|
|
|
|
|
|
| Data protection
declaration according to the DSGVO/GDPR (Privacy data policy) |
|
I. Name and address of the person
responsible The person responsible within the meaning of the Basic Data Protection Regulation and other national data protection laws of the member states as well as other provisions of data protection law is the Data Protection Officer: Berth GmbH & Co. KG Huettenweg 6 35075 Gladenbach Deutschland/Germany Tel.:0049646291143 E-Mail: info@berth.de Website: www.berth.de II. general information on data processing 1. scope of processing of personal data We process the personal data of our users only to the extent necessary to provide a functioning website as well as our content and services. The processing of personal data of our users takes place regularly only with the consent of the user. An exception applies in those cases in which it is not possible to obtain prior consent for actual reasons and the processing of the data is permitted by statutory provisions. 2. legal basis for the processing of personal data Insofar as we obtain the consent of the data subject for processing personal data, Art. 6 Para. 1 lit. a EU Data Protection Basic Regulation (DSGVO) serves as the legal basis. Art. 6 para. 1 lit. b DSGVO serves as the legal basis for the processing of personal data required for the performance of a contract to which the data subject is a party. This also applies to processing operations that are necessary for the implementation of pre-contractual measures. Insofar as the processing of personal data is necessary to fulfil a legal obligation to which our company is subject, Art. 6 para. 1 lit. c DSGVO serves as the legal basis. Art. 6 para. 1 lit. d DSGVO serves as a legal basis in the event that vital interests of the data subject or another natural person necessitate the processing of personal data. If the processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights and fundamental freedoms of the data subject do not outweigh the first-mentioned interest, Art. 6 para. 1 lit. f DSGVO serves as the legal basis for the processing. 3. data deletion and storage period The personal data of the person concerned will be deleted or blocked as soon as the purpose of storage no longer applies. In addition, the data may be stored if the European or national legislator has provided for this in Union regulations, laws or other provisions to which the person responsible is subject. The data shall also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless it is necessary for further storage of the data for the conclusion or performance of a contract. III. provision of the website and creation of log files 1. description and scope of data processing Each time you access our website, our system automatically collects data and information from the computer system of the accessing computer. The following data is collected: (1) Information about the browser type and the version used (2) The user's operating system (3) The User's Internet Service Provider (4) The IP address of the user (5) Date and time of access (6) Websites from which the User's system accesses our Website (7) Websites accessed by the User's system through our Website The data is also stored in the log files of our system. These data are not stored together with other personal data of the user. 2. legal basis for data processing The legal basis for the temporary storage of data and log files is Art. 6 para. 1 lit. f DSGVO. 3. purpose of data processing The temporary storage of the IP address by the system is necessary to enable delivery of the website to the user's computer. For this purpose, the IP address of the user must remain stored for the duration of the session. The data is stored in log files to ensure the functionality of the website. The data is also used to optimise the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context. These purposes also include our legitimate interest in data processing pursuant to Art. 6 para. 1 lit. f DSGVO. 4. duration of storage The data will be deleted as soon as they are no longer necessary to achieve the purpose for which they were collected. In the case of the collection of data to provide the website, this is the case when the session in question has ended. If the data is stored in log files, this is the case after seven days at the latest. A storage going beyond this is possible. In this case, the IP addresses of the users are deleted or alienated, so that an assignment of the calling client is no longer possible. 5. possibility of objection and removal The collection of data for the provision of the website and the storage of data in log files is mandatory for the operation of the website. Consequently, there is no possibility for the user to object. IV. General and mandatory information 1. revocation of your consent to data processing Some data processing operations are only possible with your express consent. A revocation of your already given consent is possible at any time. An informal notification by e-mail is sufficient for the revocation. The legality of the data processing carried out until the revocation remains unaffected by the revocation. 2. right of complaint to the responsible supervisory authority In the event of a breach of data protection law, you as the party concerned have the right to lodge a complaint with the competent supervisory authority. The competent supervisory authority with regard to data protection issues is the data protection officer of the federal state in which our company has its registered office. The following link provides a list of data protection officers and their contact details: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html 3. right to data transferability You have the right to have data which we process automatically on the basis of your consent or in fulfilment of a contract handed over to you or to third parties. The information is provided in a machine-readable format. If you request the direct transfer of the data to another responsible person, this will only be done as far as it is technically feasible. 4 Right to information, correction, blocking, deletion You have the right to free information about your stored personal data, the origin of the data, its recipients and the purpose of the data processing and, if applicable, the right to correction, blocking or deletion of this data at any time within the framework of the applicable statutory provisions. In this regard and also for further questions on the subject of personal data, you can contact us at any time via the contact options listed in the imprint. 5. SSL or TLS encryption For security reasons and to protect the transmission of confidential content that you send to us as the site operator, our website uses SSL or TLS encryption. This means that data that you transmit via this website cannot be read by third parties. You can recognize an encrypted connection by the "https://" address line of your browser and by the lock symbol in the browser line. 6. change of our data protection regulations We reserve the right to adapt this data protection declaration so that it always corresponds to the current legal requirements or to implement changes to our services in the data protection declaration, e.g. when introducing new services. Your renewed visit will then be subject to the new data protection declaration. |