Privacy Policy pursuant to Art. 13 of GDPR

I.         Name and Address of the Data Controller

The data controller consistent with the General Data Protection Regulation and other national data protection statutes of the Member States as well as other provisions under data protection law is:

 

ASK Kugellagerfabrik

Artur Seyfert GmbH

Weilimdorfer Str. 32-36

70825 Korntal-Münchingen

Germany

Tel.: +49 711 83008-0

E-mail: ask@askubal.de

Website: www.askubal.de

 

II.       Contact Details for the Data Protection Officer

We have appointed a data protection officer to whom every person concerned can directly contact at any time with all questions and suggestions regarding data protection. You can contact him by mail at the above-mentioned address of our company with the addition "personally - at the attention of the data protection officer" or by e-mail to datenschutz@remove-this.askubal.de .

 

III.    General Information on Data Processing

1.        Scope of Processing Personal Data

We process our users’ personal data in principle only to the extent required to provide a functional website as well as our contents and services. Our users’ personal data is processed regularly only after the users have provided consent. An exception applies in cases where obtaining prior consent is not possible due to tangible reasons, and data processing is permitted by statutory regulations.

2.        Legal Basis for Processing Personal Data

To the extent that we obtain consent of the data subject for processing personal data, Art. 6 section 1 letter a of EU General Data Protection Regulation (GDPR) applies as the legal basis.

If personal data needs to be processed to fulfil a contract for which the data subject is the contractual party, Art. 6 section 1 letter b of GDPR applies as the legal basis. This applies also for processing required to carry out pre-contractual measures.

To the extent that personal data needs to be processed to fulfil a legal obligation to which our business is subject, Art. 6 section 1 letter c of GDPR applies as the legal basis.

In the event that vital interests of the data subject or a different natural entity require personal data to be processed, Art. 6 section 1 letter d of GDPR applies as the legal basis.

If processing is required to protect a justified interest of our business or a third party and the interests, basic rights and basic freedoms of the data subject do not outweigh the interest of the former, Art. 6 section 1 letter f of GDPR applies as the legal basis for processing.

3.        Data Deletion and Storage Duration

The data subject’s personal data is deleted or blocked if the purpose of the storage is obsolete. Storage may take place above and beyond this if this was envisaged by European or national legislators in ordinances under European Union law, statutes or other regulations to which the data controller is subject. Data is blocked or deleted also in cases where a storage duration envisaged by the stated standards expires, unless it is necessary to continue to store the data to conclude a contract or fulfil a contract.

 

IV.    Providing the Website and Creating Log Files

1.        Description and Scope of Data Processing

Each time a page on our website is visited, our system collects data and information from the accessing computer on an automated basis.

The following data is collected in the process:

(1)   Information about the browser type and the version used

(2)   The user’s operating system

(3)   The user’s Internet Service Provider

(4)   The user’s IP address

(5)   Date and time of the visit

(6)   Websites from which the user’s system accesses our website

(7)   Websites visited by the user’s system via our website

The data is also saved in our system’s log files. This data is not saved together with other personal data from the user.

2.        Legal Basis for Data Processing

The legal basis for the temporary storage of the data and the log files is Art. 6 section 1 letter f of GDPR.

3.        Purpose of Data Processing

The system needs to save the IP address temporarily to enable the website to be delivered to the user’s computer. The IP address needs to remain saved for the duration of the session for this purpose.

The storage takes place in log files to ensure that the website remains functional. Additionally, the data aids us in optimising the website and in ensuring that our IT systems remain secure. The data is not evaluated for marketing purposes in this context.

For these purposes, we also have justified interest in data processing according to Art. 6 section 1 letter f of GDPR.

4.        Duration of Storage

The data is deleted as soon as it is no longer required for the purpose for which it was collected. When data is collected to provide the website, the data is deleted when the respective session is complete.

If the data is saved in log files, it is deleted after seven days at the latest. Storage beyond this is possible. In this case, the users’ IP addresses are deleted or de-familiarised to ensure that the data can no longer be assigned to the accessing client. However, all log files are deleted after 6 months at the latest.

5.        Option for Rejection and Rectification

It is absolutely necessary to collect data to provide the website, and to save data in log files to operate the website. The user thus cannot object to this.

 

V.       Use of Cookies

1.    Description and Scope of Data Processing

Our website uses cookies. Cookies are text files saved in the internet browser or saved by the internet browser on the user’s computer system. If a user visits a website, a cookie can be saved on the user’s operating system. This cookie has a characteristic string enabling the browser to be identified uniquely when the website is visited again.

We deploy cookies to make our website more user friendly. Some elements on our website require the accessing browser also to be identified after the user has switched to a different page.

The following data is saved and transmitted in the cookies:

(1)   Language settings

(2)   Closing the cookie message

We use cookies on our website above and beyond this enabling the users’ surfing behaviour to be analysed. For this purpose, we use functions of the  Google Analytics web analysis service. The provider is Google Inc. 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google Analytics uses cookies. They are text files saved on your computer, enabling how you use the website to be analysed. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and saved there.
If you activate IP anonymisation on this website, Google will however shorten your IP address within the Member States of the European Union or in other contracting states of the Agreement on the European Economic Area in advance. The full IP address is transmitted to a Google server in the USA and shortened there in exceptional circumstances only. Google will use this information on behalf of the owner of this website to evaluate your use of the website, compile reports about the website activities, and to render further services for the website owner associated with the website use and internet use. The IP address transmitted from your browser as part of Google Analytics is not merged with other Google data.
To prevent cookies from being saved, set your browser software accordingly; please bear in mind here that you may not be able to use all of this website’s functions in their entirety where applicable. Moreover, you can prevent the data generated by the cookie relating to your use of this website (incl. your IP address) from being collected by Google and processed by such by downloading and installing the browser plug-in available under the following link: http://tools.google.com/dlpage/gaoptout?hl=de

When users visit our website, they are informed about cookies for analysis purposes and their consent is obtained to process the personal data used in this context. In this context, reference is also made to our Privacy Policy.

2.    Legal Basis for Data Processing

The legal basis for processing personal data with the use of cookies is Art. 6 section 1 letter f of GDPR.

The legal basis for processing personal data with the use of technically required cookies is Art. 6 section 1 letter f of GDPR.

The legal basis for processing personal data with the use of cookies for analysis purposes and presence of consent of this type from the user is Art. 6 section 1 letter a of GDPR.

3.    Purpose of Data Processing

Technically necessary cookies are used to make it simpler for users to use websites. Some of our website’s functions cannot be used without cookies. For such functions, it is necessary for the browser to be recognised even after the user has switched the page.

We require cookies for the following applications:

(1)   Acknowledging cookies, using Google Analytics and Privacy Policy

(2)   Adopting language settings

(3)   Remembering search terms

The user data collected by technically necessary cookies is not used to create user profiles.

The analysis cookies are used for improving our website’s quality and contents. We use the analysis cookies to find out how the website is being used, thus enabling us to improve our offering continuously. We find out which countries visitors to our website come from, and are able to widen our range of languages. We find out which products visitors to our website find interesting and which are not interesting, and thus can adjust our product range to our customers’ requirements.

For these purposes, we also have justified interest in processing personal data according to Art. 6 section 1 letter f of GDPR.

4.    Duration of Storage, Option for Rejection and Rectification

Cookies are saved on the user’s computer and transmitted from such to our website. Therefore, as a user you also have full control over how cookies are used. To deactivate or restrict the transmission of cookies, alter your internet browser settings. Cookies that have already been saved can be deleted at any time. This can also take place on an automated basis. If cookies are deactivated for our website, it is possible that not all website functions will continue to be available for use.

5. Cookie settings

VI.         Contact Form and E-Mail Contact

1.             Description and Scope of Data Processing

A contact form is provided on our website enabling users to contact us electronically. If users avail themselves of this option, the data input into the entry screen is transmitted to us and stored. This data is:

(1)   Title

(2)   Surname

(3)   First name

(4)   Enterprise

(5)   Street and house number

(6)   Postcode

(7)   Location

(8)   Country

(9)   Telephone number

(10)           Website

(11)           E-mail address

(12)           Your enquiry

(13)           Requested catalogues

 

At the time that the message is sent, the following data is also saved:

(1)   The user’s IP address

(2)   Date and time of the login

When you are ready to send the message, your consent is obtained for data processing and reference is made to this Privacy Policy.

 

Alternatively, you can contact us using the provided e-mail address. In this case, the user’s personal data transmitted with the e-mail is saved.

 

No data is forwarded to third parties in this context. The data is used exclusively for processing the conversation.

2.        Legal Basis for Data Processing

The legal basis for processing data is presence of consent from the user, Art. 6 section 1 letter a of GDPR.

 

The legal basis for processing data transmitted as part of sending an e-mail is Art. 6 section 1 letter f of GDPR. If the e-mail contact is aimed towards concluding a contract, the legal basis for processing is Art. 6 section 1 letter b of GDPR.

3.        Purpose of Data Processing

We process personal data from the entry screen to process the contact enquiry only. If a user contacts us by e-mail, there is also the necessary justified interest in processing the data.

The remaining personal data processed during the submission process is used to prevent the contact form from being abused and to ensure our IT systems remain secure.

4.        Duration of Storage

The data is deleted as soon as it is no longer required for the purpose for which it was collected. For personal data from the contact form entry screen and such data sent by e-mail, this is the case when the respective conversation with the user is complete. The conversation is complete when it can be deduced from the circumstances that the facts of the matter have been ultimately clarified.

 

The additional personal data collected during the submission process is deleted after a period of seven days at the latest.

5.        Option for Rejection and Rectification

The user may at any time revoke his or her consent to the personal data being processed. If the user contacts us by e-mail, he or she may revoke the storage of his or her personal data at any time. In such a case, the conversation cannot be continued.

 

In this regard, please contact our data protection officer.

 

All personal data that was saved as part of the contact enquiry is deleted in this case.

VII.  Web Analysis by Google Analytics

We use Google Analytics on our website to analyse our users’ behaviour. The provider is Google Inc. 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google Analytics uses cookies (re. cookies, see above). They are text files saved on your computer, enabling how you use the website to be analysed. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and saved there.
If you activate IP anonymisation on this website, Google will however shorten your IP address within the Member States of the European Union or in other contracting states of the Agreement on the European Economic Area in advance. The full IP address is transmitted to a Google server in the USA and shortened there in exceptional circumstances only. Google will use this information on behalf of the owner of this website to evaluate your use of the website, compile reports about the website activities, and to render further services for the website owner associated with the website use and internet use. The IP address transmitted from your browser as part of Google Analytics is not merged with other Google data.
To prevent cookies from being saved, set your browser software accordingly; please bear in mind here that you may not be able to use all of this website’s functions in their entirety where applicable. Moreover, you can prevent the data generated by the cookie relating to your use of this website (incl. your IP address) from being collected by Google and processed by such by downloading and installing the browser plug-in available under the following link: http://tools.google.com/dlpage/gaoptout?hl=de

VIII.         Privacy Policy for Using Facebook Plug-ins

Visitors to our website can log into Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA. This occurs when they click the ‘Facebook’ button (orange-coloured small f on a white background). You thus enable the exchange of data, as well as the collection, storage and use of your data irrespective of whether you are logged into Facebook or not. As the connection is rendered directly between you and Facebook, we do not have any information about the type and scope of the transmitted data. For further information on the official Facebook Privacy Policy, use the following link: (http://de-de.facebook.com/policy.php

 

IX.     Privacy Policy for Using Twitter

Functions of the Twitter service are embedded on our web pages. These functions are offered by Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. When you use Twitter and the ‘Re-Tweet’ functions, the web pages you have visited are linked to your Twitter account and communicated to other users. In the process, data is also transmitted to Twitter. We refer to the fact that we as providers of the web pages do not receive any knowledge of the content of the transmitted data, as well as how it is used by Twitter. For further information on this, please refer to the Twitter Privacy Policy at twitter.com/privacy.
To alter your data protection settings on Twitter, visit the Twitter account settings at twitter.com/account/settings.

 

X.       Privacy Policy for Using Google +1

Our web pages use functions from Google +1. The provider is Google Inc. 1600 Amphitheatre Parkway, Mountain View, CA 94043,  USA.
Collecting and transferring information: You can make information public globally by clicking the Google +1 button. You and other users will receive personalised content from Google and our partners by clicking the Google +1 button. Google will save both the information that you gave for specific +1 content as well as information about the website you were viewing when you clicked +1. Your +1 can be shown as notices together with your profile name and your photo in Google services, such as in search results or in your Google profile, or on other places on websites and advertisements in the internet. Google records information about your +1 activities in order to improve Google services for you and others. To be able to use the Google +1 button, you will need a globally visible and public Google profile which must contain at least the name selected for the profile. This name is used for all Google services. In some cases, this name can also replace another name which you have used to share content using your Google account. The identity of your Google profile can be shown to users who know your email address or who have other identifying information from you.
Use of the collected information: in addition to the intended use specified above, the information you provide will be used consistent with currently valid Google data protection provisions. Google may disclose statistics compiled through the +1 activities of users and may give them to users and partners, such as publishers, advertisers or related websites.

XI.     Security

We deploy technical and organisational security measures to protect your data that is managed by us against tampering, loss, destruction and access by unauthorised persons.
Links to external web pages
Our web pages refer also to third-party web pages. Please bear in mind that we cannot influence the content and data protection of the third parties and their owners.

XII.  Image Credits

©iStockphoto.com/Digiphoto, ©iStockphoto.com/SteveMcsweeny, ©iStockphoto.com/narvikk, ©iStockphoto.com/AlexRaths, ©iStockphoto.com/junak, ©iStockphoto.com/tr3gi, ©iStockphoto.com/Liuhsihsiang, ©iStockphoto.com/chinaface, ©iStockphoto.com/3alexd, ©iStockphoto.com/grafart, ©iStockphoto.com/DominikPabis, ©iStockphoto.com/MiguelMalo, ©iStockphoto.com/RomoloTavani, ©iStockphoto.com/McXever, ©iStockphoto.com/monkeybusinessimages, ©iStockphoto.com/3DSculptor, ©iStockphoto.com/TuomasKujansuu, ©iStockphoto.com/Rawpixel Ltd., ©iStockphoto.com/Card76, ©iStockphoto.com/lucky336, ©iStockphoto.com/shironosov, ©iStockphoto.com/Erik Khalitov, ©iStockphoto.com/nzphotonz, ©iStockphoto.com/Ken Rygh, ©iStockphoto.com/Nikada, ©iStockphoto.com/gong hangxu, ©iStockphoto.com/miki1991, ©iStockphoto.com/pupkis, ©iStockphoto.com/stocknroll, ©iStockphoto.com/style-photographs, ©iStockphoto.com/shironosov

 

XIII.         Rights of the Data Subject

The following list includes all rights held by the data subject according to GDPR. Rights not relevant for the specific website do not need to be stated. The list may be shortened in this regard.

If your personal data is processed, you are a data subject consistent with GDPR and you are entitled to the following rights towards the data controller:

1.        Right to Obtain Information

You can ask the data controller to confirm whether your personal data is processed by us.

If such processing has taken place, you can request the following information from the data controller:

(1)       The purposes for which the personal data is processed;

(2)       The categories of personal data processed;

(3)       The recipients or categories of recipients to whom the personal data about you has been or will be disclosed;

(4)       The planned duration of the storage of your personal data or, if specific information about this cannot be provided, criteria for determining the storage period;

(5)       The existence of a right of rectification or deletion of your personal data, of a right to the restriction of processing by the data controller, or of a right to objection to such processing;

(6)       The existence of a right of appeal to a supervisory authority;

(7)       All available information about the origin of the data if the personal data is not collected from the data subject;

(8)       The existence of automated decision-making, including profiling in accordance with Art. 22 section 1 and 4 of GDPR and – at least in these cases – meaningful information about the logic involved and the scope and intended effects of such processing for the data subject.

You have the right to request information as to whether your personal data is transferred to a third country or to an international organisation. In this context, you may request to be informed about the appropriate guarantees in accordance with Art. 46 of GDPR in connection with the transmission.

2.        Right to Rectification

You have a right to rectification and/or completion vis-à-vis the data controller if the personal data processed concerning you is incorrect or incomplete. The data controller must make the correction without delay.

3.        Right to Limitation of Processing

You may request that the processing of personal data concerning you be restricted under the following circumstances:

(1)       If you dispute the accuracy of your personal data for a period of time that enables the data controller to verify the accuracy of the personal data;

(2)       The processing is unlawful and you refuse the deletion of the personal data and instead request that the use of the personal data be restricted;

(3)       The data controller no longer needs the personal data for the purposes of processing, but you do need it to assert, exercise, or defend legal claims, or

(4)       If you have filed an objection to the processing in accordance with Art. 21 section 1 of GDPR and it has not yet been determined whether the legitimate reasons of the data controller outweigh your reasons.

 

If the processing of your personal data has been restricted, such data may only be processed – apart from being stored – with your consent or for the purpose of asserting, exercising, or defending rights or protecting the rights of another natural or legal person or on grounds of an important public interest of the European Union or a Member State.

If the processing restriction has been restricted according to the above conditions, you will be informed by the data controller before the restriction is lifted.

4.        Right to Deletion

a)        Deletion obligation

You may request the data controller to delete your personal data without delay and he/she is obliged to delete this data without delay if one of the following reasons applies:

(1)       Your personal data is no longer required for the purposes for which it was collected or otherwise processed.

(2)       You revoke your consent, on which the processing was based in accordance with Art. 6 section 1 letter a or Art. 9 section 2 letter a of GDPR, and there is no other legal basis for the processing.

(3)       You file an objection against the processing in accordance with Art. 21 section 1 of GDPR and there are no overriding legitimate reasons for the processing, or you file an objection against the processing in accordance with Art. 21 section 2 of GDPR.

(4)       Your personal data has been processed unlawfully.

(5)       The deletion of your personal data is required to fulfil a legal obligation under European Union law or the law of the Member States to which the data controller is subject.

(6)       Your personal data has been collected in relation to information society services offered in accordance with Art. 8 section 1 of GDPR.

b)        Information to Third Parties

If the data controller has made your personal data public and is obliged to delete it in accordance with Art. 17 section 1 of GDPR, he/she shall take appropriate measures, including technical measures, taking into account the available technology and the implementation costs, to inform those who process the personal data that you as the data subject have requested the deletion of all links to this personal data or of copies or replications of this personal data.

c)        Exceptions

The right to deletion is obsolete if processing is required

(1)       To exercise freedom of expression and information;

(2)       To fulfil a legal obligation required for processing under the law of the European Union or of Member States to which the data controller is subject or to carry out a task in the public interest or in the exercise of official authority conferred on the data controller;

(3)       For reasons of public interest in the area of public health in accordance with Art. 9 section 2 letters h and i and Art. 9 section 3 of GDPR;

(4)       For archiving purposes in the public interest, scientific or historical research purposes, or for statistical purposes in accordance with Art. 89 section 1 of GDPR, insofar as the law referred to under section a) is likely to render impossible or seriously impair the attainment of the objectives of such processing.

(5)       To assert, exercise, or defend legal claims.

5.        Right to Instruction

If you have exercised your right to have the data controller correct, delete, or restrict data processing, he/she is obliged to inform all recipients to whom your personal data has been disclosed of this correction or deletion of the data or restriction on processing, unless this proves impossible or involves a disproportionate effort.

You have the right to be informed by the data controller about such recipients.

6.        Right to Data Transferability

You have the right to receive such personal data as relates to you that you provided to the data controller in a structured, common, and machine-readable format. In addition, you have the right to pass this data on to another data controller without obstruction by the data controller to whom the personal data was made available, provided that:

(1)       Processing is based on consent in accordance with Art. 6 section 1 letter a of GDPR or Art. 9 section 2 letter a of GDPR or on a contract in accordance with Art. 6 section 1 letter b of GDPR, and

(2)       Processing is carried out using automated methods.

In exercising this right, you also have the right to request that your personal data be transferred directly from one data controller to another data controller, insofar as this is technically feasible. The freedoms and rights of other persons must not be affected by this.

The right to data transferability shall not apply to the processing of personal data required for the performance of a task in the public interest or in the exercise of an official authorisation conferred on the data controller.

7.        Right of Objection

You have the right to file an objection at any time, for reasons arising from your particular situation, to the processing of your personal data in accordance with Art 6 section 1 letter e or f of GDPR; this also applies to profiling based on these provisions.

The data controller shall no longer process your personal data unless he/she can prove compelling and legitimate grounds for processing, which outweigh your interests, rights, and freedoms or the processing serves to assert, exercise, or defend legal claims.

If your personal data is processed for direct marketing purposes, you have the right to file an objection at any time to the processing of your personal data for the purpose of such marketing; this also applies to profiling, insofar as it is associated with such direct marketing.

If you object to processing for direct marketing purposes, your personal data will no longer be processed for these purposes.

You have the option to exercise your right of objection in connection with the use of information society services by means of automated processes using technical specifications – notwithstanding Directive 2002/58/EC.

8.        Right to Revoke the Data Protection Declaration of Consent

You have the right to revoke your data protection declaration of consent at any time. The revocation of consent shall not affect the legality of processing carried out on the basis of the consent until revocation.

9.        Automated Decision-Making in Individual Cases Including Profiling

You have the right not to be subject to a decision based exclusively on automated processing – including profiling – that has legal effects against you or significantly impairs you in a similar manner. This is not the case if the decision

(1)       is necessary for the conclusion or performance of a contract between you and the data controller,

(2)       is admissible under European Union legislation or that of the Member States to which the data controller is subject and where such legislation contains appropriate measures to safeguard your rights and freedoms and your legitimate interests, or

(3)       is made with your express consent.

However, these decisions may not be based on special categories of personal data in accordance with Art. 9 section 1 of GDPR, unless Art. 9 section 2 letter a or g applies and appropriate measures have been taken to protect your rights and freedoms and your legitimate interests.

In the cases referred to in points (1) and (3), the data controller shall implement suitable measures to safeguard the data subject's rights and freedoms and legitimate interests, at least the right to obtain human intervention on the part of the controller, to express his or her point of view and to contest the decision.

10.    Right to Lodge a Complaint with a Supervisory Authority

Without prejudice to any other administrative or judicial remedy, every data subject shall have the right to lodge a complaint with a supervisory authority, in particular in the Member State of his or her habitual residence, place of work or place of the alleged infringement if the data subject considers that the processing of personal data relating to him or her infringes this Regulation.

The supervisory authority with which the complaint has been lodged shall inform the complainant on the progress and the outcome of the complaint including the possibility of a judicial remedy pursuant to Article 78 of GDPR.

The State Commissioner for Data Protection and Freedom of Information
Baden-Württemberg
Postfach 10 29 32, 70025 Stuttgart
Königstraße 10a, 70173 Stuttgart
Tel.: 0711/61 55 41 – 0
Fax: 0711/61 55 41 – 15
E-mail: poststelle@remove-this.lfdi.bwl.de
Internet: https://www.baden-wuerttemberg.datenschutz.de