We, Heinrich Kipp Werk GmbH & Co. KG, Heubergstr. 2, 72172 Sulz am Neckar, Germany, wish to provide you with the following information concerning the data protection considerations that apply during use of the page “www.kippwerk.de”:
1. Name and address of the responsible party
HEINRICH KIPP WERK GmbH & Co. KG
Heubergstraße 2
72172 Sulz am Neckar
Telephone: +49 7454 793-0
Fax: +49 7454 793-33
Internet: www.kipp.com
2. Contact data of the data protection officer
HEINRICH KIPP WERK GmbH & Co. KG
Heubergstraße 2
72172 Sulz am Neckar
E-Mail: datenschutz@kipp.com
3. Deletion and restriction of personal data
If not specified differently for the specific case in this privacy statement, personal data will be deleted if no longer required for the purposes for which they were collected or otherwise processed and if no legal duties of retention remain.
We delete the personal data processed by us upon request provided that the conditions of Art. 17 of the GDPR are met. personal data required for other, legally permissible purposes are not deleted. That applies, for example, for personal data required to pursue claims that we might have or that must be retained for reasons of commercial or tax law. Documents in accordance with § 257 par. 1 no. 2 and 3 of the German Commercial Code (HGB) and § 147 par. 1 no. 2, 3, 5 of the German Tax Code (AO) are retained for 6 years; documents in accordance with § 257 par. 1 no. 1 and 4 HGB and § 147 par. 1 no. 1, 4, 4a AO are retained for 10 years.
Processing of this data is restricted in accordance with Art. 18 of the GDPR, and the data are not processed for other purposes.
4. Your rights
As the person concerned, you have the following rights:
- In accordance with Art. 15 of the GDPR, you can demand information about your personal data that we process; further, you can demand information regarding the purposes of processing, categories of processed personal data, recipients or categories of recipients to which your data have been disclosed or will still be disclosed, the planned storage duration or the criteria for determination of the storage duration, the origin of your data if not collected from you, the existence of an automated decision methodology, including profiling and any meaningful information on the details, such as logic, extent, and effects, the existence of a right of correction or deletion of the data regarding yourself, the right to limitation of processing or objection to this processing, the existence of a right to complain to the supervisory authority; finally, you have the right to information on whether personal data have been transmitted to a third country or an international organisation and – if this is the case – about appropriate guarantees in connection with the transmission;
- In accordance with Art. 16 of the GDPR, you can demand immediate correction of incorrect personal data or completion of this data stored by us;
- In accordance with Art. 17 of the GDPR, you can demand deletion of your personal data stored by us if its processing is not required for exercising the right of free expression of opinion or is information required to fulfil a legal obligation, or for reasons of the public interest, or to file, exercise, or defend against legal claims;
- In accordance with Art. 18 of the GDPR, you can demand restriction of the processing of your personal data if you dispute the correctness of the data, if its processing is illegal but you reject its deletion and we no longer need the data, if you require the data that we no longer need to file, exercise, or defend against legal claims, or if you have filed an objection to its processing in accordance with Art. 21 of the GDPR but it has not yet been determined whether our justified reasons for data processing outweigh your interest;
- In accordance with Art. 20 of the GDPR, you can demand the transfer to yourself or to another responsible person of your personal data that you have provided us in a structured, conventional, and machine-readable format;
- In accordance with Art. 21 of the GDPR, you can object to the processing of your personal data if there are reasons arising from your particular situation or the objection is against direct advertisement and the legal foundation for processing of your personal data is a legitimate interest in accordance with Art. 6 par. 1 sentence 1. 1 lit. f of the GDPR;
- In accordance with Art. 7 par. 3 of the GDPR, you can revoke the permission that you have provided us at any time. The result is that we may no longer continue the data processing based on this permission in future;
- In accordance with Art. 77 of the GDPR, you can complain to a supervisory authority, in particular in the member state of your usual place of residence, of your workplace, or of the location in which the alleged violation occurred.
If you would like to make use of the above rights as the person concerned, you can
contact us or our data protection officer at the above-named contact data
at any time.
5. Login
You have the option of registering for our offer and setting up login details (also: customer access). To do this, you have to specify the following data:
- Name
- Title
- Address
- Company,
- Email address,
- Telephone number
- Password
Registration is voluntary and occurs in accordance with Art. 6 par. 1 sentence. 1 lit. a of the GDPR on the basis of your consent. Your data are used for the purpose of sending you our offer and contacting you for information relevant to the offer and registration. You can see and change your data through a personal user access. Your data are stored until you instruct us to delete them. If we have to save your personal data to meet legal requirements, in particular under commercial and tax law, processing of your personal data is restricted correspondingly until the retention periods have passed. After that, the data will be deleted.
If you register for our offer or use the user account, we save the IP address and the time of the respective use. Storage occurs based on our and your legitimate interests in accordance with Art. 6 par. 1 sentence 1 lit. f of the GDPR for provision of our offer and for protection against misuse and other unauthorised use. The user account and the data stored in this connection are used to enable you to order from us and especially serve to simplify the purchase process and to access your order history. Provision of this data to third parties does not occur unless required to fulfil contractual obligations in accordance with Art. 6 par. 1 lit. b of the GDPR, or to pursue any claims that we might have, or if there is a legal requirement to do so in accordance with Art. 6 par. 1 lit. c of the GDPR. The IP addresses are deleted or made anonymous after no more than 7 days.
6. CAD data
Our internet offer uses services of CADENAS Konstruktions-, Softwareentwicklungs- und Vertriebs GmbH, Berliner Allee 28 b+c, 86153 Augsburg, Germany (hereafter “CADENAS”), to display CAD data on our products. In this context, your IP address and, if applicable, additional data are recorded, which CADENAS can determine in the context of the connection. CADENAS thereby learns which page of our offer has been called up by an IP address.
We use a data-protection-friendly solution to integrate CADENAS. The described data transmission therefore first occurs when you click on the symbol for CAD data associated with our products and not when the page is loaded. With the activation click, you consent to our transmission of your personal data, as described, to CADENAS or its operator. Only its operator is responsible for the processing of your personal data after transmission to CADENAS. The legal basis for transfer of your personal data is your consent in accordance with Art. 6 par. 1 lit. a of the GDPR.
To be able to download CAD models through CADENAS, you must have a user account with us.
If you are simultaneously logged in with us or with CADENAS, CADENAS can connect your visit to the page of our internet offer directly to your respective user account. If you use CADENAS to download CAD data, the corresponding information is transmitted to CADENAS and processed there. If you do not want CADENAS to connect the data collected on our internet offer with your respective user account at CADENAS, you must log out from CADENAS and from us beforehand. We use CADENAS to improve our internet offer and enable you as a user of our offer to quickly and easily view and call up important information on our products. Our legitimate interest lies in the purpose of improving our offer. The legal basis for use of CADENAS is our legitimate interests in accordance with Art. 6 par. 1 lit. f of the GDPR.
The recorded personal data can be stored on servers in third countries outside the EU or the EEA. CADENAS has established standard contracting clauses and taken other measures to fulfil the requirements of the EU for legitimisation of transfer of personal data to third countries outside the EU or EEA. You can find data protection information on CADENAS and information on the use of standard contractual clauses by CADENAS at https://b2b.partcommunity.com/community/help/privacy
7. Order
In the context of and for the purpose of fulfilling pre-contractual measures and contractual obligations for our internet offer that take place on your request, and especially to fulfil your order, we use the data from your login that is necessary for contract fulfillment (see no. 5) as well as the following data:
- deviating delivery or invoice addresses or recipients, if any;
- contractual data, such as ordered products, shipping method, customer category;
- payment data, such as bank account, credit card data, payment history.
This data is collected, processed and used by us in order to send you the goods ordered and to send you the information required by email or other method. The legal basis for the processing of information is Art. 6 par. 1 sentence 1 lit. b of the GDPR. If you have not set up a login and do not specify this data, we cannot process your request. If you use other communication means for ordering from us, we also need your data specified above.
The data are transferred to third parties only to the extent necessary to fulfil pre-contractual measures and contractual obligations in accordance with Art. 6 par. 1 lit. b of the GDPR, such as banks, payment service companies, and credit card companies for processing of the payment and to shipping service providers for shipping of the goods.
8. Contact form / other contacting means
If you use our contact form, you must specify your name and email address and specify your question so we can investigate your request and contact you. In addition, you can voluntarily specify your address, the company you work for, and your telephone number, as well as other data. If you use another communication means to make a request to us, we also need your name and the contact data where we can reach you (for example, email address, address, telephone number, or fax number). If you do not specify this data, we cannot process your request.
Data processing for the purpose of processing your contact with us and addressing your concern occurs in accordance with Art. 6 par. 1 sentence 1 lit. a of the GDPR on the basis of the consent that you voluntarily provided. Without this consent, we cannot make contact with you. All personal data collected in connection with the contact are deleted after your request has been handled unless saving it is required for other reasons (e.g. subsequent contract).
9. Video consultation
If you use our form to arrange a video consultation with us, you must specify your name, the company you work for, your email address, your telephone number, as well as the desired subject of the video consultation. If you do not specify this data, we cannot arrange a video consultation with you. In addition, you can voluntarily specify your address, a desired date and time for the video consultation, the type of desired appointment, and additional information in a free field. If you use other means of communication for a request to us, we also need your name, the company you work for, your email address, your telephone number, as well as the desired subject of the video consultation.
Data processing for the purpose of arranging a video consultation with us occurs in accordance with Art. 6 par. 1 sentence 1 lit. a of the GDPR on the basis of the consent that you voluntarily provided. Without this consent, we cannot arrange a video consultation with you. All personal data collected in connection with the contact are deleted after your request has been handled, unless saving it is required for other reasons (e.g. subsequent contract).
We use the TeamViewer software of TeamViewer Germany GmbH for the video consultation. The video connection runs solely over servers of TeamViewer Germany GmbH, which are located in Germany or Austria.
The use of TeamViewer occurs in accordance with the TeamViewer privacy statement. You can gain further information on this directly from TeamViewer GmbH, Jahnstrasse 30, 73037 Göppingen, Germany, or through the following links.
Data protection notices: https://www.teamviewer.com/de/privacy-policy/
Security notices: https://www.teamviewer.com/de/security/
10. Catalogue order
If you use our form to order a catalogue, you must specify your name, your email address, and your address and select which catalogue you want to receive, so we can send you the desired catalogue. In addition, you can voluntarily specify your customer number, your title, your department and company, and your telephone number. If you use other means of communication for a request to us, we also need your name, your email address, and your address. If you do not specify this data, we cannot send you a catalogue.
Data processing for the purpose of the catalogue order occurs in accordance with Art. 6 par. 1 sentence 1 lit. a of the GDPR on the basis of the consent that you voluntarily provided. Without this consent, we cannot send you a catalogue. All personal data collected in connection with the contact are deleted after your request has been handled, unless saving it is required for other reasons (e.g. subsequent contract).
11. Cookies
We use cookies in the framework of our offer. Cookies are short text filed that your browser automatically creates and are stored on your terminal device (laptop, tablet, smartphone, PC, etc.) when you visit our site. Cookies do no harm to your device and do not contain any viruses or other malware. A cookie contains information that arises in connection with the specific terminal device used. But this does not mean that we thereby directly gain knowledge of your identity through cookies. Cookies mainly serve to make the internet offer more user-friendly, effective, and secure. Cookies provide us, among other things, with information on which pages of our website are visited, in which order, and how much time is spent on the respective pages. Please be aware that you can completely disable the use of cookies by making the appropriate settings in your browser.
We use Cookiebot as part of our internet offer. The supplier is Cybot A/S, Havnegade 39, 1058 Copenhagen, Denmark, tel.: + 45 50 333 777, email: mail@cookiebot.com, company register no.: DK34624607.
With Cookiebot, we create a cookie banner with an overview of the cookies that we use for our offer. If necessary, we also obtain your consent through Cookiebot. The individual cookies specify the name of the cookie, the purpose the cookie is supposed to fulfil, any possible access to the cookie by third parties, and its duration of function or the time period after which the cookie is deleted. Session cookies are deleted after the end of their respective use of our offer or after the end of the browser session.
Cookiebot collects the following information about your use of this website: host name of the accessing computer (IP address), browser type/version, operating system/device used and data and time of consent. After your IP address has been transmitted to Cookiebot, it is made anonymous at the earliest technically possible time through deletion of the last 8 bits of an IPv4 address or the last 80 bits of an IPv6 address. At no time is your IP address permanently stored by Cookiebot. Consequently, Cookiebot is no longer able to personally connect the processed data to you.
Cookiebot generates and saves an individual identifier if you consent in the form shown by Cookiebot on our website that our internet offer can set additional cookies on your device beyond the required cookies. Cookiebot connects this individual identifier to each consent declaration given through Cookiebot on our website. The individual identifier is saved together with the enumeration of the consent declaration in a cookie. If through Cookiebot you permit us to set all cookies, a special individual identifier for this across-the-board consent is stored in the cookie in your browser. The service life of the cookie is one year. From this cookie, our website can read at later visits which cookies we may set.
Through the corresponding link in our privacy statement, you can see what your individual identifier is and when you gave any consent declarations for our internet offer. This information is read out of the cookie that Cookiebot set in your browser. You can change or revoke at any time the consent declarations that you gave.
The use of Cookiebot helps us to obtain the necessary consent to be able to use cookies legally in a manner appropriate for our internet offer. With the activation click, you consent to our transmission of your personal data, as described, to Cookiebot and/or its operator. Without this data transmission, use of non-required cookies in our internet offer is not possible. Only its operator is responsible for the processing of your personal data after transmission to Cookiebot. The legal basis for transfer of your personal data is your consent in accordance with Art. 6 par. 1 lit. a of the GDPR.
You can obtain the details of how the data gained by Cookiebot is processed as well as general information about Cookiebot from Cookiebot's data protection guideline, which you can call up at https://www.cookiebot.com/de/privacy-policy/.
Cookiebot uses Microsoft, which might process the data on servers in the USA, as a service provider. Microsoft has established standard contracting clauses to fulfil the requirements of the EU for legitimisation of transfer of personal data to third countries outside the EU or EEA. You can find information on how Microsoft uses standard contract clauses at https://www.microsoftvolumelicensing.com/Downloader.aspx?DocumentId=17871
12.
LinkedIn Insight Tag
We use the social media tool "LinkedIn Insight Tag" of the LinkedIn Ireland Unlimited Company. This tool sets a cookie that collects personal data in your web browser. This data is anonymised before being made available to us and is used for statistical and market research purposes. There is the possibility to set measures in the area of retargeting, whereby we can deliver advertising to you aside from our website, without you being able to be identified as a website visitor.
Personal data that is processed: IP address, device and browser characteristics and page incidents.
In LinkedIn's privacy policy at
https://www.linkedin.com/legal/privacy-policy you can find more information about
data collection and use as well as the possibilities and rights available to protect your privacy.
LinkedIn members can control the use of their personal data for advertising purposes in their account settings. To disable the Insight tag on our website ("opt-out") click here.
13. Usage data
We use services of hosting providers, such as web servers, memory, database services, security services and maintenance services to provide our offer. We, or our hosting provider on our behalf, process personal data of users in order to make our offer available efficiently and securely.
When our internet offer, or the individual pages, is called up, the browser of your device automatically sends information to the server of our internet offer. The following information is thereby stored in log files:
- IP address of the requesting computer,
- Date and time of the access,
- Name and URL of the called-up file,
- Website from which the access occurs (referrer URL),
- Browser used and, if applicable, the operating system of your computer,
- Status codes and data volume transmitted,
- Type of device used,
- Name of your access provider.
This data is processed for the following purposes:
- to provide the internet offer, including all functions and contents,
- to guarantee a trouble-free connection to the website,
- to guarantee convenient use of our website,
- to ensure system security and stability,
- for anonymous statistical evaluation of accesses,
- for website optimisation,
- for transmission to criminal justice authorities if illegal intrusion/access to our systems occurs,
- for other administrative purposes.
This data is deleted after six months if it is no longer required for other purposes (such as defence against or assertion of legal claims).
The legal basis for the processing of information is Art. 6 par. 1 sentence 1 lit. f of the GDPR. Our legitimate interest follows form the purposes for data collection described above.
14. Services from Google
Provider of the following services from Google is Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland (hereafter “Google”).
The legal basis for use of the following services from Google is our legitimate interests in accordance with Art. 6 par. 1 lit. f of the GDPR.
The recorded personal data can be stored and processed on servers in third countries outside the EU or the EEA, in particular, in the USA. Google uses standard contracting clauses to fulfil the requirements of the EU for legitimisation and transfer of personal data to third countries outside the EU or EEA.
You can find more information on how Google treats your personal data in the privacy statement of Google:
https://policies.google.com/privacy?hl=de.
You can find information on data usage for advertising purposes by Google as well as setting and objection possibilities on these websites:
https://www.google.de/policies/privacy/partners/
https://www.google.de/policies/technologies/ads/
http://www.google.de/settings/ads
http://www.google.com/ads/preferences/
a. Google Analytics
This internet offer uses Google Analytics from Google. Google Analytics uses cookies. Google collects data about the visits of users of our internet offer and their usage behaviour. This data is used to ensure a demand-appropriate design and continuing optimisation of our internet offer, to measure the success of marketing measures, and to create statistical evaluations. Pseudonymised usage profiles are created for these purposes. The information about your use of this website, such as browser type/version, operating system used, referrer URL (the previously visited page), host name of the accessing computer (IP address), time of the server request are transmitted to a Google server in the USA and saved there. The IP addresses are previously made anonymous through deletion of the last three positions. User and event data are deleted after 26 months. This information may also be transmitted to third parties where required to do so by law or where such third parties are assigned by us or by Google to process the information. Your IP address will never be put together with other data from Google.
You can object to storage of the cookies in our cookie banner. Likewise, you can prevent storage of the cookies through a corresponding setting of your browser or device. It is possible that you can then no longer use all functions of our offer to the fullest extent. You can also prevent Google from recording the data generated by the cookie relating to your website usage (including your IP address) and processing this data by downloading and installing the browser plug-in available from the following link: https://tools.google.com/dlpage/gaoptout?hl=de.
b. Google Maps
This internet offer uses Google Maps from Google to depict site plans, map material, terrain data, or geographic maps. Google records your IP address, which of our internet pages you have visited, as well as search terms and location data. The generated information is stored on a server in the USA. This information may also be transmitted to third parties where required to do so by law or where such third parties are assigned by us or by Google to process the information. If you use Google Maps, the additional conditions of use for Google Maps apply, which you can call up at https://www.google.com/intl/de_de/help/terms_maps.html abrufen können.
15. Social media
As part of our internet offer, we have set links to our web pages in social networks. No data are transmitted to the respective providers if you use our internet offer. Data are transmitted only when you use one of the links to visit our web pages.
16. Direct mail advertising
If you are a customer and we have received your data in connection with the sale of a product or service, we can use your data (first name and surname, address, and company, if relevant) for direct mail advertising for goods or services offered by us or by third parties and for customer satisfaction surveys. We can add additional data about you that we have legally obtained to this data for the above advertising purposes. For example, we can include your order history or the type of goods that you bought from us.
To send our direct mail advertising, we give your first name and surname as well as the name and address of your company and, if applicable, your department to a processor.
The purpose of this data processing is to reach you with targeted advertising that corresponds to your interests and to avoid advertising that you are not interested in. The legal basis for the processing is our legitimate interest in direct marketing in accordance with Art. 6 par. 1 lit. f of the GDPR.
If we conduct a customer satisfaction survey, the contracting processor sends the customer satisfaction questionnaire by post and evaluates the questionnaire.The processor provides us the results of the customer satisfaction survey in an anonymous way only. It is not possible for us to connect the answers to individual customers. Participation in the survey is voluntary The legal basis for processing of the data collected through a customer satisfaction survey, to the extent it is personal data, is your consent in accordance with Art. 6 par. 1 sentence 1 lit. a) of the GDPR, which you grant us by returning the questionnaire.
Direct mail advertising requires a certain advance time before shipping in order to print and make the shipments ready for mailing. If you object to direct mail advertising, it can happen in exceptional cases that you still receive advertising from us by mail. This can occur when the production process for the corresponding mailing is already in progress when you object. That does not mean that we disregard your objection.
17. Direct email advertising to customers
If you are a customer and we have received your email address in connection with the use of our services, we can use your email address for direct advertising for some similar goods or services. This applies only if you have not objected and we inform you clearly of your option to object when we ask for your email address and with each application. For direct advertising by email, we process your email address, your name, your company if you have used our offers as an employee of a company, the data we recorded about your use of our offers, and the type of goods or services that you procured from us in order to adapt our offers to you individually. The legal basis for the processing is § 7 par. 3 of the German Fair Trade Practices Act (UWG) as well as our legitimate interest in direct marketing in accordance with Art. 6 par. 1 lit. f of the GDPR.
We send the direct email advertising ourselves and not through a service provider. Your data are therefore not passed on to external partners.
18. Newsletter
If you would like to receive our newsletter, we need your email address. Your data are processed in accordance with Art. 6 par. 1 sentence 1 lit. a of the GDPR on the basis of the consent that you voluntarily provided in the so-called double opt-in procedure. Your data are used and saved for this purpose until you cancel your consent or unsubscribe from receipt of the newsletter. Unsubscribing is possible at any time through a link at the end of each newsletter, for example. Alternatively, you can send your cancellation/unsubscribe request at any time to the email address named under number 1 and 2.
To make it possible to subscribe and unsubscribe to our newsletter and to send the newsletter, we transmit your data to a service provider for processing on our behalf.
19. Loan and creditworthiness information
CRIF Bürgel
Within the framework of this contractual relationship, we transmit personal data collected in connection with the application for, performance, and termination of this business relationship as well as data on contract-breaching or fraudulent conduct to CRIF Bürgel GmbH, Radlkoferstraße 2, 81373 Munich, Germany. The legal bases for transmitting this data are Article 6(1) point (b) and Article 6(1) point (f) of the General Data Protection Regulation (GDPR). Data may only be transmitted on the basis of Article 6(1) point (f) of the GDPR in cases where doing so is necessary for protecting the legitimate interests of our company or third parties and does not override the interests or fundamental rights and freedoms of the data subject who requires protection of personal data. Data is also exchanged with CRIFBÜRGEL for the purpose of fulfilling statutory duties to perform credit checks on customers (see § 505a and 506 of the German Civil Code). CRIFBÜRGEL also processes the data it receives and uses it for the purposes of profiling (scoring), so that it can provide its contractual partners in the European Economic Area and Switzerland, as well as any third countries (provided that the European Commission has made adequacy decisions on them), with information that can be used for purposes such as assessing the credit standing of natural persons. For more information on the activities of CRIFBÜRGEL, please refer to the CRIFBÜRGEL information sheet or visit http://www.crifbuergel.de/de/datenschutz
Creditreform Boniversum GmbH
Our company checks your creditworthiness when there is a legitimate interest to do so. To do this, we work together with Creditreform Boniversum GmbH (hereinafter referred to as "Creditreform"), which supplies us with the necessary data. On behalf of Creditreform, we provide you in advance with the following information as required by Art. 14 of the GDPR:
Creditreform is a consumer credit agency. They operate a database which stores people's credit ratings. It is on this basis that Creditreform supplies us, as their customers, with credit rating information. Their customers include, for example, credit institutions, insurers, telecommunications companies, debt collection agencies, and mail-order companies. Within the legal regulations, some of the data stored in the information database is also supplied to other company databases, for example, for the purpose of address trading. In particular, the database at Creditreform stores the name, address, date of birth, and possibly the email address and payment history of people, for the purpose of providing information about the creditworthiness of a particular person when requested. The person requesting this information must demonstrate convincingly that they have a legitimate interest in acquiring it. The legal basis for the processing of information is Art. 6 par. 1f of the GDPR. If data are passed on to countries outside of the EU, this occurs in accordance with the “standard contract conditions”, which you can read at the following link: https://eur-lex.europa.eu/legal-content/DE/TXT/PDF/?uri=CELEX:32001D0497&from=DE
or you can have a copy sent to you. The data are usually stored initially for three years. After this period, whether the data need to be stored for a further period is tested; otherwise, the data are deleted after three years to the day. If a case is settled, the data are deleted after three years, to the day, from the date of settlement. As required by § 882 e of the German Code of Civil Procedure (ZPO), entries in the debtors’ register are deleted after a period of three years, to the day, from the date of entry in the register. For the purpose of Art. 6 par. 1f of the GDPR, a legitimate interest in the stored information may be for the purpose of: credit decisions, claims, credit rating checks, insurance agreements, enforcement information. You have the right to obtain information from Creditreform regarding the data which they have stored about you. If the data are found to be incorrect or incomplete, you have the right to ask for them to be corrected or deleted. If it is not possible to establish whether the data are correct or not, you are entitled to ask for the data concerned to be blocked until this has been clarified. If you have given your consent for the data stored at Creditreform to be processed, you have the right to cancel this consent at any time. Cancellation of consent does not affect the legitimacy of any processing of your data that has already occurred with your consent up until the time that consent is withdrawn. If you have any objections, requests, or complaints related to data protection, you can contact the data protection officer at Creditreform at any time. This person will be able to help you quickly and reliably with any questions you may have about data protection. You can also lodge a complaint about the way your data are processed by Creditreform with the state representative responsible for data protection in the Free State of Saxony. The data stored about you by Creditreform are obtained from publicly accessible sources, from debt collection agencies and their customers. To decide your credit rating, Creditreform uses a score value based on age, gender, address, and payment history, if applicable. Customers of Creditreform use this value when making their credit decisions. Right of cancellation: Stored data are processed for essential, legitimate reasons of creditor and credit protection, which usually outweigh your interests, rights, and freedoms, or are used in order to assert, exercise, or defend against legal claims. You can contest the processing of your data only for reasons arising from special situations which are affecting you, and for which evidence must be provided. If such reasons are demonstrably present, your data are no longer processed. The body responsible for the purposes of Art. 4 no. 7 of the GDPR is Creditreform Boniversum GmbH, Hellersbergstrasse 11, 41460 Neuss, Germany. Your contact partner at the company is Consumer Service, tel.: +49 (0)2131 36845560, Fax: +49 (0)2131 36845570, e-mail: selbstauskunft@boniversum.de. You can contact the data protection officer using the following contact details: Creditreform Boniversum GmbH, Datenschutzbeauftragter, Hellersbergstrasse 11, 41460 Neuss, Germany; e-mail: datenschutz@boniversum.de.
20. Payment service provider
We work with the payment service provider PAYONE. Payments are processed via PAYONE GmbH, Lyoner Strasse 9, 60528 Frankfurt/Main, Germany. We pass on the information you have provided as part of the ordering process as well as information about your order to PAYONE. If you place an order for yourself personally, the data is transferred in accordance with Art. 6 par. 1 lit. b of the GDPR for fulfillment of the completed contract. If you order from us on behalf of and in the name of a company or another organisation, the transfer occurs in accordance with Art. 6 par. 1 lit. f of the GDPR due to our legitimate interest and the legitimate interest of the company for which you work to perform the contract made with us. Your data is passed on exclusively for the purposes of processing payments through PAYONE as the payment service provider and only where doing so is necessary.
You can find more information on how PAYONE treats your personal data in the privacy statement of PAYONE: https://www.payone.com/DE-de/dsgvo.
Status: 23.02.2022 |