PRIVACY POLICY OF SILAG HANDEL AG
PREAMBLE
We are delighted to welcome you to our website. SILAG Handel AG considers the protection and security of your personal data very important. The SILAG Handel AG website can be used without the need to provide any personal data. However, if the person in question wishes to make use of particular services of our company via our website, it may become necessary to process personal data. If the processing of personal data is necessary, and there is no statutory basis for such processing, we generally obtain the consent of the affected person.
The processing of personal data such as the name, address, email address or telephone number of an affected person is always carried out in conformity with the General Data Protection Regulation and in accordance with the country-specific data protection regulations applicable to SILAG Handel AG. By means of this data protection declaration our company would like to inform the public about the type, scope and purpose of the personal data collected, used and processed by us. Furthermore, those persons affected will be informed of their rights by means of this Data Protection Declaration.
SILAG Handel AG, as data controller, has implemented numerous technical and organisational measures to ensure the most complete protection of personal data processed via this website.
- Name and address of the data controller
The data controller for the purposes of the General Data Protection Regulation (GDPR), and other data protection laws applicable in Member states of the European Union, and other regulations related to data protection is:
SILAG Handel AG.
Liebigstrasse 1–9
40764 Langenfeld, Germany
www.silag.de
Email:
Phone: 02173 3999–100
Fax: 02173 3999–399
Board of Directors:
Siegfried Lapawa (Chairman)
Hans-Hermann Lapawa
Thomas Becker
- Name and address of the Data Protection Officer
sicdata
Heiligenstock 34c
42697 Solingen
phone.: 0212 – 73 87 24 – 0
Any person concerned can contact our Data Protection Officer directly at any time with any questions or suggestions regarding data protection.
- Collection of general data and information
The SILAG Handel AG website collects a series of general data and information each time a person or an automated system accesses the website.
- Information regarding the type and version of browser used
- The user’s operating system
- The user’s Internet service provider
- The user’s IP address
- Date and time of access
- Websites from which the user’s system accesses our website
- Websites accessed by the user’s system via our website
SILAG Handel AG does not draw any conclusions about the person concerned when using this general data and information. Rather, this information is required to (a) correctly deliver the contents of our website, (b) optimise the contents of our website, © ensure the permanent functionality of our information technology systems and the technology of our website and (d) provide law enforcement authorities with the information necessary for criminal prosecution in the event of a cyber attack. These anonymously collected data and information are therefore evaluated statistically by SILAG Handel AG on the one hand and also with the aim of increasing data protection and data security in our company in order ultimately to ensure an optimal level of protection for the personal data processed by us. We store the anonymous data of the server log files separately from all personal data provided by the person concerned.
- Contact options via the website
Due to legal regulations, the SILAG Handel AG website contains information that enables prompt electronic contact and direct communication with our company, which also includes an address for electronic mail (email address). If a person concerned contacts us by email, the personal data transmitted by the person concerned will be automatically stored. Such personal data transmitted on a voluntary basis by a person concerned are stored for the purpose of processing, or for contacting the the person concerned. There is no transfer of this personal data to third parties.
- Cookies
Our website uses cookies. Cookies are text files that are stored in the Internet browser or by the internet browser on the user’s computer system. If a user visits a website, a cookie may be stored on the user’s operating system. This cookie contains a distinctive character string that enables unique identification of the browser when the website is accessed again.
We use cookies to make our website more user-friendly. Some elements of our website require that the calling browser can be identified even after changing pages. The language settings you have made are stored in the cookies. We also use cookies on our website which enable analysis of the user’s surfing behaviour.
In this way, the frequency of page views can be determined. The user data collected in this way ispseudonymised by technical means. It is therefore no longer possible to assign the data to the accessing user. The data is not stored together with users’ other personal data. When accessing our website, users are informed by an information banner on the use of cookies for analytical purposes and referred to this data protection declaration. A note is also included in this context as to how the user can disable the storage of cookies in the browser settings. When accessing our website, the user is informed regarding the use of cookies for analytical purposes and his or her consent to the processing of personal data used in this context is obtained. In this context reference is also made to this data protection declaration.
ol start=„6”>
- Routine erasure and blocking of personal data
Personal data of the person concerned will be processed and kept only for the period necessary to achieve its purpose, unless this is required by the European Directive and Regulations, or another legislator in laws or regulations under which the data controller processes and stores the data.
- Rights of the person concerned
If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights with respect to the responsible party:
- Right to information
You can request the data controller to confirm whether we will process personal data that concerns you.
If such processing is to take place, you can request to be informed by the data controller regarding the following:
(1) the purposes for which the personal data are processed;
(2) the categories of personal data being processed;
(3) the recipients, or categories of recipients, to whom the personal data concerning you have been or will be disclosed;
(4) the planned duration of the storage of the personal data concerning you or, if specific information on this is not possible, criteria for determining that storage period;
(5) the existence of a right to rectification or deletion of personal data concerning you, a right to limitation of processing by the controller or a right to object to such processing;
(6) the existence of a right of appeal to a supervisory authority;
(7) any available information on the origin of the data if the personal data are not collected from the data subject;
(8) the existence of automated decision making including profiling pursuant to Art. 22 para. 1 and 4 GDPR and – at least in these cases – meaningful information on the logic involved and the scope and intended effects of such processing for the person concerned.
You have the right to request information regarding whether your personal information will be transmitted to a third-party country or an international organisation. In this respect, you can request the appropriate guarantees in accordance with Art. 46 GDPR in connection with the transmission.
- The right of rectification
You have a right of rectification and/or completion with respect to the responsible party if the personal data processed concerning you is incorrect or incomplete. The controller shall make the correction immediately.
- The right to limitation of processing
Under the following conditions, you may request that the processing of personal data concerning you be restricted:
(1) if you dispute the accuracy of the personal data concerning you, for a period that enables the data controller to verify the accuracy of the personal data;
(2) the processing is unlawful and you refuse to delete the personal data and instead request that the use of the personal data be restricted;
(3) the data controller no longer needs the personal data for the purposes of the processing, but you do need them to assert, exercise or defend legal claims, or
(4) if you object to the processing pursuant to Art. 21 para. 1 GDPR pending verification as to whether the data controller’s legitimate grounds override your reasons for the objection.
Where processing of the personal data that concerns you has been restricted, such data – apart from being stored – may be processed only with your consent or for the purpose of asserting, exercising or defending rights or protecting the rights of another natural or legal person or on the grounds of an important public interest of the Union or of a Member State.
If the processing restriction has been done in accordance with the above conditions, you will be informed by the person responsible before the restriction is lifted.
- Right to deletion
- a) Duty to delete
You may request the data controller to delete the personal data relating to you without delay, and the controller is obliged to delete this data without delay if one of the following reasons applies:
(1) The personal data concerning you are no longer necessary for the purposes for which they were collected or otherwise processed.
(2) You revoke your consent to the processing pursuant to Art. 6 para. 1 lit. a or Art. 9 para. 2 lit. a GDPR , and where there is no other legal ground for the processing.
(3) You object pursuant to Art. 21 para. 1 GDPR, you object to the processing and there are no overriding justifiable reasons for the processing, to the processing pursuant to Art. 21 para. 2 GDPR.
(4) The personal data have been unlawfully processed.
(5) The deletion of personal data is required to comply with legal obligations according to Union law or the laws of the Member States to which the data controller is subject;
(6) The personal data that concerns you has been collected in connection with services offered by the information company, pursuant to Art. 8 para. 1 GDPR.
b) Information to third parties
If the data controller has made public the personal data relating to you public, and if he is obliged under Art. 17, para. 1 GDPR to delete it, he shall take appropriate measures, including technical measures, taking into account available technology and implementation costs, to inform those data processors who process the personal data relating to you that you as the person concerned have requested deletion of all links to this personal data including copies or replications of this personal data.
c) Exceptions
The right to cancellation does not exist to the extent that the processing is necessary
(1) to exercise freedom of expression and information;
(2) for the performance of a legal obligation required for processing under the law of the Union or of the Member States to which the controller is subject or for the performance of a task in the public interest or in the exercise of official authority conferred on the controller;
(3) for reasons of public interest in the field of public health in accordance with Art. 9 para. 2 lit. h and i, as well as Art. 9 para. 3 GDPR;
(4) for archiving purposes in the interest of public, scientific or historical research purposes or for statistical purposes in accordance with Art. 89 para. 1 GDPR, to the extent that the law referred to in a) is likely to render impossible or seriously prejudicial the attainment of the objectives of such processing; or
(5) to assert, exercise or defend legal claims.
- Right to information
If you have exercised your right to have the data controller correct, delete or limit the processing, he is also obliged to inform all recipients of the personal data that concerns you of this correction or deletion of the data, or restriction on processing, unless this proves impossible or involves a disproportionate expense.
You have the right to be informed by the controller of such recipients.
- Right to data portability
You have the right to obtain your personal data, which you have provided to the controller, in a structured, commonly used and machine-readable format. In addition, you have the right to transmit this data to another controller without hindrance from the controller to which the personal data has been provided, as long as
(1) the processing is based on consent pursuant to to Art. 6 para. 1 lit. a, GDPR or Art. 9 Para. 2 lit. a GDPR or on a contract pursuant to Art. 6 para. 1 lit. b GDPR and
(2) processing is carried out by means of automated methods.
In exercising this right, you shall have the right to have the personal data transmitted directly from one controller to another, where technically feasible. The freedoms and rights of other persons must not be affected by this.
The right to data portability shall not apply to the processing of personal data necessary for the performance of a task in the public interest or in the exercise of official authority conferred on the responsible party.
- Right to object
You have the right, for reasons arising from your specific situation, to object to the processing of personal data concerning you at any time, carried out in accordance with Art. 6 para. 1 lit. e or lit. f, GDPR; the same applies to profiling based on these provisions.
The responsible party will no longer process the personal data that concerns you, unless the party can prove compelling legitimate reasons for the processing, which outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
If the personal data that concerns you is being processed for direct marketing purposes, you have the right to object at any time to the processing of the personal data that concerns you for the purpose of such marketing; this also applies to profiling, insofar as it is associated with such direct marketing.
If you object to processing that is for direct marketing purposes, the personal data that concerns you will no longer be processed for these purposes.
In the context of the use of the services of the information company, and notwithstanding Directive 2002/58/EC, you may exercise your right to object by automated means using technical specifications.
- The right to revoke the data protection declaration of consent
You have the right at any time to revoke your data protection declaration of consent. The withdrawal of consent shall not affect the lawfulness of processing taking place on the basis of this consent before its revocation.
- Automated decision in individual cases, including profiling
You have the right not to be subject to a decision based exclusively on automated processing – including profiling – that has legal effect against you or significantly impairs you in a similar manner. This does not apply if the decision
(1) is necessary for the conclusion or fulfilment of a contract between you and the person responsible,
(2) the legislation of the Union or of the Member States to which the person responsible is subject is admissible and that legislation contains appropriate measures to safeguard your rights, freedoms and legitimate interests; or
(3) with your express consent.
However, these decisions may not be based on special categories of personal data pursuant to Art. 9, para. 1 GDPR, unless Art. 9 Para. 2 lit. a or g applies and appropriate measures have been taken to protect your rights and freedoms as well as your legitimate interests.
In the cases referred to in (1) and (3), the responsible party shall take reasonable measures to safeguard your rights, freedoms and legitimate interests, including at least the right to obtain the intervention of a person on the part of the responsible party, to state his or her own position and to challenge the decision.
- The right of appeal to a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right of appeal to a supervisory authority, in particular in the Member State where you reside, where you work or where the infringement is suspected, if you believe that the processing of personal data that concerns you is in contravention of GDPR.
The supervisory authority with which the appeal has been lodged shall inform the appellant of the status and results of the appeal, including the possibility of a judicial remedy under Art. 78 GDPR.
- Legal basis of the processing
Art 6 I lit. a GDPR serves our company as a legal basis for processing operations through which we obtain consent for a specific processing purpose. If the processing of personal data is necessary for the performance of a contract to which the person concerned is a party, as is the case for example with processing operations necessary for the delivery of goods or the provision of other services or returns, the processing is based on Art. 6 I lit. b GDPR. The same applies to such processing procedures that are necessary to carry out pre-contractual measures, for example in cases of enquiries about our products or services. If our company is subject to a legal obligation which requires the processing of personal data, for example to fulfil tax obligations, the processing is based on Art. 6 I lit. c GDPR. In rare cases, the processing of personal data may become necessary to protect the vital interests of the person concerned, or another natural person. This would be the case, for example, if a visitor were injured in our company and his name, age, health insurance data or other vital information had to be passed on to a doctor, a hospital or other third parties. The processing would then be based on Art. 6 I lit. d GDPR. Ultimately, processing operations could be based on Art. 6 I lit. f GDPR. Processing operations which are not covered by any of the aforementioned legal clauses are based on this legal clause if processing is necessary to safeguard a legitimate interest of our company or a third party, provided that the interests, fundamental rights and freedoms of the data subject do not outweigh them. We are permitted to carry out such processing procedures, in particular because they have been specifically mentioned by the European legislator. In this respect, it took the view that a legitimate interest could be assumed if the person concerned is a customer of the responsible data controller (recital 47, second sentence, GDPR).
- Legitimate interests in the processing carried out by the controller or by a third party
Where the processing of personal data is based on Art. 6 I lit. f GDPR our legitimate interest is to carry out our business to the benefit of the welfare of all our employees.
- Period for which the personal data will be stored
The criterion for the duration of the storage of personal data is the relevant statutory retention period. After the expiry of the time period, the corresponding data will be routinely deleted provided it is no longer required for the fulfilment of the contract or for initiating a contract.
- Statutory or contractual requirements for the provision of personal data; Requirement for concluding a contract; obligation of the person concerned to provide the personal data; possible consequences of failure to provide the data
We inform you that the provision of personal data is in part prescribed by law (e.g. tax regulations) or may also result from contractual regulations (e.g. information regarding the contractual partner). In some cases, it may be necessary for a contract to be concluded that a person concerned should provide us with personal data which must subsequently be processed by us. For example, the person concerned is obliged to provide us with personal data if our company enters into a contract with him/her. Failure to provide personal data would mean that the contract with that person could not be concluded. Before providing personal data, the person concerned must contact one of our employees. Our employee will inform the data subject on a case-by-case basis whether the provision of personal data is required by law or contract, or required for the conclusion of the contract, and whether there is an obligation to provide the personal data and what consequences the failure to provide the personal data would have.
- Use of Google Analytics
This website uses Google Analytics, a web analytics service provided by Google Inc. (hereinafter referred to as Google). Google Analytics uses „cookies”, text files stored on your computer that enable your website use to be analysed. Cookie-generated information about your use of this website is usually transmitted to and stored on a Google server in the USA. However, because IP anonymization is activated on this website, Google will store your IP address in shortened form if you are accessing this site from within the European Union or the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and truncated there. Google will use this information on behalf of the operator of this website to evaluate your use of the website, to compile reports on website activity, and to provide other services regarding website activity and internet usage for the website operator. The IP address transmitted by your browser as part of Google Analytics is not conflated with other Google data.
You may refuse the use of cookies by selecting the appropriate settings on your browser. However, please be advised that if you opt out of using cookies, you may not be able to use all the features of this website. You can also prevent the collection of data produced by cookies and associated with your use of the website (including your IP address), its transmission to, and its processing by Google, by downloading and installing the browser plugin available at the following link Browser Add On to deactivate Google Analytics.
In addition or as an alternative to the browser add-on, you can prevent Google Analytics tracking on our pages by clicking this link. This will install an opt-out cookie onto your device. This will prevent the collection of data by Google Analytics for this website and for this browser, for as long as the cookie remains installed in your browser.
- Use of script libraries (Google Webfonts)
In order to present our contents correctly and in a graphically appealing way across all browsers, we use script libraries and font libraries such as Google Web Fonts (https://www.google.com/webfonts/) on this website. Google Web Fonts are loaded into your browser’s cache to avoid multiple loading. If your browser does not support Google Web Fonts or does not allow access, content will be displayed in a default font.
Calling script libraries or font libraries automatically triggers a connection to the library operator. In theory, it is possible – but currently also unclear whether and, if so, for what purposes – that operators of corresponding libraries collect data.
The privacy policy of the library operator Google can be found here: https://www.google.com/policies/privacy/
- Use of Google Maps
This website uses Google Maps API for the display of geographical information. When using Google Maps, Google also collects, processes and uses data about the use of map functions by visitors. For more information about how Google processes your information, please see Google Privacy Notices . There you can also change your personal data protection settings in the Data Protection Centre.
Detailed instructions for managing your own data in connection with Google products can be found here.
- Embedded YouTube videos
On some of our websites we embed YouTube videos. The operator of the respective plugins is YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. As soon as you visit a page with a YouTube plugin, a connection to YouTube servers will be established. This will inform YouTube which pages you are visiting. When you are logged in to your YouTube account, YouTube can recognise your surfing habits. You can prevent this by logging out of your YouTube account beforehand.
As soon as a YouTube video starts, the provider uses cookies that collect information about user behaviour.
If you have deactivated the storage of cookies for the Google Ad program, you do not have to reckon with such cookies when viewing YouTube videos. YouTube also stores information on usage that is not related to individuals in other cookies. If you wish to prevent this, you must block the saving of cookies in your browser.
Further information on data protection at „Youtube” can be found in the provider’s privacy policy via https://policies.google.com/privacy/