Source: https://www.candy-polstermoebel.de/en/data-protection/
Timestamp: 2019-07-22 16:43:19
Document Index: 542352007

Matched Legal Cases: ['Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 15', 'Art. 16', 'Art. 17', 'Art. 20', 'Art. 6', 'Art. 9', 'Art. 6', 'Art. 20', 'Art. 21', 'Art. 6', 'Art. 89', 'Art. 6', 'Art. 6', 'Art. 15', 'Art 16', 'Art. 17', 'Art. 18', 'Art. 21', 'Art 20', 'Art. 6', 'Art. 6', 'Art. 13', 'Art. 88', 'Art. 6', 'Art. 7', 'Art. 15', 'Art 16', 'Art. 17', 'Art. 18', 'Art. 21', 'Art 20']

Data protection - 3C Candy Polstermöbel Rheda-Wiedenbrück
With the following information, we would like to give you, the “data subject”, an overview of how we process your personal data and inform you of your rights arising from the data protection laws. In principle, it is possible to use our website without entering personal data. However, if you would like to make use of specific services provided by our company via our website, the processing of personal data could become necessary. If the processing of personal data is necessary and there is no legal basis for such processing, we shall generally obtain consent from you.
Personal data, for example, your name, address or email address, will always be processed in compliance with the General Data Protection Regulation (GDPR) and in accordance with the country-specific data protection provisions that apply to “3C Holding GmbH”. Through this Privacy Policy, we could like to inform you of the scope and purpose of the personal data that we collect, use and process.
As the data controller responsible for data processing, we have implemented numerous technical and organisational measures to ensure the most complete protection possible for the personal data processed via this website. However, Internet-based transmissions of data may be vulnerable in terms of security in general, so absolute protection cannot be guaranteed. For this reason, you are welcome to also transmit personal data to us in other ways, for example, by telephone or by post.
3C Holding GmbH Am Jägerheim 1c, 33378 Rheda-Wiedenbrück, Germany
Telephone: 05242/9309-906 Telefax: 05242/9309-919 Email: info@3c-gruppe.de
Managers of the data controller: Jürgen Kleinegesse, Markus Kemming
Telephone: 05221/87292-0 Telefax: 05221/87292-49 Email: datenschutz@3c-gruppe.de
For any questions or suggestions regarding data protection, you can contact our Data Protection Officer directly at any time.
The Privacy Policy is based on the terms used by the European legislative and regulatory authority in the General Data Protection Regulation (GDPR). Our Privacy Policy should be easy to read and understand for the public as well as for our customers and business partners. In order to guarantee this, we would like to explain the terms used in advance.
We shall use the following terms in this Privacy Policy, among others:
Personal data is all information that refers to an identified or identifiable natural person. A natural person is considered identifiable if they can be directly or indirectly identified, in particular by assignment to an identifier such as a name, assignment to an identification number, assignment to location data, assignment to an online identifier or assignment to one or several particular features that express the physical, physiological, genetic, psychological, economic, cultural or social identity of this natural person.
The data subject is any identified or identifiable natural person whose personal data is processed by the data controller responsible for the processing (our company).
Processing is any operation or set of operations carried out in connection with personal data, with or without the aid of automatic processes, such as collection, recording, organisation, arrangement, storage, adjustment or amendment, reading, retrieval, use, disclosure by transmission, distribution or another form of provision, comparison or linking, restriction, deletion or destruction.
The restriction of processing is the labelling of stored personal data with the objective of limiting its future processing.Profiling Profiling is any type of automated processing of personal data in which there is the possibility that this personal data is used to evaluate certain personal aspects that relate to a natural person, in particular to analyse or predict aspects regarding job performance, economic situation, health, personal preferences, interests, reliability, behaviour, place of residence or change in location of this natural person.
Pseudonymisation is the processing of personal data in a manner in which the personal data can no longer be assigned to a specific data subject without the involvement of additional information, provided that this additional information is stored separately and technical and organisational measures are in place to ensure that the personal data is not assigned to an identified or identifiable natural person.
The data processor is a natural or legal person, authority, establishment or other body which processes personal data on behalf of the data controller.
The recipient is a natural or legal person, authority, establishment or other body to which personal data is disclosed, regardless of whether this is a third party or not. Authorities which may receive personal data within the scope of a specific investigation in accordance with European Union law or the law of the Member States are not considered recipients.
A third party is a natural or legal person, authority, institution or body other than the data subject, the data controller, the data processor and the persons who are authorised to process personal data under the direct responsibility of the data controller or data processor.
Consent is any expression of wishes given by the data subject voluntarily, unambiguously and in an informed manner for the specific instance, in the form of a statement or other clearly affirmative action, with which the data subject shall be understood to have agreed with the processing of the personal data concerning them.
Art. 6 para. 1 letter a GDPR shall serve as the legal basis for processing operations carried out by our company for which we obtain consent for a specific processing purpose.
If the processing of personal data is required to fulfil a contract to which you are a contracting party, as is the case, for example, in processing operations that are necessary for the delivery of goods or the performance of another service or service in return, the processing shall be based on Art. 6 para. 1 letter b GDPR. The same applies for processing operations required for the performance of pre-contractual measures, for example, in the case of enquiries about our products or services.
If our company is subject to a legal obligation for which the processing of personal data becomes necessary, for example, to fulfil fiscal obligations, the processing shall be based on Art. 6 para. 1 letter c GDPR.
In rare cases, the processing of personal data could be necessary to protect the vital interests of the data subject or of another natural person. For example, this applies if a visitor to our company is injured and their name, age, health insurance information or other vital information must be given to a doctor, hospital or other third party. In this case, the processing would be based on Art. 6 para. 1 letter d GDPR.
Finally, processing operations could be based on Art. 6 para. 1 letter f GDPR. This is the legal basis for processing operations which are not covered by any of the aforementioned legal bases if the processing is necessary in order to preserve a legitimate interest of our company or of a third party and the interests and basic rights and freedoms of the data subject do not outweigh this. Such processing operations are permissible for us, in particular because they have been specifically mentioned by the European legislator. In this respect, they believe that a legitimate interest could be assumed if you are a customer of our company (Recital 47, sentence 2 GDPR).
This website uses SSL or TLS encryption to ensure the security of data processing and to protect the transmission of confidential information, for example, order information, login data or contact enquiries that you send to us as the operator. You can recognise an encrypted connection by the presence of “https://” instead of “http://” in the address line of your browser and the padlock symbol in your browser bar.
If SSL or TLS encryption is activated, data which you transmit to us cannot be read by third parties.
If you use our website for purely informational purposes, so if you do not register or transmit any other information to us, we shall only collect the data that your browser transmits to our server (in so-called “server log files”). Each time that a page is opened by you or an automated system, a range of general data and information is collected by our website. This general data and information is stored in the server’s log files. The following may be collected:
1. Browser type and versions used,
2. The operating system used by the system accessing the website,
3. The website from which the accessing system arrived on our website (so-called referrer),
4. The subpages that are visited on our website by an accessing system,
When using this general data and information, we do not identify you personally. Rather, this information is used to
2. Optimise the content of our website as well as the advertising for this,
3. Ensure the permanent functionality of our IT system and the technology used for our website as well as
4. Provide law enforcement authorities with the information necessary for criminal prosecution in the event of a cyber-attack.
We therefore evaluate the data and information collected on the one hand, for statistical purposes, and on the other, with the objective of increasing data protection and data security in our company in order to ultimately guarantee an optimal level of protection for the personal data that we process. The anonymous data of the server log files is stored separately from all of the personal data provided by a data subject.
The legal basis for the data processing is Art. 6 para. 1 sentence 1 letter f GDPR. Our legitimate interest results from the purposes for data collection listed above.
7.1 General information regarding cookies
We use cookies on our website. These are small files which your browser automatically generates and which are stored on your IT system (laptop, tablet, smartphone, etc.) if you visit our website. Cookies do not cause any damage to your end device and they do not contain viruses, Trojans or other malware.
Information is filed in the cookie which is associated with the respective specific end device used. However, this does not mean that we directly become aware of your identity.
On the one hand, the use of cookies serves to make the use of our website more comfortable for you. We use so-called session cookies to recognise that you have already visited individual pages of our website. These are automatically deleted after leaving our website.
Furthermore, to optimise user-friendliness, we use temporary cookies, which are stored on your end device for a specific, set period of time. If you visit our website again to use our services, it is automatically recognised that you have visited us before and which information and settings you have entered, so that you do not have to enter these again.
On the other hand, we use cookies to record statistics about the use of our website and to evaluate these for the purposes of optimising our website for you. These cookies enable us to automatically recognise that you have already visited us when you next visit our website. These cookies are deleted automatically after a set amount of time.
The data processed by cookies is required for the purposes listed to preserve our legitimate interests as well as those of third parties in accordance with Art. 6 para. 1 sentence 1 letter f GDPR.
Most browsers accept cookies automatically. However, you can adjust the settings of your browser so that cookies are not stored on your computer or so that a notification is always displayed before a new cookie is placed. The complete deactivation of cookies may, however, mean that you cannot use all of the functions of our website.
On our website, we use Google Analytics, a web analytic service by Google Inc. (www.google.de/intl/de/about/) (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter referred to as "Google"). In this context, a usage profile is generated under a pseudonym and cookies (see Clause 4) are used. The information generated by the cookie regarding your use of this website, such as
3. Referrer URL (the website visited before),
are transmitted to a Google server in the USA and stored there. The information is used to evaluate the use of the website, to compile reports on website activities and to provide further services linked with website and Internet use for the purposes of market research and the needs-oriented design of this website. This information shall also be transmitted to third parties if applicable, provided that this is provided for in law or if third parties process this on our behalf. In no event will your IP address be merged with other Google data. The IP addresses are anonymised so that it is not possible to assign them (IP masking).
You can prevent the installation of cookies using the relevant settings in your browser software; however, please note that, in this case, you may not be able to use all of the functions of this website in full.
Google Analytics is used in the interest of the optimisation and needs-oriented design of our website. This represents a legitimate interest within the meaning of Art. 6, para. 1 letter f GDPR.
Furthermore, you can prevent the collection of data generated by the cookie and related to your use of the website (incl. your IP address) as well as the processing of this data by Google by downloading and installing a browser add-on (tools.google.com/dlpage/gaoptout).
As an alternative to the browser add-on, for browsers on mobile devices in particular, you can also prevent collection by Google Analytics by clicking on the following link: Deactivate Google Analytics. An opt-out cookie is placed which prevents the future collection of your data when visiting this website. The opt-out cookie only applies to this browser and only for our website and is filed on your device. If you delete the cookies in this browser, you must place the opt-out cookie again.
Further information on data protection in connection with Google Analytics can be found, for example, in the Help section of Google Analytics (support.google.com/analytics/answer/6004245).
9 Plug-ins and other services
On our website, we use Google Maps (API) by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google Maps is a web service which displays interactive (country) maps in order to present geographical information visually. Using this service can allow our location to be displayed to you, for example, and simplify any journeys.
When opening any of the subpages in which the Google Maps map is integrated, information on your use of our website (e.g. your IP address) is transmitted to Google servers in the USA and stored there. This takes place regardless of whether Google provides a user account which you are logged into or whether you have a user account at all. If you are logged into Google, your data is directly assigned to your account. If you would not like this assignment to your Google profile, you must log out of your Google user account. Google stores your data (even for users that are not logged in) in the form of a usage profile and evaluates this. Such an evaluation takes place, in particular, in accordance with Art. 6 para. 1 letter f GDPR on the basis of the legitimate interests of Google in the use of personalised advertisement, market research and/or needs-based design of their website. You have the right to object to the creation of this usage profile, whereby you must assert this right with Google.
Google LLC, the headquarters of which is located in the USA, is certified in terms of the US-European data protection treaty, the “Privacy Shield”, which ensures compliance with the level of data protection applied in the EU.
If you do not agree to the future transmission of your data to Google for the use of Google Maps, it is also possible to completely deactivate the Google Maps web service by switching off the JavaScript application in your browser. Google Maps and, therefore, the map display on this website can then no longer be used.
Google Maps is used to display our website attractively and to make it easier to find the locations that we have listed on our website. This represents a legitimate interest within the meaning of Art. 6, para. 1 letter f GDPR.
You can find the Google terms of use at www.google.de/intl/de/policies/terms/regional.html and the additional terms of use for Google Maps can be found at www.google.com/intl/de_US/help/terms_maps.html
Detailed information on data protection in connection with the use of Google Maps can be found on the Google website (“Google Privacy Policy”): www.google.de/intl/de/policies/privacy/
For the uniform display of font types, our website uses so-called Web Fonts provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. When you visit our website, your browser downloads the necessary Web Fonts to its browser cache in order to correctly display texts and font types.
For this purpose, the browser you use must establish a connection with the Google servers. Google thereby receives the information that our website has been visited by your IP address. Google Web Fonts is used in the interest of a uniform and attractive presentation of our website.
This represents a legitimate interest within the meaning of Art. 6, para. 1 letter f GDPR.
Further information on Google Web Fonts can be found at developers.google.com/fonts/faq and in the Google Privacy Policy: www.google.com/policies/privacy/
10 Your rights as the data subject
You have the right to request confirmation from us regarding whether personal data concerning you is processed.
10.2 Right to information Art. 15 GDPR
You have the right to receive information from us at any time and free of charge regarding the personal data stored about you as well as to receive a copy of this data.
10.3 Right to information Art. 16 GDPR
You have the right to request the rectification of incorrect personal data that concerns you. Furthermore, the data subject has the right to request the completion of incomplete personal data in consideration of the purposes for processing.
10.4 Erasure Art. 17 GDPR
You have the right to request that we delete personal data concerning you immediately, provided that one of the reasons provided for in law applies and the processing is not necessary.
You have the right to request that we restrict processing if one of the legal conditions applies.
10.6 Data portability Art. 20 GDPR
You have the right to receive the personal data which concerns you and which you have provided to us in a structured, accessible and machine-readable format. Furthermore, you have the right to transmit this data to another data controller without any prevention on our part, as the entity to which the personal data was disclosed, provided that the processing is based on consent in accordance with Art. 6 para. 1 letter a GDPR or Art. 9 para. 2 letter a GDPR or on a contract in accordance with Art. 6 para. 1 letter b GDPR and the processing takes place using automatised processes, as long as the processing is not required to carry out a task in the public interest or in the exercise of official authority which has been assigned to us.
Furthermore, when exercising your right to data portability, you have the right to have the personal data directly transmitted from one data controller to another data controller in accordance with Art. 20 para. 1 GDPR, insofar as this is technically feasible and provided that this does not affect the rights and freedoms of another person.
10.7 Objection Art. 21 GDPR
You have the right to file an objection at any time, for reasons which result from your particular situation, to the processing of personal data concerning you which takes place on the basis of Art. 6 para. 1 letter e (data processing in the public interest) or f (data processing on the basis of the balancing of interests) GDPR.
If you file an objection, your personal data shall no longer be processed unless we can prove compelling justified reasons for the processing that outweigh your interests, rights and freedoms, or if the processing is for the assertion, exercise or defence of legal claims.
In isolated cases, we process personal data for the purposes of direct advertising. You may file an objection to the processing of personal data for the purposes of such advertising at any time. This also applies to profiling, insofar as this is in connection with such direct advertising. If you file an objection with us against processing for the purposes of direct advertising, we shall no longer process the personal data for these purposes.
Furthermore, you have the right to file an objection, for reasons which result from your particular situation, to the processing of personal data concerning you which we carry out for scientific or historical research purposes or for statistical purposes in accordance with Art. 89 para. 1 GDPR unless such processing is required to fulfil a task that is carried out in the public interest.
You are able, in connection with the use of information society services and regardless of Directive 2002/58/EC, to exercise your right to object by means of automated processes for which technical specifications are used.
10.8 Revoking consent given in accordance with data protection regulations
You have the right to revoke consent to the processing of personal data at any time with effect for the future.
10.9 Right to file a complaint with a supervisory authority
You have the right to complain about how we process personal data to a supervisory authority responsible for data protection.
The criterion for the duration of storage of personal data is the relevant legal retention period. Upon expiry of the retention period, the corresponding data shall be routinely deleted, provided that it is no longer required for the fulfilment of contracts or initiating contracts.
12 Currency and amendments to this Privacy Policy
This Privacy Policy is currently valid, as of May 2018.
Due to the further development of our website and products or on the basis of changes to legal or official requirements, it may be necessary to amend this Privacy Policy. You can find and print the respective current Privacy Policy at any time via the website at “https://www.3c-gruppe.de/datenschutz”.
Data protection information regarding handling contacts and communication partners
General information for the data subject on the collection of personal data as communication partners and contacts
3C Holding GmbH, Am Jägerheim 1c, 33378 Rheda-Wiedenbrück (Germany)
Sascha Knicker, Tel: 05221/87292-0, Email: datenschutz@3c-gruppe.de
Information on processing activities:
Purposes of processing activity:
We process your personal data to respond to your enquiries, to provide information on our services or for any other communication with you via the usual paths of communication (e.g. email, post, telephone, fax).
Legal basis for processing activity:
The processing is required to fulfil a pre-contractual measure in accordance with Art. 6 para. 1 letter b GDPR or to preserve our legitimate interests in accordance with Art. 6 para. 1 letter f GDPR and the interests or basic rights and freedoms of the data subject do not outweigh these.
Internal recipients may be any employees entrusted with the process. Furthermore, we use service providers (incl. external processors) to fulfil our tasks, e.g. tax advisors, IT service providers and hosting providers and we transmit data to authorities or courts within the framework of legal obligations.
Data transfer to a third-party country:
Transmission to a third-party country is not expected.
Personal data is deleted as soon as its purpose ceases to apply and there is no legal retention obligation. In principle, emails are classified as tax-relevant documents and are stored in accordance with the legal requirements, in particular, Section 147 of the Fiscal Code of Germany (AO) (10 years) and Section 257 of the German Commercial Code (HGB) (6 years).
As a natural person, you have the right to information (in accordance with Art. 15 GDPR) on the personal data concerning you from the data controller as well as the right to rectification (Art 16 GDPR), erasure (Art. 17 GDPR) and restriction of processing (Art. 18 para. 1 GDPR). Furthermore, you have the right to object to processing (Art. 21 GDPR) and the right to data portability (Art 20 GDPR).
If you would like to assert your rights, please contact our Data Protection Officer or our Head Office.
You have the right to file a complaint with the relevant supervisory authority.
You are not obligated to provide personal data.
You can request further information on the processing of your personal data from our Data Protection Officer or our Head Office or you can receive such information from us in person on site.
Data protection information regarding handling customers and suppliers
Information for the data subject on the collection of personal data as the customer, potential customer, service provider or supplier
Sometimes, we also process personal data for the initiation, execution and processing of contractual relationships, to prepare offers and for invoicing purposes, as well as for making contact and providing information within the framework of customer care.
The processing is required to fulfil a contract or a pre-contractual measure in accordance with Art. 6 para. 1 letter b GDPR or to preserve our legitimate interest in accordance with Art. 6 para. 1 letter f GDPR and the interests or basic rights and freedoms of the data subject do not outweigh these.
Internal recipients are Consulting, Contract Management, Accounting, Controlling and Back Office. Furthermore, we use service providers (external processors) to fulfil our tasks, e.g. IT service providers and hosting providers and we transmit data to authorities or courts within the framework of legal obligations.
Storage is based on the legal requirements, in particular, Section 147 of the Fiscal Code of Germany (AO) (10 years) and Section 257 of the German Commercial Code (HGB) (6 years). Personal data is deleted as soon as its purpose ceases to apply and there is no legal retention obligation.
The provision of personal data referring to the data subject is sometimes legally or contractually stipulated or required to conclude a contract or for the purposes of customer care and communication. The data subject is then obligated to provide personal data.
If this is not provided, the contractual relationship may not be able to be established or communication may become impossible.
Data protection information regarding handling applicants' data
Information for the data subject (applicant) in the case of direct collection (Art. 13 GDPR)
Information on processing activity:
The processing is required for the initiation of an employment relationship in accordance with Art. 88 GDPR in conjunction with Section 26 para. 1 of the German Federal Data Protection Act (BDSG).
(Storage for longer than the current application procedure or transfer to third parties requires consent in accordance with Art. 6 para. 1 letter a GDPR, which fulfils the requirements of consent in accordance with Art. 7 paras. 1-4 GDPR).
Internal (HR department, Management)
6 months: Erasure after 6 months (provided that consent has not been given for further storage). The retention period is 2 months in accordance with Section 21 para. 5 of the German General Act on Equal Treatment (AGG) plus the reasonable processing time of 4 months.
You have the right to information (in accordance with Art. 15 GDPR) on the personal data concerning you from the data controller as well as the right to rectification (Art 16 GDPR), erasure (Art. 17 GDPR) and restriction of processing (Art. 18 para. 1 GDPR). Furthermore, you have the right to object to processing (Art. 21 GDPR) and the right to data portability (Art 20 GDPR).
If you would like to assert your rights, please contact the Data Protection Officer named above.
The data subject is obligated to provide personal data.
Consequences of non-provision:
Employment is not possible without processing your personal data.