Privacy Policy

The following information will provide you with an easy to navigate overview of what will happen with your personal data when you visit our website. The protection of your privacy when processing personal data as well as the security of all business data is of importance to the management and employees of E.L.F Hallen und Maschinenbau GmbH.

Responsible according to Art. 4 para. 7 GDPR

E.L.F Hallen und Maschinenbau GmbH
Lüchtringer Weg 52
37603 Holzminden
Germany

Phone: +49 5531 990 56 0
E-mail: info@elf-hallen.de

Data protection officer of the responsible

We have appointed a data protection officer for our company.

Dr. Ralf W. Schadowski
Mail: privacy@elf-hallen.com

Definitions of terms

What does “personal data” mean?
Any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

What does “processing” mean?

Any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

What is the meaning of “Restriction of Processing”?

the marking of stored personal data with the aim of limiting their processing in the future.

What is the meaning of “Profiling”?

Any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects concerning that natural person’s performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements.

What is the meaning of “Pseudonymisation”?

The processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organizational measures to ensure that the personal data are not attributed to an identified or identifiable natural person.

What is the meaning of “Controller”?

The natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law.

What is the meaning of “Processor”?
A natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.

What is the meaning of “Third Party”?
A natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorized to process personal data.

What is the meaning of “Consent”?
Any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.

§ 1 Lawfulness of the processing of personal data

(1) Insofar as we obtain the consent of the data subject for processing operations of personal data, Art. 6 para. 1 lit. a GDPR serves as the legal basis.

(2) In the processing of personal data necessary for the performance of a contract to which the data subject is a party, Art. 6 para. lit. b GDPR serves as the legal basis. This also applies to processing operations necessary for the performance of pre-contractual measures.

(3) Insofar as the processing of personal data is necessary to fulfil a legal obligation to which our company is subject, Art. 6 para. 1 lit. c GDPR serves as the legal basis.

(4) Insofar as vital interests of the data subject or of another natural person require the processing of personal data, Art. 6 para. 1 lit. d GDPR serves as the legal basis.

(5) If the processing is necessary to safeguard a legitimate interest of our company or of a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the former interest, Art. 6 para. 1 lit. f GDPR serves as the legal basis for the processing.

§ 2 Data deletion and storage duration

(1) The personal data of the data subject shall be erased or blocked as soon as the purpose of the storage is no longer valid.

(2) Data may also be stored if this has been provided for by the European or national legislator in Union regulations, laws or other provisions to which the data controller is subject.

(3) Data shall also be blocked or deleted when a storage period prescribed by the standards expires, unless there is a need to continue storing the data for the purpose of concluding or fulfilling a contract.

§ 3 Information on the collection of personal data

(1) In the following we inform about the collection of personal data when using our website. Personal data are all data that can be related to you personally, e.g. name, address, e-mail addresses, user behaviour.

(2) When you contact us by e-mail or via a contact form, the data you provide (your e-mail address, your name and telephone number if applicable) will be stored by us in order to answer your questions. We delete the data collected in this context after storage is no longer required or restrict processing if there are legal storage obligations.

(3) If we would like to use contracted service providers for individual functions of our offer or use your data for advertising purposes, we will inform you in detail about the respective processes below. In this context, we will also state the defined criteria for the storage period.

Collection of personal data when visiting our website
If you use the website for informational purposes only, i.e. if you do not register or otherwise provide us with information, we only collect the personal data that your browser sends to our server. If you wish to view our website, we collect the following data, which is technically necessary for us to display our website and to ensure stability and security (legal basis for this is Art. 6 para. 1 p. 1 lit. f GDPR):

• IP address
• Hostname
• Date and time of the request
• Time zone difference to Greenwich Mean Time (GMT)
• Content of the request (concrete page)
• Access status/HTTP status code
• Amount of data transmitted in each case
• Website from which the request comes (referrer)
• The specific pages of our website that you have called up
• Browser: Type, version and set language
• Operating System: type and version
  • With JavaScript enabled as well:
    • Screen resolution
    • Colour depth
    • Size of the browser window
    • Installed browser plugins

§ 4 Use of cookies

Our website uses the Borlabs cookie consent technology to obtain your consent to the storage of certain cookies in your browser and for their data privacy protection compliant documentation. The provider of this technology is Borlabs – Benjamin A. Bornschein, Georg-Wilhelm-Str. 17, 21107 Hamburg, Germany (hereinafter referred to as Borlabs).

Whenever you visit our website, a Borlabs cookie will be stored in your browser, which archives any declarations or revocations of consent you have entered. These data are not shared with the provider of the Borlabs technology.

The recorded data shall remain archived until you ask us to eradicate them, delete the Borlabs cookie on your own or the purpose of storing the data no longer exists. This shall be without prejudice to any retention obligations mandated by law. To review the details of Borlabs’ data processing policies, please visit https://de.borlabs.io/kb/welche-daten-speichert-borlabs-cookie/

We use the Borlabs cookie consent technology to obtain the declarations of consent mandated by law for the use of cookies. The legal basis for the use of such cookies is Art. 6 Sect. 1 Sentence 1 lit. c GDPR.

§ 5 Rights of the data subject

In the following, we will inform you about your rights as a data subject according to Art. 15 GDPR. You can exercise these rights at any time and therefore contact us directly. If you claim these rights from us, we will examine them in detail, considering the legal requirements and conditions associated with them. For this purpose, we may ask you for further information. We will explain the results of our examination and our procedure for fulfilling your request in detail. It is possible that we will not be able to fully meet your requirements in the manner you have requested.

This should not prevent you from asserting your rights against us or from asking us about them. We will gladly answer all your questions.

(1) Right of access by the data subject

In accordance with Art. 15 GDPR, you have the right to request information from us at any time as to whether and which data relating to your person are being processed by us. This also includes information on the purposes of processing, if applicable to recipients to whom we have disclosed data about you, the planned storage period and, if applicable, information on the origin of this data, unless we have collected it directly from you. Furthermore, you have the right to receive a one-time copy of your personal data stored with us free of charge. We reserve the right to charge a reasonable administration fee for making subsequent copies.

(2) Right to rectification

In accordance with Art. 16 GDPR, you have the right to demand that we correct inaccurate data that we have stored about you. This also includes the right to complete incomplete personal data.

(3) Right to erasure (‚right to be forgotten“)

You have the right to demand that we delete data that we have stored about you. If we have published data about you, this also includes our obligation, within the framework of the “right to be forgotten” in accordance with Art. 17 Para. 2 GDPR, to forward your request for deletion, considering available technology and implementation costs, all links to this data as well as copies or replications of this data concerning other persons responsible for processing this published personal data.

(4) Right to restriction of processing

In accordance with Art. 18 GDPR, you have the right to demand that we restrict the processing of data that we have stored about you. Thereafter, processing of this data will only be possible with your consent or for a limited number of legally defined purposes.

(5) Right to object

Insofar as we base the processing of your personal data on the balancing of interests, you may object to the processing in accordance with Art. 21 GDPR. This is the case if the processing is not necessary, in particular, for the performance of a contract with you, which is described by us in the following description of the functions. If you exercise such an objection, we would ask you to explain the reasons why we should not process your personal data as we have done. In the event of your justified objection, we will examine the situation and either stop or adapt the data processing or show you our compelling reasons worthy of protection on the basis of which we will continue the processing.

Of course, you can object to the processing of your personal data for advertising and data analysis purposes at any time. You can inform us about your objection to advertising via the contact channels listed above.

(6) Right of withdrawal of a data protection consent

If you have given your consent to the processing of your data, you can revoke this consent at any time in accordance with Art. 7 Para. 3 GDPR. Such revocation will affect the permissibility of processing your personal data after you have given it to us.

(7) Right to data portability

In accordance with Art. 20 GDPR, you have the right to receive from us data relating to your person which you have provided to us in a structured, common and machine-readable format for the purpose of transfer to another responsible party. At your request and taking into account the existing technical possibilities, this also includes direct transfer from us to the other responsible party.

(8) Right to lodge a complaint with a supervisory authority

In accordance with Art. 13 GDPR, you have the right to complain at any time to a data protection supervisory authority about our processing of data relating to your person.

(9) Automated individual decision-making, including profiling

They have the right to obtain information on the existence of automated decision-making, including profiling, in accordance with Article 22 (1) and (4) GDPR and, at least in these cases, meaningful information about the logic involved and the scope and intended impact of such processing on the data subject.

§ 6 Web Analytics

The lawfulness of the use of all web analysis tools listed in this section is Art. 6 Abs. 1 lit. a GDPR (“Consent” based on your decision in our Cookie Banner), i.e. the protection of our legitimate interests in consideration of the interests of our website visitors. Our interest is the analysis of the use of our website by our website visitors in order to improve our offer and to make it more interesting for you as a user by means of the statistics thus obtained. If the analysis tool used also serves other purposes or we use it for other interests of ours, we will inform you about this directly in the explanations of the respective analysis tool.  

1. Use of Google Analytics

(1) This website uses Google Analytics, a web analysis service of Google Inc. in so far as you have agreed to cookies of the category “Statistics”. (“Google”). Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyses how users use the site. The information generated using cookies about your use of this website is usually transferred to a Google server in the USA and stored there. However, if IP anonymization is activated on this website, your IP address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area beforehand. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on the website activities and to provide further services to the website operator in connection with the use of the website and the Internet.

(2) The IP address transmitted by your browser within the framework of Google Analytics is not merged with other data from Google.

(3) You may refuse the use of cookies by selecting the appropriate settings on your browser, however, please note that if you do this you may not be able to use the full functionality of this website. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plug-in available under the following link: http://tools.google.com/dlpage/gaoptout?hl=en.

(4) This website uses Google Analytics with the extension “_anonymizeIp()”. This allows IP addresses to be processed in a shortened form, thus excluding the possibility of personal references. If the data collected about you contains a personal reference, this is immediately excluded, and the personal data is immediately deleted.

(5) For the exceptional cases in which personal data is transferred to the USA, Google has subjected itself to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

(6) Third party information: Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001
User conditions: http://www.google.com/analytics/terms/de.html
Data protection overview: http://www.google.com/intl/de/analytics/learn/privacy.html
Privacy policy: http://www.google.de/intl/de/policies/privacy.

§ 7 Social Media and other third-party services

1. Google Web Fonts (local embedding)

This website uses so-called Web Fonts provided by Google to ensure the uniform use of fonts on this site. These Google fonts are locally installed so that a connection to Google’s servers will not be established in conjunction with this application.

For more information on Google Web Fonts, please follow this link: https://developers.google.com/fonts/faq and consult Google’s Data Privacy Declaration under: https://policies.google.com/privacy?hl=en.

2. Facebook fan page

(1) The use of our Facebook fan page requires the collection of personal data. Some are also collected during an unannounced visit. More specifically, meta data (frequency, duration, location from which the “Like” information was provided, when users are online, which posts reach fans, which fans have interacted with posts and to what extent, information about the device used), personal data (gender, age, location, language and other demographic data) are obtained from Facebook. This personal information is used here for statistical purposes. The legal basis for the use is Art. 6 Paragraph 1 f of the DSGVO.

(2) As a user you can exercise your rights in accordance with Art. 12 – 23 DSGVO. Detailed explanations can be found in Art. 5, Rights of the Data Subject.

(3) Further information on Facebook’s data policy can be found at https://www.facebook.com/about/privacy/, and information on Insight data at https://www.facebook.com/legal/terms/information_about_page_insights_data.

(4) According to Art. 26 DSGVO, there is a joint responsibility between us and Facebook. This is in the form of a contract on https://www.facebook.com/legal/terms/page_controller_addendum. to find.

Updated: 29.04.2020