Data Privacy Statement
NAME AND CONTACT OF THE RESPONSIBLE ACCORDING TO ARTICLE 4 PARA. 7 GDPR
Sautter Lift Components GmbH
Tel.: +49 (0) 7154 / 9996 – 0
SAFETY AND PROTECTION OF YOUR PERSONAL DATA
We consider it our primary responsibility to protect the confidentiality of the personal information provided and to protect it from unauthorized access. That’s why we use the utmost care and state-of-the-art security standards to ensure maximum protection of your personal data.
As a company, we are subject to the provisions of the European General Data Protection Regulation (GDPR) and the regulations of the Federal Data Protection Act (BDSG). We have taken technical and organizational measures to ensure that we comply with the standards of data protection.
Legislation requires that personal data be processed lawfully, in good faith and in a manner that is comprehensible for the data subject (“lawfulness, fairness, transparency”). To ensure this, we inform you about the particular legal definitions that are also used in this privacy statement:
“Personal data” means any information relating to an identified or identifiable natural person (hereinafter the “data subject”); a natural person is regarded as identifiable, when it can be identified directly or indirectly, in particular by association with an identifier such as a name, an identification number, location data, an online identifier or one or more special features, the expression of the physical , physiological, genetic, mental, economic, cultural or social identity of this natural person.
“Processing” means any process, with or without the help of automated procedures, related to personal data, such as collecting, collecting, organizing, organizing, storing, adapting or modifying, reading out, retrieving , the use, disclosure by transmission, dissemination or any other form of provision, matching or linking, restriction, erasure or destruction.
Restriction of processing
“Restriction of processing” is the marking of personal data stored with the aim of limiting its future processing.
“Profiling” means any kind of automated processing of personal data which involves the use of such personal data to evaluate, analyze or predict certain personal aspects relating to a natural person, in particular aspects relating to work performance, economic situation, health, personal preferences, interests, reliability, behavior, location or change of location of this natural person.
“Pseudonymisation” means the processing of personal data in such a way that the personal data can no longer be assigned to a specific data subject without any additional information, provided that such additional information is kept separate and is subject to technical and organizational measures ensuring that the personal data cannot be assigned to an identified or identifiable natural person.
“File system” means any structured collection of personal data accessible according to specific criteria, whether that collection is centralized, decentralized or organized according to functional or geographical considerations.
‘Responsible’ means a natural or legal person, public authority, institution or other entity that decides on its own or jointly with others on the purposes and means of processing personal data; where the purposes and means of such processing are determined by Union Law or the law of the Member States, the responsible or the specific criteria for his designation may be stipulated by Union Law or national laws.
“Processor” means a natural or legal person, public authority, institution or other entity that processes personal data on behalf of the responsible.
“Recipient” means a natural or legal person, public authority, institution or other entity to whom personal data are disclosed, whether or not it is a third party. Authorities that may receive personal data under Union Law or national laws in connection with a particular investigation assignment are not classified as recipients; the processing of these data by the said authorities are carried out in accordance with the applicable data protection regulations according to the purposes of the processing.
„Third Party“ is a natural or legal person, public authority, institution or other entity different from the data subject, the responsible, the processor and the persons who are authorized under the direct responsibility of the responsible or processor to process the personal data.
The “consent” of the data subject is any expression of will voluntarily given in an informed and unambiguous manner in the form of a statement or other explicit confirmatory act by which the data subject indicates that they agree to the processing of its personal data.
LEGALITY OF PROCESSING
The processing of personal data is only lawful if there is a legal basis for processing. The legal basis for the processing may, in accordance with Article 6 para. 1 lit. a – f GDPR, in particular:
- The data subject has consented to the processing of its personal data for one or more specific purposes;
- the processing is necessary for the fulfillment of a contract to which the data subject is a party or for the performance of pre-contractual measures which are carried out at the request of the data subject;
- the processing is necessary to fulfill a legal obligation to which the controller is subject;
- the processing is necessary to protect the vital interests of the data subject or any other natural person;
- the processing is necessary for the performance of a task which is in the public interest or in the exertion of public authority delegated to the responsible;
- the processing is necessary to protect the legitimate interests of the responsible or a third party, unless the interests or fundamental rights and freedoms of the data subject requiring personal data protection predominate, in particular where the data subject is a child.
INFORMATION ON THE COLLECTION OF PERSONAL DATA
(1) Below we are informing about the collection of personal data when using our website. Personal data are for example name, address, e-mail addresses, user behavior.
(2) When contacting us by e-mail, the information you provide (your e-mail address, if applicable your name and your telephone number) will be stored by us in order to answer your questions. We will delete the data accumulated in this context as soon as the storage is no longer required, or the processing will be restricted if legal retention requirements exist.
Collection of personal data when visiting our website
In the case of merely informative use of the website, i. e. if you do not register or otherwise provide us any information, we will only collect the personal data that your browser transmits to our server. When using this data, we don’t draw any conclusions on the person concerned. Rather, this information is required in order to (1) correctly deliver the contents of our website, (2) to optimize the content of our website and to advertise it, (3) to ensure the continued functioning of our information technology systems and the technology of our website, and (4) to provide law enforcement authorities with the necessary information for prosecution in case of a cyberattack.
If you wish to view our website, we collect the following data that are technically necessary for us to display our website and to ensure its stability and security (legal basis is Art. 6 (1) sentence 1 lit. GDPR):
- – IP-Adress
- – Date and time of the request
- – Time zone difference to Greenwich Mean Time (GMT)
- – Content of the requirement (precise page)
- – Access status / HTTP status code
- – Each with transmitted amount of data
- – Website from which the request comes
- – Browser
- – Operating system and its user interface
- – Language and version of the browser software
OTHER FUNCTIONS OF OUR WEBSITE
In addition to the purely informational use of our website, we offer various services that you can use if you are interested. To do so, you will generally need to provide other personal data that we use to provide the respective service and for which the aforementioned data processing principles apply.
RIGHTS OF THE AFFECTED PERSON
If personal data of yours are processed, you are a person concerned in terms of the GDPR and you are entitled to the following rights towards the responsible:
RIGHT TO INFORMATION
You may ask the responsible to confirm if personal data concerning you are being processed by us.
If any processing is available, you can request information from the responsible on the following information:
(1) the purposes for which the personal data are processed;
(2) the categories of personal data that are processed;
(3) the recipients or categories of recipients to whom the personal data concerning you have been disclosed or are being disclosed;
(4) the planned duration of storage of your personal data or, if precise information is not available, criteria for determining the duration of storage;
(5) the right of correction or deletion of personal data concerning you, a right of restriction of processing by the responsible or a right to object to such processing;
(6) the existence of a right of appeal to a supervisory authority;
(7) all available information on the source of the data if the personal data are not collected from the data subject;
(8) the existence of automated decision-making including profiling under Article 22 (1) and (4) GDPR and, at least in these cases, significant information about the logic involved, and the range and intended impact of such processing on the data subject.
You have the right to request information about whether the personal data relating to you are transferred to a third country or an international organization. In this regard, you can request the appropriate warranties in accordance with Art. 46 GDPR to be informed in the context of the transfer.
RIGHT OF CORRECTION
You have a right to correction and / or completion towards the responsible, if the processed personal data is incorrect or incomplete. The responsible must make the correction immediately.
RIGHT TO RESTRICT PROCESSING
You may request the restriction of the processing of your personal data under the following conditions:
(1) if you contest the correctness of your personal data for a period of time that enables the responsible to verify the correctness of your personal data;
(2) if the processing is unlawful and you refuse the deletion of the personal data and instead demand the restriction of the use of the personal data;
(3) if the responsible no longer needs the personal data for the purposes of processing, but you need it to assert, exercise or defend legal claims; or
(4) if you have objected to the processing pursuant to Art. 21 (1) GDPR and it is not yet certain whether the legitimate reasons of the responsible outweigh your reasons.
If the processing of personal data concerning you has been restricted, this data may only be used – apart from storage – with your consent or for the purpose of asserting, exercising or defending legal claims or protecting the rights of another natural or legal person or for reasons of important public interest of the Union or a Member State.
If the processing of data has been restricted according to the afore mentioned requirements you will be informed ba the responsible before the restriction is repealed.
RIGHT TO DELETE
a) Obligation to delete
You may request the responsible to delete your personal data immediately, and the responsible is required to delete it immediately if one of the following is true:
(1) The personal data concerning you are no longer necessary for the purposes for which they were collected or processed otherwise.
(2) You revoke your consent, to which the processing acc. Art. 6 para. 1 lit. a or Art. 9 para. 2 lit. a GDPR and there is no other legal basis for the processing.
(3) You object according to Art. 21 para. 1 DSGVO to the processing and there are no prior justifiable reasons for the processing, or you object according to Art. 21 para. 2 GDPR to the processing.
(4) Your personal data have been processed unlawfully.
(5) The deletion of personal data concerning you is required to fulfill a legal obligation under Union Law or the law of the member states to which the responsible is subject.
(6) The personal data concerning you were collected in connection with services offerend by information society according to Article 8 (1) of the GDPR.
b) Information to third parties
If the responsible has published the personal data concerning you and is obliged to delete them according to Article 17 (1) of the GDPR , the responsible will take appropriate measures, including technical ones, taking into consideration the available technology its implementation cost, to inform data processors, who process the personal data, that you as the concerned person have requested them to delete all links to this personal data or copies or replicas of the personal data.
The right to deletion does not exist if the processing is necessary
(1) to exercise the right to freedom of expression and information;
(2) to fulfill a legal obligation which requires processing according to Union Law or Member State law to which the responsible is subject or for the performance of an assignment of public interest or in the exercise of official authority assigned to the responsible;
(3) for reasons of public interest in the field of public health according to Art. 9 (2) lit. h and i and Art. 9 (3) GDPR;
(4) for archival purposes of public interest, for scientific or historical research purposes or for statistical purposes acc. Article 89 (1) GDPR, to the extent that the law referred to in subparagraph (a) is likely to render impossible or seriously affect the achievement of the objectives of that processing, or
5) to assert, exercise or defend legal claims.
RIGHT TO INFORMATION
If you have claimed the right of correction, deletion or restriction of the processing to the responsible, he / she is obliged to notify all recipients, to whom the personal data concerning you have been disclosed, about the correction, deletion or restriction of the processing, unless this proves to be impossible or linked with an disproportionate effort.
You have the right to claim information on these recipients.
RIGHT TO DATA TRANSFERABILITY
You have the right to receive the personal data concerning you that you have provided to the responsible in a structured, common and machine-readable format. You also have the right to transfer this data to another responsible without obstruction of the responsible, to whom you had provided the personal data, provided that
(1) the processing is based on consent according to Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR or on a contract according to Art. 6 para. 1 lit. b GDPR, and
(2) the processing is done by automated procedures.
In exercising this right, you also have the right to effect that personal data concerning you are transmitted directly from one responsible to another responsible, provided that this is technically feasible. Freedoms and rights of other persons may not be affected.
The right to data portability does not apply to the processing of personal data necessary for the performance of any duty in the public interest or in the exercise of official authority assigned to the responsible.
RIGHT TO OBJECT
You have the right at any time, for reasons arising from your particular situation, to object to the processing of your personal data according to Art. 6 para. 1 lit. e or f GDPR; this also applies to profiling based on these regulations.
The responsible will no longer process the personal data concerning you unless he can demonstrate compelling or protection-requiring reasons for the processing that outweigh your interests, rights and freedoms, or the processing is for the purposes of asserting, exercising or defending legal claims.
If the personal data relating to you are processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for the purpose of such advertising; this also applies to profiling insofar as it is associated with such direct advertising.
If you object to the processing for direct advertising purposes, your personal data will no longer be processed for these purposes.
You have the option – Regardless of Directive 2002/58 / EC – in the context of the use of services of the information society, of exercising your right by means of automated procedures that use technical specifications.
RIGHT TO REJECT THE DATA PROTECTION STATEMENT
You have the right to revoke your data protection consent declaration at any time. The revocation of consent does not affect the legality of the processing carried out on the basis of the consent until the revocation.
RIGHT OF COMPLAINT AT A SUPERVISORY AUTHORITY
Without prejudice to any other administrative or judicial appeal, you have the right to complain to a supervisory authority, particularly in the Member State of your place of residence, place of employment or the place of the alleged infringement, if you argue that the processing of the personal data concerning you infringes the GDPR.
The supervisory authority to which the complaint has been submitted shall inform the complainant of the status and results of the complaint, including the possibility of a judicial remedy according to Article 78 of the GDPR.
USE OF TOOLS AND PLUGINS
(1) This website uses Google Analytics, a web analytics service provided by Google Inc. (“Google”). Google Analytics uses so-called “cookies”, text files that are stored on your computer and that allow an analysis of the use of the website by you. The information generated by the cookie about your use of this website is usually transmitted to and stored by Google on servers in the United States. However, if IP anonymization is enabled on this website, Google will truncate your IP address beforehand within member states of the European Union or other contracting states of the Agreement on the European Economic Area. Only in exceptional cases the full IP address will be sent to a Google server in the US and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services related to website usage and internet usage to the website operator.
(2) The IP address transmitted by Google Analytics as part of Google Analytics will not be merged with other data provided by Google.
(3) You can prevent the storage of cookies by a corresponding setting of your browser software; however, we point out that in this case you may not be able to use all the functions of this website in full. You may also prevent the collection by Google of the data generated by the cookie and related to your use of the website (including your IP address) as well as the processing of this data by Google by using the browser plug-in available for download and installation under the following link: https://tools.google.com/dlpage/gaoptout?hl=de.
(4) This website uses Google Analytics with the extension “_anonymizeIp ()”. As a result, IP addresses are processed in a shortened form, relating to a person can thus be excluded. As soon as the data collected about you have a personal reference, it is immediately excluded and the personal data thus deleted immediately.
(5) We use Google Analytics to analyze and regularly improve the use of our website. With the statistics we can improve our offer and make it more interesting for you as a user. For the exceptional cases in which personal data is transferred to the US, Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US- HYPERLINK “https://www.privacyshield.gov/EU-US-Framework.”Framework. The legal basis for the use of Google Analytics is Art. 6 para. 1 sentence 1 lit. f GPDR.
(7) This website also uses Google Analytics for a cross-device analysis of visitor flows, that are is conducted out by way of user ID. You can disable the cross-device analysis of your use in your customer account under “My Data”, “Personal Information”.
(1) On this website we use the offer of Google Maps. This allows us to show you interactive maps directly in the website and allow you to use the convenient map feature.
(2) By visiting the website, Google receives the information that you have accessed the corresponding subpage of our website. In addition, the data collected when visiting our website are transmitted. This is done regardless of whether Google provides a user account that you are logged in to, or if there is no user account. When you are logged in to Google, your data will be assigned directly to your account. If you do not wish to be associated with your profile on Google, you must log out before activating the button. Google stores your data as usage profiles and uses them for purposes of advertising, market research and / or tailor-made website design. Such an evaluation is carried out in particular (even for users who are not logged in) to provide adapted advertising and to inform other users of the social network about their activities on our website. You have a right to object to the formation of these user profiles, whereat you must apply with this to Google.
Google also processes your personal information in the US and has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
USE OF WEB FONTS
These internet pages use external fonts, Google Fonts. Google Fonts is a service of Google Inc. (“Google”). The embedding of these web fonts is established by a direct connection to external servers, normally to a server of Google in the USA. With this steo the information which of our pages you have visited will be transmitted to the server. Also the IP address of the device’s browser from which our page was visited will be saved by Google. Further information can be found in Google’s data privacy statements, which can be found here: