Source: https://www.obtec.eu/en/footer-menu/data-protection-declaration/
Timestamp: 2019-01-23 14:00:02
Document Index: 530372152

Matched Legal Cases: ['§ 257', '§ 147', 'Art. 17', 'Art. 6', 'Art. 9', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 28', 'Art. 6', 'Art. 6', 'Art. 28', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 28', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 5', 'Art. 25', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 28', 'Art. 6', 'Art. 6', 'Art. 28', 'Art. 6']

Data protection declaration | OBTEC
We, OBTEC GmbH, Hüingser Ring 52, 58710 Menden (hereinafter referred to as OBTEC), thank you for your interest in our website and our offers on our website.
The processing of personal data, such as name, address, e-mail address or telephone number of an affected person, will always occur in accordance with the valid data protection regulations. Through this data protection declaration, we wish to inform you about the type, scope and purpose of the personal data we collect, use and process and explain them to you, if you are affected by the data processing.
Telefon: 0049-2373-89-1166
Telefax: 0049-2373-89-1238
E-Mail: info(at)obtec.eu
5. Deletion and blocking of personal data/ storage period
Should nothing to the contrary be regulated for the processing of the personal data in Chapter B of this data protection declaration, then the data we have saved is deleted, when storage is no longer required and no statutory storage obligations contradict the deletion. If the data of the affected person is not deleted because it is required for other legally permitted purposes, its processing will be restricted. This means that the data will be blocked and not used for other purposes. This applies, for example, to data of the affected person, which must be stored for commercial and taxation law reasons.
According to statutory requirements, storage takes place for six years according to § 257 Para. 1 to the German Commercial Code (account books, inventory, opening balances, annual reports, trade letters, booking receipts, etc.) as well as for ten years according to § 147 Para. 1 of the German Revenue Code (books, recordings, storage reports, booking receipts, commercial and business laws, etc.).
- The recipients or categories of recipients to whom personal data has been or is being published, in particular with recipients in third countries or with international organisations
- If possible, the planned period for which the personal data is saved or, if this is not possible, the criteria for specifying this period
- The existence of a right to correction or deletion of the personal data affecting them or to limitation of processing by the responsible party or a right of revocation against this processing
- The existence of a right to complain to a supervisory authority
- If the personal data is not collected from the affected person: All the available information on the original of the data
- The existence of automated decision-making, including profiling according to Article 22 Para 1 and 4 of the GDPR and - at least in these cases - expressive information on the involved logic and the scope and intended effects of such processing for the affected person
Should one of the above cases be applicable and an affected person wish to instigate the deletion of personal data saved at OBTEC, then they can contact our Data Protection Officer or another employee at any time. We will then ensure that the deletion demand is met immediately.
If OBTEC has published the personal data and if our company is obliged, as the responsible party, to delete the data in accordance with Art. 17 Para. 1 of the GDPR, then we shall be required, subject to the available technology and implementation costs, to take appropriate measures, also of a technical nature, in order to inform other parties responsible for the data processing, who are processing the published personal data, that the affected person has demanded that this other party responsible for the data processing delete all links to this personal data or of copies or replicas of this personal data, if the processing is not required. In this regard, we will instigate the necessary work in individual cases.
- The processing is improper, the affected person refuses the deletion of the personal data and, instead, demands limitation of the use of the personal data.
Should one of the above cases occur and an affected person wish to demand the limitation of personal data saved at OBTEC, then they can contact us or our Data Protection Officer at any time. We will then limit processing.
Each person affected by the processing of personal data shall have the right to demand to obtain the personal data provided to the responsible party by the affected person in a structured, standard and machine-readable format. In addition, the affected person has the right to transfer this data to another responsible party without hindrance by the responsible party to whom the personal data was made available, insofar as the processing is based on an authorisation according to Art. 6 Para. 1 Letter a of the GDPR or Art. 9 Para. 2 Letter a of the GDPR or a contract according to Art. 6 Para. 1 Letter b of the GDPR and processing occurs using automated methods, providing that the processing is not required for the execution of a task, which is in the public interest or in the execution of public authority, which was transferred to the responsible party.
In the case of an objection, OBTEC will cease to process the personal data unless we can prove essential, legitimate reasons for processing, which are superior to the interests, rights and freedoms of the affected person, or the processing serves to make, exert or defend legal claims.
If OBTEC processes personal data in order to perform direct marketing, then the affected person has the right, at any time, to object to the processing of personal data for the purposes of such advertising. This also applies to profiling, insofar as it is connected to such direct marketing. Should the affected person make their objection known to us regarding processing for the purposes of direct marketing, then we will no longer process the personal data for these purposes.
6.8 Automated decisions in individual cases, including profiling
Each person affected by the processing of personal data has the right, as declared by the European Directive and Ordinance authority, not to be subjected to a decision solely made by an automated procedure - including possible profiling - which has a legal impact on them or which impedes them in a similar manner, should the decision
- Be permitted due to legal requirements of the Union or member states, to which the responsible party is subject, and these legal requirements contain reasonable measures to protect the rights, freedoms and valid interests of the affected person or
- Takes place with the express permission of the affected person, OBTEC will take appropriate measures to protect the rights and freedoms and the valid interests of the affected person, which includes at least the right to obtain intervention by a person belonging to the responsible party, to presentation of one's own opinion and to a challenge to the decision.
6.9 Right to withdraw consent under data protection law
Art. 6 I lit. a of the GDPR serves as OBTEC legal basis for processing procedures, in which an authorisation must be obtained for a specific processing purpose. If the processing of personal data, by ourselves or one of our subsidiaries – whose services and/or products are referenced by the inquiry – is required to fulfil a contract in which the affected person is one of the contractual parties, then the processing shall be based on Art. 6 I lit. b of the GDPR. The same applies to processing procedures required to carry out precontractual measures, such as enquiries about our services and products.
If OBTEC is subject to a legal obligation requiring the processing of personal data, then processing will be based on Art. 6 I lit. c of the GDPR. In rare cases, the processing of personal data may be required to protect essential interests of the affected person or another natural person. In this case, processing takes place based on Art. 6 I lit. d of the GDPR.
Finally, processing procedures may be based on Art. 6 I lit. f of the GDPR. This forms the legal basis of processing operations not included in any of the above legal basis, if the processing is required to protect a valid interest of OBTEC or a third party, provided that the interests, basic rights and basic freedoms of the affected person do not outweigh this. We are particularly permitted to perform such processing operations, because they were particularly mentioned by the European jurisdiction (cf. Recital 47 Clause 2 of the GDPR).
9. Data protection when using our contact data / option to revoke
If you have used the contact data stated on our website (e.g. our e-mail address or fax number) to make contact with us, then the personal data transmitted by you will only be used for the purpose intended on making contact. If your inquiry does not refer to services and/or products of OBTEC GmbH (OBTEC), but to those of a subsidiary, this subsidiary will process and answer your inquiry, which is why it must be passed on to them.
The personal data recorded to answer your inquiry or to carry out the contractual relationship shall be stored until the inquiry is completely processed or until termination of the contractual relationship and later deleted (not before expiry of any guarantee periods), unless we are required to store the data longer in accordance with Article 6 Para. 1 s. 1 lit. c GDPR due to storage and documentation duties (from German Commercial Code, tax and revenue code) or you have approved longer storage in accordance with Art. 6 Para. 1 S. 1 lit. a GDPR. In addition, we would like to maintain contact with you even after the order is processed or the contract is ended and inform you of our services and offering in electronic form - e.g. through the e-mail address you gave us. We base data processing for the purposes of customer retention and maintenance, as well as making contact easier, on a legitimate interest as defined by Art. 6 Para. 1 lit. f GDPR, whereby in balancing our interests with your basic rights and freedoms, we also see advantages for you from our maintaining contact, such as the opportunity resulting from timely information about our services and offers to ask us to make an offer on additional building projects or clarify questions directly with our contact partners. You have the right to challenge the data processing occurring on the basis of Art. 6 Para. 1 f) of the GDPR and which is not for direct marketing for reasons resulting from your particular situation at any time. In the case of direct marketing, you can challenge the processing at any time without the need to state reasons.
Data that are processed for customer retention or direct contact in accordance with Art. 6 Para. 1 lit f. GDPR will be processed until the legitimate interest no longer applies and then deleted, but not later than your declaration of objection to processing of the data. Legal retention obligations are also granted with regard to these data.
Recipients of the personal data processed according these regulations are IT service providers (particularly hosting companies), with whom we have appropriate order processing agreements according to Art. 28 of the GDPR, and possibly subsidiaries, whose services and/or products are referred to in your inquiry.
We collect and process the personal data of applicants for the purposes of carrying out the application procedure and thus due to a pre-contract measure in the sense of Art. 6 Para. 1 lit. b GDPR and our valid interest according to Art. 6 Para. 1 lit. f GDPR in the hiring of employees.
Due to the digitalised collection of the incoming applications, recipients of the processed personal data are our IT service provider (particularly hosts), with whom we have completed appropriate order processing agreements in the sense of Art. 28 of the GDPR.
OBTEC reserves the right to change these data protection regulations at any time effective in future. A current version is available on the website. Please visit the website regularly and inform yourself about the valid data protection regulations.
2. Informational use/ collected data/ cookies
(1) When the website is used solely for information purposes, i.e. when you do not make a booking via our website, for example, or provide us with other information, then we will only collect the personal data which your browser sends to our server. If you wish to view our website, then we collect the following data, which we require for technical reasons in order to present our website to you and to guarantee the stability and security (the legal basis is Art. 6 Para. 1 Sentence 1 lit. f GDPR):
Operating system and its desktop
(3) In addition to the above data, cookies will be saved on your computer when you use our website. This occurs on the basis of your consent in accordance with Art. 6 Para. 1 lit. a GDPR, if you agreed to the use of cookies when you accessed our Internet offering. In these cases, a so-called Accept Cookie is set, which has no other content than the remark that the cookie was clicked on and setting of the session cookies has been allowed. This occurs on the basis of our valid interest in accordance with Art. 6 Para. 1 lit. f GDPR in the optimisation and economic operation of our online presence. Cookies are small text files, which are saved on your hard drive and allocated to the browser you use and through which the party setting the cookie (in this case, us) receives specific information. Cookies cannot execute any programs or transmit viruses to your computer. They are used to make the Internet presence more user-friendly and effective overall.
b) Transient cookies are deleted automatically when you close the browser. This particularly includes session cookies. These save a so-called Session ID, with which various enquiries by your browser can be assigned to a joint session. This means that your computer can be recognised again when you returning to our website. The session cookies are deleted automatically when you log out or close the browser.
(5) Recipients of the data processed according to the above paragraphs are IT service providers (particularly hosting companies), with whom we have appropriate order processing agreements according to Art. 28 of the GDPR.
We use Google Analytics, in order to present advertising within the publicity services of Google and its partners to such users as have shown an interest in our online presence or show specific characteristics (e.g. interest in specific topics or products, determined through the visited websites), which we transmit to Google (so-called "remarketing", or "Google Analytics Audiences"). Using the Remarketing Audiences, we also wish to ensure that our advertisements correspond to the potential interest of the users and are not a burden.
When using Google Analytics, we also use the functions of Universal Analytics. Universal Analytics allow us to analyse the activities on our pages across multiple devices (e.g. for access from a laptop and later from a tablet). This is done by the assignment of a user ID to a user as a pseudonym. Such an assignment occurs, for example, when you register for a customer account or log into your customer account. However, no personal data is forwarded to Google. Even if Universal Analytics add additional functions to Google Analytics, this does not mean that there is a restriction of data protection measures, such as IP masking or the browser add-on.
You can also prevent Google Analytics from collecting your data (in particular with mobile terminals that do not permit installation of the above browser software) by clicking on the following link. An opt-out cookie is set, which prevents collection of your data when you visit this website in future: Deactivate Google Analytics
(1) With the voluntary use of our contact forms, you will be asked to state your company, first name and surname, and your e-mail address, where these are marked as mandatory information. You also have the option to provide additional information as needed to optimise your personal reachability and adressability, e.g. telephone number, profession and the reason for your inquiry/contact (message).
(2) When you send your inquiry, we save the IP address you have used and the log-in time. The purpose of this procedure is to be able to prove your inquiry and, if necessary, to clarify possible abuse of your personal data.
(3) The legal basis for the processing of your personal data is, first, the authorisation expressly given by you according to Art. 6 Para. 1 lit. a of the GDPR. Moreover, data processing enables us to answer the initiated inquiry and thus also (pre-) contractual purposes ad defined by Art. 6 Para. 1 lit. b. of the GDPR. Further, data processing takes place on the basis of our legitimate interest in accordance with Art. 6 Para. 1 lit. f of the GDPR in answering your inquiry regarding our services and offers and proof of possible abuse of the e-mail address used for it. To the extent that mandatory information and voluntary information are differentiated, mandatory information as defined by Art. 5 Para. 1 lit. c, Art. 25 of the GDPR is only such data that would typically be transmitted through other inquiry paths – e.g. through the e-mail signature of the inquirer – and for which experience has shown that this data (see Paragraph 2) is necessary for answering the inquiry. For example, we typically need this data to
- assign the inquirer to the correct sales region
- assign the inquirer to the correct salesperson
- purposefully invite the inquirer to trade fairs, seminars, etc.
- send the inquirer certificates for participation in seminars
- be able to send the inquirer printed material
- supply the inquirer with material / samples, etc.
- recommend local wholesalers to the inquirer
Voluntary information, such as profession or the background of the inquiry, help us serve you as well as possible directly without having to ask for more information, as we provide different products and information for different professional categories, for example. A legitimate interest in accordance with Art. 6 Para. 1 lit. f of the GDPR finally consists of using the data you provided to be able to contact you later for the purposes of (potential) customer service and to inform you of our offers and services.
(5) We will erase the data you provided as soon as their storage is no longer required for the above-named purposes. If you have revoked your authorisation for data processing, which is possible at any time with future effect but does not affect data processing up to the time of the revocation, and/or objected to data processing as a legitimate interest (Art. 6 Para. 1 lit. f of the GDPR), we will erase the data without delay. This does not apply only if, and to the extent that another legal reason (e.g. that of pre- and post-contractual fulfillment from Art. 6 Para. 1 lit. b of the GDPR) justifies further processing or legal requirements to maintain the data prevent immediate deletion (Art. 6 Para. 1 lit. c of the GDPR).
(6) Recipients of the data processed according to this regulation are IT service providers (particularly hosting companies), with whom we have appropriate order processing agreements according to Art. 28 of the GDPR, and possibly subsidiaries, whose services and/or products are referred to in your inquiry.
(1) With your authorisation and subject to provision of your e-mail address, you will be able to subscribe to our newsletter, through which we will inform you of our current interesting offers, services and products, news from our company and additional current OBTEC topics. Only your e-mail address is mandatory for subscription to the newsletter.
(2) We use the so-called double opt-in method for subscription to our newsletter. This means that, after you have registered, we will send an e-mail to the stated e-mail address, in which we ask for your confirmation that you wish to subscribe to the newsletter. If you do not confirm your subscription within 72 hours, your information will be blocked and deleted automatically. In addition, we save the IP address you have used and the times of registration and confirmation. The purpose of this procedure is to be able to verify your registration and, if necessary, to clarify possible abuse of your personal data. After you confirm your ordering of the newsletter, we will save the data you have provided in accordance with Para. 2 for the purpose of sending the newsletter and identify possible misuse of your e-mail address according to Para. 2.
(4) The legal basis for the processing of your personal data is, first, the authorisation expressly given by you in accordance with Art. 6 Para. 1 lit. a of the GDPR and with regard to the data processed according to Para. 2 our legitimate interest in accordance with Art. 6 Para. 1 lit. f of the GDPR to identify possible misuse of the e-mail address used for it.
(5) You can revoke your authorisation for sending the newsletter at any time and unsubscribe from the newsletter. You can declare your revocation by clicking the link available in each newsletter e-mail or sending an e-mail to info@dewit-helmond.nl or through a message to the contact data specified in the imprint.
(6) To send the newsletter, your e-mail address will only be saved for length of the desired subscription. We will delete the other data saved according to Para. 1 after a period of max. one month after your unsubscription.
(7) Recipients of the data processed according to this regulation are IT service providers (particularly hosting companies), with whom we have appropriate order processing agreements according to Art. 28 of the GDPR.
No "social plug-ins" are used on our website. We only maintain links to various "social media services". Please refer to the data protection information of the appropriate service regarding the data collected by the service provider.
This website uses Google Maps to depict interactive maps and prepare route descriptions. Google Maps is a map service of Google Inc., 1600 Amphitheatre Parkway, Mountain View, California 94043, USA. This service shows you our location and makes it easier to come it us, if desired. This represents a legitimate interest as defined in Art. 6 Para. 1 lit. f) of the GDPR.
Through use of Google Maps, information about your use of our website, including your IP address and the (start) address entered into the route planner function, is transmitted to a Google server in the USA. When you call up one of our Internet websites that contains Google Maps, your browser makes a direct connection to Google's servers. The map contents are transmitted by Google directly to your browser, and from there included in the website. We therefore have no influence on the extent of the data collected by Google in this way. To the best of our knowledge, this includes at least the following data:
- Date and time of the visit to the website involved,
- Internet address or URL of the called-up website,
You have a right to object to formation of these user profiles, although you must contact Google directly to do so. Please read Google's data protection declaration at https://www.google.com/policies/privacy. The objection option (opt-out) should be reachable over the following link, www.google.com/settings/ads/.
Google LLC, with headquarters in the USA, is certified for the US-European data protection convention “Privacy Shield“, which ensures compliance with the data protection level applicable in the EU according to the (criticised) opinion of the EU Commission.
You will find the terms of use of Google at http://www.google.de/intl/de/policies/terms/regional.html and the additional terms of use for Google Maps at https://www.google.com/intl/de_US/help/terms_maps.html. You will find detailed information on data protection in connection with the use of Google Maps on Google's Internet page (“Google Privacy Policy“): http://www.google.de/intl/de/policies/privacy/
Through use of our website, you declare your agreement to Google's using the data collected from you through Google Maps Route Planner in the way described above and for the purpose described above.