Name: Schäfer GmbH & Co. KG
Street: Vierhausen 7
Zip code, place: 49324 Melle
Phone: 05422 9109740
Fax: 05422 9109741
Email: info@holz-schaefer.de
Every time a user accesses a page of our offer and every time a file stored on the website is called up, access data about this process is stored in a log file. Each record consists of:
(1) the page from which the file was requested,
(2) the name of the file,
(3) the date and time of the request,
(4) the amount of data transferred,
(5) the access status (file transferred, file not found, etc.),
(6) a description of the type of operating system and web browser used,
(7) host name of the accessing computer,
(8) the client IP address.
We use this data to operate our website, in particular to determine the utilization of the website and malfunctions of the website and to make adjustments or improvements. The client IP address is used for the purpose of transmitting the requested data; it will be anonymised after the technical requirement has been removed by deleting the last block of numbers (Ipv4) or the last octet (Ipv6).
The data is stored every time a user accesses a page of our offer and every time our website is accessed and is deleted as soon as it is no longer required for the purpose of collection, which is the case no later than three months after visiting the website .
The temporary storage of the aforementioned data takes place on the legal basis of Article 6 Paragraph 1 Letter f of the EU General Data Protection Regulation (hereinafter “GDPR”). The legitimate interest lies in making our website available and checking for improper use.
The person concerned can object to the processing by not using our website and, subject to the conditions described in more detail below in the “Rights” section, request the deletion of data collected from him in this way by means of an informal declaration.
In order to technically enable visiting our website and the ordering process, we transfer so-called cookies to the end device of the person concerned. Cookies are small text files that allow the data subject's end device to be identified, usually by recording the name of the domain from which the cookie data was sent, information about the age of the cookie and an alphanumeric identifier. By storing the cookie on the end device used - without interfering with the operating system - it is recognized again and enables us to make any default settings available immediately. We use this information to adapt our website and the services we offer to your needs and to speed up access to our website.
The storage period of the various cookies varies, but is a maximum of two years. They are stored on your local device, not on our server, which is why the actual deletion time depends on how your browser software is configured. Please refer to the operating instructions for your browser software to find out how you can delete cookies set by us on a case-by-case basis or automatically.
The aforementioned data is stored on the legal basis of Article 6 (1) (f) GDPR. The legitimate interest in setting cookies is, on the one hand, to be able to optimize the quality of our website through analysis and, on the other hand, to enable visits to our website; In particular, some functions on our website cannot be used without cookies, since otherwise the user and the settings he has already made would not be recognized when changing pages, language settings would be lost and searches could not be carried out. Furthermore, the storage takes place on the legal basis of Art. 6 Para. 1 lit. b DSGVO for the execution of the contract.
The person concerned can block the use of cookies in the end device used or delete them after use. Under certain circumstances, however, individual functions of our offer may not be usable. How to block cookies and how to delete cookies that have already been saved can be found in the instructions for the browser software.
We use the "Real Cookie Banner" consent tool to manage the cookies and similar technologies used (tracking pixels, web beacons, etc.) and to provide consent in this regard. Details on how "Real Cookie Banner" works can be found at https://devowl.io/de/rcb/datenverarbeitung/.
The legal basis for the processing of personal data in this context is Art. 6 (1) (c) GDPR and Art. 6 (1) (f) GDPR. Our legitimate interest is the management of the cookies and similar technologies used and the relevant consents.
The provision of personal data is neither contractually required nor necessary for the conclusion of a contract. You are not obliged to provide the personal data. If you do not provide the personal data, we cannot manage your consents.
We provide a contact form on the website. The person concerned can contact us electronically and we can process the request. The following data is collected and stored: name, e-mail address, telephone number and content. [Please complete or delete any data collected here].
A user can contact us by e-mail, fax or telephone. We store the data transmitted to us and provided by the person concerned in order to process the request. This data is name, address, e-mail address, telephone and/or fax number, date and time of the request and a description of the request, possibly contract data if the request is made as part of a contract.
The data will not be passed on to third parties. They serve to process the contact request of the data subject.
As soon as the data is no longer necessary to achieve the purpose, it will be deleted, which is the case when the conversation has finally ended and the facts have been clarified and there are no contractual or tax retention periods to the contrary. This period is five years for personal data subject to § 147 AO and ten years for personal data subject to § 257 HGB. The periods begin at the end of the calendar year in which the data was collected.
The aforementioned data is stored on the legal basis of Article 6 (1) (b) GDPR in the context of initiating or fulfilling a contract or in accordance with Article 6 (1) (f) GDPR. The legitimate interest of the person responsible is to be able to process the contact request and to prevent misuse of the contact request.
The data subject has the option to object to the storage at any time. The data stored for the process will then be deleted. If a contract has been concluded, the above statements on the keyword “conclusion of contract” apply.
If personal data is processed by the user on our website, the person concerned has the following rights vis-à-vis the person responsible in accordance with the GDPR.
The data subject has the right to the following information:
a) the processing purposes;
b) the categories of personal data being processed;
c) the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organizations;
d) if possible, the envisaged period for which the personal data will be stored or, if this is not possible, the criteria used to determine that period;
e) the existence of a right to correction or deletion of the personal data concerning you or to restriction of processing by the person responsible or a right to object to this processing;
f) the existence of a right of appeal to a supervisory authority;
g) if the personal data are not collected from the data subject, all available information about the origin of the data;
h) the existence of automated decision-making including profiling in accordance with Art. 22 (1) and (4) GDPR and - at least in these cases - meaningful information about the logic involved and the scope and intended effects of such processing for the data subject.
i) If personal data is transmitted to a third country or to an international organization, the data subject has the right to be informed of the appropriate guarantees pursuant to Art. 46 GDPR in connection with the transmission.
We provide the data subject with a copy of the personal data that is the subject of the processing. For any additional copies requested by the data subject, the controller may charge a reasonable fee based on administrative costs.
The data subject has the right to demand that the person responsible correct incorrect personal data concerning them without delay. Taking into account the purposes of the processing, the data subject has the right to request the completion of incomplete personal data - also by means of a supplementary declaration.
The data subject has the right to demand that the person responsible delete personal data concerning him/her immediately, and the person responsible is obliged to delete personal data without delay if one of the following reasons applies:
a) the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
b) the data subject revokes their consent on which the processing was based pursuant to Article 6(1)(a) or Article 9(2)(a) GDPR and there is no other legal basis for the processing;
c) the data subject objects to the processing pursuant to Article 21(1) GDPR and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing pursuant to Article 21(2) GDPR;
d) the personal data have been processed unlawfully;
e) the erasure of the personal data is necessary for compliance with a legal obligation in Union or Member State law to which the controller is subject;
f) the personal data were collected in relation to information society services offered pursuant to Art. 8 (1) GDPR.
The data subject has the right to demand that the person responsible restrict the processing if one of the following conditions is met:
a) the accuracy of the personal data is disputed by the data subject, for a period enabling the controller to verify the accuracy of the personal data,
b) the processing is unlawful and the data subject refuses to have the personal data deleted and instead requests that the use of the personal data be restricted;
c) the person responsible no longer needs the personal data for the purposes of processing, but the data subject needs them to assert, exercise or defend legal claims, or
d) the data subject has lodged an objection to the processing pursuant to Art. 21 (1) GDPR, as long as it is not certain whether the legitimate reasons of the person responsible outweigh those of the data subject.
If the person concerned has asserted a correction pursuant to Art. 16 GDPR, erasure pursuant to Art. 17 Para. 1 GDPR or restriction of processing pursuant to Art personal data of the data subject were disclosed about the request of the data subject (unless this was impossible or involved disproportionate effort), the data subject has the right to be informed by the person responsible about the recipients.
The data subject has the right to receive the personal data concerning him/her that he/she has provided to a person responsible in a structured, common and machine-readable format, and he/she has the right to transmit this data to another person responsible without hindrance from us, provided that
a) the processing is based on consent pursuant to Article 6(1)(a) or Article 9(2)(a) or on a contract pursuant to Article 6(1)(b) GDPR and
b) the processing is carried out using automated procedures.
The rights and freedoms of other people must not be impaired as a result.
When exercising the right to data portability in accordance with paragraph 1, the data subject has the right to have the personal data transmitted directly by us to another person responsible, insofar as this is technically feasible.
Exercising the right to data portability does not affect the right to erasure under Art. 17 GDPR. The right to data portability does not apply to processing that is necessary for the performance of a task that is in the public interest or in the exercise of official authority that has been assigned to the person responsible.
The data subject has the right, for reasons arising from his particular situation, to object at any time to the processing of personal data relating to him, which is based on Article 6 Paragraph 1 lit. e or f GDPR; this also applies to profiling based on these provisions.
We no longer process personal data unless we can demonstrate compelling legitimate grounds for processing that outweigh the interests, rights and freedoms of the data subject, or the processing serves to assert, exercise or defend legal claims.
If personal data is processed in order to operate direct advertising, the person concerned has the right to object at any time to the processing of personal data relating to him for the purpose of such advertising; this also applies to profiling insofar as it is associated with such direct advertising. If the data subject objects to the processing for direct marketing purposes, the personal data will no longer be processed for these purposes.
Consent given by the person concerned can be revoked at any time. However, the collection and processing that has taken place up to this point remains lawful.
The data subject has the right not to be subject to a decision based solely on automated processing - including profiling - which has legal effect on him or similarly significantly affects him.
This does not apply if the decision
a) is necessary for the conclusion or fulfillment of a contract between the data subject and us,
b) is permissible on the basis of legal provisions of the Union or Member States to which we are subject and these legal provisions contain appropriate measures to safeguard the rights and freedoms and legitimate interests of the person concerned or
c) with the express consent of the person concerned.
These decisions must not be based on special categories of personal data pursuant to Article 9 (1) GDPR unless Article 9 (2) lit. a or g GDPR applies and appropriate measures are taken to protect the rights and freedoms and legitimate interests of the data subject were hit.
In the cases referred to in points a) and c), we take appropriate measures to protect the rights and freedoms and legitimate interests of the data subject, including at least the right to obtain human intervention on our side, to express your own point of view and to challenge the decision.
Without prejudice to any other administrative or judicial remedy, each data subject has the right to lodge a complaint with a supervisory authority, in particular in the Member State of his or her habitual residence, place of work or the place of the alleged infringement, if the data subject believes that the processing of personal data concerning them violates violates the GDPR.
The supervisory authority to which the complaint has been submitted shall inform the complainant of the status and results of the complaint, including the possibility of a judicial remedy under Article 78 DSGVO.
Without prejudice to an available administrative or extrajudicial remedy, including the right to lodge a complaint with a supervisory authority pursuant to Art the processing of his personal data in accordance with the GDPR has been violated.
The courts of the Member State in which we or the processor have an establishment have jurisdiction over any legal action brought against us or a processor. Alternatively, such actions can also be brought before the courts of the Member State in which the data subject resides, unless we or the processor are an authority of a Member State that has acted in the exercise of its sovereign powers.
