Source: https://www.conmetallmeister.de/index.php/en/privacy-policy.html
Timestamp: 2020-02-29 01:12:32
Document Index: 343218179

Matched Legal Cases: ['Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 45', 'Art. 46', 'Art. 45', 'Art. 26', 'Art. 46', 'Art. 6', 'Art.9', 'Art. 6']

Privacy policy - Conmetall Meister GmbH
Information on privacy measures for the
Conmetall Meister GmbH online services available from:
www.conmetallmeister.de (and the associated web pages)
www.meister-werkzeuge.de (and the associated web pages)
www.conmetall.de (and the associated web pages)
www.i-drill.de
2. Who we are (Controller for Data Privacy)
3. Data collection when accessing our websites
5. Data processing on registration to open a customer account and for order processing
6. Working with external service providers for order processing
6.1 Why we use external service providers for order processing
6.2 Processing of payments by payment services provider
6.3 Use of freight companies to transport goods
7. Use of your data for advertising purposes (product recommendations to existing customers/ newsletter subscription)
8. Use of cookies and online marketing
8.2 What cookies do we use?
8.3 What is the purpose and the legal basis for using cookies?
8.5 Do we use cookies from third-parties?
8.6 Google Analytics web analysis service
8.7 Facebook Custom Audience Pixels
9.1 Integration of YouTube videos
9.2 Use of social media plug-ins
9.3 For what purposes have we integrated videos/ social media plug-ins?
9.4 Facebook company page
10.1 The right of access
10.2 The right to rectification
10.3 Right to erasure (right to be forgotten)
10.5 Right to notification
10.8 Right of appeal to the supervisory authority
We are delighted to have you visit our website, and we would like to thank you for your interest. In the following, we would like to inform you about how we handle your personal data when you use our web services, like our website and our online shops. The following information also relates to the use of our websites on mobile devices, e.g. smartphones or tablets. Personal data includes all data which could be used to identify you personally, or which make you identifiable via a username or identification code, such as your IP address or credit card number.
This Privacy Statement explains the legal basis and the purpose for this collection or processing of your data. We would like to inform you of your rights regarding the use of your personal data. If you have any questions regarding our use of your personal data, please contact us as the responsible entity - Controller under data protection law (for contact details see Clause 2).
We secure our online services and your personal data against loss, destruction, unauthorized access or modification using up-to-date technical and organisational measures.
The Controller for the processing of data on our online services pursuant to the General Data Protection Regulation (Datenschutz-Grundverordnung - DSGVO) is:
Conmetall Meister GmbH,
represented by Managing Directors Michael Funke and Hans-Peter Heffels,
Hafenstraße 26, 29223 Celle, Deutschland,
Tel.: +49 5141-18-0
E-Mail: info@conmetallmeister.de
Contact information for our company Data Protection Officer: datenschutz@conmetallmeister.de
Accessing our web pages (without registration) will result in the automatic anonymised collection of the following data on our servers:
masked IP address,
access date/ time/ time zone,
type of access,
type of protocol,
type and number of pages accessed on our site,
name and size of accessed files,
referring website,
The listed non-personal data is collected automatically as part of the normal operations of our internet services. The information gathered about the use of our pages is not combined with any personal information provided through the online registration form. We do not have any personal references in our usage data.
We use the above data for the purposes of troubleshooting, generating statistics and measuring website activity with the aim of improving the value and use of our services. As such, we have a legitimate interest to justify the data processing activity pursuant to Article 6 (1) (f) DSGVO.
Within our company, our IT Administrator is the only person with access to this data for the purposes listed above. We work with ITB-GmbH, TechnologiePark Dieprahm, Carl Friedrich Gauß Strasse 30, 47476 Kamp-Lintfort for the technical design of our webpages at www.conmetallmeister.de and www.conmetall.de, and have signed a contract with them for the purpose of order processing. We work with Hetzner Online GmbH, Industriestrasse 25, 91710 Gunzenhausen to host our webpages www.meister-werkzeuge.de and www.i-drill.de , and we have also signed a contract with them for the purpose of order processing.
The above data is only collected for the period of use; once the use has ended, the data shall be deleted without delay, after seven days at the latest.
We use cookies and web analysis services to obtain information as soon as your web browser accesses our website. These identifiers enable a range of our website's service functions and are automatically transferred to the hard drive of your computer or other mobile device via your browser. This function can be deactivated in the settings of your browser. Should cookies be disabled, personalised service will be unavailable. In this case, your anonymised IP address may be transferred to the USA. For more information on the cookies and web analysis tools we use, see the "Use of cookies and web analytics services" section below.
On our pages, we have provided an online form which enables you to make contact with us electronically. The form requires your first name and family name, your email address and telephone number as well as a box for entering a message to us. We need this data to process your request. You can also choose to provide us with your postal address. Additionally, you can contact us at any time via email. Contacting us is always voluntary.
This data is solely used for the purpose of answering your request or responding to your request for contact, and the technical administration involved. This processing is lawful pursuant to Art. 6 (1) (b) DSGVO, as we require the data listed above for the initiation, conduct or termination of a contractual relationship with you.
You request is logged by our internal customer service.
We do not pass on your requests to third-parties or to organisations outside of the EU.
After your request has been processed, we delete your contact information, at the latest, seven days after your request has been dealt with. This period of storage may be subject to statutory storage periods, for example, when your request is in connection with the processing of a contract or a warranty or guarantee. In this case, we store your request beyond seven days only for the purpose of complying with our legal obligations (Art. 6 (1) (c) DSGVO). In this case, we delete your data on termination of the statutory storage period (Section 147 (3) Fiscal Code of Germany (Abgabeordnung - AO)), i.e. after a period of 10 years, beginning at the conclusion of the contract. On termination of this storage period, your data will be deleted without delay, without any request to do so on your part.
You may register as a customer on our pages. This data is processed exclusively for the purpose of carrying out the contracts made with you for the use of our online services, or the processing of purchases. This data processing is lawful pursuant to Art. 6 (1) (b) DSGVO.
If you have registered with us as a customer, we will store your most recent purchases on your customer account under "Your recent purchases" (Ihre letzten Käufe) (the so-called purchase history). You can prevent this storing of your purchase history by sending us an email containing the text "Delete purchase history" (Kaufhistorie löschen). We store your purchase history for the purposes of optimising our product range and to make the shopping experience as convenient for you as possible. It helps us to identify those products are of regular interest for you. We therefore have a legitimate interest for this processing pursuant to Art. 6 (1) (f) DSGVO.
Entry of all data is voluntary. You can also order products as a Guest, without registering for a customer account. In order to process your purchase order, we require at least the data marked with an asterisk (*) in the registration form.
Internally, this data can only be accessed by our customer service and marketing department, and the IT department for the purposes of troubleshooting and system maintenance. Our accounting department is only provided with the information required for tax reporting purposes required under law.
You can delete your customer account at any time. You can delete your account yourself, or send a message to the address above requesting deletion.
After processing a Guest contract, or deletion of your customer account, your data is locked under tax and commercial law retention periods, and will be deleted after these retention periods have expired unless you expressly permit further use of your data, or we reserve the right to a legally permissible further use of data by our website, of which you shall be informed appropriately. If you are registered with us as a Customer, we suppress all information on purchases older than 3 years in your purchase history, and delete it, at the latest, 10 years after the purchase date. You can grant your consent to us to show your purchase history for a period longer than 3 years for a maximum of 10 years. We delete your data at the latest after the statutory 10 year retention period (Section 147 (3) AO), i.e. after 10 years from the date the purchase was concluded. We will delete your data at the end of this retention period without any request to do so on your part.
We work with the following service providers to process your order. These service providers support us wholly or in part in carrying out contracts concluded with it, such as payment processing or delivery of our products.
We share your personal data with these service providers only for the purposes of carrying out our contractual obligations to you. This may be for the purposes of processing your payments, or for the purposes of delivering your goods, and we only share the data that is strictly required for that purpose. For payment processing, you can select the nature of payment and the payment service provider yourself. This sharing of data is lawful pursuant to Art. 6 (1) (b) DSGVO. Service providers are only provided with the specific data required for executing their specific service, and they are obliged to handle your data with strict confidentiality.
6.2.1 Paypal
Using PayPal, credit card via PayPal, direct debit via PayPal or - where available - "Purchase on account" or "Pay by Instalment" via PayPal we provide your order information to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter referred to as "PayPal") for the purposes of processing your payment.
PayPal reserves the right to carry out credit checks for the credit card via PayPal, or - where available - "Purchase on account" or "Pay by Instalment" via PayPal. For this purpose, your payment data may be passed on to credit agencies as PayPal has a legitimate interest in determining your ability to pay in accordance with Art. 6 (1) (f) DSGVO. PayPal uses the result of the credit check to determine the statistical probability of non-payment depending on the payment method selected. The credit check may contain probability values (score values), which, where included in the credit check, are based on a scientifically recognised, mathematical-statistical procedure. Among other data, address data are taken into account when calculating the score values. For further information data protection law including the use of credit agencies, please refer to the PayPal data protection information: https://www.paypal.com/uk/webapps/mpp/ua/privacy-full
You may object to this processing of your data at any time by contacting PayPal. However, PayPal may still be entitled to process your personal data where this is necessary for processing your payment under the purchase contract.
6.2.2 Klarna Checkout Services such as Sofort bezahlen (SOFORT)
Payment processing via the payment methods offered by us is done using the payment service provider Klarna Group (Klarna Bank AB (publ), Sveavägen 26, 11134 Stockholm, Sweden. Here, you may select one of their payment methods. By selecting the "SOFORT" payment method, your data is passed on to SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany (hereinafter referred to as "SOFORT") for the purpose of processing your payment. The Sofort GmbH is part of the Klarna Group (Klarna Bank AB (publ), Sveavägen 26, 11134 Stockholm, Sweden. For more information on Klarna and SOFORT's data protection terms and conditions, please go to: http://cdn.klarna.com/1.0/shared/content/legal/terms/Klarna/en_gb/privacy
6.3.1 To deliver the goods you have ordered, we pass on the name and delivery address you provided to our selected freight company (Art. 6 (1) (b) DSGVO). Our choice of freight company depends on whether you have made your purchase in our Online Shop or via an online store.
6.3.2 Purchase in our Online Shop
We use DHL (Deutsche Post AF, Charles de Gaulle Strasse 20, 53113 Bonn), DPD (DPD Deutschland GmbH, Wailandstrasse 1, 63741 Aschaffenburg), Hermes (Hermes Germany GmbH, Essener Strasse 89, 22419 Hamburg) and GLS (General Logistics Systems, Germany GmbH & Co. OHG, GLS Germany Strasse 1 - 7, DE-36286 Neuenstein) for deliveries from our Online Shop,
For the purpose of delivery, we provide the name of the recipient and the delivery address to the freight company carrying out the delivery (Art. 6 (1) (b) DSGVO).
During the ordering process, you may grant you consent to the passing on of your email address to DHL or DPD for the purpose of determining a delivery date and time, or to receive notice of delivery, or delivery tracking. If you have granted your consent, we will pass on your email address to the freight service company for those purposes. You may withdraw your consent to this use of your email address at any time with future effect by contacting us or the freight company via email, or via the appropriate contact form. We will keep a digital record of your consent for verification purposes. You can see the declarations of consent you have granted online at any time in your account.
If you have not granted consent to us passing on your email address, you will not be able to agree a delivery date with the freight company in advance or receive delivery notifications.
7.1 Recommending products to existing customers
If you have ordered products from us and provided your email address, we allow ourselves under the law to send you product recommendations for similar products which could be of interest to you, where you have not objected this use during the purchase process. This form of contact only occurs for the purpose of sending product recommendations via electronic post to you as an existing customer. This is consistent with our legitimate interest in direct advertising to existing customers under Art. 6 (1) (f) DSGVO in conjunction with Section 7 (3) German Unfair Competition Act (Gesetz gegen den unlauteren Wettbewerb - UWG). If you have initially objected to this use of your email address, we will not send this information to you via email. You may withdraw your consent to the use of your email address to receive such messages from us at any time and with future effect. After receipt of your withdrawal of consent, we will cease the use of your email address for this purpose without delay.
7.2 Newsletter subscription
You can register for our email newsletter on our website. Our newsletter provides regular updates on new items, interesting offers and new promotions and campaigns. To receive our newsletter, you must only provide your email address. You may also choose to provide your name, to allow us to address you personally. We use the double opt-in process for our newsletter subscription. For this purpose, we will send you a confirmation email after we have received your consent to a newsletter subscription. In this email, we will ask you to confirm your subscription via a provided link. You will only receive our newsletter after this (second) activation of the service.
7.3 Consent to newsletter subscription
The address you provided for our newsletter subscription and any other data you provided such as your name will solely be used for the purposes of sending advertisements to you via electronic mail. This sending of electronic advertising is lawful pursuant to Art. 6 (1) (a) DSGVO.
You can withdraw your consent to the use of your email to receive newsletters at any time with future effect by sending an email or using our online contact form, or the link provided in the email. After cancellation of this service, we will delete your email address without delay from our distribution list, unless you have expressly consented to another use of your data, or we reserve the right to use your data for lawful purposes and of which you have been informed appropriately.
Your declaration of consent will be recorded electronically for the purposes of verification. You can see your declarations of consent at any time online in your account. On registration for the newsletter we also store the IP address provided by your Internet Service Provider (ISP) as well as the date and time of your subscription to trace any potential misuse of your email address at a later date.
If you have not consented to the newsletter subscription or withdrawn said consent, you will only receive electronic mail from us in connection with the processing of orders you have placed with us.
7.4 Service providers for sending electronic advertising
We use the service provider GetResponse Sp.z.o.o., Gdansk (80-387), Arkonska 6, A3, ("GetResponse") for the delivery of the above product recommendations and the newsletter via electronic post. This service provider acts strictly on our instructions on our behalf, and for this purpose, your email address and your name where provided, will be passed on to it. This data will be processed on the GetResponse servers located in Germany and Ireland.
GetResponse, acting on our behalf, will only use this information for the purposes of delivery and for the statistical assessment of the newsletter. For the purposes of this assessment, the emails contain web beacons or tracking pixels. This allows us to ascertain whether a newsletter has been opened, and which links you may have clicked. Using conversion tracking, we can then also analyse whether a certain action (e.g. the purchase of a product on our online pages) has taken place after clicking the link in the newsletter. Additionally, we collect further technical information, namely the time of access, the masked IP address, browser type and operating system. This technical information is exclusively collected in an anonymised form and is not linked to your personal data or your customer account, making it impossible for us to link that information back to you. The data is only utilised for statistical analysis of our newsletter campaigns. The results of this analysis assist us in adapting our newsletter to make future offers better suit our customers' interests. This analysis is lawful pursuant to Art. 6 (1) (f) DSGVO as a legitimate interest in the optimisation and adaptation of our newsletter to better meet demand.
If you wish to reject the use of this data for analytical purposes, you must unsubscribe from the newsletter.
We have entered into a Data Processing Agreement with GetResponse for the above purpose, which obliges GetResponse to protect our customers' data and to not disclose that data to third-parties.
More information on data processing by GetResponse is available here: https://www.getresponse.de/email-marketing/legal/datenschutz.html .
7.5 Data transfer to countries outside the EU
We do not send the data collected as part of newsletter delivery to countries or organisations outside the EU.
7.6 Retention period
We store your email address and name if provided along with the declaration of consent for newsletter deliver for the period of your subscription, or until you withdraw your consent (cancel subscription). Any other data collected as part of newsletter delivery will be deleted after seven days.
To improve the look of our website and to enable certain functions, we use cookies on various pages. Cookies are small text files that are stored on your device. These text files are used for the temporary storage of information. Your browser stores cookies in the form of a readable text file once you access our site. If you are registered with us, cookies help us to recognise you, your device (computer, tablet or smart phone) the next time you access one of our pages. Some cookies may contain personal data.
Some of the cookies we use allow you to use our web pages (so called session cookies). If you disable this cookie, our pages may not be accessed. The authentication cookie provides you with access to the log-in page. Without this cookie, you cannot register or access the log-in page. These session cookies will be deleted when you close your browser.
Other cookies remain on your device and allow us and our partner companies (third-party cookies) to recognise your browser on your next visit (persistent cookies). Persistent cookies are automatically deleted after a certain period of time, which differs from cookie to cookie. For advertising purposes, we use a retargeting cookie which allows us to show you interesting offers, even outside of our web pages.
Most of the cookies we use do not store any information that can identify you personally or that makes you identifiable. Rather, these cookies provide us with general and anonymised information regarding the use of our websites, the pages that are visited, the browsers and operating systems used and the cities our visitors are located. We only collect masked IP addresses which make it impossible to recognise individual users or be assigned to any one individual.
Some of these cookies make the ordering process easier, by saving specific website settings (e.g. noting the content(s) of a virtual shopping basket for a subsequent visit to the website). Where our cookies do process personal data, this processing is done in accordance with Art. 6 (1) (b) DSGVO to fulfil our contract with you.
Any collection of data using cookies - as per the detailed list below - that goes beyond the scope of fulfilling our contract with you, is done for the optimisation of our website functionality and content. In particular, we use the services offered by the following third-party providers to help us raise awareness of our online service. The resulting data allows us to measure the success of our online advertising. In so doing we are pursuing a legitimate interest, as part of our market research, in ascertaining which offers are of interest for you. Additionally, using this statistical data, we can use the information to identify disruptions in our service and better understand the advertising costs charged to us. This use of data is lawful pursuant to art. 6 (1) (f) DSGVO.
You can set your browser to inform you about the setting of cookies and whether you wish to accept cookies individually, or to accept specific kinds of cookies, or to disable all cookies. If cookies are disabled, you may not be able to access our website, or the use of our website may be limited. Each browser is different in the way it administers its cookie settings. The Help menu of your browser provides information on how to change your cookie settings. You can find this information for your browser using the links below:
Chrome: https://support.google.com/chrome/?hl=en&%5Dhlrm=en%5B&%5Danswer=95647#topic=7438008
We sometimes work with web partners who help us to make our web pages more interesting for you. For this purpose, when you access some of our pages online, cookies from our partner companies may also be stored in your device (Third-party Cookies). This section provides more information regarding the use of these kinds of cookies, their scope, and the data they collect. The third-party cookies used by us are partially used for data processing in the USA. These service providers (e.g. Google, Facebook) have accepted the data protection provisions of the EU-US Data Privacy Shield, the legal framework governing the transatlantic transmission of data agreed by the European Commission and the United States (COMMISSION IMPLEMENTING DECISION (EU) 2016/1250 of 12 July 2016 pursuant to Directive 95/46/EC of the European Parliament and of the Council on the adequacy of the protection provided by the EU-U.S. Privacy Shield (notified under document C(2016) 4176)). These service providers are also registered with the "Privacy Shield" Program of the US Department of Commerce.
We use online services provided by the web analysis service Google Analytics. This service is provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). Google Analytics uses cookies that are stored on your computer to analyse the use of our online web presence.
The information collected by the cookie regarding your use of our online web presence (including your masked IP address) is transferred to and stored in a Google server in the USA. Google uses this information to evaluate the use of our website to prepare reports about the activities in our online presence and provide us with additional services associated with that use. The IP address provided by your browser as part of the Google Analytics service is not added to any other Google data.
We use Google Analytics in our online presence for web analysis purposes exclusively with an add-on that provides an "anonymise IP" function. This setting ensures that Google Analytics erases the last part of your IP address. This anonymisation of your IP address removes any direct trace of you personally. When using this feature, Google masks your IP address within the member states of the European Union or in other signatory states to the Agreement on the European Economic Area prior to transferring that information outside of the EU. The full IP address will only be sent to a Google server for masking in the USA in exceptional cases. In this way, we do not receive data that provides us with a way to identify you personally.
We also use the Universal Analytics function with Google Analytics. Universal Analytics allows us to analyse the use of our online services across devices (e.g. access via a laptop and then later from a tablet). As a user, you will be given a pseudonymous User ID on registration, when you access our site from another device. This is how the system recognises your User ID when you access our site from another device. We do not allocate any names to the User ID. We also do not provide Google with any personal data. Privacy measures such as IP masking and Browser Add-ons are not restricted by the use of the Universal Analytics function.
You can prevent the installation of cookies using the settings in your browser software. You can also prevent the collection and processing of the data created by the use of cookies and related to your use of our online services (including your IP address) by Google by downloading and installing the browser plugin available at: https://tools.google.com/dlpage/gaoptout?hl=en
For an alternative to the browser plug-in or within browsers on mobile devices, please click on the following link, to reject data collection by Google (to set an Opt-Out cookie). This will prevent all future collection of data by Google Analytics within our web pages. This opt-out cookie only works in this browser and only for this domain. (If you delete the cookies in this browser, you must click this link again) Deactivate Google Analytics
If you undertake any of the above cookie deactivation measures, you may not be able to use all the functions of our website to their full extent.
For more information regarding how Google Analytics deals with user information, please refer to Google's Privacy Statement: https://support.google.com/analytics/answer/6004245?hl=en
We use Facebook's retargeting pixel (so called Custom Audience Pixel), offered by Facebook Ireland Limited, Hanover Reach, 5-7 Hanover Quay, Dublin 2 Ireland. This is a piece of JavaScript code. JavaScript is a script language that evaluates user interaction in web browsers, apps, or other applications. The use of these pixels on our pages allows us to mark and separate users for targeted messaging. As soon as the retargeting pixel is loaded, it transfers anonymised data to Facebook regarding user behaviour, the pages accessed (URL) and any Facebook cookies that may be present.
Facebook compares this data with all its registered users. If you are also registered to Facebook, Facebook will allocate this data to your Facebook User Profile. This data may be processed on servers in the USA. We have no influence over this data processing. You can suppress or deactivate the JavaScript functions of the retargeting pixel in your web browser.
We have integrated YouTube videos into our web pages that can be played on YouTube directly from our web pages. The "expanded privacy mode" applies to this process, meaning YouTube can only collect your personal data when you play the video. We have no influence over YouTube's data collection.
The video service is provided by YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. This service provider and its services belong to Google.
Once the embedded YouTube videos have started to play, "YouTube" as the service provider uses cookies to collect information about user behaviour. According to YouTube's official statements, these are used to collect video statistics, to improve usability, and to prevent abusive conduct. If you are logged into Google, your data will be assigned directly to your account once you click play on a video. If you do not wish YouTube to assign this information to your profile, you must log out before clicking play. Google saves your data (even for users who are not logged in) as usage profiles for analysis. This analysis is undertaken in accordance with Art. 6 (1) (f) DSGVO exclusively on the basis of Google's legitimate interest in integrating personalised advertising, market research and/ or demand oriented design of its online services. You have the right to reject the creation of a user profile. To exercise this right, please contact YouTube directly.
Regardless of whether the embedded videos are played or not, every time this website is accessed, a connection to the Google network "DoubleClick" is established, which may result in further data processing activities over which we have no influence.
Playing the videos in our YouTube channel may result in your data being transferred to a Google server in the USA for storage. We refer to the above information on Google Conversion Tracking with regard to the transmission of this data. More information on data protection for "YouTube" is available in the provider's Privacy Statement at: https://www.google.de/intl/en/policies/privacy or at https://www.youtube.com/?hl=de&gl=DE
The following social media plug-ins are used on our websites as buttons which provide access to our web presence in the following social networks:
Instagram LLC, 1601 Willow Road, Menlo Park, CA 94025, USA (Instagram is part of Facebook, Inc.);
We only display these social media plug-ins on our pages as inactive icons. If you click on a plug-in on our pages, this indicates your consent to connect with these third-parties via a separate tab in your browser, and allows these third-parties to follow your visit to our pages. If you are a member of a social network, you can share the content of our web pages with other members of that social media network by clicking the button. We have no influence over the personal data collected and stored by third-parties. We also have no influence over the content of pages provided by third-parties. To ensure your privacy, we have implemented a solution which only sends the address of our servers to these services and not your IP address should you click and activate a social media plug-in.
Social media plug-ins are only integrated for the purposes of creating customer friendly web pages. In so doing, we are pursuing our legitimate interest in the optimal presentation of our services, as permitted by Art. 6 (1) (f) DSGVO. We do not collect any personal data in connection with the use of the embedded YouTube videos or social media plug-ins.
Description of purpose and legal basis of data processing
In addition to this website, we also operate a company Facebook page at https://de-de.facebook.com/conmetallmeister/, which we use to present our company, provide information about our services and communicate with customers and interested parties.
In this, we only process personal data when you interact with our Facebook page, e.g. if you leave a comment, click a “Like” button or send us a message.
Depending on the nature of your activity, this processing of data is lawful pursuant to Art. (6) (1) (b) GDPR (e.g. when you send us an inquiry relevant to an order), or on your consent pursuant to Art. 6 (1) (a) GDPR (e.g. when you “like” one of our postings, or upload comments or content to our Facebook page).
We analyse access and interaction with our Facebook page. Facebook creates user profiles for this purpose, but only provides us with anonymised data in this regard, known as Page Insights. This aggregate data helps us understand how users interact with our page. This use is lawful pursuant to Art. 6 (1) (f) GDPR, as we have a legitimate interest in marketing our business via social media, and to analyse and evaluate the use of our Facebook page, in order to improve our range of products and services.
Use of the data by Facebook:
When using and accessing our Facebook page, your personal data is also processed by both the Ireland based company, Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin, as well as the USA based, Facebook Inc., 1601 Willow Road, Menlo Park, California 94025 (hereinafter referred to as “Facebook”). In addition to the processing described above, Facebook processes your personal data for analysis and advertising purposes, including personalised advertising. To the extent of our knowledge, Facebook also uses cookies that are stored in your end device (also across end devices). This allows Facebook to use targeted advertising within its own platform, as well as on third-party sites. For more information, see the Facebook privacy policy: https://www.facebook.com/about/privacy/>.
You can withdraw your consent at any time with future effect by deleting your comment(s) or relevant content. The legality of any data processing carried out prior to such withdrawal of consent is not affected.
Facebook provides the opportunity to object to certain data processing, the relevant information and possibilities to opt-out can be found at https://www.facebook.com/policies/cookies/> and for registered users at https://www.facebook.com/about/privacy/>.
According to the Facebook privacy provisions, user data is processed in the USA and in other countries. Facebook only transfers user data to countries which have been granted an Adequacy Decision by the European Commission pursuant to Art. 45 GDPR or, based on guarantees offered pursuant to Art. 46 GDPR. Facebook Inc., countries that are certified under the EU-US Privacy Shield and thus provide an adequate level of data protections pursuant to Art. 45 GDPR (https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active>).
Joint Responsibility pursuant to Art. 26 GDPR
In relation to data processing via our Facebook page (Page Insights), by operating our company Facebook page, we have an agreement with Facebook regarding joint responsibility (“Page Controller Addendum”, https://www.facebook.com/legal/terms/page_controller_addendum. For further information, see the Facebook privacy policy https://www.facebook.com/about/privacy/.
Please read the following information about your rights as a data subject regarding the processing of your personal data.
You have the right to request a confirmation whether your personal data is being processed. Should this be the case, you have the right to be informed of the personal data that has been collected, stored or processed, as well as to the following information:
the recipients or categories of recipients to whom this data has been disclosed or will be disclosed;
where available, the planned retention period of the personal data, or where not available, the criteria for determining that retention period;
your additional rights (see below);
the existence of automated decision-making, including profiling, and where existent, further relevant information.
You have the right to be informed of the appropriate safeguards available pursuant to Art. 46 DSGVO against the transfer of your data to a third country or international organisation.
You have the right to request the correction without delay of incorrect or incomplete personal data.
You have the right to request that we delete all your personal data without delay. We are obliged to delete your personal data without delay where one of the following grounds applies:
Your personal data are no longer required for the purpose for which they were collected or otherwise processed.
You are withdrawing your consent and there are no other legal grounds for processing that data.
You are filing an objection (see below) to the data processing.
Your personal data were unlawfully processed.
The deletion of your personal data is necessary to fulfil an obligation under EU law or the law of the Member States.
A child has provided consent to the collection of personal data.
10.4 Right to restriction of processing:
You have the right to request a restriction of our data processing when one of the following conditions is met:
the data processing is unlawful but you do not agree to the deletion of the personal data, instead requesting a restriction of its use;
we no longer need the personal data for the purposes of processing, but you need the data to establish, exercise or defend legal claims; or
you have objected to processing (see below) and it is not yet clear whether our legitimate interest will prevail.
If you have exercised your right to rectification, erasure or restriction of processing against us, we are obliged to inform all recipients to whom your personal data has been disclosed of this rectification, erasure of the data or restriction of the data processing unless this proves impossible or requires a disproportionate effort. You have the right to be informed of those recipients.
You have the right to receive the personal data you have provided to us in a structured, commonly used and machine-readable format. You also have the right to transfer this data to another controller without interference on our part provided that:
the processing is based on consent granted pursuant to Art. 6 (1) (a) DSGVO or Art.9 (2) (a) DSGVO or on a contract pursuant to Art. 6 (1) (b) DSGVO; and
the processing is carried our using automated methods.
In exercising this right, you may request that personal data related to you be transferred directly from us to another controller in so far as this is technically feasible, and does not infringe on the freedoms and rights of any other person. The right to data portability does not apply to the processing of personal data required for fulfilling a task carried out in the public interest or in the exercise of an official authority invested in the controller.
You have the right, based on grounds relating to your particular personal situation to object at any time to the processing of your personal data, unless it is based on one of the following grounds:
the processing of your personal data by us is required for the fulfilment of a task that lies in the public interest or in the exercise of public authority that has been delegated to us; or
the processing is necessary to safeguard our legitimate interest or the legitimate interest of a third-party, in so far as your interests or basic rights require that protection of your personal data prevail.
The right to object also applies to profiling based on these processes.
If the personal data that concerns you is being processed for direct marketing purposes, you have the right to object to the processing of your personal data for such marketing purposes. This also applies to profiling insofar as it is associated with such direct marketing.
You also have the right, on grounds arising from your particular personal situation, to object to the processing of your personal data undertaken by us for scientific or historical research purposes or for statistical purposes, unless such processing is necessary for the performance of a task in the public interest.
If you believe that the processing of your personal data is against the law you have the right of appeal to a supervisory authority, in the country where you are staying or working or in the country of the alleged infringement. If you have any questions, you can find out who is the appropriate authority for us by contacting the State Commission for Data Protection Lower Saxony, Prinzenstraße 5, 30159 Hannover, Telephone: +49 511 120-4500, Fax: +49 511 120-4599, E-Mail: poststelle@lfd.niedersachsen.de. Other administrative or judicial remedies are not affected by the exercise of these rights.
Version 2, Last Updated: 24.05.2018
© Conmetall Meister GmbH