DATA PRIVACY

DATA PRIVACY

EU General Data Protection Regulation

Privacy policy for this online offer and further information on the information obligation pursuant to Art. 13 GDPR when collecting personal data from the data subject

I. Name and address of the controller

The controller within the meaning of the General Data Protection Regulation and other national data protection laws of the member states as well as other data protection regulations is

Julius Schulte Söhne GmbH & Co.KG
Fruchtstr. 28
40223 Düsseldorf
Düsseldorf, Germany
Phone: +49 211 31083-0

Commercial register no.: HRA 3120
Managing Partner: Jörg Kober

E-mail: info{at}Schulte-Duesseldorf.de
Website: www.schulte-duesseldorf.de

II. Name and address of the data protection officer (www.dids.de)

DID Dresden Institute for Data Protection and Data Security
Frauke Kühling-Schieferdecker
Data protection{at}schulte-duesseldorf.de
Specialist consultancy for data protection and data security
Hospitalstraße 4 | 01097 Dresden | Germany
Phone: +49 (0)351 / 655 772 – 0
Fax: +49 (0)351 / 655 772 – 0
www.dids.de

III General information on data processing

3.1 Scope of the processing of personal data

We only process our users’ personal data to the extent necessary to provide a functional website and our content and services. The processing of our users’ personal data only takes place regularly with the user’s consent. An exception applies in cases where prior consent cannot be obtained for factual reasons and the processing of the data is permitted by law.
The meaning of the terms used, such as “personal data” or their “processing”, can be found in Article 4 of the EU General Data Protection Regulation (GDPR).

3.2 Legal basis for the processing of personal data

Insofar as we obtain the consent of the data subject for the processing of personal data, Art. 6 para. 1 lit. a EU General Data Protection Regulation (GDPR) serves as the legal basis.
When processing personal data that is necessary for the performance of a contract to which the data subject is a party, Art. 6 para. 1 lit. b GDPR serves as the legal basis. This also applies to processing operations that are necessary to carry out pre-contractual measures. Insofar as the processing of personal data is necessary to fulfill a legal obligation to which our company is subject, Art. 6 para. 1 lit. c GDPR serves as the legal basis. In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 para. 1 lit. d GDPR serves as the legal basis.
If the processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the first-mentioned interest, Art. 6 para. 1 lit. f GDPR serves as the legal basis for the processing.

3.3 Data erasure and storage duration

The personal data of the data subject will be erased or blocked as soon as the purpose of storage no longer applies. Data may also be stored if this has been provided for by the European or national legislator in EU regulations, laws or other provisions to which the controller is subject. The data will also be blocked or erased if a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or fulfillment of a contract.

IV. Provision of the website and creation of log files

4.1 Description and scope of data processing

Each time our website is accessed, our system automatically collects data and information from the computer system of the accessing computer. The following data is collected:

(1) The IP address of the user (2) The date and time of access
The data is stored in the log files of our system.
This data is not stored together with other personal data of the user.
The legal basis for the temporary storage of data and log files is Article 6(1)(f) GDPR. Data transfer to third parties No data is transferred to third parties.
Data transfer to a third country or an international organization A third country is a country in which the GDPR is not directly applicable law. This basically includes all countries outside the EU or the European Economic Area.
No data is transferred to a third country or an international organization without your consent or without a legal basis.

 

4.2 Purpose of data processing


Temporary storage of the IP address by the system is necessary to enable delivery of the website to the user’s computer. For this purpose, the user’s IP address must remain stored for the duration of the session.
These purposes also constitute our legitimate interest in data processing in accordance with Article 6(1)(f) GDPR. This data is not merged with other data sources.


4.3 Duration of storage

 

The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended.

OpenStreetMap

 
This website includes a map showing the location of our company. This map uses data from OpenStreetMap, a free project with the purpose of collecting freely usable geodata and making it available in a database for use by anyone (open data). In order for the map to be displayed to you, information about the use of this website, including your IP address, is forwarded to OpenStreetMap. These services are operated by the OpenStreetMap Foundation (OSMF), 132 Maney Hill Road, Sutton Coldfield, West Midlands, B72 1JU, United Kingdom, for the OSM community. In order for the map to be displayed to you, information about the use of OSM services is forwarded to OpenStreetMap. In addition, a so-called session cookie is stored on the visitor’s computer. Details can be found in the “Cookies” section. You can find out how OpenStreetMap stores your data on the OpenStreetMap data protection page. This cookie cannot store any other data and is deleted after one hour (OpenStreetMap) or when the browser session is ended (logout)
 

Cookies

On the website of Julius Schulte Söhne GmbH & Co. KG website, no personal data is stored in cookies.
In the contact area, we have included a map of our company’s surroundings, which stores session cookies on the user’s computer.
A session cookie contains a randomly generated unique identification number, a so-called session ID and information on the origin and storage period on the user’s computer.

4.4 Objection and removal options

The collection of data for the provision of the website and the storage of data in log files is absolutely necessary for the operation of the website. Consequently, the user has no right to object.

Right to lodge a complaint with a supervisory authority Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes the GDPR. The supervisory authority with which the complaint has been lodged shall inform the complainant on the progress and the outcome of the complaint including the possibility of a judicial remedy pursuant to Art. 78 GDPR.

 

4.5 Making contact

If you contact us by e-mail, telephone, fax, etc., you agree to electronic communication. Personal data is collected when you contact us. The information you provide will be stored exclusively for the purpose of processing your request and for possible follow-up questions.
We would like to provide you with the legal basis for this:
Processing to safeguard our legitimate interests Art. 6 para. 1 lit. f. GDPR
We would like to point out that e-mails can be read or changed without authorization and unnoticed during transmission. We would also like to point out that we use software to filter unwanted emails (spam filter). The spam filter can reject e-mails if they have been falsely identified as spam due to certain characteristics.

Changes to our privacy policy

The author assumes no liability for the topicality, correctness, completeness or quality of the information provided. Liability claims against the author relating to material or immaterial damage caused by the use or non-use of the information provided or by the use of incorrect or incomplete information are fundamentally excluded, unless there is evidence of wilful intent or gross negligence on the part of the author. All offers are subject to change and non-binding. The author expressly reserves the right to change, supplement or delete parts of the pages or the entire offer without prior notice or to cease publication temporarily or permanently.

What rights do you have?

a) Right to information

You have the right to obtain information about your stored data free of charge. Upon request, we will inform you in writing, in accordance with applicable law, which of your personal data we have stored. This also includes the origin and recipients of your data as well as the purpose of the data processing.

b) Right to rectification

You have the right to have your data stored by us corrected if it is incorrect. You can also request a restriction of processing, e.g. if you dispute the accuracy of your personal data.

c) Right to blocking

You can also have your data blocked. To ensure that your data can be blocked at any time, this data must be kept in a lock file for control purposes.

d) Right to erasure

You can also request the deletion of your personal data, provided there are no statutory retention obligations. If such an obligation exists, we will block your data upon request. If the relevant legal requirements are met, we will delete your personal data even if you have not made a corresponding request.

e) Right to data portability

You are entitled to request that we provide the personal data transmitted to us in a format that allows it to be transmitted to another location.

f) Right to lodge a complaint with a supervisory authority

You have the option of lodging a complaint with one of the data protection supervisory authorities.
The State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia Postal address: Postfach 20 04 44, 40102 Düsseldorf, Germany House address: Kavalleriestraße 2-4, 40213 Düsseldorf, Germany Telephone +49 211/38424-0 Fax: +49 211/38424-10 E-mail: poststelle{at}ldi.nrw.de Web: https://www.ldi.nrw.de
You can open the complaint form via the following link:
https://www.ldi.nrw.de/
mainmenu_Aktuelles/
Formulare-und-Meldungen/
Inhalt2/Beschwerde/
Beschwerdeformular.html

g) Right of objection

You have the option to revoke the use of your data for internal purposes at any time with effect for the future. All you need to do is send an email to datenschutz{at}schulte-duesseldorf.de. However, such a revocation does not affect the legality of the processing operations carried out by us up to that point. This does not affect data processing with regard to all other legal bases, such as contract initiation (see above).

Protection of your personal data

We take contractual, organizational and technical security measures in accordance with the state of the art to ensure that the provisions of data protection laws are complied with and to protect the data processed by us against accidental or intentional manipulation, loss, destruction or access by unauthorized persons.

The security measures include in particular the encrypted transmission of data between your browser and our server. For this purpose, 128-bit SSL (AES 128) encryption technology is used.

Your personal data is protected within the scope of the following points (excerpt):

a) Safeguarding the confidentiality of your personal data In order to safeguard the confidentiality of your personal data stored by us, we have taken various measures to control access and disclosure.

 

b) Safeguarding the integrity of your personal data In order to safeguard the integrity of your personal data stored by us, we have taken various measures to control disclosure and input.


c) Safeguarding the availability of your personal data In order to safeguard the availability of your personal data stored by us, we have taken various measures to control orders and availability.

The security measures in use are continuously improved in line with technological developments. Despite these precautions, we cannot guarantee the security of your data transmission to our website due to the insecure nature of the Internet. For this reason, any data transmission from you to our website is at your own risk.

Protection of minors

Persons who have not yet reached the age of 16 may only provide us with personal information if they have the express consent of their legal guardians. This data will be processed in accordance with this privacy policy.

 

In accordance with the Federal Data Protection Act, you can contact us free of charge if you have any questions regarding the collection, processing or use of your personal data and the correction, blocking, deletion or revocation of your consent. We would like to point out that you have the right to have incorrect data corrected or personal data deleted if this claim does not conflict with any legal obligation to retain data.

Status: June 2018