Data Protection
DATA PRIVACY STATEMENT
The responsible authority for data protection laws, in particular the EU General Data Protection Regulation (GDPR) is:
Wessel-PKF GmbH
Im Bruch 2
51580 Reichshof-Wildbergerhütte
Germany
Responsible data protection officer:
Hees Bürowelt GmbH
Friedrich-Wilhelm-Str. 148
57074 Siegen
Phone: +49-(0)271 31463
E-Mail: externer.datenschutz@hees.de
Your rights as a data subject
You can exercise the following rights at any time using the contact details provided by our data protection officer:
- Obtain information about the data we store and how this data is processed (Article 15 GDRP),
- Rectify inaccurate personal data (Article 16 GDPR),
- Delete your data which has been stored by us (Article 17 GDPR),
- Restrict data processing, if we are not allowed to delete your data due to legal obligations (Article 18 GDPR),
- Object to the processing of your data by us (Article 21 GDPR), and
- Receive your personal data, if you have consented to data processing or have concluded a contract with us (Article 20 GDPR).
If you have given us your consent, you can revoke it at any time with effect for the future.
You can file a complaint to a supervisory authority at any time, e.g. to the competent supervisory authority of the federal state in which you reside or to the authority with jurisdiction over us.
A list of the supervisory authorities (for the non-public sector) with their addresses can be found at: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.
General information for visitors of our website
What data do we process and for what purposes?
If you access our website, i.e. if you do not register or submit information in any other way, only general information is collected automatically. This information (server log files) includes, for example, the type of web browser, the operating system used, the domain name of your Internet service provider, your IP address and the like. Such information does not allow us to identify you as a person.
This information is processed for the following purposes:
- Ensuring a trouble-free connection to the website,
- Providing our users uninterrupted access to our website,
- Evaluating system safety and stability, as well as
- Further administrative purposes.
We do not use your data to identify you as a person. Information of this kind is evaluated statistically by us if necessary, in order to optimize our website and the settings behind it.
Legal basis:
Processing is carried out pursuant to Article 6(1)(f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website.
Who do we pass on your data to?
If necessary, we may pass on your data to technical service providers who act as contract processors for the operation and maintenance of our website.
How long is data stored?
Data is deleted as soon as it is no longer required for the purpose of its collection. This is generally the case for data used to upload the website when the respective session has ended.
Is providing data necessary or required by law?
The provision of the above-mentioned personal data is neither required by law, nor by contract. However, without the IP address, the service and functionality of our website cannot be guaranteed. In addition, individual services may be restricted or unavailable. For this reason an objection to provide such data cannot be made.
Registering at our website
What data do we process and for what purposes?
When registering for the use of our personalised services, some personal data is collected, such as your first and last name, address and contact data (e.g. telephone number and email address). Some of our contents and services are offered to registered users only. Registered users may also change or delete data provided by them during registration on demand at any time. Of course, we will also provide you with information about your personal data stored by us at any time.
Legal basis:
Processing of data provided during registration is carried out pursuant to Article 6(1)(a) GDPR on the basis of the user’s consent.
Who do we pass on your data to?
If necessary, we may pass on your data to technical service providers who act as contract processors for the operation and maintenance of our website.
How long is data stored?
Such data will only be processed as long as the relevant consent is available. Thereafter, they shall be deleted, unless there are legal obligations to retain them. To contact us in this matter, please use the contact details provided at the end of this privacy statement.
Is providing data necessary or required by law?
Personal data is provided voluntarily, solely on the basis of your consent. We cannot grant you access to our all the contents and services we offer, unless you provide us with your personal data.
Providing fee-based services
What data do we process and for what purposes?
When providing fee-based services, we will request additional data, such as payment details, in order to carry out your order.
Legal basis:
Processing of data necessary for concluding a contract is carried out pursuant to Article 6(1)(b) GDPR.
Who do we pass on your data to?
If necessary, we pass on your data to the processors of your order.
How long is data stored?
Such data is stored in our systems until the statutory retention periods have expired. Data is generally stored for 6 or 10 years due to proper accounting reasons and tax law requirements.
Is providing data necessary or required by law?
Personal data is provided voluntarily. We cannot grant you access to our all the contents and services we offer, unless you provide us with your personal data.
Comments section
What data do we process and for what purposes?
If users leave comments on our website, the comments, as well as the time they were posted and the user name chosen by the website visitor are stored. Such data is stored due to security reasons, as we may be held liable for illegal content on our website, even if it has been posted by the users.
Legal basis:
Processing of data posted in the form of comments is carried out pursuant to Article 6(1)(f) GDPR for the purposes of legitimate interests.
The comment function allows you to interact with us easily. The information provided by you will be stored for the purpose of processing your inquiry and any further follow-up questions.
Who do we pass on your data to?
If necessary, we pass on your data to the processors of your order.
How long is data stored?
Data is deleted as soon as it is no longer required for the purpose of its collection. This is generally the case if communication with the user has been completed and the company can infer from the circumstances that the relevant facts have been conclusively clarified.
Is providing data necessary or required by law?
Personal data is provided voluntarily. We cannot grant you access to our comments section, unless you provide us with your personal data.
Newsletter
What data do we process and for what purposes?
Your data will only be used to send you the subscribed newsletter by email. Providing your name allows us to address you personally in the newsletter and, if necessary, to identify you, should you wish to exercise your rights as a data subject.
In order to receive the newsletter, you just need to provide us with your email address. Data provided upon registering to receive our newsletter, will be used solely for this purpose. Subscribers may also be notified by email of circumstances relevant to the service or registration procedure (e.g. changes in the newsletter offer or technical circumstances).
For the registration to be effective, we require your valid email address. In order to verify that a registration is indeed carried out by the owner of the email address, we use the “double opt-in” procedure. For this purpose, newsletter orders, confirmation emails and receipts of the reply requested herewith are logged. Further data is not collected. The data will be used exclusively for sending the newsletter and will not be passed on to third parties.
Legal basis:
On the basis of your explicitly given consent (Article 6(1)(a) GDPR ), we will regularly send you our newsletter or comparable information by email to your specified email address.
You may revoke your consent to the storage of your personal data and its processing for purposes of sending the newsletter at any time with effect for the future. In each newsletter you will find a corresponding link. You can cancel your subscription directly at this website at any time or inform us of your cancellation using the contact option given at the end of this data protection notice.
Who do we pass on your data to?
If necessary, we pass on your data to the processors of your order.
How long is data stored?
Such data will only be processed as long as the relevant consent is available. After that, the data will be deleted.
Is providing data necessary or required by law?
Personal data is provided voluntarily, solely on the basis of your consent. Unfortunately, we cannot send you our newsletter without your consent.
Contact from
What data do we process and for what purposes?
The data you provide will be stored for the purpose of contacting you personally. For this purpose, we require a valid email address and your name. The data is used to classify the query and then reply to it. Providing further data is optional.
Legal basis:
Processing of data provided in the contact form is carried out pursuant to Article 6(1)(f) GDPR for the purposes of legitimate interests.
The contact form allows you to interact with us easily. The information provided by you will be stored for the purpose of processing your inquiry and any further follow-up questions.
If you contact us in order to obtain information about an offer, the data provided in the contact form will be processed to carry out pre-contractual measures (Article 6(1)(b) GDPR).
Who do we pass on your data to?
If necessary, we pass on your data to the processors of your order.
How long is data stored?
Data is deleted at the latest 6 months after processing the inquiry.
If a contract is concluded, we are subject to the legal retention periods specified in the German Commercial Code (HGB) and shall delete your data upon their expiry.
Is providing data necessary or required by law?
Personal data is provided voluntarily. However, we can only process your inquiry if you provide us with your name, email address and the reason for the inquiry.
Google Analytics
What data do we process and for what purposes?
Our website uses Google Analytics, a web analysis service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA (hereinafter referred to as “Google”). Google Analytics uses so-called “cookies”, i.e. text files stored on your computer which enable an analysis of your use of the website. The information generated by the cookie about your use of the website is as a rule transmitted to a Google server in the USA, where it is stored. However, if you activate IP anonymization on this website, your IP address will be shortened by Google beforehand within the area of the Member States of the European Union or other parties to the Agreement on the European Economic Area. Only in exceptional cases will your full IP address be transmitted to a Google server in the USA and shortened only once it has arrived there. Google uses such information on behalf of the operator of this website to evaluate your use of the website, to compile reports on the website activity, and to render further services connected with this website and Internet use to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be combined with other Google data.
The purpose of data processing is evaluating how the website is used and compiling reports on the users’ activities on the website. Further connected services are to be provided on the basis of these evaluations and compilations.
Legal basis:
Processing of data is carried out pursuant to Article 6(1)(a) GDPR on the basis of the user’s consent.
Who do we pass on your data to?
The data is passed on to Google as the contract processor. For this purpose, we have concluded a relevant order processing contract with Google.
How long is data stored?
The data will be deleted as soon as it is no longer required for our record-keeping purposes.
Third-country transfer:
Google processes your data in the USA and is subject to the EU_US Privacy Shield https://www.privacyshield.gov/EU-US-Framework. Furthermore, we have also adopted standard protection clauses with Google for the use of Google Analytics.
Is providing data necessary or required by law?
Personal data is provided voluntarily, solely on the basis of your consent. If you deny access, the result may be functional restrictions on the website.
Revoking consent:
You may prevent the storage of cookies by selecting the appropriate browser settings. However, we would like to point out that if you do so, it may not be possible for you to make use of the full scope of all this website’s functions. You can prevent Google from collecting the data generated by cookies and pertaining to your use of the website (including your IP address), as well as processing this data by Google by downloading and installing the browser plug-in available through the following link. Browser Add On for deactivating Google Analytics.
In addition or as an alternative to the browser add-on, you can prevent tracking by Google Analytics on our pages by clicking this link. It will allow you to install an opt-out cookie on your device. This will prevent Google Analytics from collecting cookies on this website and using this browser in the future, as long as the cookie remains installed on your browser.
Profiling:
With the help of the Google Analytics tracking tool the behaviour of the visitors on the website can be evaluated and their interests analysed. For this purpose we create a pseudonymous user profile.
SSL-encryption
In order to protect the security of your data during transmission, we use up-to-date encryption procedures (e.g. SSL) via HTTPS.
Changing our data privacy statement
We reserve the right to adapt this data privacy statement so that it always corresponds to the current legal requirements, or to reflect changes to our services in the data privacy statement, e.g. when introducing new services. Your future use of the website will then be subject to the new data privacy statement.