LEGAL

Data Protection

Data Protection

1. Preliminary remark


The following points are intended to provide you with information about your data. The legislator has determined what information is required for this purpose. Anyone wishing to know more about this will find this in the General Data Protection Regulation in Articles 12 to 22 and 34. The text of the General Data Protection Regulation is available on the Internet at the following link: https://dsgvo-gesetz.de/. If you have further questions about the General Data Protection Regulation, you can contact the Data Protection Officer and / or the Administration at any time.

 

2. What is personal data?

Any information that relates to a specific or identifiable person. A person is identifiable if it can be identified directly or indirectly. This can be done, for example, by assignment to an identifier such as a name, to an identification number, to location data, to an online identifier or to one or more special features.

3. General information

Responsible for data processing is the Daniel Group GmbH, Daimlerstraße 17, 32312 Lübbecke.

Contact person: Andreas Boberg
Fon: 05 741.34 80 50
Fax: 05 741.34 80 850
E-Mail: info(at)daniel-gruppe.de

North Rhine-Westphalia

Supervisory authority

The State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia

Address:
PO Box 20 04 44, 40102 Düsseldorf
Kavalleriestraße 2-4, 40213 Düsseldorf
Fon: 0211/38424-0
Fax: 0211/38424-10
E-Mail: poststelle(at)ldi.nrw.de
Internet: http://www.ldi.nrw.de

Data protection officer of our company is Mr. Thomas Schürstedt. The data protection officer can be reached as follows:

Thomas Schürstedt

E-Mail: schuerstedt(at)daniel-gruppe.de

4. Further important information

The production of the anonymized data is carried out standardized by our website provider, which currently can not be deactivated by us.

The valid data protection law (= EU General Data Protection Regulation) allows the processing of your data (= personal data), if we have a legitimate interest (see 4.1) and can assume that you have no serious objections (legitimate interest Article 6 Para. 1 lit. f DSGVO).

This data is collected in a standardized manner by our website provider. This collection of data can not currently be deactivated but the data is not used or evaluated by us:

  • IP address in anonymous form is used to determine the location of the access
  • Referrer (previously visited website)
  • Requested website or file
  • Browser type and browser version
  • Operating system used
  • Used device type
  • Time of access

The following anonymous statistics are provided by our website provider. We do not use or evaluate the statistics, we can not disable the statistics currently being generated:

  • Traffic: Visitors, Sessions, Pageviews, and Search Engine Robots.
  • Visitor behavior: duration per session, page views per session and bounce rate.
  • Page Analysis: Home Pages, Exit Pages, Error Pages, Most Visited Pages, High Bounce Pages and Search Terms.
  • Origin pages: All pages of origin and referring pages.
  • visitors locations
  • Browser & Systems: Browser, Browser Versions, Operating Systems and Operating System Versions.

As part of the processing of their anonymous data

  • through our website provider, which is bound by contract, are viewed
  • further transfers are not made

This is not planned from us.

This data will be anonymized by website provider after 7 days.

In order to achieve the reasons described in point 4.1, it is necessary that you give us your personal information for the enjoyment. For a conclusion as well as the implementation of the contract with them is the mandatory or legally required. In case of non-provision we can not conclude a contract with you. In the case of complaints, you can always contact the responsible supervisory authority. For our company that is in point 3.3. competent authority. You have the right to have this judicially examined, according to article 78 of the DS-GVO, against a supervisory authority and, according to article 79 DS-GVO, against our company.

An automatic decision-making / profiling does not take place.

5. Which rights do I have?

As a data subject, you have, inter alia, the following rights (hereinafter also referred to as "data subject rights") under the General Data Protection Regulation:

You have the right to request information about whether we process personal information about you or not. When we process personal information from you, you are entitled to learn

  • why we process your data (see also point 4.1);
  • what kinds of data we process from you;
  • which type of recipients should receive or receive data from you (see also point 4.3);
  • how long we will save your data; If it is not possible to give an indication of the storage duration, we must inform you of how the retention period will be determined (eg after expiry of statutory retention periods) (see also section 4.5);
  • that you have a right to rectification and deletion of the data concerning you, including the right to limit the processing and / or the possibility of objection (see also points 5.2, 5.3 and following);
  • that you have the right of appeal to a supervisory authority;
  • where your data comes from, if we did not collect it directly from you;
  • whether your data will be used for an automatic decision and, if so, what logic the decision is based on and what impact and scope the automated decision may have for you;
  • that, if data about you are transmitted to a country outside the European Union, you are entitled to information as to whether and, if so, based on which guarantees, an adequate level of protection of the data recipient is ensured;
  • that you have the right to request a copy of your personal data. Data copies are always provided in electronic form. The first copy is free of charge, additional copies may require a reasonable fee. A copy can only be provided if the rights of other persons are not affected.

You have the right to ask us to correct your data if it is incorrect and / or incomplete. This right also includes the right to be completed by supplementary statements or communications. A correction and / or supplement must be made without culpable hesitation.

You have the right to demand deletion of your personal data from us if

  • the personal data are no longer required for the purposes for which they were collected and processed;
  • the data has been processed on the basis of your consent and you have revoked your consent; however, this does not apply if there is another legal permission for data processing;
  • Have lodged an objection to data processing the legal authorization of which is in the so-called "legitimate interest" (referred to in Article 6 (1) (e) or (f)); deletion does not have to take place if there are legitimate reasons for further processing;
  • You have lodged an objection to data processing for direct marketing purposes;
  • Your personal data has been processed unlawfully;
  • it concerns data of a child, which were raised for services of the information society (= electronic service) on the basis of the consent (according to kind 8 exp. 1 DSGVO).


A right to delete personal data does not exist if

  • the right to freedom of expression and information conflicts with the request for cancellation;
  • the processing of personal data
    - to fulfill a legal obligation (eg statutory retention requirements),
    - to perform public duties and interests under applicable law (including "public health") or
    - required for archiving and / or research purposes;
  • the personal data required to assert, exercise or defend legal claims.

The deletion must be carried out immediately (without culpable hesitation). If personal data has been made public by us (eg on the Internet), we must ensure, as far as is technically possible and reasonable, that other data processors are also informed about the deletion request, including the deletion of links, copies and / or replications.

You have the right to restrict the processing of your personal data in the following cases:

  • If you have disputed the accuracy of your personal information, you may request that your data not be used elsewhere for the duration of the verification of accuracy, thereby limiting its processing.
  • In the case of unlawful data processing, you may request the restriction of data usage instead of data deletion;
  • If you require your personal data to assert, exercise or defend your rights, but we no longer need your personal information, you may require us to restrict the processing to the purposes of law enforcement;
  • If you have objected to data processing (pursuant to Art. 21 para. 1 GDPR) (see also point 5.7) and it is not yet clear whether our interests in processing outweigh their interests, they may request that their data be used for the purposes of processing Duration of the test is not used for other purposes and thus their processing is restricted.


Personal data whose processing has been restricted to their request may, subject to storage - only

  • with her consent,
  • to assert, exercise or defend legal claims,
  • to protect the rights of other natural or legal persons, or
  • be processed for reasons of important public interest

Should a processing restriction be lifted, they will be informed in advance.

You have the right to request the data that you have provided to us in a common electronic format (eg as a PDF or Excel document). You may also request us to transfer this information directly to another (through a specific) company, if technically possible for us. The condition for having this right is that the processing takes place on the basis of a consent or for the execution of a contract (see point 4.2) and is carried out with the help of automated procedures. The exercise of the right to data portability does not affect the rights and freedoms of others. If you exercise the right to data portability, you continue to have the right to data deletion under Article 17 of the GDPR.

If your data is processed for the purpose of performing public interest or legitimate interests (see 4.2), you may object to such processing. You must explain to us the reasons that arise from your particular situation for your opposition. This can z. B. special family circumstances or legitimate secrecy interests. In the event of objection, we shall refrain from any further processing of your data for the purposes stated under point 4.1, unless

  • there are compelling, legitimate grounds for processing that outweigh their interests, rights and freedoms, or
  • the processing is necessary for the assertion, exercise or defense of legal claims.

You may object to the use of your data for the purpose of direct mail at any time; this also applies to profiling insofar as it is connected with direct mail. In the case of opposition, we may no longer use your data for direct marketing purposes.

Direct mail and / or profiling is never initiated or carried out by us.

Decisions by us that have a legal consequence or that significantly affect you must not be based solely on the automated processing of personal data. This includes profiling. This prohibition does not apply as far as the automated decision

  • is required for the conclusion or fulfillment of a contract with you,
  • is permitted by law, if such legislation contains reasonable measures to protect your rights and freedoms and your legitimate interests, or
  • with their express consent.

Decisions that are based exclusively on automated processing of special categories of personal data (= sensitive data) are only permitted if based on

  • Your express consent or
  • there is a significant public interest in processing

and appropriate measures have been taken to protect your rights and freedoms and your legitimate interests.

For exercising the rights of the persons concerned, please contact the authorities mentioned under point 4. Requests that are submitted electronically are usually answered electronically. The information, communications and measures to be provided under the GDPR, including "the exercise of the data subject rights, are generally provided free of charge. Only in the case of manifestly unfounded or excessive requests are we entitled to levy an appropriate fee for the processing or to refrain from taking action (according to Article 12 (5) of the DS-BER).

If there are reasonable doubts about your identity, we may request additional information from you for identification purposes. If an identification is not possible for us, we are entitled to refuse to process your request. We will - if possible - notify you separately about a missing possibility for identification. (see Articles 12 (6) and 11 DS-BER).

Information and information requests are usually processed immediately, within one month of receipt of the request. The deadline may be extended by a further two months, as far as this is necessary taking into account the complexity and / or the number of requests; In the event of an extension, we will inform you of the reasons for the delay within one month of receiving your request. If we do not respond to a request, we will immediately notify you of the reasons for doing so within one month of receipt of the request and inform you of the possibility to lodge a complaint with a supervisory authority or to seek judicial remedy. (see Article 12 (3) and (4) of the GDPR).

Please note that you can exercise your rights only in the context of the Union or the member states of foreseen restrictions and restrictions. (Article 23 of the GDPR)

6. Use of Google Analytics

(1) This website uses Google Analytics, a web analytics service provided by Google Inc. ("Google") 1, 2 Google Analytics uses so-called "cookies", text files stored on your computer that analyze the use of the website They allow. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. However, in the event of activation of IP anonymisation on this website, your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the US and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services related to website usage and internet usage to the website operator.

(2) The IP address transmitted by Google Analytics as part of Google Analytics will not be merged with other data provided by Google.

(3) You can prevent the storage of cookies by setting your browser software accordingly; however, please note that if you do this, you may not be able to use all the features of this website to the fullest extent possible.

(4) In addition, you may prevent the collection by Google of the data generated by the cookie and related to your use of the website (including your IP address) as well as the processing of this data by Google using the browser available at the following link Download and install the plug-in: tools.google.com/dlpage/gaoptout

(5) This website uses Google Analytics with the extension "_anonymizeIp ()". As a result, IP addresses are processed in shortened form, which means that direct personal reference can be excluded.

(6) The use of Google Analytics takes place in accordance with the conditions to which the German data protection authorities agreed with Google. Third-party information: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. Terms of Use: http://www.google.com/analytics/terms/de.html, Privacy Policy: http://www.google.com/intl/de/analytics/learn/privacy.html, and the Privacy Policy: http://www.google.de/intl/de/policies/privacy.

7. Content for the Facebook Privacy Notice:

We operate a business page on Facebook. In this context, we would like to draw your attention to the following points:

The joint controllers responsible for the operation of this Facebook page, within the meaning of the EU General Data Protection Regulation and other data protection regulations, are:

Facebook Ireland Ltd. (hereinafter “Facebook”)
4 Grand Canal Square
Grand Canal Harbour
Dublin 2
Ireland

and

Daniel Gruppe GmbH
Daimlerstraße 17
32312 Lübbecke
Germany

The moment you access our company page, your browser establishes a connection with Facebook and transmits information. The following data, among other things, is transmitted:
For visitors who are not logged in or registered on Facebook:
IP Address: When a company page is accessed, Facebook automatically determines the user’s IP address.
Cookies: When you visit our company page, Facebook automatically sets cookies. According to Facebook, the so-called datr cookie is used to identify the web browser establishing the connection with the Facebook page and plays a key role in protecting the social network from “malicious activities.” The datr cookie is valid for two years but can be deleted via the browser settings.

For visitors who are registered with and logged into Facebook:
IP Address: Facebook also collects the user’s IP address for logged-in visitors (see above)
Cookies: In this case as well, Facebook sets a datr cookie (see above). If you are a Facebook member and are logged into your Facebook profile while visiting our “company page,” the c_user cookie is also activated. Facebook links your visit to the “company page” with your personal user account. This enables Facebook to track your user behavior.

Facebook processes user data for the following purposes:
- Advertising, analysis, creation of personalized ads
- Creation of user profiles
- Market research

When you visit the company page, Facebook automatically stores information that your browser transmits to Facebook in a log file.
We expressly point out that we have no knowledge of the scope and content of the data collected by Facebook, nor of its processing, use, or, where applicable, transmission to third parties by Facebook.

Information on data protection at Facebook can be found here (https://www.facebook.com/policy.php) in Facebook’s Privacy Policy.

Facebook Insights
In addition, Facebook provides administrators of business pages with a tool that allows them to access statistical information (i.e., non-personal data) about the usage of their pages. This includes, for example, the total number of page views, “Likes,” page activity, post interactions, video views, post reach, comments, shared content, replies, the ratio of men to women, and the origin of visitors by country and city, as well as language

What you can do about it
If you are a Facebook member and do not want Facebook to collect data about you via our company page and link it to your member data stored on Facebook, you must:
- log out of Facebook before visiting our company page
- then delete the cookies stored on your device
- and close and restart your browser.
According to Facebook, this will delete all Facebook information that can be used to identify you.

You can opt out here www.facebook.com/settings and here www.youronlinechoices.com. Facebook Inc., the U.S. parent company of Facebook Ireland Ltd., is certified under the EU-U.S. Privacy Shield and thereby commits to complying with European data protection guidelines.

Further information on Facebook’s Privacy Shield status is available here www.privacyshield.gov/participant. As the operator of this site, we cannot rule out the transfer and further processing of users’ personal data to third countries, such as the U.S., or the potential risks associated with this for users.

You may exercise your data subject rights under the GDPR primarily with Facebook Ireland or with us.

The company page is operated in accordance with the ECJ ruling under joint controllership pursuant to Article 26 of the GDPR between Facebook and us; see the Page Controller Addendum for details.

The primary responsibility under the GDPR for the processing of Insights data lies with Facebook, and Facebook fulfills all obligations under the GDPR with regard to the processing of Insights data.

Facebook Ireland makes the essential elements of the Page Insights Addendum available to data subjects; only Facebook Ireland makes decisions regarding the processing of Insights data and implements them.

 We do not make any decisions regarding the processing of Insights data or any other information required under Article 13 of the GDPR, including the legal basis, the identity of the controller, and the retention period for cookies on users’ devices.

The legal basis for the processing of Insights data is Article 6(1)(f) of the GDPR (overriding legitimate interest). Our goal is to make the site more attractive to our users.