Innovation
by information

Data protection declaration

Status: 05/2018

We process the user’s personal data (in the following “data”) only where required for provision of a functional, convenient website as well as out content and services.

“Processing” includes collection, use, forwarding and/or saving. According to the General Data Protection Regulation (“GDPR” in the following), “personal data” is fundamentally all data which can identify a natural person. The precise definition is set out in art. 4 GDPR.

The following clauses provide information about the nature, scope, purpose, duration and legal basis of the processing of personal data, the purposes and means of processing of data about which we make decisions alone or together with others, as well as any use of components from third parties for optimisation and quality who process data at their own responsibility:

_________________________________________

A) Information about responsible persons
B) Users’ rights
C) Information about data processing
_________________________________________

A) Information about responsible persons

The responsible party (hereafter the “supplier”) as understood in the GDPR and other national data protection legislation of member states as well as other data protection regulations is:

infobroking lutz
Dipl. Kfm. Wolfgang Lutz
Hafengasse 5
D-89073 Ulm
Tel.: +49 (0)731 96815-0
Fax: +49 (0)731 96815-99
email: info@infobroking.de


B) Users’ rights

With regard to their personal data processed by the supplier, the user has the right,

1. To request a confirmation whether their data will be processed and precise information about this data, as well as other information and copies of the data as per Art. 15 GDPR;

2. To request immediate correction of incorrect data affecting them, or the completion of this data as per Art. 16 GDPR;

3) To request the immediate deletion of data affecting them as per Art. 17 GDPR, or alternatively, if further processing is required as per Art. 17 Section 3 GDPR, to request restriction of the processing of the data in accordance with Art. 18 GDPR;

4. To receive the data affecting him and supplied by him as per Art. 20 GDPR, and to request transfer thereof to other responsible persons;

5. To submit a complaint to the supervisory authorities as per Art. 77 GDPR, if the user believes that the supplier’s processing of their data is in violation of the GDPR.

6. Fundamentally, the user can prohibit future processing of the data affecting them by a responsible person based on Art. 6 Section 1 letter f GDPR, at any time in accordance with Art. 21 GDPR. The user can specifically object to having their data processed for the purposes of direct marketing.

7. The user is obliged at all times to inform all recipients of the data to whom he has published the data of any correction or deletion of personal data, or a restriction in processing due to Article 16 GDPR, Article 17 Para. 1 GDPR and Article 18 GDPR. This obligation does not apply in the event that this communication is impossible or is associated with excessive effort. The client has the right to information regarding these recipients.


C) Information about data processing

Where there is no detailed information subsequent to the individual data processing stages, the user’s data processed by the supplier will be deleted or blocked, once the purpose of saving no longer applies and the deletion does not contravene any legal storage obligations.

Server data

For technical reasons relating to communications and security, when you visit the website, the following data (amongst others) will be provided to the supplier or their web space provider by the user’s Internet browser. (“server log files”):

- Browser type and version;
- Operating system used;
- Website from which the user switched to the supplier’s website (Referrer URL);
- Website the user is visiting;
- Date and time of access;
- User’s internet protocol (IP) address’.

The data is also saved temporarily. This data is not stored together with other personal data relating to the user. The legal basis for the temporary storage of data is Art. 6 Para 1 letter f GDPR based on the entitled interest of improving stability, functionality and security of the website.

The data will be deleted after seven days at the latest. Data which must be stored for purposes of documentation is excluded from deletion until the event in question is fully clarified.

Cookies

a) “Session” cookies

The supplier uses cookies on their website. Cookies are small text files or other storage technology which the user’s internet browser places and stores on their device. These cookies process certain user information in an individually defined scope, such as browser and location data, plus IP address values.

This processing helps the user make their website more user-friendly, effective and safer. They facilitate processing or possible forwarding of content in different languages or, if required, use of a shopping basket function. If these cookies are used to process personal data for purposes of initiation or processing of a contract, the legal basis of the processing is Art. 6 section. 1 letter. b GDPR.

If the processing is not for purposes of initiation or processing of a contract, the processing aids the entitled interest of the supplier with regard to improving functionality of the website and is based on the legal principle in Art. 6 para. 1 lit. f of the GDPR.

These cookies are deleted once the user closes their browser.

b) Cookies from third parties

Cookies from third party suppliers may by used on the supplier’s website if required. These third-party suppliers are partner companies which the supplied works with for purposes of advertising, analysis or the functionality of the website. If this is the case, the purposes and legal basis of the corresponding processing will be shown in the following sections.

c) Option of removal

The user can prevent or restrict the installation of cookies by changing the settings in their browser software accordingly. Cookies already stored can also be deleted at any time. The settings for this depend on the browser in question. For Flash cookies, the processing cannot be prevented via the browser settings, rather the corresponding settings of the Flash player. If the user prohibits or restricts the installation of cookies, this may mean that all functions of the website may not be fully usable.

Contract processing

a) Processing

The personal data supplied by the user as part of the purchase of goods or services will be processed by the supplier as part of contract processing. The data is required on conclusion of the contract, without providing the data, it is not possible to complete the contract. The legal basis for processing the data is Art. 6 section. 1 letter. b GDPR. Once the contract has been completed, the user’s personal data will be deleted, taking into account the retention periods stipulated under tax and commercial legislation.

b) Transfer

The user’s personal data will be passed on as part of contract execution to the transport company contracted for delivery, or any applicable financial services provider, insofar as this is necessary for delivery or payment of the goods. The legal basis for transfer of data here is Art. 6 section. 1 letter. b GDPR.

Customer account

If the user registers for a customer account with the supplier, the data entered in the course of this registration (e.g. name, address, email address) will only be collected and stored to fulfil a contract or the execution of contractual activities and general administration of the customer relationship (e.g. viewing previous orders or notepad functions). During registration, the IP address plus date and time of registration are saved. This information is not disclosed to any third parties.

Where the user has given consent, the legal basis is Art. 6 Para. 1 letter. a GDPR). As part of the registration process, the consent of the user for the processing above is sought, and attention directed to this data protection declaration. The data collected is solely used to enable you to receive our newsletter. This information is not disclosed to any third parties.

If opening a customer accounts helps fulfil a contract or execute contractual activities, the additional legal basis is Art. 6 section. 1 letter. b GDPR.

Consent given for the customer account can be withdrawn by the user at any time in accordance with Art. 7 para. 3 GDPR by a note to the supplier. The associated processed data will be deleted, once processing is no longer required. If the data is required to fulfil a contract or execute contractual measures, the user’s data will be deleted after expiry of the storage times defined in tax and commercial law.

Credit worthiness checks / scoring

If the user is offered payment on invoice by the supplier in a proposal for goods or services, the supplier reserves the right to forward data of relevance to the contract (in particular first and last name, street, number, postcode, city/town) to a credit agency (such as Bürgel, Schufa, Creditreform, infoscore etc.) for purposes of a credit worthiness check based on mathematic and statistical processes. The supplier will use the information received from this relating to the statistical probability of a payment default for the decision whether to offer payment on invoice as part of contract processing.

The information on creditworthiness may contain probability values (score values) calculated on the basis of scientifically recognised mathematical and statistical processes.

The legal basis for this processing is the entitled interest of the supplier regarding the default security of a receivable as per Art. 6 para. 1 letter f of the GDPR.

Contact questions

If the user makes contact with the supplier via the contact form or email, the personal data entered as part of this will be used to process the query. Entering the data is required to answer the query, without providing the data, it is not possible to answer the query, or only possible to a limited extent. The legal basis for processing the data is Art. 6 section. 1 letter. b GDPR. The user’s data will be deleted once the user’s query has been answered conclusively, and no legal storage obligations contradict this, such as for subsequent contract processing.

Job applications

With regard to digital applications, the application data will be electronically collected and dealt with by us for the purpose of processing the application.

The legal basis for this processing is § 26 para. 1 S.1 GDPR combined with Art. 88 section 1 GDPR.

If your application is followed by the conclusion of a contract of employment, your data may be stored by us in your personal file for the purpose of the normal organisational and administrative process, in compliance with the relevant legal provisions.

The legal basis for this processing is § 26 para. 1 S.1 GDPR combined with Art. 88 section 1 GDPR.

The deletion of the data transmitted takes place upon rejection of the job application automatically two months after announcement of the rejection. This does not apply where we are required to keep the data for a longer period of up to four months, or on completion of a court process due to legal requirements (documentation obligation as per the AGG General Equality Act).

The legal basis is Art. 6 Para. 1 letter f GDPR or. § 24 Para. 1 No. 2 BDSG German Data Protection Act. The entitled interest of the supplier exists in legal defence.

If there is explicit consent for a longer period of data storage in a database of prospects, the data will be processed further due to this consent.

The legal basis is Article 6 Para. 1 letter. a GDPR). The consent for this may be withdrawn at any time for the future as per Art. 7 para. 3 GDPR by a note to the supplier.