Source: https://www.schroth.com/en/legal-references/data-protection.html
Timestamp: 2019-04-18 13:15:07+00:00

Document:
We are delighted that you are visiting our website www.schroth.com and are interested in our company. We attach a great deal of importance to protecting your personal data. Personal data is information about an identified or identifiable natural person’s personal or factual circumstances. This includes details such as the person’s real name, address, phone number and date of birth, as well as all other data which may refer to an identifiable person.
Because personal data is afforded special legal protection, we only collect it insofar as doing so is necessary to making our website available and providing our service. Below, we have provided an outline of what personal information we collect about you during your visit to our website and how we use it.
Our data protection practices comply with legal regulations, particularly those set down in the German Federal Data Protection Act (BDSG), the German Telemedia Act (TMG) and the EU’s General Data Protection Regulation (GDPR). We will only collect, process and store your personal data insofar as doing so is necessary to making this website and our contents and services functionally available, as well as for the purpose of processing enquiries and, if necessary, handling orders / contracts, but only if there is a legitimate interest for doing so under the terms of Art. 6, Para. 1, Clause 1, lit. f of the GDPR or other statutory permission. Your data will also be used for further purposes precisely defined in your consent, e.g. to send advertising information by newsletter, only if you have separately given your consent beforehand.
This data is stored in our system’s log files. This data is not stored together with personal data belonging to a specific user, so individual site visitors are not identified.
Art. 6, Para. 1, lit. f of the GDPR (legitimate interest). Our legitimate interest is to guarantee achievement of the purpose outlined below.
Logging is carried out to maintain our website’s compatibility for all visitors where possible and to combat misuse and eliminate faults. To this end, it is necessary to log the accessing computer’s technical data, so that we can respond to display errors, attacks on our IT systems and/or functionality errors on our website as early as possible. Additionally, we also use the data to optimise the website and to ensure the general security of our IT systems.
The above technical data is deleted as soon as it is no longer needed to guarantee the website’s compatibility for all visitors, but at the latest within three months of our website being accessed.
The data you entered in our contact forms.
We will use the data captured by means of our contact form(s) only to process the specific contact request received through the contact form(s).
The data captured is deleted immediately after your request has been processed, provided that there are no statutory retention periods.
Art. 6, Para. 1, lit. f of the GDPR. (Legitimate interest). Our legitimate interest is to maintain the full functionality of our website, to increase usability and to enable more individual customer contact. We can only identify individual site visitors using the cookie technology if said site visitors sent us corresponding personal data based on separate consent beforehand.
The cookies are set by our website to maintain the full functionality of our website and to improve usability. The cookie technology also enables us to recognise individual visitors using pseudonyms, e.g. an individual, arbitrary ID, so we can offer more individual services.
Our cookies are stored until they are deleted from your browser or, if the cookie is a session cookie, until the session is ended.
When it is collected, saved and processed, your personal data is protected by means of technical and organisational measures to ensure that it is inaccessible to third parties. Since we cannot guarantee complete data security on the transmission path to our IT systems during unencrypted communication by email, we advise sending highly confidential information using encrypted communication or by post.
We would like to expressly point out that our email system has an automated archiving process. It digitally archives all incoming and outgoing emails in an audit-proof manner.
Art. 6, Para. 1, lit. f of the GDPR (legitimate interest). Our legitimate interest is to comply with specifications set down in fiscal law and commercial law (e.g. Sections 146 and 147 of the German Tax Code).
The purpose of archiving is to comply with specifications set down in fiscal law and commercial law (e.g. Sections 146 and 147 of the German Tax Code).
Our email communication is saved until the retention requirements under fiscal and commercial law have expired. The storage period may be up to ten years.
If you have any questions about our email archiving system, please contact our data protection officer. We would also like to point out that we only consider application documents in PDF format. Zipped (WinZip, WinRAR, 7Zip, etc.) files are filtered out by our security systems and are not delivered. We do not consider applications made in the Word file format or other file formats and will delete the same without reading them. Please note that it may be possible for third parties to open application documents sent in unencrypted format by email before they reach our IT systems. We assume that we may also answer unencrypted application emails in unencrypted format. If you would not like us to do so, please inform us to this effect in your application email.
You are entitled to have us provide you with the personal data concerning you which you sent to us in a structured, common and machine-readable format. You can also request that we send this data to a third party without delay, on your first instruction, provided that processing is based on consent according to Art. 6, Para. 1, lit. a of the GDPR or Art. 9, Para. 2, lit. a of the GDPR or on a contract according to Art. 6, Para. 1, lit. b of the GDPR, and our processing forms part of an automated data processing operation.
In exercising this right to data portability, you further have the right to have the personal data concerning you transferred directly from one controller to another, where technically feasible. The rights and freedoms of others must not be adversely affected by the exercising of this right.
The right to data portability does not apply to the processing of personal data which is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
If you suspect that your data is being processed unlawfully on our site, you can naturally obtain judicial clarification of the issue at any time. Regardless of this, you have the option of contacting a supervisory authority. You have a right to lodge a complaint in the EU member state of your place of residence, your workplace and/or the place of the suspected violation, i.e. you can choose the supervisory authority you wish to contact from the aforementioned locations. The supervisory authority with whom the complaint was lodged then informs you of the status and results of your petition, including the possibility of a judicial remedy according to Art. 78 of the GDPR.

References: Art. 6

Art. 6

Art. 6

Art. 6
 Art. 6
 Art. 9
 Art. 6
 Art. 78