How we ensure that your data is handled confidentially within our company?
1. Purpose of the data collection
Generally you can use our website (https://www.sikoplast.de) without providing any personal data. However, if you wish to use a service via our website, we may need some personal data. If the processing of personal data is required, e.g. for an enquiry, a booking or an order, we generally request your consent to process your data in accordance with point (a) of Article 6(1) of the GDPR.
Alternatively, you can contact us by phone. We will always process your data in accordance with the GDPR. Our legal basis for data processing is Article 6 of the GDPR. The legitimate interest of the controller arises from the purposes stated above.
We do not use your data for advertising, market or opinion research, or to create user profiles. Furthermore, we do not share your data with third parties.
2. Collection of general data (Logfiles)
When you visit our website, information is automatically sent to the server of our website. This information is stored temporarily in a so-called log file. The following information is collected, without any action on your part, and stored until it is automatically deleted:
• The Internet Protocol address (IP address) of the computer accessing the website
• Date and time of access
• Name and URL (Uniform Resource Locator) of the accessed file
• The previously visited web page (so-called referer)
• The browser and, where applicable, the operating system of your computer
• The name of your Internet service provider
• Any other similar data and information used to protect our IT systems against threats in the event of an attack
We process the specified data for the following purposes:
• To ensure that the connection to the website is established smoothly
• To ensure that our website is easy to use
• To evaluate the system security and dependability
• For further administrative purposes
The legal basis for this type of data processing is determined by Article 6(1) of the GDPR. Our legitimate interest arises from the stated purposes of the data collection. Under no circumstances do we use the collected data to identify you personally.
3. Conent to processing of personal data
Any consent to process your personal data must be voluntarily granted after sufficient information is provided and must be clearly communicated by you, with the option to withdraw this consent (with effect from the date of withdrawal).
4. Sharing of data
We do not share your personal data with third parties for any other purposes than those stated below. We share your personal data with third parties only if:
• You have given your explicit consent for us to do so in accordance with Article 6 of the GDPR
• Sharing your data is required to assert claims in accordance with Article 6 of the GDPR and there is no reason to assume that you have a prevailing legitimate interest in the non-disclosure of your data
• There is a legal obligation to disclose your data in accordance with Article 6 of the GDPR
• It is permitted by law and necessary for the performance of a contractual relationship with you in accordance with Article 6 of the GDPR
5. Rights of the data subject (data subject´s rights)
In accordance with Article 15 of the GDPR, you have the right to obtain information on the personal data concerning you, which we process. In particular, you can obtain information on
• The purposes of the processing
• The categories of personal data concerned
• The categories of recipient to whom the personal data has been or will be disclosed
• The envisaged period for which the personal data will be stored
• The existence of the right to request rectification or erasure of personal data or restriction of processing of personal data concerning the data subject or to object to such processing
• The right to lodge a complaint with a supervisory authority
• Where your personal data was not collected by us, any available information as to their source
• The existence of automated decision-making, including profiling
Furthermore, the data subject has the right of access to information on whether his or her personal data was transferred to a third country or to an international organization. If this is the case, the data subject also has the right to be informed of the appropriate safeguards relating to the transfer.
If a data subject wishes to exercise this right of access, he or she can contact our data protection officer or another employee responsible for the data processing.
6. Right to rectification, Article 16 of the GDPR
The data subject has the right to obtain from the controller without undue delay the rectification of inaccurate personal data concerning him or her. Taking into account the purposes of the processing, the data subject has the right to have incomplete personal data completed, including by means of providing a supplementary statement.
7. Right to erasure (‘right to be forgotten’), Article 17 of the GDPR
The right to obtain the erasure of personal data concerning you, which is stored by us, provided the processing of this data is not necessary to comply with a legal obligation, for reasons of public interest, or to assert, exercise or defend legal claims.
You have the right to erasure if one of the following grounds applies:
• The personal data is no longer necessary in relation to the purposes for which it was collected or otherwise processed.
• The data subject withdraws consent on which the processing is based according to point (a) of Article 6(1), or point (a) of Article 9(2) of the GDPR, and where there is no other legal ground for the processing.
• The data subject objects to the processing pursuant to Article 21(1) of the GDPR and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing pursuant to Article 21(2) of the GDPR.
• The personal data has been unlawfully processed.
• The personal data has to be erased for compliance with a legal obligation in Union or Member State law to which the controller is subject.
• The personal data has been collected in relation to the offer of information society services referred to in Article 8(1) of the GDPR.
8. Right to restriction of processing (Article 18 of the GDPR)
The right to obtain restriction of processing of your personal data, if: the accuracy of the personal data is contested by you; the processing is unlawful, but you oppose the erasure of the personal data; we no longer require the data, but you need it for the establishment, exercise or defense of legal claims; or you have objected to processing pursuant to Article 21 of the GDPR.
9. Right to data portability (Article 20 of the GDPR)
The right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and the right to transmit that data to another controller.
10. Conditions for consent (Article 7(3) of the GDPR)
The data subject has the right to withdraw his or her consent at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal. Prior to giving consent, the data subject shall be informed thereof. It shall be as easy to withdraw as to give consent. If you wish to withdraw consent, an e-mail to info(at)sikoplast.de will suffice.
11. Right to object (Article 21 of the GDPR)
In accordance with Article 21 of the DGPR, you have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you, which is based on legitimate interests in accordance with Article 6(1) of the GDPR. Furthermore, you have the right to object to processing for direct marketing purposes. In the latter case, you have a general right to object, which we will implement without asking you to specify a particular situation. If you wish to exercise your right to object, an e-mail to info(at)sikoplast.de will suffice.
12. Right to lodge a complaint with a supervisory authority (Article 77 of the GDPR)
Without prejudice to any other administrative or judicial remedy, every data subject shall have the right to lodge a complaint with a supervisory authority, in particular in the Member State of his or her habitual residence, place of work or place of the alleged infringement if the data subject considers that the processing of personal data relating to him or her infringes this Regulation.
To do so, you can generally contact the supervisory authority of your habitual residence or place of work.
If a data subject wishes to exercise his or her rights, he or she can contact our data protection officer or another employee responsible for the data processing.
13. Security of processing (Article 32 of the GDPR)
To protect your personal data against unauthorized access or misuse, we have implemented comprehensive technical and organizational measures and safety precautions. Our security procedures are reviewed regularly and modernized in line with technological developments. Our employees are trained with respect to data protection, and they are obliged to maintain confidentiality and safeguard data protection.
Our data protection principles are based on ensuring the ongoing confidentiality, integrity, availability and resilience of processing systems and services.
Furthermore, our employees are trained with respect to data protection, and they are obliged to maintain confidentiality and safeguard data protection.
Every time our website is accessed, data about this process is stored in a log file. This data does not relate to personal information; therefore, we cannot track which user accessed which data. In detail, the following data record is stored for each access:
• Name of the accessed file
• Date and time of access
• Data volume transferred
• Notification whether the access was successful
Furthermore, you have the option to deactivate and manage cookies in the entire browser.
15. The existence of automated decision-making / profiling
As a responsible company we do not employ automated decision-making and profiling.
16. Name and address of the controller (party responsible for data processing)
The controller as defined in the GDPR is:
SIKOPLAST Maschinenbau Heinrich Koch GmbH
Phone: +49 (0) 2241 – 1745-0
Fax: +49 (0) 2241 – 1745-71
17. Competent data protection authority
Die Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen Postfach 20 04 44, 40102 Düsseldorf
Kavalleriestraße 2-4, 40213 Düsseldorf
Phone: 0211 38424 - 0
Fax: 0211 38424 - 10