With the following data protection declaration, we explain the way we handle personal data in collecting, processing, using and deleting it.
Data protection is a matter of trust, and your trust is important to us. We respect your privacy and personal sphere. The protection and legally compliant collection, processing and use of your personal data are thus an important concern to us. To make sure you feel safe when visiting our website, we strictly observe legal provisions when processing your personal data and would like to inform you here concerning our data collection and data use.
We oblige to comply with the GDPR and nationally applicable data protection laws. For us, data protection is a company-wide topic of high priority, and we only work with partners also able to demonstrate an appropriate level of data protection in their processing framework. We only process your data if you have provided us your express consent to do so, if this relates to a contract or pre-contractual measures on a service basis or if the relevant laws permit or require data processing. The following data protection information covers both the currently applicable national legal framework and the requirements of the EU General Data Protection Regulation (GDPR) valid throughout Europe from May 25, 2018. References to the legal basis of the GDPR are definitive from May 25, 2018. Under no circumstances do we sell your data or disclose them on to unauthorized third parties. We would gladly provide you with detailed information on the handling of your data in our departments below.
We deploy appropriate technical and organizational safety measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or against unauthorized access by third parties. Our security measures are constantly being improved according to the technological state of the art.
We collect and use the personal data of our users only to the extent necessary to provide a functional website and our content and services. The collection and use of personal data of our users takes place regularly only with the consent of the user. An exception applies in cases where prior consent cannot be obtained for factual reasons and the processing of the data is permitted by statutory provisions.
For statistical purposes, we store the name of the requested website, the date and time of the page visit as well as the volume of data transferred. In addition, whether the transmission of the information was successful and the provider through which access occurred.
The temporary storage of the IP address by the system is necessary to enable delivery of the website to the user’s computer. To do so, the IP address of the user must remain stored for the duration of the session.
The data are stored in log files in order to ensure the functionality of the website. In addition, the data are also used to optimize the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not occur in this context.
These purposes also reflect our legitimate interest in data processing according to Art. 6 Section 1 lit. f GDPR.
In order to make our website as pleasant and convenient as possible for you as a user, we occasionally utilize the services of external service providers. Below, you have the opportunity to become informed about data protection regulations for the use and application of the services and functions deployed, in order to be able to exercise your rights, if necessary, also with the service providers.
Our websites use Google Maps to display maps and to create route maps. Google Maps is operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. By using this website, you consent to the collection, processing and use by Google, one of its agents, or third parties of data that is automatically collected and entered by you. The terms of service for Google Maps can be found under “Google Maps Terms of Service”. Extensive details can be found in the Google Safety Center of google.com: “Transparency and choices” and “data protection provisions”.
If you provide us with your e-mail address, we will communicate with you via e-mail. However, we will not pass this address on to third parties outside Donges SteelTec GmbH. If personal data is transmitted to us, depending on the settings of your e-mail program, we will treat it confidentially. An encryption of the transmitted information within the information exchange does not occur.
If you complete a registration form on our website with contact information (“CONTACT”), this information will be used to send you requested responses, product information, messages, etc. Your personal data will be used exclusively for these purposes and will not be passed on to third parties outside Donges SteelTec GmbH. The data that you transmit to us online are not encrypted. The legal basis for this processing of data is the existence of your conclusive user consent provided upon completing the send procedure according to Art. 6 Sect. 1 lit. a GDPR. These data are deleted as soon as they are no longer required for the purpose of their collection. As a user, you have the option of canceling registration at any time. You can change the data stored about you at any time.
You can find more information on Google Analytics and data protection at http://tools.google.com/dlpage/gaoptout?hl=de.
You have the opportunity to subscribe to a free newsletter on our website. When registering for the newsletter, the data from the input screen is transmitted to us.
Specific designation of the data collected is intended to occur at this point. In the minimum case, this concerns the e-mail address of the user.
In connection with data processing for sending out newsletters, no data will be passed on to third parties. The data will be used exclusively for sending out the newsletter.
The purpose of collecting the user’s e-mail address is to deliver the newsletter. The newsletter is sent out based on registration of the user on the website. The collection of other personal data as part of the registration process serves to prevent misuse of the services or the e-mail address used.
The data are deleted as soon as they are no longer required for the purpose of their collection. Accordingly, the user’s e-mail address is stored as long as the newsletter subscription is active.
The newsletter is sent out based on registration of the user on the website.
Personal data otherwise collected in the course of the registration process are usually erased after a period of seven days.
The subscription of the newsletter can be cancelled by the concerned user at any time. For this purpose, each newsletter contains a corresponding unsubscribe link.
The personal data of the subject are deleted or blocked as soon as the purpose for storage no longer applies. In addition, storage can occur beyond this period if this has been provided for by the European or national legislation or in EU regulations, laws or other rules to which the controller is subject. Blockage or erasure of the data shall also occur if a storage period prescribed by the aforementioned standards expires, unless it is necessary for further storage of the data for the conclusion of a contract or for performance of a contract.
Other data are also deleted as soon as they are no longer required for the purpose of their collection. In case data are collected to provide the website, this is the case when the respective session ends.
If the data are stored in log files, they will be deleted at the latest after seven days. Storage beyond this time is possible. In this case, the IP addresses of the users are deleted or rendered anonymous so that any attribution of the client calling up the website is no longer possible.
• Use of website functions.
Depending on the browser you are using, you can set your browser to only accept cookies if you agree to do so. The Help function in the menu bar of your web browser generally shows you how to reject new cookies and how to deactivate cookies that have already been received. We recommend that when using shared computers configured to accept cookies and flash cookies, you always log out completely once you are finished.
The user data collected by us through cookies are not used to create user profiles.
To the extent that we obtain the consent of the data subject for the processing of personal data, Art. 6 Section 1 lit. a EU General Data Protection Regulation (GDPR) serves as the legal basis for the processing of personal data.
Art. 6 Section 1 lit. b GDPR serves as a legal basis for the processing of personal data required for the performance of a contract to which the data subject is a party. This also applies to processing operations necessary for the implementation of pre-contractual measures.
If the processing of personal data is necessary to fulfill a legal obligation to which our company is subject, Art. 6 Section 1 lit. c GDPR serves as the legal basis.
In case vital interests of the data subject or another natural person necessitate the processing of personal data, Art. 6 Section 1 lit. d GDPR serves as the legal basis.
If the processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests, basic rights and fundamental freedoms of the data subject do not take precedence over the first-mentioned interest, Art. 6 Section 1 lit. f GDPR serves as the legal basis for the processing.
According to Art. 15 in conjunction with Art. 34 Federal Data Protection Act (BDSG), you have the unrestricted right to free information about your data stored by us and according to Art. 35 Federal Data Protection Act (BDSG) the right to erasure or blockage of prohibited data or the right to rectification of incorrect data.
Upon request, we are pleased to inform you in writing whether and which personal data we have stored about you. Wherever possible, we will take appropriate measures on short notice to update or correct your data stored by us. All information requests, queries or objections to data processing should please be directed by e-mail directly to our data protection officer, stating your complete mailing address.
You can request confirmation from the controller as to whether personal data relating to you will be processed by us.
• the existence of automated decision-making, including profiling, referred to in Art. 22 Section 1 and 4 GDPR and – at least in these cases – meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.
• You have the right to request information as to whether the personal data concerning you will be transferred to a third country or to an international organization. In this context, you may request to be informed of the appropriate guarantees pursuant to Art. 46 GDPR in connection with the transfer.
You have the right to rectification and/or completion by the data controller if the personal data processed and relating to you are inaccurate or incomplete. The controller is to carry out the correction immediately.
• if the you have objected to processing according to Art. 21 Section 1 GDPR and it has not yet been determined whether the legitimate grounds of the controller override yours.
Where processing has been restricted, these data – with the exception of storage – are only allowed to be processed with your consent or for the assertion, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of vital public interest of the EU or of a Member State.
Where the restriction limits the processing according to the above-mentioned pre-requisites, you will be notified by the controller before the restriction of processing is lifted.
• You withdraw your consent on which processing is based according to Art. 6 Section 1 lit. a or Art. 9 Section 2 lit. a GDPR, and where there is no other legal ground for the processing.
• You object to the processing pursuant to Art. 21 Section 1 GDPR and there are no overriding legitimate grounds for the processing, or you object to processing according to Art. 21 Section 2 GDPR.
• The erasure of the personal data on you is required for compliance with a legal obligation according to EU law or the laws of Member States to which the controller is subject.
• The personal data relating to you have been collected in relation to the offer of information society services referred to in Art.8 Section 1 GDPR.
If the controller has made public the personal data concerning you and if he is obliged to erase it according to Art. 17 Section 1 GDPR, taking into account the available technology and the cost of implementation, including technical measures, the controller shall take reasonable steps to inform controllers processing the personal data that you as a data subject have requested that they erase all links to, copies or replication of, these personal data.
If you have exercised your right to rectification, erasure or restriction of processing vis-à-vis the controller, he is obliged to inform all persons to whom data concerning you has been disclosed of this rectification, erasure or restriction of processing, unless this proves impossible or involves disproportionate effort.
• the processing is carried out with the help of automated procedures.
In exercising this right, you furthermore have the right to have the personal data concerning you transmitted directly from one controller to another, where technically feasible. Freedoms and rights of other persons are not allowed to be infringed by this.
You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you, which occurs based on Art. 6 Section 1 lit. e or f GDPR; this also includes profiling based on these provisions.
The controller shall no longer process the personal data relating to you unless the controller demonstrates compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defense of legal claims.
Where personal data concerning you are processed for direct marketing purposes, you have the right at any time to object to processing of personal data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing.
You have the option within the context of the use of information society services – notwithstanding Directive 2002/58/EC – to exercise your right to object by automated means where technical specifications are used.
You have the right to withdraw your declaration of consent under data protection law at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal. Right of objection and removal.
If you contact us by e-mail, you can object to the storage of your personal data at any time. In such a case, the conversation cannot be continued.
The collection of data for the provision of the website and the storage of data in log files is mandatory for the operation of the website. Consequently, as an exception, there is no possibility of objection in this respect.
Without prejudice to any other administrative or judicial remedy, you shall have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement, if you are of the view that the processing of personal data relating to you infringes the GDPR.