Privacy Policy
As of: 05/2018
We only process users’ personal data (hereinafter referred to as “data”) insofar as this is necessary to provide a functional and comfortable website as well as our content and services.
“Processing” means the collection, use, transfer and / or storage. According to the General Data Protection Regulation (hereinafter referred to as “GDPR”), “personal data” basically includes all data with which a natural person can be identified. The exact definitions of the terms are defined in Art. 4 GDPR.
The following explanations inform you in particular about the type, scope, purpose, duration and legal basis of the processing of personal data about its purposes and means of processing, we decide alone or together with others, and about the optimization and quality of use that we may have third-party components that process data on their own responsibility:
_________________________________________
A) Information about the person responsible
B) Rights of the user
C) Information on data processing
_________________________________________
A) Information about the person responsible
The person responsible (hereinafter “provider”) within the meaning of the GDPR and other national data protection laws of the member states as well as other data protection regulations is:
Sertronics GmbH
Jenfelder Allee 80
22045 Hamburg
Tel.: +49-40-853999-0
Fax.: +49-40-853999-99
E-Mail: info@sertronics.de
The responsible data protection officer is:
Rene Lorbeer
Jenfelder Allee 80
22045 Hamburg
Tel.: +49-40-853999-30
Fax.: +49-40-853999-99
E-Mail: rene.lorbeer@sertronics.de
B) Rights of the user
With regard to the processing of his personal data reproduced below by the provider, the user has the right to
1. to request confirmation as to whether the data concerning him are being processed and for exact information about this data as well as for further information and copies of the data in accordance with Art. 15 GDPR;
2. to request the immediate correction of the incorrect data concerning him or the completion of this data in accordance with Art. 16 GDPR;
3. to request that the data concerning him be deleted immediately in accordance with Art. 17 GDPR, alternatively, if, for example, further processing in accordance with Art. 17 Para. 3 GDPR is required, a restriction of the processing of the data in accordance with Art. 18 GDPR to demand;
4. that he receives the data concerning him and provided by him in accordance with Art. 20 GDPR and to request its transmission to other responsible persons;
5. Submit a complaint to the supervisory authority in accordance with Art. 77 GDPR if the user believes that the processing of his data by the provider violates the GDPR.
_________________________
6. In principle, the user can prevent the future processing of the data concerning him, which is carried out by a responsible person on the basis of Art. f GDPR takes place at any time in accordance with Art. 21 GDPR. The objection can in particular be made against processing for direct marketing purposes.
_________________________
7. The provider is also obliged to notify any recipients of the data to whom the data is provided, of any correction or deletion of the personal data or a restriction of processing that takes place on the basis of Article 16 GDPR, Article 17 paragraph 1 GDPR and Article 18 GDPR were disclosed. The obligation does not exist in the event that this notification proves to be impossible or involves a disproportionate effort. The user has the right to information about these recipients.
C) Information on data processing
Insofar as no detailed information is given below about the individual data processing, the user’s data processed by the provider will be deleted or blocked as soon as the purpose of storage no longer applies and the deletion does not conflict with any statutory retention requirements.
Server data
For communication and security reasons, when visiting the website, The following data, which the user’s internet browser transmits to the provider or to his web space provider, is collected (so-called server log files):
– browser type and version;
– Operating system used;
– Website from which the user switched to the website of the provider (referrer URL);
– Website that the user visits;
– date and time of access;
– Internet protocol (IP) address of the user.
The data is also temporarily saved. This data is not stored together with other personal data of the user. The legal basis for the temporary storage is Art. 6 Para. 1 lit. f GDPR based on the legitimate interest in improving the stability, functionality and security of the website.
The data will be deleted after seven days at the latest. Data whose further storage is necessary for evidence purposes are excluded from deletion until the respective incident has been finally clarified.
Cookies
a) „Session“ cookies
The provider uses so-called cookies on his website. Cookies are small text files or other storage technologies that the Internet browser used by the user stores and stores on the end device. These cookies individually process certain information of the user, such as browser and location data and IP address values.
The processing allows the provider to make his website more user-friendly, effective and secure. For example, the processing enables the content to be reproduced in different languages or, where appropriate, the use of online order placement. If these cookies process personal data for the purpose of contract initiation or contract execution, the legal basis for the processing is Art. 6 Para. 1 lit. b GDPR.
If the processing is not intended to initiate or process a contract, the processing serves the legitimate interest of the provider in improving the functionality of the website and is based on the legal basis of Art. 6 Para. 1 lit. f GDPR.
These cookies are deleted when the user closes their browser.
b) Third party cookies
Third-party cookies may also be used on the provider’s website. These third-party providers are partner companies with whom the provider interacts for the purpose of advertising, analysis or the functionalities of the website. If this is the case, the purposes and legal bases of the corresponding processing are reproduced in the following explanations.
c) Elimination possibility
The user can prevent or restrict the installation of cookies by setting the browser accordingly. Cookies that have already been saved can also be deleted at any time. The settings for this depend on the respective browser. In the case of flash cookies, processing cannot be prevented via the settings of the browser, but through the corresponding setting of the flash player. If the user prevents or restricts the installation of cookies, this can mean that not all functions of the website can be used to their full extent.
Contract processing
a) Processing
The personal data provided by the user for the purpose of an order will be processed by the provider for the purpose of contract execution. The details of the data are necessary for the conclusion of the contract; the contract cannot be concluded without the provision of the data. The legal basis for processing is Art. 6 Para. 1 lit. b GDPR. After completion of the contract, the user’s data will be deleted with due regard to tax and commercial law retention periods.
b) Disclosure
The customer’s personal data will be passed on to the transport company commissioned with the delivery, to the financial service provider or to a software service provider used for contract processing, as far as this is necessary for the delivery or payment of the goods and for contract execution.
The legal basis for the transfer of the data is Art. 6 Para. 1 lit. b GDPR.
Customer account
If the user registers for a customer account with the provider, the data entered in the course of this registration (e.g. name, address, email address) will only be used for the fulfillment of a contract or the implementation of pre-contractual measures and for general administration of the customer relationship ( e.g. retrieval of the repair status) collected and saved. The registration also saves the IP address and the date and time of registration. It will not be passed on to third parties.
The legal basis for this is Art. 6 Para. 1 lit. a GDPR. As part of the registration process, the express consent of the user for the above processing may be obtained and reference made to this data protection declaration. The data collected in this way will only be used for the aforementioned purposedet. It will not be passed on to third parties.
If the opening of the customer account serves the fulfillment of a contract or the implementation of pre-contractual measures, then additional legal basis is Art. 6 para. 1 lit. b GDPR.
Consent to the customer account can be revoked at any time in accordance with Art. 7 Para. 3 GDPR by notifying the provider. The data processed in connection with this will be deleted as soon as it is no longer necessary to process it. If the data is required to fulfill a contract or to carry out pre-contractual measures, the user’s data will be deleted at the end of the tax and commercial retention periods.
Contact requests
If the user contacts the provider, the personal data entered or recorded on this occasion will be used to process the request. The details of the data are required to answer the request, without the provision of the data an answer is not possible or only possible to a limited extent.
If the contact request serves the fulfillment of a contract or the implementation of pre-contractual measures, the legal basis is Art. 6 Para. 1 lit. b GDPR.
The user’s data will be deleted if the user’s request has been answered in the end and there are no statutory retention requirements, such as with a subsequent contract execution.
The legal basis can also be the user’s consent in accordance with Art. 6 Para. 1 lit. a GDPR.
A given consent for the contact request can be revoked by the user at any time by sending a message to the provider. The data processed in connection with this will be deleted as soon as it is no longer necessary to process it.
Job applications
In the case of digital applications, the application data is electronically collected and processed by us for the purpose of handling the application process.
The legal basis for processing is Section 26 (1) sentence 1 BDSG. in conjunction with Art. 88 Para. 1 GDPR.
If your application is followed by an employment contract, the data transmitted can be stored in the personnel file for the purpose of the usual organizational and administrative process, taking into account the relevant legal regulations.
The legal basis for the processing is Section 26 (1) sentence 1 BDSG in conjunction with Article 88 (1) GDPR.
If the job application is rejected, the transmitted data will be deleted automatically two months after the rejection is announced. This does not apply if, due to legal requirements (obligation to provide evidence in accordance with the General Equal Treatment Act, AGG), longer storage of up to four months or completion of a judicial procedure is required.
The legal basis for this is Art. 6 Para. 1 lit. f GDPR or § 24 Paragraph 1 No. 2 BDSG.
The provider has a legitimate interest in legal defense.
If explicit consent has been given to the data being stored in a prospect database for a longer period of time, the data will be processed based on the consent.
The legal basis is Art. 6 Para. 1 lit. a GDPR. Consent to this can be revoked at any time in accordance with Art. 7 Para. 3 GDPR by notifying the provider for the future.