beton-boeden.de

Data privacy statement

Data privacy statement

Thank you for your interest in our company. Data protection has a particularly high priority for the management at EBALAN Floor Systems GmbH. The website of EBALAN Floor Systems GmbH can basically be used without any submission of personal data. If a data subject wants to obtain certain services from our company via its website, however, processing of personal data might become necessary. If processing of personal data is required in the absence of a legal basis for such processing, our standard practice is to obtain the data subject's consent.

Personal data, for example, the name, postal address, e-mail address or telephone number of a data subject, are always processed in accordance with the general data protection regulation and in compliance with state-specific data privacy regulations applicable to EBALAN Floor Systems GmbH. By way of this data privacy statement, our company would like to inform the public about the type, scope and purpose of personal data collected, used and processed by us. This data privacy statement furthermore informs data subjects about their rights.

As data controller, EBALAN Floor Systems GmbH has implemented numerous technical and organizational measures to ensure the most comprehensive possible protection of personal data processed via this website. Nonetheless, the security of data transmission via the Internet is basically susceptible, so that absolute protection cannot be guaranteed. For this reason, every data subject is free to convey their personal information to us via alternative channels, for example, by telephone.

1. Definitions of terms

The data privacy policy of EBALAN Floor Systems GmbH is based on terminology used by European legislative and regulatory bodies during enactment of the general data protection regulation (GDPR). Our data privacy statement is intended to be easily readable and understandable for the public as well as our customers and business partners. To ensure this, we would like to explain some of the employed terminology in advance.

Terms used in this data privacy statement include the following:

  • a) Personal data

    Personal data include all information related to an identified or identifiable natural person (hereinafter referred to as "data subject"). An identifiable natural person is considered one who can be identified directly or indirectly, in particular, through association with an identifier such as a name, an identification number, location data, online ID, or with one or more special features making up the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

  • b) Data subject

    A data subject is any identified or identifiable natural person whose personal data are processed by the data controller.

  • c) Processing

    Processing means every procedure executed with or without the help of automation, or every such series of procedures involving personal data such as collection, registration, organization, sorting, storage, adaptation or change, readout, querying, utilization, disclosure through transmission, dissemination or any other form of supply, comparison or association, restriction, deletion or destruction.

  • d) Restriction of processing

    Restriction of processing means marking of stored personal data with the aim of restricting its future processing.

  • e) Profiling

    Profiling means any form of automated processing of personal data consisting of the use of these data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects concerning that natural person's performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements.

  • f) Pseudonymization

    Pseudonymization means processing of personal data in such a manner that the personal data can no longer be associated with a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organizational measures which ensure that the personal data are not associated with an identified or identifiable natural person.

  • g) Responsible party or data controller

    Responsible party or data controller means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of processing personal data. If the purposes and means of such processing are specified by EU law or the laws of the member states, the data controller or the specific criteria for their nomination can be designated by EU law or the laws of the member states.

  • h) Delegated data processor

    Delegated data processor means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the data controller.

  • i) Recipient

    A recipient is a natural or legal person, public authority, agency or other body to which personal data are disclosed, regardless of whether or not a third party is involved here. However, authorities which might receive personal data in the framework of a particular investigative mandate in accordance with EU law or the laws of the member states are not considered recipients.

  • j) Third party

    A third party is a natural or legal person, public authority, agency or other body other than the data subject, the data controller, the delegated data processor and the persons authorized to process the personal data under the direct responsibility of the data controller or the delegated data processor.

  • k) Third party

    Consent is every expression of intent issued voluntarily in the specific case by the data subject in an informed and unambiguous manner in the form of a declaration or another unequivocal affirmative action whereby the data subject signifies agreement to processing of their personal data.

2. Name and address of the data controller

Within the meaning of the general data protection regulations, other data protection laws applicable in the member states of the European Union, as well as further provisions related to data protection, the data controller is:

EBALAN Floor Systems GmbH

Vorgebirgsstraße 6a

50389 Wesseling

Deutschland

Tel.: +49 2236 326898

E-mail: info@beton-boeden.de

Website: www.beton-boeden.de

3. Cookies

The website of EBALAN Floor Systems GmbH uses cookies. Cookies are text files stored and saved via an Internet browser on a computer system.

Numerous websites and servers use cookies. Many cookies contain a cookie ID. This is a unique identifier of the cookie. It consists of a character string via which websites and servers can be associated with a specific browser which has saved the cookie. This allows the visited websites and servers to distinguish between the data subject's individual browser and other Internet browsers containing other cookies. An individual Internet browser can be recognized and identified by way of the unique cookie ID.

Through the use of cookies, EBALAN Floor Systems GmbH can provide the users of this website with user-friendly services which would otherwise not be possible without setting cookies.

Cookies can be used to optimize the information and offers on our website for the users' purposes. As already mentioned, cookies allow us to recognize users of our website. The purpose of this recognition is to facilitate use of our website. For example, users of a website which employs cookies do not have to input their access data each time they visit the site, because this task is performed by the website and the cookie stored on the user's computer system. Another example is the cookie of a shopping cart at an online store. The online store uses a cookie to keep track of the articles placed by a customer in the virtual shopping cart.

The data subject can permanently prevent the setting of cookies at our website at any time by selecting a corresponding option in the employed Internet browser. In addition, already set cookies can be deleted at any time via an Internet browser or other software programs. This is possible in all common Internet browsers. If a data subject deactivates setting of cookies in their Internet browser, not all the functions of our website might remain fully available.

4. Collection of general data and information

The website of EBALAN Floor Systems GmbH collects a number of items of general data and information each time it is visited by a data subject or an automated system. These items of general data and information are stored in the server's log files. The collected details can include (1) employed browser types and versions, (2) the operating system used by the accessing system, (3) the website from which an accessing system reaches our website (known as referrer), (4) the sub-websites triggered by a system accessing our website, (5) the date and time of access to the website, (6) an Internet protocol address (IP address), (7) the Internet service provider of the accessing system, and (8) any other similar data and information which may be used in the event of attacks on our information technology systems.

When using these items of general data and information, EBALAN Floor Systems GmbH does not draw any conclusions about the data subject. Rather, this information is needed to (1) deliver the content of our website correctly, (2) optimize the content and advertisements of our website, (3) ensure the long-term functionality of our information technology systems and website technology, and (4) provide law enforcement authorities with the information necessary for criminal prosecution in case of a cyber-attack. These anonymously collected items of data and information are therefore analyzed statistically by EBALAN Floor Systems GmbH with the aim of increasing our enterprise's data protection and data security, to ultimately ensure an optimal level of protection for the personal data we process. The anonymous data of the server log files are stored separately from all personal data provided by a data subject.

5. Possibility of contact via the website

Because of legal regulations, the website of EBALAN Floor Systems GmbH contains information which enables quick electronic contact to our enterprise, as well as direct communication with us, which also entails a general address for electronic mail (e-mail address). If a data subject contacts the data controller by e-mail or via a contact form, the personal data transmitted by the data subject are automatically stored. Such personal data transmitted on a voluntary basis by a data subject to the data controller are stored for the purpose of processing, or for contacting the data subject. These personal data are not relayed to third parties.

6. Routine erasure and blocking of personal data

The data controller processes and stores the data subject's personal data only for the period necessary to achieve the purpose of storage, or intended by European legislative and regulatory bodies or other legislators in laws or regulations to which the controller is subject.

If no storage purpose applies, or if a storage period prescribed by the European legislative and regulatory bodies or other responsible legislators expires, the personal data are routinely blocked or erased in accordance with legal requirements.

7. Rights of the data subject

  • a) Right of confirmation

    European legislative and regulatory bodies grant every data subject the right to call on the data controller to confirm whether or not they process the related personal data. If a data subject wishes to avail themselves of this right of confirmation, they can at any time contact an employee of the data controller.

  • b)    Right to information

    European legislative and regulatory bodies grant each data subject the right at any time to obtain free-of-charge information about their stored personal data and a copy of this information from the data controller. In addition, the European legislative and regulatory bodies grant the data subject access to the following information:

    • The purposes of processing
    • The categories of personal data which are processed
    • The recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular, recipients in third countries or international organizations
    • If possible, the envisaged period for which the personal data will be stored, or if not possible, the criteria used to determine this period
    • The existence of a right to rectification or deletion of data concerning their person, right to restriction of processing by the responsible party, or right of objection to such processing
    • The existence of a right of complaint to a supervisory authority
    • If personal data are not collected from the data subject: All available information on the origin of the data
    • The existence of automated decision-making mechanisms, including profiling, in accordance with Article 22, Paragraphs 1 and 4 of the GDPR and - at least in these cases - meaningful information about the involved logic as well as the scope and intended effects of such processing for the person concerned.

    Furthermore, the data subject has a right to be informed whether personal data are transferred to a third country or an international organization. If this is the case, the data subject also has the right to be informed about the appropriate safeguards relating to the transfer.

    If a data subject wishes to avail themselves of this right to information, they can at any time contact an employee of the data controller.

  • c) Right to rectification

    European legislative and regulatory bodies grant each data subject the right to demand immediate rectification of inaccurate personal data concerning them. Taking into account the purposes of processing, the data subject furthermore has the right to demand completion of incomplete personal data, also by means of a supplementary statement.

    If a data subject wishes to avail themselves of this right to rectification, they can at any time contact an employee of the data controller.

  • d) Right to erasure (right to be forgotten)

    European legislative and regulatory bodies grant each data subject the right to call on the data controller to immediately erase the data subject's personal data, if one of the following reasons applies and insofar as processing is not necessary:

    • The personal data are no longer necessary with regard to the purposes for which they were collected or otherwise processed.
    • The data subject withdraws their consent on which processing is based according to Article 6 Paragraph 1 Item (a) of the GDPR, or Article 9 Paragraph 2 Item (a) of the GDPR, and there are no other legal grounds for processing.
    • The data subject objects to processing as per Article 21, Paragraph 1 of the GDPR, and there are no overriding, legitimate grounds for processing, or the data subject objects to processing as per Article 21, Paragraph 2 of the GDPR.
    • The personal data have been unlawfully processed.
    • Deletion of personal data is required to fulfil a legal obligation according to the laws of the EU or a member state to which the data controller is subject.
    • The personal data were collected with regard to offers of information society services as per Article 8, Paragraph 1 of the GDPR.

    If one of the afore-mentioned reasons applies, and a data subject wishes to initiate erasure of personal data stored by EBALAN Floor Systems GmbH, they may at any time contact an employee of the data controller. The employee at EBALAN Floor Systems GmbH will arrange for the erasure request to be fulfilled immediately.

    If the personal data were made public by EBALAN Floor Systems GmbH, and our company is responsible for erasure of the personal data pursuant to Article 17 Paragraph 1 of the GDPR, then BecoBöden GmbH, taking into account the available technology and implementation costs, will take appropriate measures, also of a technical nature, to inform other parties responsible for processing the publicized personal data, that the data subject has called on these other parties responsible for data processing to erase all links to these personal data, or copies or replications of such personal data, insofar as processing is not necessary. An employee of EBALAN Floor Systems GmbH will arrange the necessary measures in individual cases.

  • e) Right to restriction of processing

    European legislative and regulatory bodies grant each data subject the right to call on the data controller to restrict processing if one of the following conditions are fulfilled:

    • The correctness of the personal data is contested by the data subject for a period enabling the data controller to review the correctness of the personal data.
    • The processing is unlawful and the data subject opposes erasure of the personal data, instead requesting a restriction of its use.
    • The data controller no longer needs the personal data for the purposes of processing, although the data subject needs the data to assert, exercise or defend legal claims.
    • The data subject has objected to processing pursuant to Article 21 Paragraph 1 of the GDPR, pending verification whether the data controller's legitimate grounds override those of the data subject.

    If one of the afore-mentioned conditions is fulfilled, and a data subject wishes to initiate restriction of personal data stored by EBALAN Floor Systems GmbH, they may at any time contact an employee of the data controller. The employee at EBALAN Floor Systems GmbH will arrange for restriction of processing.

  • f) Right to data portability

    European legislative and regulatory bodies grant each data subject the right to receive, in a structured, commonly used and machine-readable format, their personal data submitted by them to a controller. They furthermore have the right to convey these data to another controller without hindrance from the controller to which the personal data were submitted, as long as processing is based on consent pursuant to Article 6 Paragraph 1 Item (a) of the GDPR, or Article 9 Paragraph 2 Item (a) of the GDPR, or on a contract pursuant to Article 6 Paragraph 1 Item (b) of the GDPR, and processing is carried out by automated means, insofar as processing is not necessary for duties performed in the public interest or in exercise of official authority vested in the controller.

    Furthermore, in exercising their right to data portability pursuant to Article 20 Paragraph 1 of the GDPR, the data subject is entitled to have personal data conveyed directly from one controller to another, insofar as this is technically feasible and does not adversely affect the rights and freedoms of others.

    To assert their right to data portability, the data subject may at any time contact an employee of EBALAN Floor Systems GmbH.

  • g) Right to object

    European legislative and regulatory bodies grant each data subject the right to object at any time, on grounds relating to their particular situation, to processing of their personal data, performed pursuant to Article 6 Paragraph 1 Item (e) or (f) of the GDPR. This also applies to profiling based on these provisions.

    If an objection is raised, EBALAN Floor Systems GmbH ceases processing the personal data, unless it can demonstrate compelling, defensible reasons for processing which outweigh the data subject's interests, rights and freedoms, or unless processing serves to assert, exercise or defend legal claims.

    If EBALAN Floor Systems GmbH processes personal data for direct advertising purposes, the data subject has the right to object at any time to processing of their personal data for such advertising. This also applies to any profiling related to such direct advertising. If the data subject objects to EBALAN Floor Systems GmbH about processing for direct advertising purposes, EBALAN Floor Systems GmbH will no longer process the personal data for these purposes.

    The data subject also has the right, on grounds relating to their particular situation, to object to processing of their personal data by EBALAN Floor Systems GmbH for scientific or historical research purposes, or for statistical purposes pursuant to Article 89 Paragraph 1 of the GDPR, unless such processing is necessary to perform duties in the public interest.

    To exercise their right to object, the data subject may directly contact any employee of EBALAN Floor Systems GmbH or another relevant employee. In conjunction with the use of information society services, the data subject is furthermore able to exercise their right of objection by means of automated procedures which make use of technical specifications - regardless of directive 2002/58/EC.

  • h) Automated decision-making in individual cases, including profiling

    European legislative and regulatory bodies grant each data subject the right not to be subject to a decision based solely on automated processing, including profiling, which has a legal effect on the person, or which similarly and significantly affects the person, insofar as the decision (1) is not necessary for concluding or fulfilling a contract between the data subject and the data controller, or (2) authorized by the EU's or member states' laws to which the controller is subject, and which lay down suitable measures to safeguard the data subject’s rights and freedoms and legitimate interests, or (3) based on the data subject’s explicit consent.

    If the decision (1) is necessary for concluding or fulfilling a contract between the data subject and the data controller, or (2) based on the data subject’s explicit consent, EBALAN Floor Systems GmbH will take suitable measures to safeguard the data subject’s rights and freedoms and legitimate interests, this including at least the right to effect human intervention on the part of the controller, to express one's own point of view and contest the decision.

    If the data subject wishes to exercise their rights concerning automated decision-making, they may at any time contact an employee of the data controller.

  • i) Right to revoke data privacy consent

    European legislative and regulatory bodies grant each data subject the right to revoke their consent to processing of their personal data at any time.

    If the data subject wishes to exercise their right to revoke consent, they may at any time contact an employee of the data controller.

8. Data privacy provisions concerning use of Google Remarketing

The data controller has integrated Google Remarketing services into this website. Google remarketing is a feature of Google AdWords which allows a company to display advertising to Internet users who have previously visited the company's website. Integration of Google Remarketing accordingly allows a company to create and show user-oriented advertisements of relevance to the users' interests.

The operating company of Google Remarketing services is Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.

The purpose of Google Remarketing is to display advertisements of relevance to interests. Google Remarketing allows us to display ads via Google's advertising network or on other websites, in a manner matched to the individual needs and interests of Internet users.

Google Remarketing sets a cookie on the data subject's information technology system. Cookies have already been explained above. By setting a cookie, Google enables recognition of our website's visitors if they subsequently invoke websites which are also members of the Google advertising network. On each invocation of a website where the Google Remarketing service has been integrated, the data subject's web browser is automatically identified by Google. In this technical process, Google receives personal data such as the user's IP address or surfing behaviour, and uses these data, for example, to display advertisements of relevance to interests.

Person-specific information such as the websites visited by the data subject is saved via these cookies. Accordingly, each time our website is visited, personal details, including the IP address of the Internet connection used by the data subject, are conveyed to Google in the United States of America. These personal details are stored by Google in the United States of America. Google may disclose these personal data collected via the technical procedure to third parties.

The data subject can permanently prevent setting of cookies by our website at any time, as already described above, by selecting a corresponding option in the employed Internet browser. Configuring the employed Internet browser like this also prevents Google from setting a cookie on the data subject's information technology system. Furthermore, a cookie already set by Google Analytics can be deleted at any time via the Internet browser or other software programs.

In addition, the data subject is able to object to interest-based advertising by Google. For this purpose, the data subject must invoke the link www.google.de/settings/ads from each of their employed browsers, and perform the desired settings there.

Further information and the current data privacy policy of Google can be found at https://policies.google.com/privacy

9. Legal basis for processing

Article 6 (1) Item (a) of the GDPR serves for our company as the legal basis for operations for which we obtain consent for a specific processing purpose. If processing of personal data is necessary to fulfil a contract in whose case the data subject is a contractual partner, for example, as in the case of processing operations necessary for delivery of goods or provision of services, including those in return, then processing is based on Article 6 (1) Item (b) of the GDPR. The same applies to processing operations necessary for carrying out pre-contractual measures, for example, in the case of inquiries concerning our products or services. If our company is subject to a legal obligation necessitating a processing of personal data, for example, to fulfil tax obligations, then processing is based on Article 6 (1) Item (c) of the GDPR. In rare cases, processing of personal data may be necessary to protect the vital interests of the data subject or another natural person. This would be the case, for example, if a visitor were injured at our company and their name, age, health insurance data or other vital information would need to be passed on to a doctor, hospital or other third party. Processing would then be based on Article 6 (1) Item (d) of the GDPR. Finally, processing operations can be based on Article 6 (1) Item (f) of the GDPR. This legal basis is used for processing operations not covered by any of the above-mentioned legal bases, if processing is necessary to safeguard legitimate interests of our company or a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject. We are entitled to such processing operations, in particular, because they are specifically mentioned in European legislation. According to this legislation, a legitimate interest can be assumed if the data subject is a client of the data controller (Recital 47 Clause 2 of the GDPR).

10. Legitimate interests of the controller or a third party in processing

If processing of personal data is based on Article 6 (1) Item (f) of the GDPR, then our legitimate interest is to carry out our business for the benefit of all our employees and shareholders.

11. Period for which personal data are stored

The criterion used to determine the period for storage of personal data is the respective statutory retention period. After expiry of this period, the corresponding data are routinely deleted, if no longer needed for contract fulfilment or initiation.

12. Statutory or contractual requirements concerning provision of personal data; necessity for contract conclusion; data subject's obligation to provide personal data; possible consequences of failure to provide

You are hereby notified that provision of personal data is partly required by law (e.g. tax regulations) or can also be contractually specified (e.g. with regard to details of contractual partners). To conclude a contract, it is sometimes necessary for a data subject to provide us with personal data which must subsequently be processed by us. For example, the data subject is obliged to provide us with personal data when our company signs a contract with them. Non-provision of these personal data would prevent conclusion of the contract with the data subject. Before personal data is provided by the data subject, they must contact one of our employees. This employee informs the data subject as to whether provision of the personal data is legally or contractually stipulated, or necessary for contract conclusion, whether there is an obligation to provide the personal data, and which consequences non-provision of the personal data would have.

13. Existence of automated decision-making

As a responsible company, we do not use automated decision-making or profiling.

This data privacy statement has been created by the data privacy statement generator of the DGD (German Association for Data Protection), acting via external data protection representative Hof, in cooperation attorney for data protection law Christian Solmecke.

DO YOU HAVE ANY QUESTIONS?
Call us!

02236 326 898

Representation Switzerland
+41 (0) 79 536 95 19