Data protection policy
Josef Schnell group
We attach great importance to data protection.
The collection and processing of your personal data is performed in compliance with the applicable data protection regulations, including the General Data Protection Regulation (GDPR).
1. Name and contact details of the controller
This data protection policy gives information about the processing of personal data on the website of:
Josef Schnell Register court: VAT id. no.: DE246517455 |
Josef Schnell GmbH Register court: VAT id. no.: DE214121377
|
Josef Schnell GmbH Register court: VAT id. no.: DE214121408
|
Josef Schnell GmbH Register court: VAT id. no.: DE214121385 |
Josef Schnell GmbH Register court: VAT id. no.: DE214121393 |
2. Scope and purpose of processing of personal data
In general, our website may be used without providing personal data.
Any collection of personal data (e.g. name, address, email address) on our web pages unfolds on a voluntary basis to the extent that this is possible.
These data will not be disclosed to third parties without your express consent.
We would like to remind you that data transmission over the internet (e.g. email communications) may not be secure. In this sense, it is not possible to completely protect your data from access by third parties.
2.1 Data processing on the website
When accessing the website www.josefschnell.de, the user’s web browser automatically sends data to the website servers, which temporarily stores these data in a log file. Until automatically deleted, the following data are stored without any further action by the user:
* IP address of the user’s device,
* date and time of access by the user,
* name and URL of the page accessed by the user,
* website from which the user accessed the website (so-called referrer URL),
* browser and operating system of the user’s device and name of the user’s access provider.
The processing of this personal data unfolds on the basis of Art. 6(1)(1)(f) GDPR. Josef Schnell companies have a legitimate interest in data processing for the purpose of
* promptly establishing the connection to the website www.josefschnell.de,
* supporting user-friendly usage of the website,
* monitoring and protecting system safety and security, and
* facilitating and improving the administration of the website.
Processing is expressly not performed for the purpose of obtaining knowledge about the personal identity of visitors to the website.
2.2 Data processing for the performance of contracts and provision of services
For the execution of precontractual measures, the performance of contracts, and the provision of services by our company, we may store personal data (Art. 6(1)(b)) such as your name and business contact details.
These data may also be stored for the purposes of consulting, the provision of services, and the communication of product campaigns, training, and company information (Art. 6(1)(f)).
Similarly, we may store your date of birth non-systematically on a voluntary basis to maintain business relations.
In accordance with Art. 6(1)(f), we have a legitimate interest in processing your data to maintain business relations. The processing of these data does not endanger the protection and freedom of your personal identity.
We do not collect data from other sources, and we do not purchase data.
Subject to and in accordance with statutory and taxation retention obligations, these data are automatically deleted, and personal data are pseudonymized.
We take protecting your data very seriously and have done since before the GDPR was introduced.
We strive to do business and maintain relations with minimum data usage.
We follow a data protection-friendly business model that implements the principle of “privacy by design”.
3. Disclosure of data
Personal data may be transmitted to third parties if
* in accordance with Art. 6(1)(1)(a) GDPR, the consent of the data subject has been expressly given,
* in accordance with Art. 6(1)(1)(f) GDPR, disclosure is necessary to assert, exercise, or defend a legal claim and there is no reason to believe that the data subject has an overriding legitimate interest in the non-disclosure of their data,
* in accordance with Art. 6(1)(1)(c) GDPR, there is a legal obligation for data transmission, and/or
* in accordance with Art. 6(1)(1)(b) GDPR, the disclosure is required for the performance of a contractual relationship with the data subject.
In any other cases, personal data will not be disclosed to third parties.
4. Data collection during the website visit
4.1 Use of cookies
Cookies are data records sent by the web server to the user’s web browser and stored there to be retrieved later. You can specify yourself whether cookies may be collected by configuring your browser to notify you before saving a cookie and only save cookies with your express consent.
Any saved cookies can be deleted at any time. This can also be done automatically. If cookies are disabled for our website, it may not be possible to fully take advantage of the website’s functionality.
No cookies are currently used on our website. Should this change in the future, you will be informed by a notice on our home page.
The data records do not contain any personal information. We do not associate these data with any personal data that you provide to us.
4.2 Collection and processing of http logging data
When visiting our website and whenever a file is retrieved, our web server collections logging information (e.g. browser type, data and time of retrieval). This does not involve any personal data. We cannot associate the collected data with any specific natural person.
We evaluate this information for statistical purposes only. It is not disclosed to third parties. We do not associate these data with any other data. The data are also regularly deleted after statistical evaluation.
5. Duration of storage
Data are deleted as soon as they are no longer required as a record. If necessary, you can request more information about storage periods directly from us.
6. Legal basis of data processing
The legal basis for our processing of the personal data of users is Art. 6(1)(f) GDPR.
7. Your rights as the data subject
We only collect personal data if and to the extent that you knowingly provide them to us.
In particular, these personal data are only used for purposes of advertising/market research or to shape our services if you have expressly given us your consent for this. You have the right to revoke your consent at any time.
The purposes of processing are declared at the relevant places on our websites and will not be subsequently changed.
Data are not disclosed to third parties without your consent unless we are legally obliged to do so.
Whenever your personal data are processed as a result of your visit to our website, you have the following rights as the “data subject” in the sense of the GDPR:
7.1 Access
You can request information from us about whether we are processing your personal data. Your right of access does not apply to data that are only stored because they cannot be deleted due to legal or statutory retention periods or data that exclusively serve the purpose of data security or data protection monitoring if the provision of access would require disproportionate effort and processing for other purposes by appropriate technical and organizational measures is not possible.
If your right of access is not overridden and your personal data are being processed by us, you may request the following information:
* purposes of processing,
* categories of your personal data being processed,
* recipients or categories of recipients to whom your personal data were disclosed, including any recipients in third countries,
* if possible, the planned duration of storage of your personal data; if not possible, the criteria for determining the duration of storage,
* the existence of any rights to rectification, erasure, or restriction of processing of your personal data, as well as the right to object against this processing,
* the existence of a right to submit a complaint to a data protection supervisory authority, and if the personal data were not collected from you the data subject, any available information about the origin of the data,
* where applicable, the existence of any automated decision-making processes, including profiling, and meaningful information about the logic involved, as well as the scope and intended effects of automated decision-making processes,
* where applicable, for recipients in third countries, wherever a decision of the EU commission regarding the suitability of the level of protection in accordance with Art. 45(3) GDPR is not available, information about any guarantees in accordance with Art. 46(2) GDPR that have been established for the protection of personal data.
7.2 Rectification and completion
If you discover that we have inaccurate personal information, you have the right to request immediate rectification of the incorrect data. If your personal data is incomplete, you have the right to request completion.
7.3 Erasure
You have the right to erasure (“right to be forgotten”), unless the processing is necessary to exercise the right of freedom of expression, the right to information, to fulfil a legal obligation, or to carry out a task in the public interest, provided that one of the following applies:
* The personal data are no longer required for the purpose for which they were processed.
* The sole justification of processing was your consent, which you have revoked.
* You have submitted an objection to the processing of personal data of yours that we have made public.
* You have submitted an objection to the processing of personal data of yours that we have not made public and no overriding legitimate interest for the processing has been established.
* Your personal data were processed unlawfully.
* The erasure of your personal data is necessary to fulfil a legal obligation that applies to us.
You do not have a claim to erasure for legitimate non-automated data processing if the erasure is not possible or would require disproportionate effort due to the special nature of the storage medium and your interest in the erasure is low. In this case, erasure may be replaced by restriction of processing.
7.4 Restriction of processing
You can request us to restrict processing if any of the following apply:
* You dispute the accuracy of your personal data. In this case, the restriction may be requested for a period that gives us time to verify the accuracy of the data and correct them if necessary.
* The processing is unlawful, but you choose to request restriction of the use of your personal data instead of deletion.
* We no longer need your personal data for the purposes of processing, but you still require them in order to assert, exercise, or defend a legal claim.
* You have submitted an objection under Art. 21(1) GDPR. The restriction of processing may be requested until it is established that our legitimate interests outweigh your grounds for restriction.
Restriction of processing means that your personal data will only be processed with your consent, to assert, exercise, or defend a legal claim, to protect the rights of another natural or legal person, or for reasons of important public interest. We have an obligation to notify you before lifting any restriction of processing.
7.5 Objection
If processing is based on Art. 6(1)(1)(e) GDPR (exercise of tasks in the public interest or official authority) or Art. 6(1)(1)(f) GDPR (legitimate interest of the controller or a third party), you have the right to submit an objection to the processing of your personal data at any time for reasons arising from your specific situation.
This also applies to any profiling based on Art. 6(1)(1)(e) or (f) GDPR.
Once you exercise your right to submit an objection, we will no longer process your personal data unless we can establish compelling legitimate grounds for the processing that outweigh your interests, rights, and freedoms, or if the processing is to assert, exercise, or defend a legal claim.
You may object to the processing of your personal data for purposes of direct marketing at any time. This also applies to any profiling associated with such direct advertising. After exercising your right to object, we will no longer use your personal data for purposes of direct marketing.
You can submit your objection by phone, email, or if necessary informally by fax or to the postal address of NaSch-TEC GmbH listed at the beginning of this data protection policy
7.6 Revocation of consent
You have the right to revoke your consent at any time with effect for the future.
You can revoke your consent by phone, email, or if necessary informally by fax or post. Revoking your consent does not affect the lawfulness of any data processing performed on the basis of this consent before the receipt of the revocation. When the revocation is received, any data processing that is based solely on your consent will be discontinued.
7.7 Complaints
If you believe that the processing of your personal data is unlawful, you may submit a complaint to the data protection supervisory authorities with jurisdiction at your place of residence or employment or the location of the suspected infringement.