PRIVACY POLICY
A. Data protection declaration as per the GDPR
I. Name and address of the responsible party
The responsible party within the context of the General Data Protection Regulation and other national data protection laws of the member states and other legal data protection provisions is:
Serumwerk Bernburg AG
Hallesche Landstr. 105 b
06406 Bernburg
Deutschland
Telephone: +49 3471 860–0
E‑Mail: info@serumwerk.de
Website: www.serumwerk.de
II. Name and address of the data protection officer
The data protection officer of the responsible party is:
E‑Mail: dsb@serumwerk.de
Serumwerk Bernburg AG
Hallesche Landstr. 105 b
06406 Bernburg
Deutschland
Website: www.serumwerk.de
III. General information regarding data processing
1. Scope of personal data processing
Basically, we only collect and utilise personal data from our users, provided this is required to provide a functional website and to offer our own content and services. Collection and use of personal data of our users normally only takes place after the users provide their consent. Exceptions are possible in such cases that prior collection of consent is not possible for actual reasons and processing the data is permitted by legal regulations.
2. Legal basis for processing personal data
If we collect consent from the affected person for data processing activities, Art. 6 Para. 1 lit. a of the EU General Data Protection Regulation (GDPR) shall apply as the legal basis.
When processing personal data that is required for fulfilment of a contract that includes the affected person as a contractual party, Art. 6 Para. 1 lit. b GDPR shall apply as the legal basis. This shall also apply to processing activities that are required to execute measures prior to the contract.
If personal data must be processed to fulfil legal obligations that our company is subject to, Art. 6 paragraph. 1 lit. c GDPR shall apply as the legal basis.
In case critical interests of the affected person or another legal person require personal data to be processed, Art. 6 Para. 1 lit. d GDPR shall apply as the legal basis.
If processing is required to preserve the justified interests of our company or a third party and the interests, basic rights, and basic freedoms of the affected person do not outweigh the previously indicated interest, Art. 6 Para. 1 lit. f GDPR shall apply as the legal basis for processing.
3. Data deletion and storage duration
The personal data of the affected person shall be deleted or blocked once the purpose of storage is no longer present. Storage may also take place if this has been provided for by international or national legislation in European Union law by directives, laws, or other regulations that the responsible party is subject to. Data shall also be blocked or deleted if a storage duration prescribed by the indicated standards expires, unless there is a further storage is necessary for contract completion or contract fulfilment.
IV. Use of cookies
a) Description and scope of data processing
Our website uses cookies. Cookies are small text files which are saved locally in the Internet browser or by the Internet browser on the computer system of the user. If the user accesses a website, a cookie may be stored on the operating system of the user. This cookie contains a characteristic sequence of characters that enable clear identification of the browser when the website is accessed again.
We use cookies to design our website to be more user-friendly.
Several elements on our website require the requesting browser to be identified again after the webpage is changed.
The following data are saved and transferred in these cookies:
(1) Language settings
A pseudonym is applied to the data collected from the user using technical precautions. For this reason, assignment of the data to the accessing user is not possible. The data are not saved together with personal data.
When accessing the website, the user is informed by a popup about the use of cookies for analysis purposes, and their consent to processing personal data in this context is also collected. In this context, instructions regarding this data protection declaration also follow.
b) Legal basis for data processing
The legal basis for processing personal data using technically necessary cookies is provided by Art. 6 Para. 1 lit. f GDPR.
The legal basis for processing personal data using cookies for analysis purposes following consent form the user within this context is provided by Art. 6 Para. 1 lit. a GDPR.
c) The purpose of data processing
The purpose of using technically necessary cookies is to make use of the website easier for the user. Several functions on our website cannot be provided without the use of cookies. This requires the browser to be able to be identified, after the page is changed.
We require cookies for the following applications:
(1) Shopping cart
(2) Application of language settings
(3) Remembering search terms
User data collected via technically necessary cookies shall not be used to create a user profile.
Analysis cookies are used to improve the quality of our website and its content. The analysis cookies tell us how the website is being used, which enables us to improve our offer continuously.
These purposes include our justifiable interest in processing personal data as per Art. 6 Para. 1 lit. f GDPR.
d) Duration of storage, right of removal and objection
Cookies are stored on the computer of the user and transmitted from them to our site. For this reason, you also have complete control over the use of cookies. Changing the settings in your web browser enables you to deactivate or limit the transmission of cookies. Previously stored cookies may be deleted at any time. This may also be completed automatically. If cookies for our website are deactivated, it is possible that not all of the functions of the website will be able to be used comprehensively.
V. Use of Google Analytics
We make use of Google Analytics, a web analysis service provided by Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”), on our website. The purpose of the data processing activities is to analyse this website and its visitors. To this end, Google will use this information on behalf of the operator of this website to evaluate your use of the website, to compile reports on the website activities, and to provide other services associated with the website and internet usage to the website operator. Google will not combine the IP address conveyed by your browser in the context of Google Analytics with other data.
Google Analytics uses cookies which make it possible to analyse your use of the website. The information generated by the cookies concerning your use of this website will typically be transmitted to a Google server in the USA and saved there. IP anonymisation has been activated on this website. Consequently your IP address will be abbreviated first by Google within the member states of the European Union or in other states that are parties to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and abbreviated there. Your data may be transmitted to the USA. In cases where data is transmitted to the USA, a European Commission adequacy decision is available. Processing is carried out due to the legitimate interest in ensuring that the layout of the website is demand-driven and target-oriented and on the basis of Article 6 (1) item f of the German General Data Protection Regulation (DSGVO).
You have the right to file an objection against the processing of personal data concerning your person carried out on the basis of Article 6 (1) item f of the German General Data Protection Regulation (DSGVO) at any time if there are grounds arising from your particular situation.
You can also prevent cookies from being saved by selecting the appropriate settings in your browser software. However, we would like to point out that you may not be able to use all of the functions of this website to the full extent in that case. In addition, you may prevent the data (including your IP address) generated by the cookie and related to your use of the website as well as the processing of this data by Google with the provided download and installation of the Browser-Add-on . You can set up an opt-out cookie to prevent Google Analytics from collecting data on any device. Opt-out cookies prevent your data from being collected when you visit this website in the future. You must set up the opt-out on each and every system and device you use to ensure that this works to the greatest extent.
The opt-out cookie is set by clicking here: Deactivate Google Analytics
More detailed information about Google Analytics can be found here: Conditions of use and Privacy Policy
VI. Contact form and e‑mail contact
1. Description and scope of data processing
On our webpage, there is a contact form that may be used to contact us electronically. If a user utilises this option, the data entered into the input window will be transferred to us and saved.
These data include:
A list of the data in the input window follows:
Greeting form (selection)
Title
First name
Last name*
Telephone
Fax
E‑Mail*
Message*
Department selection that the message is intended for*
* = required fields
Techn. tool: Field = I have read the data protection declaration and consent to it.
The following data will also be stored when the message is sent:
(1) Data and time of sending
To process the data, your consent shall be collected within the framework of the sending process, and this data protection declaration shall be referred to.
Upon receipt of your message via the contact form or the e‑mail address provided by you on the homepage, it shall be possible to contact you. In these cases, the personal data transferred with the e‑mail from the user will be saved in our local inbox.
No data are provided to third parties within this context. The data shall only be used to process the conversation.
2. Legal basis for data processing
The legal basis for processing the data using shall be consent form the user as per Art. 6 Para. 1 lit. a GDPR.
The legal basis for processing personal data that are transferred within the context of an e‑mail is Art. 6 Para. 1 lit. f GDPR. If the e‑mail contact intends completion of a contract, the additional legal basis for processing shall be Art. 6 Para. 1 lit. b GDPR.
3. The purpose of data processing
The preparation of personal data from the input window shall only be used to process a contact request. In case of a contact request via e‑mail, this shall also represent the required justifiable interest in processing the data.
The other personal data processed during the sending process are used to prevent abuse of the contact form and to ensure the security of our technical information systems.
4. Duration of saving
The duration personal data are stored shall be based on the respective legal storage (e.g. commercial and storage periods required for legal taxation purposes). After expiry of the period, the corresponding data shall be deleted routinely, provided they are no longer required for fulfil a contract or to initiate a contract and/or no legal interest in further storage is present.
5. Right of objection and correction
The user has the option at all times to withdraw their consent to processing their personal data. If the user contacts us by e‑mail, they may object to storage of their personal data at any time. In this case, correspondence cannot be continued.
An e‑mail sent to the data protection officer is sufficient for this purpose: dsb@serumwerk.de
All personal data that were collected over the course of correspondence shall be deleted in this situation.
VII. Rights of affected persons
If your personal data are processed, you are affected within the context of the GDPR, and you have the following rights vis-a-vis the responsible party:
1. Access right as per Art. 15 GDPR
You may demand a confirmation from the responsible party that personal data involving you is processed by us.
If processing within this context takes place, you may request the following information from the responsible party:
(1) The purpose why personal data are being processed;
(2) The categories of personal data that are being processed;
(3) The recipient and the categories of recipients who your relevant personal data have been disclosed to or shall be disclosed to;
(4) The planned storage duration of personal data affecting you, or, if concrete specifications about this are not possible, criteria for specification of the storage duration;
(5) Existence of a right to reporting or deletion of the personal data affecting you, a right to limitation of processing by the responsible party or a right to object against this processing;
(6) The existence of a right to complain to a supervisory authority;
(7) All available information regarding the source of the data, if personal data is not collected from the affected person;
You have the right to demand information about whether the personal data affecting you is transferred to a third-party country or an international organisation. In this context, you may demand to be informed concerning suitable guarantees according to Art. 46 GDPR regarding the transmission of data.
2. Correction right as per Art. 16 GDPR
You have the right to correction and/or completion vis-a-vis the responsible party, provided processed personal data related to you is incorrect or incomplete. The responsible party must make the corrections immediately.
3. Limited processing right as per Art. 18 GDPR
Under the following circumstances, you may demand limited processing of the personal data affecting you:
(1) If you dispute the correctness of the personal data affecting you for a duration that enables the responsible party to check the correctness of the personal data;
(2) Processing is illegal and you decline deletion of the data and instead demand limitation of the use of personal data;
(3) The responsible party no longer requires the personal data for processing purposes, however you require this for assertion, exercising, or defending legal claims, or
(4) If you have submitted a claim against processing according to Art. 21 Para. 1 GDPR, and it is unclear if the justifiable reasons of the responsible party outweigh those of your own.
If processing of the personal data affecting you has been limited, then these data may only be processed (not including storage) with your consent or to assert, exercise, or defend legal claims or to protect the rights of another natural person or legal person or for reasons involving important public interests of the European Union or a member state.
If limited processing has been limited according to the requirements above, then you shall be informed by the responsible party before limitation has been cleared.
4. Deletion right
a) Deletion obligation
You may demand from the responsible party that the personal data affecting you is immediately deleted, and the responsible party is obligated to delete these data immediately, provided one of the following reasons applies:
(1) The personal data affecting you are no longer needed for the purposes that they were collected for or otherwise processed.
(2) You recall your consent supporting processing according to Art. 6 Para. 1 lit. a or Art. 9 Para. 2 lit. a GDPR, and another differing legal basis for processing is lacking.
(3) You submit your objection to processing as per Art. 21 Para. 1 GDPR and there is no priority justifiable reason for processing or you submit your objection to processing according to Art. 21 Para. 2 GDPR.
(4) The personal data affecting you was processed illegally.
(5) Deletion of the person data affecting you is required to fulfil a legal obligation according to European Union law or the law of the member states that the responsible party is subject to.
(6) Deletion of the person data affecting you is required to fulfil a legal obligation according to European Union law or the law of the member states that the responsible party is subject to.
b) Information to third parties
If the responsible party makes personal data affecting you public and if they are obligated to delete it according to Art. 17 Para. 1 GDPR, then they shall a undertake suitable measures in line with the available technology and the costs of implementation, including of a technical type to inform the person responsible for processing the personal data, that you, the person affected, have requested deletion of all links to this personal data or copies or facsimiles of this personal data.
c) Exceptions
The right to deletion is not available as long as processing is required
(1) To exercise the right to free expression of opinion and information;
(2) To fulfil a legal obligation affecting processing according to European Union law or the law of member states that the responsible party is subject to, or to perform duties in the public interest or to exercise public authority that has been transferred to the responsible party;
(3) For reasons in the public interest in the area of public health according to Art. 9 Para. 2 lit. h and Art. 9 Para. 3 GDPR;
(4) For archival purposes in the public interest, scientific or historical research purposes, or for statistical purposes according to Art. 89 Para. 1 GDPR, and provided the law indicated in section a) regarding the realisation of the goals of this processing are made impossible or are seriously impaired, or
(5) To assert, exercise, or defend legal claims.
5. Information right as per Art. 19 GDPR
If have applied your right to correction, deletion, or limitation of processing vis-a-vis the responsible party, then they shall be obligated to inform all recipients, whom personal data affecting you were disclosed to, that the data must be corrected or deleted, or that its processing must be limited, unless this proves to be impossible or is connected with disproportionately high costs.
You have the right to be informed about these recipients.
6. Data transfer right as per Art. 20 GDPR
You have the right to receive the personal data affecting you that you provided to the responsible party in a structured, conventional, and machine-readable format. You also have the right to have this data transferred from the responsible party that was provided the personal data to another responsible party without impairment, provided that
(1) Processing involves consent according to Art. 6 Para. 1 lit. a GDPR or Art. 9 Para. 2 lit. a GDPR or a contract according to Art. 6 Para. 1 lit. b GDPR , and
(2) Processing is completed using automated processes.
To exercise this right, you also have the right to cause personal data affecting you to be transferred from the responsible party to another responsible party, provided this is technically feasible. Freedoms and rights of other persons may not be impaired by this.
The right to data transfer shall not apply to personal data that are required to perform a task that is in the public interest or follows execution of public authority that has been transferred to the responsible party.
7. Objection right
Due to reasons resulting from your special situation, you have the right to object to processing personal data affecting you according to Art. 6 Para. 1 lit. e or f GDPR; this shall also apply to any profiling that occurs supported by these provisions.
The responsible party shall no longer process personal data affecting you, unless he is able to prove urgent reasons worthy of protection for continued processing, which outweigh your own interests, rights, and freedoms, or processing serves assertion, exercising, or defending legal claims.
If the personal data affecting you are used for direct marketing purposes, you have the right to submit your objection to processing personal data affecting you for purposes of advertising as such; this shall also apply to profiling, provided this is related to any direct marketing activities.
If you object to processing for direct marketing purposes, personal data affecting you shall no longer be processed for these purposes.
Within the context of utilisation of the information company’s services you have the option (regardless of Directive 2002/58/EC) to exercise your right of objection using an automated process, which uses technical specifications.
8. Right to withdraw the declaration of consent to legal data protection
You have the right to withdraw your declaration of consent to legal data protection. The withdrawal of consent shall not affect the legality of processing completion based on consent until the withdrawal.
9. Right to submit a complaint with a supervisory authority according to Art. 77 GDPR
Unaffected by another legal administrative or judicial remedy, you have the right to complain to a supervisory authority, especially in the member state of your own location, your place of employment, or the location of the supposed violation, if you are of the opinion that processing your personal data violates the GDPR.
The supervisory authority to which the complaint was submitted shall instruct the complaining party regarding the status and results of the complaint including the possibility of a legal remedy according to Art. 78 GDPR.
State Representative for data protection Saxony-Anhalt
O. Box 19 47
39009 Magdeburg
or
Leiterstraße 9
39104 Magdeburg
Telephone: +49 391 81803–0
Telefax: +49 391 81803–33
E‑Mail: poststelle@lfd.sachsen-anhalt.de
Homepage: www.datenschutz.sachsen-anhalt.de
Serumwerk Bernburg AG,
18.05.2018