Data privacy according to the GDPR
Data privacy at KW Kranwerke GmbH in accordance to GDPR
The purpose of the following information is to give you an overview on the how we handle your personal information and your rights based on data privacy laws. What data are processed individually and used in what way is generally based on the agreed services. That is why it is likely that not all sections in this statement will apply to you.
Who is responsible for data processing and who can I contact?
Responsible party:
KW Kranwerke GmbH
Rotterdamer Straße 15
68219 Mannheim, Germany
Telephone: +49 621 8337010
Fax: +49 621 833701-55
info@kranwerke.de
Contact details of the company data protection officer
Philipp Nägele
Königsallee 35
71638 Ludwigsburg
Mail: naegele@dip-datenschutz.com
Contact details of the competent supervisory authority
Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit
Postfach 10 29 32
70025 Stuttgart
Tel.: +49 (0)711-615541-0
Fax: +49 (0)711-615541-15
Mail: poststelle@lfdi.bwl.de
What sources and data do we use?
We process the personal data we receive from our customers or other associated parties as part of our business relationships. In addition, to the extent it is necessary – to provide our services –, we process personal data that we obtain from publicly accessible sources (e.g. debtor records, land registers, trade and association registers, press, Internet) by permission or from other third parties (e.g. credit rating agency) authorised to share it.
Relevant personal data include personal details like name, address, and other contact data. Moreover, it can also include order data.
We collect personal data from the website only if you enter it. We use the data shared with us exclusively for the purpose of communication (e.g. making contact, preparing an offer). Once the respective purpose of the data is no longer relevant, the data are deleted. Personal data are only forwarded if it is necessary to meet our incumbent obligations or if you have granted your permission.
When you visit our web pages, your data is collected, processed, and used and a connection to persons cannot always be ruled out. For the pages to be displayed in your browser, the IP address has to be collected, otherwise the browser in your device, whether PC, Notebook, or smart phone, would not be able to receive data from this website. As a rule, an IP address is currently dynamically assigned by your provider. This address changes regularly so that we cannot establish a connection to a person from the IP address. With static IP addresses, however, in individual cases, making a connection to a person is theoretically possible. We save complete IP addresses for a maximum of 7 days.
Our web server’s protocol file not only saves the IP address, other information may be saved when the data called up. This can include:
- the operating system of the computer accessing the data
- Browser version of the computer
- Name of the file requested
- Date and time of the request
- Data volume transferred
- Referenced URL
The stored data are saved and used only for statistic purposes and to collect errors. Normally, we cannot establish a connection to a person from the data.
For marketing and optimisation purposes, cookies may be used on this website in addition to products and services.
Cookies are small text files that are stored in the user’s Internet browser and used to recognise the Internet browser. The data collected that can also include personal data are transmitted directly to KW Kranwerke GmbH or collected directly by KW Kranwerke GmbH. Also, KW Kranwerke GmbH may use information that is left behind from visits to the website in order to create anonymous user profiles. The data acquired in this way will not be used without the separately issued and express permission of the affected person in order to identify the visitors to this website personally; also the data will not be compiled with personal data on the bearer of the pseudonym. If IP addresses are collected, these are immediately made anonymous after collection by deleting the last number block. The data collection, processing, and storage can be revoked at any time, effective for the future.
Why do we process your data (purpose of data processing) and what is the legal basis for this?
We process personal data in line with the provisions of the EU General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG)
a) to meet contractual obligations (Art. 6 para. 1 b GDPR)
Data is processed to render services as part of meeting our contractual obligations with our customers or to perform pre-contractual actions that are requested. The purposes of data processing are initially geared toward the concrete product.
b) based on your consent (Art. 6 para. 1 a GDPR)
As long as you have given us permission to process your personal data for certain purposes (e.g. photographs for events, sending newsletters), it is legal for us to process your data based on your permission. You may revoke your permission to at any time. This also applies to revoking declarations of consent that were issued prior to the GDPR going into effect, namely prior to 25 May 2018. Revocation of permission applies to the future and does not impact legality prior to the revocation of permission to process your data.
Who processes my data?
The company offices that obtain access to your data are the ones that need it to meet our contractual and legal obligations.
Are data transmitted to a third country or an international organisation?
Data transmission to offices in countries outside the European Union (so-called third countries) does not occur.
How long will my data be stored?
We process and store your personal data for as long as it is necessary to meet our contractual and legal obligations. If the data are no longer necessary for contractual or legal obligations, these are regularly deleted unless – limited – further processing is necessary for the following purposes:
- Meeting trade and tax retention obligations that may emerge, for example, from the German Commercial Code (Handelsgesetzbuch or HGB). The time period for archiving documentation normally ranges from two to ten years.
- Maintaining evidence as part of the legal statute of limitation. According to §§ 195 ff of the German Civil Code (BGB), these statutes of limitation can be as long as 30 years, though normal statutes of limitation are 3 years.
What are my data privacy rights?
Each person affected has the right to information according to Article 15 of the GDPR, the right to correction according to Article 16 of the GDPR, the right to delete according to Article 17 GDPR, the right to limit data processing according to Article 18 GDPR, the right to revoke Article 21 of the GDPR as well as the right to data portability from Article 20 of the GDPR. In the case of the right to information and deletion, the limitations pursuant to §§ 34 and 35 BDSG apply. Moreover, a right to appeal with the relevant data privacy supervisory authorities (Article 77 GDPR in accord with § 19 BDSG).
You can revoke permission granted by you to process your personal data at any time. This also applies to revoking declarations of consent that were issued prior to the GDPR going into effect, namely prior to 25 May 2018. Please note that revoking permission only applies to the future. Data processed prior to revocation is not affected.
Your right to information and to ask questions regarding data privacy
You can request information on what data of yours we have saved and how we are using it. Should the data be incorrect, we will make any corrections you give us. At your request, we will delete all your personal data.
Am I obligated to provide data?
As part of our business relationship, you have to provide personal data that are necessary to start, carry out, and end a business relationship and to meet the associated contractual obligations or to collect the data that we are legally obligated to provide. Without these data, we will not be able to conclude, execute, and end a contract with you.
Information on your right to appeal according to Article 21 of the GDPR Individual right to appeal
For reasons that emerge from your personal situation, you have the right to object at any time to the processing of personal data that refers to you, which, based on Article 6 para. 1e of the GDPR (Data Processing in the Public’s Interest) and Article 6 para 1f GDPR (Data Processing based on Balancing of Interests); this also applies to profiling supported on this provision according to Article 4 no. 4 of the GDPR.
If you file an objection, we will no longer process your personal data unless we can submit urgent justified grounds for processing it that outweigh your interests, rights, and freedoms, or processing serves to enforce, exercise or defend legal claims.
Right to object to data processing for direct advertising purposes
In individual cases, we process your personal data to do direct advertising. You have the right at any time to object to the processing of personal data that refers to you for the purposes of such advertising; this also applies to profiling to the extent it relates to such direct advertising. If you object to personal data processing for purposes of direct advertising, we will no longer process your personal data for these purposes.
Recipient of the objection
Submitting an objection requires no form. It can be sent to the below address with the word “objection” in the subject line along with your name and your address:
KW Kranwerke GmbH
Rotterdamer Straße 15, 68219 Mannheim, Germany
Telephone: +49 621 8337010
widerspruch@kranwerke.de