Privacy policy
Thank you for your interest in our online presence. The protection of your personal data is very important to us. We would therefore like to take this opportunity to inform you about data protection in our company. It goes without saying that we comply with the legal provisions of the German Data Protection Act (BDSG), the German Telemedia Act (TMG) and other data protection regulations.
You can have trust in us when it comes to your personal data! They are encrypted by digital security systems and transmitted to us. Our websites are protected by technical measures against damage, destruction or unauthorised access.
§ 1 General aspects
The following regulations inform you not only about the processing purposes, legal bases, recipients, storage periods, but also about your rights and the person responsible for your data processing. This data protection declaration only refers to our websites. If you are forwarded to other sites via links on our sites, please inform yourself about their respective handling of your data. Our data protection declaration does not extend to these links!
Personal data is information about your identity. This includes, for example, information such as name, address, telephone number, e-mail address. This information is always processed in accordance with the requirements of the General Data Protection Regulation (GDPR) and other data protection regulations applicable to our company.
In order to use our website, it is generally not necessary for you to disclose personal data. In certain cases, however, it may be necessary to process personal data, for example in order to be able to provide services requested by you.
The same applies, for example, to the sending of information material and ordered goods or to answering individual questions. We will inform you accordingly whenever this is necessary.
If there is no legal basis for processing this personal data, we will obtain the corresponding consent from you.
In addition, we only store and process data that you provide to us voluntarily and, where applicable, data that we collect automatically when you visit our websites (e.g. your IP address and the names of the pages you access, the browser you use and your operating system, date and time of access, search engines used, names of downloaded files).
If you make use of services, we generally only collect the data that we need to provide the services. If we ask you for further data, this is voluntary information. Personal data is processed exclusively to fulfil the requested service and to protect our own legitimate interests.
§ 2 Approach
(1) Purpose of intended use
We use the personal data you provide by e-mail, contact form or telephone to answer your requests, process your orders or provide you with access to certain information or offers. You are not obliged to provide us with your personal data. However, we will not be able to reply to you by e-mail if you do not provide us with your e-mail address. We will not sell or otherwise market your personal data to third parties.
Earmarked use
We will collect, process and use the personal data provided by you online only for the purposes notified to you. Your personal data will not be passed on to third parties without your express consent.
Personal data will only be collected and transmitted to state institutions and authorities entitled to receive information within the framework of the relevant laws or if we are obliged to do so by a court decision. Our employees and the service companies commissioned by us are obliged by us to maintain secrecy and to comply with the provisions of the General Data Protection Regulation.
Data that is automatically collected when you visit our web pages
When you use our internet pages, the following data is stored for organisational and technical reasons: The names of the pages you access, the browser you use and your operating system, the date and time of access, search engines used, names of downloaded files and your IP address.
The information collected is required to deliver the content of our website correctly. In addition, we evaluate this technical data anonymously and for statistical purposes only, in order to be able to constantly optimize our internet presence and make our internet offers even more attractive, as well as to provide law enforcement authorities with the information necessary for prosecution in the event of a cyber attack. This data is stored separately from other personal information on secure systems. No conclusions are drawn about individuals.
Removal and blocking of personal data
We process personal data of data subjects only as long as it is necessary to achieve the underlying purpose or as long as this is provided for by legal regulations to which our company is subject. If the purpose of the storage no longer applies or if a statutory storage period provides for this, personal data will be deleted in accordance with the statutory provisions. Unless we are legally obliged to retain this data. In these cases, the data will be blocked.
(2) Legal basis
a) If you have given us your consent to process your personal data for a specific purpose, the processing is based on Art. 6 (1) a DSGVO.
b) If such processing is necessary to fulfil a contract with you or to initiate such a contract, the processing is based on Art. 6 para. 1 b DSGVO.
c) In some cases, e.g. for the fulfilment of tax obligations, we may be subject to a legal obligation to process personal data. The legal basis for this in such cases is Art. 6 para. 1 c DSGVO.
d) In rare cases, processing may also take place in order to protect vital interests of you or another natural person. In this exceptional case, processing takes place on the basis of Art. 6 para. 1 d DSGVO.
e) Finally, processing may also be based on Art. 6 (1) f DSGVO. This is the case if the processing is carried out to protect a legitimate interest for our company or a third party, provided that your interests, fundamental rights and freedoms are not overridden. Such a legitimate interest can already be assumed if you are a customer of ours. If the processing of personal data is based on Art. 6 (1) f DSGVO, our legitimate interest is the performance of our business activities.
f) In all other cases (especially when using a contact form), Art.6 para. 1f) DSGVO is the legal basis.
(3) Provision of personal data
In some cases, the provision of personal data is required by law or contract. For this reason, it may be necessary, for example, for the conclusion of a contract that you provide us with personal data that must be processed by us. For example, you are obliged to provide personal data in order to conclude a contract. Failure to provide such data would result in the contract not being concluded.
Before providing personal data, you can contact our staff controller for data protection. He or she will inform you whether the provision of personal data is required by law or contract in individual cases and what the consequences of not providing this data would be.
(4) Security
We, as the responsible party for data processing, have taken technical and organisational security measures to protect your personal data from loss, destruction, manipulation and unauthorised access. All our employees and all persons involved in data processing are obliged to comply with the General Data Protection Regulation and other laws relevant to data protection and to handle personal data confidentially.
In the case of collection and processing of personal data, the information is transmitted in encrypted form to prevent misuse of the data by third parties. Our security measures are continuously revised in line with technological developments. Nevertheless, internet-based data transmissions can always have security gaps, so that absolute protection cannot be guaranteed.
(5) Change of our privacy policy
We reserve the right to change our security and data protection measures if this becomes necessary due to technical developments. In these cases, we will also adapt our data protection information accordingly. Please therefore note the current version of our data protection declaration.
Right of opposition: You have the right to object at any time to data processing that is based on Art. 6 (1) f) DSGVO and does not serve the purpose of direct advertising for reasons that arise from your particular situation. In the case of direct advertising, on the other hand, you can object to the processing at any time without giving reasons.
(6) Justified interest
Our justified interest in processing consists of communicating with you in a quick manner and answering your requests in a cost-effective manner. If you provide us with your address, we reserve the right to use it for direct postal advertising. You can protect your interest in data protection by sharing your data sparingly (e.g. using a pseudonym).
(7) Categories of recipients
Hosting provider, shipping service provider for direct advertising
(8) Storage period
Your data will be deleted when the circumstances indicate that your request or the matter in question has been conclusively clarified.
However, if a contract is concluded, the data required under commercial and tax law will be stored by us for the legally specified periods, i.e. regularly ten years (cf. §257 HGB, §147 AO).
(9) Right to cancel
In the event of processing based on your consent, you have the right to revoke your consent at any time.
(10) Children and adolescents
Persons under the age of 18 should not transmit any personal data to us without the consent of their parents or legal guardians. We do not request personal data from children and young people, do not collect it and do not pass it on to third parties.
§ 3 Data collection on our website
(1) SSL and TSL encryption
You can recognize this connection by the fact that the address bar of your browser uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or enquiries that you send to us as the site operator. An encrypted from "http://" to "https://" changes and at the lock symbol in your browser line. If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.
(2) Cookies
When you visit one of our websites, we may place information on your computer in the form of a cookie. Cookies are small text files that are sent to your browser from a web server and stored on your computer's hard drive.
Apart from the internet protocol address, no personal data of the user is stored. This information is used to automatically recognize you the next time you visit our websites and to make navigation easier for you. Cookies allow us, for example, to adapt a website to your interests or to save your password so that you do not have to re-enter it each time.
Of course, you can also view our websites without cookies. If you do not want us to recognize your computer, you can prevent cookies from being stored on your hard drive by selecting "do not accept cookies" in your browser settings. Cookies that have already been set can also be deleted via your browser. Please refer to the instructions of your browser manufacturer for details of how this works. However, if you do not accept cookies, this may lead to functional restrictions of our offers.
(3) Server log files
The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:
- browser type and browser version
- operating system being used
- referrer URL
- host name of the accessing computer
- time of the server request
- IP address
This data is not merged with other data sources.
The basis for the data processing is Art. 6 para. 1 lit. b DSGVO, which permits the processing of data for the fulfilment of a contract or pre-contractual measures.
(4) Newsletter data
If you would like to receive the newsletter offered on the website, we require an e-mail address from you as well as information that allows us to verify that you are the owner of the specified e-mail address and that you agree to receive the newsletter.
We use the so-called double opt-in procedure to ensure that the newsletter is sent with your consent. In the course of this, the potential recipient allows himself/herself to be added to a distribution list. Subsequently, the user is given the opportunity to confirm the registration in a legally secure manner by means of a confirmation e-mail. Only when the confirmation is received is the address actively included in the distribution list.
We use this data exclusively for sending the requested information and offers.
Newsletter2Go is used as the newsletter software. Your data will be transmitted to Sendinblue GmbH. Sendinblue GmbH is prohibited from selling your data and using it for purposes other than sending newsletters. Sendinblue GmbH is a German, certified provider, which was selected according to the requirements of the General Data Protection Regulation and the Federal Data Protection Act. You can find more information here: https://www.sendinblue.com/information-for-email-recipients/
You can revoke your consent to the storage of data, the e-mail address and its use for sending the newsletter at any time, for example via the "unsubscribe" link in the newsletter.
The data protection measures are always subject to technical updates, for this reason we ask you to inform yourself about our data protection measures at regular intervals by consulting our privacy policy.
The data you provide us with for the purpose of receiving the newsletter will be stored by us until you unsubscribe from the newsletter and will be deleted after you unsubscribe. Data stored by us for other purposes (e.g. e-mail addresses for the members' area) remain unaffected by this.
(5) Plugins und Tools
Youtube
Our website uses plugins from the YouTube site operated by Google. The operator of the pages is YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA.
When you visit one of our pages equipped with a YouTube plugin, a connection to the YouTube servers is established. This tells the YouTube server which of our pages you have visited. If you are logged into your YouTube account, you enable YouTube to assign your surfing behaviour directly to your personal profile. You can prevent this by logging out of your YouTube account.
YouTube is used in the interest of an appealing presentation of our online offers. This represents a legitimate interest within the meaning of Art. 6 Para. 1 lit. f DSGVO. Further information on the handling of user data can be found in YouTube's privacy policy at: https://www.google.de/intl/de/policies/privacy/
Google Maps
This site uses the map service Google Maps via an API. The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
To use the functions of Google Maps, it is necessary to store your IP address. This information is usually transferred to a Google server in the USA and stored there. The provider of this site has no influence on this data transmission.
Google Maps is used in the interest of an attractive presentation of our online offers and to make it easy to find the places we indicate on the website. This constitutes a legitimate interest within the meaning of Art. 6 Para. 1 lit. f DSGVO.
More information on the handling of user data can be found in Google's privacy policy: https://www.google.de/intl/de/policies/privacy/
Web analytics with Google Analytics
This website uses Google Analytics, a web analytics service provided by Google, Inc ("Google"). Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyse how users use the site. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. In the event that IP anonymisation is activated on this website, however, your IP address will be truncated beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. In addition, you can prevent the collection of the data generated by the cookie and related to your use of the website (incl. your IP address) to Google as well as the processing of this data by Google by downloading and installing the browser plugin available under the following link: https://tools.google.com/dlpage/gaoptout?hl=de
§ 4 Rights of the data subject
If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights towards us:
1. Right of information
You can request confirmation from us as to whether personal data relating to you is being processed by us. If such processing is taking place, you can request information from us about the following:
(1) the purposes for which the personal data are processed;
(2) the categories of personal data which are processed;
(3) the recipients or categories of recipients to whom the personal data concerning you have been or will be disclosed;
(4) the envisaged duration of the storage of the personal data concerning you or, if specific information on this is not possible, criteria for determining the storage period;
(5) the existence of a right to rectify or erase the personal data concerning you, a right to restrict processing by us or a right to object to such processing;
(6) the existence of a right of appeal to a supervisory authority;
(7) any available information on the origin of the data if the personal data is not collected from the data subject;
(8) the existence of automated decision-making, including profiling, pursuant to Article 22(1) and (4) of the GDPR and, at least in these cases, meaningful information about the logic involved and the scope and intended effects of such processing for the data subject.
You have the right to request information on whether personal data concerning you is transferred to a third country or to an international organisation. In this context, you may request to be informed about the appropriate safeguards pursuant to Article 46 of the GDPR in connection with the transfer.
2. Right of rectification
You have a right to rectification and/or completion from us if the personal data processed concerning you is inaccurate or incomplete. We must make the rectification without undue delay.
3. Right to restriction of processing
You may request the restriction of the processing of personal data concerning you under the following conditions:
(1) if you contest the accuracy of the personal data concerning you for a period of time which allows us to verify the accuracy of the personal data;
(2) if the processing is unlawful and you object to the erasure of the personal data and request instead the restriction of the use of the personal data;
(3) if we no longer need the personal data for the purposes of processing but you need it for the assertion, exercise or defence of legal claims; or
(4) if you have objected to the processing pursuant to Art.21(1) DSGVO and it has not yet been determined whether the legitimate grounds to which we are entitled override your grounds.
Where the processing of personal data concerning you has been restricted, such data may be processed, with the exception of storage, only with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of substantial public interest of the Union or a Member State.
If the restriction of processing has been restricted in accordance with the above conditions, you will be informed by us before the restriction is lifted.
4. Right to deletion
a) Obligation to deletion
You may request us to delete the personal data concerning you without delay and we are obliged to delete this data without delay if one of the following reasons applies:
(1) The personal data concerning you are no longer necessary for the purposes for which they were collected or otherwise processed.
(2) You withdraw your consent on which the processing was based pursuant to Article 6 (1) (a) or Article 9 (2) (a) of the GDPR and there is no other legal basis for the processing.
(3) You object to the processing pursuant to Article 21(1) of the Regulation and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Article 21(2) of the Regulation.
(4) The personal data concerning you have been processed unlawfully.
(5) The erasure of the personal data concerning you is necessary for compliance with a legal obligation under Union or Member State law to which we are subject.
(6) The personal data concerning you has been collected in relation to information society services offered pursuant to Article 8(1) of the Regulation.
b) Information for third parties
If we have made the personal data concerning you public and we are obliged to erase it pursuant to Article 17(1) of the Data Protection Regulation, we shall take reasonable steps, including technical measures, having regard to the available technology and the cost of implementation, to inform the data controllers processing the personal data that you, as the data subject, have requested that they erase all links to, or copies or replications of, that personal data.
c) Exceptions
The right to erasure does not exist insofar as the processing is necessary for
(1) for the exercise of the right to freedom of expression and information;
(2) for compliance with a legal obligation which requires processing under Union or Member State law to which we are subject, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in us;
(3) for reasons of public interest in the area of public health pursuant to Art.9(2)(h) and (i) and Art.9(3) of the GDPR;
(4) for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes pursuant to Article 89(1) of the GDPR, where the right referred to in paragraph (a) is likely to make impossible or seriously prejudice the achievement of the purposes of such processing; or
(5) for the assertion, exercise or defence of legal claims.
5. Right to get informed
If you have asserted the right to rectification, deletion or restriction of processing against us, we are obliged to notify all recipients to whom the personal data concerning you has been disclosed of this rectification or deletion of the data or restriction of processing, unless this proves impossible or involves a disproportionate effort. You have the right to be informed about these recipients.
6. Right to data portability
You have the right to receive the personal data relating to you that you have provided to us in a structured, commonly used and machine-readable format. You also have the right to transfer this data to another controller without hindrance, provided that
(1) the processing is based on consent pursuant to Art. 6 para. 1 lit. a DSGVO or Art. 9 para. 2 lit. a DSGVO or on a contract pursuant to Art. 6 para. 1 lit. b DSGVO and
(2) the processing is carried out with the aid of automated procedures.
In exercising this right, you also have the right to have the personal data concerning you transferred directly from us to another controller, insofar as this is technically feasible. The freedoms and rights of other persons must not be affected by this.
The right to data portability does not apply to the processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us.
7. Right to objection
You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Article 6(1)(e) or (f) of the Data Protection Regulation; this also applies to profiling based on these provisions.
We will then no longer process the personal data relating to you unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
If the personal data concerning you is processed for the purpose of direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing; this also applies to profiling insofar as it is related to such direct marketing.
If you object to the processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes.
You have the possibility, in connection with the use of information society services, notwithstanding Directive 2002/58/EC, to exercise your right to object by means of automated procedures using technical specifications.
8. Right to withdrawal of the declaration of consent under data protection law
You have the right to revoke your declaration of consent under data protection law at any time. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.
9. Automated decision in individual cases including profiling
As a responsible company, we refrain from carrying out automated decision-making or profiling.
10. Right to complain to a regulatory authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, place of work or the place of the alleged infringement, if you consider that the processing of personal data concerning you infringes the GDPR.
The supervisory authority to which the complaint has been lodged shall inform the complainant of the status and outcome of the complaint, including the possibility of a judicial remedy under Art.78 GDPR.
Responsible for data processing:
ERL Automation GmbH
Siemensstraße 12
94405 Landau an der Isar
Telephone: + 49 9951 - 60 34 66 0
Info(at)erl-cutting.com
Contact details of our controller for data protection:
Siemensstraße 12
94405 Landau an der Isar
dsb(at)erl-cutting.com
