Source: https://www.alkitronic.com/fr/informationen/politique-de-protection-des-donnees/
Timestamp: 2019-04-24 00:42:37+00:00

Document:
In principle, we process personal data of our users only insofar as this is necessary to provide a functioning website and our content and services. The processing of personal data of our users takes place regularly and only with the consent of the user. An exception applies to cases in which prior consent cannot be obtained for reasons of fact and the processing of the data is permitted by law.
Insofar as we obtain the consent of the data subject for processing of personal data, Art. 6 para. 1 lit. a EU General Data Protection Regulation (GDPR) as legal basis. In the processing of personal data necessary for the performance of a contract of which the data subject is a party, Art. 6 para. 1 lit. b GDPR as legal basis. This also applies to processing operations required to carry out pre-contractual actions.
Insofar as processing of personal data is required to fulfil a legal obligation that is subject to our company, Art. 6 para. 1 lit. c GDPR serves as legal basis. In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 para. 1 lit. d GDPR serves as legal basis. If processing is necessary to safeguard the legitimate interests of our company or a third party, and if the interests, fundamental rights and freedoms of the data subject do not prevail over the first interest, Art. 6 para. 1 lit. f GDPR serves as legal basis for processing.
The personal data of the data subject will be deleted or blocked as soon as the purpose of the storage is deleted. In addition, such storage may be provided for by the European or national legislator in EU regulations, laws or other regulations to which the controller is subject. Blocking or deletion of the data also takes place when a storage period prescribed by the standards mentioned expires, unless there is a need for further storage of the data for conclusion of a contract or fulfilment of the contract.
In the case of storing the data in log files, this is the case after no more than seven days. Additional storage is possible. In this case, the IP addresses of the users are deleted or made anonymous, so that recognizing the calling client is no longer possible.
The use of the analysis cookies is for the purpose of improving the quality of our website and its contents. Through the analysis cookies we learn how the website is used and so we can constantly optimize our offer. For these purposes, our legitimate interest in the processing of personal data pursuant to Art. 6 para. 1 lit. f GDPR.
Your consent is obtained for the processing of the data in the context of the sending process and you are referred to this privacy statement. Alternatively, contact via the provided e-mail address is possible. In this case, the user's personal data transmitted by e-mail will be stored. In this context, there is no disclosure of the data to third parties.
The processing of the personal data from the interface only serves us for processing the contact. In the case of contact via e-mail, this also includes the required legitimate interest in the processing of the data.
The data will be deleted as soon as it is no longer necessary for the purpose of its collection. This is the case for the personal data from the input form of the contact form and those sent by e-mail when the respective conversation with the user has ended. The conversation is ended when it can be inferred from the circumstances that the relevant facts have been clarified and finalized. The additional personal data collected during the sending process will be deleted after a period of seven days at the latest.
The user has the possibility at any time to revoke his consent to the processing of the personal data. If the user contacts us by e-mail, he may object to the storage of his personal data at any time by sending an e-mail to us, a call or other communication by fax or letter. In such a case, the conversation cannot continue. All personal data stored in the course of contacting will be deleted in this case.
This site uses the mapping service Google Maps via an API. The service provider is Google Inc, 1600 Amphitheater Parkway Mountain View, CA 94043, USA.
The use of Google Maps is in the interest of appropriate presentation of our online offers and an easy locatability of the places we specify on the site. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR.
For more information about how to handle user data, please refer to: https://www.google.com/intl/en/policies/privacy.
In the context of this contractual relationship, we transfer personal data collected on the application, the execution and termination of this business relationship as well as data on non-contractual behaviour or fraudulent behaviour to CRIF Bürgel GmbH, Radlkoferstraße 2, 81373 Munich.
The legal bases of these transfers are Article 6 (1) (b) and Article 6 (1) (f) of the General Data Protection Regulation (GDPR). Transfers pursuant to Article 6 (1) (f) GDPR may only be made to the extent necessary to safeguard the legitimate interests of our company or third parties and not outweigh the interests or fundamental rights and freedoms of the data subject requiring the protection of personal data. The data exchange with the CRIFBÜRGEL also serves the fulfilment of legal obligations to carry out creditworthiness checks of customers (§ 505a and 506 of the Civil Code).
You have a right to rectification and / or completion related to the controller, if the personal data related to you is incorrect or incomplete. The controller must make the correction without delay.
(4) If you objected to the processing pursuant to Art. 21 (1) GDPR and it is not yet certain whether the legitimate reasons of the controller prevail over your reasons.
(2) You revoke your consent to the processing gem. Art. 6 para. 1 lit. a or Art. 9 para. 2 lit. GDPR and there is no other legal basis for processing.
(3) In accordance with Article 21 (1) of the GDPR, you object to the processing and there are no prior justifiable grounds for processing, or you submit opposition to processing in accordance with Art. 21 (2) GDPR.
If the person responsible has made public the personal data relating to you and is obliged to delete them in accordance with Art. 17 (1) GDPR, he shall take appropriate measures, including technical ones, to inform data controllers, taking into account the available technology and the implementation costs informing that you, as the data subject, have requested the deletion of all links to such personal data or of copies or replications of such personal data.
If you have the right of rectification, deletion or restriction of processing to the controller, he / she is obliged to notify all recipients to whom your personal data have been disclosed of this correction or deletion of the data or restriction of processing, unless: this proves to be impossible or involves a disproportionate effort.
You have a right related to the controller, to be informed about these recipients.
In exercising this right, you also have the right to demand that personal data relating to you be transmitted directly from one controller to another controller, as far as technically feasible. Freedoms and rights of other persons may not be affected.
You have the right at any time, for reasons arising from your particular situation, against the processing of personal data concerning you, which, pursuant to Art. 6 para. 1 lit. e or f GDPR takes the form of an objection; this also applies to profiling based on these provisions.
With regard to the cases referred to in (1) and (3), the person responsible shall take appropriate measures to uphold the rights and freedoms and their legitimate interests, including at least the right to obtain the intervention of a person by the controller, to express his / her own position and challenge the decision.
Without prejudice to any other administrative or judicial remedy, you shall have the right to complain to a supervisory authority, in particular in the Member State of its place of residence, employment or the place of the alleged infringement, if you believe that the processing of the personal data concerning you is in violation of the GDPR.
We make every effort to ensure the security of your data within the framework of applicable data protection laws and technical possibilities. Your personal data will be transmitted encrypted by us. This applies to your orders and also to the customer login. We use the SSL (Secure Socket Layer) coding system, but point out that data transmission over the Internet (for example, when communicating by e-mail) may have security vulnerabilities. A complete protection of the data from access by third parties is not possible. To safeguard your data, we maintain technical and organizational security measures that we always adapt to state-of-the-art technology. We also do not accept liability that our offer will be unavailable at specific times; Disturbances, interruptions or failures cannot be excluded. The servers we use are regularly and carefully backed up.
In essence, we only use your personal data within our company.
If and to the extent that we engage third parties in the performance of contracts (such as logistics service providers), these personal data will only be received to the extent that the transmission is required for the corresponding service. In the event that we outsource certain parts of the data processing ("order processing"), we contractually obligate processors to use personal data only in accordance with the requirements of data protection laws and to ensure the protection of the data subject's rights. Data transmission to agencies or persons outside the EU outside the cases mentioned in this declaration does not take place and is not planned.

References: Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 21
 Art. 6
 Art. 9
 Art. 21
 Art. 17
 Art. 6