triplex20_neu.jpgtriplex25_neu_sw.jpgtriplex26_neu1_s.jpgtriplex25_neu_s.jpgtriplex24_neu.jpgtriplex26_neu_sw_s.jpgtriplex21_neu.jpg

 

Data Privacy Statement

 

  1. I.        Name and Adress of the Person in Charge

 

The responsible person as defined by the General Data Protection Regulation and other national data privacy acts of the member states as well as other provisions of data protection is:

 

DRALLE Systementwicklungen

Dipl.-Phys. Martin Dralle

Waldweg 1B

38110 Braunschweig

Germany

Tel.: +49 5307 9327-00

E-mail: Diese E-Mail-Adresse ist vor Spambots geschützt! Zur Anzeige muss JavaScript eingeschaltet sein!

Website: www.drallesystem.de

 

  1. General Information Regarding Data Processing

 

  1. Scale of Personal Data Processed

Fundamentally, we only process our user's personal data if it is required for offering a functioning website or our contents and services. The processing of personal user data takes place frequently only after the user's agreement. Exceptions apply to cases in which the processing of data is allowed by statutory provision and prior consent cannot be obtained due to factual causes.

 

  1. Legal Situation for Processing of Personal User Data

The European General Data Protection Regulation (GDPR) art. 6 para. 1 lit. a serves as a legal base when we obtain the affected person's confirmation.

When the processing of personal data is necessary to fulfill a contract the affected person is a contracting party of, art. 6 para. 1 lit. b GDPR serves as a legal base. This also applies to processes which are needed for pre-contractual measures.

The art. 6 para. 1 lit. c GDPR serves as a legal basis if the processing of personal user data is required to fulfill a legal commitment the company is liable to.

In case that vitally import interests of the affected person or any other natural person rely on the processing of personal user data, art. 6 para. 1 lit. d serves as a legal base.

If the processing is required to ensure justified interests of our company or a third party, and are not predominated by the interests, basic rights and fundamental freedoms of the affected person, art. 6 para. 1 lit. f GDPR serves as a legal base for the processing.

 

  1. Data Erasure and Maximum Storage Time

The affected person's personal data will be deleted or disabled once the purpose of storing becomes inapplicable. The data can be stored further, if this is intended by European or national legislative organs in union-legal acts, laws or other prescriptions the person in charge is liable to. The data will be deleted or disabled as well, if the period of data retention, which is prescribed by the referred norms, has expired, unless it is necessary to continue storing the data for closing or fulfilling a contract.

 

  1. III.   Delivery of the Website and Generating Log Files

 

  1. 1.      Description and Scale of the Processed Data

Whenever our internet web page is entered, our system automatically collects data and information of the user's computer system.

Following data are collected:

 

(1)   Information about the type of browser and the used version

(2)   The user's system software

(3)   The user's internet service provider

(4)   The user's IP address

(5)   Date and time of access

(6)   Websites the user's system used to reach our website

(7)   Websites the user's system reached through our website

 

These data are also stored in our system's log files. We storage these data separately from other personal user data.

 

  1. 2.      Legal Base for the Processing of Data

For temporary data and log files storage, art. 6 para. 1 lit. f GDPR serves as a legal basis.

 

  1. 3.      Purpose of the Processing of Data

To make the website's transmission to the user's computer possible, the IP address needs to be stored in the system temporarily. Therefore, the user's IP address needs to be stored during the session.

 

The log files are stored to ensure a functioning website. Moreover, these data help to optimize the website and to guarantee our information-technical systems' security. We don't analyze the data for marketing purposes.

 

These are the purposes of our justified interests in data processing pursuant to art. 6 para. 1 lit. f GDPR.

 

  1. 4.      Length of Data Storage

Data will be deleted once they are not required to fulfill their original purposes. In the case of data collected for website delivery purposes, this will occur as soon as the session ends.

 

Data in log files will be deleted not later than after seven days. It is possible to store the data longer but in this case, the user's IP addresses will be deleted or alienated so that it is not possible to relate the data to the calling client.

 

  1. 5.      Possibilities for Objection and Abolition

To run our website, data collection and storage in log files are compulsory and thus there are no possibilities for objection on the part of the user.

 

  1. IV.   Use of Cookies

 

a)     Description and Scale of the Processed Data

We use cookies on our website. Cookies are text files which are saved in the internet browser respectively by the internet browser on the user's computer system. When a user uses the website, a cookie can be saved on the user's system software. This cookie holds a characteristic character string which allows a distinct browser identification when the website is used again.

 

To create a user-friendly website, we use cookies as some of our website's elements require an identification of the using browser during the session.

Doing so, the cookies store and transmit the following data:

 

(1)   Session ID

(2)   Client ID

 

b)     Legal Basis for Processing of Data

The art. 6 para. 2 lit. f GDPR serves as a legal basis for processing of personal user data using cookies.

 

c)      Purpose of Data Processing

The purpose of the technologically necessary cookies is to simplify the website for our users. Some functions on our website need cookies for delivery. It is required for those functions that cookies are uses during the use of the website.

 

            The following functions depend on cookies:

 

(1)   Memorizing the used websites

(2)   Adopting language settings

(3)   Memorizing search item

The user data, that are collected by technologically necessary cookies, do not serve anything but to offer a functioning website, and are not used to create user profiles.

 

d)     Length of Data Storage, Possibilities for Objection and Abolition

Cookies are saved and transmitted to our website by the user's computer. Thus, the user has complete control over the use of cookies. By changing the internet browser's setting, the user can deactivate or limit the transmission of cookies. Already existing cookies can always be deleted, even automatically. If cookies are deactivated for our website, some functions might not work in the full extent.

 

            The cookies on our website expire after each session.

 

  1. V.     Contact via E-Mail

 

  1. 1.      Description and Scale of Data Processing

When we are contacted via the provided e-mail address, the personal user data, that are transmitted by the e-mail, are stored.

 

In this context, the data will not be passed to third parties. The data will only be used to process the conversation.

 

  1. 2.      Legal Basis for Data Processing

Art. 6 para. 1 lit. a GDPR serves as a legal basis for data processing with the user's agreement.

 

The processing of data transmitted via e-mail happens with art. 6 para. 1 lit. f GDPR as a legal basis. If the e-mail contact aims to close a deal, another legal basis for the data processing is art. 6 para. 2 lit. b GDPR.

 

  1. 3.      Purpose of Data Processing

The required and justified interest in processing data is based on the contacting by the affected person.

Other personal data that are processed during sending the e-mail help avoiding abuse of the e-mail contact and ensuring secure information-technical systems.

 

  1. 4.      Storage Time

Data will be deleted once they are not required to fulfill their original purposes. For personal user data transmitted via e-mail, this is the case when the particular conversation with the user is over. The conversation is over when the circumstances make it clear the concerned issue is clarified.

The personal user data collected while sending the e-mail will be deleted at the latest of seven days later.

 

  1. 5.      Possibilities for Objection and Abolition

When a user contacts us via e-mail, they always can object the storage of their personal user data. In this case, we cannot continue the conversation.

 

To use their right to object and abolish, the user can request so in an e-mail.

 

In this case, all personal user data that were collecting during the contacting will be deleted.

 

  1. VI.   The Affected Person's Rights

When your personal user data is processed, you are a concerned party pursuant to the GDPR and you are entitled to the following rights:

 

  1. 1.      Right to Be Informed

You have the right to be informed by the responsible person, if asked, whether we have processed your personal user data.

 

If your data has been processed, you can demand the following information:

 

(1)   the purposes of processing the personal data;

(2)   the kind of personal user data processed;

(3)   the recipients respectively the categories of recipients your personal user data was disclosed to;

(4)   the intended storage time or, if concrete information in this regard is impossible, criteria to determine the storage time;

(5)   the existence of the right to adjust or delete your personal user data, the right to limit the data processing by the person in charge, or the right to object to the processing;

(6)   the existence of the right to complain to a controlling institution;

(7)   any available information about the data's origin if the personal user data was not collected through the affected user;

(8)   the existence of automatic decision making and profiling pursuant to art. 22 para. 1 and 4 GDPR and – in these cases – significant information about the involved logic, importance and the aspired consequences of such processing for the affected person.

 

You have to right to demand information about whether your personal user data is transmitted to a third party country or an international organization. In this context, you have the right to be informed about adequate guarantees pursuant to art. 46 GDPR in the context of this transmission.

 

  1. 2.      Right to Correct

If your processed personal user data is false or incomplete, you have the right to let the responsible person correct or complete your data. The responsible person has to correct the data immediately.

 

  1. 3.      Right to Limit the Processing

Provided the following premisses, you have the right to demand the limitation of your personal user data's processing:

 

(1)   when you deny the accuracy of your personal user data in a length of time that allows the responsible person to check your personal user data's accuracy;

(2)   when the processing is illegitimate and you deny the erasure and demand a limitation of your personal data's use instead;

(3)   when the responsible person does not need the personal data to fulfill the purposes of processing anymore but does need them for enforcement, exercise or defense of legal claims, or

(4)   when you obtain to the processing pursuant to art. 21 para. 1 GDPR and it is not yet decided whether the responsible person's justified interests predominate your interests.

 

When the processing of your personal user data is limited, these data can only be processed – aside from their storage – with your consent, or to enforce, execute or defend legal claims, or to protect the rights of a natural or juridical person, or for reasons of important public interests of the union or any other member state.

 

When the processing was limited providing the named above premisses, you will be informed by the responsible person before the limitation is annulled.

 

  1. 4.      Right to Delete

 

a)     Liability to Delete

 

You can demand from the responsible person to delete your personal data immediately, and the responsible person is liable to delete the data immediately if the following reasons apply:

 

(1)   Your personal user data is not any longer required to fulfill the purposes they were collected and processed for.

 

(2)   You withdraw the agreement for processing pursuant to art. 6 para. 1 lit. a or art. 9 para. 2 lit. a GDPR, and other legal bases for the processing do not exist.

 

(3)   You object the processing pursuant to art. 21 para. 1 GDPR, and other prior-ranking, justified reasons for processing do not exist, or you object the processing pursuant to art. 21 para. 2 GDPR.

 

(4)   Your personal data were processed illegitimately.

 

(5)   The erasure of your data personal user data is necessary to fulfill a legal commitment pursuant to union law or law of another member state the responsible person is liable to.

 

(6)   Your personal data were collected relating to offering services of the information company pursuant to art. 8 para. 1 GDPR.

 

b)     Information to a Third Party

 

If the responsible person has made your personal data public and the responsible person is bound pursuant to art. 17 para. 1 GDPR to delete them, the responsible person takes action considering available technologies and costs of implementation – of technical kind as well – to advise people who are responsible for data processing of you wanting the erasure of all links to these personal user data, or copies and replications of these personal data.

 

c)      Exceptions

 

The right to delete expires, if the processing is necessary

 

(1)   to exercise the right of freedom of expression and information;

 

(2)   to fulfill a legal commitment the responsible person is liable to and which requires the processing pursuant to union law or a member state's law, or to perform a task which is of public interest or done in the exercise of official authority which was transferred to the responsible person;

 

(3)   for reasons of public interest in the context of public health pursuant to art. 9 para. 2 lit. h and i, and art. 9 para. 3 GDPR;

 

(4)   for purposes of archiving of public interest, scientific or historical research purposes or statistical purposes pursuant to art. 89 para. 1 GDPR, as long as realizing the right mentioned in paragraph a) is expected to affect or make accomplishing the purpose of the processing impossible, or

 

(5)   for enforcement, exercise or defense of legal claims.

 

  1. 5.      Right to Information

 

When you claimed your right to correct, delete or limit the processing to the responsible person, the responsible person is bound to inform every receiver of your personal data about the correction, erasure or limitation, unless it proves to be impossible or disproportionally complex.

 

You have the right to be informed about these receivers by the responsible person.

 

  1. 6.      Right to Transmit Data

 

You have the right to receive your personal data, that you provided the responsible person with, in a structured, established and machine-readable format. Furthermore, you have the right to transmit these data to another responsible person without the responsible person, who was provided with the personal data,  interfering, as long as

 

(1)   the processing is based on an agreement pursuant to art. 6 para. 1 lit. a GDPR or art. 9 para. 2 lit. a GDPR, or is based on a contract pursuant to art. 6 para. 1 lit. b GDPR and

(2)   the processing happens by means of automatic process.

 

Executing this right, you also have the right to effect your personal data being transmitted directly from a responsible person to another responsible person, if it is technically possible. Freedoms and rights of other people must not be affected.

 

The right to transmit data does not apply to the processing of personal data that is required to fulfill a task that is in public interest or done in the exercise of official authority which was transferred to the responsible person.

 

  1. 7.      Right to Object

 

You have the right to object the processing of your personal data anytime for reasons, that result from your particular circumstances, with art. 6 para. 1 lit. e or f GDPR as a legal base; this also applies to a profiling that is based on these clauses.

 

The responsible person will not process your personal data anymore, unless the responsible person has forceful reasons for the processing which predominate your interests, rights and freedoms, or the processing serves the enforcement, exercise or defense of legal claims.

 

If your personal data are processed for direct advertising, you have the right to object the processing of your personal data for such advertising at any time; this applies to profiling as well insofar it is related to such direct advertising.

 

When you object the processing for purposes of direct advertising, your personal data will not be used for these purposes anymore.

 

In the context of the information company's services, you have the possibility to use your right to object using automatic processes that make use of technical specifications – regardless of guide line 202/58/EG.

 

  1. 8.      Right to Cancel the Data Protection Agreement

 

You have the right to withdraw your declaration of agreement anytime. Because of the canceling, the legitimacy of the processing happening under the agreement until the canceling will not be touched.

 

  1. 9.      Right to Complain to a Controlling Institution

 

Without prejudices to any other administrative or judicial appeal, you have the right to complain to a controlling institution, especially in the member state of your residence, work place or the place of the presumed violation, if you think your personal data's processing violated the GDPR.

 

The controlling institution informs the complainant about the complaint's status and results, and the possibility of a judicial appeal pursuant to art. 78 GDPR.