Source: https://www.kaimann.com/privacy-policy
Timestamp: 2019-04-19 17:37:50+00:00

Document:
1.1 Welcome to our website. Thank you for your interest in our company and in our products and services. In the following we would like to inform you about how your personal data is treated when using our website. Personal data is any data with which you can be personally identified.
1.2 The responsible party in charge for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Kaimann GmbH, Hansastr. 2 - 5, 33161 Hövelhof, Germany, Tel.: +49 (0) 52 57 - 98 50 - 0, Fax: +49 (0) 52 57 - 98 50 - 590, e-mail info@kaimann.de. The responsible party in charge of processing personal data is the natural person or legal entity who alone or together with others determines the purposes and means of the processing of personal data.
1.3 For security reasons and to protect personal and confidential information (such as orders and enquiries), this website utilises SSL and TSL encrpytion. You can check for an encrypted connection by looking for the ‚https://‘ prefix and the padlock symbol in the address bar.
Data processing is carried out in accordance with Art. 6 (1) point of GDPR, on the basis of our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or used in any other way. However, we reserve the right to check the server log files, should there be are any concrete indication of illegal use.
Should personal data also be processed by individual cookies set by us, processing is carried out in accordance with Art. 6 (1) point of GDPR to safeguard our legitimate interests in the best possible functionality of the website and a customer-friendly, effective design of the page visit.
If you refuse to accept cookies, this may restrict the functionality of our website.
By subscribing to our e-mail newsletter, we will send you information about our products and specialist blogs on a regular basis. For delivery of the newsletter, we use the so-called double opt-in procedure. This means that we will only send you an e-mail newsletter if you have explicitly stated your agreement with us to do so. It works like this: We will send you an e-mail that will ask for your consent to receive our newsletter by clicking a web link. Clicking that link will actually confirm that you wish to receive newsletters in the future.
As of subscription to our e-mail newsletter, we will send you information about our products and specialist blogs on a regular basis. For delivery of the newsletter, we use the so-called double opt-in procedure. This means that we will only send you an e-mail newsletter if you have explicitly stated your agreement with us to do so. It works like this: We will send you an e-mail that will ask for your consent to receive our newsletter by clicking a web link. Clicking that link will actually confirm that you wish to receive newsletters in the future.
By following that confirmation link, you express consent to the use of your personal data in accordance with Art. 6 Para. 1 lit. A of GDPR. When you register for our newsletter, we will store your IP address transmitted by the Internet Service Provider (ISP) as well as the date and time of registration, in order to trace possible abuse of your e-mail address at a later date. You can unsubscribe from the newsletter at any time via the link provided in the newsletter or by sending a corresponding message to marketing@kaimann.de. After your cancellation, your e-mail address will immediately be deleted from our newsletter distribution list.
On the basis of our legitimate interest in personalised letters, we reserve the right to store your first and last name, your postal address and – insofar as we have received this additional information from you within the framework of the contractual relationship – your title, academic degree and your professional, industry or business name, in accordance with Art. 6 (1) point of GDPR and to use them for sending interesting offers and information on our products by post. You can object to the storage and use of your data for this purpose at any time by sending an appropriate message to the responsible party.
This website uses Youtube embedding functions for the display and playback of videos offered by "Youtube", which belongs to Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). To this end, the extended data protection mode is used to ensure, according to provider information, that user information is only stored when the playback function of the video is started. When the playback function of embedded Youtube videos is started, the provider sets "Youtube" cookies in order to collect information about user behaviour. According to indications from "Youtube", the use of these cookies is intended to record video statistics, to improve user-friendliness and to prevent improper actions. If you are logged in to Google, your information will be directly associated with your account when you click on a video. If you do not wish to be associated with your profile on YouTube, you must log out before activating the button. Google saves your data (even for users who are not logged in) as usage profiles and evaluates them. Such an evaluation takes place in particular according to Art. 6 (1) point of GDPR on the basis of the legitimate interests of Google in the insertion of personalised advertising, market research and/or demand-oriented design of its website. You have the right to object to the creation of these user profiles, whereby you must contact YouTube to exercise this right.
In the context of using YouTube, personal data may also be transferred to the servers of Google LLC. in the USA. Independent of playing the embedded videos, a connection with the Google network is established whenever this website is requested. This may trigger further data processing operations without our influence.
This website uses Google Analytics exclusively with the extension "_anonymizeIp()", which ensures an anonymisation of the IP address by shortening it and excludes a direct personal relationship. As a result of the extension, your IP address will previously be shortened by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area. The full IP address will only be transmitted to a Google server in the USA and abbreviated there in exceptional cases. In these exceptional cases, processing is carried in accordance with Art. 6 (1) point of GDPR, on the basis of our legitimate interest in the statistical analysis of user behaviour for optimisation and marketing purposes.
On our website we use Google Maps (API) of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). Google Maps is a web service for the visual display of interactive (geographical) maps and geographical information.
When you request the pages in which the map provided by Google Maps is embedded, information regarding your use of our website (e.g. your IP address) is transmitted to Google servers and stored there. In this context, data may also be transmitted to the Google LLC. servers in the USA. This is regardless of whether Google provides a user account that you are logged in with or whether no user account exists. If you are logged in to Google, your information will be directly associated with your account. If you do not wish to be associated with your profile on Google, you must log out before activating the button. Google saves your data (even for users who are not logged in) as usage profiles and evaluates them. Such an evaluation takes place according to Art. 6 (1) point of GDPR on the basis of the legitimate interests of Google in the insertion of personalised advertising, market research and/or demand-oriented design of its website. You have the right to object to the creation of these user profiles, whereby you must contact Google to exercise this right. Google LLC, domiciled in the USA, is certified for the US-European data protection agreement "Privacy Shield", which guarantees compliance with the data protection level applicable in the EU.
One of the services we offer our customers is the KaiTrace tool, available at www.kaimann.com/kaitrace/trace-it. By entering the 13-digit KaiTrace code (printed on our products), the user can perform a “trace” and immediately retrieve the service description that matches our product in the database. This is then made available to the user in PDF format for viewing or as a download. We naturally have to store and process the 13-digit KaiTrace code in order to respond to the customer’s query, i.e. to provide the service description required. We also process the code entered in order to improve the stability and efficiency of this website function. We do not forward this data. No other data is collected when you use this tool. We do not amalgamate the 13-digit KaiTrace code with other data that has to be processed in connection with other procedures described in this data protection declaration. The legal basis for processing this data is our legitimate interest in responding to your query and improving the website function, cf. Art. 6 par. 1 lit. f GDPR. Insofar as there are no statutory retention obligations that stipulate otherwise, your data is erased after we have finished processing your query (this is the case when it can be inferred from the circumstances that the matter in question has been conclusively clarified) or after we have finished evaluating the data in order to improve our website.
Right to information in accordance with Art. 15 GDPR: In particular, you have a right to information about your personal data processed by us, the processing purposes, the categories of personal data processed, the recipients or categories of recipients to whom your data has been or will be disclosed, the planned storage period or, as the case may be, the planned storage period, the criteria for determining the storage period, the existence of a right to rectification, deletion, restriction of processing, objection to processing, a complaint to a supervisory authority, the origin of your data, if these were not collected from you by us, the existence of an automated decision-making process including profiling and, if applicable, the existence of a data protection declaration, meaningful information on the logic involved and the scope and intended effects of such processing, as well as your right to be informed of the guarantees provided for in Art. 46 GDPR for the transfer of your data to third countries.
Right to rectification in accordance with Art. 16 GDPR: You have a right to immediate rectification of incorrect data concerning you and/or completion of your incomplete data stored by us.
Right of deletion in accordance with Art. 17 GDPR: You have the right to request the deletion of your personal data if the requirements of Art. 17 (1) GDPR are met. However, this right shall not apply if the processing is necessary to exercise the right to freedom of expression and information to fulfil a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims.
Right to limitation of processing according to Art. 18 GDPR: You have the right to request the restriction of the processing of your personal data, as long as the accuracy of your data is verified, if you refuse the deletion of your data due to unauthorised data processing and instead request the restriction of the processing of your data; if you need your data to assert, exercise or defend legal claims after we no longer need this data after the purpose has been achieved or; if you have lodged an objection for reasons of your particular situation, as long as it is not yet clear whether our legitimate reasons predominate.
Right to information in accordance with Art. 19 GDPR: If you have exercised your right to have the responsible party correct, delete or limit the processing, they are obliged to inform all recipients to whom the personal data concerning you has been disclosed of this correction or deletion of the data, or restriction on processing, unless this proves impossible or involves a disproportionate effort. You have the right to be informed of these recipients.
Right to data transferability according to Art. 20 GDPR: You have the right to receive the personal data you have provided us in a structured, current and machine-readable format or to request its transfer to another person responsible, insofar as this is technically feasible.
Right to revoke consent granted according to Art. 7 (3) GDPR: You have the right to revoke consent to the processing of data once granted at any time with effect for the future. In the event of revocation, we will delete the data concerned without delay, unless further processing can be based on a legal basis for processing without consent. The revocation of consent shall not affect the legality of the processing carried out on the basis of the consent until revocation.
Right of appeal under Art. 77 GDPR: If you believe that the processing of personal data concerning you infringes the GDPR, you have the right of appeal to a supervisory authority, in particular in the Member State where you reside, work or suspect infringement, without prejudice to any other administrative or judicial remedy.
If, within the framework of a consideration of interests, we process your personal data on the basis of our predominant legitimate interest, you have the right at any time to object to this processing with effect for the future, on the grounds that arise from your particular situation. If you exercise your right to object, we will stop processing the data concerned. However, we reserve the right to further processing if we can prove compelling reasons worthy of protection for processing which outweigh their interests, fundamental rights and freedoms, or if the processing serves to assert, exercise or defend legal claims. If we process your personal data for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for the purpose of such advertising. You may exercise the objection as described above. If you exercise your right to object, we will stop processing the data concerned for direct advertising purposes.
The duration of the storage of personal data is determined by the respective legal retention period (e.g. commercial and tax retention periods). After expiry of this period, the corresponding data will be routinely deleted, provided that this is no longer required for the performance or initiation of the contract and/or there is no longer any legitimate interest on our part in the further storage.

References: Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 15
 Art. 46
 Art. 16
 Art. 17
 Art. 17
 Art. 18
 Art. 19
 Art. 20
 Art. 7
 Art. 77