Source: https://www.zentrag.de/en/data-security/
Timestamp: 2019-04-22 16:41:25+00:00

Document:
In all respects of data processing (e.g. collection, processing, transmission) we act in accordance with the respective legal regulations. The following explanation gives you an overview particularly with regard to the kind of data collected and in which way they are used and transmitted, which security measures are taken and which rights are available to you as the data subject.
We process personal data of our users in principal only when this is necessary to ensure functioning of our website and its contents and our services. Personal data of our users are only processed on the basis of the consent of the user with exceptions in case that it is not possible to obtain the prior consent for factual reasons and the processing of the data is lawful by legal rules.
The legitimate basis for our processing of personal data with the consent of the data subject is Art. 6 (1) lit. a EU-General Data Protection Regulation (GDPR). The legitimate basis for processing of personal data necessary for the performance of a contract to which the data subject is party is Art. 6 (1) lit. b GDPR. This is also true for processing in order to take steps at the request of the data subject prior to entering into a contract. If personal data processing is necessary for compliance with a legal obligation to which our company is subject the legitimate basis is Art. 6 (1) lit. c GDPR e. If personal data processing is necessary for the purposes of the legitimate interests pursued by our company or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject the legitimate basis is Art. 6 (1) lit. f GDPR.
The personal data of the data subject concerned are erased or made unavailable as soon as the purpose for the storage ceases to exist. Personal data may be stored for longer periods insofar as this is required by the European or national legislator in federal regulations, laws or other legal acts to which the controller is subject. The data are also erased or made unavailable if a storage period required by the standards referred to expires unless a requirement for further storing is necessary to enter into a contract or to fulfil a contract.
Every time a user visits our website our system will automatically collect data and information from the user’s computer.
The data are also stored in the log files of our system. This does not concern the IP-address of the user or other data which might identify the user. This kind of data are not stored together with personal data of the user.
The legitimate basis for the temporary data and log files storage is Art. 6 (1) lit. f GDPR.
The temporary storage of the IP-address by the system is necessary to deliver the webpage to the computer of the user. Therefor the IP-address of the user must be stored for the duration of the session.
The storage in log files is done in order to ensure the functioning of the web site. The data are also used to optimize the web site and to ensure the security of our IT systems. No data analysis for marketing purposes takes place in this context.
These purposes constitute our legitimate interest in data processing as per Art. 6 (1) lit. f GDPR.
The data are erased as soon as they are not necessary any more for the purpose of their collection. For data recording in order to deliver the web site this is the case when the respective session is finished.
For data recording in log files this is the case after seven days at the latest. Further storage is possible. In this case the IP-addresses of the users are erased or alienated so that the user can no more be identified.
The data recording in order to deliver the web site and the storage of the data in log files is compelling for the functioning of the web site. Thus, there is no possibility to object for the user.
When using cookies data (e.g.log-in information, language choice, etc.) are stored and transmitted.
The data thus collected are pseudonymized by technical means. The user can therefore not be identified any more. The data are not stored together with other personal data of the data subject.
When accessing our web site, the users are informed by an info banner on utilisation of cookies for analysing purposes and reference is made to this data protection policy. We also mention in this context that the storage of cookies can be blocked in the browser settings.
The Legitimate basis for personal data processing when using Cookies is Art. 6 (1) lit. f GDPR.
The Legitimate basis for personal data processing when using cookies for analysing purposes with the consent of the data subject is Art. 6 (1) lit. a GDPR.
The purpose of the utilisation of technically necessary cookies is to make the navigation on the web site easier for the user (e.g. remembering key words). Some features of our web site cannot be used without enabling cookies. For these it is necessary that the accessing browser can be identified even after changing to another web page.
The user data collected by technically necessary cookies are not used to build user profiles.
The purpose of using analyse cookies is to upgrade the quality of our web site and its contents. Analyse cookies inform us on how the web site is used and this enables us to continually ameliorate our offer.
These purposes constitute our legitimate interest in the personal data processing as per Art. 6 (1) lit. f GDPR.
Cookies are stored on the computer of the user and transmitted to our web site. You as user have the full control over utilising cookies. You can change the settings in your internet browser and thus deactivate or limit the transmission of cookies. Already stored cookies can be deleted by you at any time. This can also be done by automated means. If you choose to decline cookies, you may not be able to fully experience the features of our site.
The transmission of flash-cookies cannot be deactivated by a change in the browser settings but by a change in the settings of the flash player.
On our web site you have the possibility to subscribe to a free newsletter. During the subscription the address that you enter into the template will be transmitted to us.
During the subscription process we ask for your consent for the data processing and reference is made to this data protection policy.
In order to send you our newsletter your e-mail address is processed by the service MailChimp of the provider Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA. You will find further information under chapter XI. 5. of this data protection policy.
The legitimate basis for processing of data after the data subject subscribed to the newsletter with the consent of the data subject is Art. 6 (1) lit. a GDPR.
The purpose of collecting the user’s e-mail address is to send the newsletter.
The data are erased as soon as they are not necessary any more for the purpose of their collection. The user’s e-mail address is stored as long as the newsletter subscription is active.
The newsletter subscription can be cancelled at any time by the user. the user can do this by using for example the “unsubscribe” link in each newsletter or he can send an e-mail to website@zentrag.de.
The user has the possibility on our web site to register for an account by indicating personal data. The data are entered into a template and are transmitted to us and stored. They are not transmitted to third parties.
You also have to choose a password; together with your e-mail address this will enable you to login easily without re-entering all the data.
The legitimate basis for processing of data with the consent of the data subject is Art. 6 (1) lit. a GDPR.
A user registration on our web site is necessary for accessing certain contents and services meant to be only available to members of the Zentralgenossenschaft des europäischen Fleischergewerbes eG.
The data are erased as soon as they are not necessary any more for the purpose of their collection. This is the case for the data collected during the registration process when the registration is cancelled or modified on our web page.
As a user you have the possibility to cancel your registration at any time. You can ask at any time the collected data on you to be modified.
You can contact us via the e-mail addresses at your disposal. In this case the personal data of the user transmitted with the e-mail are stored. In this context the data are not transmitted to third parties. The data are used exclusively for the processing of the conversation.
The legitimate basis for data processing collected when sending an e-mail is Art. 6 (1) lit. f GDPR.
The processing of the personal data from the template is only used for the processing of the contact. In case of a contact by e-mail this constitutes our legitimate interest in the personal data processing.
The data are erased as soon as they are not necessary any more for the purpose of their collection. For the personal data received by e-mail this is the case when the conversation with the user is finished. The conversation is considered finished wen the circumstances indicate that the matter at hand is conclusively resolved.
The user has the possibility at all times to withdraw his consent to the processing of personal data. When a user contacts us by e-mail he can object to the storage at any time. In such a case the conversation cannot be continued. For the withdrawal of consent the user can for example send an e-mail to website@zentrag.de. All personal data stored during the contact are in this case erased.
During the catalogue ordering process, we ask for your consent for the data processing and reference is made to this data protection policy.
The data are used exclusively for the processing of the catalogue order.
The legitimate basis for processing of personal data with the consent of the data subject is Art. 6 (1) lit. a GDPR.
The processing of the personal data from the template is only used for the processing of the catalogue order.
The data are erased as soon as they are not necessary any more for the purpose of their collection. For the personal data from the template of the order form this is the case when the catalogue has been dispatched.
The user has the possibility at all times to withdraw his consent to the processing of the personal data with future effect.
During our events we regularly make films and take pictures. It is possible that you might be recognisable and identifiable on that footage as a participant in our events.
We use these photos and films in press releases, invitations, newspapers, trade journals, brochures, newsletters, social media channels and on our web sites for company and product presentation purposes.
The legitimate basis for the data processing is Art. 6 (1) lit. f GDPR. Our legitimate interest as organiser resides in the documentation of the held events and to present them to third parties in the interest of our company and of our products.
The data are erased as soon as they are not necessary any more for the purpose of their collection.
Forwarding or any other transmission of your personal data to third parties occurs only when the transmission is necessary for compliance with our cooperative obligations or if you have expressly given your consent. The service providers contracted for the above-mentioned purposes are given only the information required to fulfil their specific task. No other utilisation of the information is permitted.
We point out that, we are, by order of the competent authority, entitled to furnish particulars about data, provided that this is required to carry out prosecution proceedings, to enable the police forces of the German federal states to prevent crimes, to fulfil the statutory tasks of the constitution protection authorities of the German federal government, the German federal states, the Federal Intelligence Services or Military Intelligence, or to enforce intellectual property rights. Data are only transmitted within the framework of mandatory national legislation.
This web site uses Google Analytics, a web analytics service by Google LLC, Amphitheatre Parkway, Mountain View, CA 94043, USA. Google Analytics uses so called „ cookies “, text files that are stored on your computer and which permit an analysis of your use of our web site. The information generated by the cookie about your use of our site (including your IP address) will be transmitted to and stored by Google on their servers in the USA.
The European commission and the US government have signed the „Privacy Shield “agreement on data protection. The European commission has consequently established that the data privacy protection within the framework of Privacy Shield is adequate in the United States. Google LLC is certified under the Privacy shield and commits to complying with the EU data protection requirements.
This site uses so called social plugins permitting direct interaction with the well-known social media platform Facebook.
The Facebook plug-ins, especially the „recommend “- button is operated by Facebook Inc., 1601 WILLOW ROAD, MENLO PARK, CA 94025, US („Facebook “). The plug-ins are identified by one of the Facebook logos. The list and the look of the Facebook social plugins can be viewed here: https://developers.facebook.com/docs/plugins.
If you call up one of our internet website pages which have a plugin of this kind, your browser sets up a direct link to the Facebook servers. The content of the plugin is passed by Facebook direct to your browser and integrated by it into the website.
Through integration of the plugin, Facebook obtains the information that you have called up the relevant page on our internet site, even if you do not have a Facebook-account or you are not logged in at the moment. The information (including your IP address) will be transmitted to and stored by Facebook on servers in the United States.
If you are logged on to Facebook, Facebook can allocate the visit to your Facebook account. If you interact with the plugin, by using the “recommend-Button”, for example, or by posting a commentary, the information will be given direct to Facebook by your browser and stored there. The information will be published on Facebook and displayed to your Facebook-friends.
Facebook may use this information for purposes of advertising, market research and personalized design of Facebook pages. For this purpose, Facebook creates profiles regarding usage, interests and relationships, e.g. to evaluate your use of our web site with regard to the advertisements displayed to you on Facebook, to inform other Facebook users about your activities on our web site and to provide further related services with the use of Facebook.
The European commission and the US government have signed the „Privacy Shield “agreement on data protection. The European commission has consequently established that the data privacy protection within the framework of Privacy Shield is adequate in the United States. Facebook Inc. is certified under the Privacy shield and commits to complying with the EU data protection requirements.
If you do not want Facebook to allocate the collected data via our web site to your Facebook account, you must log out of Facebook before you visit our web site.
This website uses Google Maps, a map service of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. If you use Google Maps (e.g. address entry, route planning or location display) Google Maps collects and processes the data entered and may use various sources in order to pinpoint your current position.
For the distribution of our newsletters your e-mail address is processed through the service MailChimp of the provider Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA.
The e-mail addresses of the recipients of the newsletter are stored on the servers of MailChimp in the USA. MailChimp uses the e-mail addresses for sending and analysing the newsletter on our behalf. MailChimp uses the e-mail addresses to optimise or ameliorate its own services. The data will not be used otherwise or transmitted to third parties by MailChimp.
The European commission and the US government have signed the „Privacy Shield “agreement on data protection. The European commission has consequently established that the data privacy protection within the framework of Privacy Shield is adequate in the United States. Rocket Science Group, LLC is certified under the Privacy shield and commits to complying with the EU data protection requirements.
We have also concluded an order data processing contract with Rocket Science Group, LLC in which Rocket Science Group, LLC makes a commitment in particular to protect the data of our users and to refrain from passing it on or making it accessible to third parties.
The providers of the aforementioned networks/online platforms collect and process user data for their own purposes (market research, publicity, analysis tools for commercial customers, etc.). We do not have any knowledge or influence on the kind or scope of this data processing.
In the course of this data processing cookies are regularly used (see explanations in our data protection chart) and usage profiles are created.
The legitimate basis for processing of the data is Art. 6 (1) lit. f GDPR. We have a legitimate interest to use the aforementioned networks/ online platforms for presentation and communication purposes.
We have taken numerous security measures to protect personal information adequately and on an appropriate scale.
Our data bases are secured by physical and technical measures and an access protection which limit the access to the information on specially authorized persons in compliance with this data privacy statement. Our information system is secured by a software firewall to prevent the access by other networks which are connected to the internet. Only personnel in need of this information to proceed a special task are granted access to individual-related data. Our personnel are trained in matters of security and data protection practice.
Personal data collected via our website are transmitted in encrypted form using the industry standard Secure Socket Layer (“SSL”) technology. Sensitive data, such as credit card information or bank account information, are even further encrypted.
For the registration of your client account or newsletter, we use the so-called double-opt-in-technique. After the registration we will send you an e-mail to confirm your contact details. The registration becomes effective only when you confirm the registration via the respective link in the e-mail.
Generated passwords are managed encrypted and not stored as „clear text“ in the system.
Never disclose your password for accessing our website to third parties and it is recommended you change your password regularly. Properly log out and close your browser whenever you leave our website in order to avoid unauthorized parties obtaining access to your user account.
Complete data security cannot be guaranteed in e-mail communication.
You have the right to be informed whether your personal data has been transferred to a third country or to an international organisation. In this context you have the right to be informed of the appropriate safeguards pursuant to Article 46 GDPR relating to the transfer.
You have the right to obtain from the controller rectification if the data is inaccurate and/or to have incomplete personal data completed. The controller must proceed without undue delay.
(4) you have objected to processing pursuant to Article 21(1) pending the verification whether the legitimate grounds of the controller override those of the data subject.
If you obtained restriction of processing you shall be informed by the controller before the restriction of processing is lifted.
(2) you withdraw consent on which the processing is based according to point (a) of Article 6(1), or point (a) of Article 9(2) GDPR, and where there is no other legal ground for the processing.
(3) you object to the processing pursuant to Article 21(1) and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Article 21(2).
Where the controller has made your personal data public and is obliged pursuant to Article 17 paragraph 1 GDPR to erase the personal data, the controller, taking account of available technology and the cost of implementation, shall take reasonable steps, including technical measures, to inform controllers which are processing the personal data that the data subject has requested the erasure by such controllers of any links to, or copy or replication of, those personal data.
If you have enforced the right to rectification, erasure or restriction of processing vis-à-vis the controller, he shall communicate any rectification or erasure of personal data or restriction of processing carried out to each recipient to whom the personal data have been disclosed, unless this proves impossible or involves disproportionate effort.
In exercising your right to data portability, you have the right to have the personal data transmitted directly from one controller to another, where technically feasible. This shall not adversely affect the rights and freedoms of others.
These decisions shall not be based on special categories of personal data referred to in Article 9(1), unless point (a) or (g) of Article 9(2) applies and suitable measures to safeguard your rights and freedoms and legitimate interests are in place.
Without prejudice to any other administrative or judicial remedy you shall have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of your personal data infringes this GDPR Regulation.

References: Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6