Source: http://strube-international.net/?n=201
Timestamp: 2019-04-25 08:07:46+00:00

Document:
Usage data is recorded on this website on behalf of Strube D&S GmbH. Click paths for non personally identifiable users of the Strube D&S GmbH website are collected for marketing and optimization purposes. Collected data is used only by Strube D&S GmbH and is not transmitted to third parties. Data is collected in accordance with current valid data privacy guidelines.
This data is used to create usage profiles to analyze the quality of this website and control marketing measures. The tracking program does not save cookies nor read cookies saved locally on the user's device. Collected data is not used to personally identify users of this website. On one hand, this is not possible, and on the other hand it is not the purpose of tracking.
The content of these pages was prepared with the greatest possible care. However, Strube D&S GmbH cannot provide any guarantee that the information provided is precise or free from errors.
Strube D&S GmbH therefore excludes all liability for damages resulting directly or indirectly from the use of this website, insofar as Strube D&S GmbH did not verifiably engage in any intentional or grossly negligent behavior in a culpable manner.
All information has been provided to the best of our knowledge and in consideration of testing results or observations. We cannot accept any guarantee or liability for the correctness of this information in an individual case, because the growth conditions and interactions with the variety are subject to significant fluctuations and can cause the variety to behave differently.
In general, we process the personal data of our users only if necessary to provide a functional website and to provide our content and services. We typically only process our users’ personal data after we have received consent to do so from the user. In some exceptional cases, we may not be able to obtain prior consent due to the circumstances of the situation, but may process your data if permitted by law.
If we obtain consent from a data subject to process personal data, Art. 6 para. 1 lit. a. of the EU General Data Protection Regulation (GDPR) serves as the legal basis for doing so.
When processing personal data necessary to fulfill an agreement to which the data subject is a contractual party, Art. 6 para. 1 lit. b GDPR serves as the legal basis for processing. This also applies to processing procedures necessary to carry out pre-contractual measures.
If personal data must be processed to fulfill a legal obligation of our company, Art. 6 para. 1 lit. c GDPR serves as the legal basis.
If the vital interests of the data subject or another natural person make it necessary for us to process personal data, Art. 6 para. 1 lit. d GDPR serves as the legal basis.
If data processing is required to safeguard the legitimate interests of our company or a third party, and if the interests, basic rights, and basic freedoms of the data subject do not outweigh the above interest, Art. 6 para. 1 lit. f GDPR serves as the legal basis for processing.
Personal data of data subjects is deleted or blocked once the purpose for which it was saved no longer applies. In addition, data may only be saved if specified under European or national legislation in EU ordinances, laws, or other regulations to which the data controller is subject. Data will be blocked or deleted when the storage term specified by law expires unless it is necessary to continue saving the data to conclude an agreement or fulfill a contract.
The log files contain IP addresses or other data that make it possible to associate such information with a user. This could be the case, for instance, if the link to the website from which the user accessed the page, or the link to the website to which the user switches contains personal data.
Data is also saved in our system's log files. This data is never saved alongside other personal data belonging to the user.
Art. 6 para. 1 lit. f) GDPR forms the legal basis for temporary storage of data and log files.
The system must temporarily store the user’s IP address to allow it to deliver the website to the user’s computer. It must save the user’s IP address for the duration of the session. Data is saved in log files to ensure the website functionality. In addition, we use the data to optimize the website and ensure the security of our information technology systems. We do not evaluate the data in this context for marketing purposes.
Data is deleted once it is no longer necessary to achieve the purpose for which it was collected. If data is collected to provide the website, it will no longer be necessary once the specific session is ended. If data is saved in log files, it is deleted after seven days at the latest. We may save data for a longer period. In this case, the user’s IP address will be anonymized so it is no longer possible to associate it with the accessing client.
Art. 6 para. 1 lit. f GDPR forms the legal basis for processing personal data using cookies.
User data collected via technically required cookies is not used to create user profiles.
We have a legitimate interest in data processing personal data in accordance with Art. 6 para. 1 lit. f GDPR for these purposes.
Our website uses services by etracker GmbH from Hamburg, Germany (https://www.etracker.com) to analyze usage data. Cookies are used during this process that facilitates a statistical analysis of the use of this website by its visitors and the display of usage-related content or advertisements. Cookies are small text files saved by the user's web browser on their device. Etracker cookies contain no information that could allow us to identify the user.
Data is processed on the legal basis of Art. 6 para. 1 lit f of the General Data Protection Regulation (GDPR). Our legitimate interest lies in optimizing our online services and web presence. Since protecting the privacy of our users is highly important to us, etracker anonymizes IP addresses as early as possible and converts login or device identification into a unique key that cannot be associated with a specific person. Etracker does not use data in any other manner, nor does it combine it with other data or transmit it to third parties.
You will be referred to this Data Privacy Declaration during the transmission process regarding data processing. Users may also contact us through the e-mail addressed provided. If they do so, any personal data transmitted in the e-mail will be saved.
You can also register for a newsletter on the Strube website. If you have consented to receive the newsletter, we will use your e-mail address to send you current offers and news on the content you have subscribed to via e-mail.
After successfully registering for the newsletter, you will automatically receive an e-mail requesting that you confirm your e-mail address. After you click the confirmation link in the e-mail to confirm your e-mail address, you will receive our electronic newsletter regularly.
We analyze parameters associated with you through a usage profile in aggregated form and in conjunction with the recipient name, including the following parameters associated with you due to your access of the newsletter and clicking the link contained in the newsletter. Our objective is to better tailor the newsletter to your individual preferences and interests: opening rate for the newsletter, click rate for individual linked posts, list of pages visited in the online shop.
You can revoke your consent to receive the newsletter at any time with future effect at datenschutz@strube.net. In addition, you can unsubscribe from the newsletter at any time by clicking the link provided for this purpose in the newsletter. Your revocation of consent does not affect the legality of processing completed up to that point based on your consent.
The legal basis for processing personal data is Art. 6 para. 1 lit. a GDPR, if we have the user’s consent.
We only process personal data from the input screen to contact the user. If a user contacts us via e-mail, this also serves as part of our legitimate interest in processing the data.
Other personal data processed during the transmission process is used to prevent misuse of the contact form and ensure the safety of our information technology systems.
Data is deleted once it is no longer necessary to achieve the purpose for which it was collected. This is the case for the personal data from the contact form input screen and personal data transmitted via e-mail once our conversation with the user is over. The conversation is over when circumstances indicate that the matter in question has been fully clarified.
Additional personal data collected during the transmission process is deleted at the latest after seven days.
Users can revoke their consent to process personal data at any time. If the user contacts us via e-mail, they may object to saving of their personal data at any time. In such cases, we will not be able to continue our conversation with them.
All personal data saved during the course of contacting the user will then be deleted.
We use the popular SSL process (secure socket layer) in conjunction with the highest encryption level supported by your browser during your website visit. Typically, this is 256 bit encryption. If your browser does not support 256 bit encryption, we instead use 128 bit v3 technology. You can tell whether individual pages of our website are being transmitted in an encrypted format because a key or lock symbol will be displayed in the bottom status bar of your browser.
We also take suitable technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction, or unauthorized access by third parties. Our security measures are continuously revised in response to technological development.
You can request a confirmation from the data controller of whether we process your personal data.
(8) the use of automated decision-making, including profiling, in accordance with Art. 22 para. 1 and 4 GDPR and – at least in such cases – clear information on the logic involved and the scope and intended effects of such processing for the data subject.
You have the right to request information on whether your personal data is transmitted to a third party country or an international organization. You can also request in this respect to be informed of relevant guarantees according to Art. 46 GDPR given in conjunction with the transmission.
You have the right to request that the data controller correct and/or complete your personal data, if personal data processed on you is incorrect or incomplete. The data controller must correct such data promptly.
(4) if you have objected to processing according to Art. 21 para. 1 GDPR and it is not yet clear whether the data controller's justifiable grounds for processing outweigh your own justifications.
If processing of your personal data was restricted, this data may only be processed – apart from saving it – with your consent or to assert, exercise, or defend against legal claims, or to protect the rights of another legal or natural person, in order to safeguard a significant public interest of the Union or its member states.
If the restriction of processing was restricted under the above conditions, you will be informed by the data controller before this restriction is lifted.
(1) Your personal datais no longer required for the purposes for which it was collected or processed in some other manner.
(2) You revoke your consent on which processing was based according to Art. 6 para. 1 lit. a or Art. 9 para. 2 lit. a GDPR, and there is no other legal basis for processing.
(3) You submit an objection to processing according to Art. 21 para. 1 GDPR and there are no justifiable grounds for processing that take priority over your objection, or you submit an objection to processing according to Art. 21 para. 2 GDPR.
(4) Your personal data was processed unlawfully.
(5) Your personal data must be deleted to fulfill a legal obligation under EU law or the law of its member states, to which the data controller is subject.
(6) Your personal data was collected in relation to information society services offered in accordance with Art. 8 para. 1 GDPR.
If the data controller has disclosed your personal data and if it is obligated to delete such personal data according to Art. 17 para. 1 GDPR, it shall take appropriate technical measures in consideration of available technology and implementation costs to inform the data controller that you as the data subject have requested that all links to said personal data or copies or replications of the personal data be deleted.
If and insofar as we engage third parties in order to carry out agreements (such as logistics service providers), they receive personal data only if transmission is necessary for the relevant service.
If we outsource certain parts of data processing (“contract data processing”), we contractually obligate contract processors to only use personal data in accordance with data privacy law requirements and to ensure protection for the rights of data subjects.
We do not transmit data to entities or persons outside of the EU except for in cases under clause 4 of this declaration, nor do we plan to do so.
(5) to assert, exercise, or defend against legal claims.
If you have asserted your rights to correction, deletion, or restriction of processing against the data controller, the data controller is obligated to inform all recipients to whom your personal data was disclosed of this correction or deletion of data or restriction of processing, unless this proves to be impossible or unreasonably difficult.
You have the right to be informed by the data controller who these recipients were.
(2) processing is completed using automated processes.
In exercising this right, you furthermore have the right to ensure that your personal data is transmitted directly from one data controller to another, if this is technically feasible. The freedom and rights of other individuals may not be affected.
The right to data portability does not apply to processing of personal data necessary to carry out tasks that are in the public interest or to carry out public authority assigned to the data controller.
You have the right to object to the processing of your personal data at any time for reasons related to your specific situation, if such processing is carried out under Art. 6 para. 1 lit. e or f GDPR; this also applies to profiling based on these provisions.
The data controller will no longer process your personal data unless they can show mandatory and protected grounds for processing that outweigh your interests, rights, and freedoms, or if processing serves to assert, exercise, or defend against legal claims.
If your personal data is processed for the purpose of direct advertising, you have the right to object against processing of your personal data for the purpose of such advertisements; this also applies to profiling, if it is connected to such direct advertising.
If you object to processing for the purpose of direct advertising, your personal data will no longer be processed for this purpose.
You may exercise your right to object through an automated process in which technical specifications are used in conjunction with the use of information society services – regardless of directive 2002/58/EG.
(3) is completed with your express consent.
However, these decisions may not be based on special categories of personal data according to Art. 9 para. 1 GDPR if Art. 9 para. 2 lit. a or g applies and if appropriate measures have been taken to safeguard your rights, freedoms, and legitimate interests.
With respect to the cases described in (1) and (3), the data controller must take appropriate measures to safeguard your rights, freedom, and legitimate interests, including at least the right to human intervention by the data controller, to present one's own opinion, and to challenge a decision.
Apart from any other legal remedies under administrative or other law, you have the right to submit a complaint with a supervisory authority, in particular in the member state in which you live, work, or where the alleged violation took place, if you believe that processing of your personal data violates the GDPR.
The supervisory authority to which the complaint was submitted must inform the individual submitting the complaint of the status and results of said complaint, including the option of judicial remedy under Art. 78 GDPR.

References: Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6

Art. 6

Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 22
 Art. 46
 Art. 21
 Art. 6
 Art. 9
 Art. 21
 Art. 21
 Art. 8
 Art. 17
 Art. 6
 Art. 9
 Art. 9
 Art. 78