Privacy Policy

1. Data protection at a glance

General notes

The following notes provide a simple overview of what happens to your personal data when you visit this website. Personal data is all data with which you can be personally identified. Detailed information on the subject of data protection can be found in our data protection declaration listed under this text.

Data collection on this website

Who is responsible for data collection on this website?

The data processing on this website is carried out by the website operator. You can find their contact details in the section "Notice on the responsible body" in this data protection declaration.

How do we collect your data?

On the one hand, your data is collected when you communicate it to us. This can be z. B. be data that you enter in a contact form.

Other data is collected automatically or with your consent by our IT systems when you visit the website. This is primarily technical data (e.g. internet browser, operating system or time of the page view). This data is collected automatically as soon as you enter this website.

What do we use your data for?

Part of the data is collected to ensure that the website is provided without errors. Other data can be used to analyze your user behavior.

What are your rights regarding your data?

You have the right to receive information about the origin, recipient and purpose of your stored personal data free of charge at any time. You also have the right to request the correction or deletion of this data. If you have given your consent to data processing, you can revoke this consent at any time for the future. You also have the right, under certain circumstances, to request that the processing of your personal data be restricted. You also have the right to lodge a complaint with the competent supervisory authority.

You can contact us at any time if you have any further questions on the subject of data protection.

Analytics tools and third-party tools

When you visit this website, your surfing behavior can be statistically evaluated. This is mainly done with so-called analysis programs.

Detailed information on these analysis programs can be found in the following data protection declaration.

2. hosting

External hosting

This website is hosted by an external service provider (hoster). The personal data collected on this website is stored on the host's servers. This can be v. a. IP addresses, contact requests, meta and communication data, contract data, contact details, names, website access and other data generated via a website.

The hoster is used for the purpose of fulfilling the contract with our potential and existing customers (Art. 6 Para. 1 lit. b DSGVO) and in the interest of a secure, fast and efficient provision of our online offer by a professional provider (Art. 6 Para 1 lit. f GDPR). If a corresponding consent was requested, the processing takes place exclusively on the basis of Art. 6 Para. 1 lit. a DSGVO and § 25 Para . B. device fingerprinting) within the meaning of the TTDSG. The consent can be revoked at any time.

Our hoster will only process your data to the extent that this is necessary to fulfill its performance obligations and will follow our instructions in relation to this data.

We use the following hoster:

OMCnet Internet Service GmbH

Ernst-Abbe-Strasse 10

25451 Quickborn

3. General information and mandatory information

Privacy Policy

The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this data protection declaration.

If you use this website, various personal data will be collected. Personal data is data with which you can be personally identified. This data protection declaration explains what data we collect and what we use it for. It also explains how and for what purpose this happens.

We would like to point out that data transmission on the Internet (e.g. when communicating by e-mail) can have security gaps. A complete protection of the data against access by third parties is not possible.

Note on the responsible body

The responsible body for data processing on this website is:

AluTec GmbH

Boxdorfer Strasse 27

90765 Fürth

Phone: +49 (0) 911 93 69 80

Email: info@alutec-guss.com

The responsible body is the natural or legal person who, alone or jointly with others, decides on the purposes and means of processing personal data (e.g. names, e-mail addresses, etc.).

Data protection officer

Marion Schiftner (in the building)

Boxdorfer Straße 27

90765 Fürth

Phone: +49 (0) 911 93 69 810

Email: ms@alutec-guss.com

Storage time

Unless a specific storage period has been specified in this data protection declaration, your personal data will remain with us until the purpose for data processing no longer applies. If you submit a legitimate request for deletion or revoke consent to data processing, your data will be deleted unless we have other legally permissible reasons for storing your personal data (e.g. tax or commercial law retention periods); in the latter case, the data will be deleted once these reasons have ceased to exist.

General information on the legal basis for data processing on this website

If you have consented to the data processing, we process your personal data on the basis of Article 6 Paragraph 1 Letter a GDPR or Article 9 Paragraph 2 Letter a GDPR, if special data categories according to Article 9 Paragraph 1 GDPR are processed. In the event of express consent to the transfer of personal data to third countries, data processing is also based on Article 49 (1) (a) GDPR. If you have consented to the storage of cookies or to access information on your end device (e.g. via device fingerprinting), data processing is also based on Section 25 (1) TTDSG. The consent can be revoked at any time. If your data is required to fulfill the contract or to carry out pre-contractual measures, we process your data on the basis of Article 6 (1) (b) GDPR. Furthermore, we process your data if they are required to fulfill a legal obligation on the basis of Article 6 (1) (c) GDPR. Data processing can also take place on the basis of our legitimate interest in accordance with Art. 6 Para. 1 lit. f GDPR. The following paragraphs of this data protection declaration provide information on the relevant legal bases in each individual case.

Note on data transfer to the USA and other third countries

Among other things, we use tools from companies based in the USA or other third countries that are not secure under data protection law. If these tools are active, your personal data can be transferred to these third countries and processed there. We would like to point out that in these countries no level of data protection comparable to that of the EU can be guaranteed. For example, US companies are obliged to release personal data to security authorities without you as the person concerned being able to take legal action against this. It cannot therefore be ruled out that US authorities (e.g. secret services) will process, evaluate and permanently store your data on US servers for monitoring purposes. We have no influence on these processing activities.

Revocation of your consent to data processing

Many data processing operations are only possible with your express consent. You can revoke consent that you have already given at any time. The legality of the data processing that took place up until the revocation remains unaffected by the revocation.

Right to object to data collection in special cases and to direct advertising (Art. 21 GDPR)

IF THE DATA PROCESSING IS BASED ON ART. 6 ABS. 1 LIT. E OR F GDPR, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA AT ANY TIME FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. THE RESPECTIVE LEGAL BASIS ON WHICH A PROCESSING IS BASED CAN BE FOUND IN THIS DATA PRIVACY POLICY. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR CONCERNED PERSONAL DATA UNLESS WE CAN PROVE COMPREHENSIVE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOM OBJECTION ACCORDING TO ARTICLE 21 (1) GDPR).

IF YOUR PERSONAL DATA IS PROCESSED FOR DIRECT ADVERTISING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR THE PURPOSES OF SUCH ADVERTISING; THIS ALSO APPLIES TO PROFILING TO THE EXTENT RELATED TO SUCH DIRECT ADVERTISING. IF YOU OBJECT, YOUR PERSONAL DATA WILL NO LONGER BE USED FOR DIRECT ADVERTISING PURPOSES (OBJECTION ACCORDING TO ART. 21 (2) GDPR).

Right of appeal to the competent supervisory authority

In the event of violations of the GDPR, those affected have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, their place of work or the place of the alleged violation. The right to lodge a complaint is without prejudice to any other administrative or judicial remedy.

Right to data portability

You have the right to have data that we process automatically on the basis of your consent or in fulfillment of a contract handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another person responsible, this will only be done to the extent that it is technically feasible.

Information, deletion and correction

Within the framework of the applicable legal provisions, you have the right to free information about your stored personal data, its origin and recipient and the purpose of the data processing and, if necessary, a right to correction or deletion of this data at any time. You can contact us at any time if you have any further questions on the subject of personal data.

Right to restriction of processing

You have the right to request the restriction of the processing of your personal data. You can contact us at any time for this. The right to restriction of processing exists in the following cases:

  • If you contest the accuracy of your personal data stored by us, we usually need time to verify this. For the duration of the examination, you have the right to request that the processing of your personal data be restricted.
  • If the processing of your personal data happened/is happening unlawfully, you can request the restriction of data processing instead of deletion.
  • If we no longer need your personal data, but you need them to exercise, defend or assert legal claims, you have the right to demand that the processing of your personal data be restricted instead of being deleted.
  • If you have lodged an objection in accordance with Art. 21 (1) GDPR, your interests and ours must be weighed up. As long as it is not clear whose interests prevail, you have the right to demand that the processing of your personal data be restricted.

If you have restricted the processing of your personal data, this data - apart from its storage - may only be used with your consent or to assert, exercise or defend legal claims or to protect the rights of another natural or legal person or for reasons of important public interest of the European Union or a Member State are processed.

SSL or TLS encryption

For security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as the site operator, this site uses SSL or TLS encryption. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line.

If SSL or TLS encryption is activated, the data that you transmit to us cannot be read by third parties.

4. Data collection on this website

Cookies

Our website uses so-called "cookies". Cookies are small text files and do not cause any damage to your end device. They are stored on your end device either temporarily for the duration of a session (session cookies) or permanently (permanent cookies). Session cookies are automatically deleted after your visit. Permanent cookies remain stored on your end device until you delete them yourself or until your web browser automatically deletes them.

In some cases, cookies from third-party companies can also be stored on your end device when you enter our site (third-party cookies). These enable us or you to use certain services of the third-party company (e.g. cookies for processing payment services).

Cookies have different functions. Numerous cookies are technically necessary because certain website functions would not work without them (e.g. the shopping cart function or the display of videos). Other cookies are used to evaluate user behavior or display advertising.

Cookies that are required to carry out the electronic communication process, to provide certain functions you want (e.g. for the shopping cart function) or to optimize the website (e.g. cookies for measuring web audience) (necessary cookies). stored on the basis of Article 6 (1) (f) GDPR, unless another legal basis is specified. The website operator has a legitimate interest in the storage of necessary cookies for the technically error-free and optimized provision of its services. If consent to the storage of cookies and comparable recognition technologies was requested, processing takes place exclusively on the basis of this consent (Art. 6 Para. 1 lit. a DSGVO and § 25 Para. 1 TTDSG); the consent can be revoked at any time.

You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when the browser is closed. If cookies are deactivated, the functionality of this website may be restricted.

If cookies are used by third-party companies or for analysis purposes, we will inform you of this separately in this data protection declaration and, if necessary, ask for your consent.

Server log files

The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:

  • Browser type and browser version
  • Operating system used
  • Referrer URL
  • Hostname of the accessing computer
  • Time of server request
  • IP address

This data is not merged with other data sources.

This data is collected on the basis of Article 6 (1) (f) GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimization of his website - the server log files must be recorded for this purpose.

Contact form

If you send us inquiries via the contact form, your details from the inquiry form, including the contact details you provided there, will be stored by us for the purpose of processing the inquiry and in the event of follow-up questions. We do not pass on this data without your consent.

This data is processed on the basis of Article 6 (1) (b) GDPR if your request is related to the fulfillment of a contract or is necessary to carry out pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of inquiries addressed to us (Art. 6 Para. 1 lit. f GDPR) or on your consent (Art. 6 Para. 1 lit. a GDPR) if this was queried; the consent can be revoked at any time.

The data you enter in the contact form will remain with us until you ask us to delete it, revoke your consent to storage or the purpose for data storage no longer applies (e.g. after your request has been processed). Mandatory legal provisions - in particular retention periods - remain unaffected.

Inquiry by e-mail, telephone or fax

If you contact us by e-mail, telephone or fax, your inquiry including all resulting personal data (name, enquiry) will be stored and processed by us for the purpose of processing your request. We do not pass on this data without your consent.

This data is processed on the basis of Article 6 (1) (b) GDPR if your request is related to the fulfillment of a contract or is necessary to carry out pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of inquiries addressed to us (Art. 6 Para. 1 lit. f GDPR) or on your consent (Art. 6 Para. 1 lit. a GDPR) if this was queried; the consent can be revoked at any time.

The data you sent to us via contact requests will remain with us until you ask us to delete it, revoke your consent to storage or the purpose for data storage no longer applies (e.g. after your request has been processed). Mandatory legal provisions - in particular statutory retention periods - remain unaffected.

5. Plugins and Tools

YouTube with enhanced data protection

This website includes videos from YouTube. The website operator is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

We use YouTube in the extended data protection mode. According to YouTube, this mode means that YouTube does not store any information about visitors to this website before they watch the video. However, the extended data protection mode does not necessarily exclude the transfer of data to YouTube partners. This is how YouTube establishes a connection to the Google DoubleClick network, regardless of whether you are watching a video.

As soon as you start a YouTube video on this website, a connection to the YouTube servers is established. The YouTube server is informed which of our pages you have visited. If you are logged into your YouTube account, you enable YouTube to assign your surfing behavior directly to your personal profile. You can prevent this by logging out of your YouTube account.

Furthermore, YouTube can store various cookies on your end device after starting a video or use comparable recognition technologies (e.g. device fingerprinting). In this way, YouTube can receive information about visitors to this website. This information is used i.a. used to collect video statistics, improve usability and prevent fraud attempts.

If necessary, after the start of a YouTube video, further data processing operations can be triggered over which we have no influence.

YouTube is used in the interest of an attractive presentation of our online offers. This represents a legitimate interest within the meaning of Article 6 Paragraph 1 Letter f GDPR. If a corresponding consent has been requested, the processing takes place exclusively on the basis of Article 6 Paragraph 1 Letter a GDPR and Article 25 Paragraph 1 TTDSG, insofar as the consent includes the storage of cookies or access to information in the user's end device (e.g. device fingerprinting) within the meaning of the TTDSG. The consent can be revoked at any time.

You can find more information about data protection on YouTube in their data protection declaration at: https:// policies.google.com/privacy?hl=de.

Google Maps

Diese Seite nutzt den Kartendienst Google Maps. Anbieter ist die Google Ireland Limited („Google“), Gordon House, Barrow Street, Dublin 4, Irland.

Zur Nutzung der Funktionen von Google Maps ist es notwendig, Ihre IP-Adresse zu speichern. Diese Informationen werden in der Regel an einen Server von Google in den USA übertragen und dort gespeichert. Der Anbieter dieser Seite hat keinen Einfluss auf diese Datenübertragung. Wenn Google Maps aktiviert ist, kann Google zum Zwecke der einheitlichen Darstellung der Schriftarten Google Web Fonts verwenden. Beim Aufruf von Google Maps lädt Ihr Browser die benötigten Web Fonts in ihren Browsercache, um Texte und Schriftarten korrekt anzuzeigen.

Die Nutzung von Google Maps erfolgt im Interesse einer ansprechenden Darstellung unserer Online-Angebote und an einer leichten Auffindbarkeit der von uns auf der Website angegebenen Orte. Dies stellt ein berechtigtes Interesse im Sinne von Art. 6 Abs. 1 lit. f DSGVO dar. Sofern eine entsprechende Einwilligung abgefragt wurde, erfolgt die Verarbeitung ausschließlich auf Grundlage von Art. 6 Abs. 1 lit. a DSGVO und § 25 Abs. 1 TTDSG, soweit die Einwilligung die Speicherung von Cookies oder den Zugriff auf Informationen im Endgerät des Nutzers (z. B. Device-Fingerprinting) im Sinne des TTDSG umfasst. Die Einwilligung ist jederzeit widerrufbar.

Die Datenübertragung in die USA wird auf die Standardvertragsklauseln der EU-Kommission gestützt. Details finden Sie hier: https://privacy.google.com/businesses/gdprcontrollerterms/ und https://privacy.google.com/businesses/gdprcontrollerterms/sccs/.

Mehr Informationen zum Umgang mit Nutzerdaten finden Sie in der Datenschutzerklärung von Google: https://policies.google.com/privacy?hl=de.

Quelle: https://www.e-recht24.de

Privacy Policy

Thank you very much for your interest in our website. The management of Alutec GmbH strongly values data protection. The use of the websites of Alutec GmbH is generally possible without the provision of personal data. If a data subject wishes to make use of the services provided by our company via the website, this may, however, require the processing of personal data. If the processing of personal data is necessary and no legal basis exists for processing, we generally obtain the consent of the data subject.

The processing of personal data, including for example, a data subject's name, address, email address, or phone number is always conducted in compliance with the General Data Protection Regulation and the national legal data protection guidelines to which Alutec GmbH is subject. Through this Privacy Policy, our company seeks to provide information about the type, scope and purpose of the personal data we collect and process. Furthermore, data subjects are informed about their rights with this Privacy Policy.

As the controller, Alutec GmbH has implemented numerous technical and organizational measures for this processing, to ensure the best possible protection of the personal data processed through our websites. Nevertheless, Internet-based data transmissions can always have security flaws, so that absolute protection cannot be ensured. For this reason, all data subjects are free to transmit personal data to us using alternative means, such as the telephone.

  1. Definitions

The privacy policy of Alutec AG is based on the terminology used by the European body issuing directives and regulations when adopting the General Data Protection Regulation (GDPR). Our privacy policy is intended to be easy to read and comprehend for both the public as well as our customers and business partners. To ensure this we would like to first explain the terminology used.

This privacy policy uses the following terms, among others:

  • a) personal data

Personal data refers to any information relating to an identified or identifiable natural person (‘data subject’). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

  • b) data subject

Data subject refers to an identified or identifiable natural person whose personal data are processed by the controller.

  • c) Processing

Processing refers to any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

  • d) Restriction of processing

Restriction of processing refers to the marking of stored personal data with the aim of limiting their processing in the future.

  • e) Profiling

Profiling refers to any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyze or predict aspects concerning that natural person's performance at work, economic situation, health, personal preferences, interests, reliability, behavior, location or movements.

  • d) Pseudonymization

Pseudonymization refers to the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures to ensure that the personal data are not attributed to an identified or identifiable natural person.

  • g) Data Controller or Controller

Controller refers to the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data. Where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law.

  • h) Processor

Processor refers to a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.

  • i) Recipient

Recipient refers to a natural or legal person, public authority, agency or another body to which the personal data are disclosed, whether a third party or not. However, public authorities, which may receive personal data in the framework of a particular inquiry in accordance with Union or Member State law, shall not be regarded as recipients.

  • j) Third party

Third party refers to a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorised to process personal data.

  • k) Consent

Consent refers to any freely given, specific, informed and unambiguous indication of the data subject's wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.

  1. Controller name and address

In accordance with the GDPR, as well as other directives applicable in the member state of the European Union and other guidelines pertaining to data protection, the data controller is:

Alutec GmbH
Boxdorfer Straße 27
90765 Fürth
Germany

Phone: +49 (0)911 9369 80
Email:info@alutec-guss.com
Website: www.alutec-guss.com

  1. Name and address of the data protection officer

The controller's data protection officer is:

Marion Schiftner
Alutec GmbH
Boxdorfer Straße 27
90765 Fürth
Germany

Phone: +49 (0)911 9369 810
Email: ms@alutec-guss.com
Website: www.alutec-guss.com

The data subject may direct any inquiries and suggestions regarding privacy to our data protection officer.

  1. Cookies

The websites of Alutec GmbH use cookies. Cookies are text files, which are placed and stored on a computer system through a browser.

Many websites and servers use cookies. Many cookies have a so-called cookie ID. A cookie ID is a unique identifier of the cookie. It consists of a string, through which web pages and servers can be allocated to the precise web browser, in which the cookie was stored. This makes it possible to distinguish the visited web pages and servers as well as the data subject’s individual browser from other web browsers, which contain other cookies. A specific web browser can be recognized and identified by means of the unique cookie ID.

By using cookies, Alutec GmbH can provide the users of this website with more user-friendly services, which would not be possible without using cookies.

Using cookies, the information and offers on our website can be optimized in the interest of the users. As already pointed out, cookies allow us to recognize the users of our website. The purpose of this recognition is to simplify the use of our website for the users. The user of a website that uses cookies, for example, does not have to re-enter his or her access data during each visit, because this is done by the website and the cookie placed on the user's computer.

The data subject can prevent the placement of cookies on his/her computer by our website at any time by means of the appropriate setting in the web browser being used and in doing so, permanently object to the placement of cookies. Furthermore, cookies, which were already placed, can be deleted at any time via a web browser or other software. This is possible with all standard web browsers. If the data subject deactivates the placement of cookies in the web browser being used, the full range of all functions on our website may not be available.

  1. Collection of general data and information

The website of Alutec GmbH collects a series of general data and information each time a data subject or automated system accesses the website. These general data and information are stored in the log files of the server. Storage may pertain to (1) browser types and version used, (2) the accessing operating system used, (3) the originating website from which a system accesses our website (so-called referrer), (4) the sub-pages, which direct the accessing system to our website, (5) the date and time of access to our website, (6) an Internet protocol address (IP address), (7) the Internet Service Provider of the accessing system and (8) other similar data and information that serve the aversion of threats in case of attacks on our information technology systems.

Alutec GmbH does not draw conclusions about the data subject when using the general data and information. Rather, this information is required (1) to properly deliver the contents of our website, (2) to optimize the contents of our website as well as the advertising for it, (3) to ensure the permanent functionality of our information technology systems and the technology of our website as well as to (4) provide law enforcement authorities with the necessary information in the event of a cyber attack. On the one hand, Alutec GmbH anonymously collects the data and information for the purpose of statistical analysis and with the objective of increasing data protection and data security in our company, in order to ultimately ensure an ideal level of protection for the personal data we process. The anonymous data from the server log files are stored separately from all personal data indicated by a data subject.

  1. Contact option via the website

Due to legal provisions, the website by Alutec GmbH contains information, which enables swift electronic contact as well as direct communication with our company, which also includes a general address and electronic mail (email) address. If a data subject contacts the data controller via email or the contact form, the personal data submitted by the data subject are automatically stored. Such personal data submitted by the data subject to the data processor on a voluntary basis are stored for the purpose of processing or contacting the data subject. These personal data are not transmitted to third parties.

  1. Routine erasure and blocking of personal data

The data processor processes and stores the data subject's personal data only for the time period needed to achieve the purpose of storage or if this is prescribed by the European legislative bodies, or any other legislator of laws or regulations to which the processor is subject.

In the event that the purpose of storage no longer applies, or a limitation period prescribed by the European legislative bodies or any other competent legislator, the personal data are routinely blocked or erased in accordance with the legal provisions.

  1. Rights of the data subject
  • a) Right to confirmation

Every data subject has the right granted by the European legislative bodies to obtain from the data processor confirmation whether the personal data relating to him or her were processed. If a data subject wishes to exercise the right to confirmation, he or she may contact our data protection officer or any other staff member employed by the processor at any time.

  • a) Right to information

The European legislative bodies grant every data subject the right to obtain from the data processor information regarding the data stored relating to him or her and to receive a copy of this information free of charge. Furthermore, the European legislative bodies grant the data subject the right to access the following information:

  • the purposes of processing
  • the categories of personal data being processed
  • the recipients or categories of recipients, to whom the personal data were disclosed, in particular in the case of recipients in third countries or in the case of international organisations,
  • if possible, the duration for which the personal data are intended to be stored; if this is not possible, the criteria for the determination of this duration,
  • the existence of a right to correction or deletion of the personal data pertaining to the data subject or to a restriction of processing by the controller or a right of objection to this processing,
  • the existence of the right to lodge a complaint with a supervisory authority;
  • if the personal data were not collected from the data subject: All available information on the origin of the data,
  • the existence of an automated decision making including profiling pursuant to Article 22 (1) and (4) of the GDPR and — at least in these cases — conclusive information on the logistics involved as well as the consequences and the pursued objectives of such a processing for the data subject

Furthermore, the data subject has a right to obtain information regarding the transmission of personal data to a third country or an international organization. If this is the case, the data subject also has the right to receive information on adequate guarantees in connection with the transmission.

If a data subject wishes to exercise the right to information, he or she may contact our data protection officer or any other staff member employed by the processor at any time.

  • b) Right to correction

The European legislative bodies grant every data subject the right to obtain from the controller without undue delay the rectification of inaccurate personal data concerning him or her. Taking into account the purposes of the processing, the data subject further has the right to have incomplete personal data completed, including by means of providing a supplementary statement.

If a data subject wishes to exercise the right to correction, he or she may contact our data protection officer or any other staff member employed by the processor at any time.

  • d) Right to erasure (‘right to be forgotten’)

The European legislative bodies grant every data subject the right to obtain from the controller the erasure of personal data concerning him or her without undue delay and the controller shall have the obligation to erase personal data without undue delay where one of the following grounds applies and if processing is not required:

  • The personal data were collected for purposes or otherwise processed, for which it is no longer required.
  • The data subject revokes his/her consent, on which the processing was based pursuant to Article 6 (1) (a) of the GDPR or Article 9 (2) (a) of the GDPR and there is no other legal basis for said processing.
  • The data subject files an objection to the processing pursuant to Article 21 (1) of the GDPR and there are no paramount legitimate reasons for said processing or the data subject files an objection to the processing pursuant to Article 21 (2) of the GDPR.
  • The personal data were processed illegally.
  • The deletion of personal data is required to meet a legal obligation according to EU law or the law of member states, which the responsible person is subject to.
  • The personal data was collected with regard to the offered services of the information society pursuant to Article 8 (1) of the GDPR.

If one of the above-mentioned grounds applies and a data subject wishes to exercise the right to erasing the data stored by Alutec GmbH, he or she may contact our data protection officer or any other staff member employed by the data controller at any time. The data protection officer of Alutec GmbH or another staff member will immediately respond to the erasure request.

If Alutec GmbH published the personal data and is obligated to erase the data in accordance with Article 17 (1) of the GDPR, then Alutec GmbH shall take reasonable steps under consideration of available technology and the cost of implementation, including technical measures, to inform controllers who are processing the personal data about the data subject's request to erase any links to, or copies or replications of those personal data by such processors, if processing is not necessary. The data protection officer of Alutec GmbH will immediately respond as appropriate on a case-by-case basis.

  • e) Right to restriction of processing

According to the European legislative bodies, every data subject has the right to request the restriction of processing from the controller if one of the following requirements is given:

  • The data subject disputes the accuracy of the personal data and does so for a period, which enables the controller to review the accuracy of the personal data.
  • The processing is illegal, the data subject objects to the erasure of the personal data and instead demands the restricted use of the personal data.
  • The controller no longer requires the personal data for the purpose of processing however, the data subject requires the data, to assert, exercise or defend legal claims.
  • The data subject has filed an objection to the processing pursuant to Article 21 (1) of the GDPR and it is yet to be determined if the controller’s legitimate reasons outweigh those of the data subject.

If one of the above-mentioned prerequisites applies and a data subject wishes to exercise the right to limiting the personal data by Alutec GmbH, he or she may contact any staff member employed by the controller at any time. The Alutec GmbH staff member will immediately initiate the limitation of processing.

  • f)    Right to data portability

According to the European legislative bodies, every data subject has the right to receive all personal data pertaining to the data subject, which was made available to a controller by the data subject, in a structured, conventional and machine-readable format. Furthermore, the data subject has the right to transmit this data to another controller without being hindered by the controller the personal data was made available to, provided that processing is based on consent pursuant to Article 6 (1) (a) of the GDPR or Article 9 (2) (a) of the GDPR or on a contract pursuant to Article 6 (1) (b) of the GDPR and processing is conducted with the help of automated processes, provided that processing is not required for the performance of a task, which is in the public interest or takes place in exercising public authority, which was transferred to the controller.

Further, pursuant to Article 20 (1) of the GDPR, the data subject, in exercising his or her right to data portability, also has the right to achieve that the personal data is directly transferred from one controller to another controller, insofar as this is technically feasible and provided that this does not affect the rights and freedoms of other persons.

To exercise the right to data portability, the data subject may contact any employee of Alutec GmbH.

  • f) Right to object

According to the European legislative bodies, every data subject has the right to object to the processing of personal data concerning the data subject at any time, on grounds relating to his or her particular situation based on Article 6 (1)(e) or (f) of the GDPR. This also applies to profiling based on these provisions.

In the event of an objection, Alutec GmbH shall no longer process the personal data unless we demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims.

If Alutec GmbH processes personal data for the purpose of direct advertising, the data subject has the right to file an objection to the processing of personal data for the purpose of such advertising. This also applies to profiling, provided that it is linked to such direct advertising. If the data subject objects to the processing to Alutec GmbH for purposes of direct advertising, Alutec GmbH will no longer process the personal data for these purposes.

Furthermore, the data subject has the right, for reasons resulting from his or her special situation, to object to the processing of personal data pertaining to the data subject, which takes place at Alutec GmbH for scientific or historical research purposes or for statistical purposes pursuant to Article 89 (1) of the GDPR, unless such a processing is required to fulfil a task, which is in the public interest.

To exercise the right to object, the data subject may directly contact any employee of Alutec GmbH. Irrespective of Directive 2002/58/EC, the data subject has the option, in connection with the use of information society services, of exercising his or her right to object via automated procedures that use technical specifications.

  • h) Automated individual decision-making, including profiling

According to the European legislative bodies, every data subject whose personal data are processed has the right not to be subject to a decision based solely on automated processing — including profiling —, which takes effect in view of the data subject or significantly comprises the data subject in a similar manner, provided that the decision (1) is not required for the conclusion or fulfillment of a contract between the data subject and the data controller, or is permissible (2) based on the legal guidelines of the European Union or member states, to whose laws the data controller is subject and these legal guidelines contain appropriate measures of maintaining the rights and freedom, as well as the legitimate interest of the data subject, or (3) with explicit consent of the data subject.

If the decision (1) is required for the conclusion or fulfillment of the contract between the data subject and the data controller, or (2) the data subject provides explicit consent, Alutec GmbH will take appropriate measures to protect the rights and freedoms as well as the legitimate interests of the data subject, which at least include the right of obtaining the intervention of a person on the part of the controller, explanation of one’s own point of view and contesting the decision.

If a data subject wishes to exercise his or her rights relating to automated decisions, he or she may contact any staff member employed by the processor at any time.

  • i) Right to revoke data privacy consent

The European legislative bodies grant every data subject whose personal data are being processed the right to revoke from the controller without undue delay his or her consent to the processing of his or her personal data.

If a data subject wishes to exercise his or her right relating to revoking consent, he or she may contact any staff member employed by the processor at any time.

  1. Data protection regulations for the use of Facebook

The data controller has installed Facebook components on this website. Facebook is a social networking site.

A social networking site is a social meeting place on the Internet, or online community, which typically enables users to communicate and interact with each other virtually. A social networking site can serve as a platform for the exchange of opinions or experiences or may allow an online community to provide personal or business-related information. Facebook enables the users of social networks to create private profiles, to upload pictures, and to network via friend requests.

Facebook is operated by Facebook, Inc., 1 Hacker Way, Menlo Park, CA 94025, USA. For data subjects who reside outside of the USA or Canada, the data processor is Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

When opening one of the individual pages of this website operated by the controller that contains a Facebook component (Facebook Plugin), the respective Facebook component automatically prompts the web browser on the data subject's IT system to download a playback of the respective Facebook component from Facebook. A full overview of all Facebook Plugins can be found at https://developers.facebook.com/docs/plugins/?locale=de_DE. During this technical process, Facebook obtains information about the specific subpage the data subject accessed on our website.

If the data subject is also logged into Facebook, Facebook recognizes each time a data subject accesses our website and for the entire duration of the visit to our website, which specific subpage of our website the data subject is visiting. This information is collected by the Facebook component and connected with the data subject’s respective Facebook account. If a data subject, for example, uses a Facebook button embedded in our website, such as the "Like" button, or if the data subject submits a comment, Facebook connects this information with the personal Facebook user account of the data subject and stores these personal data.

Via the Facebook component, Facebook is always notified when the data subject visited our website, if the data subject is also logged into Facebook when visiting our website; this occurs irrespective of whether the data subject clicks on a Facebook component or not. If the data subject does not wish these data to be transmitted to Facebook, transmission thereof can be prevented by logging out of the Facebook account before visiting our website.

The privacy policy published by Facebook at https://de-de.facebook.com/about/privacy/provides information about the collection, processing and use of personal data by Facebook. Further, the privacy policy explains which options Facebook offers for the purpose of data protection. Furthermore, a variety of applications is available, which make it possible to prevent the transmission of data to Facebook. These applications can be used by the data subject to prevent the transmission of data to Facebook.

  1. Data protection regulations for the use of Xing

The data controller has installed components of Xing on this website. Xing is a web-based social networking site, which enables the connection of users with existing professional contacts, as well as the development of new professional contacts. The individual users can create a personal profile on Xing. Companies are able to create corporate profiles, for example, and to post job vacancies on Xing.

XING AG is operated by, Dammtorstraße 29- 30, 20354 Hamburg, Germany.

When opening one of the individual pages of this website operated by the controller that contains a Xing component (Xing Plugin), the respective Xing component automatically prompts the web browser on the data subject's IT system to download a playback of the respective Xing component from Xing. For more information about the Xing Plugins, please visit https://dev.xing.com/plugins. During this technical process, Xing obtains information about the specific subpage on our website the data subject visited.

If the data subject is also logged into Xing, Xing recognizes each time a data subject accesses our website and for the entire duration of the visit to our website, which specific subpage of our website the data subject is visiting. This information is collected by the Xing component and connected with the data subject’s respective Xing account. If a data subject, for example, uses a Xing button embedded in our website, such as the "Share" button, Xing connects this information with the data subject's personal Xing user account and stores these personal data.

Via the Xing component, Xing always obtains the information that the data subject visited our website, if the data subject is also logged into Xing when visiting our website; this occurs irrespective of whether the data subject clicks on a Xing component or not. If the data subject does not wish these data to be transmitted to Xing, transmission thereof can be prevented by logging out of the Xing account before visiting our website.

The privacy policy published by Xing at https://www.xing.com/privacy provide information about the collection, processing and use of personal data by Xing. Furthermore, Xing has published privacy information regarding the XING-Share button at https://www.xing.com/app/share?op=data_protection.

  1. Data protection regulations for the use of YouTube

The data controller has installed components of Youtube on this website. YouTube is an internet video portal which allows video publishers to upload video clips free of charge and allows other uses to also view, rate and comment on these free of charge. YouTube allows any type of videos to be published, therefore entire film and television shows as well as music videos, trailers, or videos made by users are available on the internet portal.

YouTube is operated by YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. YouTube, LLC is a subsidiary of Google LLC, 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.

When opening one of the individual pages of this website operated by the controller with a YouTube component (YouTube video) embedded, the respective YouTube component automatically prompts the web browser on the data subject's IT system to download a playback of the respective YouTube component from YouTube. For more information about YouTube please visit https://www.youtube.com/yt/about/. During this technical process YouTube and Google receive information about the specific subpage on our website the data subject visited.

If the data subject is also logged into YouTube when opening a subpage with a YouTube video, YouTube receive information about which specific subpage on our website the data subject is visiting. This information is collected by YouTube and Google and assigned to the data subject’s respective YouTube account.

YouTube and Google Information always receive information from the YouTube component that the data subject visited our website if the data subject is also logged into YouTube when visiting our website; this occurs irrespective of whether the data subject clicks on a YouTube video. If the data subject does not wish these data to be transmitted to YouTube and Google, their transmission can be prevented by logging out of your YouTube account before visiting our website.

The privacy policy published by YouTube at https://policies.google.com/privacy?gl=uk provide information about the collection, processing and use of personal data by YouTube and Google.

  1. Legal basis for processing

Article 6 (I) (a) of the GDPR serves our company as a legal basis for processing operations, for which we obtain consent for a specific processing purpose. If the processing of personal data is required for the fulfilment of a contract, whose contracting party is the data subject, as is the case, for example, for processing operations required for the delivery of services or return services, Article 6 (I) (b) of the GDPR serves as the basis for processing. The same applies to processing operations required for the implementation of pre-contractual measures, for instance in cases of enquiries regarding our products or services. If our company is subject to a legal obligation requiring a processing of personal data, for instance for the fulfilment of fiscal obligations, said processing is based on Article 6 (I) (c) of the GDPR. In rare cases, the processing of personal data may become necessary to protect the vital interests of the data subject or another natural person. For example, this may be the case if a visitor is injured on our premises and his or her name, age, insurance information, or other vital information would need to be shared with a doctor, a hospital, or other third parties. Then, processing would be based on Article 6 (I) (d) of the GDPR. Finally, processing operations could be based on Article 6 (I) (f) of the GDPR. Processing operations, which are not covered by any of the aforementioned legal bases, are based on this legal basis if processing is required to protect a legitimate interest of our company or third party, provided that the interests, basic rights and fundamental freedom of the data subject are not predominant. We are entitled to these types of processing operations in particular because they are specifically mentioned by the European legislative bodies. The legislative bodies assume legitimate interest if the data subject is a customer of the data controller (Recital 47, Sentence 2 of the GDPR).

  1. Legitimate interest in the processing pursued by the controller or a third party

Based on the processing of personal data pursuant to Article 6 (I) (f) of the GDPR, our legitimate interest is the operation of our business to benefit all of our employees and shareholders.

  1. The duration for which the personal data are stored

The criterion for the storage period of personal data is the respective retention period stipulated by law. After the expiration of this retention period, the data are routinely erased if they are no longer needed for the fulfillment of the contract or contract conclusion.

  1. Legal or contractual provisions regarding the provision of personal data; necessity for the conclusion of a contract; obligation of the data subject to provide the personal data; possible consequences of failure to provide the data

We hereby point out that the provision of personal data is in part prescribed by law (e.g. tax law) or may emerge from contractual requirements (e.g. information about the contractual partner). In the context of concluding a contract, it may be necessary that a data subject provides us with personal data, which we are then required to process. For example, the data subject is required to provide us with personal data if our company enters a contract with him or her. Failure to provide the personal data may make it impossible to conclude the contract with the data subject. Before the data subject provides personal data, the data subject shall contact one of our staff members. Our staff member will inform the data subject on a case-by-case basis, whether the provision of the personal data is legally or contractually required and whether there exists a requirement to provide the personal data, as well as the consequences that result from the failure to provide the personal data.

  1. Existence of automatic decision-making

As a responsible company, we do not engage in automated decision-making or profiling.

This privacy policy was created using the privacy policy Generator of DGD, the German association for data protection, which is the Hanover-based external data protection officer, in cooperation with the Cologne-based IT and data protection attorney Christian Solmecke.