Source: https://www.zschimmer-schwarz.com/en/data-privacy/
Timestamp: 2019-04-24 18:49:50+00:00

Document:
Zschimmer & Schwarz is committed to the conscientious protection and security of personal data. Below, we would like to inform you about how we process personal data when you use this website. Personal data includes all information that relates to you personally, such as your name, address, e-mail addresses and user behaviour.
You can also contact us using the contact form on our website.
You can reach our data protection officer at Datenschutz@zschimmer-schwarz.com or at our postal address, with reference "The Data Protection Officer".
We process this information so that you can load our website for the purpose of viewing it and, if necessary, restoring system security and stability and for statistical purposes (see below). The legal basis for this processing is Article 6 par. 1 f) GDPR. We have a legitimate interest in ensuring that our website is displayed correctly on your screen and that we can identify and correct the causes of any errors.
This data is stored in log files for a maximum of 30 days. A longer storage takes place only as far as this is necessary for the assertion and defence of our legal claims, for example after a hacker attack.
The provision of this data is neither legally nor contractually required and is not necessary for a contract with us. However, visiting our website without our processing of this data would not be possible for technical reasons.
The legal basis is Article 6 par. 1 f) GDPR or, if you have consented, Article 6 par. 1 a) GDPR. We have an interest in making it easy for you to use our website and to optimise our website.
Transient cookies are automatically deleted when you close the browser. These include session cookies. They are deleted when you close the browser. Session cookies allow you to avoid having to re-enter anything on our site, even if you visit other websites in between. The purpose of these session cookies is therefore to facilitate the use of our website.
We also use persistent cookies to record statistics on the use of our website and optimise our services for you (see II.3). This data also enables us to support different languages or end devices. Persistent cookies are deleted after 24 months at the latest.
The data will be processed for market research and to help us design our website to meet our users’ needs. Google processes this data on our behalf, to evaluate the use of our website and to compile reports about the activities on our website.
The legal basis is Art. 6(1)(1)(f) GDPR. We have a legitimate interest in using the statistics provided by Google to perform internal market research and adjust our website to meet its visitors’ needs.
This will cause an opt-out cookie to be placed in your current browser and this cookie will apply to our website. If you delete the cookies in this browser, you must click on this link again. If you use multiple end devices or browsers, you must click on this link in each browser for each end device.
We may process data on the basis of Art. 6 par. 1 b) GDPR if this is necessary for the fulfilment of a contract between you and us or for the performance of pre-contractual measures carried out at your request. In this respect, we process your data in particular for contract management, to communicate with you, for order acceptance, for shipping, for invoicing and, if necessary, for collection, and for the enforcement and defence of legal claims.
We use your data, to the extent permitted, to send advertisements for our products and services by post (and, if you have provided us with your e-mail address, by e-mail). The legal basis for this is Art. 6(1)(1)(f) GDPR. We have a legitimate interest in sending direct marketing (for your right to object, see V.).
The provision of personal data is not required by law or by contract. However, the conclusion of a contract with us requires the processing of your name or your company name, your e-mail address and your postal address. Without this data, it would be impossible for us to send you e-mails, for example to send you contract documents, offers or invoices and, if necessary, to assert legitimate claims.
We may process this data until the final execution of the respective contract and, if applicable, beyond that within the statutory period of limitation of 3 years and/or the warranty periods for the above-mentioned purposes. If storage is required for the fulfilment of our legal obligations according to Art. 6 par. 1 c) GDPR in connection with § 257 of the German Commercial Code, or § 147 of the German Tax Code, we are entitled to storage until expiration of the respective retention periods. These terms are up to 10 years.
If you would like to use our customer portal, you must register by disclosing your e-mail address, a password of your own choosing your last name and company. We use a “double-opt-in procedure” for registration, i.e. your registration is completed only when you have confirmed your registration by clicking on the link contained in an e-mail sent to you for this purpose. When you use our customer portal, we will process the data you enter so you can log in to the portal and view product data sheets. The purpose of processing this data is also to facilitate communication with you when pre-contractual measures are being executed, provided that you are interested in our products. You can change all the information you have entered in the protected customer portal.
If you are our customer or are interested in our products, the legal basis will be Art. 6(1)(1)(b) GDPR – otherwise, it will be Art. 6(1)(1)(f) GDPR. We have a legitimate interest in providing certain information (such as product data sheets) only to registered users of our customer portal to keep that information from being uncontrollably disseminated on the internet. If the information you provide is optional, the legal basis will be your consent (At. 6(1)(1)(a) GDPR).
We will process the data you have entered in connection with the customer portal until you delete your customer portal account, but three years after your last login at the latest. If you are also our customer, II.6 will apply to the retention periods.
Provision of this data is not required and not necessary to conclude a contract. However, if you use the customer portal, you must first provide at least an e-mail address, a password, your last name and the company name. If you wish, you may also provide additional data voluntarily.
If you contact us through e-mail or a contact form, we will process the data you disclose (your e-mail address and possibly your name and telephone number) to answer your questions.
We will process your e-mail address and the message you enter into our contact form or e-mail to us on the legal basis of Art. 6(1)(1)(f) GDPR. We have a legitimate interest in processing your request. We will process other data on the legal basis of your consent (Art. 6(1)(1)(a) GDPR), provided you have consented to such processing by clicking “Send”. By entering sensitive information which contains special categories of data in the “Message” field, you also consent to the processing of this data. If you are also our customer, the legal basis will also be Art. 6(1)(1)(b) GDPR.
We will delete this data three months after we receive your inquiry at the latest, unless statutory provisions in connections with Art. 6(1)(1)(c) GDPR entitle or obligate us to store them longer. If you are also our customer, II.6 will apply to the retention periods.
Provision of this data is not required and not necessary to conclude a contract. However, use of the contact form requires that you first disclose your e-mail address since we cannot answer your request otherwise. You may also provide additional data voluntarily.
If you have subscribed to a newsletter, we will process the data you entered when you subscribed.
We process your e-mail address and postal address to send our newsletter periodically. After you subscribe to the e-mail newsletter, we will send you an e-mail with a link to verify your e-mail address. The legal basis is your consent, which you have given us by subscribing to the newsletter (Art. 6(1)(1)(a) GDPR).
If you do not wish to receive the newsletter in the future, you can withdraw your consent to receiving it, at any time and without giving reasons, by sending an e-mail to info@zschimmer-schwarz.com (for more information on your right of withdrawal, see V.). Alternatively, you can unsubscribe to the newsletter by clicking on “Unsubscribe”.
Shortly after you withdraw your consent or unsubscribe, the data you provided to receive the newsletter will be deleted. If you are also our business partner or employee, we may store this data for a longer period and for other purposes if we need them to maintain contractual or employment relationships or to fulfil statutory retention requirements.
Our newsletter is a voluntary offer. However, we need your e-mail address to send you the e-mail newsletter and your postal address to send you the postal newsletter. . No further information is required to send the newsletter. The disclosure of your name is voluntary and allows us to address you personally.
If you apply to work for us, we will process your data to decide whether to establish an employment relationship based on Art. 88 GDPR in conjunction with § 26(1)(1) BDSG (Federal Data Protection Act). We will store this data to execute the application procedure for up to six months after we receive the application and then delete it. Processing beyond this is permitted to establish and execute an employment relationship based on the aforementioned legal basis if you begin working for us after the application procedure is over. The provision of your data is neither contractually nor legally required.
Processors only process data on our instruction and not for their own purposes.
If the processor, other recipients or service providers of the latter have their registered office in the USA, your data will be transmitted there. Google transmits data to other Google companies in the US. These companies participate in the "EU-US Privacy Shield”. The European Commission has decided in an Adequacy Resolution that this establishes an adequate level of data protection.
Under the preconditions of Art. 15 GDPR, you may request information about whether and which data we process from you. You may demand correction and, if need be, completion of your data under Art. 16 GDPR. You have the right to have your data deleted under the conditions of Art. 17 GDPR, or blocked under the conditions of Art. 18 GDPR. According to Art. 20 GDPR, you have the right to receive your data transmitted to us on the basis of consent or a contract, provided that the processing is automated. If you wish, and if this is technically possible, we will transmit this data to a third party. Your rights may be restricted or excluded by law under certain conditions.
If you have consented to the data processing, you have the right to revoke your consent at any time. Revocation shall not affect the legality of the processing until the revocation. You can request revocation by writing to info@zschimmer-schwarz.com. After revocation, we will no longer process your data unless we are legally entitled or obliged to do so. You have the right to make legal data protection complaints with a data protection authority, in particular with the state commissioner for data protection and freedom of information for Rhineland-Palatinate, PO Box 30 40, 55020 Mainz, Germany.
Insofar as we process data to safeguard our interests exclusively in accordance with Art. 6 par. 1 f) GDPR, you have the right, for reasons arising from your particular situation, to object to the processing of your data. If you object, we will cease processing such data unless we can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights and freedoms or if processing serves the purpose of enforcing legal claims. Objections may, for example, be e-mailed to info@zschimmer-schwarz.com.

References: Art. 6
 Art. 6
 Art. 6
 Art. 6
 § 257
 § 147
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 88
 § 26
 Art. 15
 Art. 16
 Art. 17
 Art. 18
 Art. 20
 Art. 6