art. 6 Para. 1 lit. c, GDPR.
11.4 We process usage data (e.g., the visited websites of our online offer, interest in our products) and content data (e.g., entries in the contact form or user profile) for advertising purposes in a user profile in order to show the user e.g. product information based on their previously used services.
11.5 The deletion takes place after the expiration of statutory warranty and comparable obligations, the necessity of the storage of the data is checked every three years; in the case of statutory archiving obligations the deletion takes place after their expiration (end of commercial law (6 years) and tax law (10 years) storage obligation); details in the customer account remain up to its deletion.
12.1 If we make advance payments (e.g. when purchasing on account), we reserve the right to obtain information on identity and creditworthiness for the purpose of assessing credit risk on the basis of mathematical-statistical procedures from specialised service providers (credit agencies) in order to safeguard legitimate interests.
12.3 We process the information received from credit agencies on the statistical probability of non-payment within the framework of an appropriate discretionary decision on the establishment, execution and termination of the contractual relationship. We reserve the right to refuse payment on account or any other advance payment in the event of a negative result of the credit assessment.
12.4 If we obtain an express consent from you, the legal basis for the credit information and the transmission of the customer's data to the credit inquiry agencies is the consent in accordance with Art. 6 Para. 1 lit. a GDPR. If no consent is obtained, our legitimate interests in the default security of your payment claim shall be the legal basis pursuant to Art. 6 Para. 1 lit. f, GDPR).
13.1 When contacting us (via contact form or e-mail), the user's details for the processing of the contact enquiry and its handling according to the terms and conditions of this agreement are stored. Art. 6 Para. 1 lit. b) GDPR.
13.2 User information can be stored in our Customer Relationship Management System ("CRM System") or comparable request organisation.
13.3 We delete the requests if they are no longer necessary. We review the requirement every two years; requests from customers who have a customer account are stored permanently and are linked to the customer account details for deletion. In the case of statutory archiving obligations, the deletion takes place after their expiry (end of commercial law (6 years) and tax law (10 years) storage obligation).
14.1 We collect on the basis of our legitimate interests as defined in Art. 6 para. 1 lit. f. GDPR data on each access to the server on which this service is located (so-called server log files). Access data includes the name of the requested website, file, date and time of access, amount of data transferred, notification of successful retrieval, browser type along with version, the operating system of the user, referrer URL (previously visited), IP address, and the requesting provider.
14.2 Log file information is stored for a maximum of seven days for security reasons (e.g. to investigate misuse or fraud) and then deleted. Data whose further storage is required for evidentiary purposes are excluded from deletion until the respective incident has been finally clarified.
15.2 We use "session cookies", which are only stored on our website for the duration of your current visit (e.g. to store your login status). A randomly generated unique identification number, a so-called session ID, is stored in a session cookie. A cookie also contains information about its origin and the storage period. These cookies cannot store any other data. Session cookies are deleted when you have finished using our online offer and log out or close your browser, for example.
15.4 If users do not want cookies to be stored on their computer, they are asked to deactivate the corresponding option in the system settings of their browser. Cookies already saved can be deleted in the system settings of the browser at any time. The exclusion of cookies can lead to functional restrictions of this online offer.
16.2 Google has become subject to the Privacy Shield agreement, thereby offering a guarantee of compliance with European data protection law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).
16.3 On our behalf, Google will use this information to evaluate the use of our online offering by the user, to compile reports on the activities within this online offering and to provide us with other services related to the use of this online offering and the internet. Pseudonymous usage profiles of users may be created from the processed data in this respect.
16.4 We use Google Analytics only with activated IP anonymisation. This means that the IP address of the user is shortened by Google within the member states of the European Union or in other countries that are party to the Agreement on the European Economic Area. Only in exceptional cases is the full IP address sent to a Google server in the US and shortened there.
16.6 For further information on data usage by Google, setting and objection options, please see the Google website: https://www.google.com/intl/de/policies/privacy/partners ("Data usage by Google when using websites or apps of our partners"), https://policies.google.com/technologies/ads ("Use of data for advertising purposes"), https://adssettings.google.com/authenticated ("Manage information Google uses to show you advertisements").

References: Art. 4
 Art. 44
 Art. 16
 Art. 20
 Art. 77
 § 257
 § 147
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6