Source: https://ziemer-chromatographie.de/index.html?page=DATENSCHUTZ&KAP_X=0&KAP_XX=0&productid=&listentyp=&SEARCHDEF=&login=&StartEditLogin=1&out=&LANG=eng
Timestamp: 2019-04-20 01:26:19+00:00

Document:
We only collect and use personal data of our users to the extent required for providing a functional website and our contents and services. Personal data of our users is only collected or used with the user's consent. Exceptions only apply in cases where obtaining consent is not possible for factual reasons and data processing is permitted by law.
If we obtain the data subject's consent for the processing of personal data, Art. 6(1) Letter a of the EU General Data Protection Regulation (GDPR) will serve as the legal basis. When processing personal data is required for performance of a contract to which the data subject is a party, Art. 6(1) Letter b of the General Data Protection Regulation will serve as the legal basis. This also applies to processing required for the performance of pre-contractual measures. If processing of personal data is required for the fulfillment of a legal obligation to which our company is subject, Art. 6(1) Letter c of the General Data Protection Regulation will serve as the legal basis. If vital interests of the data subject or of another natural person necessitate processing of personal data, Art. 6(1) Letter d of the General Data Protection Regulation will serve as the legal basis. If processing is required for safeguarding legitimate interests of our company or of a third party and if the interests, basic rights and basic freedoms of the data subject do not override our legitimate interests, Art. 6(1) Letter f of the General Data Protection Regulation will serve as the legal basis for the processing.
Personal data of the data subject will be deleted or blocked when the purpose for its storage ceases to apply. Personal data may also be saved if required by EU or national legislatures in EU-law ordinances, laws or other regulations to which the controller is subject. The data will also be blocked or deleted if a storage period specified by the stated regulations expires, unless the data must be saved for contract conclusion or contract performance.
Information on the browser type and version used.
Websites from which the user's system reached our website.
This data is also saved in our system's log files. This data is not saved with other personal data of the user.
The legal basis for the temporary storage of this data is Art. 6(1) Letter f of the General Data Protection Regulation.
Temporary storage of IP addresses by the system is required for displaying the website on the user's computer. For this, the user's IP address must be saved for the duration of the session. Log files are used for saving to ensure the functionality of the website. In addition, this data is used to optimize our website and to ensure the security of our IT systems. This data is not analyzed for marketing purposes.
Our legitimate interest in data processing Art. 6(1) Letter f of the General Data Protection Regulation is also based on these purposes.
The data will be deleted when it is no longer required for the achievement of the purposes for which it was collected. If data is collected for providing our website, this applies when the respective session ends. If data is saved in log files, this will apply after seven days at the latest. Further storage is possible. In such cases, the user's IP address will be deleted or distorted to prevent it from being assigned to the accessing client.
The collection of data for providing our website and saving the data in log files is necessary for operating our website. Therefore, users have no objection rights.
Session IDs, shopping cart items, log-in information, language settings and search terms are saved by the server.
The legal basis for processing personal data when using cookies is Art. 6(1) Letter f of the General Data Protection Regulation.
User data collected by technically required cookies is not used to create user profiles. Our legitimate interests in the processing of personal data under Art. 6(1) Letter f of the General Data Protection Regulation is also based on these purposes.
Time and date of subscription.
The legal basis for the processing of user data after subscribing to our newsletter is the user's consent under Art. 6(1) Letter a of the General Data Protection Regulation.
The user's email address is collected to send our newsletter. Other personal data is collected during the subscription process to prevent misuse of our services or of the provided email address.
The data will be deleted when it is no longer required for the achievement of the purposes for which it was collected. The user's email address will be saved for as long as the user's newsletter subscription is active. The other personal data collected as part of the subscription process will usually be deleted after seven days.
The user may unsubscribe from the newsletter at any time. According links are provided in every newsletter. This also enables consent to the saving of personal data collected during the subscription process to be withdrawn.
Time and date of registration.
The user's consent to the processing of this data will be obtained during the registration process.
If we obtain the data subject's consent for the processing of personal data, Art. 6(1) Letter a of the EU General Data Protection Regulation (GDPR) will serve as the legal basis. If registration data is required for performance of a contract to which the data subject is a party, Art. 6(1) Letter b of the General Data Protection Regulation will serve as an additional legal basis.
User registration is required for the performance of a contract or pre-contractual measures to execute the order process or offer, handle inquiries correctly and to simplify repeat orders.
The data will be deleted when it is no longer required for the achievement of the purposes for which it was collected. This is the case for data collected during the registration process for the performance of a contract or pre-contractual measures if the data is no longer required for the performance of the contract. Even after contract conclusion, the contract partner's personal data may have to be saved to fulfill contractual or legal obligations. Continuing obligations require personal data to be saved for the duration of the contract. In addition, guarantee periods and the storage of data for tax purposes must be observed. Which storage durations apply cannot be generally stated and must be determined separately for every contract and contract party.
Required fields: Name, Email Address.
Optional fields: Company, Department, Customer Number, Street, ZIP City, Telephone, Fax and any other stated fields.
Required fields: First and Last Name, Street, ZIP City, Email, Payment Information and Credit Card Details.
Optional fields: Company/Institute, Department, Customer Number.
If the user provides his consent, the legal basis for the processing of his data is Art. 6(1) Letter a of the General Data Protection Regulation. The legal basis for processing data transmitted as part of an email is Art. 6(1) Letter f of the General Data Protection Regulation. If we are contacted for the purpose of contract conclusion, the legal basis for processing will be Art. 6(1) Letter b of the General Data Protection Regulation.
We only process personal data obtained from input screens to handle the respective matter. If we are contacted by email, this will also represent our legitimate interest in the processing of the respective data. Other data processed during the sending process is used to prevent misuse of the contact forms and to ensure the security of our IT systems.
The data will be deleted when it is no longer required for the achievement of the purposes for which it was collected. This is the case for personal data transmitted through the input screens or by email when the respective conversation with the user ends. A conversation ends when the circumstances make clear that the respective matter has been conclusively settled. Additional personal data collected through the sending process will be deleted after seven days at the latest.
The purposes for which personal data is processed.
The recipients or categories of recipients to whom personal data concerning you was or will be disclosed.
The planned storage duration for personal data concerning you or, if specific information on this cannot be provided, the criteria for determining storage durations.
The existence of a right to rectification or erasure of personal data concerning you, a right to processing restriction by the controller or a right to object to this processing.
The existence of a right to lodge complaints to supervisory authorities.
Any available information on the source of the data if the data is not collected from the data subject.
The presence of any automated decision-making processes, including profiling, under Art. 22(1 & 4) of the General Data Protection Regulation and—at least in these cases—meaningful information on the logic involved and the significance and the envisaged consequences of such processing for the data subject.
You have the right to obtain information about whether personal data concerning you is transmitted to a third country or to an international organization. You may also obtain notification about such transfers through the guarantees under Art. 46 of the General Data Protection Regulation.
You may obtain rectification and/or completion from the controller if processed personal data concerning you is inaccurate or incomplete. The controller must perform rectification without delay.
If you contest the accuracy of personal data concerning you for a duration that allows the controller to review your personal data.
Processing is unlawful and you reject the erasure of your personal data and instead demand usage restrictions for your personal data.
The controller no longer requires the personal data for its processing purposes, but you need this data for the establishment, exercise or defense of legal claims.
If you object to the processing in accordance with Art. 21(1) of the General Data Protection Regulation and whether the legitimate interests of the controller override your reasons has not yet been determined.
If the processing of personal data concerning you is restricted, this data may—apart from its storage—only be processed with your consent or for the establishment, exercise or defense of legal claims or to safeguard the rights of another natural or legal person or for reasons that lie in the public interest of the European Union or one of its Member States. If processing is restricted under one of the above-stated requirements, the controller will notify you before the restriction is lifted.
You withdraw your consent on which the processing was based under Art. 6(1) Letter a or Art. 9(2) Letter a of the General Data Protection Regulation and there is no other legal basis for processing.
You object to the processing in accordance with Art. 21(1) of the General Data Protection Regulation and there are no overriding legitimate reasons for the processing or you object to the processing in accordance with Art. 21(2) of the General Data Protection Regulation.
Personal data concerning you is processed unlawfully.
The erasure of the personal data concerning you is required for the fulfillment of a legal obligation under EU law or the law of an EU Member State to which the controller is subject.
The personal data concerning you was collected for services offered by the information society in accordance with Art. 8(1) of the General Data Protection Regulation.
If the controller publicized the personal data concerning you and if he is required to erase your data under Art. 17(1) of the General Data Protection Regulation, the controller must take suitable, including technical, measures in consideration of available technologies and implementation costs to inform the data processing controllers that, as the data subject, you demanded the removal of any links to and of copies or replicas of your personal data.
Exercising the right to freedom of speech and information.
Fulfilling a legal obligation required for processing under EU law or the law of an EU Member State to which the controller is subject or carrying out a task in the public interest or in exercise of official authority vested in the controller.
Reasons in the public interest regarding health under Art. 9(2) Letters h & i and Art. 9(3) of the General Data Protection Regulation.
Archiving purposes in the public interest, scientific or historical research purposes or statistical purposes under Art. 89(1) of the General Data Protection Regulation if the conditions and safeguards under Letter a are likely to render impossible or seriously impair the achievement of the objectives of the processing.
If you asserted your right to rectification, erasure or processing limitation against the controller, the controller must notify all recipients to whom you disclosed the respective personal data about the rectification, erasure or processing restriction of your data, unless doing so proves to be impossible or requires unreasonable expenditure. You have the right to be informed about these recipients by the controller.
The processing is based on consent in accordance with Art. 6(1) Letter a of the General Data Protection Regulation or Art. 9(2) Letter a of the General Data Protection Regulation or on a contract in accordance with Art. 6(1) Letter b of the General Data Protection Regulation.
The processing is performed using automated means.
In addition, when exercising this right, you have the right to have the personal data transmitted directly from one controller to another where technically feasible. Freedoms and rights of other persons may not be impaired thereby. The right to data portability does not apply to processing required for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
You have the right, at any time and on grounds relating to your particular situation, to object to the processing of personal data concerning you performed under Art. 6(1) Letters e or f of the General Data Protection Regulation. This also applies to profiling-based provisions. The controller may no longer process the personal data, unless the controller demonstrates compelling legitimate grounds for the processing which override your interests, rights and freedoms or if the processing serves the establishment, exercise or defense of legal claims. If the respective personal data concerning you is processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing. If you object to processing for direct marketing purposes, the personal data concerning you may no longer be processed for such purposes. In the context of the use of information society services—and notwithstanding Directive 2002/58/EC—you may exercise your right to object through automated means using technical specifications.
You have the right to withdraw your declarations of consent made under data protection law at any time. However, withdrawal will not affect the legitimacy of processing performed on the basis of your consent prior to its withdrawal.
Is required for the conclusion or performance of a contract between you and the controller.
Is permissible under EU law or the law of an EU Member State to which the controller is subject and if these legal regulations contain adequate measures for safeguarding your rights, freedoms and legitimate interests.
However, these decisions may not be based on special categories of personal data under Art. 9(1) of the General Data Protection Regulation unless Art. 9(2) Letters a or g of the General Data Protection Regulation apply and adequate measures for safeguarding your rights, freedoms and legitimate interests are implemented. For the stated cases, the controller must take adequate measures to safeguard your rights, freedoms and legitimate interests which must include the right to obtain human intervention by the controller, to express one's own view and to challenge the decision.
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint to a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement, if you consider the processing of personal data relating to you to infringe on the General Data Protection Regulation. The supervisory authority to whom the complaint is lodged will inform the complainant on the progress and the outcome of the complaint, including the possibility of a judicial remedy in accordance with Art. 78 of the General Data Protection Regulation.
Created by Lawyer Volker Weingran, www.westanwaelte.de.

References: Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 22
 Art. 46
 Art. 21
 Art. 6
 Art. 9
 Art. 21
 Art. 21
 Art. 8
 Art. 17
 Art. 9
 Art. 9
 Art. 89
 Art. 6
 Art. 9
 Art. 6
 Art. 6
 Art. 9
 Art. 9
 Art. 78