Privacy Policy

 

We are happy that you visit our website and thank you for your interest in our company. The protection of your privacy when using our website is important to us. Therefore, when using your personal data, we will strictly comply with the applicable data protection regulations. Below you will find information about how we collect and use personal data when you use our website.

What are personal data? The concept of personal data is defined in the German Federal Data Protection Act (BDSG (new)) and in the European General Data Protection Regulation (GDPR). These texts define personal data as details of personal or factual circumstances of an identified or identifiable natural person. This includes, for example, your name, address, phone number, email address or date of birth.

You can visit our website without disclosing any information about yourself. We do not store any personal data in this context. To improve our offer, we only analyse statistical data that do not allow any conclusions to be drawn about you. Should we request any personal data on this website (for instance, name, address or email addresses) the provision of such information takes place on a voluntary basis. Such data will not be forwarded to third parties without your express agreement.
On the following pages, we would like to inform you about the processing of your personal data by us and the rights and claims to which you are entitled under the data protection regulations.

I. Name and address of controller

The controller within the meaning of the General Data Protection Regulation (GDPR) and other national data protection laws of the Member States as well as other data protection regulations is the following:

DEBUS Glühen - Wärmebehandlung - Sandstrahlung GmbH
Setzer Straße 6
57223 Kreuztal-Buschhütten
Germany
Phone: +49 (271) 303918-0
Email: info@debus-gluehen.de
Website: www.debus-gluehen.de

II. Name and address of data protection officer

The data protection officer of the controller is:

Sven Giesler
desegna Business IT Solutions
Eickhoffstr. 6
57234 Wilnsdorf
Germany
Phone: +49 (2737) 9409-866
Email: datenschutz@desegna.de
Website: www.desegna.de

III. General information on data processing

1. Scope of personal data processing

We only collect and use personal data of our users to the extent necessary to provide a functional website as well as our content and services. The personal data of our users are only collected and used on a regular basis if the user has consented to this. An exception applies in such cases in which prior consent cannot be obtained for actual reasons and legal provisions permit the processing of the data.

2. Legal basis for the processing of personal data

Insofar as we obtain the consent of the data subject for operations of processing of personal data, Art. 1 (a) of the EU General Data Protection Regulation (GDPR) serves as the legal basis for the processing of personal data.

Art. 6 (1) (b) GDPR serves as the legal basis for the processing of personal data required for the fulfilment of a contract to which the data subject is a party. This also applies to processing operations which are necessary for carrying out pre-contractual measures.

Insofar as processing of personal data is necessary to fulfil a legal obligation of our company, Art. 6 (1) (c) GDPR serves as the legal basis.

In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 (1) (d) GDPR serves as the legal basis.

If the processing is necessary to safeguard a legitimate interest of our company or a third party and the interests, fundamental rights and fundamental freedoms of the data subject do not outweigh the first interest, Art. 6 (1) (f) GDPR serves as the legal basis for the processing.

3. Data erasure and storage period

The personal data of the data subject will be erased or blocked as soon as the purpose of the storage no longer applies. Data may also be stored if this has been provided for by European or national legislators in EU regulations, laws or other provisions the controller is subject to. The data will also be blocked or erased upon expiry of a storage period prescribed by the aforementioned legal standards unless there is a necessity for further storage of the data in order to enter into or fulfil a contract.

IV. Website provision and log file creation

1. Description and scope of data processing

Every time our website is viewed, our system automatically collects data and information from the computer system of the viewing terminal.
The following data are collected:

• Information about the browser type and the version used
• The user’s operating system
• Date and time of access
• Sites from which the user’s system reaches our website

The data are also stored in the log files of our system. This does not affect the IP addresses of the user or any other data that allow the data to be attributed to a user. These data are not stored together with other personal data of the user.

2. Legal basis for data processing

The legal basis for the temporary storage of the data is Art. 6 (1) (f) GDPR.

3. Purpose of data processing

Temporary storage of the IP address by the system is necessary to enable delivery of the website to the user’s computer. For this purpose, the IP address of the user needs to remain stored for the duration of the session.

This is within our legitimate interest in data processing in accordance with Art. 6 (1) (f) GDPR.

4. Duration of storage

The data will be erased as soon as they are no longer required for the purpose of their collection. In case of the collection of data for the provision of the website, this is the case when the respective session has ended.

5. Possibility of objection and removal

The collection of data for the provision of the website and the storage of the data in log files is absolutely necessary for the operation of the website. Consequently, there is no possibility of objection on the part of the user.

V. Use of cookies

1. Description and scope of data processing

Our website uses cookies. Cookies are text files that are stored in the web browser or by the web browser on the computer system of the user. If a user calls up a website, a cookie can be stored in the operating system of the user. This cookie contains a characteristic string that allows the browser to be uniquely identified when the website is viewed again.

The following data are stored and transmitted in the cookies:

• Language settings

We also use cookies on our website which allow an analysis of the browsing behaviour of the users.

In this way, the following data can be transmitted:

• Use of advertisements
• Frequency of page views

However, the data collected in this way do not receive any information with which users can be personally identified. The data are not stored together with other personal data of the users.

When viewing our website, the user is informed about the use of cookies for analysis purposes and the consent to processing is obtained from the user. In this context, reference is also made to this Privacy Policy.

2. Legal basis for data processing

The legal basis for the processing of personal data using technically necessary cookies is Art. 6 (1) (f) GDPR.

The legal basis for the processing of personal data using cookies for analysis purposes is Art. 6 (1) (a) GDPR if the user has consented to this.

3. Purpose of data processing

The purpose of using technically necessary cookies is to simplify the use of websites for users. Some functions of our website cannot be offered without the use of cookies. For these functions, it is necessary that the browser is recognised even after a page change.

We require cookies for the following applications:

• Applying language settings

The user data collected by technically necessary cookies are not used to create user profiles.

The use of analysis cookies serves the purpose of improving the quality of our website and of our advertising. We use the analysis cookies to learn how the placed advertisement is used in order to continuously optimise our offer. For this purpose, we use analysis cookies from Google Analytics as well as from Google AdWords.

Google Analytics cookies

Google Analytics is a web analysis service of Google Inc. (“Google”). Google Analytics uses cookies which allow us to analyse the use of our website. The information about your use of this website generated by the cookie is usually transmitted to a Google server in the USA and stored there. However, due to the IP anonymisation used on our website, your IP address will be shortened beforehand by Google within member states of the European Union or in other states which are parties to the Agreement on the European Economic Area. The full IP address is transmitted to a Google server in the USA and shortened there in exceptional cases only. On behalf of the owner of this website, Google will use this information to evaluate your use of the website, to compile reports on website activities and to provide other services related to website use and internet use to the website owner. The IP address transmitted by your browser for the purposes of Google Analytics will not be merged with other data from Google. You can prevent the storage of cookies by setting up your browser software accordingly; please note that you then may not be able to use all functions of this website to their full extent.
You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plug-in available under the following link: tools.google.com/dlpage/gaoptout.

You can prevent the collection by Google Analytics by clicking on the following link. An opt-out cookie will be set which prevents the future collection of your data when visiting this website: Disable now

For more information on the terms of service and data protection, visit http://www.google.com/analytics/terms/gb.html or https://www.google.com/intl/en/policies/. We advise you that Google Analytics has been extended by the code “anonymizeIp” on this website to ensure the anonymised collection of IP addresses (so-called IP masking).

Google AdWords cookies

AdWords is an online advertising program of Google Inc. (“Google”). For the purposes of Google AdWords, we use a process called conversion tracking. If you have accessed our website via an advertisement placed by Google, Google AdWords will set a cookie on your computer. The conversion tracking cookie is set when a user clicks on an advertisement placed by Google. These cookies expire after 30 days and are not used for personal identification. When the user visits certain pages of our website and the cookie has not yet expired, we and Google can recognise that the user has clicked on the advertisement and has been forwarded to this page. Each Google AdWords customer receives a different cookie. Cookies cannot therefore be tracked via the websites of AdWords customers. The information gathered with the help of the conversion cookie is used to generate conversion statistics for AdWords customers who have opted for conversion tracking. The customers receive information about the total number of users who clicked on their advertisement and were redirected to a page with a conversion tracking tag. However, they do not receive any information with which users can be personally identified. For more information about Google AdWords and Google conversion tracking, see Google’s privacy policy: https://www.google.com/policies/privacy/.
These purposes also fall under our legitimate interest in the processing of personal data in accordance with Art. 6 (1) (f) GDPR.

4. Duration of storage, possibility of objection and removal

Cookies are stored on the user’s computer and transmitted by this computer to our site. You as a user therefore also have full control over the use of cookies. By changing the settings in your web browser, you can disable or restrict the transfer of cookies. Cookies already stored can be deleted at any time. This can also be done automatically. If cookies are disabled for our website, it may no longer be possible to use all functions of the website to their full extent.

VI. Use of Google Maps

1. Description and scope of data processing

This website uses Google Maps to display maps and to generate directions. To use the functions of Google Maps, it is necessary that the address data entered by you in the route planner are transmitted to a Google server in the USA and stored there. The provider of this page has no influence on this transfer of data.
At the time of sending the route query, the following data are also stored:

• IP address

Your consent to the processing of the data is obtained beforehand and reference is made to this Privacy Policy. In Google’s privacy policy at: https://www.google.com/policies/privacy you will find information about which data are collected for which purpose. The additional terms of service for Google Maps are available at: https://www.google.com/intl/en/help/terms_maps.html.

2. Legal basis for data processing

The legal basis for the processing of the data is Art. 6 (1) (a) GDPR if the user has consented to this.

3. Purpose of data processing

The integration of Google Maps into our website serves the purpose of giving our customers a simple tool to facilitate their journey when visiting our premises. Data entered for this purpose will not be disclosed by us.

4. Duration of storage, possibility of objection and removal

The data will be erased as soon as they are no longer required for the purpose of their collection. You can prevent the transfer of data to Google by disabling “JavaScript” in your browser. In this case, however, no maps can be displayed.

VII. Rights of the data subject

If personal data concerning you are processed, you are a data subject within the meaning of the GDPR and you have the following rights vis-à-vis the controller:

1. Right of access

You can request a confirmation from the controller as to whether personal data relating to you will be processed by us.
If such processing is made, you can request to be given access by the controller to the following information:

• The purposes for which the personal data are processed;
• The categories of personal data which are processed;
• The recipients and/or categories of recipients to whom the personal data relating to you has been disclosed or is still being disclosed;
• The planned duration of storage of the personal data relating to you or, if specific details cannot be provided, criteria for determining the storage period;
• The existence of a right to rectification or erasure of personal data relating to you, a right to restriction of processing by the controller or a right to object to such processing;
• The existence of a right to lodge a complaint with a supervisory authority;
• Any available information on the origin of the data if the personal data are not collected from the data subject;
• The existence of automated decision-making, including profiling, in accordance with Art. 22 (1) and (4) GDPR and – at least in these cases – meaningful information about the logic involved and the scope and the intended effects of such processing on the data subject.
  You have the right to request access to information on whether the personal data relating to you are transmitted to a third country or to an international organisation. In this context, you may request to be informed of the appropriate safeguards in accordance with Art. 46 GDPR in connection with the transfer.

2. Right to rectification

You have a right to rectification and/or completion vis-à-vis the controller if the processed personal data relating to you are incorrect or incomplete. The controller shall implement the rectification without undue delay.

3. Right to restriction of processing

You may request the restriction of the processing of the personal data relating to you if one the following applies:

• You contest the accuracy of the personal data relating to you for a period enabling the controller to verify the accuracy of the personal data;
• The processing is unlawful and you oppose the erasure of personal data and request the restriction of the use of the personal data instead;
• The controller no longer needs the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise or defence of legal claims; or
• You have objected to the processing pursuant to Art. 21 (1) GDPR pending the verification whether the legitimate grounds of the controller outweigh your grounds.

Where the processing of the personal data relating to you has been restricted, such data shall be processed – with the exception of storage – only with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of an important public interest of the European Union or of a member state.

If the processing has been restricted in accordance with the aforementioned conditions, you will be informed by the controller before the restriction of processing is lifted.

4. Right to erasure

a) Erasure obligation

You can request the controller to erase the personal data relating to you without undue delay, and the controller has the obligation to erase this data without undue delay, provided that one of the following grounds applies:

• The personal data relating to you are no longer necessary in relation to the purposes for which they were collected or otherwise processed.
• You withdraw your consent on which the processing was based in accordance with Art. 6 (1) (a) or Art. 9 (2) (a) GDPR, and there is no other legal basis for the processing.
• You object to the processing pursuant to Art. 21 (1) GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Art. 21 (2) GDPR.
• The personal data relating to you have been unlawfully processed.
• The personal data relating to you have to be erased for compliance with a legal obligation under EU or member state law to which the controller is subject.
• The personal data relating to you have been collected in relation to the offer of information society services referred to in Art. 8 (1) GDPR.
• Information to third parties

If the controller has made the personal data relating to you public and if they have the obligation to erase them pursuant to Art. 17 (1) GDPR, they shall take appropriate measures, including technical measures, taking into account the available technology and the implementation costs, in order to inform controllers who process the personal data that you, as the data subject, have requested from them the erasure of all links to such personal data or copies or replications of those personal data.

b) Exceptions

The right to erasure does not exist to the extent that the processing is necessary:

• For exercising the right of freedom of expression and information;
• For compliance with a legal obligation which requires processing by EU or member state law to which the controller is subject, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
• For reasons of public interest in the area of public health in accordance with Art. 9 (2) (h) and (i) as well as Art. 9 (3) GDPR;
• For archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Art. 89 (1) GDPR insofar as the right referred to in paragraph a) is likely to render impossible or seriously impair the achievement of the objectives of that processing; or
• For the establishment, exercise or defence of legal claims.

5. Right of information

If you have asserted the right to rectification, erasure or restriction of processing vis-à-vis the controller, the controller shall have the obligation to communicate this rectification or erasure of the data or restriction of processing to all recipients to whom the personal data relating to you have been disclosed, unless this proves impossible or involves a disproportionate effort.

You have the right vis-à-vis the controller to be informed about these recipients.

6. Right to data portability

You have the right to receive the personal data relating to you which you have provided to the controller in a structured, commonly used and machine-readable format. In addition, you have the right to transmit these data to another controller without hindrance from the controller to whom the personal data have been provided, where:

• the processing is based on consent pursuant to Art. 6 (1) (a) GDPR or Art. 9 (2) (a) GDPR or on a contract pursuant to Art. 6 (1) (b) GDPR; and
• the processing is carried out by automated means.

In exercising this right, you also have the right to have the personal data relating to you transmitted directly from one controller to another, where technically feasible. This shall not adversely affect the freedoms and rights of other persons.

The right to data portability does not apply to any processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

7. Right to object

You have the right, on grounds relating to your particular situation, to object at any time to the processing of personal data relating to you which is based on Art. 6 (1) (e) or (f) GDPR, including profiling based on those provisions.

The controller shall no longer process the personal data relating to you, unless the controller demonstrates compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

Where the personal data concerning you are processed for direct marketing purposes, you have the right to object at any time to processing of the personal data relating to you for such marketing, which includes profiling to the extent that it is related to such direct marketing.

Where you object to the processing for direct marketing purposes, the personal data relating to you will no longer be processed for such purposes.
In the context of the use of information society services – notwithstanding Directive 2002/58/EC – you may exercise your right to object by automated means using technical specifications.

8. Right to withdraw the declaration of consent under data protection law

You have the right to withdraw your declaration of consent under data protection law at any time. The withdrawal of consent does not affect the lawfulness of any processing carried out on the basis of consent prior to its withdrawal.

9. Automated individual decision-making, including profiling

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or which similarly significantly affect you. This does not apply if the decision:

• is necessary for entering into, or performance of, a contract between you and the controller;
• is authorised by EU or member state law to which the controller is subject and that legislation also lays down suitable measures to safeguard your rights and freedoms and your legitimate interests; or
• is based on your explicit consent.

However, these decisions must not be based on special categories of personal data referred to in Art. 9 (1) GDPR, unless Art. 9 (2) (a) or (g) applies and suitable measures are in place to safeguard your rights and freedoms and your legitimate interests.

With regard to the cases referred to in (1) and (3), the controller will implement suitable measures to safeguard your rights and freedoms and your legitimate interests, including at least the right to obtain human intervention on the part of the controller, to express his or her point of view and to contest the decision.

10. Right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the member state of your habitual residence, place of work or place of the alleged infringement, if you consider that the processing of personal data relating to you infringes the GDPR.

The supervisory authority to which the complaint has been lodged will inform the complainant on the progress and the outcome of the complaint, including the possibility of a judicial remedy pursuant to Art. 78 GDPR.

We reserve the right to change this Privacy Policy at any time, subject to the applicable data protection regulations. This document was last updated in May 2019.