Source: http://www.sar.biz/privacy_policy_SAR.htm
Timestamp: 2018-06-21 17:49:50
Document Index: 771902943

Matched Legal Cases: ['Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 46', 'Art. 21', 'Art. 6', 'Art. 9', 'Art. 21', 'Art. 21', 'Art. 8', 'Art. 9', 'Art. 9', 'Art. 6', 'Art. 9', 'Art. 6', 'Art. 6', 'Art. 9', 'Art. 9']

I. Name and Address of the Legally Obliged
The legally obliged entity in accordance with General Data Protection Regulations and other national data protection laws of EU member states as well as other data protection regulations is:
Phone: 08731/704-0
E-mail: info@sar.biz
Websites: www.sar.biz – www.combustiontechnology.biz – www.ppl.biz
The data protection officer for the entity legally responsible is:
E-mail: dsb@sar.biz
1. The extent of processing of personal data
In principle, we collect and use personal data of our users only to the extent necessary to provide a functional website, our content and services. The collection and use of personal data of our users take place regularly only with the user’s consent. An exception applies to cases in which prior consent cannot be obtained for reasons of fact and the processing of the data is permitted by law.
Insofar as we obtain the consent for processing personal data from the party in question, Art. 6 (1) lit. a EU General Data Protection Regulation (GDPR) serves as the legal basis.
In the processing of personal data necessary for complying with a contract for the contracting party in question, Art. 6 (1) lit. b GDPR serves as the legal basis. This also applies to processing operations required to carry out pre-contractual actions.
Insofar as any processing of personal data is required to fulfill a legal obligation that underlies our company, Art. 6 (1) lit. c GDPR serves as the legal basis.
In the event that vital interests of the party in question or another natural person require the processing of personal data, Art. 6 (1) lit. d GDPR serves as the legal basis.
If processing is necessary to safeguard the legitimate interests of our company or a third party, and if the interests, fundamental rights and freedoms of the party in question do not prevail over the first interests, Art. 6 (1) lit. f GDPR serves as the legal basis for this course of action.
Personal data of the party in question will be deleted or blocked as soon as the purpose of the storage is no longer needed. In addition, data storage may take place if provided for by the European or national legislator in EU regulations, laws or other regulations to which the entity legally responsible for data protection is subject to. Blocking or deletion of data also takes place when a storage period prescribed by the previously mentioned standards expires, unless there is a need for further storage of data for the conclusion of a contract or the fulfillment of the contract.
· The user’s internet service provider and country of origin
· The amount of data transferred
· Websites from which the user's system accesses our website
The data is also stored in our system’s log files. Storage of this data does not take place jointly with other personal data of the user.
The temporary storage of the user’s IP address by the website’s system is necessary to allow delivery of the website to the user’s computer. To do this, the user's IP address must be kept for the duration of the session.
Storage in log files is done to ensure the functionality of the website. In addition, the data is used to optimize the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place.
For these purposes, we have legitimate interests in the processing of data in accordance with Art. 6 (1) lit. f GDPR.
Data will be deleted as soon as the reason for its collection is no longer given. In the case of any data collected to allow website service, this provision is met when the respective online session is completed.
Data for log files are stored for no longer than thirty days. An additional storage time is possible. In this case, the IP addresses of the users are deleted or alienated, so that an identification of the calling client is no longer possible.
5. The right of rebuttal and removal of data
The collection of data and its storage in log files is essential for providing website service. Consequently, there is no right to refuse a collecting of a user’s data or a way to remove such data.
However, if you want to open embedded videos or maps, the provider of that service (YouTube or Google) will store cookies on your system. Further information can be found in point VII.
VI. Contact form, Email contact, contacts at sales fairs
A contact form is made available on our website which can be used to contact us electronically. If a user perceives this possibility, an e-mail with the completed fields and uploaded attachments is triggered to an internal contact person. In addition, no data is stored.
For the processing of the data, your consent is obtained within the framework of the submit operation and referred to this data protection declaration.
Alternatively, the user may opt to contact us via our e-mail address. In this case, the user's personal data transmitted by the e-mail will be stored.
In this context, no personal data will be passed on to third parties. The data is used exclusively for processing the channel of communication.
Contacts from personal conversations at trade fairs or similar events will be handed over to the relevant sales representative, if desired.
Personal data in the contact form serves only to administer the contact process. A legitimate interest in the processing of data may also be included when contact is via e-mail.
Any additional personal data collected during the sending process will be deleted after a period of no longer than thirty days.
The user has the possibility to revoke his consent for the processing of personal data at any time. If the user contacts us by e-mail, he or she may object to the storage of his or her personal data at any time. In such a case, communication cannot continue.
Otherwise, the user may revoke his consent for the processing of personal data at any time via post or telephone. You will find the contact details of the data protection officer in the header of this legal declaration.
VII. Data protection for applications and the application procedures
The data controller shall collect and process the personal data of applicants for the purpose of the processing of the application procedure. The processing may also be carried out electronically. This is the case, in particular, if an applicant submits corresponding application documents by e-mail or by means of a web form on the website to the controller. If the data controller concludes an employment contract with an applicant, the submitted data will be stored for the purpose of processing the employment relationship in compliance with legal requirements. If no employment contract is concluded with the applicant by the controller, the application documents shall be deleted two months after notification of the refusal decision, provided that no other legitimate interests of the controller are opposed to the deletion.
VIII. Embedded third party Services
This website uses Google Maps API to visually represent geographic information. The provider of the corresponding plugins is the Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. When using Google Maps, Google will also collect, process and use data about the use of the card functions by visitors. For more information on "Google Maps" privacy policy, see the provider's privacy policy at: https://www.google.de/intl/de/policies/privacy/. You can also change your personal data protection settings in the Privacy Center.
On some parts of our website use embedded YouTube videos. The provider of the corresponding plugins is the YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. When you visit a page with the YouTube plug-in, you connect to YouTube servers. YouTube will tell you which pages you are visiting. If you are logged in to your YouTube account, YouTube can assign your browsing behavior to you personally. You can prevent this by logging out of your YouTube account beforehand.
In case you have disabled the saving of cookies for the Google ad program, you will also not have to expect such cookies when watching YouTube videos. However, YouTube also makes non-personally identifiable usage information available in other cookies. If you want to prevent this, you must block the browser from storing cookies.
For more information on "YouTube" privacy policy, please see the provider's privacy policy at: https://www.google.de/intl/de/policies/privacy/
IX. Video Surveillance
Video surveillance takes place on parts of our premises. The purpose of surveillance is the protection of domiciliary rights and, if necessary, to investigate criminal offences or accidents. An automated recognition of persons or vehicle registration plates does not take place. The records are usually overwritten after 7 days, the deletion period can be extended to investigate crimes or accidents, in that case, the data will be deleted as soon as they are no longer needed.
X. Translated with www.DeepL.com/Translator The User’s Legal Rights
If your personal data is processed, you are the party concerned within the meaning of GDPR and have the following rights with respect to the responsible party:
1. Disclosure rights
You may ask the responsible party for confirmation if your personal data is being processed by us.
If such processing is being conducted, you can request information from the responsible party about the following information:
· the purposes for which the personal data are being processed;
· the categories of personal data that are being processed;
· the recipients or categories of recipients to whom your personal data have been disclosed or are still being disclosed;
· the planned duration of the storage of your personal data or, if specific information is not available, the criteria for determining the duration of storage;
· the right to have your personal data amended or deleted, a right to a restriction of processing by the responsible party or a right to object to such processing;
· the right of appeal to a supervisory authority;
· all available information on the source of the data if the personal data are not collected from the party in question;
· the existence of automated decision-making including profiling under Article 22 (1) and (4) GDPR and, at least in these cases, meaningful information about the logic involved, and the scope and intended impact of such processing on the data subject.
You have the right to request information about whether your personal data is or will be transferred to a third country or to an international organization. In this case, regarding the transfer, you can request the appropriate guarantees in accordance with Art. 46 GDPR.
You have the right to have the responsible party amend and/or complete your personal data if they are incorrect or incomplete. The responsible party must make the correction without delay.
· if you contest the accuracy of your personal information for a period of time that enables the responsible party to verify the accuracy of your personal information;
· the processing is unlawful and you refuse to have your personal data deleted and instead request the restriction of use of the such data;
· the responsible party no longer requires your personal data for the purposes of processing, but you need them to assert, exercise or defend legal claims, or
· if you objected to the processing in accordance with Art. 21 (1) GDPR and it is not yet certain whether the legitimate reasons of the responsible party prevail over your reasons.
If the processing of your personal data has been restricted, this data may only be used with your consent or for the purposes of asserting, exercising or defending legal claims or protecting the rights of another natural or legal person or for reasons of important public interest of the European Union or an EU member state.
If in accordance with the reasons mentioned above the processing has been restricted, you will be informed by the responsible party before the restriction is lifted.
You may request the responsible party to delete your personal information without delay, and the responsible party is required to delete that information immediately if one of the following reasons is valid:
· Your personal data is no longer necessary for the purposes for which they were collected or otherwise processed.
· You revoke your consent to the processing according to Art. 6 (1) lit. a or Art. 9 (2) lit. GDPR and there exist no other the legal basis for processing.
· You object to the processing in accordance with Art. 21 (1) GDPR and there are no overriding justifiable reasons for the processing, or you oppose processing in accordance with Art. 21 (2) GDPR.
· Your personal data has been processed unlawfully.
· The deletion of your personal data is required to fulfill a legal obligation under European Union law or the law of the member states to which the responsible party is subject.
· Your personal data was collected from offers by information services in accordance with Art. 8 (1) GDPR.
If the responsible party has made your personal data public and is obligated to delete them, in accordance with Article 17 (1) of the GDPR, the responsible party shall take appropriate measures, taking into account the available technology and the implementation costs, to inform data controllers who process the personal data that you have been identified as being affected, requesting deletion of any links to such personal data or of copies or replications of such personal data.
The right of deletion of personal data does not exist if the processing is necessary
· to exercise the right of freedom of expression and information;
· to fulfill a legal obligation required by laws of the European Union or of its member states to which the responsible party is subject, or to carry out a task of public interest or in the exercise of official authority conferred on the responsible party;
· for reasons of public interest on the grounds of public health in accordance with Art. 9 (2) lit. h and i and Art. 9 (3) GDPR;
· for archival purposes of public interest, scientific or historical research purposes or for statistical purposes in accordance with Article 89 (1) GDPR, to the extent that the law referred to in subparagraph (a) is likely to render impossible or seriously affect the achievement of the objectives of that processing, or
If you have exercised your right of amendment, deletion or restriction of processing to the responsible party, he/she is obliged to notify all recipients to whom your personal data have been disclosed to of this correction or deletion of the data or restriction of processing, unless: this proves to be impossible or involves a disproportionate effort.
You have a right to be informed by the responsible party over these recipients.
6. Right of data transferability
You have the right to receive personally identifiable information you provide to the responsible party in a structured, established and machine-readable format. You also have the right to transfer this data to another responsible person without hindrance by the current responsible party, who is processing your personal data, providing that
· the processing of a consent in accordance with Art. 6 (1) lit. a GDPR or Art. 9 (2) lit. a GDPR or on a contract in accordance with Art. 6 (1) lit. b GDPR is based and
· the processing is done using automated procedures.
In exercising this right, you also have the right to have your personal data be transmitted directly from one responsible party to another responsible party, as far as technically feasible. Freedoms and rights of other persons may not be thus affected.
The right of data transferability does not apply to the processing of personal data necessary for the performance of a task in the public interest or in the exercise of official authority delegated to the responsible party.
You have the right at any time, for reasons that arise from your particular situation, to object to the processing of your personal data, which ensued in accordance with Art. 6 (1) lit. e or f GDPR; this also applies to profiling based on these provisions.
The responsible party will no longer process your personal data unless he/she can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or the processing is intended to assert, exercise or defend legal claims.
If your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for the purpose of such advertising; this also applies to profiling insofar as it is associated with such direct advertising.
Notwithstanding of Directive 2002/58/EC, you have the option, in the context of the use of information services, of exercising your right to object through automated procedures that use technical specifications.
8. Disclaimer rights to revoke data protection consent declaration
You have the right to revoke your consent to data protection declaration at any time. The revocation of consent does not affect the legality of the processing carried out on the basis of the consent until the revocation.
You have the right not to be subjected to an exclusively automated processing--including profiling--that will have legal effect or likewise affect you in a similar manner. This does not apply if the decision
(1) if it is required for the conclusion or performance of a contract between you and the responsible party,
(2) is permissible on the basis of legislation of the European Union or its member states to which the responsible party is subject, and that legislation contains appropriate measures to safeguard your rights and freedoms and your legitimate interests, or
However, these decisions may not be based on special categories of personal data under Art. 9 (1) GDPR, unless Art. 9 (2) lit. a or g applies and reasonable measures have been taken to protect the rights and freedoms and your legitimate interests.
In reference to the cases referred to in (1) and (3), the responsible party shall take reasonable steps to uphold the rights and freedoms and your legitimate interests, including at least the right to obtain the intervention of a person by the responsible party, to express his/her own position and bear on challenge of the decision.
10. Right to appeal to a regulatory authority
Without prejudice to any other administrative or legal redress, you shall have the right to appeal to a supervisory authority, in particular in the EU member state of your residence, place of work or place of alleged infringement, if you believe that the processing of your personal data violates GDPR.
The regulatory authority to which the appeal has been submitted shall inform the complainant of the status and results of the complaint, including the possibility of a judicial remedy in accordance with Article 78 of the GDPR.