1.1. The Messingschlager GmbH & Co. KG, Haßbergstraße 45, 96148 Baunach, would like to inform you about this privacy policy on the processing of personal data and in this regard to point out your existing rights.
1.2. The processing of personal data takes place in accordance with the provisions of the GDPR and the German Federal Data Protection Act (BDSG) as well as other special statutory provisions.
1.3. Personal data is all data that is available to you or other (natural) persons, such as: name, address, e-mail address, bank details or user behavior on the Internet.
1.4. In particular, processing means collecting, storing, changing, reading out, querying, using, disclosing, providing, viewing, linking, passing on and destroying data, thus virtually all processes that relate to personal data and with automated procedures, ie in particular EDP.
1.5. This privacy policy applies both to the processing of personal data in the context of the legal transactions concluded between you as a customer and us (see in particular the information under No. 2) as well as the processing of personal data when using the Internet or our websites, in particular the website www.messingschlager.com (see in particular the information under No. 3). The further information contained in no. 4 is further general information which also concerns further processing operations and in which you are informed about your rights.
2.1. You are aware that the collection, processing and use of the name, address, other communication data, the VAT ID no. and with agreed payment by direct debit the bank data is required or may be required. The legal basis for this is Art. 6 para. 1 lit. b) GDPR.
2.2. Insofar as you provide us with further information as a customer, for example, contact persons with further contact details, this information is provided voluntarily.
2.3. We are entitled to examine the risk of payment defaults on the part of the buyer within the framework of the legally permissible for the purpose of the decision on the establishment, implementation or termination of the contractual relationship. In that regard, probability values ??for the future behavior of a buyer can be collected and processed. To calculate these probabilities, the purchaser's address data will also be used. For the purposes of the audit, we may provide services from credit reference agencies, such as of SCHUFA Holding AG (Wiesbaden) or other third parties and for this purpose forward data of the buyer to them or inquire with them. The collection, processing and use of data for this purpose is based on Art. 6 para. 1 lit. b) GDPR.
2.4. In particular, we are entitled to transfer your data to third parties if and to the extent that this is necessary for carrying out pre-contractual measures and fulfillment of the contractual relationship (eg for shipping, invoicing or customer service) in accordance with Art. 6 para. b) GDPR or fulfillment of a legal obligation within the meaning of Art. 6 para. 1 lit. c) GDPR is required. Under certain circumstances, we will also use this data - to the extent permitted by law - for the purpose of enforcing claims in accordance with Art. 6 para. 1 lit. b) and / or lit. f) forward the GDPR to third parties (eg collection agency, lawyer).
3.1. When you contact us by e-mail or through a contact form, the information you provide (your e-mail address, your name and telephone number if applicable) will be stored by us to answer your questions. We delete the data that arises in this context after the storage is no longer required, or limit the processing if there are statutory storage requirements. The legal basis for this is Art. 6 para. 1 lit. f) GDPR. If we conclude a legal transaction with you, the above-mentioned provisions, in particular the provisions under No. 2 apply.
3.2. In the merely informative use of the website, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data that is technically necessary for us to display our website and to ensure its stability and security (legal basis for this is Art. 6 (1) (f) of the GDPR):
- IP address
- Date and time of the request
- Time zone difference to Greenwich Mean Time (GMT)
- Content of the requirement (concrete page)
- Access status / HTTP status code
- each transmitted amount of data
- Website from which the request comest
– Browser
- Operating system and its interface
- Language and version of the browser software.
3.3. In addition to the purely informative use of our website, we offer various services that you can use if you are interested. To do this, you will generally need to provide other personal information that we use to provide the service and for which the aforementioned data processing principles apply. In part, we use to process your data from external service providers. These have been carefully selected and commissioned by us, are bound by our instructions and are regularly inspected.
3.4. Newsletter:
a) With your consent, you can subscribe to our newsletter, which will inform you about our current interesting offers. The advertised goods and services are named in the declaration of consent.
b) To register for our newsletter, we use the so-called double opt-in procedure. This means that after you have registered, we will send you an e-mail to the e-mail address specified in which we ask you to confirm that you wish to receive the newsletter. If you do not confirm your registration within 24 hours, your information will be blocked and automatically deleted after one month. In addition, we store your IP addresses and times of registration and confirmation. The purpose of the procedure is to prove your registration and, if necessary, to inform you about possible misuse of your personal data.
c) The only requirement for sending the newsletter is your e-mail address. The specification of additional, separately marked data is voluntary and will be used to address you personally. After your confirmation, we will save your e-mail address for the purpose of sending you the newsletter. The legal basis is Art. 6 para. 1 lit. a) GDPR.
d) You can withdraw your consent to the newsletter at any time and unsubscribe from the newsletter. You can declare the cancellation by clicking on the link provided in every newsletter e-mail, by e-mail to info [at] messingschlager.com or by sending a message to the contact details stated in the imprint.
3.5. Use of cookies:
a) In addition to the above data, cookies are stored on your computer when you use our website. Cookies are small text files that are stored on your hard drive, assigned to the browser you are using, and by which the site that sets the cookie (here through us) receives certain information. Cookies can not run programs or transmit viruses to your computer. They serve to make the Internet offer more user-friendly and effective overall. The legal basis for this is Art. 6 para. 1 lit. f) GDPR.
b) This website uses the following types of cookies, the scope and operation of which are explained below:
- Transient cookies (see c)
- Persistent cookies (see under d).
c) Transient cookies are automatically deleted when you close the browser. These include in particular the session cookies. These store a so-called session ID, with which various requests from your browser can be assigned to the common session. This will allow your computer to be recognized when you return to our website. The session cookies are deleted when you log out or close the browser.
d) Persistent cookies are automatically deleted after a specified period, which may differ depending on the cookie. You can delete the cookies in the security settings of your browser at any time.
e) You can configure your browser setting according to your wishes. B. decline the acceptance of third-party cookies or all cookies. Please be aware that you may not be able to use all functions of this website.
3.6. Use of Google Analytics:
a) This website uses Google Analytics, a web analytics service provided by Google Inc. ("Google"). Google Analytics also uses cookies (see the above). The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. However, in the event that IP anonymization is activated on this website, your IP address will be shortened by Google beforehand within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the US and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services related to website usage and internet usage to the website operator.
b) The IP address transmitted by Google Analytics as part of Google Analytics will not be merged with other data provided by Google.
c) You can prevent the storage of cookies by setting your browser software accordingly; however, please note that if you do this, you may not be able to use all the features of this website to the fullest extent possible. You may also prevent the collection by Google of the data generated by the cookie and related to your use of the website (including your IP address) as well as the processing of this data by Google by using the browser plug-in available under the following link. in download and install: http://tools.google.com/dlpage/gaoptout?hl=de.
d) This website uses Google Analytics with the extension "_anonymizeIp ()". As a result, IP addresses are processed shortened, a person-relatedness can be excluded. Insofar as the data collected about you is assigned a personal reference, it will be immediately excluded and the personal data will be deleted immediately.
e) We use Google Analytics to analyze and regularly improve the use of our website. With the statistics we can improve our offer and make it more interesting for you as a user. For the exceptional cases in which Personal Information is transferred to the US, Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US Framework. The legal basis for the use of Google Analytics is Art. 6 para. 1 sentence 1 lit. f GDPR.
f) Third Party Information: Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. Terms of Use: http://www.google.com/analytics/terms /en.html, Privacy Policy: http://www.google.com/intl/de/analytics/learn/privacy.html, and the Privacy Policy: http://www.google.com/intl/en/policies / privacy.
You can prevent the collection of your data by Google Analytics by clicking on the following link. An opt-out cookie will be set to prevent your data from being collected on future visits to this site:
Deactivate Google Analytics
3.7. Use of social media plug-ins:
a) We are currently using the following social media plug-ins: Facebook, Google+, LinkedIn. We use the so-called two-click solution. In other words, when you visit our site, no personal data is initially passed on to the providers of the plug-ins. The provider of the plug-in can be identified by the marking on the box above its initial letter or logo. We give you the opportunity to communicate directly with the provider of the plug-in via the button. Only if you click on the marked field and activate it, the plug-in provider receives the information that you have accessed the corresponding website of our online service. In addition, the above under No. 3.2. transmitted data. In the case of Facebook, according to the provider in Germany, the IP address is anonymized immediately after collection. By activating the plug-in, personal data will be transmitted by you to the respective plug-in provider and stored there (with US providers in the USA). Since the plug-in provider carries out the data collection, in particular via cookies, we recommend that you delete all cookies before clicking on the greyed-out box via the security settings of your browser.
b) We have no control over the collected data and data processing operations, nor are we aware of the full extent of the data collection, the purpose of the processing, the retention periods. We also have no information to delete the data collected by the plug-in provider.
c) The plug-in provider stores the data collected about you as usage profiles and uses these for purposes of advertising, market research and / or tailor-made website design. Such an evaluation is carried out in particular (also for non-logged-in users) for the presentation of needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the formation of these user profiles, whereby you must contact the respective plug-in provider to exercise it. The plug-ins allow us to interact with social networks and other users so that we can improve our offer and make it more interesting for you as a user. The legal basis for the use of the plug-ins is Art. 6 para. 1 sentence 1 lit. f) DS-GMO.
d) The data transfer takes place regardless of whether you have an account with the plug-in provider and are logged in there. If you are logged into the plug-in provider, your data collected from us will be assigned directly to your existing account with the plug-in provider. If you press the activated button and z. For example, if you link the page, the plug-in provider also stores this information in your user account and shares it publicly with your contacts. We recommend logging out regularly after using a social network, but especially before activating the button, as this will prevent you from being assigned to your profile with the plug-in provider.
e) For more information on the purpose and extent of the data collection and its processing by the plug-in provider, please refer to the privacy statements of these providers, which are provided below. There you will also find further information about your rights and settings options for the protection of your privacy. Addresses of the respective plug-in providers and URL with their privacy notices:
- Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA; http://www.facebook.com/policy.php; Facebook has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US Framework.
- Google Inc., 1600 Amphitheater Parkway, Mountainview, California 94043, USA; https://www.google.com/policies/privacy/partners/?hl=de. Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US Framework.
- LinkedIn Corporation, 2029 Stierlin Court, Mountain View, California 94043, United States; http://www.linkedin.com/legal/privacy-policy. LinkedIn has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US Framework.
3.8. Inclusion of YouTube videos:
a) We have included YouTube videos in our online offerings, which are stored on http://www.YouTube.com and are directly playable from our website. These are all incorporated in the "extended privacy mode", i. that you do not transfer data about you as a user to YouTube if you are not playing the videos. Only when you play the videos, the below in lit. b) transmitted data. We have no influence on this data transfer.
b) By visiting the website, YouTube receives the information that you have accessed the corresponding subpage of our website. In addition, those under No. 3.2. transmitted in accordance with this declaration. This happens regardless of whether YouTube provides a user account that you are logged in to, or if there is no user account. When you're logged in to Google, your data will be assigned directly to your account. If you do not wish to associate with your profile on YouTube, you must log out before activating the button. YouTube stores your data as usage profiles and uses them for purposes of advertising, market research and / or custom design of its website. Such an evaluation is done in particular (even for users who are not logged in) to provide appropriate advertising and to inform other users of the social network about their activities on our website. You have a right to object to the creation of these User Profiles, and you must be directed to YouTube to use them.
c) Further information on the purpose and extent of the data collection and its processing by YouTube can be found in the privacy policy. You'll also get more information about your rights and privacy settings here: https://www.google.com/intl/en/policies/privacy. Google also processes your personal information in the US and has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US Framework.
4.1. Person responsible for the processing of personal data:
Responsible for compliance with the provisions of the GDPR and the BDSG is the Messingschlager GmbH & Co. KG, Haßbergstraße 45, 96148 Baunach, Germany.
4.2. Data protection officer:
You can reach our data protection officer under the following contact data:
Messingschlager GmbH & Co. KG
Data Protection Officer
Haßbergstraße 45
96148 Baunach
Germany
Tel.: +49 9544 9444 69
Fax: +49 9544 9444 969
E-Mail: of[at]messingschlager.com
4.3. Processing of personal data in applications:
a) We process personal data about you for the purpose of your application for employment with us, as far as this is necessary for the decision on its justification. The legal basis for this is § 26 para. 1 and para. 8 sent. 2 BDSG.
b) Furthermore, we may process personal data about you, as far as this is necessary to defend against asserted legal claims from the application process against us. The legal basis is Art. 6 para. 1 lit. f) GDPR.
c) In these cases, we process the data related to your application. This is general information about yourself (such as your name, contact details), your professional qualifications, education or professional development, or information that you submit to us in connection with your application.
d) We store your personal data as long as it is necessary to decide on your application. Insofar as an employment relationship between you and us does not materialize, we may also continue to store data as far as necessary to defend against possible legal claims. The application documents will be deleted six months after notification of the rejection decision, unless a longer storage due to litigation is required.
4.4. In particular, we are entitled to transfer personal data to third parties if and to the extent that this is necessary for carrying out pre-contractual measures or for fulfilling the contractual relationship (for example for invoicing) - in this case, the legal basis is Article 6 (1) lit. b) GDPR - or upon fulfillment of a legal obligation (legal basis is then Art. 6 (1) (c) GDPR). Under certain circumstances, we will also pass data on to third parties (eg collection agency, lawyer, IT support) for the purpose of enforcing claims or for other legitimate interests. The legal basis for this is Art. 6 para. 1 lit. b) or lit. f) GDPR.
4.5. Your rights:
You have the following rights with respect to the personal data concerning you:
- Right to information, Art. 15 GDPR,
- Right to rectification or erasure, Art. 16 and Art. 17 GDPR,
- Right to restriction of processing, Art. 18 GDPR,
- Right to object to the processing, Art. 21 GDPR,
- Right to Data Transferability, Art 20. GDPR,
- Right of revocation, Art. 7 (3) GDPR
You also have the right to complain to us about the processing of your personal data by a data protection supervisory authority. The primary regulatory body responsible for you is:
Bavarian State Office for Data Protection Supervision (BayLDA),
Promenade 27
91522 Ansbach
Germany
Tel. +49 (0) 981 53 1300
Fax: +49 (0) 981 53 98 1300
E-Mail: poststelle[at]lda.bayern.de
4.6. Objection or revocation against the processing of your data:
a) If you have given your consent to the processing of your data and we process your personal data based on this, the legal basis is then Art. 6 (1) lit. a) GDPR, you can revoke these at any time. Such revocation will affect the admissibility of the processing of your personal data after you have given it to us.
b) Insofar as we base the processing of your personal data on the balancing of interests, you can object to the processing. This is the case if, in particular, the processing is not required to fulfill a contract with you. In the event of such a disagreement, we ask you to explain the reasons why we should not process your personal data as we have done. In the case of your justified objection, we will examine the situation and will either discontinue or adapt the data processing or point out to you our compelling legitimate reasons on which we continue the processing.
Date: 25 May 2018
