Privacy / Data protection

 

Duty to provide information in accordance with art. 12, 13 ff. EU GDPR

 

1. Name and address of the person responsible

Your contact person as the responsible person in the sense of the European General Data Protection Regulation ("EU-GDPR") and other national data protection laws of the member states as well as other data protection regulations:

 

EWS Weigele GmbH & Co. KG
represented by the managing director Matthias Weigele
Maybachstr. 1
73066 Uhingen, Germany

 

(hereinafter referred to as"we","us" or"our")

 

 

2. Name and address of the data protection officer

The protection of your personal data is important for EWS Weigele GmbH & Co. KG. In order to express this importance, we have commissioned a consulting firm specialising in data protection and data security to take over these central issues. Our data protection officer also comes from this very experienced group of experts.

We are advised by:
MAGELLAN Attorneys at Law, Galileiplatz 1, 81679 Munich / www.magellan-datenschutz.de

 

For all questions regarding data protection and data security, please contact our data protection officer at MAGELLAN Attorneys at Law directly:
Email: privacy_ewsweigele@magellan-rechtsanwaelte.de / phone..: +49 7161 93040-550.

 

 

3. General information on data processing

a. Scope of processing of personal data

We process your personal data only to the extent necessary for the performance of our services. The processing of your personal data takes place regularly only on the basis of your consent. An exception applies in those cases where prior consent cannot be obtained for real reasons or where processing of your personal data is permitted by law.

 

b. Legal basis for processing personal data

Insofar as we obtain your consent for processing personal data, art. 6 para. 1 (a) EU GDPR serves as our legal basis.

 

In the processing of personal data which is necessary for the fulfilment of a contract between you and us, art. 6 para. 1 (b) EU GDPR serves as our legal basis. This also applies to processing operations that are necessary to carry out pre-contractual measures.

 

Insofar as processing personal data is required to fulfil a legal obligation to which we are subject, art. 6 para. 1 (c) EU GDPR serves as our legal basis.

 

In the event that vital interests of you or another natural person require the processing of personal data, art. 6 para. 1 (d) of the EU GDPR serves as our legal basis.

 

If the processing is necessary to protect a legitimate interest of us or a third party and your interests, fundamental rights and freedoms do not outweigh the former interest, art. 6 para. 1 (f) EU GDPR serves as the legal basis for the processing.

 

c. Data deletion and storage time

Your personal data will be deleted or blocked as soon as the purpose of storage ceases to apply. Furthermore, data may be stored if this has been provided for by the European or national legislator in EU regulations, laws or other regulations to which we are subject. The data will also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or fulfilment of a contract.

 

 

4. Provision of the website and creation of log files

a. Legal basis for data processing

The legal basis for processing your personal data in connection with the provision of the website and the creation of log files is art. 6 para. 1 (f) EU GDPR.

 

b. Purpose of data processing

The temporary storage of your personal data by us is necessary so the website can be delivered to your computer. For this purpose, your personal data must be stored for the duration of the session.

 

Your personal data are stored in log files to ensure that the website functions properly. We also use your personal data to optimise our website and to ensure the security of our information technology systems. No evaluation of your personal data for marketing purposes takes place in this context.

 

In these purposes also lies our legitimate interest in data processing according to art. 6 para. 1 (f) EU-GDPR.

 

c. Duration of storage

Your personal data will be deleted as soon as they are no longer necessary to achieve the purpose for which it was collected. In the case of the collection of your personal data for the provision of the website, this is the case as soon as the respective session has ended.

 

If your personal data are stored in log files, it will be deleted after seven days at the latest. Longer storage is possible. In this case, your personal data will be deleted or altered so that it is no longer possible to assign it to the accessing client.

 

d. Possibility of objection and elimination

The collection of your personal data for the provision of the website and the storage of your personal data in log files is absolutely necessary for the operation of the website. Consequently, there is no possibility for you to object.

 

 

5. Use of cookies

a. Legal basis for data processing

The legal basis for processing your personal data within the framework of the use of technically necessary cookies is art. 6 para. 1 (f) EU GDPR.

 

b. Purpose of data processing

The use of technically necessary cookies serves to simplify your use of our website. Some functions of our website cannot be offered without the use of cookies. For this purpose it is necessary that your Internet browser is recognised, even changing pages. The user data collected by technically necessary cookies are not used to create user profiles.

 

For this purpose, we also have a legitimate interest in processing your personal data in accordance with art. 6 para. 1 (f) EU GDPR.

 

c. Duration of storage

Your personal data will be deleted as soon as they are no longer necessary to achieve the purpose of their collection. This is particularly the case when cookies are deactivated.

 

d. Possibility of objection and elimination

Cookies are stored on your computer and transmitted to our website. Therefore, you also have full control over the use of cookies. You can deactivate or restrict the transmission of cookies by changing the settings in your Internet browser. You can delete cookies that have already been saved at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to fully use all functions of the website.

 

 

6. Online catalogue

a. Legal basis for data processing

The legal basis for processing your personal data within the framework of the online catalogue is art. 6 para. 1 (b) EU-GDPR.

 

b. Purpose of data processing

The purpose of processing your personal data in the context of the online catalogue is to fulfil a contract for the sale of goods or services between you and us.

 

c. Duration of storage

Your personal data will be deleted as soon as they are no longer necessary to achieve the purpose for which it was collected. In the case of processing your personal data within the framework of the web shop, this is the case if all claims arising from the contractual relationship have become statute-barred and there are no longer any legally prescribed retention periods.

 

d. Possibility of objection and elimination

The processing of your personal data in the context of the online catalogue is absolutely necessary for the sale of goods or services. Consequently, there is no possibility for you to object.

 

 

7. Newsletter

a. Legal basis for data processing

The legal basis for processing your personal data within the scope of the newsletter dispatch is the legal permission of § 7 para. 3 UWG if you have given your consent under art. 6 para. 1 (a) EU-GDPR or as a result of the sale of goods or services.

 

b. Purpose of data processing

The purpose of collecting your personal data is to send you the newsletter. The purpose of processing your personal data in the context of sending the newsletter is to promote the sale of goods or services.

 

c. Duration of storage

Your personal data will be deleted as soon as they are no longer necessary to achieve the purpose for which it was collected. Your personal data will therefore be stored for as long as the subscription to the newsletter is active.

 

d. Possibility of objection and elimination

You can cancel your subscription to the newsletter at any time. There is a corresponding link in every newsletter for this purpose. Cancellation of the subscription also makes it possible to revoke your consent.

 

 

8. Contact form and contact by email

a. Legal basis for data processing

The legal basis for processing your personal data, which is transmitted via the contact form or by email in the event of contact, is art. 6 para. 1 (f) EU GDPR. If the establishment of contact via the contact form or by email is intended to conclude a contract, art. 6 para. 1 (b) EU GDPR is an additional legal basis for the processing.

 

b. Purpose of data processing

The processing of your personal data in the event of contact via the contact form or by email serves is intended solely to process the contact.

 

c. Duration of storage

Your personal data will be deleted as soon as they are no longer necessary to achieve the purpose for which it was collected. For the personal data sent via the contact form or by email, this is the case when the conversation with you has ended. Conversation ends when the circumstances indicate that the matter in question has been finally resolved between you and us.

 

d. Possibility of objection and elimination

You have the possibility at any time to object to the processing of your personal data for the future by contacting us via the contact form or by email. In such a case, the conversation between you and us cannot continue. All personal data stored in the course of contacting us will be deleted in this case.

 

 

9. Web tracking and web analysis by Google Analytics

a. Handling of processing

This website uses Google Analytics, a web analytics service provided by Google, Inc. (hereinafter "Google"). Google Analytics uses "cookies", which are text suggestion files placed on your computer to help the website analyse how users use the site. The information generated by the cookie about your use of the website (including your IP address) will be transmitted to and stored by Google on servers in the United States. However, if IP anonymisation is activated on this website, Google will reduce your IP address within Member States of the European Union or in other states party to the Agreement on the European Economic Area beforehand. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity for website operators and providing other services relating to website activity and Internet usage. The IP address transmitted by your browser in the context of Google Analytics is not merged with other Google data.

 

b. Legal basis for data processing

The legal basis for processing your personal data is art. 6 para. 1 (f) EU GDPR.

 

c. Purpose of data processing

The processing of your personal data allow us to analyse your surfing behaviour. We are able to compile information about the use of the individual components of our website by evaluating the data obtained. This helps us to continuously improve our website and its user-friendliness. For these purposes, we also have a legitimate interest in processing your personal data in accordance with art. 6 para. 1 (f) EU GDPR. Your interest in the protection of personal data is sufficiently taken into account by anonymising your IP address.

 

d. Duration of storage

Your personal data will be deleted as soon as they are no longer needed for the purposes mentioned above. In our case, this is the case after 14 days.

 

e. Possibility of objection and elimination

Users of this website who do not want their data to be collected by Google Analytics can install the browser add-on to deactivate Google Analytics. This add-on instructs Google Analytics (ga.js, analytics.js and dc.js) JavaScript executed on websites not to allow information to be sent to Google Analytics.

 

If you want to disable Google Analytics, please visit this page and install the add-on to disable Google Analytics for your browser. For detailed information on installing and uninstalling the add-on, see the relevant help resources for your browser.

 

Browser and operating system updates may cause the deactivation add-on to stop working as intended. Learn more about managing add-ons for Chrome here. If you are not using Chrome, check directly with your browser manufacturer to see if add-ons are working correctly in the browser version you are using.

 

The latest versions of Internet Explorer occasionally load the Google Analytics opt-out add-on after data are sent to Google Analytics. Therefore, if you use Internet Explorer, the add-on installs cookies on your computer. These cookies ensure that any data collected are immediately deleted by the server that collected the data. Make sure that third-party cookies are not disabled for Internet Explorer. If you delete your cookies, the add-on will quickly reset these cookies to ensure that your Google Analytics browser add-on continues to work without restriction.

 

The browser add-on to disable Google Analytics does not prevent data from being sent to the website or other web analytics services.

 

Further information on terms of use and data protection can be found at

http://www.google.com/analytics/terms/de.html or at
https://support.google.com/analytics/answer/6004245?hl=en.

 

IP anonymisation is activated on this website.

 

 

10. Direct marketing

a. Legal basis for data processing

The legal basis for processing your personal data in the context of direct marketing by post is art. 6 para. 1 (f) EU-GDPR.

 

b. Purpose of data processing

The purpose of processing your personal data in the context of direct marketing by post is to promote the sale of goods or services. For this purpose, we have a legitimate interest in data processing in accordance with art. 6 para. 1 (f) EU GDPR.

 

c. Duration of storage

Your personal data will be deleted as soon as they are no longer necessary to achieve the purpose for which they were collected. This is particularly the case when the objection is received.

 

d. Possibility of objection and elimination

You can object to the processing of your personal data in the context of direct marketing by post at any time for the future.

 

 

11. Legal defence and enforcement

a. Legal basis for data processing

The legal basis for processing your personal data in the context of legal defence and enforcement is art. 6 para. 1 (f) EU-GDPR.

 

b. Purpose of data processing

The purpose of processing your personal data in the context of legal defence and enforcement is to defend against unauthorised claims and the legal enforcement of claims and rights. For this purpose, we have a legitimate interest in data processing in accordance with art. 6 para. 1 (f) EU GDPR.

 

c. Duration of storage

Your personal data will be deleted as soon as they are no longer necessary to achieve the purpose for which it was collected.

 

d. Possibility of objection and elimination

The processing of your personal data in the context of legal defence and enforcement is absolutely necessary for legal defence and enforcement. Consequently, there is no possibility for you to object.

 

 

12. Recipient categories

Within our company, those bodies and departments receive personal data which they need to fulfil the aforementioned purposes. In addition, we make use of various service providers and transfer your personal data to other trustworthy recipients.

These could be, for example:

- Banks
- Scanning service
- Print shops
- Lettershops
- IT service providers
- Lawyers and courts

 

 

13. Rights of the data subject

If your personal data are processed by us, you are a data subject in the sense of EU-GDPR and you have the following rights against us:

a. Right to information

You can ask us to confirm whether personal data concerning you will be processed by us.

If such processing has taken place, you can request the following information from us:

(1) the purposes for which the personal data are processed;
(2) the categories of personal data being processed;
(3) the recipients or categories of recipients to whom the personal data concerning you have been or are still being disclosed;
(4) the planned duration of the storage of the personal data concerning you or, if specific information regarding this is not possible, criteria for determining the storage period;
(5) the existence of a right to rectification or deletion of personal data concerning you, a right to restriction of processing by us or a right to object to such processing;
(6) the existence of a right of appeal to a supervisory authority;
(7) any available information about the origin of the data if the personal data are not collected from you;
(8) the existence of automated decision making, including profiling in accordance with art. 22 para. 1 and 4 EU GDPR and - at least in these cases - meaningful information about the logic involved and the scope and intended effects of such processing for you.

 

You have the right to request information as to whether the personal data concerning you is transferred to a third country or to an international organisation. In this context, you may request to be informed of the appropriate guarantees in accordance with art. 46 EU GDPR in connection with the transmission.

 

b. Right to rectification

You have a right of rectification and/or completion vis-à-vis us if the personal data processed concerning you is incorrect or incomplete. We must make the correction without delay.

 

c. Right to limitation of processing

Under the following conditions, you may request that the processing of personal data concerning you be restricted:

 

(1) if you dispute the accuracy of the personal data concerning you for a period that enables us to verify the accuracy of the personal data;
(2) the processing is unlawful and you refuse to delete the personal data and instead request that the use of the personal data be restricted;
(3) we no longer need the personal data for the purposes of processing, but you do need them to assert, exercise or defend legal claims, or
(4) if you have filed an objection to the processing pursuant to art. 21 para. 1 EU GDPR and it is not yet clear whether our justified reasons outweigh your reasons.

 

If the processing of personal data concerning you has been restricted, such data may only be processed - apart from its storage - with your consent or for the purpose of asserting, exercising or defending rights or protecting the rights of another natural or legal person or on grounds of an important public interest of the European Union or a Member State.

 

If the restriction on processing has been restricted in accordance with the aforementioned conditions, you will be informed by us before the restriction is lifted.

 

d. Right to Deletion

 

i. Duty to delete

You can ask us to delete the personal data concerning you immediately and we are obliged to delete this personal data immediately if one of the following reasons applies:

 

(1) The personal data concerning you are no longer necessary for the purposes for which they were collected or otherwise processed.
(2) You revoke your consent, on which the processing was based pursuant to art. 6 para. 1 (a) or art. 9 para. 2 (a) EU GDPR, and there is no other legal basis for the processing.
(3) You file an objection against the processing pursuant to art. 21 para. 1 EU GDPR and there are no overriding legitimate reasons for the processing, or you file an objection against the processing pursuant to art. 21 para. 2 EU GDPR.
(4) The personal data concerning you have been processed unlawfully.
(5) The deletion of personal data concerning you is necessary to fulfil a legal obligation under European Union law or the law of the Member States to which we are subject.
(6) The personal data concerning you have been collected in relation to information society services offered pursuant to art. 8 para. 1 EU GDPR.

 

ii. Information to third parties

If we have made the personal data concerning you public and we are obliged to delete them in accordance with art. 17 para. 1 EU GDPR, we will take appropriate measures, including technical measures, taking into account the available technology and implementation costs, to inform those responsible for data processing who process the personal data that you, as the data subject, have requested the deletion of all links to this personal data or the deletion of copies or replications of this personal data.

 

iii. Exceptions

The right to deletion does not exist insofar as the processing is necessary

(1) to exercise freedom of expression and information;
(2) to fulfil a legal obligation required for processing under the law of the European Union or of the Member States to which we are subject, or to perform a task in the public interest or in the exercise of official authority conferred on us;
(3) for reasons of public interest in the field of public health in accordance with art. 9 para. 2 (h) and (i) and art. 9 para. 3 EU GDPR;
(4) for archiving purposes in the public interest, scientific or historical research purposes or for statistical purposes pursuant to art. 89 para. 1 EU GDPR, insofar as the law referred to under a) is likely to render impossible or seriously impair the attainment of the objectives of such processing, or
(5) for asserting, exercising or defending legal claims.

 

e. Right to information

If you have exercised your right of rectification, deletion or restriction of processing towards us, we are obliged to inform all recipients to whom the personal data concerning you have been disclosed of this rectification or deletion of the data or restriction of processing, unless this proves impossible or involves a disproportionate effort.

 

You have the right vis-à-vis us to be informed of these recipients.

 

f. Right to data portability

You have the right to receive the personal data concerning you that you have provided to us in a structured, standard and machine-readable format. In addition, you have the right to transfer the personal data provided to us to another responsible person without our interference, provided that

(1) the processing is based on consent pursuant to art. 6 para. 1 (a) EU GDPR or art. 9 para. 2 (a) EU GDPR or on a contract pursuant to art. 6 para. 1 (b) EU GDPR and
(2) processing is carried out using automated methods.

 

In exercising this right, you also have the right to request that the personal data concerning you be transferred directly by us to another person responsible, insofar as this is technically feasible. The freedoms and rights of other persons must not be affected by this.

 

The right to data portability shall not apply to processing personal data necessary for the performance of a task in the public interest or in the exercise of official authority conferred on us.

 

g. Right of objection

You have the right to object at any time, for reasons arising from your particular situation, to the processing of personal data concerning you under art. 6 para. 1 (e) or (f) of the EU GDPR, including profiling based on these provisions.

 

We will no longer process personal data relating to you unless we can prove compelling grounds for processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

 

If the personal data concerning you are processed for direct marketing purposes, you have the right to object at any time to the processing of the personal data concerning you for the purpose of such advertising. This also applies to profiling, insofar as it is associated with such direct marketing.

 

If you object to the processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes.

 

You have the possibility to exercise your right of objection in connection with the use of Information Society services by means of automated procedures using technical specifications, notwithstanding Directive 2002/58/EC.

 

h. Right to revoke the data protection declaration of consent

You have the right to revoke your data protection declaration of consent at any time. The revocation of consent shall not affect the legality of the processing carried out on the basis of the consent until revocation.

 

i. Automated decision in individual cases, including profiling

You have the right not to be subject to a decision based exclusively on automated processing - including profiling - that has legal effect against you or significantly impairs you in a similar manner. This does not apply if the decision

(1) is necessary for the conclusion or performance of a contract between you and us,
(2) is permissible based on the legislation of the European Union or of the Member States to which we are subject and that legislation contains appropriate measures to safeguard your rights, freedoms and legitimate interests; or
(3) occurs with your express consent.

 

However, these decisions may not be based on special categories of personal data pursuant to art. 9 para. 1 EU GDPR, unless art. 9 para. 2 (a) or (g) EU GDPR applies and appropriate measures have been taken to protect your rights and freedoms and your legitimate interests.

 

With regard to the cases referred to in (1) and (3), we will take reasonable measures to safeguard your rights and freedoms and your legitimate interests, including at least the right to obtain an individual's intervention from us, to state his or her position and to challenge the decision.

 

j. Right of appeal to a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right of appeal to a supervisory authority, in particular in the Member State where you reside, work or in the location where you suspect infringement, if you believe that the processing of personal data concerning you is contrary to the EU GDPR.

 

The supervisory authority responsible for us is:
The State Commissioner for Data Protection of the State of Baden-Württemberg
PO box 10 29 32
70025 Stuttgart

 

The supervisory authority with which you have filed your complaint will inform you of the status and the results of the complaint, including the possibility of a judicial remedy under art. 78 EU GDPR.

 

If you have any questions, please do not hesitate to contact our data protection officer.