Privacy Policy in accordance with the GDPR


I. Controller’s name and address

The controller within the meaning of the General Data Protection Regulation and other national data protection laws of the member states as well as other data protection regulations is:

Bräuer Systemtechnik GmbH
Gewerbegebiet Nord 6
09456 Mildenau
GERMANY
Telephone: 0049 3733 59 676 10
email:          info@braeuersysteme.de
Website:     www.braeuersysteme.de

 

 

II. Data Protection Officer’s name and address

The controller’s Data Protection Officer is:

Dienstleistungsgesellschaft DGT mbH
Sabine Richter
Untere Hauptstraße 70
09228 Chemnitz / OT Wittgensdorf
GERMANY
email:      datenschutz@dgt-mbh.de
Website: www.dgt-mbh.de

 

 

III. General information on data processing

1.       Scope of the processing of personal data

Generally, we only collect and process our users’ personal data if this is necessary to provide a functional website as well as our contents and services. Normally, we only collect and process our users’ personal data after obtaining their consent.   An exception applies in those cases where prior consent cannot be obtained for practical reasons and the processing of the data is permitted by law.

2.       Legal basis for the processing of personal data

Article (6) (1)(a) GDPR constitutes the legal basis for the processing of personal data if we have obtained the data subject’s consent. Article (6) (1)(b) GDPR is the legal basis for the processing of personal data required for the performance of a contract to which the data subject is a party. This also applies to processing operations necessary to implement pre-contractual measures. Article (6) (1)(c) GDPR is the legal basis for a processing of personal data necessary to fulfil a legal obligation to which our company is subject. Article (6). (1)(d) GDP is the legal basis in the event that the vital interests of the data subject or another natural person render the processing of personal data necessary. Article (6) (1)(f) GDPR is the legal basis for processing that is necessary to protect a legitimate interest of our company or a third party, and if the data subject’s interests, fundamental rights and freedoms do not outweigh the first-mentioned interest.

3.       Data erasure and storage duration

The data subject’s personal data shall be deleted or blocked once the purpose of storage ceases to apply. Data may also be stored if this is required by national laws or by EU regulations, laws or other provisions to which the controller is subject. Data will also be blocked or erased if a storage period prescribed by the above-mentioned standards expires, unless there is a need for further storage of the data for the conclusion or performance of a contract.

 

IV. Provision of the website and creation of log files

1.       Description and scope of data processing

Every time you visit our website, our system will automatically collect data and information from the accessing computer’s computer system. The following data will be collected in this connection:

  • Information about the browser type and the version used;
  • The user’s operating system;
  • The user’s internet service provider;
  • The user’s IP address;
  • Date and time of the access;
  • Websites from which the user's system accesses our website;
  • Websites accessed by the user's system through our website.

 

The data will also be stored in our system’s log files. The user’s IP address or other data enabling the assignment of the data to a user will not be affected by this. This data will not be stored together with the user’s other personal data.

2.       Legal basis for data processing

Article 6 Abs. (1)(f) GDPR is the legal basis for the temporary storage of data and log files.

3.       Purpose of the data processing

The temporary storage of the IP address by the system is necessary to enable the website to be delivered to the user's computer. To this end, the user’s IP address must remain stored for the session’s duration. Our legitimate interest in data processing under Article 6 (1)(f) GDPR also lies in these purposes.

4.       Duration of Storage

The data will be erased once it is no longer necessary to achieve the purpose for which it was collected. Data collected for the provision of the website will be erased when the respective session has ended.

5.       Objection and rectification option

The collection of data for the provision of the website and the storage of data in log files is absolutely necessary for the website’s operation. Consequently, the user cannot object to this.

V. Use of Cookies

a) Description and scope of data processing

Our website uses cookies. Cookies are text files that are stored in the internet browser or by the internet browser on the user's computer system. A cookie may be stored on a user's operating system when they visit a website. This cookie contains a characteristic character string that enables a unique identification of the browser when the website is called up again. We use cookies to make our website more user-friendly. Some of our website’s elements require the accessing browser’s identification even after a page change.

The following data will be stored in the cookies and transmitted:

  • Search terms entered;
  • Frequency of page views;
  • Use of website functions.

The user data collected in this way will be pseudonymised through technical measures. Consequently, it will no longer be possible to assign the data to the accessing user. The data will not be stored together with the user’s other personal data. When you visit our website, an information banner will display information about the use of cookies for analytical purposes and will refer you to this privacy policy. Also displayed in this connection is a notice concerning how the storage of cookies can be prevented through the browser settings.

When accessing our website, the user will be informed about the use of cookies for analytical purposes and their consent to the processing of personal data used in this context will be obtained. Reference will also be made to this privacy policy in this connection.

b) Legal basis for data processing

The legal basis for the processing of personal data using cookies is Article 6 (1)(f) GDPR. The legal basis for the processing of personal data using technically necessary cookies is Article 6 (1)(f) GDPR. The legal basis for the processing of personal data using cookies for analytical purposes and when the user’s relevant consent has been obtained is Article 6 (1)(a) GDPR

c) Purpose of the data processing

The purpose of using technically necessary cookies is to simplify the use of websites for users. Some of our website’s functions cannot be offered without the use of cookies. This requires recognition of the browser even after a page change. The purpose of using technically necessary cookies is to simplify the use of websites for users. Some of our website’s functions cannot be offered without the use of cookies. This requires recognition of the browser even after a page change. Our legitimate interest in the processing of personal data under Article 6 (1)(f) GDPR also lies in these purposes.

e) Duration of storage, objection and rectification options

Cookies are stored on the user's computer and transmitted from it to our site. Therefore, you as a user also have full control over the use of cookies. You can deactivate or restrict the transmission of cookies by changing the settings in your internet browser. Previously stored cookies can be deleted at any time. This can also be automated. If cookies are deactivated for our website, it may no longer be possible to use all the website’s functions in full.

VI. Contact form and making contact by email

1.       Description and scope of data processing

There is a contact form on our website which can be used for making contact electronically. If a user avails themselves of this possibility, the data entered in the input mask will be transmitted to us and stored. These data are:

  • The user’s IP address;
  • Date and time of the registration;

During the dispatch process, your consent will be obtained for the processing of the data and reference will be made to this privacy policy. Alternatively, you can contact us via the e-mail address provided. In this case, the user's personal data transmitted with the e-mail will be stored. No data will be transferred to third parties in this connection. The data will be used exclusively for processing the exchange.

2.       Legal basis for data processing

The legal basis for the processing of data when the user’s consent has been obtained is Article 6 (1)(a) GDPR. The legal basis for the processing of data transmitted in the course of sending an email is Article 6 (1)(f) GDPR. If the purpose of making contact by e-mail is for the conclusion of a contract, then Article 6 (1)(b) GDPR shall constitute an additional legal basis for the processing.

3.       Purpose of the data processing

We will only process the personal data from the input mask for the purpose of handling the establishment of contact. If contact is made by e-mail, this will also constitute the necessary legitimate interest in the processing of the data. The other personal data processed during the sending process serve to prevent misuse of the contact form and to ensure the security of our information technology systems.

4.       Duration of storage

The data will be erased once it is no longer necessary to achieve the purpose for which it was collected. The personal data from the contact form’s input mask and the data sent by email will be erased when the respective exchange with the user has ended. The exchange will be deemed terminated when it can be inferred from the circumstances that the facts in question have been finally clarified. The additional personal data collected during the sending process will be deleted after a period of seven days at the latest.

5.       Objection and rectification options

The user may withdraw their consent to the processing of personal data at any time. If the user contacts us by e-mail, they can object to the storage of their personal data at any time. The exchange cannot be continued in such a case. All personal data stored in the course of making contact will be deleted in this case.

6.       Objection and rectification option

The user may withdraw their consent to the processing of personal data at any time. If the user contacts us by e-mail, they can object to the storage of their personal data at any time. The exchange cannot be continued in such a case. All personal data stored in the course of making contact will be deleted in this case.

VII. Data subject’s rights

The following list contains all the rights of data subjects under the GDPR. Rights not relevant for the particular website do not have to be mentioned. In this respect, the list can be shortened. When your personal data is processed, you are a data subject within the meaning of the GDPR, and you have the following rights with respect to the controller:

1.       Right to information

You can request from the controller a confirmation as to whether or not personal data concerning you are being processed. If that is the case, you can obtain the following information from the controller:

  • the purposes for which they are being processed;
  • the categories of personal data which are being processed;
  • the recipients or categories of recipients to whom the personal data concerning you has been or will still be disclosed;
  • the planned duration of the storage of the personal data concerning you or, if specific information on this is not possible, criteria for determining the storage period;
  • the existence of a right to rectify or erase the personal data concerning you or to restrict its processing by the controller or a right to object to such processing;
  • the existence of a right to lodge a complaint with a supervisory authority;
  • any available information on the data’s source if the personal data has not been collected from the data subject;
  • the existence of an automated decision-making process, including profiling in accordance with Articles 22 (1) and (4) GDPR and – - in these cases at least - – meaningful information on the logic involved and the scope and intended effects of such processing on the data subject.

You have the right to request information as to whether or not personal data concerning you has been transferred to a third country or an international organization. In this context, you may request to be informed of the appropriate guarantees in accordance with Article 46 GDPR in connection with the transmission.

2.       Right to rectification

You have a right to rectification and/or completion vis-à-vis the data controller if the processed personal data concerning you are incorrect or incomplete. The controller shall carry out the rectification without delay.

3.       Right to restrict processing

You can request the restriction of the processing of personal data concerning you where one of the following conditions applies:

  • if you dispute the accuracy of the personal data concerning you, for a period enabling the controller to verify the personal data’s accuracy;
  • the processing is unlawful, and you oppose the personal data’s erasure and request the restriction of the personal data’s use instead.
  • the controller no longer needs the personal data for the purposes of the processing, but you need them for the establishment, exercise or defence of legal claims.

If the processing of the personal data concerning you has been restricted, this data may only be processed – with the exception of storage – with your consent or for the purpose of establishing, exercising or defending legal claims or protecting the rights of another natural person or legal entity or on the grounds of an important public interest of the Union or a Member State. If processing has been restricted according to the above conditions, the controller shall notify you before the restriction is lifted.

4.       Right to erasure

a)    Obligation to erase data

You have the right to request the data controller to erase personal data concerning you immediately, and the controller shall be obliged to erase personal data immediately if one of the following reasons applies:

  • The personal data concerning you are no longer necessary for the purposes for which they were collected or otherwise processed.
  • You withdraw your consent on which the processing under Article 6 (1)(a) or Article 9 (2)(a) GDPR was based, and there is no other legal basis for processing.
  • You oppose the processing under Article 21 (1) GDPR, and there are no overriding legitimate grounds for the processing or you oppose the processing under Article 21 (2) GDPR.
  • The personal data concerning you was processed illegally.
  • The erasure of the personal data concerning you is necessary to fulfil a legal obligation under Union law or the law of the Member States to which the controller is subject.
  • The personal data concerning you was collected in relation to the information society services offered under Article 8 (1) GDPR.

b)    Information to third parties

If the controller has made the personal data concerning you public and is obliged to erase them in accordance with Article 17 (1) GDPR, it shall take appropriate measures, including technical measures, taking into account the available technology and implementation costs, to inform data processors who process the personal data that you, as a data subject, have requested them to erase all links to this personal data or copies or replications of it.

c)    Exceptions

There is no right to erasure if the processing is necessary:

  • to exercise the right to freedom of expression and information;
  • for the performance of a legal obligation which requires the processing under Union law or the law of the Member States to which the controller is subject or for the performance of a task in the public interest or in the exercise of official authority conferred on the controller;
  • on grounds of public interest in the field of public health in accordance with Article 9 (2)(h) and (i) and Article 9 (3) GDPR;
  • for archiving purposes in the public interest, scientific or historical research purposes or for statistical purposes in accordance with Article 89 1) GDPR, if the right referred to in paragraph 1 is likely to render impossible or seriously impair the achievement of the objectives of that processing; or
  • for the establishment, exercise or defence of legal claims.

5.   Right to information

If you have exercised your right to rectification, erasure or restriction of processing with respect to the controller, they shall notify all recipients to whom the personal data concerning you have been disclosed of this rectification or erasure of the data or restriction on processing, unless this proves impossible or involves a disproportionate effort. You also have the right to obtain information from the controller about these recipients.

6.   Right to data portability

You have the right to receive the personal data concerning you that you have supplied to the controller in a structured, commonly used and machine-readable format. You also have the right to transmit this data to another controller without hindrance from the controller to which the personal data have been provided, if:

  • the processing is based on consent pursuant to Article 6 (1)(a) GDPR or Article 9 (2)(a) GDPR or on a contract pursuant to Article 6 (1)(b) GDPR, and
  • the processing is carried out by automated means

When exercising the right to data portability, you have the right to have the personal data concerning you transmitted directly to another controller, where this is technically feasible. Other persons’ rights and freedoms shall not be affected by this. The right to data portability shall not apply to a processing of personal data necessary for the performance of a task in the public interest or in the exercise of official authority conferred on the controller.

7.   Right to object

You also have the right to object at any time, for reasons arising from your particular situation, to the processing of personal data concerning you under Article 6 (1)(e) or (f) GDPR. This also applies to a profiling based on these provisions.

The controller shall no longer process personal data concerning you unless it can prove compelling reasons worthy of protection for the processing that override your interests, rights and freedoms, or the processing is for the establishment, exercise or defence of legal claims

If personal data concerning you is processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for the purposes of such advertising. This also applies to profiling if it is associated with such direct marketing.

If you object to the processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes.

In connection with the use of information society services – notwithstanding Directive 2002/58/EC – you may exercise your right to object by means of automated procedures using technical specifications.

8.   Right to withdraw declaration of consent under data protection law

You have the right to withdraw at any time your declaration of consent given under data protection law. In the event of withdrawal, the lawfulness of the processing carried out on the basis of the consent until the withdrawal shall not be affected.

9.   Automated decisions in individual cases including profiling

You have the right not to be subject to a decision based exclusively on automated processing – including profiling – which produces legal effects concerning you or similarly affects you significantly. This does not apply if the decision

  • is necessary for the conclusion or performance of a contract between you and the data controller;
  • is permitted by Union law or the law of the Member States to which the data controller is subject and that law contains appropriate measures to safeguard your rights, freedoms and legitimate interests; or
  • is made with your express consent.

However, these decisions may not be based on special categories of personal data pursuant to Article 9 (1) GDPR, unless Article 9 (2)(a) or (g) GDPR applies and appropriate measures have been taken to protect your rights and freedoms and your legitimate interests.

With respect to the cases described in (1) and (3), the controller shall implement suitable measures to safeguard your rights, freedoms and legitimate interests, including at least the right to obtain human intervention on the controller’s part, to express your point of view and to contest the decision.

10.    Right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you shall also have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence or place of work or wherein the alleged infringement occurred if you believe that the processing of personal data concerning you infringes the GDPR.

The supervisory authority with which the complaint has been lodged shall inform the complainant on the progress and the outcome of the complaint including the possibility of a judicial remedy pursuant to Article 78 GDPR.

You have the right to lodge a complaint with the competent authority. This is:

Data Protection Authority of the Free State of Saxony

Bernhard-von-Lindenau-Platz 1

01067 Dresden

 

Naturally, both you and our data protection authority may contact us for information and in the event of any queries.