Privacy Statement

Privacy Statement

1. Privacy Statement

1. Privacy Statement

With the following data protection declaration, we explain the way we handle personal data in collecting, processing, using and deleting it.
Data protection is a matter of trust, and your trust is important to us. We respect your privacy and personal sphere. The protection and legally compliant collection, processing and use of your personal data are thus an important concern to us. To make sure you feel safe when visiting our website, we strictly observe legal provisions when processing your personal data and would like to inform you here concerning our data collection and data use.

We oblige to comply with the GDPR and nationally applicable data protection laws. For us, data protection is a company-wide topic of high priority, and we only work with partners also able to demonstrate an appropriate level of data protection in their processing framework. We only process your data if you have provided us your express consent to do so, if this relates to a contract or pre-contractual measures on a service basis or if the relevant laws permit or require data processing. The following data protection information covers both the currently applicable national legal framework and the requirements of the EU General Data Protection Regulation (GDPR) valid throughout Europe from May 25, 2018. References to the legal basis of the GDPR are definitive from May 25, 2018. Under no circumstances do we sell your data or disclose them on to unauthorized third parties. We would gladly provide you with detailed information on the handling of your data in our departments below.
We deploy appropriate technical and organizational safety measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or against unauthorized access by third parties. Our security measures are constantly being improved according to the technological state of the art.

You can print out or save this document by utilizing the normal functions of your browser. The following privacy policy explains to you which data are collected on our websites and which data we process and use and how.

Controller and Data Protection Officer:
The controller, as defined in the EU General Data Protection Regulation (GDPR) and other national data protection laws of the Member States, along with other statutory data protection provisions, is:

Donges SteelTec GmbH
Mainzer Strasse 55
64293 Darmstadt
Germany

Phone: +49 (0) 6151 889 0
E-mail: info@donges-steeltec.de

The controller’s data protection officer is:

Andreas Schriewer
Datenschutzbeauftragter (Data Protection Officer)
Donges SteelTec GmbH
Phone: +49 (0) 6151 889-205
Fax: +49 (0) 6151 889-203
E-mail: a_schriewer@donges-steeltec.de

2. Collection, storage and processing of personal data

2. Collection, storage and processing of personal data

What information do we collect and for what purpose?
We collect and use the personal data of our users only to the extent necessary to provide a functional website and our content and services. The collection and use of personal data of our users takes place regularly only with the consent of the user. An exception applies in cases where prior consent cannot be obtained for factual reasons and the processing of the data is permitted by statutory provisions.

Description and scope of data processing:

Each time you access our website, our system automatically collects data and information from the computer system of the accessing computer.
For statistical purposes, we store the name of the requested website, the date and time of the page visit as well as the volume of data transferred. In addition, whether the transmission of the information was successful and the provider through which access occurred.

The data are also stored in the log files of our system. This data are not stored together with other personal data of the user.
The temporary storage of the IP address by the system is necessary to enable delivery of the website to the user’s computer. To do so, the IP address of the user must remain stored for the duration of the session.

The data are stored in log files in order to ensure the functionality of the website. In addition, the data are also used to optimize the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not occur in this context.
These purposes also reflect our legitimate interest in data processing according to Art. 6 Section 1 lit. f GDPR.

3. Disclosure of data

3. Disclosure of data

In order to make our website as pleasant and convenient as possible for you as a user, we occasionally utilize the services of external service providers. Below, you have the opportunity to become informed about data protection regulations for the use and application of the services and functions deployed, in order to be able to exercise your rights, if necessary, also with the service providers.

Google Maps:

Our websites use Google Maps to display maps and to create route maps. Google Maps is operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. By using this website, you consent to the collection, processing and use by Google, one of its agents, or third parties of data that is automatically collected and entered by you. The terms of service for Google Maps can be found under “Google Maps Terms of Service”. Extensive details can be found in the Google Safety Center of google.com: “Transparency and choices” and “data protection provisions”.

If you provide us with your e-mail address, we will communicate with you via e-mail. However, we will not pass this address on to third parties outside Donges SteelTec GmbH. If personal data is transmitted to us, depending on the settings of your e-mail program, we will treat it confidentially. An encryption of the transmitted information within the information exchange does not occur.

If you complete a registration form on our website with contact information (“CONTACT”), this information will be used to send you requested responses, product information, messages, etc. Your personal data will be used exclusively for these purposes and will not be passed on to third parties outside Donges SteelTec GmbH. The data that you transmit to us online are not encrypted. The legal basis for this processing of data is the existence of your conclusive user consent provided upon completing the send procedure according to Art. 6 Sect. 1 lit. a GDPR. These data are deleted as soon as they are no longer required for the purpose of their collection. As a user, you have the option of canceling registration at any time. You can change the data stored about you at any time.

Google Fonts:

External fonts, Google Fonts, are used on our website. Google Fonts is a service of Google Inc. (“Google”). The integration of these Web fonts takes place by being called up by a server, usually a server of Google in the United States. This tells the server which of our Internet pages you have visited. The IP address of the browser of the terminal device of the visitor to these Internet pages is also stored by Google. For more information, please refer to Google’s privacy policy, which can be found here:
www.google.com/fonts#AboutPlace:about
www.google.com/policies/privacy/

Google Analytics:

Google Analytics is a service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). Google Analytics uses “cookies”, which are text files placed on your computer and enable Google to analyze the use of our service. The information on your use of our website (including your IP address) collected by the cookie is generally transmitted to and stored by Google on servers in the United States. We would like to point out that Google Analytics has been extended by the code “gat._anonymizeIp();;” on our websites in order to guarantee an anonymous recording of IP addresses (so-called IP masking). At our request, Google will therefore only record your IP address in abbreviated form, which guarantees anonymization and does not allow any conclusions to be drawn about your identity. If IP anonymization is activated on our websites, within Member States of the European Union or in other countries that are party to the Agreement on the European Economic Area, Google will shorten your IP address beforehand. Only in exceptional cases will the full IP address be transmitted to a Google server in the United States and shortened there. Google will use this information to evaluate your use of our websites, to compile reports on website activity for us and to provide us with other services relating to the use of websites and the Internet. The IP address transmitted by your browser within the scope of Google Analytics is not merged with other Google data. A transfer of this data by Google to third parties only takes place based on legal regulations or in the framework of order data processing. Under no circumstances will Google combine your data with other data collected by Google. By using this website, you consent to the processing of data about you by Google and the manner of data processing and purpose specified above. You may refuse the use of cookies by selecting the appropriate settings on your browser software, however please note that if you do so, you may not be able to use the full functionality of our websites. You can also prevent Google from collecting the data generated by the cookie and relating to your use of this website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available under the following link.

You can find more information on Google Analytics and data protection at http://tools.google.com/dlpage/gaoptout?hl=de.

4. Newsletter

4. Newsletter

You have the opportunity to subscribe to a free newsletter on our website. When registering for the newsletter, the data from the input screen is transmitted to us.
Specific designation of the data collected is intended to occur at this point. In the minimum case, this concerns the e-mail address of the user.

In addition, the following data are collected during registration:
• IP address of the requesting computer
• Date and time of the registration

Your consent will be obtained for the processing of your data during the registration process and reference will be made to this privacy policy.
In connection with data processing for sending out newsletters, no data will be passed on to third parties. The data will be used exclusively for sending out the newsletter.

Purpose of data processing in connection with the sending out newsletters:
The purpose of collecting the user’s e-mail address is to deliver the newsletter. The newsletter is sent out based on registration of the user on the website. The collection of other personal data as part of the registration process serves to prevent misuse of the services or the e-mail address used.

Duration of storage with regard to the data collected for the use of newsletters:
The data are deleted as soon as they are no longer required for the purpose of their collection. Accordingly, the user’s e-mail address is stored as long as the newsletter subscription is active.

The newsletter is sent out based on registration of the user on the website.
Personal data otherwise collected in the course of the registration process are usually erased after a period of seven days.

Option of objection and removal with respect to newsletter dispatch:
The subscription of the newsletter can be cancelled by the concerned user at any time. For this purpose, each newsletter contains a corresponding unsubscribe link.

5. Storage duration and data erasure

5. Storage duration and data erasure

The personal data of the subject are deleted or blocked as soon as the purpose for storage no longer applies. In addition, storage can occur beyond this period if this has been provided for by the European or national legislation or in EU regulations, laws or other rules to which the controller is subject. Blockage or erasure of the data shall also occur if a storage period prescribed by the aforementioned standards expires, unless it is necessary for further storage of the data for the conclusion of a contract or for performance of a contract.

Other data are also deleted as soon as they are no longer required for the purpose of their collection. In case data are collected to provide the website, this is the case when the respective session ends.

If the data are stored in log files, they will be deleted at the latest after seven days. Storage beyond this time is possible. In this case, the IP addresses of the users are deleted or rendered anonymous so that any attribution of the client calling up the website is no longer possible.

6. Cookies

6. Cookies

Our website uses cookies. Cookies are text files that are stored in the Internet browser or by the Internet browser on the user’s computer system. When a user visits a website, a cookie may be stored on the user’s operating system. This cookie contains a characteristic string of characters that enables the browser to be uniquely identified when the website is called up again.
We use cookies to make our website more user-friendly. Some elements of our website require that the requesting browser be identified even changing pages.

The following data are stored and transmitted in the cookies:
• language settings
• log-in information

We also use cookies on our website, which enable us to analyze the surfing behavior of our users.
In this manner, the following data can be transmitted:
• Entered search terms
• Frequency of page visits
• Use of website functions.

When launching our website, the user is informed about the use of cookies for analysis purposes and his consent is obtained to process the personal data used in this context. In this context, there is also a reference to this Privacy Statement.

How can you prevent the storage of cookies?
Depending on the browser you are using, you can set your browser to only accept cookies if you agree to do so. The Help function in the menu bar of your web browser generally shows you how to reject new cookies and how to deactivate cookies that have already been received. We recommend that when using shared computers configured to accept cookies and flash cookies, you always log out completely once you are finished.

Purpose of data processing in the form of using cookies:
The purpose of using technically necessary cookies is to facilitate the use of websites for users. Some functions of our website cannot be offered without the use of cookies. For these it is necessary that the browser also be recognized after changing pages.
The user data collected by us through cookies are not used to create user profiles.

Duration of storage, option of objection and removal with respect to cookies:
Cookies are stored on the user’s computer and transmitted to our site by the user. Therefore, as a user, you also have full control over the use of cookies. You can deactivate or restrict the transmission of cookies by changing the settings in your Internet browser. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it is possible that not all functions of the website can be used to the full extent.

7. Legal basis relating to processing of personal data

7. Legal basis relating to processing of personal data

To the extent that we obtain the consent of the data subject for the processing of personal data, Art. 6 Section 1 lit. a EU General Data Protection Regulation (GDPR) serves as the legal basis for the processing of personal data.

Art. 6 Section 1 lit. b GDPR serves as a legal basis for the processing of personal data required for the performance of a contract to which the data subject is a party. This also applies to processing operations necessary for the implementation of pre-contractual measures.
If the processing of personal data is necessary to fulfill a legal obligation to which our company is subject, Art. 6 Section 1 lit. c GDPR serves as the legal basis.

In case vital interests of the data subject or another natural person necessitate the processing of personal data, Art. 6 Section 1 lit. d GDPR serves as the legal basis.

If the processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests, basic rights and fundamental freedoms of the data subject do not take precedence over the first-mentioned interest, Art. 6 Section 1 lit. f GDPR serves as the legal basis for the processing.

The legal basis for temporary storage of data and log files is Art. 6 Section 1 lit. f GDPR.

8. Rights of data subjects

8. Rights of data subjects

According to Art. 15 in conjunction with Art. 34 Federal Data Protection Act (BDSG), you have the unrestricted right to free information about your data stored by us and according to Art. 35 Federal Data Protection Act (BDSG) the right to erasure or blockage of prohibited data or the right to rectification of incorrect data.

Upon request, we are pleased to inform you in writing whether and which personal data we have stored about you. Wherever possible, we will take appropriate measures on short notice to update or correct your data stored by us. All information requests, queries or objections to data processing should please be directed by e-mail directly to our data protection officer, stating your complete mailing address.
If your personal data are processed, you are the data subject within the meaning of the GDPR and you have the following rights vis-à-vis the controller:

Right to information:
You can request confirmation from the controller as to whether personal data relating to you will be processed by us.
In the event of such processing, you may request the following information from the data controller:
• the purposes for which the personal data are processed;
• the categories of personal data processed;
• the recipients or categories of recipients to whom your personal data have been or will be disclosed;
• the planned duration of the storage of the personal data concerning you, or if it is not possible to provide specific information in this regard, criteria for determining the duration of the storage;
• the existence of the right to request from the controller the rectification or erasure of your personal data, a right to restriction of processing by the controller or a right to object to this processing;
• the existing of the right to lodge a complaint with a supervisory authority;
• all available information on concerning the origin of the data, if the personal data are not collected from the data subject;
• the existence of automated decision-making, including profiling, referred to in Art. 22 Section 1 and 4 GDPR and – at least in these cases – meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.
• You have the right to request information as to whether the personal data concerning you will be transferred to a third country or to an international organization. In this context, you may request to be informed of the appropriate guarantees pursuant to Art. 46 GDPR in connection with the transfer.

Right to rectification:
You have the right to rectification and/or completion by the data controller if the personal data processed and relating to you are inaccurate or incomplete. The controller is to carry out the correction immediately.
Right to restriction of processing:
Under the following conditions, you may request that the processing of your personal data be restricted:
• if you dispute the accuracy of the personal data relating to you for a period of time allowing the controller to verify the accuracy of the personal data;
• the processing is unlawful and you oppose the erasure of the personal data and instead request the restriction of their use;
• the controller no longer needs the personal data for the purposes of the processing, but they are required by the data subject for the asserting, exercising or defending against legal claims, or
• if the you have objected to processing according to Art. 21 Section 1 GDPR and it has not yet been determined whether the legitimate grounds of the controller override yours.
Where processing has been restricted, these data – with the exception of storage – are only allowed to be processed with your consent or for the assertion, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of vital public interest of the EU or of a Member State.
Where the restriction limits the processing according to the above-mentioned pre-requisites, you will be notified by the controller before the restriction of processing is lifted.

Right to erasure:
You may request from the controller the immediate erasure of personal data concerning you, and the controller is obliged to erase these data immediately, to the extent one of the following reasons applies:
• Your personal data are no longer necessary in terms of the purposes for which they were collected or otherwise processed;
• You withdraw your consent on which processing is based according to Art. 6 Section 1 lit. a or Art. 9 Section 2 lit. a GDPR, and where there is no other legal ground for the processing.
• You object to the processing pursuant to Art. 21 Section 1 GDPR and there are no overriding legitimate grounds for the processing, or you object to processing according to Art. 21 Section 2 GDPR.
• The personal data concerning you have been unlawfully processed.
• The erasure of the personal data on you is required for compliance with a legal obligation according to EU law or the laws of Member States to which the controller is subject.
• The personal data relating to you have been collected in relation to the offer of information society services referred to in Art.8 Section 1 GDPR.
If the controller has made public the personal data concerning you and if he is obliged to erase it according to Art. 17 Section 1 GDPR, taking into account the available technology and the cost of implementation, including technical measures, the controller shall take reasonable steps to inform controllers processing the personal data that you as a data subject have requested that they erase all links to, copies or replication of, these personal data.
The right to erasure does not exist to the extent processing is required:
• for exercising the right of freedom of expression and information;
• for compliance with a legal obligation which requires processing by the EU or by Member States, to which the controller is subject, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
• for reasons of public interest in the area of public health in accordance with Art. 9 Section 2 lit. h and i as well as Art. 9 Section 3 GDPR;
• for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Art. 89 Section 1 GDPR, to the extent that the right referred to under Section a) is likely to render impossible or seriously impair the achievement of the objectives of that processing; or
• for the establishment, exercise or defense of legal claims.
If you have exercised your right to rectification, erasure or restriction of processing vis-à-vis the controller, he is obliged to inform all persons to whom data concerning you has been disclosed of this rectification, erasure or restriction of processing, unless this proves impossible or involves disproportionate effort.
You have the right vis-à-vis the controller to be informed of such recipients.
You have the right to receive the personal data concerning you, which you have provided to the controller, in a structured, standard and machine-readable format. Furthermore, you have the right to transmit these data to another controller without hindrance by the controller to which the personal data have been provided, to the extent that
• the processing is based on a statement of consent according to Art. 6 Sect. 1 lit. a GDPR or Art. 9 Sect. 2 lit. a GDPR or on an agreement according to Art. 6 Section 1 lit. b GDPR and
• the processing is carried out with the help of automated procedures.
In exercising this right, you furthermore have the right to have the personal data concerning you transmitted directly from one controller to another, where technically feasible. Freedoms and rights of other persons are not allowed to be infringed by this.
The right to data portability shall not apply to processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

Right to objection and revocation:
You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you, which occurs based on Art. 6 Section 1 lit. e or f GDPR; this also includes profiling based on these provisions.
The controller shall no longer process the personal data relating to you unless the controller demonstrates compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defense of legal claims.
Where personal data concerning you are processed for direct marketing purposes, you have the right at any time to object to processing of personal data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing.
Where you object to processing for direct marketing purposes, your personal data shall no longer be processed for such purposes.
You have the option within the context of the use of information society services – notwithstanding Directive 2002/58/EC – to exercise your right to object by automated means where technical specifications are used.

You have the right to withdraw your declaration of consent under data protection law at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal. Right of objection and removal.
If you contact us by e-mail, you can object to the storage of your personal data at any time. In such a case, the conversation cannot be continued.
In this case, all personal data stored in the course of establishing contact will be deleted.
The collection of data for the provision of the website and the storage of data in log files is mandatory for the operation of the website. Consequently, as an exception, there is no possibility of objection in this respect.

Right to lodge a complaint with a supervisory authority:
Without prejudice to any other administrative or judicial remedy, you shall have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement, if you are of the view that the processing of personal data relating to you infringes the GDPR.

The supervisory authority with which the complaint has been lodged shall inform the complainant on the progress and the outcome of the complaint including the possibility of a judicial remedy pursuant to Art. 78 GDPR.

Copyright © 2019

Copyright © 2019: Donges SteelTec GmbH

All content, photos, texts and graphics are subject to the authors’ right and copyright of Donges SteelTec GmbH. They may not be copied, modified, reproduced or published in whole or in part without the company’s prior permission.

In the event of any infringements on copyrights of third parties, we request immediate notification.

Copyright © 2019