The policy below provides a summary of the personal data Bernd Kraft GmbH collects when you visit our web pages, the purpose for which it is collected and how it is used.
LEGAL BASES FOR PROCESSING
Insofar as we obtain your consent to the processing of personal data, the legal basis is as provided by point (a) of Art. 6(1) of the EU General Data Protection Regulation (GDPR).
Where processing of personal data is required for the performance of a contract to which you are a contracting party, the legal basis is as provided by point (b) of Art. 6(1) GDPR. This also applies to processing required to implement measures prior to entering into a contract.
Where processing of personal data is required to meet a legal obligation to which Bernd Kraft GmbH is subject, the legal basis is as provided by point (c) of Art. 6(1) GDPR.
Where processing of personal data is required to uphold a legitimate interest pursued by Bernd Kraft GmbH, the legal basis is as provided by point (f) of Art. 6(1) GDPR.
ERASURE OF DATA / RETENTION PERIODS
Your personal data shall be erased when the purpose of retention no longer applies. Data may also be retained where stipulated by European or national legislation in EU regulations, laws or other requirements to which Bernd Kraft GmbH is subject. Data shall also be erased where a retention period stipulated by the standards referred to above expires, unless further retention of the data is necessary to conclude or fulfill a contract.
CREATION OF LOG FILES
Information sent by your browser is automatically stored temporarily every time you visit the Bernd Kraft GmbH website. A log file is created containing the browser type/version, the operating system used, the name and URL of the file accessed, the reference URL (the page previously visited), the host name of the computer from which the site is accessed (IP address) and the date and time of the server request. This data is not merged with other data sources. The data is stored and processed solely for the purpose of system security and to optimize our Internet presence.
You can use the Bernd Kraft GmbH website to inquire on a range of issues relating to the company or to contact us. You can contact Bernd Kraft GmbH using the contact form, by phone or by arranging for a callback. When you contact us, data such as your name, e-mail address and telephone number are recorded. This data is processed as part of the measures required prior to entering into a contract for the performance of the service offered by us. The data is then erased unless it is still required for the performance of a contract or measures required prior to entering into a contract. Where the inquiry relates to the activity of a subsidiary, affiliate or management company of Bernd Kraft GmbH and this is required to process the request efficiently, your data may be shared with the relevant company.
Alternatively you can contact us using the e-mail address provided. If so, the user’s personal data sent with the e-mail will be stored.
Session cookies are automatically erased when you close the browser. These store a “session ID” which is used to attribute multiple requests by your browser to the overall session. This allows us to recognize your computer when you return to our website. We need to use session cookies to make the website available to you. The legal basis for using session cookies to process your personal data is as set out in point (f) of Art. 6(1) GDPR.
Persistent cookies are automatically erased after a predefined period which may vary depending on the cookie. You can erase these cookies at any time in your browser’s security settings. Cookies allow us to track your usage behavior for the above purposes and to the appropriate extent. They are also designed to provide you with an optimized surfing experience on our website. The use of persistent cookies is based on your consent. The legal basis for data processing is as set out in point (a) of Art. 6(1) GDPR.
You can configure your Internet browser to prevent our cookies from being stored on your device or to erase any cookies previously stored on it. If you choose not to accept any cookies, this may restrict the functions available on the website.
With your consent, we also install third-party cookies. In this case the relevant third-party data packages are stored in your browser or sent to the browser. You can also normally set your browser to block the use of third-party cookies. The following third-party cookies are used:
- Google Analytics
- Google AdWords
The legal basis for using third-party cookies to process your personal data is as set out in point (a) of Art. 6(1) GDPR.
USE OF GOOGLE ANALYTICS
The use of this extension means that your IP address will, however, be shortened beforehand by Google within member states of the European Union or in other states that are party to the Agreement on the European Economic Area.
Google will use this information solely on our behalf to analyze your use of the website, create reports on website activities and provide additional services to the website operator in connection with use of the website and Internet usage. The shortened IP address that is transmitted by your browser as part of Google Analytics is not merged with other data held by Google. You can prevent these cookies from being stored by enabling the relevant setting in your browser software. Please note, however, that this may prevent you from using all the functions available on this website.
You can also prevent your data from being tracked by Google Analytics by clicking on the following link: https://tools.google.com/dlpage/gaoptout?hl=de. An opt-out cookie is set, which will prevent your data from being collected during future visits to this website.
Bernd Kraft GmbH cannot guarantee that the transmission of data on the Internet is secure. E-mail communications are not encrypted. For this reason, access by third parties cannot be ruled out. We therefore recommend sending confidential information solely by regular mail.
The Controller, as defined in the General Data Protection Regulation (GDPR), is:
Bernd Kraft GmbH
47167 Duisburg, Germany
RIGHTS OF THE DATA SUBJECT
If your personal data is processed, you are a Data Subject as defined in the GDPR and you have the following rights with regard to us. Please always send your request to the Controller named above.
Access: You have the right to obtain from us free of charge access to and confirmation regarding the personal data relating to you that is stored by us as well as a copy of such data.
Rectification: You have the right to have inaccurate personal data relating to you rectified, or to have incomplete personal data completed.
Restriction of processing: You have the right to obtain a restriction of the processing of your personal data where one of the following applies:
- The accuracy of the personal data is contested by you, for a period enabling us to verify the accuracy of the personal data.
- The processing is unlawful and you oppose the erasure of the personal data and request the restriction of their use instead.
- We no longer need the personal data for the purposes of the processing, but you require them for the establishment, exercise or defense of legal claims.
- You have objected to processing pursuant to Article 21(1) GDPR pending the verification whether our legitimate grounds override yours.
Erasure: You have the right for the personal data relating to you to be erased without undue delay where one of the following grounds applies and where processing is not required:
- The personal data is no longer necessary in relation to the purposes for which it was collected or otherwise processed.
- You withdraw consent on which the processing is based and there is no other legal ground for the processing.
- You object to the processing pursuant to Article 21(1) GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Article 21(2) GDPR.
- The personal data has been unlawfully processed.
- The personal data has to be erased for compliance with a legal obligation in Union or Member State law to which we are subject.
- The personal data has been collected in relation to the offer of information society services referred to in Article 8(1) GDPR.
Data portability: You have the right to receive the personal data relating to you, which you have provided to us, in a structured, commonly used and machine-readable format. You also have the right to transmit this data to another controller without hindrance from us. In exercising this right, you also have the right to have the personal data relating to you transmitted directly from us to another controller, where technically feasible. This shall not adversely affect the rights and freedoms of others.
Object: You have the right to object at any time to processing of personal data relating to you, which is “solely” based on the legitimate interests pursued by us or third parties (point (f) of Art. 6(1) GDPR). If you object, we shall no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms or if processing is used for the establishment, exercise or defense of legal claims.
Withdrawal of consent: You have the right to withdraw your data use consent at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
To exercise your rights, please always contact the Controller named above since he is also responsible for implementing your rights. However you can also contact the Data Protection Officer, particularly where your request requires a higher level of confidentiality:
Data Protection Officer for Bernd Kraft GmbH
c/o migosens GmbH
45473 Mülheim an der Ruhr
Tel: +49 (0) 208-99395110
Fax: +49 (0) 208-99395119
RIGHT TO LODGE A COMPLAINT WITH A SUPERVISORY AUTHORITY
Without prejudice to any other administrative or judicial remedy, you shall have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes on the GDPR.