Data privacy statement
1. Data privacy at a glance
General notes
The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data with which you can be personally identified. Detailed information on the subject of data privacy can be found in our data privacy statement which follows later in this document.
Data collection at this website
Who is responsible for data collection at this website?
Data processing at this website is performed by the website’s operator. Their contact details are provided in the section titled “Note on the responsible entity” in this data privacy statement.
How do we collect your data?
Firstly, your data are collected as you provide them to us. These include, for example, details which you enter in a contact form.
Other data are collected by our IT systems automatically or after your consent when you visit the website. These are mainly technical details (e.g. Internet browser, operating system, time of page view etc.). These data are collected automatically as soon as you enter this website.
What do we use your data for?
Some of the data are collected to ensure trouble-free access to the website. Other data may be used to analyse your user behaviour.
What rights do you have regarding your data?
You have the right to receive information on the origin, recipients and purposes of your stored personal data at any time free of charge. You also have the right to request correction or deletion of these data. If you have given your consent to data processing, you can revoke this consent at any time for the future. You also have the right to request restriction of processing of your personal data under certain circumstances. You are furthermore entitled to a right of complaint to the responsible supervisory authority.
You can contact us at any time if you have any further questions on the subject of data protection.
2. Hosting
We host the contents of our website with the following provider:
Strato
The provider is Strato AG, Otto-Ostrowski-Straße 7, DE 10249 Berlin (hereinafter referred to as “Strato”). When you visit our website, Strato collects various log files, including your IP addresses.
Further information can be found in Strato’s privacy policy: https://www.strato.de/datenschutz/
The use of Strato is based on Article 6 Paragraph 1 Item (f) GDPR (general data protection regulation). We have a legitimate interest in presenting our website as reliably as possible. If corresponding consent has been requested, processing takes place exclusively on the basis of Article 6 Paragraph 1 Item (a) GDPR and § 25 Paragraph 1 TTDSG (telecommunications-telemedia data protection act), insofar as consent applies to storage of cookies or access to information in the user’s terminal device (e.g. device fingerprinting) within the meaning of the TTDSG. Such consent can be revoked at any time.
Order processing
We have concluded an order-processing contract for use of the above-mentioned service. Prescribed by data protection law, this contract ensures that the personal data of our website’s visitors are processed only in accordance with our instructions and in compliance with the GDPR.
3. General notes and mandatory information
Data privacy
This website’s operator takes the privacy of your personal data very seriously. We handle your personal data confidentially in compliance with data protection legislation and this data privacy statement.
When you use this website, various personal data are collected.
Personal data are any details with which you can be personally identified. This data privacy statement describes the information we collect and the purposes we use it for. It also explains how this is done.
Please note that data transmission in the Internet (e.g. during communication via e-mail) can have security pitfalls. Complete protection of data against access by third parties is impossible.
Note on the responsible entity
The entity responsible for processing data at this website is:
CPM Hubert Hell GmbH
Theodor-Storm-Str. 44a
D-22926 Ahrensburg
Germany
Phone: +49 4102 891 4969
E-mail: info(at)cpmhh.com
The responsible entity is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data (names, e-mail addresses, etc.).
Storage duration
Unless a specific storage period has been defined in this data privacy statement, your personal data will remain with us until the purpose of data processing has expired. If you make a legitimate request for deletion or revoke consent to data processing, your data will be deleted unless we have other legally permissible grounds for storing your personal data (e.g. tax or commercial retention periods); in the latter case, deletion takes place after these grounds have expired.
General notes on the legal bases of data processing at this website
If you have consented to data processing, we process your personal data on the basis of Article 6 Paragraph 1 Item (a) GDPR and Article 9 Paragraph 2 Item (a) GDPR, insofar as special data categories pursuant to Article 9 Paragraph 1 GDPR are involved. In the case of express consent to transfer of personal data to third countries, data processing is also carried out on the basis of Article 49 Paragraph 1 Item (a) GDPR. If you have consented to storage of cookies or access to information in your terminal device (e.g. via device fingerprinting), data processing is also carried out on the basis of § 25 Paragraph 1 TTDSG. This consent can be revoked at any time. If your data are required for contract fulfilment or pre-contractual measures, we process your data on the basis of Article 6 Paragraph 1 Item (b) GDPR. Furthermore, we process your data insofar as this is necessary to fulfil legal obligations on the basis of Article 6 Paragraph 1 Item (c) GDPR.
Data may also be processed on the basis of our legitimate interest pursuant to Article 6 Paragraph 1 Item (f) GDPR. Information about the relevant legal bases in each individual case is provided in the following paragraphs of this data privacy statement.
Revocation of your consent to data processing
Many data processing operations are only possible with your express consent. You can revoke your consent at any time. The legality of data processing operations until the actual time of consent withdrawal will remain unaffected.
Right to object to data collection in special cases and to direct marketing (Article 21 GDPR)
IF DATA PROCESSING IS BASED ON ARTICLE 6 PARAGRAPH 1 ITEM (E) OR (F) GDPR, YOU HAVE THE RIGHT TO OBJECT TO PROCESSING OF YOUR PERSONAL DATA AT ANY TIME FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. THE RESPECTIVE LEGAL BASES OF PROCESSING ARE DESCRIBED IN THIS DATA PRIVACY STATEMENT. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR PROCESSING WHICH OUTWEIGH YOUR INTERESTS, RIGHTS AND FREEDOMS, OR PROCESSING SERVES TO ASSERT, EXERCISE OR DEFEND LEGAL CLAIMS (OBJECTION PURSUANT TO ARTICLE 21 PARAGRAPH 1 GDPR).
IF YOUR PERSONAL DATA ARE PROCESSED FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO PROCESSING OF THESE DATA FOR THE PURPOSE OF SUCH ADVERTISING; THIS ALSO APPLIES TO PROFILING INSOFAR AS IT IS ASSOCIATED WITH SUCH DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA WILL SUBSEQUENTLY NO LONGER BE USED FOR DIRECT MARKETING PURPOSES (OBJECTION PURSUANT TO ARTICLE 21 PARAGRAPH 2 GDPR).
Right of complaint to the responsible supervisory authority
In the event of infringements of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the member state of their regular residence, or at their place of work or the location of the supposed infringement. The right to lodge a complaint is without prejudice to any other administrative or judicial remedy.
Right to data portability
You are entitled to have data which we process automatically on the basis of your consent or as part of contract fulfilment submitted to you or to a third party in a common, machine-readable format. If you request direct transfer of such data to another responsible entity, this will be done only to the extent technically feasible.
Information, correction and deletion
Within the framework of applicable legal provisions, you have the right at any time to free information about your stored personal data, their origin and recipients, the purpose of data processing and, if necessary, a right to correction or deletion of these data. You can contact us at any time if you have any further questions on the subject of personal data.
Right to restriction of processing
You have the right to request restriction of processing of your personal data. You can contact us at any time for this purpose. The right to restriction of processing exists in the following cases:
If you dispute the accuracy of your personal data stored by us, we usually need time to examine this. For the duration of the examination, you have the right to request restriction of processing of your personal data.
If processing of your personal data was/is unlawful, you can request restriction of such processing instead of deletion of the data.
If we no longer need your personal data, but you need them to exercise, defend or assert legal claims, you have the right to request restriction of processing of your personal data instead of deletion.
If you object pursuant to Article 21 Paragraph 1 GDPR, a balance must be struck between your interests and ours. As long as it is not yet clear whose interests prevail, you have the right to demand restriction of processing of your personal data.
Once you have initiated restriction of processing of your personal data, these data – irrespective of their storage – may only be processed with your consent, or in order to assert, exercise or defend legal claims, or protect the rights of another natural or legal person, or for reasons of important public interest in the EU or a member state.
SSL and TLS encryption
This website uses SSL / TLS encryption for security reasons and to protect transmission of confidential content such as orders or enquiries which you send to us as the website’s operator. An encrypted connection is indicated by a switchover from “http://” to “https://” in your browser’s address bar, and by a lock icon next to the address bar.
If SSL or TLS encryption is enabled, third parties cannot eavesdrop on any data which you submit to us.
4. Data collection at this website
Contact form
When you send us enquiries via the contact form, the details you provide on this form, including contact details, are stored by us for the purpose of processing your enquiry and responding to any follow-up questions. We do not share these data without your consent.
Processing of these data is based on Article 6 Paragraph 1 Item (b) GDPR, if your request is associated with contract fulfilment or the data are needed to implement pre-contractual measures. In all other cases, processing is based on our legitimate interest in effectively handling enquiries sent to us (Article 6 Paragraph 1 Item (f) GDPR) or on your consent (Article 6 Paragraph 1 Item (a) GDPR) if it has been submitted; this consent can be revoked at any time.
Details you enter on the contact form remain with us until you request us to delete them, revoke your consent to storage, or the purpose of data storage has expired (e.g. after your enquiries have been fully processed). Mandatory legal provisions – in particular, retention periods – remain unaffected.
Enquiry via e-mail, telephone or fax
If you contact us via e-mail, telephone or fax, then your enquiry, including all personal data indicated therein (name, message), will be stored and processed by us for the purpose of handling the enquiry. We do not share these data without your consent. Processing of these data is based on Article 6 Paragraph 1 Item (b) GDPR, if your request is associated with contract fulfilment or the data are needed to implement pre-contractual measures. In all other cases, processing is based on our legitimate interest in effectively handling enquiries sent to us (Article 6 Paragraph 1 Item (f) GDPR) or on your consent (Article 6 Paragraph 1 Item (a) GDPR) if it has been submitted; this consent can be revoked at any time.
Details you send us in enquiries via these contact channels remain with us until you request us to delete them, revoke your consent to storage, or the purpose of data storage has expired (e.g. after your enquiries have been fully processed). Mandatory legal provisions – in particular, retention periods – remain unaffected.
Source of the initial German version: https://www.e-recht24.de