Source: http://steelworxx.de/privacy.php?language=en
Timestamp: 2019-04-23 08:15:19+00:00

Document:
Steelworxx takes the protection of your data very seriously. The collection and processing of your data is always done on the basis of the current provisions of the EU’s General Data Protection Regulation (GDPR) and the Federal Data Protection Law of Germany. Steelworxx will always strive to collect as little data as possible.
Your data is stored on servers in Germany based on an agreement on processing order data within the meaning of Art. 28 of the GDPR.
Steelworxx informs you in detail below about the handling of your data. Steelworxx reserves the right to adapt the data protection declaration to the applicable data protection regulations in order to ensure the legal handling of your data.
Please note: You can also print out or save this privacy statement using your browser functions.
The responsible authority for the collection, processing, use and deletion of your personal data is Mr Dietmar Posledni, Sandberg 82, 06528 Blankenheim.
You may visit the Steelworxx website without providing personal details. In this case, Steelworxx only logs general access data. This includes so-called log files including your IP address, cf. Section 5.
Steelworxx will only use your IP address if this is required to protect the legitimate interests of Steelworxx or a third party and only if these interests outweigh the interests or fundamental rights or freedoms of the person requiring the protection of personal data. Examples of this include pursuing legal claims, investigating criminal offences and defending against electronic attacks (e.g. hacking, brute-force attacks).
Steelworxx collects, processes and uses your personal data in accordance with data protection laws and the provisions listed below, or with your express consent.
a) Data is processed by Steelworxx and selected service providers to fulfil contractual obligations.
b) Data processing is necessary in order to balance the legitimate interests of Steelworxx and the respective customer.
c) Data processing is subject to your consent which can be revoked.
d) Data processing is carried out in accordance with legal requirements.
e) Data processing is required in order to perform a task which is in the public interest.
a) to request information about the purpose of the data processing, the categories of data processed, any recipients and the intended duration of the storage of your data (so-called right to information; GDPR Art. 15).
b) to demand the correction of inaccurate data concerning you as well as the completion of incomplete personal data (so-called right of correction; GDPR Art. 16).
h) to complain to the competent supervisory authority about the data processing (so-called right of appeal, GDPR Art. 77). The supervisory authority responsible for Steelworxx is the State Commissioner for Data Protection of Saxony-Anhalt, Leiterstrasse 9, 39104 Magdeburg. Alternatively, you can contact the data protection authority responsible for your place of residence. To assert one of these rights, please send your request to the contact mentioned under 1.1, clearly identifying yourself.
Steelworxx stores your data to provide its online offer, to answer your inquiries and to fulfil and process contracts. Within the framework of contract processing, data may be passed on to payment and shipping service providers.
You can set up a password-protected customer account with Steelworxx. When registering a customer account, Steelworxx only collects the personal data required to fulfil the contract. This includes your first and last name, your address, your e-mail address, your telephone number and, if applicable, your fax number. Mandatory fields are marked with an *. In accordance with Art. 6 (1) 1 (b) of the GDPR, Steelworxx only uses the data you provide for contract processing.
Steelworxx collects the personal data that you voluntarily provide via the contact form or e-mail. In accordance with Art. 6 (1) 1 (b) of the GDPR, Steelworxx will only use the data you provide to process your inquiry.
Steelworxx collects the personal data that you voluntarily provide when placing an order to manufacture a Steelworxx product. If you do not have a customer account with Steelworxx, Steelworxx will collect the personal data required to fulfil the contract as part of the ordering process. This includes your first and last name, your address, your e-mail address, your telephone number and, if applicable, your fax number. Mandatory fields are marked with an *. In accordance with Art. 6 (1) 1 (b) of the GDPR, Steelworxx only uses the data you provide for contract processing.
Your data will be passed on to the shipping company commissioned with the delivery insofar as this is necessary for the delivery of the goods. In order to process payments, Steelworxx may pass on your payment data to the credit institution commissioned with the payment. The transfer shall take place in each case to fulfil the contract in accordance with Art. 6 (1) 1 (b) of the GDPR. Data will not be passed on to third parties for advertising purposes.
In addition, data is transmitted to third parties if Steelworxx is obliged to do so pursuant to Art. 6 (1) 1 (d) of the GDPR on the basis of statutory provisions or by an enforceable official or court order.
Every time the Steelworxx website is accessed, usage data is transmitted through the respective Internet browser and stored in log files, so-called server log files. The datasets stored in this way contain the following data: Date and time of access, name of the page accessed, referrer URL, the amount of data transferred, information on the product and version of the browser used and your IP address.
Steelworxx shall not link this data to other personal data. The log files are only evaluated for statistical purposes in order to better tailor the Steelworxx offer to you and your needs, to find and correct errors more quickly, and to improve Steelworxx’s overall offer. Pursuant to Art.6 (1) 1 (f) of the GDPR, the evaluation serves to safeguard Steelworxx's overriding legitimate interests in the accurate presentation of the Steelworxx website within the context of a balancing of interests.
The log files are stored for up to 14 days and then deleted. Further storage is only carried out in exceptional cases and to prosecute legal claims as well as to investigate criminal offences and to defend against electronic attacks (e.g. hacking, brute-force attacks).
You can configure your browser so that you are informed about the placing of cookies and so that you can decide on an individual basis whether to accept them or to exclude the acceptance of cookies in certain cases or in general. You can also delete cookies at a later date using your browser settings.
Depending on the browser used, you can set your browser to accept cookies only if you agree. Usually, the help function in the menu bar of your web browser shows you how to reject new cookies and deactivate cookies already placed. Steelworxx recommends that you always completely log out of shared computers after your session has ended when these computers are configured to accept cookies.
Steelworxx shall only store your data for as long as this is necessary to provide its services or when there is a legitimate interest in extending this storage period which supersedes your interest in deleting the data. In addition, Steelworxx stores data as long as it is required to fulfil contractual obligations and comply with legal retention periods.
Upon deletion of your customer account, your data will be blocked for further use (restriction of processing) and deleted after expiry of the retention periods under tax and commercial law.
Postal address: Herr Dietmar Posledni, Sandberg 82, 06528 Blankenheim.
After exercising your right of objection, Steelworxx will not process your personal data further, unless the processing is based on legal requirements or on an overriding interest of Steelworxx to assert, exercise or defend legal claims.

References: Art. 28
 Art. 15
 Art. 16
 Art. 77
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art.6