PREFACE TO DATA PROTECTION

Thank you for visiting our website and for your interest in our company. We take the protection of your personal data very seriously and are committed to protecting your privacy and treating your data confidentially.

By means of this data protection declaration, our company would like to inform the public about the type, scope and purpose of the personal data collected, used and processed by us. Furthermore, by means of this data protection declaration, data subjects are informed about the rights to which they are entitled.

As the controller, our enterprise has implemented numerous technical and organizational measures to ensure the most complete protection of personal data processed through this website.

Nevertheless, Internet-based data transmissions can generally have security gaps (e.g. when communicating by e-mail), so that absolute protection cannot be guaranteed. For this reason, every data subject is free to transmit personal data to us by alternative means, for example by telephone.

1. NAME AND ADDRESS OF THE RESPONSIBLE PERSON

The responsible party within the meaning of the Basic Data Protection Regulation and other national data protection laws of the member states as well as other data protection regulations is:

Wanner Technik GmbH
Alte Heerstraße 5b
97877 Wertheim
Germany

E-mail: info@wanner-technik.de
Website: wanner-technik.de

2. SCOPE OF THE PROCESSING OF PERSONAL DATA

The use of our website is generally possible without any indication of personal data. However, if a data subject wants to use special services of our enterprise via our website, processing of personal data could become necessary.

If processing of personal data is necessary and if there is no legal basis for such processing, we will generally obtain the consent of the data subject.

We also process personal data in the course of our daily business activities. These are communicated to us through inquiries and orders both by telephone, e-mail and at our trade fairs and are stored for the purpose of the (pre-)contractual task as long as this is necessary for the fulfillment of the tasks and the legal requirements.

The processing of personal data, such as the name, address, e-mail address, or telephone number of a data subject shall always be in line with the German Data Protection Regulation (Datenschutzgrundverordnung – DSGVO), other data protection regulations, and the country-specific data protection provisions applicable to our enterprise.

3. LEGAL BASIS FOR THE PROCESSING OF PERSONAL DATA.

Insofar as we obtain the consent of the data subject for processing operations involving personal data, Art. 6 (1) a DSGVO serves as the legal basis.

When processing personal data that is necessary for the performance of a contract to which the data subject is a party, Art. 6 (1) lit. b DSGVO serves as the legal basis. This also applies to processing operations that are necessary for the performance of pre-contractual measures.

Insofar as processing of personal data is necessary for the fulfillment of a legal obligation that we have to fulfill, Art. 6 para.1 lit. c DSGVO serves as the legal basis.

In the event that vital interests of the data subject or another natural person make processing of personal data necessary, Art. 6 para.1 lit. d DSGVO serves as the legal basis.

If the processing is necessary to protect a legitimate interest of our company or a third party and the interests, fundamental rights and freedoms of the data subject do not override the first-mentioned interest, Art. 6 para.1 lit. f DSGVO serves as the legal basis for the processing.

4. DELETION OF DATA AND STORAGE PERIOD

The personal data of the data subject will be deleted and blocked as soon as the purpose of storage ceases to apply. Storage may take place beyond this if this has been provided for by the European or national legislator in Union regulations, laws or other provisions to which the responsible party is subject. Data will also be blocked and deleted if a storage period prescribed by the aforementioned norms expires, unless there is a need for further storage of the data for the conclusion or performance of a contract.

5. PROVISION OF THE WEBSITE AND CREATION OF LOG FILES

Each time our website is accessed, the provider of our website automatically collects and stores a series of general data and information that your browser automatically transmits in so-called log files.

The server automatically logs:

  • information about the browser and version used
  • the operating system of the user
  • the IP address of the user
  • date and time of the call

This data is not stored in our system but on the server of our provider. We have access to the stored log files and these are evaluated at regular intervals and statistics are created from them. Incidentally, these files are then deleted, unless this is prevented by legal storage obligations.

This information is required to provide law enforcement authorities with the information necessary for prosecution in the event of a cyber attack.

6. USE OF COOKIES

Our internet pages partly use so-called cookies. Cookies are text files that are stored in the Internet browser or by the Internet browser on the user’s computer system.

stored on the user’s computer system.

Numerous Internet pages and servers use cookies. Many cookies contain a so-called cookie ID. A cookie ID is a unique identifier of the cookie. It consists of a string of characters by which Internet pages and servers can be assigned to the specific Internet browser in which the cookie was stored. This enables the visited Internet pages and servers to distinguish the individual browser of the data subject from other Internet browsers that contain other cookies. A specific Internet browser can be recognized and identified by the unique cookie ID.

Cookies enable us to recognize the users of our website. The purpose of this recognition is to make it easier for users to use our website.

So-called “session cookies” are predominantly used on our site. They are automatically deleted after the end of your visit.  Other cookies remain stored on your terminal device until you delete them.

We do not use cookies that enable an analysis of the user’s surfing behavior.

Cookies are stored on the user’s computer and transmitted from it to our website. Therefore, you as a user also have full control over the use of cookies.

By changing the settings in your Internet browser, you can be informed about the setting of cookies and allow cookies only in individual cases, exclude the acceptance of cookies for certain cases or in general, as well as activate the automatic deletion of cookies when closing the browser. If you deactivate the setting of cookies in the Internet browser used, not all functions of our website may be fully usable.

7. CONTACT POSSIBILITY VIA THE WEBSITE

On our website you have the possibility to contact us directly via e-mail. If you contact us by e-mail, the data will only be stored or used by us for the purpose of communication in the context of your contact. This personal data will not be passed on to third parties.

8. SSL ENCRYPTION

Our website uses SSL encryption for security reasons and to protect the transmission of confidential content. You can recognize an encrypted connection by the fact that the address line of the browser changes from http:// to https:// and by the lock symbol in your browser line. If SSL encryption is activated, the data you transmit to us cannot be read by third parties. The data will be stored and used by us only for the purpose of communication in the context of your contact.

9. GOOGLE MAPS

On our website, we use Google Maps to display interactive maps and to create directions. Google Maps is a mapping service provided by Google Inc, 1600 Amphitheatre Parkway, Mountain View, California 94043, USA.

By using Google Maps, information about the use of this website, including your IP address and the start address entered as part of the route planner function, can be transmitted to Google in the USA. When you call up a web page on our website that contains Google Maps, your browser establishes a direct connection with Google’s servers. The map content is transmitted by Google directly to your server and integrated by it into the website. Therefore, we have no influence on the scope of the data collected by Google in this way. According to our knowledge, this is at least the following data:

  • Date and time of the visit to the website in question
  • Internet address or URL of the website accessed
  • IP address
  • Start address entered in the context of route planning

We have no influence on the further processing and use of the data by Google and can therefore accept no responsibility for this.

If you do not want Google to collect, process or use data about you via our website, you can deactivate JavaScript in your browser settings.

In this case, however, you will not be able to use the map display.

The purpose and scope of the data collection and the further processing and use of the data by Google, as well as your rights in this regard and setting options for protecting your privacy, can be found in Google’s privacy policy.

By using our website, you consent to the collection, processing and use of data about you by Google Maps in the manner and for the purposes set out above.

Insofar as you have given your consent, this website uses Google Analytics, a web analytics service provided by Google Ireland Limited (“Google”). The use includes the operating mode “Universal Analytics”. This makes it possible to assign data, sessions and interactions across multiple devices to a pseudonymous user ID and thus analyze the activities of a user across devices.

Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. In the event that IP anonymization is activated on this website, however, your IP address will be truncated beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. We would like to point out that on this website Google Analytics has been extended by IP anonymization to ensure anonymized collection of IP addresses (so-called IP masking). The IP address transmitted by your browser as part of Google Analytics will not be merged with other data from Google. For more information on terms of use and data protection, please visit https://www.google.com/analytics/terms/de.html or https://policies.google.com/?hl=de.

Purposes of processing
On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator.

Legal basis
The legal basis for the use of Google Analytics is your consent pursuant to Art. 6 para. 1 p.1 lit. a DSGVO.

Recipients / categories of recipients
The recipient of the collected data is Google.

Transfer to third countries
Personal data is transferred to the USA under the EU-US Privacy Shield based on the adequacy decision of the European Commission. You can access the certificate here.

Duration of data storage
The data sent by us and linked to cookies, user IDs (e.g. user ID) or advertising IDs are automatically deleted after 14 months. Data whose retention period has been reached is automatically deleted once a month.

Data subject rights
You can revoke your consent at any time with effect for the future by preventing the storage of cookies through a corresponding setting of your browser software; however, we would like to point out that in this case you may not be able to use all functions of this website to their full extent.

You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser add-on. Opt-out cookies prevent the future collection of your data when visiting this website. To prevent collection by Universal Analytics across different devices, you must perform the opt-out on all systems used. If you click here, the opt-out cookie will be set: Disable Google Analytics

10. PRIVACY POLICY ON THE USE AND APPLICATION OF YOUTUBE

Our website uses plug-ins from the YouTube site operated by Google.

YouTube is an Internet video portal that allows video publishers to post video clips free of charge and other users to view, rate and comment on them, also free of charge. YouTube allows the publication of all types of videos, which is why complete film and TV shows, but also music videos, trailers or videos made by users themselves can be accessed via the Internet portal.

The operating company of YouTube is YouTube, LLC., 901 Cherry Ave, San Bruno, CA 94066, USA. YouTube, LLC. is a subsidiary of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

By calling up one of the individual pages of our website on which a YouTube component has been integrated (YouTube video), the Internet browser on the user’s information technology system is automatically caused by the respective YouTube component to download a representation of the corresponding YouTube component from YouTube. Further information on YouTube can be found at www.youtube.com/yt/about/de/. Within the scope of this technical procedure, YouTube and Google receive knowledge of which specific subpage of our website is visited by the user.

If the user is logged in to YouTube at the same time, YouTube recognizes which specific sub-page is visited when a sub-page containing a YouTube video is called up.

This information is collected by YouTube and Google and assigned to the respective YouTube account of the user.

YouTube and Google always contain information via the YouTube component that our website has been visited if the user is logged into YouTube at the same time as calling up our website; this takes place regardless of whether the user clicks on a YouTube video or not.

If you do not wish such transmission, you can prevent this by logging out of your YouTube account before visiting our website.

The privacy policy published by YouTube, which can be accessed at www.google.de/intl/de/policies/privacy/, provides information about the collection, processing and use of personal data by YouTube and Google.

Clicking on the YouTube plug-in on our website is only possible if you expressly confirm this.

11. RIGHTS OF THE DATA SUBJECT

In accordance with the GDPR, we hereby make you aware of your rights. You have the following rights:

a. Right to confirmation

Every data subject has the right granted by the European Directive and Regulation to obtain confirmation from the controller as to whether the personal data concerned are being processed. If a data subject wishes to exercise this right of confirmation, he or she may, at any time, contact any employee of the controller.

b. Right of information of the data subject

The data subject has the right to obtain from the controller of our company, free of charge, information about the personal data stored about him or her and a copy of this information. Furthermore, you are entitled to information about the following:

  • the purposes of processing
  • the categories of personal data processed
  • the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular in the case of recipients in third countries or international organizations
  • if possible, the planned duration for which the personal data will be stored or, if this is not possible, the criteria for determining this duration
    the existence of the right to obtain the rectification or erasure of personal data concerning him or her, or the restriction of processing by the controller, or the right to object to such processing
  • the existence of a right of appeal to a supervisory authority
  • if the personal data are not collected from a data subject: Any available information about the origin of the data
  • the existence of automated decision-making, including profiling, pursuant to Article 22(1) and (4) of the GDPR and, at least in these cases, meaningful information about the logic involved and the scope and intended effects of such processing for the data subject.

Furthermore, the data subject shall have the right to obtain information as to whether personal data have been transferred to a third country or an international organization. If this is the case, the data subject also has the right to obtain information about the appropriate safeguards in connection with the transfer.

The controller shall provide a copy of the personal data that are the subject of the processing. For any additional copies requested by the data subject, the controller may charge a reasonable fee based on the administrative costs. If the Data Subject makes the request electronically, the information shall be provided in a commonly used electronic format, unless otherwise specified by the Data Subject. The right to receive a copy shall not affect the rights and freedoms of other persons.

c.  Right to rectification

The data subject has the right to demand that we correct any inaccurate personal data concerning him or her without undue delay. Taking into account the purposes of the processing, the data subject has the right to request the completion of incomplete personal data-also by means of a supplementary declaration.

d. Right to erasure (“right to be forgotten”).

The data subject has the right to request that we delete personal data relating to him or her without undue delay. We are also obliged to delete personal data without delay if one of the following reasons applies:

  • the personal data are no longer necessary for the purposes for which they were collected or otherwise processed
  • the data subject revokes the consent on which the processing was based pursuant to Article 6(1)(a) DSGVO or Article 9(2)(a) DSGVO and there is no other legal basis for the processing
  • the data subject objects to the processing pursuant to Article 21(1) DSGVO and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing pursuant to Article 21(2) DSGVO
  • the personal data have been processed unlawfully
  • erasure of the personal data is necessary for compliance with a legal obligation under Union or Member State law to which the controller is subject
  • the personal data have been collected in relation to information society services offered pursuant to Article 8(1) of the GDPR.

If the controller has made the personal data public and is obliged to erase it pursuant to paragraph 1, it shall take reasonable steps, including technical measures, having regard to the available technology and the cost of implementation, to inform data controllers which process the personal data that a data subject has requested that they erase all links to or copies or replications of that personal data.

Paragraphs 1 and 2 shall not apply to the extent that the processing is necessary

  • for the exercise of the right to freedom of expression and information
  • for compliance with a legal obligation which requires processing under Union or Member State law to which the controller is subject, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller
  • for reasons of public interest in the area of public health pursuant to Article 9 (2) (h) and (i) DSGVO and Article 9 (3) DSGVO;
  • for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes pursuant to Article 89(1) DSGVO insofar as the right referred to in paragraph 1 is likely to render impossible or seriously prejudice the achievement of the purposes of such processing; or
  • for the assertion, exercise or defense of legal claims.

e.  Right to restriction of processing

The data subject has the right to obtain from us the restriction of processing if one of the following conditions is met:

  • the accuracy of the personal data is contested by the data subject for a period enabling the controller to verify the accuracy of the personal data
  • the processing is unlawful and the data subject objects to the erasure of the personal data and requests instead the restriction of the use of the personal data
  • the controller no longer needs the personal data for the purposes of processing, but the data subject needs it for the establishment, exercise or defense of legal claims; or
  • the data subject has objected to the processing pursuant to Article 21(1) of the GDPR for as long as it is not yet clear whether the legitimate grounds of the controller override those of the data subject.

Where processing has been restricted in accordance with paragraph 1, such personal data may be processed, except for storage, only with the consent of the data subject or for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of substantial public interest of the Union or a Member State.

A data subject who has obtained a restriction on processing shall be informed by the controller before the restriction is lifted.

f. Right to data portability

The data subject has the right to receive the personal data concerning him or her that he or she has provided to us in a structured, commonly used, machine-readable format, and he or she has the right to transfer that data to another controller without hindrance from the controller to whom the personal data were provided, provided that

  • the processing is based on consent pursuant to Article 6(1)(a) DSGVO or Article 9(2)(a) DSGVO or on a contract pursuant to Article 6(1)(b) DSGVO and
  • the processing is carried out with the aid of automated procedures.

When exercising the right to data portability pursuant to paragraph 1, the data subject shall have the right to obtain that the personal data be transferred directly from one controller to another controller, where technically feasible. The exercise of the right under paragraph 1 of this Article shall be without prejudice to Article 17 of the GDPR. This right shall not apply to processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

The right under paragraph 2 shall not affect the rights and freedoms of other persons.

g.  Right to object

The data subject has the right to object at any time, on grounds relating to his or her particular situation, to the processing of personal data concerning him or her which is carried out on the basis of Article 6(1)(e) and (f) DSGVO.

We shall no longer process the personal data in the event of an objection, unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or for the assertion, exercise or defense of legal claims.

h. Right to withdraw consent under data protection law.

Any person affected by the processing of personal data has the right, granted by the European Directive and Regulation Maker, to withdraw consent to the processing of personal data at any time.

i. Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with the competent data protection authority at any time. If you wish to exercise your right to lodge a complaint, you may do so with the following authority:

State Commissioner for Data Protection and Freedom of Information in Baden-Württemberg.

Dr. Stefan Brink
P.O. Box 102932
70025 Stuttgart
Tel. 0711-615541-0
poststelle@lfdi.bwl.de

13. DATA PROTECTION FOR APPLICATIONS IN THE APPLICATION PROCESS.

We collect and process the personal data of applicants for the purpose of handling the application process. The processing may also take place electronically. This is particularly the case if an applicant sends corresponding application documents electronically, for example by e-mail. If we conclude an employment contract with the applicant, the transmitted data will be stored for the purpose of processing the employment relationship in compliance with the statutory provisions. If no employment contract is concluded with the applicant, the application documents will be deleted immediately after the rejection decision, provided that no other legitimate interests prevent deletion. Another legitimate interest in this sense is, for example, a duty to provide evidence in proceedings under the General Equal Treatment Act (AGG).

14. DATA SECURITY AND CHANGES TO THE DATA PROTECTION DECLARATION

The transmission of information via the Internet is not completely secure, we can therefore not guarantee the security of data transmitted via the Internet to our website despite the protection of our Internet presence and our other facilities with which data is determined to us by appropriate technical and organizational measures against loss of availability, confidentiality or integrity. In this respect, reference is also made to section 10 of this data protection declaration.

We reserve the right to amend this data protection declaration in part or in full at any time with effect for the future. The current status of our data protection declaration can be viewed on our website.

Menu