Privacy policy

Thank you for visiting our website, www.f-tronic.de, and for your interest in our company.

The protection of your personal data, e.g. date of birth, name, phone number, address, is of great concern to us.

The purpose of this Privacy Policy is to inform you about the processing of your personal data that we collect from you when you visit our website. Our data protection practice complies with the statutory regulations of the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG). The following privacy policy serves to fulfil the information obligations arising from the GDPR. These can be found, for example, in Articles 13 and 14 et seq. of the GDPR.

Controller

The controller, as defined in Art. 4 No. 7 GDPR, is the person who decides solely or together with others on the purposes and means of processing personal data.

The controller for our website is:

f-tronic GmbH
Zum Gerlen 21-25
66131 Saarbrücken
Germany
E-mail: info@f-tronic.de
Tel.: +49 689394830

Data Protection Agent Contact Details

We have appointed a data protection officer in accordance with Art. 37 GDPR. You can reach our data protection officer using the following contact details:

Alexander Bergweiler
Zum Gerlen 21-25
66131 Saarbrücken
Germany
E-mail: Alexander.Bergweiler@koenig-rechtsanwaelte.de

Website Operation and the Creation of Log Files

Whenever our website is accessed, our system automatically collects data and information from the respective accessing device (e.g. computer, cellphone, tablet).

What personal data is collected and to what extent is it processed?

(1) Information about the browser type and version used;
(2) The operating system of the device used to access the site;
(3) Hostname of the requesting computer;
(4) The IP address of the requesting device;
(5) Date and time of access;
(6) Websites and resources (images, files, additional page content) accessed on our website;
(7) Websites from which the user's system accessed our website (referrer tracking);
(8) Notification of whether the retrieval was successful;
(9) Amount of data transferred

This data are stored in our system’s log files. This data is not stored together with personal data from specific users, thus preventing the identification of individual website visitors.

Legal Basis for the Processing of Personal Data

Art. 6 (1) (f) GDPR (legitimate interest). Our legitimate interest lies in guaranteeing that the purpose outlined below is achieved.

Purpose of Data Processing

The temporary (automated) storage of this data is required to process the website visit in order to facilitate the website’s provision. Personal data are stored and processed in order to ensure that our website is compatible for as many visitors as possible as well as to tackle misuse and disruptions. To this end, it is necessary to log the technical data of the requesting computer so that we can react to display errors, attacks on our IT systems and/or errors affecting our website’s function as quickly as possible. In addition, these data are used to optimise the website and generally ensure the security of our information technology systems.

Duration of storage

The aforementioned data will be deleted as soon as it is no longer required or 3 months after visiting our website at the latest, in order to guarantee website compatibility for all visitors.

Objection and Deletion Options

You can object to the processing at any time in accordance with Art. 21 GDPR and request data deletion under Art. 17 GDPR. You can find out below in this privacy policy what rights you have and how to exercise these.

Special Functions of the Website

Our website offers you various functions, whereby we collect, process and store personal data upon use. Below, we explain what happens to this data:

Comment function

• What personal data is collected and to what extent is it processed?

  We will process the personal data you leave in your comment, such as the content of your comment, your name or pseudonym, your email address, etc., to fulfil the purpose stated below.

• Legal Basis for the Processing of Personal Data

  Art. 6 (1) (a) GDPR or Art. 9 (2) (a) GDPR (consent given by clear affirmative action or explicit consent)

• Purpose of Data Processing

  The purpose of data processing is to accept and publish your comment on our website.

• Duration of storage

  Your comment is stored and published without an end date. We reserve the right to delete without providing grounds and without prior or subsequent information.

• Possibility of objection and deletion

  Upon your request, we will delete your comments immediately. Please use the ‘delete’ function or contact us. The revocation and deletion options are based on the general regulations on the right of revocation and deletion under data protection law described below in this privacy policy.

• Requirement to provide personal data

  Use of the comment function is required neither by the contract or by law, and is not required for the conclusion of a contract. Use of the comment function is voluntary. You are not obliged to leave a comment on our website. If you would like to leave a comment, you will need to fill out the required fields. If you do not fill in the necessary information, your comment cannot be published.

Contact Form(s)

• What personal data is collected and to what extent is it processed?

  We will process the data you have entered in the input area of our contact forms to fulfil the purpose stated below.

• Legal Basis for the Processing of Personal Data

  Art. 6 (1) (a) GDPR or Art. 9 (2) (a) GDPR (consent given by clear affirmative action or explicit consent)

• Purpose of Data Processing

  Data collected via our contact form(s) is only used to process the specific request submitted using the contact form.

• Duration of storage

  After your request has been processed, the data collected will be immediately deleted insofar as there are no statutory retention periods.

• Possibility of objection and deletion

  The revocation and deletion options are based on the general regulations on the right of revocation and deletion under data protection law described below in this privacy policy.

• Requirement to provide personal data

  The contact forms are used on a voluntary basis and these are neither contractually nor legally required. You are not obligated to contact us using the contact form. Rather, you may also use the other contact methods outlined on our website. If you would like to use our contact form, you must fill out the fields marked as mandatory. If you do not fill in the necessary information of the contact form with content, you will either not be able to send the request or we will unfortunately be unable to process your request.

Login area

• What personal data is collected and to what extent is it processed?

  We will process the registration and login data you enter with us to fulfill the purpose stated below.

• Legal Basis for the Processing of Personal Data

  Art. 6 (1) (b) GDPR (performance of (pre)contractual measures)

• Purpose of Data Processing

  Our website gives you the opportunity to use a separate log-in area. So that we can check your rights for the use of this protected area and/or protected documents, you must enter your log-in details (email address or username and password) into the relevant form.

• Duration of storage

  The data collected will be stored for as long as you have a user account with us.

• Objection and Deletion Options

  You can find out below in this privacy policy what rights you have and how to exercise these.

• Requirement to provide personal data

  Use of the log-in area on our website is contractually intended for use of the protected area. It is not possible to use the content protected by the log-in area without entering personal data. If you want to use our log-in area, you must fill in the fields marked as mandatory (username and password). Entering data requires a user account. It is not possible to register if the data you enter is incorrect. You cannot use the protected area if you do not enter the data or you enter incorrect data. However, the rest of the site can be used without logging in.

Newsletter Subscription Form

• What personal data is collected and to what extent is it processed?

  By signing up to the newsletter on our website, we receive the email address you entered in the registration field and, if applicable, further contact data if you provide us with this via the newsletter subscription form.

• Legal Basis for the Processing of Personal Data

  Art. 6 (1) (a) GDPR or Art. 9 (2) (a) GDPR (consent given by clear affirmative action or explicit consent)

• Purpose of Data Processing

  We exclusively use data submitted via our newsletter subscription form for the purpose of sending out our newsletter, in which we provide information about all of our services and news. We will send you a confirmation email containing a link that you must click to confirm your subscription to our newsletter (double opt-in).

• Duration of storage

  You can unsubscribe from our newsletter at any time by clicking the unsubscribe link contained in each newsletter. Your data will be deleted by us immediately after unsubscribing. Your data will also be immediately deleted if you fail to fully subscribe. We reserve the right to delete without providing grounds and without prior or subsequent information.

• Revocation and removal option

  You can withdraw your consent at any time pursuant to Art. 7 (3) GDPR. However, the processing that has taken place up to the time of the revocation remains unaffected. With regard to the other rights, we refer to the overview at the end of this privacy policy.

• Requirement to provide personal data

  If you would benefit from our newsletter, you will have to fill out the fields marked as required and confirm your email address by clicking on the double opt-in link. It is not necessary to provide newsletter subscription data in order to enter into a contract with us or comply with the law. It is purely used to send our newsletter. If you do not fill in the required information, we will not be able to provide you with our newsletter service.

Integration of external web services and processing of data outside the EU

We use active content from external providers, known as web services, on our website. By visiting our website, these external providers may gain access to personal information about your visit to our website. Data may hereby be processed outside the EU. You can prevent this by installing the relevant browser plugin or deactivating scripts in your browser. This may lead to functional restrictions on the websites you visit.

We use the following external web services:

• F-tronic

  On our website, we use the F-tronic service provided by f-tronic GmbH, Zum Gerlen 25, 66131 Saarbrücken, Germany, email: info@f-tronic.de, website: https://www.f-tronic.de/de. The transfer of personal data occurs exclusively to servers within the European Union.

  The legal basis for processing personal data is the consent you provided pursuant to Art. 6 (1) (a) GDPR or Art. 9 (2) (a) GDPR, which was given on our website.

  This service is a plugin that we need so that we can display all of our website content to you. The plugin makes our website more attractive and easier for our site visitors to use.

  You can revoke your consent at any time. You can find more information about revoking your consent either when granting it or at the end of this privacy policy.

  Further information on the handling of the transmitted data can be found in the provider’s privacy policy: https://www.f-tronic.com/privacy-policy

• Legal text snippet and modules

  On our website, we use the Legal Text Snippet and Modules service provided by Website-Check GmbH, Beethovenstraße 24, 66111 Saarbrücken, Germany, email: support@website-check.de, website: https://www.website-check.de/. The transfer of personal data occurs exclusively to servers within the European Union.

  The legal basis for processing is Art. 6 (1) (c) GDPR. The utilisation of this service aids us in complying with our legal obligations.

  This service enables dynamic loading of our legal text content on our website. Through this integration, the latest versions of the legal texts are dynamically updated on our site. Moreover, this integration may also load additional technical modules concerning the legal texts or legally necessary elements.

  You can find information about your rights regarding data processing at the end of this privacy policy.

  Further information on the handling of the transferred data can be found in the provider’s privacy policy: https://www.website-check.de/datenschutzerklaerung/.

• Website-Check Seal

  On this website, we use the Website-Check seal provided by Website-Check GmbH, Beethovenstraße 24, 66111 Saarbrücken, Germany, email: support@website-check.de, website: http://www.website-check.de/. The transfer of personal data occurs exclusively to servers within the European Union.

  The legal basis for processing personal data is our legitimate interest in accordance with Art. 6 (1) (f) of the GDPR. Our legitimate interest is to achieve the purpose described below.

  The script of Website-Check GmbH is for the technical integration of the Website-Check seal. With this seal we aim to show that we take the topic of data protection very seriously. The transmission of data to Website-Check GmbH takes place for the delivery and display of the seal on our site.

  In relation to the processing, you have the right to object as set out in Art. 21 of the GDPR. You can find more information at the end of this privacy policy.

  Further information on the handling of the transferred data can be found in the provider’s privacy policy: https://www.website-check.de/datenschutzerklaerung/.

Data Security and Data Protection, Email Communication

Your personal data is protected from third party access by technical and organizational measures during collection, storage and processing. We cannot guarantee complete data security during the transfer of unencrypted email communication to our IT systems, so we recommend sending confidential information via encrypted communication or post.

Automatic Email Archiving

• Scope of the Processing of Personal Data

  We hereby expressly inform you that our email system has an automated archiving process. All incoming and outgoing emails are archived digitally in a way that prevents editing.

• Legal Basis for the Processing of Personal Data

  Art. 6 (1) (c) GDPR (Legal obligation). This legal obligation relates to the upholding of tax law and commercial law (e.g. sections 146 and 147 of the AO and sections 238 and 257 of the HGB).

• Purpose of Data Processing

  The purpose of archiving is to comply with tax regulations (e.g. sections 146 and 147 of the AO - obligation to store emails of relevance to tax law) and commercial trade regulations (e.g. sections 238 and 257 of the HGB - obligation to archive business correspondence).

• Duration of storage

  Our email communication is stored until the end of statutory retention periods under tax law and commercial law. Storage periods may be up to 10 years.

• Objection and Deletion Options

  You can object to the processing at any time in accordance with Art. 21 GDPR and request data deletion under Art. 17 GDPR. You can find out below in this privacy policy what rights you have and how to exercise these.

• Handling of Application Documents

  Should you have any questions regarding our email archiving system, please contact our data protection agent. We would also like to inform you that we only consider application documents in PDF format. Zip files (WinZip, WinRAR, 7Zip, etc.) are filtered out by our security systems and not delivered. We do not consider applications in Word format and other formats, and delete these without reading them. Please note that unencrypted application documents sent by email may be opened by third parties before they reach our IT systems. We assume that we are also allowed to answer unencrypted application emails without the use of encryption. If you do not consent to this, please mention this in your application email.

Right to Information and Correction Requests - Deletion & Restriction of Data - Revocation of Consent - Right to Object

Right to Information

You have the right to request a confirmation as to whether we process your personal data. If this is the case, you have the right to access the information specified in Art. 15 (1) of the GDPR, provided that the rights and freedoms of others are not affected (see Art. 15 (4) GDPR). We will gladly also provide you with a copy.

Right to Correction

In accordance with Art. 16 GDPR, you have the right to have any incorrect personal data (such as address, name, etc.) corrected at any time. You can also demand that any incomplete information we have stored about you is completed. We will make the respective adjustments promptly.

Right to erasure

Under Art. 17 (1) GDPR, you have the right to have the personal data we have collected about you deleted if

• the data are no longer required;
• the processing is no longer possible due to the revocation of your consent;
• if you have lodged an objection to the processing and there are no legitimate reasons for the processing;
• Your data has been processed unlawfully;
• a legal obligation requires it, or if the data was collected under Art. 8 (1) GDPR.

This right does not apply according to Art. 17 (3) GDPR if

• the processing is required to exercise the right to free speech and information;
• your data was collected on the basis of a legal obligation;
• the processing is required for reasons in the public interest;
• the data is necessary for the assertion, exercise or defense of legal claims.

Right to Restrict Processing

Under Art. 18 (1) GDPR, you have the right in certain cases to request the restriction of the processing of your personal data.

This is the case if

• you are contesting the correctness of this personal data;
• the processing is unlawful but you do not agree to deletion;
• the data are no longer required for the purpose of its processing but serves to exercise, enforce or defend legal claims;
• An objection to processing has been raised according to Art. 21 (1) GDPR, and it is not yet clear which interests prevail.

Right of withdrawal

If you have given us explicit consent to process your personal data (Art. 6 (1) (a) GDPR or Art. 9 (2) (a) GDPR), you may withdraw it at any time. Please note that the legality of any related processing carried out before this revocation will not be impacted.

Right to Object

According to Art. 21 GDPR, you have the right to object at any time to the processing of your personal data collected on the basis of Art. 6 (1) (f) (legitimate interest). You only have this right if there are special circumstances against storage and processing.

How Can You Exercise Your Rights?

You can exercise your rights at any time by using the contact details below:

f-tronic GmbH
Zum Gerlen 21-25
66131 Saarbrücken
Germany
E-mail: info@f-tronic.de
Tel.: +49 689394830

Right to Data Portability

Under Art. 20 GDPR, you have the right to receive your personal data. We provide this data in a structured, standard, machine-readable format. The data can be sent to you or to a controller named by you based on your decision.

Upon request, we will provide you with the following data in accordance with Art. 20 (1) GDPR:

• Data collected based on explicit consent in accordance with Art. 6 (1) (a) GDPR or Art. 9 (2) (a) GDPR;
• Data which we have received from you under existing contracts in accordance with Art. 6 (1) (b) GDPR;
• Data processed as part of an automated process.

We will transfer personal data directly to a responsible party chosen by you insofar as this is technically feasible. Please note that we are not permitted to transfer data that infringes on the freedoms or rights of others in accordance with Art. 20(4) of the GDPR.

Right to lodge a complaint with the supervisory authority pursuant to Art. 77 paragraph 1 of the GDPR.

If you have any suspicion that your data are being processed unlawfully on our site, you can of course always seek judicial clarification. You also have other legal options. Regardless of this, you have the right under Art. 77 paragraph 1 of the GDPR to contact a supervisory authority. The right to complain pursuant to Art. 77 GDPR is applicable in the EU member state where you reside, work, or the location of the alleged infringement. This means you can choose the supervisory authority to contact from these locations. The supervisory authority where the complaint is filed will inform you about the status and outcome of your submission, including the possibility of a judicial remedy under Art. 78 GDPR.

Created by:

© DURY LEGAL Rechtsanwälte – www.dury.de

© Website-Check GmbH – www.website-check.de