Source: https://alumag.com/dataprotection/
Timestamp: 2019-04-18 16:22:17+00:00

Document:
Thank you for using the website and the portal of AluMag Automotive GmbH. We take the protection of their personal data very seriously. Here we inform you about the collection of personal data on the website and the portal which provides the visitors when registering the continued use of the Services.
The use of the web pages of AluMag Automotive GmbH is in principle possible without providing personal information. Want to take unless an affected person special services of our company on our website to complete, but the processing of personal data could be needed. If the processing of personal data required, and there is for such processing is no legal basis, we get a general consent of the person concerned.
The AluMag Automotive GmbH than implemented data controller numerous technical and organizational measures to ensure the consistent maximum protection of processed via this website personal data. Nonetheless, Internet-based data transfers can basically have security holes, so that an absolute protection cannot be guaranteed. For this reason, it is open to any person concerned to submit personally identifiable information on alternative routes, for example by phone, contact us.
To ensure data security, the portal of the website maintains current technical measures which are particularly aimed at the protection of your personal data during data transmission and before the acquisition by third parties.
The stored data is stored on a secure server of our portal partners in the EU in Germany Frankfurt. In addition, our database partners the US-EU Safe Harbor Framework and the US-Swiss Safe Harbor Framework has committed.
Personal data is any information relating to an identified or identifiable natural person (the “data subject”). an individual is considered to be identified, directly or indirectly, in particular by means of assignment to an identifier such as a name, an identification number, location data, to an online identifier or to one or more special features that reflect the physical, physiological, are genetic, mental, economic, cultural or social identity of that natural person can be identified.
Person concerned, any identified or identifiable natural person whose personal data are processed by the data controller.
Processing each operation performed with or without the aid of automated processes or any such process number associated with personal data such as collection, the collection, the organization, arrangement, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, the balance or the shortcut that limitation, deletion or destruction.
Profiling is any type of automated processing of personal data, which is that these personal data are used to evaluate certain personal aspects relating to a natural person, in particular to aspects relating to labor, economic status, health, personal analyze preferences, interests, reliability, performance, location or relocation of this natural person or predict.
Pseudonymization is the processing of personal data in a manner in which the personal data can no longer be assigned to a specific subject without the assistance of additional information, provided this additional information be kept separately and technical and organizational measures are in place to ensure that the personal data not an identified or identifiable natural person assigned.
Responsible or data controller is the natural or legal person, public authority, agency or other body which alone or jointly with others determines the purposes and means of the processing of personal data. Are the purposes and means of processing prescribed by European Union law or the law of the Member States, the person responsible or the specific criteria being appointed, in accordance with Union law or the law of the Member States can be provided can.
Processors is a natural or legal person, public authority, agency or other body which processes personal data on behalf of the person responsible.
Receiver a natural or legal person, public authority, agency, or other entity, the personal information is to be disclosed, regardless of whether it is with her to a third party or not. Authorities that may receive personal data in the context of a particular inquiry shall under Union law or the calculation of the Member States, but not as receiver.
Consent is any voluntary for the particular case and unequivocally delivered by the data subject informed manner expression of will in the form of a declaration or another recognizable affirmative act by which is meant the person that they agree to the processing of personal data concerning is.
When using this general data and information AluMag Automotive GmbH draws no conclusions on the person concerned. This information is rather required to (1) deliver the content of our web site correctly, (2) to improve the content of our website and the advertising of them to ensure (3) the continued functioning of our information technology systems and the technology of our website as well (4) by law enforcement agencies in the event of a cyber attack to provide the necessary information to law enforcement. This anonymous data collected and information is therefore one hand statistically and further evaluated by the AluMag Automotive GmbH with the aim to increase the privacy and data security in our company, to ultimately ensure an optimal level of protection of personal data processed by us. The anonymous data from the server log files are stored separately from all specified by a data subject personal data.
By registering on the website of the controller from the Internet Service Provider (ISP) of the person concerned assigned IP address, the date and the time of registration is also stored. The storage of this data takes place against the background that the only way the abuse of our services can be prevented, and allow this information if necessary to clear up crimes committed. Insofar as the storage of the data to protect the data controller is required. The transfer of such data to third parties does not in principle, provided no legal obligation to disclose exists or is the sharing of law enforcement.
The registration of the person concerned with the voluntary provision of personal data is used for the data controller to provide the data subject content or services that can be offered due to the nature of the case only for registered users. Registered persons are free the opportunity to amend or personal data entered during the registration at any time to completely leave out the data stock of Clear responsible for processing.
The data controller issued every data subject at any time to request information about what personal data is stored by the person concerned. Furthermore, correct or delete the to the extent not contrary to statutory retention periods for data controllers personal data on request or notice of the person concerned. The whole of the staff of the controller are the person concerned in this context as a contact person.
On the website of AluMag Automotive GmbH will users be given the opportunity, the newsletter of our company to subscribe. What personal information when ordering the newsletter to be sent to the controller, resulting from the use this input mask.
The AluMag Automotive GmbH informs its customers and business partners on a regular basis by way of a newsletter about the company’s offerings. The newsletter of our company can basically only be received by the person concerned, if (1) the person has a valid e-mail address and (2) the person registered for sending out newsletters. To affected by a person for the first time sending out newsletters registered email address a confirmation email in the double opt-in procedure will be sent for legal reasons. This confirmation is used to check whether the holder of the e-mail address has an affected person authorized to receive the newsletter.
When registering for our newsletter, we also save from the Internet Service Provider (ISP) assigned IP address of the person concerned by the the time of registration computer system used and the date and time of the registration. The collection of this information is required to the (possible) misuse of the email address of a person concerned to be able to understand at a later date and therefore serves as a legal safeguard of the data controller.
The collected as part of a subscription to the newsletter personal data will only be used to send our newsletter. Moreover, subscribers of the newsletter by e-mail could be informed if this is necessary for the operation of the newsletter service or a related registration, as might be the case in the event of changes to the newsletter offer or in changing the technical conditions. There is no transfer of collected within the scope of the newsletter service personal data to third parties. The subscription of our newsletter can be canceled by the person at any time. The consent to the storage of personal data which the data subject has given us sending out newsletters, may at any time be revoked. For the purpose of the withdrawal of consent, a corresponding link found in every newsletter. It is also possible, at any time log or directly on the website of the controller from the newsletters this inform the other way for the controller.
The Newsletter of the AluMag Automotive GmbH contain so-called Web beacons. A web beacon is a miniature image that is embedded in such emails, which are sent in HTML format in order to make log-file recording and log analysis. This can be carried out a statistical analysis of the success or failure of online marketing campaigns. The AluMag Automotive GmbH can detect whether and when an email was opened by an interested person and what links contained in the e-mail were called by the person using the embedded web beacons.
Such collected about the information contained in the newsletters tracking pixels personal data is stored by the data controller and evaluated in order to optimize the newsletters and to better tailor the content of future newsletter the interests of the person concerned. These personal data will not be disclosed to third parties. Affected individuals are entitled at any time to revoke the related separate, delivered via the double opt-in procedure consent form. After revocation, such personal data will be deleted from the data controller. You can unsubscribe from receiving the newsletter automatically interprets the AluMag Automotive GmbH a revocation.
The website of the AluMag Automotive GmbH contains under law disclosures that enable rapid electronic contact to our company as well as direct communication with us, which also includes a general address of the so-called electronic mail (e-mail address). If an affected person by e-mail or via a contact form contact with the receiving of the data controller, the personal information provided by the data subject are automatically saved. Such voluntarily from a data subject to the transmitted data controllers personal data are stored for the purpose of processing or contacting the affected person. There is no transfer of personal data to third parties.
The e data controller processes and stores personal data of the person concerned only for the period of time necessary to achieve the storage purpose or if allowed by the European directives and regulations donors or other lawmakers in laws or regulations to which the data controller subject was provided.
Eliminates the storage purpose or prescribed by the European directives and regulations donors or other responsible legislator storage period expires, the personal data are blocked or deleted routinely and as required by law.
Each person has the right granted by the European directives and regulations donor right to obtain from the data controller confirmation as to whether they are processed personal data concerning. Wants to take a victim of this right of confirmation to complete, it can be this any time of the call to an employee of the data controller.
Furthermore, the data subject shall have a right to obtain information on whether personal data have been transferred to a third country or to an international organization. If this is the case, the person concerned is, moreover, have the right to obtain information about the appropriate safeguards in connection with the submission.
Wants to take a victim of this Right to complete, it can be this any time of the call to an employee of the data controller.
Any person implicated in the processing of personal data has the right granted by the European directives and regulations donors, the immediate correction to demand of respective incorrect personal data. Furthermore, the data subject shall have the right, taking into account the purposes of the processing, the completion of incomplete personal data – to demand – also by means of a supplementary statement.
Wants to take a victim of this right of rectification, it can this any time of the call to an employee of the data controller.
The person concerned shall withdraw their consent to the processing according to Art. 6 para. 1 point a DS-GMO or Art. 9 par. 2 point a DS-GMO supported, and there is a lack of otherwise legal basis for the processing.
The person concerned shall in accordance with Art. 21 para. 1 DS-GMO object to the processing, and there are no overriding legitimate grounds for processing before, or the person acting in accordance with Art. 21 para. 2 DS-GMO opposition to the processing one.
The personal data 1 DS-GMO were offered in terms of information society services in accordance with Art. 8 para. Collected.
If any of the above reasons applies and an affected person wants the deletion of personal data stored in the AluMag Automotive GmbH cause, it can be this any time of the call to an employee of the data controller. The employees of AluMag Automotive GmbH will cause the delete request is fulfilled immediately.
The personal data of the AluMag Automotive GmbH were made public and our company as the person responsible in accordance with Art. 17 para. 1 DS-GMO obliged to deletion of personal data, the AluMag Automotive GmbH true considering the available technology and the cost of implementation appropriate measures including technical to set another for data controllers that process the published personal data on notice that the person concerned from these other has for the data controller requires the deletion of all links to these personal data or copies or replications of personal data insofar as such processing is not required. The employees of AluMag Automotive GmbH will do what is necessary in individual cases.
The accuracy of personal data is contested by the data subject, namely for a period which allows the controller to verify the accuracy of the personal data.
The processing is unlawful and the data subject rejects the deletion of personal data and calls instead for limiting the use of personal data.
The person in charge does not need the personal data for the purposes of processing longer, the person concerned, however, it needs to establishment, exercise or defense of legal claims.
The person concerned pursuant to object to processing. Art. 21 para. 1 DS-GMO inserted and it is not yet clear whether the legitimate reasons for the charge against those outweigh the individual concerned.
want unless one of the above conditions is given and a person concerned the restriction of personal data stored in the AluMag Automotive GmbH demand, it can this any time of the call to an employee of the data controller. The employee of the AluMag Automotive GmbH will cause the limitation of the processing.
Furthermore, the data subject 1 DS-GMO has in exercising their right to data portability under Art. 20 para. To obtain that personal data are transferred directly from a charge to a different charge, if this is technically feasible and if the law, This does not, the rights and freedoms of others are affected.
To exercise the right to data portability, the affected person may at any time apply to an employee’s AluMag Automotive GmbH.
Any person implicated in the processing of personal data has the right granted by the European directives and regulations donor, for reasons arising from their specific situation at any time to the processing concerning them of personal data on the basis of Art. 6 para. 1 letter e or f DS-GMO done to appeal. This also applies to a system based on these provisions profiling.
The AluMag Automotive GmbH not process the personal data in the event of contradiction, unless we can prove compelling legitimate grounds for processing, outweigh the interests, rights and freedoms of the data subject, or the processing is for the establishment, exercise or defense of legal claims.
Processes the AluMag Automotive GmbH personal information to operate direct mail, the person concerned has the right at any time to object to the processing of personal data for the purposes of such advertising. This also applies to the profiling, as far as it is in connection with such direct mail. Contradict the person opposite the AluMag Automotive GmbH the processing for direct marketing purposes, the AluMag Automotive GmbH will not process personal data for these purposes.
In addition, the person concerned has the right for reasons arising from their specific situation, against which it relevant processing of personal data for scientific in AluMag Automotive GmbH or historical research purposes or for statistical purposes in accordance with Art. 89 para. 1 DS-GMO done to appeal, unless such processing is necessary for the performance of a public interest task.
To exercise the right to object to the data subject can directly contact any employee of AluMag Automotive GmbH or another employee. The person concerned are also free, in connection with the use of information society services, regardless of Directive 2002/58 / EC to exercise their right by means of automated processes in which technical specifications defined.
Any person implicated in the processing of personal data has the right granted by the European directives and regulations donors, not one solely on automated processing – including profiling – to be subject-based decision, which unfolds over legal effect or significantly affects him in a similar way, provided that the decision (1) is not for the conclusion or performance of a contract between the data subject and the person responsible is required, or (2) due to the laws of the Union or the Member States, which is subject to charge,is admissible and this legislation contains adequate measures to safeguard the rights and freedoms and the legitimate interests of the data subject or (3) with the express consent of the data subject.
If the decision (1) for the conclusion or performance of a contract between the data subject and the person responsible is required or (2) it is done with the express consent of the individual, the AluMag Automotive GmbH take appropriate measures to ensure the rights and freedoms and the legitimate interests to safeguard the data subject, including at least the right to obtaining of a person’s intervention on the part of those responsible, to a statement of his own position and to challenge the decision belongs.
The person wants to have rights in relation to automated decisions, they can this any time of the call to an employee of the data controller.
Any person implicated in the processing of personal data has the right granted by the European policy and legislature to revoke a consent to the processing of personal data at any time.
Want the person their right to withdraw a consent claim that they can this any time of the call to an employee of the data controller.
The person responsible for processing collects and processes the personal data of applicants for the purpose of processing the application process. The processing can also be done electronically. This is especially the case if an applicant received appropriate application documents by electronic means, such as by e-mail or via an onboard web form on the website to which the data controller. Closes the data controller a contract of employment with a candidate, the transmitted data is stored for the purpose of settlement of employment in accordance with legal regulations. Is closed by the data controller no employment contract with the applicant, so the application documents six months after the announcement of the cancellation decision will be automatically deleted if a deletion of which no other legitimate interests of the data controller. Other legitimate interest in this sense is, for example, a burden of proof in a process according to the General Equal Treatment (AGG).
Art. 6 I lit. a DS-GMO serves our company as a legal basis for processing operations in which we seek consent for a particular purpose processing. If the processing of personal data to fulfill a contract, the contracting party is the person required, as is the case with processing operations that are necessary for a supply of goods or the provision of any other service or consideration, the processing is based on Art. 6 I lit. b DS GMOs. The same applies to such processing operations, the pre-contractual to carry out measures are required, such as in cases of requests for our products or services. Our company is subject to a legal obligation by which a processing of personal data is required, such as for the fulfillment of tax obligations, the processing is based on Art. 6 I lit. c DS GMOs. In rare cases, the processing of personal data may be necessary to protect the vital interests of the data subject or of another individual. This would be the case if a visitor would be hurt in our company and then his name, his age, his health insurance data or other vital information to a doctor, hospital or other third parties would have to be passed. Then, the processing on Article would. 6 I lit. d DS GMOs rest. Ultimately could processing operations on Art. 6 I lit. f DS GMOs rest. On this legal basis based processing operations which are not covered by any of the above legal bases when the processing to protect a legitimate interest of our company or a third party is required unless outweigh the interests for fundamental rights and freedoms of the data subject. Such processing operations are particularly us therefore permitted because they were specifically mentioned by the European legislator. He extent considered that a legitimate interest could be deemed to exist if the person concerned is a client of the charge (Recital 47 sentence 2 DS-GMO). when processing for maintaining a legitimate interest of our company or a third party is required unless outweigh the interests, rights and freedoms of the data subject. Such processing operations are particularly us therefore permitted because they were specifically mentioned by the European legislator. He extent considered that a legitimate interest could be deemed to exist if the person concerned is a client of the charge (Recital 47 sentence 2 DS-GMO). when processing for maintaining a legitimate interest of our company or a third party is required unless outweigh the interests, rights and freedoms of the data subject. Such processing operations are particularly us therefore permitted because they were specifically mentioned by the European legislator. He extent considered that a legitimate interest could be deemed to exist if the person concerned is a client of the charge (Recital 47 sentence 2 DS-GMO).
Based processing of personal data Article 6 I lit. f DS-GMO is our legitimate interest to carry out our activities towards the welfare of all our employees and our shareholders.
The criterion for the duration of the storage of personal data is relevant and statutory retention period. After the deadline, the relevant data is routinely deleted if they are no longer required to fulfill the contract or contract negotiations.
We will clarify the fact that the provision of personal data is required by law in some cases (eg tax laws) or also from contractual arrangements (eg information on the contractor) may result. Sometimes it may be necessary to conclude a contract that any interested person presents us with personal data that must be processed in the order by us. The person concerned, for example, committed to provide personal information when our company enters into a contract with her. A failure to provide personal data would mean that the contract with the person concerned could not be closed. Before a deployment of personal data by the person concerned, the person concerned must contact one of our employees.

References: Art. 6
 Art. 9
 Art. 21
 Art. 21
 Art. 8
 Art. 17
 Art. 21
 Art. 20
 Art. 6
 Art. 89

Art. 6
 Art. 6
 Art. 6
 Art. 6