The responsible person within the meaning of the General Data Protection Regulation and other national data protection laws of the member states as well as other data protection regulations is:
TECLAC Werner GmbH
Managing Director: Niklas Werner, Michael Frohnapfel
Tel.: +49 661 8301-0
Name and address of the data protection officer:
The data protection officer of the responsible person is:
Tel.: +49 661 29 69 80 90
I. General information on data processing
1. Scope of the personal data processing
We generally only collect and use the personal data of our users if this is required for the provision of a functional website as well as of our content and services. The personal data of our users are collected and used regularly only if the user agrees. An exception applies in cases in which a prior consent cannot be obtained for factual reasons and if the processing of the data is permitted according to the legal provisions.
2. Legal basis for the processing of personal data
Insofar as we obtain the data subject's consent for the processing of personal data, art. 6, para. 1, lit. of the EU General Data Protection Regulation (GDPR) serves as the legal basis for the personal data processing.
During the personal data processing required for the performance of a contract to which the data subject is a party, art. 6, para. 1, lit. b of the GDPR serves as the legal basis. This principle also applies to processing operations required to carry out pre-contractual measures.
Insofar as the processing of personal data is required for the fulfilment of a legal duty to which our company is subject, art. 6, para. 1, lit. c of the GDPR serves as the legal basis.
If vital interests of the data subject or another natural person require the processing of personal data, art. 6, para. 1, lit. d of the GDPR serves as the legal basis.
If the processing is required to safeguard the legitimate interests of our company or of a third party and the interests, fundamental rights and freedoms of the data subject do not outweigh the former interest, art. 6, para. 1, lit. f of the GDPR serves as the legal basis for processing.
3. Deletion of data and storage duration
The personal data of the involved person will be deleted or blocked as soon as the purpose of the storage is omitted. In addition, storage can take place if this has been provided for by the European or national legislator in EU regulations, laws or other regulations the responsible person is subject to. The data will also be blocked or deleted if a storage period prescribed by the standards mentioned expires, unless there is a need for further data storage to conclude or perform a contract.
II. Provision of the website and creation of log files
1. Description and scope of the data processing
Each time our website is accessed, our system will automatically collect data and information from the computer system of the accessing computer.
In this context, the following data will be collected:
- Information about the browser type and version used
- The operating system of the user
- The internet service provider of the user
- The IP address of the user
- Date and time of access
- Websites from which the system of the user can reach our website
- Websites which are accessed by the system of the user through our website
The data will also be stored in the log files of our system. Storage of these data together with other personal data of the user will not be carried out.
2. Legal basis for the data processing
The legal basis for the temporary storage of data and the log files is art. 6, para. 1, lit. f GDPR.
3. Purpose of the data processing
The temporary storage of the IP address by the system is required to enable the website to be delivered to the computer of the user. For this purpose, the IP address of the user must remain stored for the duration of the session.
The log files are saved in order to ensure the functionality of the website. In addition, we use the data to optimise the website and ensure the security of our information technology systems. An evaluation of the data for marketing purposes will not be carried out in this context.
Our legitimate interest in data processing according to art. 6, para. 1, lit. f of the GDPR also consists of these purposes.
4. Storage duration
The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. In case of the collection of data to enable provision of the website this is the case if the respective session has been concluded.
In case of the storage of data in the logfiles this will occur after seven days at the latest. Storage beyond this is possible. In this case, the IP addresses of the users are deleted or anonymised, so that it is no longer possible to assign them to the calling client.
5. Opposition and removal options
The collection of the data to make the website available and the storage of the data in log files is essential for the operation of the website. As a consequence, the user has no option for appeal.
a) Description and scope of the data processing
In the cookies, the following data are stored and transmitted:
Current session (ID)
Cookie bar status
The user data collected this way are pseudonymised by using technical precautions. Consequently, it is no longer possible to assign the data to the accessing user. The data are not stored together with the other personal data of the users.
b) Legal basis for the data processing
The legal basis for the processing of personal data using cookies is art. 6, para. 1, lit. f) of the GDPR.
c) Purpose of the data processing
The purpose of using technically necessary cookies consists of the facilitation of the use of websites for users. Some functions of our website cannot be offered without using cookies. For the cookies, it is necessary that the browser is also recognised after a page change.
We require cookies for the following applications:
Display of the website
The user data collected through technically necessary cookies are not used for the creation of user profiles.
Our legitimate interest in the processing of personal data according to art. 6, para. 1, lit. f of the GDPR also consists of these purposes.
e) Duration of storage, opposition and removal options
IV. Contact form and email contact
1. Description and scope of the data processing
On our website there is a contact form available which can be used for electronic contact. If a user makes use of this option, the data entered in the input mask will be submitted to us and then saved. These data are as follows:
Salutation, last name, first name, company, department, street, house number, zip code, city, telephone, fax, email, message
For the processing of the data your consent is obtained as part of the submission process and reference is made to this data protection declaration.
Alternatively, contact is also possible via the email address provided. In this case, the personal data of the user transmitted by e-mail will be stored.
In this context, there is no data transfer to third parties. The data is used exclusively for processing the conversation.
2. Legal basis for the data processing
The legal basis for the data processing is art. 6, para. 1, lit. a of the GDPR, if there is agreement by the user.
The legal basis for the data processing is art. 6, para. 1, lit. f of the GDPR, if the data are sent by email. If the establishment of an email contact aims at concluding a contract, then art. 6, para. 1, lit. b of the GDPR is an additional legal basis for the processing.
3. Purpose of the data processing
The processing of personal data from the input mask serves us only for the contact processing. In case of a contact via email, this is also the necessary legitimate interest in the data processing.
The other personal data processed during the sending process serve to prevent misuse of the contact form and to ensure the security of our information technology systems.
4. Storage duration
The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. The personal data from the contact form of the input form and the data sent by e-mail will be deleted when the respective conversation with the user ends. The conversation is concluded when you can infer from the circumstances that the matter in question has been conclusively clarified.
5. Opposition and removal options
The user can revoke his consent to the personal data processing at any time. If the user contacts us via email, the user can object to the storage of their personal data at any time. In such a case, the conversation cannot be continued.
In this case, all personal data saved during the contact will be deleted.
V. Rights of the involved person
If personal data are processed by you, you are the person concerned in the sense of the GDPR and have the following rights towards the responsible person:
1. Right to information
You can ask the responsible person for confirmation of whether we may process personal data relating to you.
If there is such a processing, you can request the following information from the responsible person:
(1) the purposes for which the personal data are processed;
(2) the categories of the processed personal data;
(3) the recipients or the categories of recipients to whom personal data relating to you have been or will be disclosed;
(4) the planned storage period relating to your personal data or, if specific information is not possible, the criteria for determining the storage period;
(5) the existence of a right to rectification or deletion of the personal data concerning you or of a right to the restriction of processing by the controller or a right to object to such processing;
(6) the existence of a right of appeal to a supervisory authority;
(7) all available information about the origin of the data if the personal data are not collected from the data subject;
(8) the existence of automated decision-making including profiling under article 22 (1) and (4) GDPR and - at least in these cases - detailed information about the logic involved, and the scope and intended impact of such processing on the data subject;
You are entitled to request information as to whether the personal data related to you will be transmitted to a third country or to an international organisation. In this context, you can request to be informed about the adequate guarantees according to art. 46 of the GDPR in connection with the transmission.
2. Right to rectification
You are entitled to correct and/or complete the data of the responsible person if the processed personal data related to you are incorrect or incomplete. The responsible person must make the correction immediately.
3. Right to restriction of processing
Under the following conditions you are entitled to request the restriction of the processing of your personal data:
(1) if you contest the correctness of your personal data for a period of time that enables the responsible person to verify the correctness of the personal data;
(2) the processing is unlawful and you refuse to delete the personal data and instead request the restriction of the use of the personal data;
(3) the controller no longer needs the personal data for the purposes of the processing, but you require them to assert, exercise or defend legal claims; or
(4) if you have lodged an objection to the processing pursuant to art. 21, para. 1 of the GDPR, and it is not certain that the legitimate reasons of the responsible person outweigh your reasons.
If the processing of your personal data has been restricted, these data - apart from their storage - may only be obtained with your consent or for the assertion, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the European Union or of a member state.
If the processing restriction was carried out according to the conditions mentioned above, you will be informed by the responsible person before the annulment of the restriction.
4. Right to deletion
a) Obligation to delete
You can request the data controller to delete your personal data immediately, and the latter is obliged to delete them immediately if one of the following reasons applies:
(1) The personal data related to you are no longer necessary for the purposes for which they were collected or otherwise processed.
(2) You revoke your consent to the processing pursuant to art. 6, para. 1, lit. a or art. 9, para. 2, lit. a of the GDPR and there is no other legal basis for processing.
(3) According to art. 21, para. 1 of the GDPR, you object to the processing and there are no legitimate reasons for such processing, or the data subject objects to the processing according to rights pursuant to art. 21, para. 2 of the GDPR.
(4) Your personal data have been unlawfully processed.
(5) The deletion of personal data is required for the fulfilment of a legal duty under the European Union law or a national law the data controller is subject to.
(6) The personal data related to you were collected in relation to information society services offered pursuant to art. 8, para. 1 of the GDPR.
b) Information to third parties
If the responsible person has published your personal data and if the responsible person is obliged to delete them according to art. 17, para. 1 of the GDPR, then by taking into account the available technology and the implementation costs, appropriate measures, including technical ones, will be implemented to inform those responsible for data processing who process the personal data that you as data subject have requested the deletion of all links to this personal data or copies or replications of the same.
The right to deletion does not exist if the processing is required
(1) to exercise the right to freedom of expression and information;
(2) to fulfil a legal obligation that requires the processing according to the law of the European Union or the member states the responsible person is subject to, or to perform a task that is in the public interest or in the exercise of official authority assigned to the responsible person;
(3) for reasons of public interest in the area of public health according to art. 9, para. 2, lit. h and i and art. 9, para. 3 of the GDPR;
(4) for archiving purposes in the public interest, for scientific or historical research purposes or for statistical purposes according to art. 89, para. 1 of the GDPR, insofar as the right mentioned under section a) is likely to render impossible or seriously impair the achievement of the objectives of this processing, or
(5) to assert, exercise or defend legal claims.
5. Right to be informed
If you have asserted the right to correction, deletion or restriction of processing towards the responsible person, the latter is obliged to inform all recipients to whom the personal data related to you have been disclosed of this correction or deletion of the data or restriction of processing, unless this proves to be impossible or requires a disproportionate effort.
Towards the responsible person you have the right to be informed about these recipients.
6. Right to data portability
You are entitled to receive the personal data provided by you to the responsible person in a structured, common and machine-readable format. In addition, you are entitled to transfer these data to another responsible person without hindrance from this latter to whom the personal data has been transmitted, provided that
(1) the processing is based on consent in accordance with art. 6, para. 1, lit. a of GDPR or with art. 9, para. 2, lit. a of the GDPR or on a contract according to art. 6, para. 1, lit. b of GDPR and
(2) the processing is carried out by using automated processes.
In exercising this right you have the additional right to ensure that the personal data are transferred directly from one responsible person to another, if this is technically feasible. Other people’s freedoms and rights must not be affected by this.
The right to data portability does not apply to the personal data processing required for the performance of a task that is in the public interest or in the exercise of official authority transferred to the responsible person.
7. Right to objection
For reasons arising from your particular situation, you have the right, at any time, to object against the processing of personal data related to you which was carried out pursuant to art. 6 para. 1 lit. e or f GDPR. This also applies to profiling based on these provisions.
The responsible person shall no longer process your personal data, unless the person can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or the processing is carried out for the purposes of asserting, exercising or defending legal claims.
If personal data is processed in order to operate direct mail activities, you have the right to object at any time against the processing of your personal data for the purpose of such advertising; this also applies to profiling, insofar as it is associated with such direct mail activities.
If you oppose processing for direct marketing purposes, your personal data will no longer be processed for these purposes.
Regardless of Directive 2002/58/EC, you have the opportunity of exercising your right to object in connection with the use of services of the information society by using automated procedures that use technical specifications.
8. Right to withdrawal of the data protection declaration of consent
You have the right to revoke your declaration of consent under the data protection law at any time. The revocation of the consent does not affect the legality of the processing carried out on the basis of the consent given, until the revocation.
9. Automated decision in individual cases including profiling
You are entitled to not be subjected to a decision based solely on automated processing - including profiling - which has a legal effect on you or limits you significantly in a similar way. This principle does not apply if the decision
(1) is required for the conclusion or performance of a contract between you and the responsible person,
(2) is permissible based on legal provisions of the European Union or the member states the responsible person is subject to and if the said legal provisions include appropriate measures to safeguard your rights and freedoms as well as your legitimate interests or
(3) is made with your express consent.
However, these decisions may not be based on special categories of personal data according to art. 9, para. 1 of the GDPR, unless art. 9, para. 2, lit. a or g is applied and appropriate measures have been taken for the protection of your rights and freedoms and your legitimate interests.
Regarding the cases mentioned under (1) and (3), the responsible person takes adequate measures to safeguard your rights and freedoms as well as your legitimate interests, including at least the right to obtain the intervention of a person on the part of the responsible person, to express your own position and to oppose the decision.
10. Right to lodge a complaint with a supervisory authority
Without prejudice to any other administrative or judicial remedy, you are entitled to complain to a supervisory authority, in particular to that in the member state of your residence, place of work or place of alleged infringement, if you think that the processing of personal data related to you violates the GDPR.
The supervisory authority the complaint was lodged to has to inform the complainant of the status and results of the complaint, including the option of a judicial remedy according to art. 78 of the GDPR.
VI. SSL encryption
For security reasons and for the protection of the transmission of confidential contents, such as the requests you send us as the site operator, this site uses SSL encryption. You can recognize an encrypted connection by the fact that the browser address line changes from "http://" to "https://" and by the lock symbol in your browser line.
With the SSL encryption activated, the data transmitted by you cannot be read by third parties.
VII. Use of Google Maps
This site uses the Google Maps map service through an API. The provider of this service is Google Inc., 1600 Amphitheater Parkway Mountain View, CA 94043, USA. In order to use the functions of Google Maps, it is necessary to save your IP address. This information is usually transferred to a Google server in the USA and stored there. The provider of this site has no influence on this data transmission.
For more information on handling user data in Google's data protection declaration you can visit the following website: https://www.google.de/intl/de/policies/privacy/