Data Protection Statement under the General Data Protection Regulation (GDPR)

I. Name and address of the controller

The party responsible (the “controller”) within the meaning of the General Data Protection Regulation, other national data protection laws in force in EU Member States, and further data protection legislation is:

PSA Zufuehrtechnik GmbH
Reichsweg 19-23
52068 Aachen
Germany
Phone: +49 791 94600980
E-mail: qi@cfn-mg.qr
Website: www.psa-zt.de

II. Contact information of the data protection officer

VUV Beratungs- und Service GmbH
Theaterstr. 55
52062 Aachen / Germany
E-Mail: cfn@hafre-qngrafpuhgm.qr

III. General information on data processing

1. Scope of processing of personal data
On principle, we collect and use personal data from our users only to the extent required for providing a functional website and presenting our contents and services. Personal user data is collected and used, as a rule, only with the user’s consent. An exception applies where such consent cannot be obtained beforehand for factual reasons and processing of the data is permitted by law.

2. Legal basis of processing of personal data
To the extent that we obtain the data subject’s consent to personal data processing operations, the legal basis for the processing of personal data is Art. 6 (1) (a) of the EU General Data Protection Regulation (GDPR).

Where the processing of personal data is prerequisite to the performance of a contract to which the data subject is party, Art. 6 (1)(b) of the GDPR forms the legal basis. This also holds true for processing operations necessary for carrying out pre-contractual steps.
To the extent that processing is required to fulfill a legal obligation incumbent on our company, Art. 6 (1)(c) of the GDPR forms the legal basis.
If processing is necessary to safeguard a legitimate interest held by our company or a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject, Art. 6 (1)(f) of the GDPR forms the legal basis for such processing.

3. Data erasure and storage period
The data subject’s personal data will be erased or blocked as soon as the purpose of storing it ceases to exist. Data may be stored beyond this period if permitted by European or national legislatures in Union directives, laws or other regulations to which the controller is subject. Data will also be blocked or erased if a storage time limit prescribed by the above-mentioned norms expires, save where a further storage of such data is prerequisite to the conclusion or fulfillment of a contract.

IV. Provision of the website and log file generation

1. Description and scope of data processing
Whenever our website is accessed, our system automatically captures data and information from the user’s computer system. The following data are thus collected:

  1. Information about the browser type and version employed
  2. Operating system of the user’s computer
  3. User’s internet service provider
  4. User’s IP address
  5. Date and time of access
  6. Websites from which the user’s system is referred to our site
  7. Name and URL of the accessed file

The data will also be stored in our system’s log files. This does not apply to user IP addresses or other data that would make the user identifiable by reference thereto. Such data are not stored together with other personal user data.

On our web pages we employ so-called Google web fonts. This involves the loading of fonts from Google servers for the purpose of enhancing the presentation of the web page. Data processing is carried out on the basis of a weighing of interests, our own interest being to provide an appealing web page design (Art. 6(1)(f) GDPR).
The relevant fonts are loaded from Google servers usually located in the U.S.A.
For more detailed information, refer to Google’s data protection information which can be accessed here:
www.google.com/fonts#AboutPlace:about
www.google.com/policies/privacy/

This site uses the Google Maps map service via an API. It is operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
To use Google Maps, it is necessary to save your IP address. This information is generally transmitted to a Google server in the USA and stored there. The provider of this site has no influence on this data transfer.
Further information about handling user data, can be found in the data protection declaration of Google at
www.google.de/intl/de/policies/privacy/

2. Legal basis of data processing
The legal basis for the temporary storage of data is Art. 6 (1)(f) of the GDPR.

3. Data processing purpose
The system’s temporary storage of the IP address is necessary to enable delivery of our website to the user’s computer. To this end, the user’s IP address must be stored for the duration of the session.
The use of Google Maps is in the interest of making our website appealing and to facilitate the location of places specified by us on the website.
It is in these purposes, moreover, that our legitimate interest in carrying out data processing under Art. 6 (1) (f) GDPR resides.

4. Storage period
The data will be erased as soon as it is no longer needed for achieving the purpose of its collection. In the case of data captured to provide the website, this will be the case upon termination of the respective session.

5. Objection and removal option
The collection of data for purposes of providing the website and the storage of data in log files are essential to the operation of the website. Consequently, the user has no option to object thereto.

V. Use of cookies

a) Description and scope of data processing
Our website uses cookies. Cookies are text files stored in the web browser or saved in the user’s computer system by the web browser. When a user views a website, a cookie may be written into the user’s operating system. This cookie contains a characteristic string that allows the browser to be uniquely identified when the website is revisited.
We use cookies to make our website more user-friendly. Some elements of our website require that the browser can be identified even after a page change.

b) Legal basis of data processing
The legal basis for processing personal data with the aid of cookies is Art. 6 (1)(f) GDPR.

c) Data processing purpose
The purpose of using strictly necessary technical cookies is to simplify the use of websites for users. Without the use of cookies, some functions of our website could not be made available. They require that the browser be recognized even after a page change.
The data collected by strictly necessary technical cookies is not employed to generate user profiles.
It is in these purposes, moreover, that our legitimate interest in carrying out data processing under Art. 6 (1) (f) GDPR resides.

d) Storage period; objection and removal option
Cookies are stored on the user’s computer, which transmits them to our site. Thus, as a user you have full control over the use of cookies. You can deactivate or restrict the transmission of cookies by changing the settings in your Internet browser. Cookies already stored can be deleted at any time. This can even be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all functions of the website in full.

VI. Contact form and e-mail contact

1. Description and scope of data processing
Contact can be made via the e-mail address provided. The personal user data transmitted with the e-mail will be stored.

No data will be passed on to any third parties in this context. This data is used only for processing the conversation.

2. Legal basis of data processing
The legal basis for processing data is Art. 6 (1)(a) GDPR if the user has given consent.

The legal basis for processing data transferred as part of sending an e-mail is Art. 6 (1)(f) GDPR. If e-mail contact is made in the aim of concluding a contract, an additional legal basis for processing is constituted by Article 6 (1)(b) GDPR.

3. Data processing purpose
If you get in touch by e-mail, moreover, it is this fact in which the legitimate interest in carrying out data processing under Art. 6 (1) (f) GDPR resides.

4. Storage period
The data will be erased as soon as it is no longer necessary for achieving the purpose of its collection. With personal data sent by e-mail, this will be the case when the given conversation with the user is finished. The conversation is finished if and when it is evident from the circumstances that the matter in question has been conclusively resolved.

Any additional personal data collected during the sending process will be erased after a period of seven days at the latest.

5. Objection and removal option
The user has the option of revoking his/her consent to the processing of personal data at any time. If the user contacts us via e-mail, he/she can object to the storage of his/her personal data at any time. In this case the conversation cannot be continued.

The revocation of consent and the objection to storage must be directed in text form to the controller.

All personal data stored in the process of contacting us will then be erased.

VII. Rights of the data subject

You enjoy extensive rights regarding the processing of your personal data. First of all, you have an extensive access to information right and may request that your personal data be corrected and/or erased and/or blocked, as the case may be. You may also demand that processing be restricted, and you have a right to object as well as a right to data portability.

To exercise any of your rights and/or to obtain more detailed information in this regard, contact us at QI@CFN-MG.qr.

Moreover, you have the right to lodge a complaint with a supervisory authority.
If you have any questions, comments or enquiries concerning the collection, processing and use of your personal data as practiced by our company, please also get in touch with us using the contact information provided.