Source: https://www.cimco-international.com/privacy/
Timestamp: 2018-08-21 15:46:11
Document Index: 190565720

Matched Legal Cases: ['Art. 6', 'Art. 9', 'Art. 21', 'Art. 21', 'Art. 8', 'Art. 17', 'Art. 21', 'Art. 6', 'Art. 9', 'Art. 6', 'Art. 20', 'Art. 89', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6']

Privacy - CIMCO - tools company Remscheid
We are very pleased that you are interested in our company. Data protection is particularly important to
the Management at CIMCO - Werkzeugfabrik Carl Jul. Müller GmbH & Co. KG. In principle, it is possible to use CIMCO - Werkzeugfabrik Carl Jul. Müller GmbH & Co. KG website without providing any personal data. However, if a data subject would like to make use of particular services provided by our company via our website, it may be necessary for us to process personal data. If processing personal data is necessary and if there is no legal basis for such data processing, then as a general rule, we will obtain permission from the data subject.
Processing personal data, for example the name, address, e-mail address or telephone number of a data subject, will always be carried out in accordance with the General Data Protection Regulation and with the country-specific data protection regulations applicable for CIMCO - Werkzeugfabrik Carl Jul. Müller GmbH & Co. KG. Our
company would like to use this data protection declaration to inform the public about the nature, extent, and purpose of collecting, using, and processing personal data. Furthermore, data subjects are informed by means of this data protection declaration about the rights they are entitled to.
As the controller, CIMCO - Werkzeugfabrik Carl Jul. Müller GmbH & Co. KG has implemented numerous technical and organisational measures to ensure protection which is as comprehensive as possible of personal data processed via this website. Despite this, in principle, Internet-based data transmissions can have security gaps which means that absolute protection cannot be ensured. For this reason, every data subject has the option of transmitting personal data to us using an alternative method, for example by telephone.
The CIMCO - Werkzeugfabrik Carl Jul. Müller GmbH & Co. KG data protection declaration is based on the terms used by the European legislator when passing the General Data Protection Regulation (GDPR). Our data rotection declaration is intended to be easy to read and understand both for the general public and also for our customers and business partners. To ensure this happens, we would like to explain the terms used beforehand.
Personal data is all the information which refers to an identified or identifiable natural person (in the following “data subject”). A natural person is considered to be identifiable if they can be identified directly or indirectly,
in particular through assignment to an ID such as a name, to an identification code, to location data, to an online ID or to one or more particular characteristics, which can be identified as an expression of the physical, physiological, genetic, psychic, economic, cultural or social identity of this natural person.
The data subject is every identified or identifiable natural person whose personal data is processed by the controller.
Processing is every process executed with or without the assistance of automated procedures or every such sequence of procedures in association with personal data, such as acquiring, collecting, organising, sorting, saving, adapting or changing, reading, querying, using, publishing through transmission, distribution or another form of provision, comparison or linking, limiting, deleting or destroying.
Limiting processing is marking saved personal data with the aim of limiting its future processing.
Profiling is any kind of automated processing of personal data which consists of using this personal data to evaluate specific personal aspects which refer to a natural person, in particular, to analyse or predict aspects regarding job performance, economic situation, health, personal preferences, interests, reliability, behaviour, location or change of location of this natural person.
Pseudonymisation is processing personal data in such a ways which means the personal data can no longer be assigned to a specific data subject without resorting to additional information, providing this additional information is stored separately and is subject to technical and organisational measures which ensure that the personal data cannot be assigned to an identified or identifiable person.
The controller is the natural or legal person, public authority, agency or any other body who makes decisions alone or together with others regarding the purpose and means of processing personal data. Where the purposes and means of processing are determined by Union law or the law of Member States, the controller or the specific criteria for its nomination may be provided for by the Union law or Member State law.
Recipient is a natural or legal person, public authority, agency or any other body to whom data are disclosed, whether a third party or not. Public authorities which may receive data in the framework of a particular inquiry in accordance with Union law or Member State law shall not be regarded as recipients.
Third party is a natural or legal person, public authority, agency or another body other than the data subject, controller, processor and persons who, under the direct authority of the controller or the processor, are uthorised to process the personal data.
Consent is any freely given specific and informed indication of his or her wishes regarding the specific case in the shape of a declaration or other unambiguous confirmatory act by which the data subject signifies his or her agreement to personal data relating to him or her being processed.
The controller within the meaning of the General Data Protection Regulation, other data protection laws
in the Member States of the European Union and other regulations pertaining to data protection is:
CIMCO - Werkzeugfabrik Carl
Jul. Müller GmbH & Co. KG
Every data subject can contact our data protection officer directly with any questions or suggestions regarding data protection.
CIMCO - Werkzeugfabrik Carl Jul. Müller GmbH & Co. KG websites use cookies. Cookies are text files which are filed and saved by an Internet browser on a computer system.
Numerous websites and servers use cookies. Many cookies contain a so-called cookie ID: A cookie ID is a clear identification of the cookie. It consists of a series of characters which can be assigned to the specific Internet browser that the cookie was saved in by websites and servers. This allows the websites and servers visited to distinguish between the individual browser of the data subject and other Internet browsers. A specific Internet browser can be recognised by the unique cookie ID and can be identified.
By using cookies, CIMCO - Werkzeugfabrik Carl Jul. Müller GmbH & Co. KG can make more user-friendly
services available to the users of this website which would not be possible without placing cookies.
A cookie allows us to optimise the information and offers on our website in the user's best interests. Cookies allow us, as already mentioned, to recognise the users of our website. The purpose of this recognition is to make it easier for users to use our website. For example, the user of a website which uses cookies does not have to enter their login data every time they visit the site, because this is handled by the website and the cookie saved on the user's computer system. Another example is the cookie of a basket in an online shop. The online shop remembers
the items which a customer has placed in the virtual basket by using a cookie.
The data subject can prevent cookies being placed by our website at any time through a corresponding setting on the Internet browser used and can thereby permanently prevent cookies being placed. Furthermore, cookies that have already been placed can be deleted using an Internet browser or other software at any time. This is possible in all popular Internet browsers. If the data subject deactivates cookies being placed in the Internet browser used, then it is possible that not all the functions of our websites will be fully useable.
The CIMCO - Werkzeugfabrik Carl Jul. Müller GmbH & Co. KG website collects a range of general data and information every time that the website is accessed by a data subject or an automated system. This general data and information is saved in the log files on the server. The (1) types of browser used and version, (2) the operating
system used by the accessing system, (3) the website from which an accessing system gets to our website (so-called referrer), (4) the subsites which direct an accessing system to our website, (5) the date and time of accessing the website, (6) an Internet protocol address (IP-address), (7) the Internet Service Provider of the accessing system and (8) other similar data and information can be collected which are used to ward off danger in the event of attacks on our information technology systems.
When using this general data and information, CIMCO - Werkzeugfabrik Carl Jul. Müller GmbH & Co. KG does not draw any conclusions on the data subject. In fact this information is used to (1) correctly deliver the content of our website, (2) optimise the content of our website and the advertising for it, (3) ensure that our information technology systems and the technology of our website are always working, as well as (4) to provide the law enforcement authorities with the necessary information for prosecution in the event of a cyber attack. For this
reason, CIMCO - Werkzeugfabrik Carl Jul. Müller GmbH & Co. KG evaluates this data and information acquired anonymously on the one hand statistically and on the other hand with the aim of increasing the data protection and data security in our company, with the ultimate aim of providing an optimal level of protection for the personal data processed by us. The anonymous data from the server logfiles is stored separately from all the personal data provided by the data subject.
On the CIMCO - Werkzeugfabrik Carl Jul. Müller GmbH & Co. KG website, the users are given the opportunity to subscribe to our company's newsletter. What personal data is transmitted to the controller when subscribing to the newsletter depends on what is entered in the input screen used for this purpose.
CIMCO - Werkzeugfabrik Carl Jul. Müller GmbH & Co. KG informs its customers and business partners at
regular intervals about company offers in a newsletter. As a general rule, our company newsletter can be only be received by the data subject if (1) the data subject has a valid e-mail address and (2) the data subject has egistered to receive the newsletter. For legal reasons, to receive the newsletter, a confirmation e-mail is sent out in the double-opt-in process to an e-mail address provided by a data subject for the first time. This confirmation e-mail is to confirm whether the owner of the e-mail address authorised receipt of the newsletter as the data subject.
When registering for the newsletter, we also save the IP address provided by the Internet Service Provider (ISP) of the computer system used by the data subject at the time of registration as well as the date and time of registration. It is necessary to acquire this data to be able to trace any possible misuse of the e-mail address
of a data subject at a later point in time and is therefore used to legally protect the controller.
The personal data collected in regard to registration for the newsletter will only be used to send out the newsletter. Furthermore, subscribers to the newsletter can be informed by e-mail providing this is necessary for operating the newsletter service or this type of registration is required, for example as could be the case with changes to the newsletter offering or changes to technical conditions. No personal data collected in regard to the newsletter service will be passed on to any third party. The subscription to our newsletter can be cancelled at any time. The consent to saving personal data which the data subject issued us with to send out the newsletter can be revoked at any time. There is a corresponding link in every newsletter for the purpose of revoking consent. Furthermore there is the option of unsubscribing directly on the website of the controller for newsletter distribution or the controller can be informed of this in other ways.
The CIMCO - Werkzeugfabrik Carl Jul. Müller GmbH & Co. KG newsletters contain so-called tracking pixels. A tracking pixel is miniature graphics embedded in such e-mails which are sent in HTML format to allow recording of a log file and log file analysis. This then allows a statistical evaluation of the success or lack of success of
online marketing campaigns. On the basis of the embedded tracking pixel, CIMCO - Werkzeugfabrik Carl Jul. Müller GmbH & Co. KG can see when an e-mail has been opened by a data subject and which links in the e-mail that the data subject opened.
Personal data obtained from such tracking pixels in the newsletters is saved and evaluated by the controller to optimise newsletter dispatch and to adapt the content of future newsletters even better to the interests of the data subject. This personal data will not be passed onto third parties. Data subjects are entitled at any time to revoke this specific, separate informed consent given using the double-opt-in process. After revocation, this personal data will be deleted by the controller. CIMCO - Werkzeugfabrik Carl Jul. Müller GmbH & Co. KG will
automatically interpret unsubscribing from receiving the e-mail as a revocation.
Due to statutory provisions, the CIMCO - Werkzeugfabrik Carl Jul. Müller GmbH & Co. KG website contains information which quickly allows contact to be made electronically with our company as well as indirect communication with us, which also includes a general address for so-called electronic mail (e-mail address). If a data subject makes contact with the controller via e-mail or a contact form, then the personal data transmitted by the data subject will be automatically saved. Personal data made available in this way to the controller on a voluntary basis will be saved for the purpose of processing or making contact with the data subject. This personal data will not be passed on to third parties.
9. Routine deletion and locking of personal data
The controller only processes and saves personal data from the data subject for the time period required to reach the purpose of saving it or, as provided for where this is subject to laws or regulations from the European legislator or another legislator that the controller is subject to.
If the storage purpose is cancelled or if a storage period is limited by the European legislator or another responsible legislator expires, then the personal data is routinely blocked or deleted in accordance with statutory provisions.
10. Rights of the datasubject
Every data subject has the right granted by the European legislator to request a confirmation from the controller as to whether they will process respective personal data. Should a data subject wish to make use of this right to
confirmation, then they can contact a member of staff of the controller at any time.
Every data subject affected by personal data being processed has the right granted by the European legislator at any time to obtain information free of charge from the controller on personal data saved about them and to receive a copy of this information. Furthermore, the European legislator must provide disclosure to the data subject on the following information:
· the recipients or categories of recipients to whom the personal data was disclosed, in particular with regards to recipients in third countries or at international organisations
· if possible, the planned duration for which the personal data will be saved, or, if this is not possible, the criteria for defining this period
· the existence of a right to correct or delete the personal data which they are the subject of, or to limitation of processing by the controller, or a right to object to this processing
· the existence of a right to complain to a supervisory body
· if the personal data is not collected from the data subject: All available information about the source of the information
· the existence of automated decision-making including profiling in accordance with Section 22 paragraph 1 and 4 General Data Protection Regulation and - at least in these cases - meaningful information on the logic involved as well as the scope and desired effects of such processing for the data subject
· Furthermore, the data subject is entitled to information about whether personal data has been transmitted to a third country or an international organisation. If this is the case, then the data subject also has the right to information about suitable guarantees in connection with the transmission.
If a data subject would like to make use of this right to information, then they can contact the data protection officer of the controller.
Every data subject affected by personal data being processed has the right granted by the European legislator to demand that incorrect personal data concerning them be immediately corrected. Furthermore, the data subject has the right, taking into consideration the purposes of processing, to demand that incomplete personal data be completed – including by using a supplementary declaration.
If a data subject would like to make use of this right to correction, then they can contact a member of staff of the controller at any time.
Every data subject affected by personal data being processed has the right granted by the European legislator to demand that personal data concerning them is immediately deleted, where one of the following reasons applies and inasmuch as processing is not necessary:
· The personal data was collected for a purpose or processed in another way that it is no longer required for.
· The data subject revokes their consent that processing in accordance with Art. 6 clause 1 letter a GDPR or Art. 9 clause 2 letter a GDPR was based on and there is no other legal basis for processing.
· In accordance with Art. 21 clause 1 GDPR, the data subject objects to the processing and there is no overriding legitimate reason for processing, or the data subject objects to the processing in accordance with Art. 21 clause 2
· The personal data has been illegally processed.
· The deletion of personal data is necessary to meet a legal obligation according to Union law or Member State law that the controller is subject to.
· The personal data was collected with reference to services offered by the information company in accordance with Art. 8 clause 1 GDPR.
Inasmuch as one of the above mentioned conditions is met and a data subject would like to demand the cancellation of personal data that is saved at CIMCO - Werkzeugfabrik Carl Jul. Müller GmbH & Co. KG, then they can contact a member of staff of the controller at any time. The staff member of CIMCO - Werkzeugfabrik Carl Jul. Müller GmbH & Co. KG will arrange for the request for deletion to be immediately dealt with.
If the personal data was published by CIMCO - Werkzeugfabrik Carl Jul. Müller GmbH & Co. KG, and if our company is obligated to delete the personal data as the controller in accordance with Art. 17 clause 1 GDPR, then taking the available technology and implementation costs into account, CIMCO - Werkzeugfabrik Carl Jul. Müller GmbH & Co. KG will take suitable measures, including technical ones, to inform others who are responsible for data processing who process the published personal data that the data subject has demanded from this other data controller that all links to this personal data or copies or replications of this personal data are deleted, providing processing is not necessary. The staff member of CIMCO - Werkzeugfabrik Carl Jul. Müller GmbH & Co. KG will arrange for the necessary steps to be taken in the individual case.
e) Right to limiting processing
Every data subject affected by personal data being processed has the right granted by the European legislator to demand that processing their data be limited if one of the following conditions applies.
· The accuracy of the personal data is disputed by the data subject, and that for a period, which allows the controller to check whether the personal data is correct.
· Processing is illegal, the data subject rejects deletion of the personal data and instead demands that use of personal data be limited.
· The controller no longer requires the personal data for the purpose of processing, the data subject however needs it to assert, exercise or defend legal rights.
· The data subject has objected to processing in accordance with Art. 21 clause 1 GDPR and it has not yet been decided whether the legitimate reasons of the controller override those of the data subject.
Inasmuch as one of the above mentioned conditions is met and a data subject would like to demand the limitation of personal data that is saved at CIMCO - Werkzeugfabrik Carl Jul. Müller GmbH & Co. KG, then they can contact a member of staff of the controller at any time. The staff member of CIMCO - Werkzeugfabrik Carl Jul. Müller GmbH & Co. KG will arrange for processing to be limited.
Every data subject affected by personal data being processed has the right granted by the European legislator to receive personal data concerning them which the data subject made available to a controller, in a structured, common and machine-readable format. They also have the right to transmit this data to another controller without being impeded by the controller to whom the personal data was made available, providing processing is based on consent in accordance with Art. 6 clause 1 letter a GDPR or Art. 9 clause 2 letter a GDPR or on a
contract in accordance with Art. 6 clause 1 letter b GDPR and that processing is carried out using automated procedures, providing processing is not required for performance of a task which is in the public interest or to exercise public authority which the controller was entrusted with.
Furthermore, the data subject has the right when exercising their right to data portability in accordance with Art. 20 clause 1 GDPR to effect that the personal data is transmitted directly from one controller to another controller, as far as this is technically feasible and providing this does not prejudice the rights and freedoms of other people.
The data subject can turn to the data protection officer at CIMCO - Werkzeugfabrik Carl Jul. Müller GmbH & Co. KG to assert their right to data portability.
Every data subject affected by personal data being processed has the right granted by the European legislator, for reasons which arise from their particular circumstances, to object at any time to personal data concerning them from being processed, which is being done on the basis of Clause 6 paragraph 1 letter e or f GDPR. This also applies to profiling based on these regulations.
CIMCO - Werkzeugfabrik Carl Jul. Müller GmbH & Co. KG will no longer process personal data in the event of revocation, unless we can provide compelling and legitimate reasons which outweigh the interests, rights and freedoms of the data subject, or if the processing is to assert, exercise or defend legal rights.
If CIMCO - Werkzeugfabrik Carl Jul. Müller GmbH & Co. KG processes personal data for direct advertising purposes, then the data subject has the right to object at any time to the personal data being processed for the purpose of such advertising. This also applies to profiling, inasmuch as it is associated with such direct advertising. If the data subject objects to CIMCO - Werkzeugfabrik Carl Jul. Müller GmbH & Co. KG processing for the purposes of direct advertising, then CIMCO - Werkzeugfabrik Carl Jul. Müller GmbH & Co. KG will no longer process the personal data for these purposes.
In addition to that, the data subject has the right for reasons which arise from their particular situation to object to processing of personal data which concerns them, which is being carried out by CIMCO - Werkzeugfabrik Carl Jul. Müller GmbH & Co. KG for scientific or historic research purposes or for statistical purposes in accordance with Art. 89 clause 1 GDPR, unless such processing is required to fulfil a task which is in the public interest.
To exercise the right to objection, the data subject can directly contact the data protection officer of CIMCO - Werkzeugfabrik Carl Jul. Müller GmbH & Co. KG or alternatively any staff member. The data subject is also free in association with the use of services from the information company, irrespective of Directive 2002/58/EC, to exercise their right to object via an automated procedure in which technical specifications are used.
h) Automated decisions in the individual case including profiling
Every data subject affected by personal data being processed has the right granted by the European legislator to not be subject to a decision only based on automatic processing – including profiling – which has a legal effect towards them or significantly impedes them in a similar way, providing the decision (1) is not required for the conclusion or fulfillment of a contract between the data subject and the controller or (2) is necessary on the basis of legislation by the Union or the Member State that the controller is subject to and this legislation contains appropriate measures to secure the rights and freedoms as well as legitimate interests of the data subject or (3) with express permission from the data subject.
If the decision (1) for concluding or fulfilling a contract between the data subject and the controller is required or (2) if it is made with express permission from the data subject, then CIMCO - Werkzeugfabrik Carl Jul. Müller
GmbH & Co. KG will take suitable measures to protect the rights and freedoms as well as legitimate interests of the data subject, which involves at least the right to effect the intervention of a person on the side of the controller, to represent their own point of view and to challenge the decision.
If the data subject would like to assert rights with reference to automatic decisions, then they can contact a member of staff of the controller at any time.
Every data subject affected by personal data being processed has the right granted by the European legislator to revoke consent given to process personal data at any time.
If the data subject would like to assert their right to revoking consent, then they can contact a member of staff of the controller at any time.
11. Data protection in applications and the application process
The controller acquires and processes the personal data from applicants for the purpose of handling the application procedure. Processing can also be carried out electronically. This is in particular the case if an applicant transmits the corresponding application documents electronically, for example by e-mail or via a web form on a website to the controller. If the controller concludes a contract of employment with the data subject, then the data transferred will be saved for the purpose of processing the employment relationship, taking statutory provisions into account. If no employment contract is concluded by the controller with the data subject, then the application documents will be automatically deleted two months after notification of the rejection decision, providing there are no legitimate interests of the controller which contradict deletion. Other legitimate interests within this meaning are for example a burden of proof in a lawsuit according to the German General Equal Treatment Act (AGG).
12. Data protection regulations for application and use of Google Analytics (with anonymisation function)
The controller has integrated the component Google Analytics (with anonymisation function) on this website. Google Analytics is a Web analysis service. Web analysis is the acquisition, collection, and evaluation of data about the behaviour of website visitors. A web analysis service acquires among other things data about which website a data subject accessed a website from (so-called referrer), which subpages of the website are opened, or how often and for what duration a subpage was looked at. Web analysis is primarily used to optimise a website and for cost-benefit analysis of Internet advertising.
The operating company of Google-Analytics components is Google Inc., 1600 Amphitheatre Pkwy, Mountain
The controller uses the suffix "_gat._anonymizeIp" for Web analysis via Google Analytics. This suffix is used to abbreviate and anonymise the IP address of the Internet connection of the data subject if our website is accessed from a Member State of the European Union or from another signatory state to the EEA Treaty.
The purpose of the Google Analytics component is to analyse the flow of visitors to our website. Google uses the data and information obtained among other things to evaluate the use of our website to compile online reports for us which show the activities on our website, to allow us to provide additional services associated with using
Google Analytics places a cookie on the information technology system of the data subject. It has already been explained what cookies are. By placing the cookie, Google is able to analyse the use of our website. By opening one of the individual pages of this website which is run by the controller and on which a Google Analytics
component was integrated, the Internet browser on the information technology system of the data subject is automatically caused by the respective Google Analytics components to transmit data to Google for the purpose of online analysis. As part of this technical procedure, Google finds out about personal data, such as the IP address of the data subject, which Google then uses among other things to find out the origin of the visitor and clicks, and as a result of which, to allow commission to be calculated.
The cookie is used to save personal information, such as the access time, the location that access was made from, and the frequency of visits to our website by the data subject. Every time our website is visited, this personal data, including the IP address of the Internet connection used by the data subject, is transmitted to Google
in the United States of America. This personal data is saved by Google in the United States of America. Under certain circumstances, Google may pass this personal data acquired using the technical procedure to third parties.
The data subject can prevent cookies being placed by our website, as already shown above, at any time using an appropriate setting on the Internet browser used and thereby permanently prevent cookies being placed. A setting like this on the Internet Browser used would also prevent Google placing a cookie on the information
technology system of the data subject. In addition to that, a cookie already placed by Google Analytics can be deleted at any time via the Internet browser or other software programs. Furthermore, there is the option for the data subject to object to and prevent acquisition of the data generated by Google Analytics based on the use of this website as well as this data being processing by Google. To do this, the data subject has to download and install a Browser-Add-On using the link: https://tools.google.com/dlpage/gaoptout.
This Browser-Add-On informs Google Analytics via JavaScript that no data and information on the visits of websites is allowed to be transmitted to Google Analytics. The installation of the Browser-Add-On is regarded as being an objection by Google. If the information technology system of the data subject is deleted, formatted or newly installed at a later point in time, then the data subject will have to reinstall the Browser Add-On to deactivate Google Analytics. If the Browser-Add-On is deinstalled or deactivated by the data subject or another person attributed to their area of control, then there is the option of a new installation or renewed activated of the Browser-Add-On.
You will find further information on Google and their applicable data protection regulations at https://www.google.de/intl/de/policies/privacy/ and at https://www.google.com/analytics/terms/gb.html. Google Analytics is explained in greater detail using this link:
13. Data protectionregulations when using YouTube
The controller has integrated YouTube components on this website. YouTube is an Internet video portal which allows video publishers to post video clips free of charge and allows other users to watch, evaluate, and comment on them also free of charge.
YouTube enables the publication of all types of videos, which is why not only complete films and TV programs, but also music videos, trailers, or home-made videos from users can be accessed via the Internet portal.
YouTube's operating company is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. YouTube, LLC is subsidiary of Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.
Every time one of the individual pages of this website is opened which is operated by the controller and which has a YouTube component (YouTube video) integrated in it, then the Internet browser on the information technology system of the data subject is automatically caused by the respective YouTube component to download a representation of the corresponding YouTube component from YouTube. You will find further information on YouTube at https://www.youtube.com/intl/en/yt/about/. Within the context of this technical procedure, YouTube and Google find out which actual subpage of our website is being visited by the data subject.
If the data subject is logged onto YouTube at the same time, then when a subpage is opened that contains a YouTube video, YouTube will identify which actual subpage of our website the data subject is visiting. This information is collected by YouTube and Google and assigned to the respective YouTube account of the data subject.
YouTube and Google are then always given information by the YouTube components that the data subject has
visited our website if the data subject is logged onto YouTube at the same time as opening our website which will happen regardless of whether the data subject has clicked on a YouTube video or not. If the data subject does not want information transferred like this to YouTube and Google, then they can prevent the transmission by logging out of their YouTube account before accessing our website.
The data protection regulations published by YouTube which can be seen at https://www.google.de/intl/de/policies/privacy/ will provide an insight into the acquisition, processing and use of personal data by YouTube and Google.
Art. 6 I lit. a GDPR provides our company with a legal basis for processing operations, for which we obtain consent for a specific processing purpose. If processing personal data is required to fulfil a contract, where the data subject is one of the contracting parties, as is the case for example in processing operations necessary for delivering goods or providing another service or consideration, then the processing is based on Art. 6 I lit. b GDPR. The same applies for such processing operations which are necessary to implement pre-contractual
measures, for example in cases of enquiries about our products or services. If our company is subject to a legal obligation which requires processing of personal data, for example meeting tax obligations, then the processing is
based on Art. 6 I lit. c GDPR. In rare cases, processing of personal data could be necessary to protect vital interests of the data subject or another natural person. This would be the case, for example, if a visitor to our premises should be injured and their name, their age, their health insurance data or other vital information needs to be passed onto a doctor, a hospital or other third party. In this case processing would be based on Art. 6 I lit. d GDPR.
Lastly, processing operations could be based on Art. 6 I lit. f GDPR. Processing operations are based on this legal basis which are not covered by any of the above mentioned legal foundations if the processing is required to
protect a legitimate interest of our company or a third party, providing the interests, basic rights and basic freedoms of the data subject do not prevail.
We are particularly allowed to carry out such processing operations because they are specifically mentioned by the European legislators. They considered that a legitimate interest could be assumed if the data subject is a customer of the controller (Recital 47 line 2 GDPR). If required, a comparison of the data is carried out based on the pertinent EU directives and EU sanction lists on combating terrorism.
15. Legitimate interests in processing which are pursued by the controller or a third party
If processing personal data is based on Article 6 I lit. f GDPR, then our legitimate interest is carrying out our business for the benefit of the well-being of our staff members and our shareholders.
16. Time period for which the personal data is saved
The criterion for the time period that personal data is saved is the respective legal retention period. Once the deadline has expired, the data is routinely deleted, providing it is no longer required to fulfil or initiate the contract.
17. Statutory orcontractual provisions for making personal data available; necessity for
contract conclusion; obligation of data subject to make personal data available; possible consequences of not making data available
We are informing you that making personal data available is in part a statutory requirement (e.g. tax law) or can arise from contractual regulations (e.g. providing information on contracting party). Sometimes it is necessary for a data subject to make personal data available to us to conclude a contract which then consequently needs to be processed by us. For example, the data subject is obliged to make personal data available to use when our company concludes a contract with them.
The consequence of not making personal data available would be that the contract could not be concluded with the data subject. Before the data subject makes personal data available, they need to contact one of our staff members. Our staff member will inform the data subject in the individual case whether making personal data available is a statutory or contractual requirement, or is necessary for concluding the contract, whether there is an obligation to make personal data available and what consequences there would be of not making
personal data available.
18. Existence of automatic decision-making
As a responsible company, we do not carry out any automatic decision-making or profiling.