Privacy Policy

I. Identity and contact details of the controller

Your contact as controller within the meaning of the European General Data Protection Regulation („GDPR”) and other national data protection laws of the member states as well as other provisions of data protection law is:

Schaltbau Holding AG
Hollerithstraße 5
81829 München
Tel.: +49 89 93005 – 209

(hereinafter referred to as “we”, “us” or “our”)

II. Contact details of the data protection officer

The protection of your personal data has a high priority for us. To reflect this importance, we have commissioned a consulting firm specializing in data protection and data security to handle these central issues. Our data protection officer also comes from this highly experienced group of experts.

We are counselled by:

You can reach our company data protection officer Mr. Blazy, LL.M. from GDPC GbR (https://gdpc.de/) for all questions relating to data protection and data security
by telephone on +49 (0) 561 830 99 165,
by post at the above address with the addition – Data Protection Officer / Confidential –
and by e-mail at datenschutz@schaltbau.de

III. Data processing on our website

1. Website functions

i. Provision of the website and creation of log files

a. Legal basis

Legal basis for the processing of your personal data in the context of providing the website and the creation of log files is Art. 6 (1) lit. f GDPR.

b. Purpose

The temporary storage of your personal data by us is necessary to enable the website to be delivered to your computer. For this purpose, your personal data must be stored for the duration of the session.

Your personal data are stored in log files to ensure the functionality of the website. Your personal data also help us to optimise the website and to ensure that our IT systems are secure. Your personal data will not be processed in any other way

c. Duration of storage

The data are erased as soon as they are no longer necessary to achieve the purpose for which they were collected. In case your personal data are recorded for the purpose of providing the website, this happens as soon as the relevant session has ended.

If your personal data is stored in log files, they will be erased after 60 days at the latest. If the log files are stored beyond this period, your personal data will be made anonymous so that it is no longer possible to assign them to a website visitor.

d. Objection and rectification option

The collection of your personal data for the provision of the website and the storage of your personal data in log files is necessary in order to operate the website. Consequently, you cannot object to this data processing.

ii. Use of technically necessary cookies

a. Legal basis

Legal basis for the processing of your personal data in the context of the use of technically necessary cookies is Art. 6 (1) lit. f GDPR.

b. Purpose

The purpose of using technically necessary cookies is to make it easier for you to use our website. Some functions of our website cannot be offered without the use of cookies. For this, it is necessary that your browser is recognised again after a page change. Your personal data will not be processed in any other way.

c. Duration of storage

The data are erased as soon as they are no longer necessary to achieve the purpose for which they were collected; this happens, in particular, as soon as the relevant session has ended.

d. Objection and rectification option

An overview of the technically necessary cookies used on our website can be found at the bottom of the page.

Cookies are stored on your computer and transmitted from the computer to our website. Therefore, you have complete control over the use of cookies.

By adjusting the settings of your browser you can deactivate or restrict the transmission of cookies. You can also, at any time, delete cookies that have already been stored. This can also be done automatically. However, if you deactivate cookies for our website, you might not be able to use all website´s functions to their full extent.

The transmission of flash cookies, however, cannot be prevented by changing the settings of your browser. You will need to make the necessary changes in your Adobe Flash Player settings.

iii. YouTube videos

a. Legal basis

The legal basis for the processing of your personal data by means of the integration of YouTube videos in our website, is Art. 6 (1) lit. a GDPR.

b. Purpose

The processing of your personal data through the integration of YouTube videos serves an appealing, uniform and independent of your end device presentation of video content on our website. We instruct your browser to load the content necessary to display the preview image from Google. We integrate YouTube videos in the extended data protection mode. This mode has the effect that, beyond the data required for integration (IP address, screen resolution, browser used, bandwidth, language, etc.), no further information is transmitted from your browser to Google before the video is played by you.

By playing the YouTube video, further personal data will be transmitted by your browser to Google, for example for the personalization of advertisements or also for the general analysis of the success of the individual YouTube videos. We have no influence on the data processing by Google when playing the YouTube video. Information on data processing by Google when playing the YouTube video can be found at:

https://policies.google.com/privacy?hl=de#whycollect

c. Duration of storage

We have no influence on the data processing by Google for the display of the preview image as well as on the data processing by Google after starting the YouTube video by pressing the play button.

Your personal data will be deleted by Google as soon as they are no longer required to achieve the purpose of their processing. You can view more information on this at:

https://policies.google.com/privacy?hl=de&gl=de#inforetaining

d. Objection and rectification option

You have the possibility to object to the processing of your personal data in the context of the presentation of video content on our website at any time for the future. You can revoke your consent by closing the application and/or reloading the website.

We have no influence on the data processing carried out by YouTube. You can find more information on this at:

https://policies.google.com/privacy?hl=de#infodelete

iv. Whistleblowing-Hotline

a. Legal basis

The legal basis for the processing of your personal data within the framework of the whistleblowing-hotline is your given consent, Art. 6 (1) lit. a EU-DSGVO.

b. Purpose

The processing of your personal data within the framework of the whistleblowing-hotline serves, insofar as you provide personal data, to verify the tip and, if necessary, to clarify the procedure triggered by the tip.

c. Duration of storage

Your personal data will be deleted as soon as it is no longer required to achieve the purpose for which it was processed. For personal data sent as part of the whistleblowing-hotline, this is the case when your tip has been processed and legal retention periods do not prevent deletion.

d. Objection and rectification option

You can revoke your consent to the processing of your personal data within the whistleblowing-hotline at any time. The corresponding triggered procedure will then be closed.

v. Contact form and email contact

a. Legal basis

Legal basis for the processing of your personal data transmitted in the course of contacting us is Art. 6 (1) lit. f GDPR. If you contact us in order to conclude a contract, Art. 6 (1) lit. b GDPR is an additional legal basis for the processing of your personal data.

b. Purpose

The processing of your personal data when contacting us only takes place to process your request.

c. Duration of storage

The data are erased as soon as they are no longer necessary to achieve the purpose for which they were collected. In the case of any personal data sent in the course of contacting us, this happens when your request has been processed and no legal retention periods prevent erasure.

d. Objection and rectification option

You can always object to the processing of your personal data in the context of contacting us for the future. In this case, however, we will not be able to process your request any further. All personal data stored in the context of contacting us will be erased, unless legal retention periods prevent erasure.

2. Matomo

a. Legal basis

Legal basis for the processing of your personal data in the context of using “Matomo” is Art. 6 (1) lit. f GDPR.

ii. Purpose

The processing of your personal data enables us to optimise the user-friendliness of our website and promote turnover by selling goods or services.

iii. Duration of storage

Your personal data will be erased as soon as they are no longer necessary to achieve the purpose for which they were collected.

In the case of processing your personal data within the scope of the use of “Matomo”, these will be erased after 12 months at the latest. If any further processing takes place, your personal data will be anonymised, so that they can no longer be matched to you.

iv. Objection and rectification option

You can object to the processing of your personal data in the context of the use of “Matomo” at any time for the future. In order to do so, you must click here.

3. Data protection and legal disputes

i. Data subjects´ requests pursuant to Art. 12 et seq. GDPR

a. Legal basis

Legal basis for the processing of your personal data in the context of processing your data protection related-request (“data subjects´ request”) is Art. 6 (1) lit. c in connection with Art. 12 et seq. GDPR. Legal basis for the subsequent documentation regarding the handling of your data subject´s request in accordance with the legal provisions is Art. 6 (1) lit. f GDPR.

b. Purpose

The purpose of processing your personal data in the context of handling your data subject´s request is to answer your data protection-related enquiry. The subsequent documentation regarding the processing of your request is to fulfil the obligation of accountability required by law, Art. 5 (2) GDPR.

c. Duration of storage

The data are erased as soon as they are no longer necessary to achieve the purpose for which they were collected. In the case of the processing of data subject´s requests, pursuant to § 41 BDSG (German Federal Data Protection Act, “Bundesdatenschutzgesetz” – “BDSG”) in connection with § 31 (2) Nr. 1 OWiG (German Regulatory Offences Act, “Gesetz über Ordnungswidrigkeiten” – “OWiG”), this is three years after the conclusion of the respective procedure.

d. Objection and rectification option

You can object to the processing of your personal data for the future at any time in the context of the processing of data subject´s requests. In this case, however, we will not be able to process your request any further.

The documentation of the processing of the respective data subject´s request is mandatory by law. Consequently, you cannot object to this data processing.

ii. Defending and enforcing legal claims

a. Legal basis

Legal basis for the processing of your personal data in the context of defending and enforcing legal claims is Art. 6 (1) lit. f GDPR.

b. Purpose

The purpose of processing your personal data in the context of defending and enforcing legal claims is the defence of unjustified claims and the legal enforcement of claims and rights.

c. Duration of storage

The data are erased as soon as they are no longer necessary to achieve the purpose for which they were collected.

d. Objection and rectification option

The processing of your personal data in the context of defending and enforcing legal claims is absolutely necessary for the defence and enforcement thereof. Consequently, you cannot object to this processing.

IV. Categories of recipients

Within our company, the offices and departments that receive personal data are those that need them to fulfil the aforementioned purposes. In some cases, we work together with different service providers and therefore transfer your personal data to other trusted recipients. These can include:

– Banks
– Scanning service
– Print shops
– Letter shops
– IT service providers
– Lawyers and courts

V. Data transfers to third countries

As part of the processing of your personal data, we may transfer your personal data to trustworthy and specially selected service providers in third countries. Third countries are countries outside of the European Union (EU) or the European Economic Area (EEA).

We only work with service providers who provide us with the appropriate safeguards for the security of your personal data and can guarantee that your personal data will be processed strictly in accordance with the European data protection standards. A copy of these appropriate safeguards can be examined at our premises.

If we transfer personal data to third countries, we do so on the basis of a so-called “adequacy decision” of the European Commission or, in the absence of such a decision, on the basis of so-called “standard data protection clauses”, which have also been adopted by the European Commission.

VI. Your rights

You have the following rights against us:

1. Right of access

You have the right to access as to whether and, if so, what your personal data of you are being processed by us. Is this the case, we will additionally give you access to the following:

(1) the purposes of the processing;
(2) the categories of personal data concerned;
(3) the recipients or categories of recipients of your personal data;
(4) the envisaged period of storage or the criteria used to determine the envisaged period of storage;
(5) any other rights you have;
(6) where we have not obtained the personal data from you: any available information as to their source;
(7) if available: the existence of automated decision-making and any information about the logic involved, as well as the significance and the envisaged consequences of the processing.

2. Right to rectification

You have the right to rectification and/or completion of the personal data that is being processed by us, if it is inaccurate or incomplete.

3. Right to restriction of processing

You have the right to restriction of processing of your personal data, provided that

(1) we verify the accuracy of your personal data being processed by us;
(2) the processing of your personal data is unlawful;
(3) you need the personal data being processed by us for the purpose of prosecution when we no longer need your personal data for the purpose of processing;
(4) you have objected to the processing of your personal data and we are in the process of verifying your objection.

4. Right to erasure

You have the right to erasure of your personal data, provided that

(1) we no longer need your personal data for its original purpose;
(2) you withdraw your consent and there is no other legal ground for processing your personal data;
(3) you object to the processing of your personal data and, unless it is about direct marketing, there are no overriding grounds for further processing;
(4) the processing of your personal data is unlawful;
(5) the erasure of your personal data is required by law;
(6) your personal data have been collected in relation to the offer of information society services when you were a minor.

5. Right to notification

If you have asserted your right to rectification, erasure of data or restriction of processing, we will communicate any rectification, erasure of data or restriction of processing to any recipients of your personal data.

6. Right to data portability

You have the right to receive your personal data processed by us on the basis of your consent or for the performance of a contract in a structured, commonly used and machine-readable format as well as to transmit them to another controller. If it is technically feasible, you have the right to have them directly transmitted from us to another controller.

7. Right to object

You have the right to object to the processing of your personal data on particular grounds. If this is the case, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing.

If your personal data is being processed for the purpose of direct marketing, you have the right to object at any time.

8. Right to withdraw

You have the right to withdraw your consent given to us at any time. The withdrawal of the consent does not affect the lawfulness of the processing carried out based on the consent before your withdrawal.

9. Right to lodge a complaint with a supervisory authority

Unbeschadet eines anderweitigen verwaltungsrechtlichen oder gerichtlichen Rechtsbehelfs steht Ihnen das Recht auf Beschwerde bei der zuständigen Aufsichtsbehörde zu, wenn Sie der Ansicht sind, dass die Verarbeitung Ihrer personenbezogenen Daten durch uns gegen die EU-DSGVO verstößt.

The competent supervisory authority for us is:

Bayrisches Landesamt für Datenschutzaufsicht
Promenade 18
91522 Ansbach

Postfach 1349
91504 Ansbach

Tel.: +49 981 180093 – 0
Fax: +49 981 180093 – 800
E-Mail: poststelle@lda.bayern.de

If you have any questions, please do not hesitate to contact our data protection officer at any time.