Privacy

1. Name and address of the controller.

The controller within the meaning of the General Data Protection Regulation and other national data protection laws of the member states, as well as other data protection provisions, is

2. General information on data processing

2.1 Scope of the processing of personal data

As a rule, we process personal data of our users only to the extent necessary to provide a functional website and our content and services. Personal data of our users are regularly processed only with the user’s consent. An exception applies in cases where obtaining prior consent is not possible for factual reasons and the processing of the data is permitted by statutory provisions.

2.2 Legal basis for the processing of personal data

Where we obtain the consent of the data subject for processing operations involving personal data, Art. 6(1)(a) of the EU General Data Protection Regulation (GDPR) serves as the legal basis.

For the processing of personal data necessary for the performance of a contract to which the data subject is party, Art. 6(1)(b) GDPR serves as the legal basis. This also applies to processing operations necessary to carry out pre-contractual measures.

Where processing of personal data is necessary to comply with a legal obligation to which our company is subject, Art. 6(1)(c) GDPR serves as the legal basis.

Where vital interests of the data subject or another natural person make processing of personal data necessary, Art. 6(1)(d) GDPR serves as the legal basis.

If processing is necessary to safeguard a legitimate interest of our company or a third party, and the interests, fundamental rights and fundamental freedoms of the data subject do not override the former interest, Art. 6(1)(f) GDPR serves as the legal basis for the processing.

2.3 Data erasure and storage period

The personal data of the data subject are erased or blocked as soon as the purpose of storage no longer applies. Data may also be stored if this has been provided for by the European or national legislator in EU regulations, laws or other provisions to which the controller is subject. Data are also blocked or erased when a storage period prescribed by the said provisions expires, unless further storage of the data is necessary for the conclusion or performance of a contract.

3. Provision of the website and creation of log files

3.1 Description and scope of data processing

Each time our website is accessed, our system automatically collects data and information from the computer system of the accessing computer.

The following data are collected: (1) Information about the browser type and version used (2) The user’s operating system (3) The user’s internet service provider (4) The user’s IP address (5) Date and time of access (6) Websites from which the user’s system reaches our website (7) Websites accessed by the user’s system via our website

The data are also stored in the log files of our system. This does not apply to the user’s IP addresses or other data that allow the data to be attributed to a user. These data are not stored together with other personal data of the user.

3.2 Legal basis for data processing

The legal basis for the temporary storage of the data and the log files is Art. 6(1)(f) GDPR.

3.3 Purpose of data processing

The temporary storage of the IP address by the system is necessary to deliver the website to the user’s computer. For this, the user’s IP address must remain stored for the duration of the session.

Storage in log files takes place to ensure the functionality of the website. We also use the data to optimize the website and to ensure the security of our information technology systems. The data are not evaluated for marketing purposes in this context. These purposes also constitute our legitimate interest in data processing under Art. 6(1)(f) GDPR.

3.4 Storage period

The data are erased as soon as they are no longer necessary to achieve the purpose for which they were collected. Where data are collected to provide the website, this is the case when the respective session has ended. Where data are stored in log files, this is the case after seven days at the latest. Storage beyond this is possible. In that case, the users’ IP addresses are erased or altered so that the accessing client can no longer be identified.

3.5 Options to object and to remove data

The collection of data to provide the website and the storage of data in log files are essential for operating the website. Consequently, the user has no option to object.

4. Use of cookies

a) Description and scope of data processing Our website uses cookies. Cookies are text files stored in the internet browser or by the internet browser on the user’s computer system. When a user accesses a website, a cookie may be stored on the user’s operating system. This cookie contains a characteristic string of characters that allows the browser to be uniquely identified when the website is accessed again.

We use cookies to make our website more user-friendly. Some elements of our website require that the accessing browser can be identified even after a page change.

When our website is accessed, the user is informed about the use of cookies for analysis purposes and their consent to the processing of the personal data used in this context is obtained. In this context, reference is also made to this privacy policy.

b) Legal basis for data processing The legal basis for the processing of personal data using technically necessary cookies is Art. 6(1)(f) GDPR.

The legal basis for the processing of personal data using cookies for analysis purposes is, where the user has given consent to this effect, Art. 6(1)(a) GDPR.

c) Purpose of data processing The purpose of using technically necessary cookies is to make websites easier for users to use. Some functions of our website cannot be offered without the use of cookies. For these, the browser must be recognized even after a page change.

The user data collected through technically necessary cookies are not used to create user profiles. Analysis cookies are used for the purpose of improving the quality of our website and its content. Through the analysis cookies we learn how the website is used and can thus continually optimize our offering. These purposes also constitute our legitimate interest in the processing of personal data under Art. 6(1)(f) GDPR.

d) Storage period, options to object and to remove data Cookies are stored on the user’s computer and transmitted by it to our site. As a user, you therefore also have full control over the use of cookies. By changing the settings in your internet browser, you can disable or restrict the transmission of cookies. Cookies already stored can be deleted at any time. This can also be done automatically. If cookies are disabled for our website, it may no longer be possible to use all functions of the website to their full extent.

5. Google Analytics

This website uses functions of the web analytics service Google Analytics. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. The use includes the “Universal Analytics” operating mode. This makes it possible to assign data, sessions and interactions across several devices to a pseudonymous user ID and thus to analyze a user’s activities across devices.

Google Analytics uses so-called “cookies”. These are text files that are stored on your computer and that enable an analysis of your use of the website. The information generated by the cookie about your use of this website is generally transmitted to a Google server in the USA and stored there.

5.1 IP anonymization

We have activated the IP anonymization function on this website. As a result, your IP address is shortened by Google within member states of the European Union or in other states party to the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there.

On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide the website operator with other services related to website use and internet use. The IP address transmitted by your browser as part of Google Analytics is not combined with other Google data.

These purposes also constitute our legitimate interest in data processing. The legal basis for the use of Google Analytics is Art. 6(1)(a) GDPR. The data we send that are linked to cookies, user identifiers (e.g. user ID) or advertising IDs are automatically deleted after 14 months. Data whose retention period has been reached are deleted automatically once a month. Further information on terms of use and data protection can be found at google-analytics-terms or at google-policies.

5.2 Browser plugin

You can prevent the storage of cookies by adjusting your browser software accordingly; however, we point out that in this case you may not be able to use all functions of this website to their full extent. You can also prevent the collection of the data generated by the cookie and relating to your use of the website (including your IP address) by Google, as well as the processing of these data by Google, by downloading the browser plugin available at the following link and installing it.

5.3 Objection to data collection

You can prevent Google Analytics from collecting your data by clicking on the following link. An opt-out cookie is set, which prevents the collection of your data on future visits to this website: Disable Google Analytics.

More information on how Google Analytics handles user data can be found in Google’s privacy policy.

5.4 Commissioned data processing

We have concluded a contract for commissioned data processing with Google and fully implement the strict requirements of the German data protection authorities when using Google Analytics. Google, Inc. has undertaken to treat all personal data received from the EU in accordance with the principles of the Privacy Shield Framework between the EU and the USA (Art. 45(3) GDPR). Further information on Privacy Shield can be found here.

6. Newsletter

6.1 Description and scope of data processing

On our website you can subscribe to a free newsletter. When you sign up for the newsletter, the data from the input form are transmitted to us. (1) Email address (2) First name (optional) (3) Last name (optional) (4) Company

In addition, the following data are collected when you sign up: (1) IP address of the accessing computer (2) Date and time of registration

Your consent to the processing of the data is obtained during the sign-up process, and reference is made to this privacy policy.

In connection with the data processing for sending newsletters, the data are not passed on to third parties. The data are used exclusively for sending the newsletter.

6.2 Legal basis for data processing

The legal basis for the processing of the data after the user has signed up for the newsletter is, where the user has given consent, Art. 6(1)(a) GDPR.

6.3 Purpose of data processing

The user’s email address is collected in order to deliver the newsletter. The collection of other personal data during the sign-up process serves to prevent misuse of the services or of the email address used.

6.4 Storage period

The data are erased as soon as they are no longer necessary to achieve the purpose for which they were collected. The user’s email address is accordingly stored for as long as the newsletter subscription is active.

The other personal data collected during the sign-up process are generally deleted after a period of seven days.

6.5 Options to object and to remove data

The data subject can cancel the newsletter subscription at any time. For this purpose, every newsletter contains a corresponding link.

This also makes it possible to withdraw consent to the storage of the personal data collected during the sign-up process.

7. Contact form and email contact

7.1 Description and scope of data processing

Our website has a contact form that can be used to contact us electronically. If a user takes up this option, the data entered in the input form are transmitted to us and stored. Alternatively, you can contact us via the email address provided. In this case, the user’s personal data transmitted with the email are stored.

In this context, the data are not passed on to third parties. The data are used exclusively for processing the conversation.

7.2 Legal basis for data processing

The legal basis for the processing of the data is, where the user has given consent, Art. 6(1)(a) GDPR.

The legal basis for the processing of data transmitted in the course of sending an email is Art. 6(1)(f) GDPR. If the email contact aims at concluding a contract, Art. 6(1)(b) GDPR is an additional legal basis for the processing.

7.3 Purpose of data processing

We process the personal data from the input form solely to handle the contact. In the case of contact by email, this also constitutes the necessary legitimate interest in processing the data.

The other personal data processed during the sending process serve to prevent misuse of the contact form and to ensure the security of our information technology systems.

7.4 Storage period

The data are erased as soon as they are no longer necessary to achieve the purpose for which they were collected. For the personal data from the input form of the contact form and those sent by email, this is the case when the respective conversation with the user has ended. The conversation has ended when the circumstances indicate that the matter in question has been conclusively resolved. The personal data additionally collected during the sending process are deleted after a period of seven days at the latest.

7.5 Options to object and to remove data

The user may withdraw consent to the processing of the personal data at any time. If the user contacts us by email, they may object to the storage of their personal data at any time. In such a case, the conversation cannot be continued.

In this case, all personal data stored in the course of the contact are erased.

8 Rights of the data subject

8.1 Right to access, rectification, erasure, restriction and portability

Subject to the statutory requirements, you have the right to request from us access to personal data or data processing concerning you (Art. 15 GDPR), rectification, erasure and restriction of personal data or data processing concerning you (Art. 16 to 18 GDPR) and portability of personal data concerning you (Art. 20 GDPR).

8.2 Right to withdraw consent

In addition, subject to the statutory requirements under Art. 21 GDPR, you have a right to object to data processing based on a “legitimate interest” of the controller pursuant to Art. 6(1)(f) GDPR.

You have the right to withdraw your declaration of consent under data protection law at any time. The withdrawal of consent does not affect the lawfulness of the processing carried out on the basis of the consent before its withdrawal. To exercise any of these rights, please contact us at the email address datenschutz@pedlar.de or the postal address Jakob-Funke-Platz 2, 45127 Essen.

8.3 Right to lodge a complaint with a supervisory authority

Pursuant to Art. 77(1) GDPR, you have the right to lodge a complaint with the supervisory authority if you believe that the processing of your personal data is not lawful, in particular that it infringes the GDPR.

The address of the supervisory authority responsible for us is:

State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia P.O. Box 20 04 44 40102 Düsseldorf

Phone: 0211/38424-0 Fax: 0211/38424-999 Email: poststelle@ldi.nrw.de