Data Privacy Statement
1. Information about the collection of personal data
When you use our services, you’re trusting us with your information. In the following you will find information on the processing of personal data when using this website. Personal data is all information that can be personally assigned to you, e.g. name, address, e-mail or online identifiers such as the IP address. This Privacy Policy is meant to help you understand which information we collect, on which legal basis this happens, why we collect it and and when the data will be deleted.
Responsible in the sense of Article 4 No. 7 General Data Protection Regulation (GDPR) is Elstein - Werk M. Steinmetz GmbH & Co. KG, Stettiner Straße 14, 37154 Northeim, Germany, phone +49 5551 983 0, fax +49 5551 983 61, e-mail info(at)elstein.com.
You can contact our data protection officer at the e-mail address datenschutz(at)elstein.com or adressed „C/O Data Protection Officer“ at our postal address.
2. Your rights
You have the right,
to revoke a given consent at any time (Article 7 (3) GDPR). As a result, the data processing based on this consent may no longer be continued in the future;
to request information about your personal data processed by us (Article 15 GDPR). In particular, you can obtain information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to correction, deletion, restriction of processing or objection, the existence of a right of appeal, the origin of your data which we did not collect ourselves, as well as the existence of automated decision-making including profiling and, if necessary, meaningful information on their details;
to immediately request the correction of incorrect or incomplete personal data stored about you (Article 16 GDPR);
to request the deletion of your stored personal data (Article 17 GDPR), unless the processing is required to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims;
to request the restriction of the processing of your personal data (Article 18 GDPR), insofar as you dispute the correctness of the data; the processing is unlawful, but you refuse a deletion; we no longer need the data, but you need them to assert, exercise or defend legal claims or you have objected to the processing in accordance with Article 21 GDPR;
to receive the personal data that you have provided in a structured, common and machine-readable format or to request that it will be transmitted to another person (Article 20 GDPR);
to object to the processing of your personal data, which we base on a weighing of interests, provided there are reasons for this that arise from your particular situation (Article 21 GDPR).
You also have the right to complain to a data protection supervisory authority about the processing of your personal (Art. 77 GDPR). "Die Landesbeauftragte für den Datenschutz Niedersachsen", Prinzenstraße 5, 30159 Hannover, Germany, is responsible for us
If you have any further questions, you can also contact us at any time using the contact details given above.
3. Collection of personal data when you visit this website
We use external service providers to operate the website. These have been carefully selected and commissioned by us. In this respect, we observe the legal requirements and, in particular, conclude a data processing agreement that serves to protect your data.
If you use the website for informational purposes only, i.e. if you do not provide us with any other information, the data is processed that is technically necessary to display the website and to ensure its stability. This data includes the domain accessed, the date and time of access, the request (HTTP request), bytes transferred, description of the user's browser, IP address and the HTTP status code. These data are not merged with other data. We do not have direct access to this data. The data can only be called up by the web server provider for security purposes and is automatically deleted after three days at the latest. The legal basis for the processing of personal data to carry out these pre-contractual measures is Article 6 (1) b) GDPR.
In addition, the data may be aggregated and evaluated anonymously for statistical purposes. We have a legitimate interest in analyzing user behavior in order to optimize our website. The legal basis for this procedure is Article 6 (1) f) GDPR.
Furthermore, when you use our website, text information, also known as "cookies", is stored on your computer via your Internet browser. As part of the basic functionality and for security reasons (to ward off cross-site request forgery) the content management system provides a so-called session cookie or a transient cookie that expires at the end of the session, i.e. is automatically deleted when you close the browser. This cookie only saves the so-called session-ID, i.e. a unique combination of characters, which your computer sends back to us, whereby several related requests from a user can be recognized and assigned to a session (name of the cookie: wires; value to identify the session: alphanumeric, e.g. nhjtjgdpgt1uf8841jq2u658db). It is a technically necessary cookie that we use on the legal basis of Art. 6 (1) b) GDPR.
If further cookies are used, we will inform you about this separately. You can prevent the installation of cookies by the settings of your internet browser. In these settings you can also delete existing cookies at any time. You determine the storage of cookies by yourself. Without cookies not all functions of the website may be used to their full extent.
4. Further functions and offers on our website
In addition to the purely informational use of our website, you have the option of sending us an inquiry, whereupon we will save the data you provide for the purpose of processing the inquiry and follow-up questions.
The processing for the provision of contractual or pre-contractual services is determined by the underlying contractual relationship and takes place on the basis of Art. 6 (1) b) GDPR.
SSL encryption is used to provide the best possible protection for data transmitted via the website. You can recognize such encrypted connections by the prefix “https: //” in the address line of your browser.
The data will be deleted as soon as they are no longer required for their intended purpose and the deletion does not conflict with any statutory retention requirements. If we are obliged to store data for a longer period due to retention and documentation obligations under commercial law, processing will be restricted. I.e. the data is blocked and not processed for other purposes. According to § 147 AO, § 257 HGB, § 14b UStG a 10-year retention period applies to certain documents and there is a 6-year retention period for all other business documents that are required to be retained. The retention period begins at the end of the calendar year.
Data will not be passed on to third parties.
5. Integration of Google Maps
We also use Google Maps on the website. This enables us to show you interactive maps directly on the website and enables you to conveniently use the map function. Google Maps is an online map service provided by the US company Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA (“Google”). The services are provided by Google Ireland Limited (“Google”), a company incorporated and operated under Irish law (registration number: 368047) with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland.
However, this only happens if you have given us your consent, i.e. on the basis of Art. 6 (1) a) GDPR.
As far as this consent is concerned, we expressly point out that US law cannot adequately guarantee the protection of personal data from the EU (see CJEU, C-3111/18). Because the so-called standard contractual clauses do not bind government agencies or restrict their access, additional measures would have to be implemented in order to create an appropriate level of protection. In this respect, Google states that it uses state-of-the-art technical and organizational measures. However, you must be aware that your data may no longer be protected after it has been transmitted.
Google receives the information that you have accessed the corresponding page on our website and at least your IP address. This data can also be sent to the servers of Google LLC. in the USA. This happens regardless of whether Google provides a user account that you are logged in to. If you are logged into your Google account, your data will be assigned directly to your account. If you do not want this assignment, you must log out before calling up the map function. Google saves your data as a usage profile and uses it for advertising, market research and / or to tailor its website to your needs. You have the right to object to the creation of these user profiles, although you must contact Google to exercise this right.
We have no influence on the data collection and data processing operations, nor are we aware of the full scope of data collection, the purposes of processing and the storage periods. Information on the purpose and scope of data collection and its processing can be found in the provider's data protection declaration. There you will also find further information on your rights in this regard and options to protect your privacy: https://policies.google.com/privacy
You can deactivate the service by reloading the page or by switching off the JavaScript application in your Internet browser.
6. Objection and revocation against the use of your data
You can revoke your consent to the processing of your data at any time. Such a revocation affects the processing for the future.
If we base the processing of your personal data on the weighing of interests, you can object to the processing. This is the case if the processing is in particular not necessary to fulfill a contract with you, such as analyzing the data for advertising purposes. When exercising such an objection, we ask you to explain the reasons why we should not process your personal data as we have done. In the event of your justified objection, we will examine the situation and either stop or adjust the data processing or we will inform you of the compelling legitimate reasons for which we are continuing the processing.
You can object to the processing of your personal data for advertising and data analysis purposes at any time. You can notify us of your objection using the contact details given in the legal notice.
