Source: https://www.pascom.net/en/data-protection/
Timestamp: 2019-04-26 04:49:43+00:00

Document:
Data Protection is of especially great importance for our company. It is essentially possible to use the website without providing any personal data. Should a particular person wish to make use of special services of our company online, however, it may be necessary to process personal data. Should the processing of personal data be required, and should no legal basis exist for such processing, we will obtain the prior consent of the person concerned.
The processing of personal data, for example the name, address, e-mail address or telephone number of a person concerned, is always carried out in line with the Federal Data Protection Act (BDSG), the EU General Data Protection Regulation (GDPR) that comes into force on 25/05/2018, and any laws which likewise apply. With this Data Protection statement, our company would like to provide information on the nature, scope and purpose of the personal data processed by us, and explain to persons concerned what rights they are entitled to assert.
Personal data is “any information which relates to an identified or identifiable natural person (hereinafter referred to as either ’affected person‘, ’person concerned‘ or ’Data Subject’). A natural person is considered identifiable if he or she can be directly or indirectly identified, in particular by means of being allocated to an identifier, such as a name, an ID number, site data, an online identifier or one or more special features which are the expression of the physical, physiological, genetic, psychological, economic, cultural or social identity of said natural person” (see Art. 4(1) of the General Data Protection Regulation (GDPR)).
A Data Subject, person concerned or affected person is any identified or identifiable natural person whose personal data is processed by the party responsible for the processing.
Any person affected may, if he or she has any questions or suggestions on Data Protection, contact our Data Protection Officer directly.
Every time the website is accessed by a particular person or an automated system, the web server of pascom GmbH & Co. KG gathers a range of pieces of general data and information. This general data and information is stored in the log files of the server. The browser types and versions used, the operating system used by the accessing system, the website from which an accessing system reaches our website, the sub-pages of the website which are accessed on our website via an accessing system, the date and time of any access to the website, an Internet protocol address (IP address), the Internet Service Provider of the accessing system and any other similar data and information which serves to fend off risk in the event of our IT systems being attacked may be gathered.
When using such general data and information, pascom GmbH & Co. KG does not draw any conclusions concerning the person concerned. Rather, such information is needed in order to deliver the content of our website correctly, optimise the content of our website, as well as the advertising for it, guarantee the ongoing functionality of our IT systems and the technology of our website, and provide law enforcement agencies with the information necessary for prosecution in the event of a cyber-attack. Such data and information gathered anonymously is therefore evaluated by pascom GmbH & Co. KG on the one hand statistically, and also with the aim of increasing Data Protection and data security at our company, in order to ultimately ensure an optimum level of protection for the personal data processed by us. The anonymous data of the server log files is stored separately from any personal data given by a person concerned.
Every person concerned is entitled to request from the person responsible for the processing a confirmation on whether personal details concerning him or her are processed. Should a person concerned wish to lay claim to this right of confirmation, he or she may contact our Data Protection Officer or any other employee of the party responsible for the processing for that purpose.
The existence of automated decision making, including profiling pursuant to Article 22(1) and (4) General Data Protection Regulation (GDPR), and — at least in such cases — meaningful information on the logic involved, as well as the reach, and the effects of such processing aimed for, for the person concerned.
Should a person concerned wish to lay claim to such a right to information, he or she may contact our Data Protection Officer for this purpose at any time.
The person concerned revokes his or her consent, on which he or she based the processing pursuant to Art. 6(1)(a) General Data Protection Regulation (GDPR) or Art. 9(2)(a) General Data Protection Regulation (GDPR), and there is no other legal basis for the processing.
Pursuant to Art. 21(1) General Data Protection Regulation (GDPR), the person concerned is filing an opposition to the processing, and there are no overriding justified grounds for the processing, or the person concerned is filing an opposition against the processing pursuant to Art. 21(2) General Data Protection Regulation (GDPR).
The personal data has been gathered in regard to services offered in the information society pursuant to Art. 8(1) General Data Protection Regulation (GDPR).
Should one of the above-mentioned grounds apply and an affected person wish to arrange for the deletion of personal data that is stored with our company, he or she may contact our Data Protection Officer for this purpose at any time. Our Data Protection Officer will arrange for the request for deletion to be complied with without delay.
Should the personal data have been published by our company, and should our company, as the party responsible pursuant to Art. 17(1) General Data Protection Regulation (GDPR), be obliged to delete said personal data, our company shall, taking into account the available technology and the implementation costs, take appropriate steps, also of a technical nature, to inform other parties responsible for the data processing, who process the published personal data, that the person concerned has requested from such other parties responsible for processing the data that all links to said personal data or copies or replications of such personal data be deleted, provided that the processing is not necessary. The Data Protection Officer will arrange for whatever is necessary in the individual case.
The person affected has filed an opposition against the processing of the data pursuant to Art. 21(1) General Data Protection Regulation (GDPR), and it has not yet been established whether the justified grounds of the party responsible outweigh those of the affected person.
Should any of the above-mentioned prerequisites apply and an affected person wish to request that the personal data that is stored with our company be limited, he or she may contact our Data Protection Officer for this purpose at any time. The Data Protection Officer will arrange for the processing of the data to be limited.
Any person affected by the processing of personal data is entitled to receive the personal data concerning him or her, which has been provided to a party responsible by the affected person, in a structured, up-to-date and machine-readable format. He or she additionally has the right to transmit such data to a different party responsible, without being hindered by the party responsible, to which or whom the personal data has been provided, as long as the processing is based on the consent pursuant to Art. 6(1)(a) General Data Protection Regulation (GDPR) or Art. 9(2)(a) General Data Protection Regulation (GDPR) or an agreement pursuant to Art. 6(1)(b) General Data Protection Regulation (GDPR), and the processing is undertaken with the aid of automated procedures, as long as the processing is not necessary in order to complete a task that is in the public interest or completed to exercise official authority that has been conferred upon the party responsible.
When exercising his or her right to data portability pursuant to Art. 20(1) General Data Protection Regulation (GDPR), the person concerned is, moreover, entitled to cause the personal data to be transmitted directly from one party responsible to another party responsible, if the latter is technically feasible, and as long as the rights and freedoms of other persons are not thereby impaired.
In order to assert the right to data portability, the person concerned may contact the Data Protection Officer appointed by us at any time.
Any person affected by the processing of personal data has the right, for reasons which arise from his or her particular situation, to file an opposition against the processing of personal data concerning him or her that is being undertaken based on Art. 6(1)(e) or (f) General Data Protection Regulation (GDPR), at any time. This also applies to any profiling based on these provisions.
In addition, the person concerned is entitled, for reasons arising from his or her particular situation, to file an opposition against the processing of personal data concerning him or her that is performed by our company for scientific or historic research purposes or for statistical purposes pursuant to Art. 89(1) General Data Protection Regulation (GDPR), unless such processing is necessary in order to complete a task that falls within the scope of the public interest.
In order to exercise the right of opposition, the person concerned may contact the Data Protection Officer directly.
Should the person concerned wish to assert rights in regard to automated decisions, he or she may, for this purpose, contact our Data Protection Officer at any time.
Any person affected by the processing of personal data has the right to revoke any consent given to the processing of personal data at any time. Should the person concerned wish to assert his or her right to revoke any consent granted, he or she may contact our Data Protection Officer for this purpose at any time.
With each call-up to one of the individual pages of this Internet website, which is operated by the controller and into which a Facebook component (Facebook plug-ins) was integrated, the web browser on the information technology system of the data subject is automatically prompted to download display of the corresponding Facebook component from Facebook through the Facebook component. An overview of all the Facebook Plug-ins may be accessed https://developers.facebook.com/docs/plugins/. During the course of this technical procedure, Facebook is made aware of what specific sub-site of our website was visited by the data subject.
The data protection guideline published by Facebook, as found here https://facebook.com/about/privacy/, provides information about the collection, processing and use of personal data by Facebook. In addition, it is explained there, which setting options Facebook offers to protect the privacy of the data subject. In addition, different configuration / application options are made available to allow the elimination of data transmission to Facebook, for example the Facebook blocker provided by Webgraph, which can be obtained under http://webgraph.com/resources/facebookblocker/. Such applications may be used by the data subject in order to eliminate a data transmission to Facebook.
Google Analytics is further explained https://www.google.com/intl/en_gb/analytics/.
More references from Google about the Google+ 1 button may be obtained under https://developers.google.com/+/web/buttons-policy.
On this website, the controller has integrated components of Twitter. Twitter is a multilingual, publicly-accessible microblogging service on which users may publish and spread so-called ‘tweets,’ e.g. short messages, which are limited to 280 (prev. 140) characters. These short messages are available for everyone, including those who are not logged on to Twitter. The tweets are also displayed to so-called followers of the respective user. Followers are other Twitter users who follow a user’s tweets. Furthermore, Twitter allows you to address a wide audience via hashtags, links or retweets.
With each call-up to one of the individual pages of this Internet site, which is operated by the controller and on which a Twitter component (Twitter button) was integrated, the Internet browser on the information technology system of the data subject is automatically prompted to download a display of the corresponding Twitter component of Twitter. Further information about the Twitter buttons is available here https://about.twitter.com/en/resources/buttons. During the course of this technical procedure, Twitter gains knowledge of what specific sub-page of our website was visited by the data subject. The purpose of the integration of the Twitter component is a retransmission of the contents of this website to allow our users to introduce this web page to the digital world and increase our visitor numbers.
Further information about YouTube may be obtained under https://www.youtube.com/yt/about/en/. During the course of this technical procedure, YouTube and Google gain knowledge of what specific sub-page of our website was visited by the data subject.
The controller has integrated components of PayPal into this Web site. PayPal is an online payment service provider. Payments are transacted through PayPal accounts, which effectively act as online bank accounts for private or commercial use. Moreover, PayPal offers the option of processing virtual payments via credit card if a user does not have a PayPal account. PayPal accounts are held under an e-mail address, for which reason they do not have an account number. PayPal makes it possible to trigger online payments to third parties and to receive payments too. PayPal also acts in a fiduciary capacity and offers purchase protection for buyers.
The company operating PayPal in Europe is PayPal (Europe) S.à.r.l. & Cie. S.C.A., 22-24 Boulevard Royal, 2449 Luxembourg, Luxembourg.
If a data subject selects the PayPal payment option during our online shop’s order process, the data subject’s data will be transferred to PayPal automatically. By selecting this payment option, the data subject gives his or her consent to the transfer of personal data required to process payment.
The personal data transferred to PayPal usually includes the data subject’s first name, surname, physical address, e-mail address, IP address, landline phone number, mobile phone number, or other data as necessary to process payment. Personal data related to the respective order is also required in order to fulfill the purchase agreement.
Data is transferred in order to process payment and prevent fraud. Note that the controller will transfer personal data to PayPal when there is a legitimate interest for doing so. The personal data exchanged between PayPal and the controller may in some cases be transferred by PayPal to credit agencies. Where this occurs, it is for the purposes of verifying the data subject’s identity and creditworthiness.
PayPal may potentially share personal data with affiliated companies and service providers or subcontractors to the extent that it is required to fulfill contractual obligations or if the data is to be processed by an external contractor.
The data subject is free to withdraw his or her consent to PayPal’s handling of personal data. A withdrawal of consent does not have an effect on personal data that is compelled to be processed, used, or transferred so that payment can be transacted (as contractually agreed).
You can view PayPal’s applicable privacy provisions at https://www.paypal.com/de/webapps/mpp/ua/privacy-full (German) or https://www.paypal.com/uk/webapps/mpp/ua/privacy-full (English).
We reserve the right to alter our security and Data Protection provisions, should it be necessary due to technological developments. We will, in such cases, also adapt our Data Protection statement accordingly. Please note the respective current version of our Data Protection statement.

References: Art. 4
 Art. 6
 Art. 9
 Art. 21
 Art. 21
 Art. 8
 Art. 17
 Art. 21
 Art. 6
 Art. 9
 Art. 6
 Art. 20
 Art. 6
 Art. 89