Data Privacy Statement
NAME AND CONTACT OF THE RESPONSIBLE ACCORDING TO ARTICLE 4 PARA. 7 GDPR
Sautter Lift Components GmbH Remsstrasse 2 70806 Kornwestheim Germany Tel.: +49 (0) 7154 / 9996 – 0 E-Mail: info@slc-liftco.com Website: www.slc-liftco.comSAFETY AND PROTECTION OF YOUR PERSONAL DATA
We consider it our primary responsibility to protect the confidentiality of the personal information provided and to protect it from unauthorized access. That’s why we use the utmost care and state-of-the-art security standards to ensure maximum protection of your personal data. As a company, we are subject to the provisions of the European General Data Protection Regulation (GDPR) and the regulations of the Federal Data Protection Act (BDSG). We have taken technical and organizational measures to ensure that we comply with the standards of data protection. DEFINITIONS Legislation requires that personal data be processed lawfully, in good faith and in a manner that is comprehensible for the data subject (“lawfulness, fairness, transparency”). To ensure this, we inform you about the particular legal definitions that are also used in this privacy statement: Personal data “Personal data” means any information relating to an identified or identifiable natural person (hereinafter the “data subject”); a natural person is regarded as identifiable, when it can be identified directly or indirectly, in particular by association with an identifier such as a name, an identification number, location data, an online identifier or one or more special features, the expression of the physical , physiological, genetic, mental, economic, cultural or social identity of this natural person. Processing “Processing” means any process, with or without the help of automated procedures, related to personal data, such as collecting, collecting, organizing, organizing, storing, adapting or modifying, reading out, retrieving , the use, disclosure by transmission, dissemination or any other form of provision, matching or linking, restriction, erasure or destruction. Restriction of processing “Restriction of processing” is the marking of personal data stored with the aim of limiting its future processing. Profiling “Profiling” means any kind of automated processing of personal data which involves the use of such personal data to evaluate, analyze or predict certain personal aspects relating to a natural person, in particular aspects relating to work performance, economic situation, health, personal preferences, interests, reliability, behavior, location or change of location of this natural person. Pseudonymisation “Pseudonymisation” means the processing of personal data in such a way that the personal data can no longer be assigned to a specific data subject without any additional information, provided that such additional information is kept separate and is subject to technical and organizational measures ensuring that the personal data cannot be assigned to an identified or identifiable natural person. File system “File system” means any structured collection of personal data accessible according to specific criteria, whether that collection is centralized, decentralized or organized according to functional or geographical considerations. Responsible ‘Responsible’ means a natural or legal person, public authority, institution or other entity that decides on its own or jointly with others on the purposes and means of processing personal data; where the purposes and means of such processing are determined by Union Law or the law of the Member States, the responsible or the specific criteria for his designation may be stipulated by Union Law or national laws. Processor “Processor” means a natural or legal person, public authority, institution or other entity that processes personal data on behalf of the responsible. Recipient “Recipient” means a natural or legal person, public authority, institution or other entity to whom personal data are disclosed, whether or not it is a third party. Authorities that may receive personal data under Union Law or national laws in connection with a particular investigation assignment are not classified as recipients; the processing of these data by the said authorities are carried out in accordance with the applicable data protection regulations according to the purposes of the processing. Third Party „Third Party“ is a natural or legal person, public authority, institution or other entity different from the data subject, the responsible, the processor and the persons who are authorized under the direct responsibility of the responsible or processor to process the personal data. Consent The “consent” of the data subject is any expression of will voluntarily given in an informed and unambiguous manner in the form of a statement or other explicit confirmatory act by which the data subject indicates that they agree to the processing of its personal data.LEGALITY OF PROCESSING
The processing of personal data is only lawful if there is a legal basis for processing. The legal basis for the processing may, in accordance with Article 6 para. 1 lit. a – f GDPR, in particular:-
-
- The data subject has consented to the processing of its personal data for one or more specific purposes;
- the processing is necessary for the fulfillment of a contract to which the data subject is a party or for the performance of pre-contractual measures which are carried out at the request of the data subject;
- the processing is necessary to fulfill a legal obligation to which the controller is subject;
- the processing is necessary to protect the vital interests of the data subject or any other natural person;
- the processing is necessary for the performance of a task which is in the public interest or in the exertion of public authority delegated to the responsible;
- the processing is necessary to protect the legitimate interests of the responsible or a third party, unless the interests or fundamental rights and freedoms of the data subject requiring personal data protection predominate, in particular where the data subject is a child.
-
INFORMATION ON THE COLLECTION OF PERSONAL DATA
(1) Below we are informing about the collection of personal data when using our website. Personal data are for example name, address, e-mail addresses, user behavior. (2) When contacting us by e-mail, the information you provide (your e-mail address, if applicable your name and your telephone number) will be stored by us in order to answer your questions. We will delete the data accumulated in this context as soon as the storage is no longer required, or the processing will be restricted if legal retention requirements exist. Collection of personal data when visiting our website In the case of merely informative use of the website, i. e. if you do not register or otherwise provide us any information, we will only collect the personal data that your browser transmits to our server. When using this data, we don’t draw any conclusions on the person concerned. Rather, this information is required in order to (1) correctly deliver the contents of our website, (2) to optimize the content of our website and to advertise it, (3) to ensure the continued functioning of our information technology systems and the technology of our website, and (4) to provide law enforcement authorities with the necessary information for prosecution in case of a cyberattack. If you wish to view our website, we collect the following data that are technically necessary for us to display our website and to ensure its stability and security (legal basis is Art. 6 (1) sentence 1 lit. GDPR):-
-
- – IP-Adress
- – Date and time of the request
- – Time zone difference to Greenwich Mean Time (GMT)
- – Content of the requirement (precise page)
- – Access status / HTTP status code
- – Each with transmitted amount of data
- – Website from which the request comes
- – Browser
- – Operating system and its user interface
- – Language and version of the browser software
-
OTHER FUNCTIONS OF OUR WEBSITE
In addition to the purely informational use of our website, we offer various services that you can use if you are interested. To do so, you will generally need to provide other personal data that we use to provide the respective service and for which the aforementioned data processing principles apply.RIGHTS OF THE AFFECTED PERSON
If personal data of yours are processed, you are a person concerned in terms of the GDPR and you are entitled to the following rights towards the responsible:RIGHT TO INFORMATION
You may ask the responsible to confirm if personal data concerning you are being processed by us. If any processing is available, you can request information from the responsible on the following information:(1) the purposes for which the personal data are processed;
(2) the categories of personal data that are processed;
(3) the recipients or categories of recipients to whom the personal data concerning you have been disclosed or are being disclosed;
(4) the planned duration of storage of your personal data or, if precise information is not available, criteria for determining the duration of storage;
(5) the right of correction or deletion of personal data concerning you, a right of restriction of processing by the responsible or a right to object to such processing;
(6) the existence of a right of appeal to a supervisory authority;
(7) all available information on the source of the data if the personal data are not collected from the data subject;
(8) the existence of automated decision-making including profiling under Article 22 (1) and (4) GDPR and, at least in these cases, significant information about the logic involved, and the range and intended impact of such processing on the data subject.
You have the right to request information about whether the personal data relating to you are transferred to a third country or an international organization. In this regard, you can request the appropriate warranties in accordance with Art. 46 GDPR to be informed in the context of the transfer.RIGHT OF CORRECTION
You have a right to correction and / or completion towards the responsible, if the processed personal data is incorrect or incomplete. The responsible must make the correction immediately.RIGHT TO RESTRICT PROCESSING
You may request the restriction of the processing of your personal data under the following conditions:(1) if you contest the correctness of your personal data for a period of time that enables the responsible to verify the correctness of your personal data;
(2) if the processing is unlawful and you refuse the deletion of the personal data and instead demand the restriction of the use of the personal data;
(3) if the responsible no longer needs the personal data for the purposes of processing, but you need it to assert, exercise or defend legal claims; or
(4) if you have objected to the processing pursuant to Art. 21 (1) GDPR and it is not yet certain whether the legitimate reasons of the responsible outweigh your reasons.
If the processing of personal data concerning you has been restricted, this data may only be used – apart from storage – with your consent or for the purpose of asserting, exercising or defending legal claims or protecting the rights of another natural or legal person or for reasons of important public interest of the Union or a Member State. If the processing of data has been restricted according to the afore mentioned requirements you will be informed ba the responsible before the restriction is repealed.RIGHT TO DELETE
-
a) Obligation to delete
(1) The personal data concerning you are no longer necessary for the purposes for which they were collected or processed otherwise.
(2) You revoke your consent, to which the processing acc. Art. 6 para. 1 lit. a or Art. 9 para. 2 lit. a GDPR and there is no other legal basis for the processing.
(3) You object according to Art. 21 para. 1 DSGVO to the processing and there are no prior justifiable reasons for the processing, or you object according to Art. 21 para. 2 GDPR to the processing.
(4) Your personal data have been processed unlawfully.
(5) The deletion of personal data concerning you is required to fulfill a legal obligation under Union Law or the law of the member states to which the responsible is subject.
(6) The personal data concerning you were collected in connection with services offerend by information society according to Article 8 (1) of the GDPR.
-
b) Information to third parties
-
c) Exceptions
(1) to exercise the right to freedom of expression and information;
(2) to fulfill a legal obligation which requires processing according to Union Law or Member State law to which the responsible is subject or for the performance of an assignment of public interest or in the exercise of official authority assigned to the responsible;
(3) for reasons of public interest in the field of public health according to Art. 9 (2) lit. h and i and Art. 9 (3) GDPR;
(4) for archival purposes of public interest, for scientific or historical research purposes or for statistical purposes acc. Article 89 (1) GDPR, to the extent that the law referred to in subparagraph (a) is likely to render impossible or seriously affect the achievement of the objectives of that processing, or
5) to assert, exercise or defend legal claims.
RIGHT TO INFORMATION
If you have claimed the right of correction, deletion or restriction of the processing to the responsible, he / she is obliged to notify all recipients, to whom the personal data concerning you have been disclosed, about the correction, deletion or restriction of the processing, unless this proves to be impossible or linked with an disproportionate effort. You have the right to claim information on these recipients.RIGHT TO DATA TRANSFERABILITY
You have the right to receive the personal data concerning you that you have provided to the responsible in a structured, common and machine-readable format. You also have the right to transfer this data to another responsible without obstruction of the responsible, to whom you had provided the personal data, provided that(1) the processing is based on consent according to Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR or on a contract according to Art. 6 para. 1 lit. b GDPR, and
(2) the processing is done by automated procedures.
In exercising this right, you also have the right to effect that personal data concerning you are transmitted directly from one responsible to another responsible, provided that this is technically feasible. Freedoms and rights of other persons may not be affected. The right to data portability does not apply to the processing of personal data necessary for the performance of any duty in the public interest or in the exercise of official authority assigned to the responsible.
