Source: https://www.eschenbach-group.com/en/data-protection-declaration.html
Timestamp: 2019-04-23 01:58:08+00:00

Document:
We appreciate your interest in our company. Data protection is of particular importance to the management of Eschenbach Zeltbau GmbH & Co KG.
The Internet pages of Eschenbach Zeltbau GmbH & Co KG can be used without providing any personal data. However, if a data subject wishes to make use of the special services offered by our company via our website, we may need to process your personal data. If the processing of personal data is required, this will be undertaken in accordance with Art. 6 lit. b and c GDPR.
Processing of personal data, such as the name, address, email address or telephone number of a data subject, is always undertaken in accordance with the General Data Protection Regulation and in accordance with the Federal Data Protection Act. With this data protection declaration, our company would like to inform the public about the type, scope and purpose of the personal data we collect, use and process. Furthermore, data subjects will be informed of their rights with this data protection declaration.
As the data controller, Eschenbach Zeltbau GmbH & Co. KG has implemented numerous technical and organisational measures in order to ensure that all personal data processed via this website is protected as completely as possible. Nevertheless, Internet-based data transmissions can have security gaps, so that absolute protection cannot be guaranteed. For this reason, every data subject is free to transmit personal data to us by alternative means, for example by telephone.
The data protection declaration of Eschenbach Zeltbau GmbH & Co KG is based on the terms used by the European guideline and regulation provider when the General Data Protection Regulation (GDPR) was issued. Our data protection declaration is meant to be easy to read and understand both for the public and for our customers and business partners. To ensure this, we would like to explain the terms used in advance.
The data subjects any identified or identifiable person, whose personal data is processed by the person responsible for the processing.
The data controller is the legal person, public authority, institution or other body which alone or jointly with others decides on the purposes and means of processing personal data. Where the purposes and means of such processing are laid down by Union law or by the law of the Member States, the responsible person or the specific criteria for their appointment may be laid down in accordance with Union law or the law of the Member States.
Contract processor is a natural or legal person, public authority, agency or other body which processes personal data on behalf of the data controller.
A third party is a natural or legal person, public authority, agency or body other than the data subject, data controller, data processor and persons who, under the direct authority of the data controller or data processor, are authorised to process personal data.
Due to the size of the company and the category of personal data we process, we are not obliged to appoint a company data protection officer. You are welcome to submit data protection-related inquiries to us at info@eschenbach-zeltbau.de .
By using cookies, Eschenbach Zeltbau GmbH & Co KG can provide users of this website with more user-friendly services, which would not be possible without setting cookies.
The data subject can prevent our website's setting of cookies at any time by appropriately setting the Internet browser being used, thus permanently preventing cookies from being utilised. Furthermore, cookies that have already been set can be deleted at any time using an Internet browser or other software programs. This is possible in all common internet browsers. If the data subject deactivates the setting of cookies on the Internet browser being used, not all functions of our Internet site may be fully usable.
The Eschenbach Zeltbau GmbH & Co KG website collects a series of general data and information every time a person or an automated system accesses the website. This general data and information is stored in the log files of the server. We may record (1) the browser types and versions used, (2) the operating system used by the accessing system, (3) the website from which an accessing system reaches our website (so-called referrer), (4) the sub-pages which are accessed via an accessing system on our website, (5) the date and time the website was accessed, (6) an Internet Protocol address (IP address), (7) the Internet service providers of the accessing system, and (8) other similar data and information used for security purposes in the event of attacks on our IT systems.
Eschenbach Zeltbau GmbH & Co KG does not draw any conclusions about the data subject when using this general data and information. Rather, this information is required to (1) correctly deliver the contents of our website, (2) optimise the contents of our website and the advertising for it, (3) ensure the permanent functionality of our IT systems and the technology on our website, and (4) provide law enforcement authorities with the information necessary for criminal prosecution in the event of a cyber-attack. These anonymously collected data and information are therefore evaluated by Eschenbach Zeltbau GmbH & Co KG statistically with the aim of increasing data protection and data security in our company in order to ultimately ensure an optimal level of protection for the personal data we process. The anonymous data of the server log files is stored separately from all personal data provided by a data subject.
Server log files contain anonymous data that is collected when you access our website. This information cannot be traced in any way to you as an individual, but is, for technical reasons, necessary for the delivery and presentation of our content. It also helps with our statistics and with the continuous optimisation of our content. Typical log files include the date and time of access, the volume of data, the browser used and the browser version, the operating system used, the domain name of the provider you use, the page from which you visited our website (referrer URL) and your IP address. Log files also enable precise checks in the event of suspected illegal use of our website.
Our website uses SSL encryption when transmitting the confidential or personal information of our users. This encryption is enabled, for example, during payment processing and for requests you send us via our website. Please make sure that SSL encryption is enabled on your device when engaged in relevant activities. It is easy to tell whether encryption is enabled: the display on your browser line changes from "http://" to "https://". Data encrypted via SSL cannot be read by third parties. Only transmit your confidential information if SSL encryption is activated; if in doubt, please contact us.
We only use a static link to Facebook; your data will not be transferred to Facebook.
Eschenbach Zeltbau GmbH & Co. KG's website contains information that enables making quick electronic contact with our company, as well as direct communication with us, which also includes a general address of the so-called electronic mail (email address). If a data subject contacts the controller by email or via a contact form, any personal data transmitted by the data subject is automatically stored. Such personal data transmitted on a voluntary basis by a data subject to the data controller is stored for the purpose of processing or contacting the data subject. This personal data is not transferred to third parties.
This website uses Google Analytics, a web analysis service provided by Google Inc. ("Google"). Google Analytics uses "cookies", text files that are stored on your computer to help analyse your use of the website. The personal data generated by the cookie about your use of the website will usually be transmitted to and stored on a Google server in the USA. However, if IP anonymisation is activated on this website, your IP address will be truncated by Google within the member states of the European Union or in other countries that are contracting parties to the Agreement in the European Economic Area. In exceptional cases only, the complete IP address may be transmitted to a Google server in the USA and truncated there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website in order to compile reports on the activities of the website and to provide further services relating to the use of the website and the internet usage vis-a-vis the operator of the website. The IP address that your browser transmits within the scope of Google Analytics will not be associated with any other data held by Google. You can prevent these cookies being stored by selecting the appropriate settings in your browser. However, we wish to point out that doing so may mean you will not be able to enjoy the full functionality of this website. You can also prevent the data generated by cookies about your use of the website (including your IP address) from being passed to Google and the processing of this data by Google by downloading and installing the browser plugin available under the following link: http://tools.google.com/dlpage/gaoptout?hl=en. In view of the debate regarding the use of analytics tools with full IP addresses, we would like to point out that this website uses Google Analytics with the "_anonymizeIp()" extension and as such ensures that IP addresses are only processed in a truncated form so as to preclude any direct personal reference.
We use the provider i-magazine AG ("Yumpu"), Gewerbestrasse 3, 9444 Diepoldsau, Switzerland for the presentation of flip catalogues on our website.
Using Yumpu, the content of pdf files is displayed as a so-called flip catalogue, freely accessible and easily readable for everyone directly in the web browser, without having to load pdf files.
The data controller shall process and store the personal data of the data subject only for the period necessary to achieve the purpose of storage, or insofar as this is granted by the European legislator or other legislators in laws or regulations to which the data controller is subject to.
Every data subject shall have the right, granted by the European legislator of directives and regulations, to require the data controller to confirm whether personal data concerning him/her is being processed. If a data subject wishes to exercise this right of confirmation, he/she may contact the above email address or another employee of the data controller at any time.
Any data subject affected by the processing of personal data shall have the right, granted by the European legislator of directives and regulations, to obtain, at any time and free of charge, information from the data controller concerning the personal data relating to him/her that has been stored, and to receive a copy of that information.
If a data subject wishes to make use of this right to information, he/she can contact the above email address at any time.
Any data subject who is affected by the processing of personal data shall have the right, granted by the European legislator of directives and regulations, to request the immediate correction of inaccurate personal data concerning him/her. Furthermore, taking into account the purposes of the processing, the data subject has the right to request the completion of incomplete personal data, including by means of a supplementary declaration.
If a data subject wishes to exercise this right to correction, he/she can contact the above email address at any time.
The data subject withdraws his/her consent to the processing pursuant to Art. 6 para. 1 letter a GDPR or Art. 9 para. 2 letter a of the GDPR, and if there is no other legal basis for processing; Pursuant to Art. 21 para. 1 GDPR, and there are no overriding legitimate grounds for processing, or the data subject is entitled to submit an objection pursuant to Art. 21 para. 2 of the GDPR. The personal data has been unlawfully processed.
The personal data must be erased for compliance with a legal obligation under Union or Member State law to which the data controller is subject.
The personal data has been collected in relation to services offered by the information society according to Art. 8 para. 1 of the GDPR.
If one of the above-mentioned reasons applies and if a data subject wishes to have personal data stored at Eschenbach Zeltbau GmbH & Co KG deleted, he or she can contact the above-mentioned email address at any time. The data protection officer will arrange for compliance with the deletion request without delay.
The processing is unlawful, and the data subject opposes the deletion of the personal data and requests instead the restriction of its use instead.
The data controller no longer needs the personal data for the purposes of the processing, but it is required to by the data subject for the establishment, exercise or defence of legal claims.
The data subject has objected to the processing pursuant to Art. 21 para. 1 GDPR, and it has not yet been determined whether the legitimate reasons of the person responsible outweigh those of the person concerned.
If one of the above conditions applies and a data subject wishes to request the restriction of personal data stored at Eschenbach Zeltbau GmbH & Co KG, he or she can contact the above email address at any time. The data protection officer will arrange for processing to be restricted.
Any data subject shall have the right, granted by the European legislator of directives and regulations, to receive personal data relating to him/her provided by the data subject to a data controller, in a structured, current and machine-readable format. They also have the right to transmit this data to another data controller without obstruction by the data controller to whom the personal data has been provided, provided that the processing is based on the consent provided for in Art. 6 para. 1 letter a GDPR or Art. 9 para. 2 letter a GDPR or on a contract according to Art. 6 para. 1 letter b GDPR, and processing is carried out using automated procedures, except where processing is necessary for the performance of a task in the public interest or in the exercise of official authority conferred on the data controller.
Furthermore, in exercising his or her right to data transferability pursuant to Art. 20 para. 1 GDPR, the data subject has the right to require that the personal data be transferred directly from one data controller to another data controller, to the extent this is technically feasible and provided that this does not affect the rights and freedoms of others.
The data subject can contact the above email address at any time to assert the right to data transferability.
Any data subject affected by the processing of personal data shall at all times have the right, granted by the European legislator of directives and regulations, for reasons arising from his or her particular situation, to object to the processing of personal data relating to him or her pursuant to Article 6 para. 1 letter e or f of the GDPR. This also applies to profiling based on these provisions.
Eschenbach Zeltbau GmbH & Co. KG will no longer process personal data in the event of an objection, unless we can prove compelling reasons worthy of protection for the processing, which outweigh the interests, rights and freedoms of the data subject, or the processing serves to assert, exercise or defend legal claims.
To exercise the right of objection, the person concerned may contact Eschenbach Zeltbau GmbH & Co KG directly at the above email address.
Each data subject shall have the right, granted by the European legislator of directives and regulations, to revoke his or her consent to the processing of his or her personal data at any time.
If the data subject wishes to exercise his/her right to revoke his/her consent, he/she may contact the above email address at any time.
Any data subject shall have the right of appeal to a supervisory authority if the data subject considers that the processing of personal data concerning him or her is contrary to the GDPR. The supervisory authority responsible for Eschenbach Zeltbau GmbH & Co KG is the Saxon State Data Protection Commissioner. For information, please visit https://www.saechsdsb.de.
The processing of personal data is for the fulfilment of a contract to which the data subject is a party. For example, this shall be undertaken in the case of processing transactions that are necessary for the delivery of goods or the rendering of another service or return service. This processing is based on Art. 6 I lit. b GDPR. This also applies to processing operations necessary before a contract is signed, such as responding to enquiries about our products or services. If our company is subject to a legal obligation which requires the processing of personal data, for example to fulfil tax obligations, the processing is based on Art. 6 I letter c GDPR.
We hereby inform you that the provision of personal data is partly required by law (e.g. tax regulations) or may also result from contractual regulations (e.g. information on the contractual partner). In some cases, it may be necessary for a contract to be concluded if a data subject provides us with personal data which must subsequently be processed by us. For example, the data subject is obliged to provide us with personal data if our company enters into a contract with him/her. Failure to provide personal data would mean that the contract with the data subject could not be concluded. Prior to the provision of personal data by the data subject, the data subject must contact the above email address. Our data protection officer will inform the data subject on a case-by-case basis whether the provision of personal data is required by law or contract or required for the conclusion of the contract, whether there is an obligation to provide the personal data and what consequences the failure to provide the personal data would have.

References: Art. 6
 Art. 6
 Art. 9
 Art. 21
 Art. 21
 Art. 8
 Art. 21
 Art. 6
 Art. 9
 Art. 6
 Art. 20
 Art. 6
 Art. 6