We take data protection very seriously and are anxious to protect your personal data also within the scope of our website. With the following information we would like to give you an overview of the processing of your personal data by us and your rights under data protection law. By personal data we mean all data concerning the personal and factual circumstances of a natural person. Personal data collected on our website is used exclusively for our own purposes.
1.1 Legal basis of data processing
The legal basis for data processing within the framework of the EU basic data protection regulation results for our data processing from Art. 6 DS-GVO. In detail, depending on the situation in which we process your data, different legal bases may arise.
Where your consent has been obtained for processing operations of personal data, Article 6 I a) of the DPA is the legal basis for the processing of the data. Consent that has been granted can be revoked at any time with effect for the future.
Article 6 I b) of the DS Block Exemption Regulation is the legal basis for the processing of personal data collected for the performance of a contract to which you are party. This also applies to processing operations necessary for the implementation of pre-contractual measures.
Insofar as the processing of personal data is necessary to fulfil a legal obligation to which our company is subject, Article 6 I c) DS-GVO serves as the legal basis.
In the event that vital interests of you or another natural person require the processing of personal data, Article 6 I d) DSGVO the legal basis.
If the processing is necessary to protect a legitimate interest of our company or of a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the former interest, Article 6 I f) of the DS Block Exemption Regulation serves as the legal basis for the processing. The legitimate interest of our company lies in the performance of our business activities.
According to Art. 88 of the Basic Data Protection Regulation (DS-GVO) in conjunction with Art. 26 of the Federal Data Protection Act (BDSG), personal data of employees will be processed for the purposes of the employment relationship if this is necessary for the decision on the establishment of an employment relationship or, after the establishment of the employment relationship, for its implementation or termination or for the exercise or fulfilment of the rights and duties of employee representation arising from a law or a collective agreement, a works or service agreement (collective agreement).
1.2. Rights of the parties concerned
Within the scope of our data processing, personal data of you will be processed. You are entitled to the rights from the third chapter of the DS-GVO with regard to our company.
We observe the rights to information, correction, restriction of processing, deletion or transferability of your personal data. You can assert these rights as follows:
Right to information
You have the right to ask us to confirm whether we process personal data concerning you. If this is the case, you have the right to be informed about this personal data and to receive the following information:
the purposes of the processing;
the categories of personal data being processed;
the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular in the case of recipients in third countries or international organisations;
if possible, the envisaged duration for which the personal data will be stored or, if that is not possible, the criteria for determining that duration;
the existence of a right of rectification or erasure of personal data relating to you or of a right of opposition to or limitation of the processing by the controller;
the existence of a right of appeal to a supervisory authority;
where the personal data are not collected from the data subject, any available information as to their source;
the existence of automated decision making, including profiling, as referred to in Article 22 (1) and (4) and, at least in those cases, relevant information about the logic involved and the scope and intended impact of such processing on the data subject.
If personal data are transferred to a third country or to an international organisation, you have the right to be informed of the appropriate safeguards in accordance with Article 46 of the DS Block Exemption Regulation in connection with the transfer.
We will provide you with a copy of the personal data that is the subject of the processing. For any further copies that you request, we may charge you a reasonable fee based on the administrative costs. If you request information electronically, we must provide the information in a standard electronic format unless you specify otherwise.
The right to receive a copy must not prejudice the rights and freedoms of others.
Right of rectification
You also have the right to request that incorrect personal data concerning you be corrected without delay. Taking into account the purposes of the processing, you have the right to request the completion of incomplete personal data, including by means of a supplementary declaration.
Right of cancellation ("right to be forgotten")
You also have the right to request that we delete any personal data relating to you immediately, and we are obliged to delete personal data immediately if any of the following reasons apply:
The personal data are no longer necessary for the purposes for which they were collected or otherwise processed.
You revoke your consent to which the processing is subject pursuant to Article 6 I lit. a DS-BER or Article 9 (2)(a), and there is no other legal basis for the processing.
You object to the processing in accordance with Article 21 (1) and there are no legitimate legitimate prior grounds for processing, or you object to the processing in accordance with Article 21 (2).
The personal data have been processed unlawfully.
The erasure of personal data is necessary to comply with a legal obligation under Union law or the law of the Member States to which we are subject.
The personal data have been collected in relation to information society services offered in accordance with Article 8 (1).
Where we have made personal data public and are under an obligation to delete them in accordance with paragraph 1, we shall take reasonable measures, including technical measures, taking into account available technology and implementation costs, to inform data controllers who process personal data that you have requested the deletion of all links to such personal data or of copies or replications of such personal data. This does not apply if the processing is necessary
on the exercise of the right to freedom of expression and information;
to comply with a legal obligation requiring processing under Union or national law to which we are subject or to perform a task carried out in the public interest or in the exercise of official authority vested in us;
for reasons of public interest relating to public health, in accordance with Article 9 (2)(h) and (i) and Article 9 (3);
for archival, scientific or historical research purposes in the public interest or for statistical purposes as referred to in Article 89 (1), where the right referred to in paragraph 1 is likely to make it impossible or seriously prejudicial to the achievement of the purposes of such processing, or
to assert, exercise or defend legal claims.
Right to limit processing
You have the right to demand that we restrict processing if
the accuracy of your personal data is disputed by you, for a period that allows us to verify the accuracy of the personal data;
the processing is unlawful and you object to the deletion of the personal data and request instead the restriction of the use of the personal data;
we no longer need the personal data for the purposes of the processing, but you need the personal data to assert, exercise or defend legal claims, or
you have lodged an objection to the processing pursuant to Article 21 (1), as long as it has not been established that our legitimate reasons outweigh yours.
Where processing has been restricted in accordance with paragraph 1, such personal data may be processed, with the exception of storage, only with your consent or for the purpose of asserting, exercising or defending legal claims or protecting the rights of another natural or legal person or on grounds of an important public interest of the Union or a Member State. 4.5.2016 L 119/44 Official Journal of the European Union EN
A data subject who has obtained a restriction on processing pursuant to paragraph 1 shall be informed by the controller before the restriction is lifted.
Obligation to notify in relation to the rectification or erasure of personal data or the restriction of processing
We shall notify all recipients to whom personal data have been disclosed of any rectification or erasure of personal data or any restriction on processing under Articles 16, 17(1) and 18, unless this proves impossible or involves a disproportionate effort. We will inform you of these recipients if you so request.
Right to data transferability
You have the right to receive the personal data concerning you which you have provided us with in a structured, common and machine-readable format and you have the right to transfer such data to another responsible party, without hindrance from us, to whom the personal data has been provided, provided that
processing is based on an authorisation in accordance with Article 6 (1)(a) or Article 9 (2)(a) or on a contract in accordance with Article 6(1)(b), and
the processing is carried out by means of automated procedures.
When exercising your right to data transfer in accordance with paragraph 1, you have the right to obtain that the personal data be transferred directly from us to another controller, insofar as this is technically feasible.
The exercise of the right referred to in paragraph 1 of this Article is without prejudice to Article 17. This right shall not apply to processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
The right referred to in paragraph 2 shall not affect the rights and freedoms of other persons.
You also have the right to consult our Data Protection Officer on the aforementioned rights and on all matters relating to the processing of your personal data.
Right of appeal
You can also exercise your right of appeal to the relevant supervisory authorities.
Right of objection
You have the right to object at any time, on the grounds relating to your particular situation, to the processing of personal data concerning you that is carried out pursuant to Article 6 I e) or f), including profiling based on this provision. The data controller shall then stop processing the personal data unless he can demonstrate compelling legitimate reasons for processing which outweigh the interests, rights and freedoms of the data subject or for the purpose of exercising or defending legal claims.
Where your personal data are processed for the purpose of direct marketing, you have the right to object at any time to the processing of personal data relating to you for the purpose of such marketing, including profiling, where it is linked to such direct marketing.
If you object to processing for the purposes of direct marketing, your personal data will no longer be processed for those purposes.
In the context of the use of information society services, and without prejudice to Directive 2002/58/EC, you may exercise your right of objection by means of automated procedures using technical specifications.
You have the right to object, for reasons arising from your particular situation, to the processing of personal data concerning you which is carried out for the purposes of scientific or historical research or for statistical purposes, in accordance with Article 89, paragraph 1, unless the processing is necessary for the performance of a task carried out in the public interest.
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority if you believe that the processing of personal data concerning you is in breach of the DS Block Exemption Regulation
1.3. Web server logs
In the context of the use of our Internet offer, the connection information is stored in the server log files.
This information includes:
- IP address of the calling system
- Browser information such as the operating system used and screen resolution
- Accessed website
- Original website
- Time of the call
The web server logs are processed exclusively for security purposes.
We use the log data only for statistical evaluations for the purpose of operation, security and optimization of the offer. However, we reserve the right to check the log data subsequently if there is a justified suspicion of illegal use based on concrete evidence.
It is possible at any time to object to the setting of cookies by changing the setting in the Internet browser accordingly. Set cookies can be deleted. Please note that if cookies are deactivated, it may not be possible to use all functions of our website to their full extent.
The exact functions of the cookies can be found in the more detailed information of this data protection declaration.
If you delete your cookies, the deactivation cookie of the respective service will also be deleted and may have to be reactivated the next time you visit our website.
1.6. Google Analytics
We have concluded an order contract with Google Germany GmbH - GOOGLE ANALYTICS DEUTSCHLAND, which ensures that personal data is processed exclusively according to our instructions, usually within Europe. On our website IP-anonymisation (IP-mask method) is activated, whereby the IP address is automatically anonymised.
For further information on Google Analytics and data protection, please visit https://www.google.com/intl/de/analytics/privacyoverview.html.
Your data will be deleted after 14 months.
1.6. Google Maps
1.7. YouTube Videos
The website uses videos and plugins from the service provider YouTube LLC, 901 Cherry Avenue, San Bruno, CA 94066, USA. YouTube is legally represented by Google Inc. with headquarters at 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
As soon as a video is displayed on our website, even if only in a still image, a communication link is established with the YouTube server, through which the service receives various data. This data includes the IP address of your computer, any cookies already stored on your computer, and information stored during previous contacts with YouTube. If no data has been saved yet, the service saves cookies on your computer for the first time. When you contact YouTube, the service also receives information about any user account you may have with YouTube. Additional information when interacting with the video, such as clicking the start, pause, or end button, is also transmitted to the provider. You can stop the data processing if you visit a page without video and delete all cookies from your computer.
Further information on data processing and notes on data protection by YouTube can be found at policies.google.com/privacy
1.8. Contact form
On our website there are contact forms which can be used for electronic contact. If a user takes advantage of this possibility, the data entered in the input mask will be forwarded by our web server to our company by e-mail. Please note that communication via the contact form is not encrypted. Please use a secure communication channel for confidential communication in your own interest.
Description and scope of data processing
You can optionally provide us with the following data:
Title, company, surname, first name, street and house number, postcode and city,
telephone, mail address, web address, message
At the time the message is sent, the following additional data is stored in the e-mail that is forwarded to us:
Date and time of the sending process
Legal basis for data processing
The legal basis for the processing of the data is Art. 6 para. 1 lit. a DSGVO if the user has given his consent. The legal basis for the processing of data transmitted in the course of sending an e-mail is Art. 6 para. 1 letter f DSGVO. If the e-mail contact is aimed at the conclusion of a contract, the additional legal basis for processing is Art. 6 para. 1 lit. b DSGVO.
Purpose of data processing
The processing of the personal data from the input mask serves us only for the processing of the establishment of contact. In the case of contacting us by e-mail, this is also the necessary legitimate interest in the processing of the data. The other personal data processed during the sending process serve to prevent misuse of the contact form and to ensure the security of our information technology systems.
Duration of storage
The data will be deleted as soon as they are no longer necessary for the purpose for which they were collected. For the personal data from the input mask of the contact form and those sent by e-mail, this is the case when the respective conversation with the user has ended. The conversation is finished when it can be concluded from the circumstances that the matter in question has been finally clarified. The additional personal data collected during the sending process will be deleted at the latest.
Possibility of objection and removal
The user has the possibility to revoke his consent to the processing of personal data at any time. If the user contacts us by e-mail, he can object to the storage of his personal data at any time. In such a case the conversation cannot be continued. The following is a description of how to revoke the consent and object to the storage. All personal data stored in the course of the contact will be deleted in this case.
1.9. Google Web Fonts
On our website, we use so-called web fonts, which are provided by Google, for the uniform display of fonts. When you call up one of our pages, your browser loads the required web fonts into its browser cache in order to display texts and fonts correctly.
For this purpose, the browser you use must connect to Google's servers. This enables Google to know that our website has been accessed via your IP address. The use of Google Web Fonts is in the interest of a uniform and attractive presentation of our online offers. This represents a legitimate interest in the sense of Art. 6 para. 1 lit. f DSGVO.
If your browser does not support Web Fonts, a standard font from your computer or browser will be used.
2.0. Privacy Contact
Concrete questions or comments on the handling of personal data can be sent to firstname.lastname@example.org at any time.
Responsible for data processing according to art. 4 no.7 DS-GVO
Maschinenfabrik Mönninghoff GmbH & Co.KG
D - 44789 Bochum
Tel +49 234 3335 100
Dipl.-Kfm. Bodo Finger
Data protection officer
Tel +49 228 / 28614060