|Fertigmörtel – Edelputze – Wärmedämm-Systeme|
Data Protection Declaration
I. Name and address of the responsible
Responsible within the meaning of the General Data Protection Regulation (GDPR), other data protection laws in force in the Member States of the European Union and other provisions of a data protection nature is:
SCHAEFER KRUSEMARK GmbH & Co. KG
Phone: +49 (0) 6432/503-0
II. Name and address of the data protection supervisor
The responsible data protection supervisor:
Phone: +49 (0) 261 92736 155
III. General information for data processing
1. Scope of processing personal data
In principle, we collect and use personal data of our users only to the extent necessary for the provision of a functional website and our content and services. The collection and use of personal data of our users takes place regularly only with the consent of the user. An exception applies to cases in which prior consent cannot be obtained for reasons of fact and the processing of the data is permitted by law.
2. Legal basis for the processing of personal data
Insofar we obtain the consent of the data subject for processing of personal data, Article ( 1) (a) EU General Data Protection Regulation (GDPR) serves us as legal basis for the processing.
For processing of personal data required for the fulfillment of a contract the processing is based on Article 6 (I) (b) GDPR. This also applies to processing operations required to carry out pre-contractual actions.
Insofar as processing of personal data is required to fulfill a legal obligation that is subject to our company Article 6 (1) (a) GDPR serves us as legal basis.
Provided that the processing of personal data gets required to protect essential interests of the person concerned or another individual person the processing would be based on Article 6 I lit. d GDPR.
If processing is necessary to safeguard the legitimate interests of our company or a third party, and if the interests, fundamental rights and freedoms of the data subject do not prevail over the first interest, Article 6 (1) (f) GDPR as legal basis for processing.
3. Data deletion and storage period
The personal data of the corresponding person will be deleted or blocked as soon as the purpose of their storage is achieved. In addition, such storage may be provided for by the European or national legislator in EU regulations, laws or other regulations to which the controller is subject. Blocking or deletion of the data also takes place when a storage period prescribed by the standards mentioned expires unless there is a need for further storage of the data for conclusion of a contract or fulfillment of the contract.
IV. Providing the website and creating logfiles
1. Description and scope of data processing
On each access of our website our system automatically collects data and information from the computer system of the calling party.
The following data are collected:
The data is stored in log files of our system. The IP addresses of the user are stored anonymously, so that the assignment of the data to a user is not possible. A storage of this data together with other personal data of the user does not take place.
V. Contact form and E-Mail
1. Description and scope of data processing
The contact form of our website can be used for electronic contact. If a user contacts us through this form, the data entered in the input mask will be transmitted to us and saved. These data are:
At the time of sending the message, the following data is also stored:
For the processing of the data in the context of the sending process your consent is obtained and referred to this privacy statement.
Alternatively, contact via the provided e-mail address is possible. In this case, the user's personal data transmitted by e-mail will be stored.
In this context, there is no disclosure of the data to third parties. The data is used exclusively for processing the request.
2. Legal basis for data processing
Legal basis for the processing of the data is in the presence of the consent of the user Article 6 (1) (a) GDPR.
The legal basis for the processing of the data transmitted in the course of sending an e-mail is Article 6 (1) lit. f GDPR. If the e-mail contact aims to conclude a contract, then additional legal basis for the processing is Article (6) (1) (b) GDPR.
3. Purpose of data processing
The processing of the personal data from the input form serves us only to process the contact. In the case of contact via e-mail, this also includes the required legitimate interest in the processing of the data.
The other personal data processed during the sending process serve to prevent misuse of the contact form and to ensure the security of our information technology systems.
4. Duration of storage
The data will be deleted as soon as it is no longer necessary for the purpose of its collection. For the personal data collected by contact form and those sent by e-mail, this is the case when the respective conversation with the user is finished. The conversation is finished when it can be inferred from the circumstances that the relevant facts have been finally clarified.
5. Opposite possibility and remedy
The user can revoke his consent to the processing of personal data at any time. If the user contacts us by e-mail, he can revoke the storage of his personal data at any time. In such a case, the conversation cannot continue.
In this case all personal data stored in the course of contacting will be deleted.
VI. Rights of the affected person
If your personal data is processed, you are a victim within the meaning of GDPR. Then you have the following rights to the person responsible:
1. Right of information
Every data subject has the right granted to request confirmation from the controller whether or not personal data relating to him/her are being processed.
Every person affected by the processing of personal data has the right, granted by the European guideline and regulation provider, to receive information regarding:
Remember, the data subject has a right to know whether personal data have been transferred to a third country or to an international organization. If this is the case, the data subject shall otherwise be entitled to obtain information on the appropriate guarantees based on Article 46 GDPR in connection with the transmission.
2. Right of rectification
Every person affected by the processing of personal data has the right, to demand the immediate correction of inaccurate personal data concerning him/her. Furthermore, the data subject has the right to request that incomplete personal data be completed, including by means of a supplementary declaration, taking into account the purposes of processing. The responsible person must make the correction without delay.
3. Right to restrict processing
Every person affected by the processing of personal data has the right, to require the data controller to restrict the processing if one of the following conditions is met:
If the processing of your personal data has been restricted, this data may only be used with your consent or for the purpose of asserting, exercising or defending legal claims or protecting the rights of another natural or legal person or for reasons of important public interest Union or a Member State.
If the restriction on processing has been restricted in accordance with the above conditions, you will be notified by the person responsible before the restriction will be removed.
4. Right of deletion (right to be forgotten)
a) Deletion obligations
Every person affected by the processing of personal data has the right, to demand that the person responsible delete the personal data concerning him/her immediately, provided that one of the following reasons applies and insofar as the processing is not necessary:
b) Information to third parties
If personal data have been made public, our company is the person responsible pursuant to Article 17 (1) GDPR is obliged to delete personal data, we shall take appropriate measures, taking into account the available technology and the implementation costs, including technical measures, to inform other data controllers who process the published personal data, that the data subject has requested the deletion of all links to or copies or replications of these personal data from these other data controllers, insofar as the deletion of all links to these personal data is obligatory, taking into account the available technology and implementation costs. We will make the necessary arrangements in individual cases.
The right of deletion does not exist if the processing is necessary:
5. Right to teaching
If you have the right of rectification, erasure or restriction of processing to the controller, he / she is obliged to notify all recipients to whom your personal data have been disclosed of this correction or deletion of the data or restriction of processing, unless: this proves to be impossible or involves a disproportionate effort.
You have a right to the person responsible to be informed about these recipients.
6. Right to transfer data
Every person affected by the processing of personal data shall have the right, granted by the European guideline and regulatory body, to receive personal data concerning him/her in a structured, established and machine-readable format. It also has the right to transfer these data to another controller without hindrance by us to whom the personal data have been made available, provided that
In the exercise of its right to transfer the data subject has the right to obtain that the personal data be transferred directly from us to another person responsible, insofar as this is technically feasible. Freedoms and rights of other persons may not be affected.
The right to transfer data does not apply to the processing of personal data necessary for the performance of a task in the public interest or in the exercise of official authority delegated to the controller.
7. Right to revocation
Any person affected by the processing of personal data shall have the right to object at any time to the processing of personal data relating to him/her on the basis of Article 6 (1)(e) or (f) GDPR, for reasons arising from his particular situation. This also applies to profiling based on these provisions.
We will no longer process personal data in the event of an objection, unless we can prove compelling grounds worthy of protection for processing that outweigh the interests, rights and freedoms of the data subject, or the processing serves to assert, exercise or defend legal claims.
If we process personal data in order to carry out direct advertising, the person concerned has the right to object at any time to the processing of personal data for the purpose of such advertising. This also applies to profiling insofar as it is associated with such direct advertising.
If the data subject objects to the processing of personal data by us for direct advertising purposes, we will no longer process the personal data for these purposes.
In order to exercise the right of objection, the data subject may us directly. The person concerned is also free to exercise his right of objection in connection with the use of information society services, notwithstanding Directive 2002/58/EC, by means of automated procedures using technical specifications.
8. Right to revoke consent under data protection law
Every person affected by the processing of personal data has the right to revoke consent to the processing of personal data at any time, granted by the European guideline and regulation provider. If the data subject wishes to exercise his or her right to revoke consent, he or she may at any time contact our data protection officer or another employee of the controller.
9. Right to complain with the supervisory authority
Without prejudice to any other administrative or judicial remedy, you shall have the right to complain to a supervisory authority, in particular in the Member State of its residence, place of work or place of alleged infringement, if you believe that the processing of your personal data based on GDPR is lawfully.
The supervisory authority to which the complaint has been submitted shall inform the complainant of the status and results of the complaint, including the possibility of a judicial remedy pursuant to Article 78 of the GDPR.
Letzte Aktualisierung: 06.09.2018