We are delighted that you have chosen to visit our website. We will inform you below as to what personal data we collect and what happens with this data when you visit our website. Personal data refers to all data which can be used to identify you personally. You will also find information about your rights as a data subject granted to you by the EU General Data Protection Regulation (GDPR).
I. The Controller in Accordance with the EU General Data Protection Regulation (GDPR) is
ERNI Deutschland GmbH
Represented by Executive Board members Dieter Amgwerd and Wolfgang Vetter
Tel: +49 7166 500
II.Data Protection Officer
You can contact our Data Protection Officer at firstname.lastname@example.org
III. General Data Processing Information
1. Scope of personal data processing
Generally, we only process our users’ personal data when this is necessary for providing a functioning website as well as for our content and services.
This website utilizes SSL encryption to protect the transmission of confidential information such as surveys sent to us in our capacity as the website operator. You can verify that the connection is encrypted when your browser’s address line switches from ‘http://’ to ‘https://’ and when the lock symbol is visible in the browser line. If encryption is enabled, the data you provide to us cannot be read by third parties.
3. Website provision and log file creation
Every time our website is visited, our system automatically records data and information about the computer accessing the website. The following data is collected as a result:
User’s IP address
Information about the user’s browser type
Information about the version of the browser type in use
User’s operating system
User’s Internet service provider
Date and time of access
Website from which the user accessed our website
Websites accessed by the user’s system via our website
This data is stored in our system’s log files and is not stored together with the user’s other personal data. The legal basis for such data processing is first and foremost our legitimate interests in the analysis of our website and its use according to Art. 6(1)(f) of the GDPR and, where applicable, the legal permission to store data in the context of initiating a contractual relationship according to Art. 6(b) of the GDPR.
Our website utilizes cookies within the context of our legitimate interest in technically accurate online service offerings and their optimization according to Art. 6(1)(f) of the GDPR. We do this to make the use of our services better, more effective, and more secure.
Cookies are small text files stored on your computer. They may include session cookies, which are automatically deleted at the end of your visit to our website. However, there are also cookies that are permanently stored on your computer if you do not delete them yourself. These enable us to recognize your browser the next time you access our website and display services that suit your profile. You can change your browser settings to prevent the storage of cookies altogether or when visiting certain websites. However, this may result in the inability to use some of the functions of our website.
We utilize cookies to make using our website simpler for the user, as cookies can be used to save language settings and search terms.
V. E-mail Contact
If you send us a request via e-mail, your information will be used solely to process that request This information is not forwarded to third parties.
At the time of dispatch, our system also stores the following information:
User’s IP address
Date and time of contact
The data sent in the e-mail is processed with your consent (Art. 6(1)(a) of the GDPR), which you provide by sending the e-mail. You can revoke this consent at any time by simply sending us an informal e-mail. The lawfulness of the data processing operations that are carried out up until the point that consent is revoked remains unaffected.
We keep the information you send until you request that we delete it or revoke our permission to save it, or until the purpose for storing said data no longer applies (after the processing of your request has been completed, for example). Mandatory legal provisions – especially retention periods – remain unaffected.
VI. Analytical Tools and Marketing
1. Google Analytics
This website utilizes components of the Web analytics service Google Analytics, operated by Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043).
Google Analytics uses so-called cookies. Cookies are text files stored on your computer that enable the analysis of your website activity. The website activity information provided by these cookies is generally transferred to a Google server in the United States and stored there.
The storage of Google Analytics cookies is carried out in accordance with Art. 6(1)(f) of the GDPR. The website operator has a legitimate interest in the analysis of user behavior to optimize its online service offering as well as its advertisements.
We have enabled IP anonymization on our website so that your IP address can be truncated by Google in member states of the European Union or in other contracting parties to the Agreement on the European Economic Area prior to transmission to the United States. Only in exceptional cases will full IP addresses be transmitted to a Google server in the United States and truncated there. Google will use this information on behalf of the website operator to analyze the website’s use, compile website activity reports, and provide further services related to website use and Internet use to the website operator. The IP address transmitted by your browser as part of Google Analytics is not collated with other data by Google.
You can prevent cookies from being stored by adjusting your browser settings accordingly; however, please be advised that in doing so, you may not be able to make full use of all the website’s functions. In addition, you can prevent the collection and transmission of data generated by cookies relating to your website activity (including your IP address) to Google as well as the processing of this data by Google by downloading and installing this Google-provided browser plugin: https://tools.google.com/dlpage/gaoptout?hl=en.
You can also prevent the collection of your data by Google Analytics by setting an opt-out cookie, which blocks such collection when visiting the website in the future.
We have entered into a contract with Google concerning order processing, and we fully comply with the German data protection authorities’ strict specifications when using Google Analytics.
This website utilizes the Google Analytics ‘Demographics and Interests reports’ function to compile reports that contain information such as the age, gender, and interests of website visitors. This information comes from interest-based advertisement from Google as well as visitor data from third parties. This data cannot be attributed to any identifiable person. You can deactivate this function at any time by changing the display settings of your Google account or by generally blocking the collection of your data by Google Analytics as described in the ‘Opposition to Data Collection’ section.
VII. Additional plugins and tools
We use plugins from the Google-operated website YouTube (YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066).
When you visit one of our pages featuring a YouTube plugin, a connection to the YouTube servers is established. This communicates which of our pages you have visited to the YouTube server.
When you are logged in to your YouTube account, you allow YouTube to attribute your browsing behavior directly to your personal profile. You can prevent this by logging out of your YouTube account.
The utilization of YouTube occurs in the interest of creating an appealing display of our online services. This constitutes a legitimate interest in accordance with Art. 6(1)(f) of the GDPR.
2. Google Maps
We utilize Google Inc.’s (1600 Amphitheatre Parkway, Mountain View, CA 94043) map service Google Maps via an API.
In order to use Google Maps functions, it is necessary to store your IP address. This information is generally transferred to a Google server in the United States and stored there. We cannot influence this data transmission.
Google Maps is utilized in the interest of displaying our online services in an appealing way and making the locations mentioned on the website easy to find. This constitutes a legitimate interest in accordance with Art. 6(1)(f) of the GDPR.
VIII. Your Rights as a Data Subject
Insofar as we continue to process your personal data, you are considered a data subject within the context of the GDPR. As such, you have the following rights:
1. Right of access (Art. 15 of the GDPR)
You have the right to obtain information about the personal data we have stored concerning you, at any time and free of charge. To prevent misuse, you will be required to identify yourself.
2. Right to rectification (Art. 16 of the GDPR)
You have the right at any time to rectify and/or complete the personal data we have stored concerning you if this data is incorrect or incomplete.
3. Right to erasure – ‘right to be forgotten’ (Art. 17 of the GDPR)
You have the right to request the erasure of the personal data we process concerning you. This is particularly applicable when the purpose for processing your personal data no longer applies, when you revoke necessary consent, or when there are no other legal grounds for us to process your data. We will then immediately erase your personal data within the legal framework.
4. Right to restriction of processing (Art. 18 of the GDPR)
You have the right to restrict the processing of your data.
If the processing of your personal data has been restricted, this data – apart from its storage – may only be used with your consent or for the purpose of asserting, exercising, or defending legal claims, or for protecting the rights of another natural or legal person, or for reasons of an important public interest of the European Union or of a member state.
If processing has been restricted on the basis of the aforementioned conditions, you will be informed by the controller before the restriction is lifted.
5. Right to notification (Art. 19 of the GDPR)
If you have asserted your right to rectification, erasure, or restriction of processing against the controller, the controller is obligated to communicate any rectification or erasure of personal data or restriction of processing to each recipient to whom the personal data has been disclosed, unless this proves impossible or involves disproportionate effort.
You have the right to be informed by the controller about these recipients.
6. Right to data portability (Art. 20 of the GDPR)
You may request that we transmit the data we have stored concerning you in machine-readable form.
7. Right to object (Art. 21 of the GDPR)
You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data that is carried out in accordance with Art. 6(1)(e) or (f) of the GDPR; this also applies to profiling based on those provisions.
The controller will no longer process your personal data, unless the controller demonstrates compelling, legitimate grounds for the processing which override the interests, rights, and freedoms of the data subject or for the establishment, exercise, or defense of legal claims.
Where personal data is processed for direct marketing purposes, you have the right to object at any time to processing of your personal data for such marketing. This also includes profiling to the extent that it is related to such direct marketing.
If you object to processing for direct marketing purposes, your personal data will no longer be processed for such purposes.
8. Right to lodge a complaint with a supervisory authority (Art. 77 of the GDPR)
You have the right to lodge a complaint with a supervisory authority without prejudice to any other administrative or judicial remedy if you consider the processing of your personal data to be infringing the GDPR. You can exercise this right with a supervisory authority in the member state where you reside or work, or in the place where the alleged infringement has occurred. The responsible supervisory authority in the German state of Baden-Württemberg is:
Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg
(The Baden-Württemberg State Commissioner for Data Protection and Freedom of Information)
70173 Stuttgart, Germany
Tel.: (+49-711) 615-5410
The supervisory authority with which the complaint has been lodged shall inform the complainant on the progress and outcome of the complaint, including the possibility of a judicial remedy pursuant to Article 78 of the GDPR.