Privacy policy

Angaben gemäß §5 TMG

Längle Glas-System GmbH
Hauptstrasse 3
A-6840 Götzis

T:  +43 (0) 5523 53630 20
E:  office-gbs@langleglas.com
W:  www.langleglas.com

Company register number: FN 510802 f
Competent court: Regional Court Feldkirch
UID-Nr.:  ATU74258947

glasmass.com GmbH
Glänternstrasse 1
CH-8864 Reichenburg

T:  +41 (0) 76 504 35 67
E:  info@glasmass.com
W:  www.glasmass.com

UID-Nr.:  CHE-484.676.688

Platform of the EU for Online Dispute Resolution

https://ec.europa.eu/consumers/odr/

We are neither willing nor obliged to participate in a dispute resolution procedure before a consumer arbitration board.

In the following declaration, we would like to explain to you which data we collect, process, and use, when, and for what purpose. We also want to explain how our website operates and how the protection of your personal data is ensured.

The use of our website is generally possible without providing any personal data. If a data subject wishes to use special services of our company via our website, the processing of personal data could become necessary. If the processing of personal data is necessary and there is no legal basis for such processing, we generally obtain the consent of the data subject. The processing of personal data, such as the name, address, email address, or telephone number of a data subject, is always carried out in accordance with the General Data Protection Regulation and in compliance with the country-specific data protection regulations applicable to us. Through this privacy policy, our company aims to inform the public about the nature, scope, and purpose of the personal data we collect, use, and process. Furthermore, data subjects are informed of their rights by means of this privacy policy.

As the controller responsible for processing, we have implemented numerous technical and organizational measures to ensure the most complete protection of personal data processed through this website. Nevertheless, internet-based data transmissions can generally have security gaps, so absolute protection cannot be guaranteed. For this reason, every data subject is free to transmit personal data to us via alternative means, such as by telephone.

The following privacy policy applies to the use of our online offer:

www.easy-plan.com (hereinafter “Website”).

Controller/responsible entity

The controller responsible for the collection, processing, and use of your personal data within the meaning of Art. 4 No. 7 GDPR is

Längle Glas-System GmbH
Hauptstrasse 3
A-6840 Götzis

T +43 (0) 5523 53630 20
F +43 (0) 5523 55855
office-gbs@langleglas.com
W www.langleglas.com

Company register number: FN 510802 f Competent court: Regional Court Feldkirch
UID-Nr.: ATU74258947

glasmass.com GmbH
Glänternstrasse 1
CH-8864 Reichenburg

T +1 (0) 76 504 35 67
E info@glasmass.com
W www.glasmass.com

UID-Nr.: CHE-484.676.688

If you wish to object to the collection, processing, or use of your data by us in accordance with these data protection provisions either in general or for specific measures, you can direct your objection to the controller.

You can save and print this privacy policy at any time.

For general questions or issues related to data protection, you can contact us at any time via email at info@easy-plan.com.

For questions regarding data protection, please contact our data protection officer at sicherheit@ksb-management.de.

General purposes of processing

We use personal data for the purpose of operating this website and solely to fulfill our contractual services.

what data we use and why

Hosting

The hosting services we utilize serve to provide the following services: infrastructure and platform services, computing capacity, storage space and database services, security services, and technical maintenance services that we use for the purpose of operating the website.

In this context, we or our hosting provider process inventory data, contact data, content data, contract data, usage data, meta and communication data of customers, interested parties, and visitors of this website based on our legitimate interests in an efficient and secure provision of our website in accordance with Art. 6 para. 1 sentence 1 f) GDPR in conjunction with Art. 28 GDPR.

access data

We collect information about you when you use this website. We automatically collect information about your usage behavior and your interaction with us and register data about your computer or mobile device. We collect, store, and use data about every access to our website (so-called server log files). The access data includes:

Name and URL of the retrieved file
Date and time of retrieval
Transferred data volume
Message about successful retrieval (HTTP response code)
Browser type and browser version
Operating system
Referrer URL (i.e., the previously visited page)
Websites that are accessed by the user’s system via our website
Internet service provider of the user
IP address and the requesting provider

We use this log data without assigning it to your person or otherwise profiling for statistical evaluations for the purpose of operating, security, and optimizing our website, but also for the anonymous recording of the number of visitors on our website (traffic) as well as the extent and nature of the use of our website and services, and for billing purposes, to measure the number of clicks received from cooperation partners. Based on this information, we can provide personalized and location-based content, analyze traffic, troubleshoot and correct errors, and improve our services.

This is also our legitimate interest in accordance with Art. 6 para. 1 sentence 1 f) GDPR.

We reserve the right to retrospectively check the log data if there are concrete indications of a justified suspicion of illegal use. We store IP addresses for a limited period in the log files if this is necessary for security purposes or for the provision of a service or billing of a service, e.g., if you use one of our offers. After the termination of the process order or after receipt of payment, we delete the IP address if it is no longer necessary for security purposes. We also store IP addresses if we have a specific suspicion of a crime in connection with the use of our website. Furthermore, we store the date of your last visit as part of your account (e.g., during registration, login, clicking on links, etc.).

Cookies

We use so-called session cookies to optimize our website. A session cookie is a small text file that is sent by the respective servers when visiting an internet page and is temporarily stored on your hard drive. This file as such contains a so-called session ID with which various requests from your browser can be assigned to the common session. This allows your computer to be recognized when you return to our website. These cookies are deleted after you close your browser. They serve, for example, to use the shopping cart function across several pages.

We also use a small number of persistent cookies (also small text files that are stored on your end device), which remain on your end device and allow us to recognize your browser on your next visit. These cookies are stored on your hard drive and delete themselves after the specified time. Their lifespan ranges from 1 month to 10 years. This allows us to present our offer in a more user-friendly, effective, and secure manner and to show information on the site that is specifically tailored to your interests.

Our legitimate interest in the use of cookies in accordance with Art 6 para. 1 sentence 1 f) GDPR lies in making our website more user-friendly, effective, and secure.

The following data and information are stored in the cookies:

Log-in information
Language settings
Entered search terms
Information about the number of visits to our website and use of individual functions of our online presence

When the cookie is activated, it is assigned an identification number, and an assignment of your personal data to this identification number is not made. Your name, IP address, or similar data that would allow the cookie to be assigned to you are not included in the cookie. Based on the cookie technology, we only receive pseudonymized information, for example, about which pages of our shop were visited, which products were viewed, etc.

You can set your browser to inform you about the placement of cookies in advance and to decide in individual cases whether to exclude the acceptance of cookies for certain cases or in general, or to prevent cookies entirely. This may limit the functionality of the website.

data to fulfill our contractual obligations

We process personal data necessary for fulfilling our contractual obligations, such as name, address, email address, ordered products, billing, and payment data. The collection of this data is required for the conclusion of the contract.

The data will be deleted after the expiration of warranty periods and statutory retention periods. Data linked to a user account (see below) will be retained as long as the account is maintained.

The legal basis for processing this data is Art. 6 para. 1 sentence 1 b) GDPR, as this data is needed for us to fulfill our contractual obligations to you.

user account

You can create a user account on our website. If you wish to do so, we require the personal data requested during login. For subsequent logins, only your email or username and the password you have chosen are needed.

For new registrations, we collect master data (e.g., name, address), communication data (e.g., email address), payment data (bank details), and access data (username and password).

To ensure proper registration and to prevent unauthorized registrations by third parties, you will receive an activation link via email to activate your account after registration. Only after successful registration will we permanently store the data you have submitted in our system.

You can delete a user account at any time without incurring any costs other than the transmission costs according to the basic tariffs. A notification in text form to the contact details listed in section 1 (e.g., email, fax, letter) is sufficient. We will then delete your stored personal data, as long as we are not required to store it for processing orders or due to legal retention obligations.

The legal basis for processing this data is your consent in accordance with Art. 6 para. 1 sentence 1 a) GDPR.

Newsletter

To sign up for the newsletter, the data requested during the registration process is required. The registration for the newsletter is logged. After registration, you will receive a message at the specified email address asking for confirmation of registration (“Double Opt-in”). This is necessary to prevent third parties from registering with your email address.

You can withdraw your consent to receive the newsletter at any time and thus unsubscribe from the newsletter.

We store the registration data as long as it is needed for sending the newsletter. The logging of registration and the email address will be stored as long as there is an interest in proving the originally given consent, usually the statute of limitations for civil claims, which is a maximum of three years.

The legal basis for sending the newsletter is your consent in accordance with Art. 6 para. 1 sentence 1 a) GDPR in conjunction with Art. 7 GDPR and § 7 para. 2 no. 3 UWG. The legal basis for logging the registration is our legitimate interest in proving that the dispatch was made with your consent.

You can withdraw your registration at any time without incurring any costs other than the transmission costs according to the basic tariffs. A notification in text form to the contact details listed in section 1 (e.g., email, fax, letter) is sufficient. Each newsletter also contains an unsubscribe link.

Product recommendations

We regularly send you product recommendations via email, independent of the newsletter. In this way, we provide you with information about products from our range that you might be interested in based on your most recent purchases of goods or services from us. We strictly comply with legal requirements. You can object to this at any time without incurring any costs other than the transmission costs according to the basic tariffs. A notification in text form to the contact details listed in section 1 (e.g., email, fax, letter) is sufficient. Each email also contains an unsubscribe link.

The legal basis for this is the statutory permission in accordance with Art. 6 para. 1 sentence 1 f) GDPR in conjunction with § 7 para. 3 UWG.

EMail contact

If you contact us (e.g., via contact form or email), we process your details to handle the inquiry and in case follow-up questions arise.

If data processing is carried out to conduct pre-contractual measures that are based on your request, or if you are already our customer, to execute the contract, the legal basis for this data processing is Art. 6 para. 1 sentence 1 b) GDPR.

We only process further personal data if you consent (Art. 6 para. 1 sentence 1 a) GDPR) or if we have a legitimate interest in processing your data (Art. 6 para. 1 sentence 1 f) GDPR). A legitimate interest is, for example, to respond to your email.

Google Analytics

We use Google Analytics, a web analysis service provided by Google Inc. (“Google”). Google Analytics uses “cookies,” text files stored on your computer, to help analyze how you use the website. The information generated by the cookie about your use of this website is usually transmitted to and stored by Google on servers in the USA.

This constitutes our legitimate interest according to Art. 6 para. 1 sentence 1 f) GDPR.

Google has subjected itself to the EU-US Privacy Shield agreement and is certified. Thus, Google is committed to complying with the standards and regulations of European data protection law. More information can be found at: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active.

We have activated IP anonymization on this website (anonymizeIp). This means that Google will truncate your IP address within member states of the European Union or other parties to the Agreement on the European Economic Area before transmitting it to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. On our behalf, Google will use this information to evaluate your use of the website, compile reports on website activity, and provide other services related to website and internet use.

The IP address transmitted by your browser as part of Google Analytics will not be merged with other data held by Google. You can prevent the storage of cookies by selecting the appropriate settings in your browser software; however, we point out that in this case, you may not be able to use all functions of this website to their full extent.

You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) by Google and the processing of this data by Google by downloading and installing the browser plugin available under the following link: http://tools.google.com/dlpage/gaoptout?hl=de.

privacy policy on the use and utilization of facebook

The data controller has integrated components of the company Facebook on this website. Facebook is a social network. A social network is an online social meeting place, an online community that usually allows users to communicate with each other and interact in virtual space. A social network can serve as a platform for exchanging opinions and experiences or enable the online community to provide personal or business-related information. Facebook allows users of the social network to create private profiles, upload photos, and connect through friend requests.

The operating company of Facebook is Facebook, Inc., 1 Hacker Way, Menlo Park, CA 94025, USA. For individuals living outside the USA or Canada, the data controller responsible for processing personal data is Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

Each time one of the individual pages of this website operated by the data controller is accessed, and on which a Facebook component (Facebook plug-in) has been integrated, the internet browser on the IT system of the data subject is automatically prompted by the respective Facebook component to download a representation of the corresponding Facebook component from Facebook. An overview of all Facebook plug-ins can be accessed at https://developers.facebook.com/docs/plugins/?locale=de_DE. As part of this technical procedure, Facebook becomes aware of which specific subpage of our website is visited by the data subject.

If the data subject is simultaneously logged into Facebook, Facebook recognizes with each visit to our website by the data subject and for the entire duration of the respective stay on our website which specific subpage of our website the data subject visits. This information is collected by the Facebook component and associated by Facebook with the respective Facebook account of the data subject. If the data subject activates one of the Facebook buttons integrated on our website, for example, the “Like” button, or leaves a comment, Facebook assigns this information to the personal Facebook user account of the data subject and stores this personal data.

Facebook always receives information via the Facebook component that the data subject has visited our website if the data subject is logged into Facebook at the time of the visit to our website; this occurs regardless of whether the data subject clicks on the Facebook component or not. If such a transmission of this information to Facebook is not desired by the data subject, they can prevent the transmission by logging out of their Facebook account before calling up our website. The data policy published by Facebook, which is available at https://de-de.facebook.com/about/privacy/, provides information about the collection, processing, and use of personal data by Facebook. Furthermore, it explains the settings options Facebook offers to protect the privacy of the data subject. Additionally, various applications are available that make it possible to suppress data transmission to Facebook. Such applications can be used by the data subject to suppress data transmission to Facebook.

privacy policy on the use and utilization of google+

The data controller has integrated the Google+ button as a component on this website. Google+ is a so-called social network. A social network is an online social meeting place, an online community that usually allows users to communicate with each other and interact in virtual space. A social network can serve as a platform for exchanging opinions and experiences or enable the online community to provide personal or business-related information. Google+ allows users of the social network to create private profiles, upload photos, and connect through friend requests.

The operating company of Google+ is Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA. Each time one of the individual pages of this website operated by the data controller is accessed, and on which a Google+ button has been integrated, the internet browser on the IT system of the data subject is automatically prompted by the respective Google+ button to download a representation of the corresponding Google+ button from Google. As part of this technical procedure, Google becomes aware of which specific subpage of our website is visited by the data subject. More detailed information about Google+ can be accessed at https://developers.google.com/+/.

If the data subject is simultaneously logged into Google+, Google recognizes with each visit to our website by the data subject and for the entire duration of the respective stay on our website which specific subpage of our website the data subject visits. This information is collected by the Google+ button and associated by Google with the respective Google+ account of the data subject. If the data subject activates one of the Google+ buttons integrated on our website and thus gives a Google+1 recommendation, Google assigns this information to the personal Google+ user account of the data subject and stores this personal data. Google stores the Google+1 recommendation of the data subject and makes it publicly accessible in accordance with the terms accepted by the data subject in this regard. A Google+1 recommendation made by the data subject on this website will subsequently be stored and processed along with other personal data, such as the name of the Google+1 account used by the data subject and the photo stored in it, in other Google services, such as the search engine results of the Google search engine, the Google account of the data subject, or other places, such as on websites or in connection with advertisements.

Furthermore, Google is able to link the visit to this website with other personal data stored by Google. Google also records this personal information with the aim of improving or optimizing the various Google services. Google always receives information via the Google+ button that the data subject has visited our website if the data subject is logged into Google+ at the time of the visit to our website; this occurs regardless of whether the data subject clicks on the Google+ button or not. If such a transmission of personal data to Google is not desired by the data subject, they can prevent the transmission by logging out of their Google+ account before calling up our website. Further information and the applicable data protection provisions of Google can be accessed at https://www.google.de/intl/de/policies/privacy/. Further instructions from Google regarding the Google+1 button can be accessed at https://developers.google.com/+/web/buttons-policy.

privacy policy on the use and utilization of google adwords

The data controller has integrated Google AdWords on this website. Google AdWords is an internet advertising service that allows advertisers to place ads in both Google’s search engine results and the Google advertising network. Google AdWords allows an advertiser to pre-define specific keywords through which an ad is displayed in Google’s search engine results only when the user retrieves a keyword-relevant search result. In the Google advertising network, the ads are distributed on topic-relevant web pages using an automated algorithm and taking into account the previously defined keywords.

The operating company of Google AdWords services is Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA. The purpose of Google AdWords is to promote our website by displaying interest-relevant advertising on the websites of third-party companies and in the search engine results of the Google search engine and to display third-party advertising on our website. If a data subject reaches our website via a Google advertisement, a so-called conversion cookie is placed on the IT system of the data subject by Google. What cookies are has already been explained above. A conversion cookie loses its validity after thirty days and is not used to identify the data subject. If the cookie has not yet expired, the conversion cookie is used to track whether certain subpages, such as the shopping cart from an online shop system, were called up on our website. Through the conversion cookie, both we and Google can track whether a data subject who came to our website via an AdWords ad generated a sale, i.e., completed or canceled a purchase. The data and information collected through the use of the conversion cookie are used by Google to create visit statistics for our website. These visit statistics are used by us to determine the total number of users who were referred to us via AdWords ads, thus to determine the success or failure of the respective AdWords ad and to optimize our AdWords ads for the future. Neither our company nor other advertisers of Google AdWords receive information from Google that could identify the data subject. Through the conversion cookie, personal information, such as the web pages visited by the data subject, is stored. Each time our web pages are visited, personal data, including the IP address of the internet connection used by the data subject, is transmitted to Google in the United States of America. These personal data are stored by Google in the United States of America. Google may transfer these personal data collected through the technical procedure to third parties.

The data subject can prevent the setting of cookies by our website, as already shown above, at any time by means of an appropriate setting of the internet browser used and thus permanently oppose the setting of cookies. Such a setting of the internet browser used would also prevent Google from setting a conversion cookie on the IT system of the data subject. In addition, a cookie already set by Google AdWords can be deleted at any time via the internet browser or other software programs. Furthermore, the data subject has the opportunity to object to interest-based advertising by Google. To do this, the data subject must call up the link www.google.de/settings/ads from each of the internet browsers they use and make the desired settings there. Further information and the applicable data protection provisions of Google can be accessed at https://www.google.de/intl/de/policies/privacy/.

privacy policy on the use and utilization of instagram

The data controller has integrated components of the Instagram service on this website. Instagram is a service that qualifies as an audiovisual platform and allows users to share photos and videos and also disseminate such data on other social networks. The operating company of Instagram’s services is Instagram LLC, 1 Hacker Way, Building 14 First Floor, Menlo Park, CA, USA. Each time one of the individual pages of this website, operated by the data controller, is called up and on which an Instagram component (Insta-Button) has been integrated, the internet browser on the information technology system of the affected person is automatically prompted by the respective Instagram component to download a representation of the corresponding component from Instagram. As part of this technical process, Instagram is informed about which specific sub-page of our website is visited by the affected person.

If the affected person is simultaneously logged into Instagram, Instagram recognizes with each visit to our website by the affected person and for the entire duration of their respective stay on our website, which specific sub-page the affected person visits. These data are collected by the Instagram component and assigned by Instagram to the respective Instagram account of the affected person. If the affected person clicks on one of the Instagram buttons integrated into our website, the data and information thus transmitted are assigned to the personal Instagram user account of the affected person and stored and processed by Instagram. Instagram always receives information via the Instagram component that the affected person has visited our website if the affected person is logged into Instagram at the time of accessing our website; this happens regardless of whether the affected person clicks on the Instagram component or not. If such transmission of information to Instagram is not desired by the affected person, they can prevent the transmission by logging out of their Instagram account before accessing our website.

Further information and the applicable data protection provisions of Instagram can be accessed at: Instagram Help Center and Instagram Privacy Policy.

storage duration

Unless specifically stated, we store personal data only as long as necessary to fulfill the purposes pursued.

In some cases, the legislator provides for the retention of personal data, such as in tax or commercial law. In these cases, the data will only be stored by us for these legal purposes but will not be processed in any other way and will be deleted after the legal retention period has expired.

your rights as a data subject

According to applicable laws, you have various rights regarding your personal data. If you wish to exercise these rights, please send your request by email or by post clearly identifying yourself to the address mentioned in section 1.

Below you will find an overview of your rights.

richt to confirmation and information

You have the right to clear information about the processing of your personal data.

Specifically:

You have the right to obtain from us confirmation as to whether personal data concerning you is being processed. If this is the case, you have the right to obtain free information from us about the personal data stored about you and a copy of this data. Furthermore, there is a right to the following information:

the purposes of the processing;
the categories of personal data being processed;
the recipients or categories of recipients to whom the personal data has been or will be disclosed, particularly recipients in third countries or international organizations;
where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period;
the existence of the right to request rectification or erasure of personal data or restriction of processing of personal data concerning you or to object to such processing;
the existence of the right to lodge a complaint with a supervisory authority;
where the personal data is not collected from you, any available information as to their source;
the existence of automated decision-making, including profiling, referred to in Article 22(1) and (4) GDPR and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for you.

Where personal data is transferred to a third country or to an international organization, you have the right to be informed of the appropriate safeguards pursuant to Article 46 GDPR relating to the transfer.

right to rectification

You have the right to request the rectification and, if necessary, completion of personal data concerning you.

Specifically:

You have the right to obtain from us without undue delay the rectification of inaccurate personal data concerning you. Considering the purposes of the processing, you have the right to have incomplete personal data completed, including by means of providing a supplementary statement.

right to erasure (“Right to be forgotten”)

In a number of cases, we are required to delete personal data concerning you.

Specifically:

Pursuant to Article 17(1) GDPR, you have the right to obtain from us the erasure of personal data concerning you without undue delay, and we are obliged to erase personal data without undue delay where one of the following grounds applies:

The personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed.
You withdraw consent on which the processing is based according to Article 6(1)(a) GDPR or Article 9(2)(a) GDPR, and there is no other legal ground for the processing.
You object to the processing pursuant to Article 21(1) GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Article 21(2) GDPR.
The personal data have been unlawfully processed.
The personal data have to be erased for compliance with a legal obligation in Union or Member State law to which we are subject.
The personal data have been collected in relation to the offer of information society services referred to in Article 8(1) GDPR.

Where we have made the personal data public and are obliged pursuant to Article 17(1) GDPR to erase the personal data, we, taking account of available technology and the cost of implementation, take reasonable steps, including technical measures, to inform controllers processing the personal data that you have requested the erasure by such controllers of any links to, or copy or replication of, those personal data.

right to restriction of processing

In a number of cases, you are entitled to request that we restrict the processing of your personal data.

Specifically:

You have the right to obtain from us restriction of processing where one of the following applies:

The accuracy of the personal data is contested by you, for a period enabling us to verify the accuracy of the personal data,
The processing is unlawful, and you oppose the erasure of the personal data and request the restriction of their use instead;
We no longer need the personal data for the purposes of the processing, but you require them for the establishment, exercise, or defense of legal claims; or
You have objected to processing pursuant to Article 21(1) GDPR pending the verification whether our legitimate grounds override yours.

right to data portability

You have the right to receive personal data concerning you in a machine-readable format, to transmit it, or to have it transmitted by us.

Specifically:

You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used, and machine-readable format and have the right to transmit those data to another controller without hindrance from us, where

the processing is based on consent pursuant to Article 6(1)(a) GDPR or Article 9(2)(a) GDPR or on a contract pursuant to Article 6(1)(b) GDPR; and
the processing is carried out by automated means.

In exercising your right to data portability pursuant to paragraph 1, you have the right to have the personal data transmitted directly from us to another controller, where technically feasible.

right to object

You have the right to object to the lawful processing of your personal data by us if this is based on your particular situation and our interests in the processing do not prevail.

Specifically:

You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on Article 6(1)(e) or (f) GDPR, including profiling based on those provisions. We shall no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms or for the establishment, exercise, or defense of legal claims.

Where personal data is processed by us for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing.

You have the right to object, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out for scientific or historical research purposes or statistical purposes pursuant to Article 89(1) GDPR, unless the processing is necessary for the performance of a task carried out for reasons of public interest.

automated decisions including profiling

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.

Automated decision-making based on the collected personal data does not take place.

right to withdraw data protection consent

You have the right to withdraw consent to the processing of personal data at any time.

right to vomplain to a supervisory authority

You have the right to complain to a supervisory authority, particularly in the Member State of your habitual residence, place of work, or the place of the alleged infringement if you consider that the processing of personal data concerning you is unlawful.

data security

We make every effort to ensure the security of your data in accordance with applicable data protection laws and technical possibilities.

Your personal data is transmitted to us encrypted. This applies to your orders as well as customer login. We use the SSL (Secure Socket Layer) encryption system; however, please note that data transmission over the Internet (e.g., when communicating via email) may have security vulnerabilities. Complete protection of data from access by third parties is not possible.

To secure your data, we maintain technical and organizational security measures according to Art. 32 GDPR, which we continuously adapt to state-of-the-art technology.

Furthermore, we do not guarantee that our services will be available at all times; disruptions, interruptions, or failures cannot be ruled out. The servers we use are regularly and carefully secured.

disclosure of data to third parties, no data transfer to non-eu countries

In principle, we use your personal data only within our company.

If and to the extent that we involve third parties in the performance of contracts (such as logistics service providers), these third parties receive personal data only to the extent necessary for the respective service.

In the event that we outsource certain parts of data processing (“data processing on behalf of a controller”), we contractually obligate processors to use personal data only in accordance with the requirements of data protection laws and to ensure the protection of the rights of the data subject.

Data transfer to entities or persons outside the EU, except as mentioned in section 4 of this statement, does not take place and is not planned.

data protection officer

If you have any questions or concerns regarding data protection, please contact our Data Protection Officer:

Data Protection Officer KSB Management®, sicherheit@ksb-management.de 06173- 318 713 5