Renseignement sur la protection des données Imprimer pageRecommander cette page

  1. The name and address of controller is:
  2. Contact person for data protection issues
  3. General information on the data processing
  4. Logfiles, Hosting
  5. Use of Cookies
  6. Contractual processing
  7. Contact form and email contact
  8. Order of information material
  9. Ordering of hand samples
  10. Ordering of sample folders
  11. Newsletter
  12. Deutsche Steinzeug Media Portal
  13. Digital showroom
  14. Telephony
  15. Registration for DryTile training course
  16. Trade fair report forms / trade fair contacts
  17. Information disclosure as part of the website services offered
  18. Rights of the data subject
  19. Our social media presences
  20. Amendments to this privacy policy

The website www.deutsche-steinzeug.de as well as all websites of its companies AGROB BUCHTAL GmbH and Jasba Mosaik GmbH are an Internet offering provided by Deutsche Steinzeug Cremer & Breuer AG. You can find further information on our company in our legal section.

We take the protection of your personal data seriously. If we receive personal data from you, we will process and use it in compliance with applicable national and European data protection regulations.

I. The name and address of controller is:

The Controller as defined by the European General Data Protection Regulation and other national protection laws of the members and other data protection law regulations is:
Deutsche Steinzeug Cremer & Breuer AG
Servaisstraße 9-11
53347 Alfter-Witterschlick
Germany
Email: datenschutz@deutsche-steinzeug.de
Tel: +49 (228) 391-0
Fax: +49 (228) 391-301006

II. Contact person for data protection issues

The controller’s data protection officer is:
Mr Peter Langelage
Deutsche Steinzeug Cremer & Breuer AG
Email: datenschutz@deutsche-steinzeug.de

For questions concerning collection, processing or use of your personal data and for revocations of consents issued and the deletion of data please contact us by e-mail at: datenschutz@deutsche-steinzeug.de

III. General information on the data processing

1. Scope and processing of personal data

In principle, we collect and use the personal data of our users only to the extent necessary to provide a functional website and our content and services such as the ordering and sending of information material and samples.

The collection and use of personal data of our users shall regularly only be performed after receiving the user’s consent. An exception applies in cases in which the obtaining of prior consent is not possible for factual reasons and / or processing of the data is permitted by law.

2. Legal basis for the processing of personal data

The processing of personal data requires a legal basis, which we would like to present to you below.

For the processing of personal data for which we obtain the consent of the data subject, Article 6 paragraph 1 letter a of the EU General Data Protection Regulation (GDPR) shall serve as the legal basis.

For the processing of personal data which is necessary for the fulfilment of a contract, where its party to the contract is the data subject, Article 6 paragraph 1 letter b of the EU General Data Protection Regulation (GDPR) shall serve as the legal basis. This includes processing operations necessary to perform pre-contractual measures.

If the processing of personal data is necessary for the fulfilment of a legal obligation, which our company is subject to, Article 6 paragraph 1 letter c of the EU General Data Protection Regulation (GDPR) shall serve as the legal basis.

If the processing is necessary to safeguard the legitimate interests of our company or a third party and if the interests, fundamental rights and fundamental freedoms of the data subject do not prevail over the first interest stated, then Article 6 paragraph 1 letter f GDPR shall serve as the legal basis for processing.

The legitimate interest of our company is in the conduct of our business activities as well as in the analysis, optimisation and maintenance of the security of our online offer.

3. Deletion of data and storage duration

Your personal data is deleted or blocked as soon as the purpose of the storage ceases to apply, but at the latest after a period of 48 months where no contact has taken place or where consent has not once again been issued.

Storage may also take place if required by the European or national legislator in EU regulations, laws or other regulations to which the controller is subject, e.g. for statutory retention periods. Blocking or deletion of the data also takes place when a storage period prescribed by the standards mentioned expires, unless there is a need for further storage of the data for the conclusion of a contract, fulfilment of a contract or further processing that is legally justified.

If other storage periods apply, this is displayed in the individual topics.

4. Transfer of personal data to third parties

A disclosure of the data entered and / or collected by you is only performed to ensure the fulfilment of the order, for example to group companies, shipping companies or payment service providers, or if we are legally obliged and / or entitled to do so.

IV. Logfiles, Hosting

You can visit our website without having to provide any personal information. Each time our website is accessed, our system automatically collects data and information from the computer system of the calling computer. The following data can be collected in this process:

  • language and version of the browser software
  • operating system used and its interface
  • referrer-URL (the website previously visited)
  • hostname of the accessing computer (IP address)
  • date and time of the server request
  • time zone difference with Greenwich Mean Time (GMT)
  • content of the request (specific webpage)
  • data quantity transferred
  • access status/ HTTP-Status code.

 

The temporary storage of the IP address by the system is necessary to allow a delivery of the website to the user’s computer. The IP address of the user must be stored for the duration of the sitting to this end.

The storage in log files is performed to secure the functionality of the website. Moreover, the data serves us in optimizing the website and ensuring the security of out IT systems. No evaluation of data for marketing purposes is performed in this connection.

We usually cannot assign this data to specific individuals. This data will not be merged with other sources of data. The data is additionally deleted within 90 days following a statistical evaluation. Data the further retention of which is required for evidentiary purposes shall be exempted from the deletion until the final clarification of the respective incident.

We make use of hosting services. These serve to provide infrastructure and platform services, computing capacity, storage space and database services, security and technical maintenance services to maintain the operation of this online offer.

In this process, we or our hosting provider process stock data, contact data, content data, contractual data, usage data, meta and communication data of customers, interested parties and visitors of this online offer on the basis of our legitimate interests in an efficient and secure provision of this online offer.

V. Use of Cookies

Our website uses cookies. Cookies are text files that are stored in the Internet browser or by the Internet browser on the user's computer system. When a user visits a website, a cookie may be stored in this way on the user's operating system. This cookie contains a characteristic string that allows the browser to be uniquely identified when the website is reopened.

The purpose of the use of cookies that are technically required is to simplify the use of websites in line with our justified interests for the users. Some functions of our website cannot be offered without the use of cookies. For this it is necessary that the browser is also recognised again following a switch of webpages.

We require cookies for the following applications:

  1. PHP session cookies (CMS management)
  2. Memory list / shopping cart
  3. Cookies with information concerning the current view (device-view) such as language and filter settings
  4. Form protection from bots and spam

You can find out which functions on our website place additional cookies further below in the area of the individual functions.

Cookies are stored on the user’s computer and transmitted from it to our website. Therefore you as the user also have complete control over the use of cookies. You can deactivate or restrict the transmission of cookies by making an amendment to the settings in your internet browser. Cookies that have already been stored can be deleted at any time. This can also be performed automatically. If cookies are deactivated for our website it can possibly lead to a situation whereby you cannot use all the functions of the website.

VI. Contractual processing

The personal data provided by customers and interested parties for contractual purposes e.g. in the case of requests for quotations such as the name, address or email address shall only be used internally to respond to your requests, to process your orders or to provide you with access to certain contractual information.

VII. Contact form and email contact

There is a contact form on our website which can be used to contact us by electronic mail. If a user makes use of this option, the data entered in the input mask will be transmitted to us with his/her input and consent and stored. This data comprises, insofar as it was provided by the user:

  1. Title
  2. Forename and surname
  3. Street and house number
  4. Post code and town/city
  5. Country
  6. Company name
  7. Department/position
  8. Telephone
  9. Email address
  10. Subject
  11. Message text

At the point in time of registration the following data will be additionally stored:

  1. Date and time of the registration

Alternatively it is possible to contact us via the email address provided or by telephone. In this case the personal data of the user that has been transmitted is stored.

The processing of the personal data from the contact is only used by us to process the contact and the request of the user. The other personal data processed during the transmission process serves, within the scope of our legitimate interests, to prevent misuse of the contact form and to ensure the security of our information technology systems.

VIII. Order of information material

There is the option on our website of ordering information material by post. Here the data from the input mask will be transmitted to us in the course of the ordering process.

This following data is recorded during the registration insofar as it has been provided by the user.

Sector of Architects&Planners/Retailers/Tilers:

  1. Selected product/ selected products
  2. Company
  3. Department/position
  4. Title
  5. Surname
  6. Forename
  7. Street
  8. No.
  9. Postcode
  10. Town/city
  11. Country
  12. Email address
  13. Telephone

Sector of private individuals:

  1. Selected product/selected products
  2. Title
  3. Surname
  4. Forename
  5. Street
  6. No.
  7. Postal code
  8. Town/city
  9. Country

At the point in time of registration the following data will be additionally stored:

  1. Date and time of the registration

The collection of the user’s address data serves to deliver the ordered materials at his/her request by mail. The collection of other personal data and other data during the registration process serves, within the scope of our legitimate interests, to prevent misuse of the services and to control target-group specific contents.

IX. Ordering of hand samples

There is the option on our website of ordering hand samples by post. Here the data from the input mask will be transmitted to us in the course of the ordering process.
The following data is recorded during the ordering process insofar as it has been provided by the user.

  1. Selected product/selected products
  2. Title
  3. Forename
  4. Surname
  5. Company
  6. Department/position
  7. Street and house number
  8. Postcode
  9. Town/city
  10. Country
  11. Telephone (for queries)
  12. Email (for the sending of an order confirmation)
  13. Type of building
  14. Location of the project
  15. Country of the project
  16. Size of the project in m²

At the point in time of registration the following data will be additionally stored:

  1. Date and time of the registration

The collection of the user’s address data serves to deliver the ordered materials at his/her request by mail. The collection of other personal data and other data during the registration process serves, within the scope of our legitimate interests, to prevent misuse of the services and to control target-group specific contents.

X. Ordering of sample folders

There is the option on our website of ordering sample folders by post. Here the data from the input mask will be transmitted to us in the course of the ordering process.
The following data is recorded during the ordering process insofar as it has been provided by the user.

  1. Selected product folder/selected product folders
  2. Title
  3. Forename
  4. Surname
  5. Company
  6. Department/position
  7. Street and house number
  8. Postcode
  9. Town/city
  10. Country
  11. Telephone (for queries)
  12. Email (for the sending of an order confirmation)

At the point in time of registration the following data will be additionally stored:

  1. Date and time of the registration

The collection of the user’s address data serves to deliver the ordered materials at his/her request by mail. The collection of other personal data and other data during the registration process serves, within the scope of our legitimate interests, to prevent misuse of the services and to control target-group specific contents.

XI. Newsletter

There is the option on our website of subscribing to a free newsletter. Here when registering for the newsletter, the data from the input mask with the entry and thus the consent of the user will be transmitted to us.
This following data is recorded during the registration insofar as it has been provided by the user.

  1. Email address
  2. Title
  3. Forename
  4. Surname

At the point in time of registration the following data will be additionally stored:

  1. Date and time of the registration
  2. Date and time of the verification

If you would like to receive the newsletter offered on our website, we need you to provide us with a valid email address, which allows us to verify that you own the email address provided or that the recipient agrees to the receipt of the newsletter.

After you have specified the email address, we will send you a confirmation email to the specified email address in which we request you confirm that you wish to receive the newsletter. If you do not confirm this within 24 hours, your data relating to the newsletter shall automatically be deleted. If you confirm your wish to receive the newsletter, we will save your email address until you unsubscribe from the newsletter.

The collection of the user’s email address is used for the delivery of the newsletter at his/her request. The collection of other personal data during the registration process serves, within the scope of our legitimate interests, to prevent misuse of the services or the email address used and to control target-group specific contents.

The subscription of the newsletter can be terminated by the user concerned at any time. There is a corresponding link in each newsletter to this end. This also facilitates a revocation of the consent to the storage of the personal data collected during the registration process.

XII. Deutsche Steinzeug Media Portal

On our website, we offer users the opportunity to register for the German Steinzeug Media Portal whilst providing their personal data so they can download image data of products, references and logos. Here the data are entered into an input mask and transmitted to us and stored. The following data is stored in the course of the registration process or during the use of the service, insofar as it has been provided by the user.

  1. Product interest (documentation of dispatched media)
  2. Company
  3. Title
  4. Forename
  5. Surname
  6. Street
  7. No.
  8. Postcode
  9. Town/city
  10. Country
  11. Email address
  12. Target group (architect, tiler etc.)

At the point in time of registration the following data will be additionally stored:

  1. Date and time of the registration
  2. Date and time of the verification

The user’s consent for the processing of this data is obtained during the registration process.

A registration of the user is required for the holding in readiness or downloading of image data with certain rights of use desired by him/her, in order to document the distribution of the image material and to be able to assign the consent of the rights of use of the respective person. The collection of the contact data is necessary in the context of our legitimate interests in order to be able to contact persons who violate the rights of use by email and by post. The querying of the target group serves to control target group-specific contents.

XIII. Digital Showroom

There is the option on our website of digitally designing the rooms. The resulting room plans can be requested as a pdf file or stored in a user account and retrieved later. The following data is collected to fulfil these functions insofar as it has been provided by the user:

  1. Email address

At the point in time of registration the following data will be additionally stored:

  1. Date and time of the registration

The collection of the email address serves to enable us to provide the user with a self-created room planning on request by email or to create a user account that allows the user to save room plans and retrieve them later.

XIV. Telephony

During the realisation of construction projects relevant target groups are contacted by phone for the purpose of initiating business deals. The following data is collected insofar as it has been provided by the user.

  1. Company
  2. Surname
  3. Forename
  4. Title
  5. Function
  6. Email address
  7. Phone number
  8. Fax number
  9. Interest in product and contract

At the point in time of registration the following data will be additionally stored:

  1. Date and time of the phone call

The collection of the contact data is performed on the basis of your consent and serves to further track the construction project and to identify additional construction projects.

XV. Registration for DryTile training course

There is the option on our website of registering for a training course for certification as a DryTile partner. Here the data from the input mask will be transmitted to us in the course of the request.
The following data is collected insofar as it has been provided by the user.

  1. Title
  2. Surname
  3. Forename
  4. Company
    • Street/no.
    • Postcode
    • Town/city
    • Country
  5. Deviating billing address
    • Company
    • Title
    • Forename
    • Surname
    • Street/no.
    • Postcode
    • Town/city
    • Country
  6. Target group (tiler, floor layer, trader)
  7. Telephone
  8. Email

At the point in time of registration the following data will be additionally stored:

  1. Date and time of the registration

The retrieval of the data serves the contractual purpose, in particular the delivery of the confirmation of registration as well as the invoice for the participation fee to be paid in advance of the training course.

XVI. Trade fair report forms / trade fair contacts

At some fairs, customer order requests (information material or samples) or requests that they be contacted are recorded on site in a trade fair report form or otherwise collected by us, e.g. the acceptance of business cards. The following data is collected as standard insofar as it has been provided by the customer.

  1. Title
  2. Forename
  3. Surname
  4. Title / function
  5. Company
  6. Street
  7. Post code /town/city
  8. Country
  9. Email
  10. Telephone
  11. Fax
  12. Target group
  13. Product interest / consultancy interest

The collection of the data is used to deliver the requested information material or the requested samples or for the realisation of the request that they be contacted and to initiate a contract. When we contact you, we will inform you about our data protection regulations and send you our detailed privacy policy, e.g. to the email address you provided so you can be contacted by us.

XVII. Information disclosure as part of the website services offered

In some cases we make use of external service providers in accordance with our legitimate interests with regard to analysis, optimisation and economical operation of the online content. This always requires that the third-party providers of this content access the IP address of the users, due to the fact they could not send the content to their browsers without the IP address. The IP address is thus necessary for the presentation of this content. Third party providers may also use so-called pixel tags (invisible graphics, also called "web beacons") for statistical or marketing purposes. Using “Pixel Tags” information such as user traffic can be evaluated on the pages of this website. The pseudonymous information may also be stored in cookies on the user's device and may include, among other things, technical information similar to the log files. We have listed our service providers below.

If your data is to be used for other purposes, we will inform you beforehand and use the data only if you have explicitly declared your consent to this.

1. Google service provider

We use services provided by Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA, ("Google") in accordance with our legitimate interests in the analysis, optimisation, and economic operation of our website.
Google is certified under the Privacy Shield Agreement, which provides a guarantee to comply with European data protection law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).
 

a. Google Analytics

This website uses Google Analytics as a website analysis service. Google Analytics uses so-called “Cookies”, text files, which are stored on your computer and make it possible to analyse your use of the website. The information produced by the cookie concerning your use of this website (including your IP address) will be transmitted to a Google server in the United States and stored there.

We would like to point out that this website uses Google Analytics with the "_anonymizeIp()" extension and therefore IP addresses will be shortened before transfer by Google within the European Union or in other contractual states of the agreement on the European Economic Area to rule out direct personal references. Only in exceptional cases will the complete IP address be transmitted to a Google server in the United States and abbreviated there.
By order of the provider, Google will use this information to evaluate your use of the website to compile reports concerning the website activities for the website operators and to render additional services linked with the use of the website and the Internet. Google will also transfer this information to third parties if necessary, if this is statutorily stipulated or if third parties process this data on behalf of Google. Google will under no circumstances link your IP address with other Google data. You can prevent the installation of the cookies by setting your browser software accordingly; however we draw your attention to the fact that you may not be able to use all the functions of this website in that case.
To obtain information about the purpose and scope of the data collection, and the additional processing and use of the data by Google as well as your rights and setting options in relation to this for the protection of your private sphere please consult the data protection guidelines of Google at http://www.google.de/intl/de/policies/privacy/?hl=de and specifically for Google Analytics at https://www.google.com/policies/privacy/partners/?hl=de and at https://support.google.com/analytics/answer/6004245?hl=de and for Universal Analytics at https://support.google.com/analytics/answer/2838718?hl=de
You declare your agreement to the processing of the data collected about you by Google as described above and for the aforementioned purpose by using this website.

You can object to the data collection and storage by Google for the respective device at any time becoming effective for the future in connection with use under this link. http://tools.google.com/dlpage/gaoptout?hl=de

Notice: If you delete your cookies, this will result in the deactivation cookie being deleted as well and you needing to store it once more.
 

b. Google Maps

This website contains content from Google Maps. By visiting the website, the third party provider will be informed that you have accessed the corresponding page of our website. In addition, the data sent automatically via your browser, such as your IP address, is transmitted to Google Maps in the USA and stored there. The provider may store this data as user profiles and use them for advertising and market research purposes. If you are logged into Google at the same time, this data is directly assigned to your account. If you do not wish to have the information assigned to your profile, you must log out before activating the button. You declare your agreement to the recording, processing and the use of the data automatically collected and entered by you, by Google, one of its agents, or third party providers by using this website. We draw your attention to the fact that we as the provider of the website do not receive any notification of the content of the transmitted data as well as its use by Google. For detailed information about the purpose and scope of the data collection and its processing by Google Maps, please refer to the provider's privacy policy at http://www.google.com/intl/en/policies/privacy/.
 

c. Youtube

We use the provider YouTube, a service provided by Google, for the integration of videos. These videos are stored on www.youtube.com and are directly playable from our website. YouTube uses cookies for data collection and statistical data analysis. YouTube uses cookies, among other things to record reliable video statistics, prevent fraud, and improve usability. The information produced by the cookie concerning your use of this website (including your IP address) will also be transmitted to YouTube servers in the United States and stored there. Your IP address cannot be assigned to your account unless you have logged in or are permanently logged in to YouTube or another Google service before the page view. If you want to prevent such transmission of data you must log out from your YouTube account and your other Google accounts.
Through the YouTube cookies we receive statistical values to retrieve individual videos embedded in the website without reference to the respective user.
YouTube's embedded videos are used within the scope of permitted use by YouTube, which all users must accept. If you detect copyright infringement, please report it directly to YouTube. We use embedded YouTube videos in the extended privacy mode. This means that YouTube does not store cookies for a user who is viewing a website with an embedded YouTube video player, but does not click on the video to start playback. If you click on the YouTube video player, YouTube may be able to save cookies on the user's computer. We draw your attention to the fact that we as the provider of the website do not receive any notification of the content of the transmitted data as well as its use by YouTube. For more information about YouTube's official privacy policy, please visit https://www.google.com/intl/en/policies/privacy/ and https://support.google.com/youtube/answer/171780?hl= de.
 

d. Google Fonts

We integrate the font ("Google Fonts") of the provider Google. The integration of these web fonts is performed by means of a server call, usually a Google server in the USA. The server will receive the information which of our webpages you have visited. The IP address of the browser of the terminal of the visitor of these webpages is also stored by Google. A privacy policy for more information can be found at https://www.google.com/policies/privacy/
 

e. Google Tag Manager

We use the Google Tag Manager. This allows us to manage web page tags via a user interface and thus, for example, to integrate Google marketing services into our online offer. The Tag Manager itself does not process any of the user’s personal data. For each Google service, please refer to the relevant Notices and the Usage Policy at https://www.google.com/intl/en/tagmanager/use-policy.html.
 

f. DoubleClick

We use the online marketing process Google "DoubleClick" to integrated advertisements within the Google advertising network. Double Click is characterised by displaying real-time ads based on the user’s putative interests. This will help advertisers better target ads within our online offering, and only show users ads that potentially address the user's interests and which he or she has already been interested in on other websites on the network. („Remarketing“). For these purposes, when our and other websites on which the Google Advertising Network is active, are viewed, Google directly executes a Google code and so-called (re)marketing tags are incorporated within the website. Here, an individual cookie is set on the user’s device (comparable technologies can also be used instead of cookies). There it is noted which websites the user visited, which content he/she is interested in and which offers the user has clicked on, as well as technical information about the browser and operating system, referring websites, visiting time and other information on the use of the online offer.

The IP address of the users is also recorded, whereby this is abbreviated within member states of the European Union or other parties to the Agreement on the European Economic Area and only in exceptional cases completely transferred to a Google server in the USA and abbreviated there. The above information may also be linked by Google with such information from other sources.

The data of the users are processed in a pseudonymous form within the Google advertising network. Thus, from the perspective of Google, the ads are not managed and displayed for a specifically identified person, but for the cookie owner, regardless of who the cookie holder is. This does not apply if a user has explicitly permitted Google to process the data without this pseudonymisation. The information collected about users through Google Marketing Services is transmitted to Google and stored on Google's servers in the United States.

For more information about Google's use of data, setting and appeal options, please read Google's Privacy Policy (https://policies.google.com/technologies/ads) and the settings for the display of Google’s adverts (https://adssettings.google.com/authenticated).

2. Facebook

We use services of the social network Facebook.com in accordance with our legitimate interests in the analysis, optimisation, and economic operation of our website, which are operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Facebook"). Facebook is certified under the Privacy Shield Agreement, which provides a guarantee to comply with European data protection law (https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active)
 

Facebook Social Plugins

Our website uses Social Plug-Ins (“Plug-Ins”) of Facebook. The plugins are marked with a Facebook logo, (white “f” on a blue tile, the “Like” or a “thumbs up” symbol) or the "Facebook Social Plug-in" extension.
We use the so-called two-click solution here. When you visit our website, basically no personal data is initially passed on to Facebook. If you activate the plugin your browser establishes a direct connection with the Facebook servers.
The content of the plug-in is transmitted by Facebook directly to your browser and integrated by it within the website. As a result, personal information, such as your IP address, URL, date and time as well as other browser-related information is transmitted to Facebook and stored in the United States, whereby according to Facebook in Germany, only an anonymous IP is collected.

If you are logged on with Facebook, Facebook can assign the visit to your Facebook account. If you interact with the plugins, for instance click on the “Like” button or submit a comment the corresponding information will be directly transmitted from your browser to Facebook, stored there and depending on your Facebook settings communicated to your Facebook contacts. If you want to prevent such transmission of data please log out from your Facebook (before pressing the opt-in button).
Facebook stores your data as usage profiles and uses them for purposes of advertising, market research and / or the tailor-made website design of its website and other websites. Here Facebook uses cookies and similar technologies to display advertisements to you on or outside the Facebook Services, and this regardless of whether you have a Facebook account and are logged on. Facebook already sets cookies for this if you have visited the website www.facebook.com and forwards your data to third parties.

We draw your attention to the fact that we as the provider of the website do not receive any notification of the content of the transmitted data as well as its use by Facebook. You can prevent the installation of the cookies by setting your Internet browser accordingly by stipulating that all third-party cookies are rejected; however we draw your attention to the fact that you may not be able to use all the functions of this website in that case. To obtain additional information about the purpose and scope of the data collection and the additional processing and use of the data by Facebook and your rights and setting options in relation to this for the protection of your private sphere please consult the data protection guidelines of Facebook at http://www.facebook.com/about/privacy/, and specifically for Facebook Social Plug-Ins at https://de-de.facebook.com/help/443483272359009/. You can additionally amend your Facebok privacy settings in your account settings.

XVIII. Rights of the data subject

If your personal data is processed you are a data subject as defined by the GDPR and you are entitled to the following rights vis-à-vis the controller.

1. Right to information

You can request a confirmation from the controller as to whether your personal data is processed by us.
If such processing is performed, you can request the following information from the controller:

  1. the purposes for which the personal data is processed;
  2. the categories of personal data which are processed;
  3. the recipients or categories of recipients to whom your personal have been disclosed or are still being disclosed;
  4. the planned duration of the storage of your personal data or, if specific information is not available concerning this, the criteria for determining the storage duration;
  5. the right of rectification or deletion of personal data that concerns you, a right to restriction of processing by the controller or a right to object to such processing;
  6. you have a right of appeal to the supervisory authority;
  7. all available information on the source of the data if the personal data are not collected from the data subject;
  8. the existence of automated decision-making including profiling in accordance with Article 22 paragraph 1 and 4 of the GDPR and, at least in these cases, meaningful information about the logic involved as well as the scope and intended impact of such processing for the data subject.

You have the right to demand information as to whether your personal data is transmitted to a third country or an international organisation. In this context, you may request to be informed of the appropriate guarantees in accordance with Article 46 GDPR in connection with the transmission.

2. Right of correction

You have a right to rectification and / or completion vis-à-vis the controller, if the personal data processed that concerns you is incorrect or incomplete. The controller must perform the correction immediately.

3. Right to restriction of the processing

You may request the restriction of the processing of your personal data under the following conditions:

  1. if you contest the accuracy of your personal information for a period of time that enables the controller to verify the accuracy of your personal data;
  2. the processing is illegal and you reject the deletion of your personal data and instead demand the restriction of the use of the personal data;
  3. the controller no longer needs the personal data for the purposes of the processing, but you need them to assert, exercise or defend yourself against legal claims; or
  4. if you have lodged an objection against the processing in accordance with Article 21 paragraph 1 GDPR and it is not yet certain whether the legitimate reasons of the controller prevail our your reasons.

If the processing of your personal data has been restricted, this data – apart from the storage - may only be used with your consent or for the purposes of asserting, exercising or defending legal claims or protecting the rights of another natural or legal person or for reasons of important public interest of the European Union or a Member State.

If the restriction of the processing has been restricted in accordance with the aforementioned conditions, you shall be notified by the controller before the restriction is lifted.

4. Right to deletion

Obligation of deletion

You may demand that the controller delete your personal information without delay, and the controller is required to delete that information immediately if one of the following reasons applies:

  1. Your personal data is no longer necessary for the purposes for which they were collected or were otherwise processed.
  2. You revoke your consent upon which the processing according to Article 6 paragraph 1 letter a or Article 9 paragraph 2 letter a of the GDPR was based and there is no other legal basis for the processing.
  3. You lodge a complaint against the processing according to Article 21 paragraph 1 of the GDPR and there are no overriding reasons for the processing or you lodge an objection against the processing according to Article 21 paragraph 2 of the GDPR.
  4. Your personal data was illegally processed.
  5. The deletion of your personal data is necessary to fulfil a legal obligation in accordance with European Union law or the law of the member states which the controller is subject to.
  6. Your personal data was collected with respect to the services of the information company offered in accordance with Article 8 paragraph 1 GDPR.

Information to third parties

If the controller has made public your personal data and is obliged in accordance with Article 17 paragraph 1 GDPR to delete it, then it shall take appropriate measures whilst observing the available technology and the implementation costs, including measures of a technical nature, to inform controllers responsible for the data processing who process the personal data that you as the data subject have demanded that they delete all the links concerning this personal data or of copies or replications of this personal data.

Exceptions

The right of deletion does not apply if the processing is necessary.

  1. to exercise the right to freedom of expression and to provide information;
  2. to fulfill a legal obligation which requires processing in accordance with the law of the European Union or of the Member States to which the controller is subject or for the performance of a task of public interest or in the exercise of official authority which has been conferred upon the controller;
  3. for reasons of public interest in the area of public health according to Article 9 paragraph 2 letter h and i as well as Article 9 paragraph 3 GDPR;
  4. for archival purposes which are in the public interest, for scientific or historical research purposes or for statistical purposes according to Article 89 paragraph 1 GDPR, to the extent that the law referred to in paragraph (a) is likely to render impossible or seriously impair the achievement of the objectives of that processing, or
  5. to assert, exercise or defend legal claims.

5. Right to information

If you have asserted your right of correction, deletion or restriction of the processing to the controller, the latter is obliged to inform all recipients to whom your personal data was disclosed of this correction, or deletion of the data or the restriction of the processing unless: this proves to be impossible or would entail a disproportionate amount of effort.

You are entitled to the right vis-à-vis the controller to be informed of these recipients.

6. Right to data portability

You are entitled to the right to receive your personal data, which you have provided to the controller, in a structured, common and machine-readable format. You also have the right to transfer this data to another controller without hindrance by the controller whom the personal data was provided to, insofar as

  1. the processing is based on consent according to Article 6 paragraph 1 letter a of the GDPR or Article 9 paragraph 2 letter a of the GDPR or on a contract in accordance with Article 6 paragraph 1 letter b of the GDPR and
  2. the processing is performed with the aid of automated procedures.

In exercising this right, you additionally have the right to effect that your personal data are transmitted directly from one controller to another controller, insofar as this is technically feasible. The freedoms and rights of other persons may not be impaired by this.

The right to data portability does not apply to the processing of personal data necessary for the performance of a task that is in the public interest or performed in the exercise of official authority that was delegated to the controller.

7. Right to object

You have the right, for reasons that arise from your particular situation, to lodge an objection at any time against the processing of your personal data, which is performed on the basis of Article 6 paragraph 1 letter e or f GDPR; this also applies to profiling based on these provisions.

The controller shall no longer process your personal data unless the controller demonstrates compelling legitimate grounds for the processing which override your interests, rights and freedoms or the processing serves the assertion, exercising or defense of legal claims.

If your personal data are processed for direct advertising purposes, you have the right to lodge an objection at any time against the processing of your personal data for the purpose of such advertising; this also applies to profiling insofar as it is associated with such direct advertising.

If you object to processing for the purposes of direct advertising, your personal data will no longer be processed for these purposes.

You have the option in connection with the use of services of the information company – irrespective of Directive 2002/58/EC – of exercising your right of objection by means of automated procedures where technical specifications are used.

8. Right to revoke the declaration of consent under data protection law

You have the right to revoke your declaration of consent under data protection law at any time. The revocation of the consent does not affect the legality of the processing that was performed on the basis of the consent until the revocation is received.

9. Right to lodge a complaint with a supervisory authority

Without prejudice to another administrative or judicial remedy, you shall have the right to lodge a complaint with a supervisory authority, in particular in the member state of your place of residence, your place of work or the place of the supposed violation, if you are of the opinion that the processing of your personal data violates the GDPR.

The supervisory authority to which the complaint has been submitted shall inform the complainant of the status and results of the complaint, including the possibility of a judicial remedy according to Article 78 of the GDPR.

XIX. Our social media presences

You will find us in the online presences in social networks and platforms. We would like to use these presences to communicate with our active customers there, prospective customers and users, and to inform them in this way about our services and our company.

The processing of the personal data of users active there is performed on the basis of our legitimate interests in the form of the communication and passing on of information to and with the users. If, within the framework of the respective social platform, consent to data processing has been provided by the users, the processing is performed on the basis of this consent.

When you visit one of our social media sites, we, together with the social platform operator, are responsible for the data processing operations triggered during this visit. In principle you can assert your rights (information, rectification, deletion, limitation of processing, data portability and complaints, see the following point "Rights of the data subject") both towards us and towards the operator of the respective social platform.

We would like to point out that we do not have complete influence over the data processing operations of the social platform despite our joint responsibility and, if necessary, forward the rights request to the respective operator to ensure the improved processing of the data subjects’ rights. Our options are fundamentally based on the company policy of the respective provider.

See below for our information on storage. We do not have any influence upon the storage duration of your data which the operators of the social platform have stored for their own purposes. For details on this, please contact the social network operators directly (for example, in their privacy policy, see below).

Depending on the social platform named below, the data processing of the users can also occur outside the territory of the European Union. US providers certified under the Privacy Shield have undertaken to comply with the EU privacy standards.

The users’ data is usually processed by the platforms for market research and advertising purposes. Usage profiles can thus be created from the user behaviour and the resulting interests of the users. The usage profiles can in turn be used for instance to place advertisements inside and outside the platforms that are supposedly in line with the users' interests. To this end cookies are stored as a rule on the computers of the users in which the user behaviour and the interests of the users are stored. Data independent of the devices used by the users can also be stored in the usage profiles. This occurs in particular if the users are members of the respective platforms and are logged in to them.

For a detailed description of the respective processing and the appeal options, we refer you to the information of the provider linked below.

- Facebook (pages, groups)
(Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland)
This is based on an agreement on the joint processing of personal data: https://www.facebook.com/legal/terms/page_controller_addendum
Privacy Policy: https://www.facebook.com/about/privacy/
Opt-Out: https://www.facebook.com/settings?tab=ads and http://www.youronlinechoices.com
Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active

- Google/ YouTube
(Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA)
Privacy Policy: https://policies.google.com/privacy
Opt-Out: https://adssettings.google.com/authenticated
Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active

- Instagram
(Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA
) Privacy Policy / Opt-Out: http://instagram.com/about/legal/privacy/

- Pinterest
(Pinterest Inc., 635 High Street, Palo Alto, CA, 94301, USA)
Privacy Policy / Opt-Out: https://about.pinterest.com/de/privacy-policy

- LinkedIn
(LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Irland)
Privacy Policy: https://www.linkedin.com/legal/privacy-policy
Opt-Out: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out
Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt0000000L0UZAA0&status=Active

XX. Amendments to this privacy policy

We reserve the right to modify this privacy policy. You can always retrieve the current draft of this privacy policy at https://www.deutsche-steinzeug.de/privacypolicy.