Source: http://www.drallesystem.de/index.php/data-privacy-statement.html
Timestamp: 2019-04-21 20:09:19+00:00

Document:
Fundamentally, we only process our user's personal data if it is required for offering a functioning website or our contents and services. The processing of personal user data takes place frequently only after the user's agreement. Exceptions apply to cases in which the processing of data is allowed by statutory provision and prior consent cannot be obtained due to factual causes.
The European General Data Protection Regulation (GDPR) art. 6 para. 1 lit. a serves as a legal base when we obtain the affected person's confirmation.
When the processing of personal data is necessary to fulfill a contract the affected person is a contracting party of, art. 6 para. 1 lit. b GDPR serves as a legal base. This also applies to processes which are needed for pre-contractual measures.
The art. 6 para. 1 lit. c GDPR serves as a legal basis if the processing of personal user data is required to fulfill a legal commitment the company is liable to.
In case that vitally import interests of the affected person or any other natural person rely on the processing of personal user data, art. 6 para. 1 lit. d serves as a legal base.
If the processing is required to ensure justified interests of our company or a third party, and are not predominated by the interests, basic rights and fundamental freedoms of the affected person, art. 6 para. 1 lit. f GDPR serves as a legal base for the processing.
The affected person's personal data will be deleted or disabled once the purpose of storing becomes inapplicable. The data can be stored further, if this is intended by European or national legislative organs in union-legal acts, laws or other prescriptions the person in charge is liable to. The data will be deleted or disabled as well, if the period of data retention, which is prescribed by the referred norms, has expired, unless it is necessary to continue storing the data for closing or fulfilling a contract.
Whenever our internet web page is entered, our system automatically collects data and information of the user's computer system.
These data are also stored in our system's log files. We storage these data separately from other personal user data.
For temporary data and log files storage, art. 6 para. 1 lit. f GDPR serves as a legal basis.
To make the website's transmission to the user's computer possible, the IP address needs to be stored in the system temporarily. Therefore, the user's IP address needs to be stored during the session.
The log files are stored to ensure a functioning website. Moreover, these data help to optimize the website and to guarantee our information-technical systems' security. We don't analyze the data for marketing purposes.
These are the purposes of our justified interests in data processing pursuant to art. 6 para. 1 lit. f GDPR.
Data will be deleted once they are not required to fulfill their original purposes. In the case of data collected for website delivery purposes, this will occur as soon as the session ends.
Data in log files will be deleted not later than after seven days. It is possible to store the data longer but in this case, the user's IP addresses will be deleted or alienated so that it is not possible to relate the data to the calling client.
To run our website, data collection and storage in log files are compulsory and thus there are no possibilities for objection on the part of the user.
The art. 6 para. 2 lit. f GDPR serves as a legal basis for processing of personal user data using cookies.
The purpose of the technologically necessary cookies is to simplify the website for our users. Some functions on our website need cookies for delivery. It is required for those functions that cookies are uses during the use of the website.
The user data, that are collected by technologically necessary cookies, do not serve anything but to offer a functioning website, and are not used to create user profiles.
The cookies on our website expire after each session.
When we are contacted via the provided e-mail address, the personal user data, that are transmitted by the e-mail, are stored.
In this context, the data will not be passed to third parties. The data will only be used to process the conversation.
Art. 6 para. 1 lit. a GDPR serves as a legal basis for data processing with the user's agreement.
The processing of data transmitted via e-mail happens with art. 6 para. 1 lit. f GDPR as a legal basis. If the e-mail contact aims to close a deal, another legal basis for the data processing is art. 6 para. 2 lit. b GDPR.
The required and justified interest in processing data is based on the contacting by the affected person.
Other personal data that are processed during sending the e-mail help avoiding abuse of the e-mail contact and ensuring secure information-technical systems.
Data will be deleted once they are not required to fulfill their original purposes. For personal user data transmitted via e-mail, this is the case when the particular conversation with the user is over. The conversation is over when the circumstances make it clear the concerned issue is clarified.
The personal user data collected while sending the e-mail will be deleted at the latest of seven days later.
When a user contacts us via e-mail, they always can object the storage of their personal user data. In this case, we cannot continue the conversation.
To use their right to object and abolish, the user can request so in an e-mail.
In this case, all personal user data that were collecting during the contacting will be deleted.
You have the right to be informed by the responsible person, if asked, whether we have processed your personal user data.
(8) the existence of automatic decision making and profiling pursuant to art. 22 para. 1 and 4 GDPR and – in these cases – significant information about the involved logic, importance and the aspired consequences of such processing for the affected person.
You have to right to demand information about whether your personal user data is transmitted to a third party country or an international organization. In this context, you have the right to be informed about adequate guarantees pursuant to art. 46 GDPR in the context of this transmission.
If your processed personal user data is false or incomplete, you have the right to let the responsible person correct or complete your data. The responsible person has to correct the data immediately.
(4) when you obtain to the processing pursuant to art. 21 para. 1 GDPR and it is not yet decided whether the responsible person's justified interests predominate your interests.
When the processing of your personal user data is limited, these data can only be processed – aside from their storage – with your consent, or to enforce, execute or defend legal claims, or to protect the rights of a natural or juridical person, or for reasons of important public interests of the union or any other member state.
When the processing was limited providing the named above premisses, you will be informed by the responsible person before the limitation is annulled.
(1) Your personal user data is not any longer required to fulfill the purposes they were collected and processed for.
(2) You withdraw the agreement for processing pursuant to art. 6 para. 1 lit. a or art. 9 para. 2 lit. a GDPR, and other legal bases for the processing do not exist.
(3) You object the processing pursuant to art. 21 para. 1 GDPR, and other prior-ranking, justified reasons for processing do not exist, or you object the processing pursuant to art. 21 para. 2 GDPR.
(4) Your personal data were processed illegitimately.
(5) The erasure of your data personal user data is necessary to fulfill a legal commitment pursuant to union law or law of another member state the responsible person is liable to.
(6) Your personal data were collected relating to offering services of the information company pursuant to art. 8 para. 1 GDPR.
If the responsible person has made your personal data public and the responsible person is bound pursuant to art. 17 para. 1 GDPR to delete them, the responsible person takes action considering available technologies and costs of implementation – of technical kind as well – to advise people who are responsible for data processing of you wanting the erasure of all links to these personal user data, or copies and replications of these personal data.
(5) for enforcement, exercise or defense of legal claims.
When you claimed your right to correct, delete or limit the processing to the responsible person, the responsible person is bound to inform every receiver of your personal data about the correction, erasure or limitation, unless it proves to be impossible or disproportionally complex.
You have the right to be informed about these receivers by the responsible person.
(2) the processing happens by means of automatic process.
Executing this right, you also have the right to effect your personal data being transmitted directly from a responsible person to another responsible person, if it is technically possible. Freedoms and rights of other people must not be affected.
The right to transmit data does not apply to the processing of personal data that is required to fulfill a task that is in public interest or done in the exercise of official authority which was transferred to the responsible person.
You have the right to object the processing of your personal data anytime for reasons, that result from your particular circumstances, with art. 6 para. 1 lit. e or f GDPR as a legal base; this also applies to a profiling that is based on these clauses.
The responsible person will not process your personal data anymore, unless the responsible person has forceful reasons for the processing which predominate your interests, rights and freedoms, or the processing serves the enforcement, exercise or defense of legal claims.
If your personal data are processed for direct advertising, you have the right to object the processing of your personal data for such advertising at any time; this applies to profiling as well insofar it is related to such direct advertising.
When you object the processing for purposes of direct advertising, your personal data will not be used for these purposes anymore.
In the context of the information company's services, you have the possibility to use your right to object using automatic processes that make use of technical specifications – regardless of guide line 202/58/EG.
You have the right to withdraw your declaration of agreement anytime. Because of the canceling, the legitimacy of the processing happening under the agreement until the canceling will not be touched.
Without prejudices to any other administrative or judicial appeal, you have the right to complain to a controlling institution, especially in the member state of your residence, work place or the place of the presumed violation, if you think your personal data's processing violated the GDPR.
The controlling institution informs the complainant about the complaint's status and results, and the possibility of a judicial appeal pursuant to art. 78 GDPR.

References: art. 6
 art. 6
 art. 6
 art. 6
 art. 6
 art. 6
 art. 6
 art. 6

Art. 6
 art. 6
 art. 6
 art. 22
 art. 46
 art. 21
 art. 6
 art. 9
 art. 21
 art. 21
 art. 8
 art. 17
 art. 6
 art. 78