Kemitron GmbH, Updated: May 2018
We consider the protection and security of your personal data as the operator of the Internet pages and online shop, available at www.kemitron.de or www.kemitron.com and www.kemitron.eu (hereinafter also “Website”) to be of great importance. In the collection, processing and use of your personal data, the protection of your privacy and compliance with the requirements of data protection is of particular concern to us. Your personal data will therefore be processed exclusively in compliance with the data protection regulations, in particular the provisions of the General Data Protection Regulation (DSGVO) and the German Federal Data Protection Act (BDSG).
In the following, we inform about the collection of personal data, when using our website and the online shop there. Personal data is all data that is personally associable to you, e.g., name, address, e-mail addresses and user behavior.
With regard to the terminology used, e.g. “Processing” or “Responsible”, we refer to the legal definitions in Article 4 of the General Data Protection Regulation (DSGVO).
- Name and contact details of the person responsible for processing
Responsible person, according to Article 4 (7) DSGVO, with respect to the personal data collected on this website is:
An den Kiesgruben 14
73240 Wendlingen, Germany
Tel: +49 (0) 7024/95060
Fax: +49 (0) 7024/950630
- Collection and storage of personal data, as well as purpose and legal basis for its processing
a) When visiting our website
b) Using our electronic contact options
When you contact us by e-mail or through a contact form provided on our website, we will store the information you have provided in order to answer your questions or to process requests. It is hereby necessary to provide a valid e-mail address, so we know from whom the request came and to be able to answer it. Further information can be provided voluntarily. The processing of data for the purpose of establishing contact and starting a business with us is generally based on your voluntarily granted consent (Article 6 (1) a) DSGVO). We delete the data that arises in this context after the storage is no longer required or limit the processing, if there are statutory retention requirements.
c) Orders via our webshop
You can place orders either as a guest through our website without registering permanently or by registering in our webshop by creating a customer account for future orders.
Creating a customer account:
If you decide to set up a personal account, the registration process will collect various data and voluntarily provided information (such as name, address, company, telephone number, e-mail address, as well as payment information, such as bank- or credit-card details and delivery modalities, such as delivery addresses and order information) through the designated form and use it to manage your customer account and provide related additional functions (such as delivery address management and order-status verification). By creating a customer account, you agree to a revocable storage of the data entered by you, so that, in case of a future order, you can log in directly with your e-mail address and password in our shop, without having to enter your contact information again. However, you can also place orders in our online shop without a personal customer account.
Order without creation of a personal customer account: During the ordering process, various data and voluntarily provided data (such as name, address, company, telephone number, e-mail address and payment information, such as bank details or credit-card information and delivery conditions, such as delivery addresses and order information) will be collected via the provided form.
Purposes of the data processing:
The collection of this data takes place,
- to identify you as our customer;
- to process, fulfill and handle your order;
- for correspondence with you;
- for advising;
- for invoicing;
- for the settlement of possible liability claims, as well as the assertion of any claims against you;
- to ensure the technical administration of our website;
- to manage our customer data;
- to provide you with additional features, when creating a customer account, such as the management of delivery addresses and the ability to check the order status.
– examination and optimization of procedures for needs analysis and direct customer approach, including customer segmentation
– advertising or market and opinion research, as long as you have not objected to the use of your data
– assertion of legal claims and defense in legal disputes
– ensuring the IT security and IT operations of our company
– preventing crime
– building and facility security measures (e.g., access control)
– real-property law enforcement measures
– measures for business control, as well as services and products development
– risk control
If you have given us a consent for the processing of personal data for specific purposes, the legality of this processing on the basis of your consent is given (consent under Article 6 (1) a) DSGVO).
- Duration of data storage
We process and store your personal data as long as and to the extent necessary to fulfill our contractual and legal obligations. If the data is no longer required for the fulfillment of contractual or legal obligations, it is deleted on a regular basis, unless you have entered into further storage pursuant to Article 6 (1) sentence 1 a) DSGVO consent or its–limited–further processing is required for the following purposes:
– Compliance with commercial and tax retention periods: In particular, the German Commercial Code, the German Tax Code, the German Criminal Code and the German Money Laundering Act. The deadlines there for storage and documentation are two to ten years.
– Preservation of evidence under the statute of limitations. According to paragraphs 195 et seq. of the German Civil Code (BGB), these limitation periods can be up to 30 years, whereby the regular limitation period is three years.
- Recipients of the data
Within our organization, those entities gain access to your data, which they need to fulfill our contractual and legal obligations. If, in the course of our processing, we disclose data to other persons and companies (contract processors or third parties), transmit them or otherwise grant access to the data, this will be done only if and insofar as
(i) legal provisions permit this (e.g., transmission of the data to third parties pursuant to Article 6 (1) b) DSGVO for the purpose of fulfilling the contract or safeguarding our legitimate interests, pursuant to Article 6 (1) f), is necessary, such as the use of external delivery services, payment processing banks and other agents, the use of webhosters, etc.),
(ii) there is a legal obligation,
(iii) you have consented,
- Your complainant rights
Each affected person has the right to information under Article 15 DSGVO, the right to correction under Article 16 DSGVO, the right to deletion under Article 17 DSGVO, the right to restriction of processing under Article 18 DSGVO, the right to object under Article 21 DSGVO and the right to data portability under Article 20 DSGVO. With regard to the right to information and the right to deletion, the restrictions under sections 34 and 35 BDSG apply. In addition, there is a right of appeal to a data protection supervisory authority (Article 77 DSGVO in conjunction with section 19 BDSG). You may revoke your consent to the processing of personal data at any time. This also applies to the revocation of declarations of consent that were given to us before the effectiveness of the EU General Data Protection Regulation, i.e., before 25 May 2018. Please note that the revocation applies only for the future. Processing that occurred before the revocation is not affected. If you would like to exercise your right of revocation, it is possible in any form; for example, an e-mail to firstname.lastname@example.org is sufficient.
- Google Maps
- Google Analytics
For the statistical recording and evaluation of the use of our website and for the purpose of its needs-based design and continuous optimization, we use, on the basis of Article 6 (1) sentence 1 f) DSGVO Google Analytics, a web analytics service provided by Google Inc. (https://www.google.com/intl/en/about/) (1600 Amphitheater Parkway, Mountain View, CA 94043, USA, hereafter “Google”). In this context, pseudonymized usage profiles are created, and cookies (see No. 6) are used. The information generated by the cookie about your use of this website, in particular (i) browser type/version, (ii) the operating system used, (iii) the referrer URL (the previously visited page), (iv) the host name of the accessing computer (IP address) and (v) time of the server request are usually transmitted to a Google server in the US and stored there. The information is used to evaluate the use of the website, to compile reports on website activity, and to provide other services related to website activity and Internet usage for the purpose of market research and customization of these websites. This information may also be transferred to third parties, if required by law, or if third parties process this data under order. Under no circumstances will your IP address be merged with other data provided by Google. The IP addresses are always anonymized, so that an assignment is not possible (IP masking). For this, we use Google Analytics with the extension “_anonymizeIp()”. Thereby, IP addresses are processed shortened, and a person-relatedness can be excluded. Insofar as the data collected about you is assigned a personal reference, it will be immediately excluded and the personal data will be deleted immediately. In the exceptional cases in which personal information is transferred to the US, Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US Framework. You can prevent the installation of cookies by setting the browser software accordingly; however, we point out that in this case not all features of this website may be fully used. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) and the processing of this data by Google by downloading and installing a browser add-on (https://tools.google.com/dlpage/gaoptout?hl=en). As an alternative to the browser add-on, especially for browsers on mobile devices, you can prevent the collection by Google Analytics by clicking on this link. An opt-out cookie will be set that will prevent the future collection of your data when you visit this website. The opt-out cookie is valid only in this browser and only for our website and is stored on your device. If you delete the cookies in this browser, you must set the opt-out cookie again. For more information about privacy related to Google Analytics, see the Google Analytics Help Center (https://support.google.com/analytics/answer/6004245?hl=en).
- Google Web Fonts
- Social Media Plugins
We rely on our website on the basis of Article 6 (1) sentence 1 f) DSGVO Social Plugins of social networks (e.g., Facebook, Twitter, Google+, Instagram, Xing, LinkedIn, Pinterest) to make our company better known. The underlying commercial purpose is to be regarded as a legitimate interest within the meaning of the DSGVO. Responsibility for the operation compliant with data protection is to be guaranteed by their respective providers. The integration of these plugins by us takes place by way of the so-called two-click method to protect visitors of our website in the best possible way.
c) Google “+1” button
We use components of the LinkedIn network on our site. LinkedIn is a service of LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA. Each time you visit our website that has such a component, this component causes the browser you are using to download a corresponding representation of the LinkedIn component. Through this process, LinkedIn is informed about which specific page of our website is currently being visited. If you click the LinkedIn “Recommend Button”, while logged into your LinkedIn account, you can link the contents of our pages to your LinkedIn profile. As a result, LinkedIn is able to associate your visit to our pages with your LinkedIn user account. We have no control over the information that LinkedIn collects or the extent of the information collected by LinkedIn. We also have no knowledge of the content of the data submitted to LinkedIn. For details about LinkedIn’s data collection, as well as your rights and settings options, please refer to the LinkedIn privacy notices. These notices can be found at http://www.linkedin.com/legal/privacy-policy
Information about your right to object under Article 21 of the EU General Data Protection Regulation (DSGVO)
- Case-specific right of objection
You have the right to object at any time for reasons arising from your particular situation against the processing of personal data relating to you, which takes place on the basis of Article 6 (1) e) DSGVO (data processing in the public interest) and Article 6 (1) f) DSGVO (data processing on the basis of a balance of interests); this also applies to a profiling based on this provision within the meaning of Article 4 (4) DSGVO. If you object, we will no longer process your personal information, unless we can establish compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or the processing is for the purposes of asserting, exercising or defending legal claims.
- Right to object to the processing of data for advertising purposes
In individual cases, we may process your personal data in order to conduct direct mail. You have the right to object at any time to the processing of personal data concerning you for the purposes of such advertising; this applies also to profiling, insofar as it is associated with such direct mail. If you object to the processing for direct-marketing purposes, we will no longer process your personal data for these purposes. The objection can be form-free and should preferably be sent by e-mail to: email@example.com
Note about your own information requirements
As far as we process personal data of your employees, legal bodies or other contact persons/third parties mentioned by you, the data processing takes place basically for the protection of legitimate interests and is allowed under Article 6 (1) sentence 1 f) DSGVO. You, as the responsible person, may have information obligations toward these persons, according to Articles 13, 14 DSGVO, which you may have to fulfill independently.