Pricavy Policy
Privacy Policy in accordance with the EU GDPR/BDSG
General Data Protection Information
We take the protection of your personal data seriously in accordance with the EU GDPR and the BDSG (EU General Data Protection Regulation / Federal Data Protection Act). We would like to inform you here about what data we collect and how it is used and stored.
If you do not enter any personal data, only technical information relating to your visit will be collected, with the aim of improving our website and its technical functionality. Any other data you may enter is used solely to fulfil a request you have made; the necessity of such data processing thereby fulfils the legal basis for its collection.
All data generated in the process or received by us is managed in accordance with the data protection guidelines: confidentiality, integrity and availability. To this end, we implement all possible technical and organisational data protection measures. All data is subject to deletion rules that comply with national legislation.
Data will only be disclosed to third parties with your consent, or strictly in accordance with the EU General Data Protection Regulation (GDPR) for the purpose of fulfilling a service or contract, in compliance with legal requirements, or where there is a legitimate interest. When disclosing data to subcontractors, we ensure that the same data protection conditions are adhered to. Should data be transferred to third countries outside the EU, we ensure that an equivalent European standard (Privacy Shield) is maintained.
A website can change – and so can the way data is used. We will endeavour to describe or update any future data collection practices here as well. It therefore makes sense to review our privacy policy from time to time.
Technical aspects
The website provider automatically collects and stores information in what are known as server log files. This may include the following data:
browser type/version, operating system used, referrer URL, hostname of the accessing computer, time of the server request, IP addresses
This data cannot be used to identify specific individuals. This data is not combined with other data sources. Our sole purpose in doing so is to ensure that users can connect to and use the website without any problems.
Use of SSL encryption
For security reasons and to protect the transmission of confidential information that you send to us as the website operator, we use what is known as SSL encryption. You can recognise this by the change in the browser’s address bar from http:// to https://, and by the padlock icon. This ensures that the data you send to us cannot be intercepted by third parties.
Use of cookies
When we use cookies, we notify every visitor via a pop-up menu the first time they visit our website to draw their attention to this. At this point, you can decide whether you agree to this.
Cookies are pieces of information that are transmitted from our web server or third-party web servers to users’ web browsers, where they are stored for later retrieval. Cookies may be small files or other forms of data storage. We use cookies to ensure and optimise the use of our online service. If users do not wish cookies to be stored on their computer, they are asked to disable the relevant option in their browser’s settings. Stored cookies can be deleted via the browser’s settings. Disabling cookies may result in functional limitations of this online service.
Contact form, comments section, emails
We collect data via our contact form – where available – specifically your contact details and the nature of your enquiry – in order to provide you with a simple way of getting in touch. The data is sent to us and is used solely for the purpose of dealing with your enquiry. Specifically, this refers to the data visible on the contact form.
Use of Google Analytics
The website may use Google Analytics products on the basis of a legitimate interest in analysing and optimising our online service, in accordance with the EU GDPR/BDSG. Google uses cookies. The information generated by the cookie regarding users’ use of the online service is usually transmitted to a Google server in the USA and stored there.
Google is certified under the Privacy Shield Agreement and guarantees compliance with European data protection law. Further details can be found at www.privacyshield.gov
Google will use this information on our behalf to analyse how users use our online service, to compile reports on activity within this online service, and to provide us with further services relating to the use of this online service and internet usage. In doing so, pseudonymous user profiles may be created from the processed data.
We use Google Analytics to ensure that adverts displayed via Google’s advertising services and those of its partners are shown only to users who have demonstrated an interest in our online offering or who share certain characteristics – such as topics.
We generally only use Google Analytics with IP anonymisation enabled. This means that users’ IP addresses are truncated by Google within Member States of the European Union or in other signatory states to the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and truncated there.
The IP address transmitted by the user’s browser is not combined with any other data held by Google. Users can prevent the storage of cookies by adjusting the settings in their browser software; users can also prevent Google from collecting the data generated by the cookie and relating to their use of the online service, as well as prevent Google from processing this data, by downloading and installing the browser plug-in available via the following link: Google Analytics Opt-Out.
For further information on Google’s use of data, as well as options for adjusting settings and opting out, please visit Google’s website: www.google.com
Use of Google Fonts and reCaptcha
This page may use so-called web fonts, provided by Google, to ensure consistent font display. When you visit a page, your browser loads the required web fonts into its cache to display text and fonts correctly.
To this end, the browser you are using must establish a connection to Google’s servers. As a result, Google becomes aware that our website has been accessed via your IP address. The use of Google Web Fonts is in the interests of ensuring a consistent and attractive presentation of our online content. This constitutes a legitimate interest under the GDPR. If your browser does not support Web Fonts, a standard font from your computer will be used.
We use Google reCAPTCHA on our websites.
reCAPTCHA is used to verify whether data entered on our websites (e.g. in a contact form) is being entered by a human or by an automated programme. To do this, reCAPTCHA analyses the website visitor’s behaviour based on various characteristics. This analysis begins automatically as soon as the website visitor accesses the website. For the purposes of this analysis, reCAPTCHA evaluates various pieces of information (e.g. IP address, the length of time the visitor spends on the website, or the user’s mouse movements). The data collected during the analysis is forwarded to Google.
Data processing is carried out in accordance with the EU GDPR, as we have a legitimate interest in protecting our websites from malicious automated surveillance and spam.
Further information is available on Google: www.google.com
Final provisions and the right to access, rectification and erasure: Users’ rights
All users have the right to request, free of charge, information about the personal data we hold.
In addition, every user has the right to have their personal data rectified, erased or have its processing restricted in accordance with the law, and the right to lodge a complaint with the relevant supervisory authority in the event of any unlawful processing. Every user also has the right to withdraw any consent they have given.
Competent supervisory authority:
State Commissioner for Data Protection and Freedom of Information, North Rhine-Westphalia
www.ldi.nrw.de
Deletion of data
In accordance with the guiding principle of data protection – that data should only be stored for as long as there is a specific purpose for doing so – such data will be deleted unless there is a statutory retention obligation or a legitimate interest under the EU GDPR. In the latter case, the data will, where possible, be blocked from further processing.
Right to object
Any user may, at any time and in accordance with the law, object to the future processing of their personal data.
To ensure that you can contact us as effectively as possible regarding data protection matters, a Data Protection Officer monitors our procedures in accordance with the EU GDPR and the BDSG.
Contact us here via: it@kdpumpen.de
