General Information on Data Processing
Generally, we only collect and use your personal data to the extent necessary to provide our services. Apart from that we only process that personal data which you actively provide to us, e.g. within the course of a registration, by filling in forms, by sending e-mails or other inquiries to us, by subscribing to newsletters or by ordering services.
We solely use the personal information provided by you for the performance of a contract or the processing of your inquiries. For other purposes, such as e.g. consulting, advertising and market analysis, we only use your personal data after having obtained your prior consent or if we are entitled or obliged to do so pursuant to applicable law.
Provision of the Website and Creation of Logfiles
When using the Website, we only collect the personal data that your browser transmits to our server. When you visit the Website, we collect the following information that is technically necessary for us to enable you to visit the Website and to ensure stability and security (the legal basis is Art. 6 para. 1 sent. 1 lit. f GDPR):
• The Website you last visited
• Date and time of retrieval
• Name of the Internet access provider (ISP)
• Browser type/version and language
• the operating system used
• Access status/http status code
• the amount of data transferred in each case
• Device (PC, Tablet PC or Smartphone)
• pages visited by you incl. length of stay
We evaluate this data for statistical purposes only. A person-related evaluation does not take place. Temporary storage of your IP address is necessary to enable delivery of the Website to your end device. For this, the IP address of the user must remain stored for the duration of the session. The data is stored in log files to ensure the functionality of the Website. In addition, the data serves us to optimize the Website and to ensure the security of our information technology systems. These purposes also constitute our legitimate interests for the data processing pursuant to Art. 6 para. 1 lit. f GDPR.
The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. In the case of the collection for the provision of the Website, this is the case when the respective session has ended. If the data is stored in log files, it will be deleted by 90 days at the latest. Further storage is possible, however, in this case the IP addresses are deleted or alienated, so that an assignment of the calling client is no longer possible.
Data Security
We deploy technical and organizational security measures to protect your personal data from being manipulated unintentionally or intentionally, lost, destroyed or accessed by unauthorized persons. Our technical and organizational measures are continuously reviewed and revised in line with the latest state
Your Rights
To the extent we process any personal data related to you, you are entitled to the following rights:
Right to Information
You have the right to request a confirmation from us whether we process personal data related to you.
If this is the case, you are entitled to request the following information from us:
a. the purposes of the processing;
b. the categories of personal data that are processed;
c. the recipients or categories of recipients to whom the personal data has been disclosed or is still being disclosed;
d. where possible, the intended period for which the personal data is stored or, if not possible, the criteria for the establishment of this period;
e. the existence of the right to rectify or delete personal data of the data subject or the right to limit the processing by the controller or a right of objection against this processing;
f. the existence of a right of repeal with a regulatory authority;
g. where the personal data are not collected from the data subject, any available information as to their source.
Furthermore, you are entitled to a right of access to information about whether your personal data have been sent to a third country or an international organisation. Insofar as this is the case, you also have the right to receive information about the appropriate guarantees in connection to the transfer of the data pursuant to Art. 46 GDPR.
Right to Rectify
You have the right to request from us the immediate rectification of any inaccurate personal data as well as the completion of any incomplete personal data relating to you. In this case, we will immediately rectify your personal data.
Right to Limit the Processing
You have the right to request from us the limitation of your personal data if one of the following requirements is given:
a. You have challenged the accuracy of your personal data, and this is for a period that enables the us to verify the accuracy of your personal data.
b. The processing is illegal and you decline the deletion of your personal data and instead request limiting its use.
c. We no longer require your personal data for the purposes of the processing, you, however, require the data for the assertion, exercise or defence of legal claims, or
d. You have filed an objection to the processing in accordance to article 21 para. 1 GDPR, and it is still undetermined whether our legitimate reasons as controller outweigh yours as the data subject.
Where processing has been restricted, such personal data shall, with the exception of storage, only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.
If the processing of your personal data has been restricted in accordance with the above requirements, we will immediately notify you before the restriction is lifted.
Right to Deletion
You have the right to request from us that your personal data is promptly deleted provided one of the following reasons pertains and if the processing is not necessary:
a. Your personal data is recorded for such purposes or processed in another manner for which it is no longer necessary.
b. In case the processing of the personal data is based on Art. 6 para. 1 lit. a GDPR, you revoke your consent on which the processing is based.
c. You file an objection against the processing in accordance with article 21 section 1 of the GDPR, and there are no predominant legitimate reasons for the processing, or you file an objection against the processing in accordance with article 21 section 2 of the GDPR.
d. Your personal data was unlawfully processed.
e. The deletion of your personal data is necessary for the fulfilment of a legal obligation .
Exceptions
A right to deletion does not exist, if the processing is necessary
a. for exercising the right of freedom of expression and information;
b. for compliance with a legal obligation which requires processing by law or for the performance of a task carried out in the public interest or in the exercise ;
c. for the establishment, exercise or defence of legal claims.
Right of appeal to a supervisory authority
Without prejudice to any other remedy, you have the right of appeal to a competent supervisory authority if you believe that the processing of your personal data violates applicable data protection law.
Right to Revocation of consent
If and to the extent the processing of your personal data is based on your consent pursuant to Art. 6 para. 1 lit. a of the GDPR, you may revoke your granted consent at any time with effect for the future by sending an email to team@ruttmann.de.
Contact data of the Data Protection Officer
All inquiries, requests and declarations as to the use of personal data can be send to our data protection officer via e-mail to
team@ruttmann.de
or by post to
Klaus Ruttmann GmbH
Sales and Marketing
Schnackenburgallee 179
22525 Hamburg
May 2018
****
Imprint