Source: https://www.schukat.com/schukat/schukat_cms_en.nsf/index/CMS224F6857F5DEA479C125776700325017?OpenDocument
Timestamp: 2019-02-22 08:18:52
Document Index: 404728679

Matched Legal Cases: ['Art. 12', 'Art. 4', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 17', 'Art. 6', 'Art. 6', 'Art. 17', 'Art. 7', 'Art. 6', 'Art. 17', 'Art. 6', 'Art. 21', 'Art. 6', 'Art. 17', '§ 26', 'Art. 6', 'Art. 17', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 17', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 15', 'Art. 16', 'Art. 17', 'Art. 18', 'Art. 21', 'Art. 20', '§ 34', 'Art. 22', 'Art. 15', 'Art. 77', '§19', 'Art. 45', 'Art. 46', 'Art. 19', 'Art. 6', 'Art. 4']

Home > Imprint > Privacy and Data Protection Policies
Privacy and Data Protection Policy of Schukat electronic Vertriebs GmbH
We are pleased that you are interested in our website. Because protecting your privacy is very important to us, we are meeting our transparency obligations as stipulated in Art. 12 of the European Union General Data Protection Regulation (GDPR) and informing you in this privacy statement about how we handle your personal data.
1.	Persons responsible within the meaning of data protection law
1.1	Controller for data processing
The controller within the meaning of Art. 4(7) of the GDPR and other national data protection laws of the member states as well as any other legal data protection regulations is:
Tel: +49 2173 950 5
1.2	Contact information for the data protection officer
If you require more specific information regarding the use of your personal data and/or data that might indirectly relate to an individual, you can contact our data protection officer directly. This person is also available to you in the event of information requests, applications or complaints
You can reach our data protection officer at the postal address mentioned above and also by email at: datenschutz@schukat.com
If we obtain the consent of a data subject for the purposes of processing their personal data, Art. 6(1)(a) of the GDPR applies as the legal basis.
If the processing of personal data is necessary for the performance of a contract to which the data subject is party, Art. 6(1)(b) of the GDPR applies as the legal basis. This also applies to processing operations necessary for carrying out certain steps prior to entering into a contract.
If processing of personal data is necessary for compliance with a legal obligation to which our company is subject, Art. 6(1)(c) of the GDPR applies as the legal basis.
If processing is necessary in order to protect the vital interests of the data subject or of another natural person, Art. 6(1)(d) of the GDPR applies as the legal basis.
If processing is necessary for the purposes of the legitimate interests pursued by our company or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject, Art. 6(1)(f) of the GDPR applies as the legal basis of the processing.
The personal data of the data subject will be deleted as soon as the purposes for processing the data are no longer applicable. Personal data may also be retained if such retention is provided for by European or national law in legally valid directives, laws or other regulations to which the controller is subject. Blocking or deletion of the data is also carried out if a retention period stipulated by European or national law expires, unless it is necessary to continue to store the data for the performance of a contract or to fulfil a contract.
4.	Creation of log files
Every time you access our website, our system automatically records data and information transmitted to us by your computer.
·	Date and time of the access
·	User’s IP address
·	Product and version information of the user’s browser (user-agent)
·	The user’s operating system
·	Content from cookies set by www.schukat.com
·	Websites visited
·	Quantity in bytes of data sent
·	Status and the websites from which the user came to our website (referrer)
These data are also stored in the log files of our system. However, the data are not stored together with other personal data of the user.
We evaluate these log files only for statistical purposes. The temporary storage of the IP address by the system is necessary to allow our website to be delivered to the user’s computer. For this purpose, the user’s IP address has to be stored for the duration of the session.
The legal basis for the temporary storage of this data is Art. 6(1)(f) of the GDPR. Our legitimate interest in the temporary storage in log files arises from the need to optimise our website by analysing user behaviour and server load relative to day and time of day. In addition, we can use the log files to identify possible errors, for example broken links or programming mistakes, and thus use the logged data to improve and further develop our website.
The data will be erased in accordance with Art. 17(1)(a) of the GDPR as soon as they are no longer necessary to achieve the purposes for which they were collected. If the data has been collected to make the website available to a user, this applies as soon as the session has ended. If the data has been stored in log files, it is erased after a maximum of ten days. Retention beyond this period is possible. In this case, the user’s IP address will be erased or altered so that it is no longer possible to assign the data to a particular client.
Both the collection of data for the purpose of providing the site to users and the storage of data in log files are essential for the operation of the website. This can therefore not be contested by users.
To place an order in our webshop, it is necessary for you as a user to provide your personal data for the fulfilment of the contract. Mandatory fields for completion of the contract are specially marked, while all other information is voluntary.
The following personal data are processed for your order:
·	Customer number
·	VAT ID number
·	Salutation
·	First name and family name
·	Department
·	Company address
·	Telephone and fax number
In addition, the following personal data relative to you as the one placing an order are processed:
For the benefit of the environment, we offer electronic invoicing by email in place of paper invoices.
For this purpose, the following data are processed:
·	Name of contact person
To prevent unauthorised access of third parties to your personal data, the order process is transferred through the Internet using SSL encryption. You can recognize encrypted connection of this kind by the prefix “https://” before the page address in the address line of your browser.
We process your data for purpose of completing your purchase and for possible future guarantee handling. In addition, you can register through the webshop, for which we store your data for future purchases.
The legal basis for processing your personal data for order handling is Art. 6(1)(b) of the GDPR. The legal basis for processing your personal data for the purposes of sending invoices by email is Art. 6(1)(a) of the GDPR.
The data will be erased in accordance with Art. 17(1)(a) of the GDPR as soon as they are no longer necessary to achieve the purposes for which they were collected.
Because of the legal requirements of trade and tax regulations, we are obligated to store your address, payment and order data for a period of ten years. However, after two years, we carry out a limitation of the processing, i.e. your data are only used to comply with statutory obligations.
You can have your stored personal data changed at any time. To do so, send an email in this regard to info@schukat.com or get in touch with your personal customer advisor.
If you use our email invoicing service, you can withdraw your consent for the processing of your personal data for this purpose at any time with future effect in accordance with Art. 7(3) GDPR. To do so, send an email in this regard to vertrieb@schukat.com.
On our website, we offer users the possibility to register by inputting their personal data. The data are entered into an input mask, transferred to us and stored. The information entered during registration is checked by us and, when successfully checked, the registration process is completed within 24 hours. The user is then informed of the activation of their registration by email. Incomplete registrations are erased from our database after four weeks.
The following personal data are collected as part of the registration process:
·	Salutation/Title
·	User name
·	Date and time of registration
·	http referrer (originating information)
·	Browser used
Your personal data are only passed on to service providers engaged by us for the completion of your order. These are limited to:
·	Suppliers (project orders)
·	Freight forwarders and parcel delivery services
The user data collected as part of the registration process are used to set up a customer account on the ERP side and are linked to the user account on our shop system. In the collecting and processing of the account details, additional functions are also activated for the user, e.g. watch lists and enquiry lists, retrieval of individual customer prices, retrievable order histories, parcel tracking for deliveries, provision of price data, etc.
The legal basis for processing of the personal data is the existence of the user’s consent in accordance with Art. 6(1)(a) of the GDPR.
The data will be erased in accordance with Art. 17(1)(a) of the GDPR as soon as they are no longer necessary to achieve the purposes for which they were collected. This applies to the data collected during the registration process if the registration is amended or revoked.
As a user, you have the option to terminate your registration and the processing of your personal data at any time. You can amend the personal data about you that we store at any time. To do so, send an email in this regard to info@schukat.com.
On our website, users can subscribe to a free newsletter. We use newsletter service CleverReach for the production and mailing of this newsletter. As a contract data processing service, CleverReach processes the data collected for this purpose. CleverReach is a member of the Certified Senders Alliance and expressly commits itself in its Terms of Service to data security, as can be seen at this link: https://www.cleverreach.com/en/terms-of-service/
The contact information for the contract data processing service is:
To send the newsletter, the following personal information from you is processed and transferred to CleverReach:
·	Contact ID
In order to process this data, your consent is obtained as part of the registration procedure, at which time you are referred to this privacy statement.
The transfer of your personal data to CleverReach is done for the sole purpose of sending our newsletter and for the statistical evaluation of opening and click behaviour. Your data will not be used for any other purpose than noted above, nor will your data be used for any other purpose by CleverReach.
The legal basis for processing of the personal data is Art. 6(1)(a) of the GDPR. In accordance with this, sending of the newsletter takes place only with your consent.
As a user, you have a right in accordance with Art. 21(2) of the GDPR to object at any time to the use of your personal data for the purpose of sending the newsletter. To allow you to exercise your right to object, a corresponding unsubscribe link is included in every newsletter.
As a user, we offer you the possibility of returning defective or incorrectly supplied articles to us. To make this process as smooth as possible, we make the “RMA requirements” form available to you. To complete the procedure, we process the following personal data from you in addition to the complaint particulars:
Processing of the information listed above serves the handling of the particular complaint. The name and address of the user are required to identify you personally and for assignment of the goods ordered. If complain particulars are unclear to us, we use your telephone and/or fax number as well as the email address provided by you to get in contact with you.
The legal basis for the processing of your personal data is Art. 6(1)(b) of the GDPR.
The data will be erased in accordance with Art. 17(1)(a) of the GDPR as soon as they are no longer necessary to achieve the purpose for which they were collected. Please note that, because of the legal requirements of trade and tax regulations, we are obligated to store your address, payment and order data for a period of ten years.
9.	Application management
We look forward to receiving your application for a position in our company and for your interest. Because we process information from you as part of the application process, we inform you below about the details of how we handle your personal data.
We process only the personal data that you have provided to us in connection with your application, and only to determine your suitability for the position for which your are applying (or another available position).
The legal basis for the processing of the personal data for the purposes of determining your suitability for an advertised position is § 26(1) of the BDSG (Federal Data Protection Act, new version) in connection with Art. 6(1)(b) of the GDPR. After this period, the processing of your personal data continues to be permissible to the extent that it is required for establishing an employment relationship. After receiving your applicant data, your documents will be viewed by the human resources department and may also be passed on to department heads. Basically, only those persons who need your data to ensure the proper course of the application process will have access to them.
With regard to your role as applicant or in case the application is rejected, the data will be erased in accordance with Art. 17(1)(a) of the GDPR as soon as they are no longer necessary the purposes for which they were collected.
Should the personal data continue to be required after the conclusion of the application process, the data processing can take place in accordance with Art. 6(1)(f) of the GDPR, for the purposes of pursuing our legitimate interests. Our legitimate interests then relate to the assertion or rejection of legal claims. In this case, however, the maximum retention period is six months. You have the right to object to the processing in accordance with the statutory provisions
Our website uses cookies. Cookies are text files that are saved in or by the internet browser on the user’s computer system. If a user calls up a website, a cookie may be stored in the user’s operating system. This cookie contains a distinctive character sequence that enables unambiguous identification of the browser when the website is visited.
We use cookies to make our website more user-friendly. On the one hand, we use session cookies. These expire automatically once the browser is closed. The session cookies store a session ID, by which different queries from your browser are allocated to a joint session. In this way, your computer can be recognized again when you return to our website. We use session cookies to optimise our site’s user-friendliness and to analyse user behaviour.
On the other hand, we also use WK cookies. With WK cookies, the shopping basket user is identified so that their shopping basket can be restored.
In the cookies, we store and transfer the following information: session ID (guest), server token (session ID) of the webserver group (user), list of product groups called up, current shopping basket status, old shopping basket status, status of watch lists and enquiry lists, key for file uploads.
The point of using cookies is to make using the website easier for users. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary for the browser to be recognised again after a change of page. The user data collected by cookies are not used to create user profiles.
The legal basis for processing of the personal data is Art. 6(1)(f) of the GDPR. Our legitimate interests in this data-processing arise from the aim of optimising our website and increasing customer satisfaction.
Cookies are stored on the user’s computer and transmitted from this to our website. As a user, you therefore have complete control over the use of cookies. By changing the settings of your Internet browser, you can deactivate or limit transmission of cookies. Cookies already stored can be erased at any time. This can also take place automatically. If cookies for our website are deactivated, it is possible that not all of the functions of our website can still be used to their fullest.
Details concerning your right to object can be found in point 18 of this privacy statement.
In connection with our newsletter function, a service from Google Inc. (“Google”) called “Invisible reCAPTCHA” is used. The aim of reCAPTCHA is to insure that registration for our newsletter is actually done by a human being and that misuse by machine-generated entries is excluded as much as possible. To achieve this, Google processes a range of information, including the IP address of the end-user device used to register, but also other information that can determine the presence of human actions. This processing takes place both within Europe and in the USA, the latter on the basis of what is known as Privacy Shield. Google states that it do not conflate the IP addresses transferred by Invisible reCAPTCHA with data from other Google services. In this regard, Google’s data protection regulations, available at https://www.google.com/intl/en/policies/privacy/, apply.
The data processing described above is carried out both on the basis of your consent to be included in our newsletter distribution list (Art. 6(1)(a) of the GDPR) and on the basis of a general weighing of interests within the meaning of Art. 6(1)(f) of the GDPR. In this regard, the protection of our IT systems, in particular ensuring the functionality of our website, is to be seen as a legitimate interest within the meaning of the law. You can revoke your consent for your inclusion in our newsletter distribution list free of charge at any time with future effect. The permissibility of the data processing carried out prior to your revocation for the purpose described above remains unaffected by your revocation.
In addition, we advise that, with every new registration for our newsletter, the processing described above takes place. If you do not agree with this as a matter of principle, unfortunately you cannot use our newsletter function.
The statements made in this privacy statement about your general right to object apply mutatis mutandis.
The legal basis for the processing of your personal data as part of the reCAPTCHA procedure is Art. 6(1)(f) of the GDPR. Our legitimate interests arise from the aim of protecting our website from misuse and malware.
Your personal data will be erased in accordance with Art. 17(1)(a) of the GDPR as soon as they are no longer necessary for the purposes for which they were collected.
You will find more information about the protection of your personal data by Google at the following link: https://policies.google.com/privacy?hl=en
12.	Social Plug-ins
On our website, we offer you the possibility to use social plug-ins from the following companies:
•	Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA; http://www.facebook.com/policy.php; further information about data collection: http://www.facebook.com/help/186325668085084 and http://www.facebook.com/about/privacy
•	“Tweet” button from Twitter Inc., 795 Folsom St., Suite 600, San Francisco, CA 94107, USA; https://twitter.com/privacy
•	“+1” button from Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; https://www.google.com/policies/privacy/partners/?hl=en
Fundamentally, when you visit our website, no personal data is initially passed on to any of the plug-in providers. You can recognize the provider of a plug-in by the marking on the box, by the first letter of its name, or by the logo. We offer you the option of communicating with the provider directly via the button. Only when you click on the marked field and activate the plug-in does the plug-in provider receive the information that you have called up the corresponding webpage from our online offerings. When you activate the plug-in, personal data about you is transmitted to the respective plug-in provider and stored there (among US providers, this storage takes place in the USA). Because the plug-in provider uses cookies in particular to carry out the data collection, we recommend that you erase all cookies using your browser’s security settings before clicking on the greyed-out boxes.
We have no influence over the data recorded or the data-processing operations, nor do we know the full extent of the data collection, the aims of the processing, or the periods for which the data is stored. We also have no information concerning erasure of the data collected by the plug-in provider.
The plug-in provider stores the information collected about you as a usage profile and uses this for the purposes of advertising, market research and/or the demand-oriented presentation of their website. Such an evaluation takes place in particular (also for users not logged in) for the presentation of demand-oriented advertising and to inform other users of the social network about your activities on our website. You have the right to object to the establishment of this user profile. If you wish to exercise this right, please contact the respective plug-in provider. With the plug-ins, we offer you the possibility to interact with the social networks and other users so that we can improve our range of offerings and make this range more interesting to you as a user. The legal basis for the use of plug-ins is Art. 6(1)(f) of the GDPR. Our legitimate interest in the use of plug-ins arises from our desire to make cross-platform communication available to our users and thus to create a positive user experience.
The transmission of data takes place regardless of whether you have an account with the plug-in provider or whether you are logged in. If you are logged into the plug-in provider, your data gathered on our website is assigned directly to your account with the plug-in provider. If you click on the activated button and, for example, link to the page, the plug-in provider also records this information in your user account and publicly shares this with your contacts. We recommend that you log out regularly from social networks after use, in particular before activating the button; in this way, you can avoid any assignment to your profile with the plug-in provider.
More information about the extent and purpose of data collection and their processing by the plug-in provider is available in the privacy statement of each provider at the addresses listed above. There you can also find more information concerning your rights and the possibilities for setting preferences to protect your private sphere.
13.	Web analysis by Matomo (formerly PIWIK)
On our website, we use the open-source software tool Matomo (formerly PIWIK) to analyse the browsing behaviour of our users. This software places a cookie on the user’s computer (see more about cookies above). If individual pages of our website are accessed, the following data are stored:
·	Two bytes of the IP address of the accessing user’s system
·	The accessed webpages
·	The website from which the user arrived out the accessed page (referrer)
·	The sub pages that are accessed from the accessed webpage
·	The length of time spent on the webpage
·	The frequency with which the webpage is accessed
This software runs exclusively on the servers of our website. None of a user’s personal data are stored there. No data are passed on to a third party.
The legal basis for the processing of the user’s personal data is Art. 6(1)(f) of the GDPR.
The processing of the user’s personal data enables us to analyse our users’ browsing behaviour. By evaluating the data thus gathered, we are able to assemble information about the usage of the individual components of our website. This helps us to continuously improve our website and its user friendliness. These aims also represent our legitimate interest in the processing in accordance with Art. 6(1)(f) of the GDPR. By anonymising the IP addresses, the users’ interests in there personal data are sufficiently taken into account.
These data are erased as soon as they are no longer necessary for this tracking purpose.
More information about the privacy settings of the Matomo software is available here: https://matomo.org/docs/privacy/.
14.	Use by minors
Minors may not transfer any personal data to us without the agreement of their parents or legal guardian. We process no knowingly obtained personal data of minors as part of our Internet presence.
15.	Right of access
If your personal data are processed, then you are a data subject within the meaning of the GDPR and you have the following rights with respect to the controller:
As a data subject within the meaning of the GDPR, you have in accordance with Art. 15 of the GDPR the right of access to the personal data being processed by the controller; in accordance with Art. 16 of the GDPR the right to rectification; in accordance with Art. 17 of the GDPR to right to erasure (‘right to be forgotten’); in accordance with Art. 18 of the GDPR the right to restriction of processing; in accordance with Art. 21 of the GDPR the right to object to the processing; and in accordance with Art. 20 of the GDPR the right to data portability. For the right of access and the right to erasure, the limitations of §§ 34 und 35 of the BDSG (new) additionally apply.
Moreover, you have the right in accordance with Art. 22(1) and 22(4) of the GDPR of access to information about whether you are subject to a decision based solely on automated processing, in accordance with Art. 15(2) of the GDPR the right to know whether your personal data are transferred to a third country, as well as the right to know if the if it is possible to lodge a complaint with the data protection supervisory authority in accordance with Art. 77 of the GDPR in connection with §19 of the BDSG (new).
To exercise your right of access, please write to the following address, clearly identifying yourself:
16.	Transfer of personal data to a third country
The transfer of personal data to locations in countries outside the European Union (third countries) takes place provided that
·	It is necessary for the execution and performance of a contract
·	It is legally required
·	You have given us your consent
For certain tasks, our company uses service providers whose headquarters are in third countries or which are part of an international concern with companies in third countries or which work together with service providers that are based in a third country. The transfer of personal data to such service providers is permissible when the European Commission has decided that the third country in question ensures an adequate level of protection (in accordance with Art. 45 of the GDPR).
If the commission has not made such a decision, our company or the service provider may transfer personal data to a third country or an international organisation only if appropriate safeguards are provided and enforceable rights and effective legal remedies for data subjects are available (in accordance with Art. 46(1) of the GDPR).
Beyond the cases mentioned above, our company does not transfer any personal data to locations in third countries or to international organisations.
17.	Right of information
If you have exercised your right of access with the controller, then the controller is obligated in accordance with Art. 19 of the GDPR to communicate any rectification or erasure of personal data or restriction of processing carried out to each recipient to whom the personal data have been disclosed, unless this proves impossible or involves disproportionate effort.
18.	Right to object
You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (e) or (f) of Art. 6(1)(e) (processing is in the public interest) or 6(1)(f) (processing based on a balancing of interests); this also applies to profiling based on those provisions in accordance with Art. 4(4) of the GDPR.
If you submit an objection, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or for the establishment, exercise or defence of legal claims.
If your personal data are processed for direct marketing purposes, you have the right to object at any time to processing of personal data concerning you for such marketing; this also applies to profiling to the extent that it is related to such direct marketing.
An objection can be made in any form and should be sent to:
Status and updating of this privacy statement
This privacy statement applies from 25 May, 2018
We will update this privacy statement from time to time based on relevant changes to our website, the processing of personal data or in case of changes to the statutory provisions. The updated version applies from the published date on which the new version comes into force. If significant amendments are made to this privacy policy, we will inform you in a timely manner with an announcement on our website before the entry into force of the amendments.