POLÍTICA DE PRIVACIDAD
PRIVACY POLICY
Thank you for visiting our website paulwiegand.de and for your interest in our company.
The protection of your personal data, such as date of birth, name, phone number, address etc., is of great concern to us.
The purpose of this Privacy Policy is to inform you about the processing of your personal data that we collect from you when you visit our website. Our privacy policies are in accordance with the statutory regulations laid out in the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG). The intention of the following Privacy Policy is to ensure compliance with the mandatory information handling obligations of the GDPR. These obligations are outlined in Sections 13 and 14 et seq. GDPR.
DATA CONTROLLER
The Data Controller, as defined in Section 4 para. 7 GDPR, is the person or company who/which, solely or jointly with others, decides on the purpose and means of processing personal data.
In terms of our website, the Data Controller is:
Paul Wiegand GmbH
Eschengrund 5, D-36124 Eichenzell-Kerzell, Germany
E-mail: info@paulwiegand.de
Tel.: +49 6659 9862 – 0
Fax: +49 6659 9862 – 150
CONTACT DETAILS OF THE DATA PROTECTION OFFICER
We have appointed a Data Protection Officer in accordance with Section 37 GDPR. You can reach our Data Protection Officer as follows:
Paul Wiegand GmbH
– To the Data Protection Officer –
Eschengrund 5, D-36124 Eichenzell-Kerzell, Germany
Mail: datenschutz@paulwiegand.de
PROVISION OF THE WEBSITE AND CREATION OF LOG FILES
Every time a person accesses our website, our system automatically captures data and information about the device accessing the website (e.g. computer, mobile phone, tablet etc.)
What personal data is captured and to what extent is it processed?
1. Information on the browser type and version used;
2. The operating system of the accessing device;
3. Host name of the accessing computer;
4. The IP address of the accessing device;
5. Data and time of access;
6. Website and resources (images, files, other page content) accessed on our website;
7. Websites from which the user’s system accesses our website (referrer tracking);
8. Report on whether access was successful;
9. Volume of data transmittedThis data is stored in our system’s log files. This data will not be stored together with the personal data of a specific user so that individual site visitors cannot be identified.
Legal basis for the processing of personal data
Section 6 para. 1(f) GDPR (legitimate interests). Our legitimate interests involve guaranteeing the achievement of the purpose outlined below.
Purpose of data processing
The temporary (automated) storage of data is required to process a website visit to enable provision of the website. Personal data is also stored and processed to ensure the compatibility of our website for all visitors, combat misuse and rectify faults. To do this, it is necessary to log the technical data of the accessing computer to be able to react as early as possible to display faults, attacks on our IT systems and/or faults relating to the functionality of our website. We also use the data to optimise the website and ensure the general safety of our information technology systems.
Duration of storage
The aforementioned data will be deleted as soon as it is no longer needed to guarantee the compatibility of the website for all users, but no later than 3 months after our website was accessed.
Right of objection and deletion
You can object to the processing of your data at any time in accordance with Section 21 GDPR and demand that the data is deleted in accordance with Section 17 GDPR. The last section of this Privacy Policy outlines your rights and how to exercise them.
SPECIAL FEATURES OF THE WEBSITE
Our website offers you various features, the use of which involves the capture, processing and storage of personal data. We have outlined below how we process this data:
Contact form(s)
- What personal data is captured and to what extent is it processed?
The data you have inputted into our contact forms, which you have entered into the input screen of the contact form.
- Legal basis for the processing of personal data
Section 6 para. 1(a) (Consent by clear affirmative action or behaviour)
- Purpose of data processing
We only use the data captured via our contact form or our contact forms to process specific contact enquiries received through the contact form. Please note that we may also send e-mails to the specified address to fulfil your contact enquiry. The purpose of this is to obtain confirmation from you that your enquiry has been correctly forwarded to us. Returning this confirmation e-mail is not mandatory for us and is intended for your information only.
- Duration of storage
The data captured is immediately deleted once your enquiry has been processed providing that there are no statutory retention periods.
- Right of revocation and deletion
Your right of revocation and deletion is based on the general provisions governing the right of revocation and deletion relating to legal data protection outlined below in this Privacy Policy.
- Necessary provision of personal data
You use the contact form on a voluntary basis and it is neither contractually not legally required. You are not obliged to contact us via the contact form, instead you can use the other contact options on our website. If you wish to use our contact form, you will need to complete the fields indicated as mandatory. If you do not complete the required details on the contact form, you will be unable to submit the enquiry or we will unfortunately be unable to process your enquiry.
Login / Registration
- Scope of the processing of personal data and captured personal data
The registration and login data you have inputted or which we have shared with you.
- Legal basis for the processing of personal data
Section 6 para. 1(b) GDPR (Implementation of (pre)contractual measures)
- Purpose of data processing
You have the option of using a separate Login area on our website. You will need to enter your login data (e-mail or username and password) into the relevant form to enable us to check that you are authorised to use the protected area and/or protected documents. If required, we can e-mail you your login data or an option to reset your password on request.
- Duration of storage
The data captured is stored for as long as you maintain a user account with us.
- Right of objection and deletion
You can object to the processing of your data at any time in accordance with Section 21 GDPR and demand that the data is deleted in accordance with Section 17 GDPR. The last section of this Privacy Policy outlines your rights and how to exercise them.
- Necessary provision of personal data
The use of the Login area on our website is contractually required for the use of the protected area. The use of the content protected by the Login area is impossible without the input of personal data. If you wish to use our Login area, you will need to complete the fields indicated as mandatory (Username and Password). You must have create a user account in advance to enable the data to be inputted. You will be unable to log in if the data you have entered is incorrect. The protected area cannot be used if the data you have entered is incorrect or you have not entered the data. You can continue to use the remainder of the website without the need to log in.
AUTOMATED CREDIT CHECKING / SCORING
If you wish to conclude a contract with us, we reserve the right to perform the exclusive automated processing of your personal data to check your credit rating. We are also entitled to this kind of automated decision-making in compliance with Section 22 para. 2(a) GDPR. The decision about whether the contract can or cannot be concluded depends on the result of the automated credit check. The credit check calculates the statistical probability of payment default. The creditworthiness information can include probability values (score values), which are calculated on the basis of scientifically recognised mathematical and statistical procedures. A number of criteria, such as income, address data, occupation, marital status and previous payment behaviour, are used to determine the customer’s future risk of non-payment. The result is expressed in the form of a payment value (so-called score). The information received in this way forms the basis of our decision on justifying, implementing or terminating a contractual relationship. Do not hesitate to contact us by e-mail to explain your point of view if you believe that you have been wrongly denied the right to conclude a contract based on the credit check. We will then check the automated decision on a case-by-case basis in compliance with Section 22 para. 3 GDPR. We may store and process your personal data in accordance with Section 6 para. 1(b) GDPR to perform the credit check.
In view of the potential imminent conclusion of a contract, we will forward your data to the following provider(s) in the following cases:
Creditsafe Deutschland GmbH:
Creditsafe Deutschland GmbH, Schreiberhauer Straße 30, 10317 Berlin, Germany (www.creditsafe.com): Our company regularly checks your creditworthiness when concluding contracts and, in certain cases, where there is a legitimate interest, even with existing customers. To do this, we work with Creditsafe Deutschland GmbH, Schreiberhauer Straße 30, 10317 Berlin, Germany, from whom we obtain the required data. We forward your name and contact details to Creditsafe Deutschland GmbH for this purpose.
Automated identity checking and credit checking when “PayPal” is selected as the payment method
- What personal data is captured and to what extent is it processed?
If you have selected PayPal as the method of payment, we will forward the personal customer data we have captured when processing your order to PayPal (Europe) S.à r.l. et Cie, P.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter referred to as “PayPal”) as part of our payment processing procedure. If you give your consent, the following data is involved in the data transfer: first and last name, house number, street name, postcode, town/city, date of birth, phone number, and the data relating to your order.
- Legal basis for the processing of personal data
Section 6 para. 1(b) GDPR (Implementation of (pre)contractual measures)
- Purpose of data processing
PayPal performs a credit check when you select the payment method “PayPal”. To do this, PayPal uses mathematical and statistical processes to calculate a rating score for the likelihood of non-payment (so-called calculation of a scoring value). PayPal bases its decision about provision of the respective payment methods on the calculated scoring value. The scoring value is calculated on the basis of recognised scientific procedures. We would also draw your attention to the PayPal Privacy Policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full
- Duration of storage
We will save the relevant data for payment processing for as long as is needed to complete the transaction. Where the data is subject to statutory retention obligations, it will be deleted after expiry of the required retention period. The period of time during which your data is stored by PayPal can be found in the PayPal Privacy Policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full
- Right of objection and deletion
You can object to the processing or your data at any time in accordance with Section 21 GDPR and demand that the data is deleted in accordance with Section 17 GDPR. The last section of this Privacy Policy outlines your rights and how to exercise them.
STATISTICAL ANALYSIS OF WEBSITE VISITS – WEB TRACKERS
We capture, process and store the following data when you access this website or individual files on the website: IP address, website from where the file has been accessed, the name of the file, date and time of access, volume of data transferred and notification of successful the access (so-called web log). We solely use this access data in a non-personalised form for the continuous improvement of our website and for statistical purposes. We also use the following web tracker to analyse visits to this website:
Google Tag Manager- What personal data is captured and to what extent is it processed?
We use the service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as: Google Tag Manager) on our website. Google Tag Manager provides a technical platform for running other web services and web tracking programs using so-called “tags” and controlling them together. In this context, Google Tag Manager stores cookies on your computer and analyses your browsing behaviour (so-called “tracking”), providing web tracking tools are being run by Google Tag Manager. This data sent by the individual tags integrated in Google Tag Manager is combined, stored and processed by Google Tag Manager under a single user interface. All the “tags” incorporated will be discussed again separately in this Privacy Policy. The relevant section of this Privacy Policy contains more detailed information on the data protection of the tools integrated in Google Tag Manager. Data, such as your IP address and your user activities, is transmitted to servers belonging to Google Ireland Limited and is processed and stored outside of the European Union, e.g in the USA, when you use our website with the integration of Google Tag Manager tags. The EU Commission has determined that there is an adequate level of data protection for the data in the USA if the data processing company has signed up to the US-EU Privacy Shield Agreement and data was exported to the USA in this approved manner. This is the case with Google Ireland Limited. The provisions in the relevant section of this Privacy Policy apply to the web services integrated by means of Google Tag Manager. The tracking tools used in Google Tag Manager use IP anonymisation of the source code to ensure that the IP address is anonymised by Google Tag Manager before the data is transmitted. This ensures that Google Tag Manager can only capture IP addresses in an anonymised manner (so-called IP masking).
- Legal basis for the processing of personal data
Your consent to our use of cookies and web tracking in our banner (Consent by clear affirmative action or behaviour) forms the legal basis for the processing of personal data in accordance with Section 6 para. 1(a) GDPR.
- Purpose of data processing
Google uses the information collected by Google Tag Manager on our behalf to analyse your visit to this website, compile reports on website activity and provide us with other services associated with use of the website and internet.
- Duration of storage
Google stores data relevant for the correct functionality of Google Tag Manager for as long as it is necessary to fulfil the web service booked. Data capture and storage is anonymous. Where the data relates to individuals, the data is immediately deleted providing it is not subject to statutory retention obligations. In any case, the data is deleted after expiry of the retention obligation.
- Right of objection and deletion
You can prevent the collection and forwarding of personal data to Google (especially your IP address) and the processing of this data by Google, by disabling the running of script code in your browser, installing a script blocker in your browser or enabling the “Do Not track” setting in your browser. You can also prevent the capture of the data generated by the Google cookie and relating to your use of the website (including your IP address) by Google and the processing of this data by Google by downloading and installing the browser plug-in available via the following link http://tools.google.com/dlpage/gaoptout?hl=de. You can view Google’s security and Privacy Policy at: https://policies.google.com/privacy
Google Analytics
- Scope of the processing of personal data
We use the web tracking service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as: Google-Analytics) on our website. In terms of web tracking, Google Analytics uses cookies that are stored on your computer and which permit an analysis of the use of our website and your browsing behaviour (so-called tracking). We perform this analysis based on the tracking service provided by Google Analytics to continuously optimise our website offering and make it more easily available. When you use our website, data, such as your IP address and your user activities, are transmitted to servers belonging to Google Ireland Limited. We perform this analysis based on the tracking service provided by Google to continuously optimise our website offering and make it more easily available. We also need web tracking for security reasons. Web tracking allows us to track whether third parties are attacking our website. The information provided by the web tracker lets us take effective countermeasures and protect the personal data we are processing from these cyber attacks. Enabling IP anonymisation within the Google Analytics tracking code on this website means that your IP address will be anonymised by Google Analytics prior to transmission. This website uses a Google Analytics tracking code, which has been extended by the operator gat._anonymizeIp(); to permit only the anonymised capture of IP addresses (so-called IP masking).
- Legal basis for the processing of personal data
Your consent to our use of cookies and web tracking in our banner (Consent by clear affirmative action or behaviour) forms the legal basis for the processing of personal data in accordance with Section 6 para. 1(a) GDPR.
- Purpose of data processing
Google uses this information on our behalf to analyse your visit to this website, compile reports on website activity and provide us with other services associated with use of the website and internet. We also need web tracking for security reasons. Web tracking allows us to track whether third parties are attacking our website. The information provided by the web tracker lets us take effective countermeasures and protect the personal data we are processing from these cyber attacks.
- Duration of storage
Google stores data relevant for the provision of web tracking for as long as it is necessary to fulfil the web service booked. Data capture and storage is anonymous. Where the data relates to individuals, the data is immediately deleted providing it is not subject to statutory retention obligations. In any case, the data is deleted after expiry of the retention obligation.
- Rights of objection and deletion
You can prevent the capture and forwarding of personal data to Google (especially your IP address) and the processing of this data by Google, by disabling the running of script code in your browser or enabling your browser’s “Do Not Track” setting. You can also prevent the capture of the data generated by the Google cookie and relating to your use of the website (including your IP address) by Google and the processing of this data by Google by downloading and installing the browser plug-in available via the following link (http://tools.google.com/dlpage/gaoptout?hl=de). You can view Google’s security and Privacy Policy at: https://policies.google.com/privacy?hl=de
INTEGRATION OF EXTERNAL WEB SERVICES AND PROCESSING OF DATA OUTSIDE THE EU
We use active content from external providers, so-called web services, on our website. When you visit our website, these external providers may possibly obtain personal information about your visit to our website. This data may possibly be processed outside the EU. You can prevent this by installing an appropriate browser plug-in or disabling the running of scripts in your browser. This can restrict the functions available to you on the websites you are visiting.
We use the following external web services:
CloudFlare
We have uploaded a web service provided by CloudFlare, Inc., 101 Townsend St, 94107 San Francisco, USA (hereinafter referred to as: CloudFlare) to our website. We use this data to ensure the full functionality of our website. In this context, your browser may transmit personal data to CloudFlare. Section 6 para. 1(f) GDPR provides the legal basis for data processing. Our legitimate interest is the fault-free functionality of the website. CloudFlare Inc. has self-certified under the EU-US Privacy Shield Agreement (cf. https://www.privacyshield.gov/list). Below is a link to the EU’s Implementing Decision governing the EU-US Privacy Shield: http://data.europa.eu/eli/dec_impl/2016/1250/oj
Your data will be deleted as soon as the purpose for which it was captured has been fulfilled. More information on the handling of the transmitted data is available in the CloudFlare Privacy Policy: https://www.cloudflare.com/privacypolicy/
You can prevent the capture and processing of your data by CloudFlare by disabling the running of script code in your browser or installing a script blocker.
Doubleclick
We have uploaded a web service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as: Doubleclick) to our website. We use this data to ensure the full functionality of our website. In this context, your browser may transmit personal data to Doubleclick. Section 6 para. 1(f) GDPR provides the legal basis for data processing. Our legitimate interest is the fault-free functionality of the website. Your data will be deleted as soon as the purpose for which it was captured has been fulfilled. More information on the handling of the transmitted data is available in the Doubleclick Privacy Policy:
https://policies.google.com/privacy
You can prevent the capture and processing of your data by CloudFlare by disabling the running of script code in your browser or installing a script blocker in your browser.
Google
We have uploaded a web service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as: Google) to our website. We use this data to ensure the full functionality of our website. In this context, your browser may transmit personal data to Google. Section 6 para. 1(f) GDPR provides the legal basis for data processing. Our legitimate interest is the fault-free functionality of the website. Your data will be deleted as soon as the purpose for which it was captured has been fulfilled. More information on the handling of the transmitted data is available in the Google Privacy Policy: https://policies.google.com/privacy
You can prevent the capture and processing of your data by Google by disabling the running of script code in your browser or installing a script blocker in your browser.
Google Fonts
We have uploaded a web service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as: Google Fonts) to our website. We use this data to ensure the full functionality of our website. In this context, your browser may transmit personal data to Google Fonts. Section 6 para. 1(f) GDPR provides the legal basis for data processing. The legitimate interest is the fault-free functionality of the website. Your data will be deleted as soon as the purpose for which it was captured has been fulfilled. More information on the handling of the transmitted data is available in the Google Fonts Privacy Policy:
https://policies.google.com/privacy
You can prevent the capture and processing of your data by Google Fonts by disabling the running of script code in your browser or installing a script blocker in your browser.
Google APIS
We have uploaded a web service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as: Google APIS) to our website. We use this data to ensure the full functionality of our website. In this context, your browser may transmit personal data to Google APIS. Section 6 para. 1(f) GDPR provides the legal basis for data processing. Our legitimate interest is the fault-free functionality of the website. Your data will be deleted as soon as the purpose for which it was captured has been fulfilled. More information on the handling of the transmitted data is available to read in the Google APIS Privacy Policy:
https://policies.google.com/privacy
You can prevent the capture and processing of your data by Google APIS by disabling the running of script code in your browser or installing a script blocker in your browser.
Gstatic
We have uploaded a web service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as: Gstatic) to our website. We use this data to ensure the full functionality of our website. In this context, your browser may transmit personal data to Gstatic. Section 6 para. 1(f) GDPR provides the legal basis for data processing. Our legitimate interest is the fault-free functionality of the website. Your data will be deleted as soon as the purpose for which it was captured has been fulfilled. More information on the handling of the transmitted data is available in the Gstatic Privacy Policy: https://policies.google.com/privacy
You can prevent the capture and processing of your data by Gstatic by disabling the running of script code in your browser or installing a script blocker in your browser.
Youtube
We have uploaded a web service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as: Youtube) to our website. We use this data to ensure the full functionality of our website. In this context, your browser may transmit personal data to Youtube. Section 6 para. 1(f) GDPR provides the legal basis for data processing. Our legitimate interest is the fault-free functionality of the website. Your data will be deleted as soon as the purpose for which it was captured has been fulfilled. More information on the handling of the transmitted data is available in the Youtube Privacy Policy:
https://policies.google.com/privacy
You can prevent the capture and processing of your data by Youtube by disabling the running of script code in your browser or installing a script blocker in your browser.
cookiebot.com
We have uploaded a web service provided by Cybot A/S, Havnegade 39, 1058 Copenhagen, Denmark (hereinafter referred to as: cookiebot.com) to our website. We use this data to ensure the full functionality of our website. In this context, your browser may transmit personal data to cookiebot.com. Section 6 para. 1(f) GDPR provides the legal basis for data processing. Our legitimate interest is the fault-free functionality of the website. Your data will be deleted as soon as the purpose for which it was captured has been fulfilled. More information on the handling of the transmitted data is available to read in the cookiebot.com Privacy Policy:
https://www.cookiebot.com/de/privacy-policy/
You can prevent the capture and processing of your data by cookiebot.com by disabling the running of script code in your browser or installing a script blocker in your browser.
Google reCaptcha
We have uploaded a web service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as: Google reCaptcha) to our website. We use this data to ensure the full functionality of our website. In this context, your browser may transmit personal data to Google reCaptcha. Section 6 para. 1(f) GDPR provides the legal basis for data processing. Our legitimate interest is the fault-free functionality of the website. Your data will be deleted as soon as the purpose for which it was captured has been fulfilled. More information on the handling of the transmitted data is available to read in the Google reCaptcha Privacy Policy:
https://policies.google.com/privacy
You can prevent the capture and processing of your data by Google reCaptcha by disabling the running of script code in your browser or installing a script blocker in your browser.
INFORMATION ON THE USE OF COOKIES
- Scope of the processing of personal data
We integrate and use cookies on different pages to enable certain features of our website and integrate external web services. These so-called “cookies” are small text files, which your browser can store on your access device. These text files contain a characteristic string of characters that uniquely identifies your browser when you return to our website. The process of storing a cookie file is also referred to as “placing a cookie”. Cookies can be placed by the website itself as well as by external web services.
- Legal basis for the processing of personal data
Section 6 para. 1(f) GDPR (legitimate interest) and Section 6 para. 1(a) and Section 9 para. 1(a) GDPR (consent).As a general rule, our legitimate interest with cookies captured due to legitimate interest lies in ensuring the functionality of our website and the services integrated on it (technically necessary cookies). In addition, it is also possible that the cookies improve the website’s ease of use and enable a more individualised response. We have to strike a balance here between your interests and our interests.
Cookie technology only allows us to identify, analyse and track individual website visitors if the visitor to the website has consented to the use of cookies in accordance with Section 6 para. 1(a) GDPR.
- Purpose of data processing
The cookies are placed by our website and/or the external web services to maintain the full functionality of our website, enhance the user experience or, with your consent, pursue the stated purpose. Cookie technology also enables us to identify individual visitors by pseudonyms, e.g. individual or random IDs, so that we can then offer more customised services. Details are listed in the following table.
- Duration of storage
The listed cookies are stored in your browser until they are deleted or, with session cookies, until the session has expired.
- Right of objection, revocation of consent and deletion
You can set up your browser to meet your requirements so that the placement of cookies is generally prevented. You can then decide whether to accept cookies on a case-by-case basis or generally accept all cookies. Cookies can be used for various purposes, for example to identify that your access device is already connected to our website (permanent cookies), or to store your recently viewed content (session cookies). You can withdraw your consent at any time even if you have explicitly given your consent to process your personal data. Please note that the legality of the processing performed on the basis of your consent up to the time of revocation is unaffected by this.
You can view further information about the cookies we use in our Cookie Policy.
DATA SECURITY AND DATA PROTECTION, E-MAIL COMMUNICATION
Your personal data is protected by technical and organisational measures to prevent it being accessible to third parties during capture, storage and processing. We cannot guarantee complete data security of the transmission of unencrypted e-mail communication to our IT systems and so we would recommend the encrypted communication of information with a high level of confidentiality, or alternatively that this information is sent by post.
RIGHT TO INFORMATION AND RECTIFICATION REQUESTS – DELETION AND RESTRICTION OF DATA – REVOCATION OF CONSENT – RIGHT OF OBJECTION
Right to information
You have the right to demand confirmation as to whether we are processing your personal data. If this is the case, you have a right to information about the information stated in Section 15 para. 1 GDPR providing this does not infringe the rights and freedoms of others (cf. Section 15 para. 4 GDPR). We would also be happy to provide you with a copy of the data.
Rectification
According to Section 16 GDPR, you have the right to have inaccurately stored personal data (such as your name, address etc.) rectified at any time. You can also demand at any time completion of the data we have stored about you. The data will be adapted immediately.
Right of deletion
In accordance with Section 17 para. 1 GDPR, you have the right to ask us to delete the personal data we have collected about you if…
- the data is either no longer needed;
- the legal basis for its processing no longer exists on account of the revocation of your consent;
- you have submitted an objection to its processing and there are no legitimate reasons for its processing;
- your data is being unlawfully processed;
- a legal obligation demands this or the data has been captured according to Section 8 para. 1 GDPR.
The right in accordance with Section 17 para. 3 GDPR no longer exists, if…
- processing is required to exercise the right to freedom of expression and information;
- your data has been captured on the basis of a legal obligation;
- processing is required for reasons of public interest;
- the data is needed to establish, exercise or defend legal claims.
Right to restriction of processing
In accordance with Section 18 para. 1 GDPR, in individual cases you have the right to demand the restricted processing of your personal data.
This is the case if…
- the accuracy of your personal data is disputed;
- processing is illegal and you do not agree to its deletion;
- the data is no longer needed for the purpose of processing but the data captured is needed to establish, exercise or define legal claims;
- an objection to its processing has been submitted as per Section 21 para. 1 GDPR and it is still unclear which interests prevail.
Right of revocation
You can revoke your consent at any time even if you have explicitly given your consent to the processing of your personal data (Section 6, para. 1(a) GDPR or Section 9 para. 2(a) GDPR). Please note that the legality of the processing performed on the basis of your consent up to the time of revocation is unaffected by this.
Right of objection
In accordance with Section 21 GDPR, you have the right at any time to submit an objection against the processing of personal data relating to you, which was captured on the basis of Section 6 para. 1(f) (within the context of a legitimate interest). You only have this right if special circumstances oppose the storage and processing of your data.
How do i exercise my rights?
You can exercise your rights at any time by getting in touch with the contacts below:
Paul Wiegand GmbH
Eschengrund 5, D-36124 Eichenzell-Kerzell, Germany
E-mail: info@paulwiegand.de
Tel.: +49 (0) 6659 / 9862 – 0
Fax: +49 (0) 6659 / 9862 – 150
RIGHT TO DATA PORTABILITY
In accordance with Section 20 GDPR, you have the right to obtain the personal data relating to you. We will provide the data in a structured, usual and machine-readable format. We can either send the data to you or to a responsible person you have designated.
On request, we would be pleased to provide you with the following data in accordance with Section 20 para. 1 GDPR:
- data captured on the basis of explicit consent as per Section 6 para. 1(a) GDPR or Section 9 para. 2(a) GDPR;
- data that we have received from you in accordance with Section 6 para. 1(b) GDPR within the framework of existing contracts;
- data that has been processed within an automated process.
We will transmit the personal data directly to a responsible person you have requested providing that this is technically feasible. Please note that we may not transmit data that infringes on the freedoms and rights of others in accordance with Section 20 para. 4 GDPR.
RIGHT TO LODGE A COMPLAINT WITH A SUPERVISORY AUTHORITY AS PER SECTION 77 PARA. 1 GDPR
If you suspect that your data is being processed unlawfully on our site, you can, of course, initiate a judicial clarification of the issue at any time. You also have recourse to all other legal options. Regardless of this, Section 77 para. 1 GDPR grants you the right to contact a supervisory authority. The right of appeal under Section 77 GDPR is available in the EU Member State of your place of residence, place of work and/or the site of the alleged infringement, i.e. you can select the supervisory authority to contact from the aforementioned places. The supervisory authority to whom the complaint has been lodged will then notify you about the status of your appeal and the results of your submission, including the possibility of a judicial remedy in compliance with Section 78 GDPR.
Date: 13.01.2020