Source: https://www.deltabloc.com/en/privacypolicy
Timestamp: 2019-04-23 12:44:10+00:00

Document:
We are very pleased about your interest in our company. Data privacy has a particularly high importance for the management of DELTA BLOC INTERNATIONAL GMBH. In principle, the use of DELTA BLOC INTERNATIONAL GMBH’s web pages is possible without providing any personal data. However, if an affected individual wants to use our company's special services through our website, this may require the processing of personal data. If the processing of personal data is necessary and there is no legal basis for such processing, we generally collect the consent of the affected person.
The processing of personal data, such as the name, address, e-mail address or telephone number of those concerned, is always carried out in accordance with the General Data Protection Regulation (GDPR) and in compliance with the principles of the Delta Bloc International state-specific data protection regulations. This data privacy notice demonstrates our company’s intention to inform the public about the nature, scope and purpose of the personal data collected, used and processed by us. In addition, this data privacy notice will be used to explain the rights to which affected persons are entitled.
DELTA BLOC INTERNATIONAL GMBH has implemented numerous technical and organisational measures as a data controller in order to ensure the most complete protection of the personal data processed via this website. However, Internet-based data transmissions can generally have security vulnerabilities so that absolute protection cannot be guaranteed. For this reason, any affected person shall be free to transmit personal data to us using alternative routes, for example by telephone.
Personal data is all information relating to an identified or identifiable natural person (hereinafter referred to as "the affected person"). An identifiable person is considered to be an individual who can be identified, directly or indirectly, in particular by assigning him/her an identifier such as a name, an identification number, location data, an online identifier or one or more special characteristics, which indicate the physical, physiological, genetic, psychological, economic, cultural or social identity of this natural person.
The affected person is any identified or identifiable natural person whose personal data is processed by the data controller.
Processing is any operation performed with or without the help of automated procedures or any such series of operations in connection with personal data such as the collection, recording, organisation, arranging, storage, adaptation or alteration, the reading, retrieval, use, disclosure by transmission, distribution or any other form of provision, the matching or linking, restriction, deletion or destruction.
A processing restriction is the marking of stored personal data with the objective of restricting its future processing.
Profiling is any form of automated processing of personal data, which consists of the use of such personal data to assess certain personal aspects relating to a natural person, in particular to include aspects to analyse or predict the performance, economic situation, health, personal preferences, interests, reliability, behaviour, whereabouts or location change of this natural person.
Pseudonymisation is the processing of personal data in a manner to which the personal data can no longer be assigned to a specific affected person without the addition of additional information, provided that this additional information is stored separately and is subject to technical and organisational measures to ensure that the personal data cannot be allocated to an identified or identifiable natural person.
The data controller is the natural person or legal entity, authority, institution or other body that solely or jointly with others decides on the purposes and means of processing personal data. If the objectives and means of such processing are specified by EU law or by the laws of the Member States, the data controller or the specific criteria of his designation must be planned in accordance with European Union law or the laws of the Member States.
An order processor is a natural person or legal entity, authority, institution or other body that processes personal data on behalf of the data controller.
The recipient is a natural person or legal entity, authority, institution or other body that discloses personal data, regardless of whether it involves a third party or not. However, authorities which may receive personal data under a specific investigation mandate under Union law or the law of the Member States shall not be considered as recipients.
A third party is a natural person or legal entity, authority, institution or other body than the affected person, the data controller, the order processor and persons under the direct responsibility of the data controller or the order processor, who is authorised to process personal data.
Consent is a declaration or an otherwise clearly affirming act provided voluntarily by the affected person for a particular situation in an informed and unambiguous manner; it clearly shows the affected person’s agreement to the processing of his/her personal data.
The affected person can prevent the setting of cookies by our Internet site at any time by adjusting the corresponding setting in the Internet browser that is being used, thereby permanently objecting to the setting of cookies. In addition, cookies that have already been set can be deleted at any time via an Internet browser or other software programs. This is possible in all popular Internet browsers. If the affected person disables the setting of cookies in the Internet browser being used, then it is however possible that some of our websites functions may not be fully usable.
The DELTA BLOC INTERNATIONAL GMBH website collects a number of general data and information every time the web page is loaded by an affected person or an automated system. This general data and information are stored in the server’s log files. The following are collected: (1) browser types and versions used, (2) the operating system used by the accessing system, (3) the Internet site from which an accessing system reaches our Internet site (so-called referrers), (4) the sub-websites, which are controlled via an accessing system on our website, (5) the date and time of access to the Internet site, (6) an Internet Protocol address (IP address), (7) the Internet service provider of the accessing system and (8) other similar data and information used to provide security in the event of attacks on our information technology systems.
When using this general data and information, DELTA BLOC INTERNATIONAL GMBH does not draw any conclusions about the affected person. This information is needed to (1) deliver the contents of our website correctly, (2) to optimise the contents of our website as well as the advertising for them, (3) to maintain the permanent functioning of our information technology systems and the technology of our website and (4) to provide law enforcement authorities with the information required in the event of a cyber-attack for prosecution purposes. This anonymous data and information is therefore evaluated further statistically by DELTA BLOC INTERNATIONAL GMBH with the aim of increasing data protection and data security in our company on the one hand, and secondly to achieve an optimal level of protection for the personal data processed by us. The anonymous data of the server log files is stored separately from all the personal data provided by an affected person.
On the website of DELTA BLOC INTERNATIONAL GMBH, users are given the opportunity to subscribe to our company's newsletter. Which personal data is transmitted to the data controller in the process of subscribing to the newsletter is the result of the input mask used for this.
DELTA BLOC INTERNATIONAL GMBH uses a newsletter to inform its customers and business partners at regular intervals about offers by the company. Our company’s newsletter can only be received by an affected person if (1) the affected person has a valid email address and (2) the affected person subscribes to the newsletter. For legal reasons, a confirmation email will be sent to the email address registered for the newsletter for the first time in the double opt-in procedure. This confirmation email is used to check whether the owner of the email address has authorised the receiving of the newsletter as the affected person.
When subscribing to the newsletter, we also store the IP address issued by the Internet service provider (ISP) of the affected person at the time of the login by the computer system that is used as well as the date and time of login. The collection of this data is necessary in order to be able to understand the (possible) misuse of the email address of an affected person at a later date and therefore it legally safeguards the data controller.
The personal data collected as part of subscribing to the newsletter will only be used to mail out our newsletter. Furthermore, subscribers to the newsletter could be informed by email if this is necessary for the operation of the newsletter service or if such a registration is required, as could be the case in the event of changes to the Newsletter offer or changes in the technical circumstances. The personal data collected within the scope of the newsletter service will not be passed on to third parties. The subscription to our newsletter can be cancelled by the affected person at any time. The consent for the storage of personal data that the affected person has granted us for the newsletter can be revoked at any time. A specific link is provided in every newsletter for the purpose of cancelling the consent. It is also possible to unsubscribe from the newsletter or to communicate this to the data controller in some other way at any time directly on the website.
The newsletter of DELTA BLOC INTERNATIONAL GMBH contains so-called tracking pixels. A tracking pixel is a miniature graphic that is embedded in such emails, which are sent in HTML format in order to enable a log file record and a log file analysis. This allows for a statistical evaluation of the success or failure of online marketing campaigns. Using the embedded tracking pixels, DELTA BLOC INTERNATIONAL GMBH can detect if and when an email was opened by an affected person and which links in the email were accessed by the affected person.
Any personal data collected via the tracking pixels in the newsletters is stored and evaluated by the data controller to optimise the mailing of the newsletter and to adapt the content of future newsletters more to the interests of the affected person. This personal data will not be passed on to third parties. Affected persons are entitled at any time to revoke the separate declaration of consent for this purpose provided by means of the double opt-in procedure. This personal data will be deleted by the data controller once consent is revoked. Unsubscribing from the newsletters is automatically interpreted as a cancellation by DELTA BLOC INTERNATIONAL GMBH.
Based on the legal regulations, the website of DELTA BLOC INTERNATIONAL GMBH contains details, which make it possible to make fast electronic contact with our company and to communicate directly with us; this also encompasses a general electronic mail address (email address). If an affected person initiates contact by email with the data controller by email or via a contact form, the personal data transmitted by the affected person is automatically saved. Such personal data provided to the data controller by an affected person on a voluntary basis shall be stored for the purpose of processing or contacting the affected person. This personal data will not be passed on to third parties.
The data controller shall process and store personal data of the affected person only for the period of time required to achieve the storage objective, or if this is required by the European Directives and regulators or another legislator in laws or regulations, and the data controller shall be subject to these.
If the purpose of storage lapses or if a storage period prescribed by the European Directives and regulators or another competent legislator expires, the personal data will be routinely blocked or deleted in accordance with the statutory regulations.
Each affected person shall have the right granted by the European Directives and legislator, to demand confirmation from the data controller about whether the affected person’s data will be processed. If an affected person wishes to avail himself of this right to obtain confirmation, he/she may at any time contact the staff of the data controller.
In addition, the affected person is entitled to a right of access to information about whether personal information has been transmitted to a third country or to an international organisation. Where this is the case, the affected person shall also be entitled to obtain information on the appropriate guarantees in connection with the transfer.
If an affected person wishes to avail himself of this right to receive information, he/she can at any time contact an employee of the data controller.
Any person affected by the processing of personal data shall have the right granted by the European Directives and legislator to demand the immediate rectification of any incorrect personal data relating to them. In addition, the affected person shall be entitled, considering the purposes of processing, to demand the completion of incomplete personal data, including the use of a supplementary statement.
If an affected person wishes to avail himself of this right of rectification, he/she may at any time contact an employee of the data controller.
The personal data was collected for such purposes or processed in such a manner for which they are no longer necessary.
The affected person revokes his consent upon which the processing was based in accordance with Art. 6, Sub-section 1 (a) DS-GVO or Article 9 Sub-section 2 (a) DS-GVO and there is no other legal basis for the said processing.
The affected person, in accordance with Art. 21, Sub-section 1, DS-GVO, objects to the processing and there are no overriding reasons for processing, or the affected person, in accordance with Art. 21, Sub-section 2, DS-GVO, objects to the processing.
The personal data has been processed in an unlawful manner.
The deletion of the personal data is necessary for the fulfilment of a legal obligation under European Union law or the law of the Member States to which the person responsible is subject.
The personal data was collected in relation to the offered services of the company providing the information pursuant to Art. 8, Sub-section 1, DS-GVO.
If one of the above reasons is true and an affected person wishes to initiate the deletion of personal data stored at DELTA BLOC INTERNATIONAL GMBH, it may at any time contact an employee of the data controller. The DELTA BLOC INTERNATIONAL GMBH employee will arrange for the deletion request to be dealt with immediately.
If the personal data was disclosed by DELTA BLOC INTERNATIONAL GMBH and our company, as the responsible party, is obligated to delete the personal data in accordance with Art. 17, Sub-section 1, DS-GVO, then DELTA BLOC INTERNATIONAL GMBH, taking into account the available technology and the implementation costs, shall take appropriate measures, including technical means, to inform others parties processing public personal data for the data controller, that the affected person has demanded these other parties responsible for data processing to delete all the links to this personal data or to demand copies or printouts of this personal data, insofar as such processing is not required. The DELTA BLOC INTERNATIONAL GMBH employee will make the arrangements necessary, from case to case.
If the accuracy of the personal data is disputed by the affected person, for a period of time, which enables the data controller to verify the accuracy of the personal data.
If the processing is unlawful, the affected person rejects the deletion of the personal data and instead demands the restriction of the use of the personal data.
If the data controller no longer needs the personal data for the purposes of the processing, but the affected person needs it to assert, exercise or defend legal claims.
If the affected person has objected to the processing in accordance with Article. 21, Sub-section 1, DS-GVO and it is not yet determined whether the data controller’s legitimate reasons are prevalent in relation to those of the affected person.
If one of the above conditions is given and an affected person wishes to demand the restriction of personal data stored at DELTA BLOC INTERNATIONAL GMBH, he/she may at any time contact an employee of the data controller. The employee of DELTA BLOC INTERNATIONAL GMBH will arrange for the restriction of the processing.
Any person affected by the processing of personal data shall have the right granted by the European Directives and legislator, to receive the personal data relating to him/her, which has been provided by the affected person to the data controller, in a structured, usual and machine-readable format. He/she shall also have the right to transmit such data to another data controller without being hindered from doing so by the data controller the data was initially provided to, insofar as the processing is based on the consent provided for in Art. 6, Sub-section 1 (a) DS-GVO or Art. 9, Sub-section 2 (a) DS-GVO or is based on a contract in accordance with Art. 6, Sub-section 1 (b) DS-GVO and was processed using automated procedures, provided that processing is not necessary for the performance of a task which is in the public interest or in the exercise of public authority, which was imposed on the data controller.
Furthermore, in exercising his/her right to transfer data, the affected person shall, in accordance with Art. 20, Sub-section 1, DS-GVO, have the right to ensure that the personal data be transmitted directly from one data controller to another data controller, insofar as this is technically feasible and insofar as this does not affect the rights and freedoms of other persons.
In order to assert the right to transfer data, the affected person may at any time contact a staff member of DELTA BLOC INTERNATIONAL GMBH.
Any person affected by the processing of personal data shall have the right granted by the European Directives and legislator, for reasons arising out of its particular situation, to object to the processing of any personal information that is performed on the basis of Art. 6, Sub-section (1) (e) or (f) DS-GVO. This also applies to profiling based on these provisions.
DELTA BLOC INTERNATIONAL GMBH shall no longer process the personal data in case of an objection, unless it can prove compelling reasons for the processing that outweigh the interests, rights and freedoms of the affected person, or if the processing serves to assert, exercise or defend legal claims.
If DELTA BLOC INTERNATIONAL GMBH processes personal data for the purpose of direct advertising, the affected person shall have the right at any time to object to the processing of the personal data for the purpose of such advertising. This also applies to profiling as far as it is related to such direct advertising. If the affected person objects to this processing to DELTA BLOC INTERNATIONAL GMBH for the purposes of direct marketing, DELTA BLOC INTERNATIONAL GMBH shall no longer process the personal information for these purposes.
In addition, the affected person shall have the right, for reasons arising from its particular situation, to file an objection with DELTA BLOC INTERNATIONAL GMBH against the processing of personal data relating to it for scientific or historical research purposes or for statistical purposes in accordance with Art. 89, Sub-section 1, DS-GVO, unless such processing is necessary for the performance of a task with a public benefit.
(3) this occurred with the express consent of the affected person.
If the decision (1) is necessary for the conclusion or performance of a contract between the affected person and the data controller, or (2) if the affected person has expressed his or her explicit consent, DELTA BLOC INTERNATIONAL GMBH shall take appropriate measures to safeguard the rights and freedoms and the legitimate interests of the affected person, including at least a person’s right to intervene on the part of the data controller, to present his own position and to challenge the decision.
If the affected person wishes to assert rights with regard to automated decisions, the affected person may at any time contact an employee of the data controller.
Any person affected by the processing of personal data shall have the right to revoke consent to the processing of personal data at any time, as granted by the European Directives and legislator.
If the affected person wishes to assert his right to revoke consent, the affected person may at any time contact an employee of the data controller.
The data controller collects and processes the personal data of applicants for the purpose of the application processing procedure. Processing can also be done electronically. This is particularly the case when an applicant transmits corresponding application documents electronically, e.g. by email or using a Web form located on the website to the data controller for processing applications. If the data controller concludes an employment contract with an applicant, the transmitted data will be stored for the purpose of processing the employment relationship, in compliance with the legal regulations. If no employment contract with the applicant is concluded by the data controller, the application documents shall be automatically deleted two months after the notification of the negative decision, provided that this does not conflict with any otherwise justified interests of the data controller. Other legitimate interests in this sense are, for example, the burden of proof in a legal procedure under the General Equal Treatment Act (AGG).
The data controller has integrated components of YouTube on this website. YouTube is an Internet video portal that allows video publishers to freely post video clips and enables other users to view, evaluate and comment on these for free. YouTube allows the publication of all kinds of videos, which is why both complete film and TV programmes, as well as music videos, trailers or user-produced videos can be accessed via the Internet portal.
Every time one of the individual webpages, which are operated by the data controller and on which a YouTube component (YouTube video) has been integrated, is accessed, a YouTube component automatically causes the Internet browser on the information technology system of the affected person to automatically download a representation of the corresponding YouTube component from YouTube. More information about YouTube can be obtained at https://www.youtube.com/yt/about/de/. As part of this technical process, YouTube and Google are informed which sub-page of our website was visited by the affected person.
If the affected person is logged into YouTube at the same time, YouTube upon accessing a sub-page that contains a YouTube video detects which specific sub-page of our website is being visited by the affected person. This information is collected by YouTube and Google and is associated with the relevant YouTube account of the affected person.
YouTube and Google always receive information of this via the YouTube component if the affected person visited our website, if the affected person is logged on to YouTube at the time of accessing our website; this takes place regardless of whether the affected person clicks on a YouTube video or not. If such information is not intended to be transmitted to YouTube and Google by the affected person, he/she can prevent it from logging out of your YouTube account prior to accessing our website.
Art. 6, Sub-section I, lit. a, DS-GVO serves as the legal basis for processing operations in which we obtain consent for a particular processing purpose for our company. Where the processing of personal data is necessary for the performance of a contract to which the affected person is a party, as is the case for example with processing operations required for the supply of goods or the provision of other performance or consideration, the processing shall be based on Art. 6, Sub-section I, lit. b, DS-GVO. The same applies to such processing operations as are necessary for the implementation of pre-contractual measures, for example in cases of inquiries concerning our products or services. If our company is subject to a legal obligation which requires the processing of personal data, e.g. to fulfil tax obligations, then the processing is based on Art. 6, Sub-section I, lit. c DS-GVO. In rare cases, the processing of personal data could become necessary to protect the vital interests of the affected person or those of another individual. This would be the case, for example, if a visitor were injured in our company and subsequently his name, age, health insurance data or other vital information would need to be passed on to a doctor, hospital or other third party. Then the processing would be based on Art. 6, Sub-section I, lit. d DS-GVO. Ultimately, the processing operations could be based on Art. 6, Sub-section I, lit. f DS-GVO. The processing operations which are not covered by any of the aforementioned legal bases if processing is necessary to safeguard a legitimate interest of our company or a third party, provided that the interests, fundamental rights and freedoms of the affected person do not prevail, are all based on this legal basis. We are permitted to do such processing particularly because it has been specifically mentioned by the European legislator. In this respect, the legislator was of the opinion that a legitimate interest could be justified if the affected person is a customer of the data collector (recital 47, second sentence of the DS-GVO).
If the processing of personal data is based on Art. 6 Sub-section I lit. f DS-GVO, our legitimate interest is in carrying out our business activities in favour of the well-being of all our employees and shareholders.
The criterion for the duration of the storage of personal data is the respective legal retention period. The corresponding data is routinely deleted at the end of that period, unless it is no longer necessary for the performance of the contract or the initiation of the contract.
We inform you that the provision of personal data may in part be required by law (e.g. tax provisions) or are also based on contractual provisions (e.g. information about the Contracting Party). Sometimes it may be necessary for the conclusion of a contract that an affected person provides us with personal data, which must subsequently be processed by us. The affected person, for example, is obligated to provide us with personal data when our company concludes a contract with him/her. Non-provision of personal data could mean that the contract with the affected person could not be concluded. Prior to the provision of personal data by the affected person, the affected person must contact one of our employees. Our employee will inform the affected person whether the provision of personal data is required by law or by contract or is necessary for the conclusion of the contract, whether there is an obligation to provide the personal data and the consequences of non-provision of personal data, depending on the actual situation.

References: Art. 6
 Art. 21
 Art. 21
 Art. 8
 Art. 17
 Art. 6
 Art. 9
 Art. 6
 Art. 20
 Art. 6
 Art. 89

Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6