Thank you for visiting our website paulwiegand.de and for your interest in our company.
The protection of your personal data, such as date of birth, name, telephone number, address, etc., is of great importance to us.
The purpose of this Privacy Policy is to inform you about the processing of your personal data that we collect when you visit our website. Our privacy policies comply with the legal regulations established in the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG). The intention of the following Privacy Policy is to ensure compliance with the mandatory information processing obligations of the GDPR. These obligations are detailed in Articles 13 and 14 et seq. of the GDPR.
The Data Controller, as defined in Article 4(7) of the GDPR, is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.
In relation to our website, the Data Controller is:
Paul Wiegand GmbH
Eschengrund 5
36124 Eichenzell-Kerzell, Germany
Email: info@paulwiegand.de
Tel.: +49 (0) 6659-9862-0
Fax: +49 (0) 6659-9862-150
We have appointed a Data Protection Officer in accordance with Article 37 of the GDPR. You can contact our Data Protection Officer as follows:
Paul Wiegand GmbH
– For the attention of the Data Protection Officer –
Eschengrund 5
D-36124 Eichenzell-Kerzell, Germany
Email: datenschutz@paulwiegand.de
Each time a person accesses our website, our system automatically captures data and information about the device accessing the site (e.g., computer, mobile phone, tablet, etc.).
What personal data is captured and to what extent is it processed?
Legal basis for the processing of personal data
Article 6(1)(f) of the GDPR (legitimate interests). Our legitimate interest consists of ensuring the achievement of the purpose described below.
The temporary (automated) storage of data is necessary to process a visit to the website and allow for its provision. Personal data is also stored and processed to ensure the compatibility of our website for all visitors, combat misuse, and rectify faults. To do this, it is necessary to record the technical data of the accessing computer to react as quickly as possible to display errors, attacks on our IT systems, and/or faults related to the functionality of our website. We also use the data to optimize the website and ensure the general security of our information technology systems.
The aforementioned data will be deleted as soon as it is no longer necessary to ensure the compatibility of the website for all users, but no later than 3 months after accessing our website.
You may object to the processing of your data at any time in accordance with Article 21 of the GDPR and demand that the data be deleted in accordance with Article 17 of the GDPR. The last section of this Privacy Policy describes your rights and how to exercise them.
Our website offers you various functions, the use of which involves the capture, processing, and storage of personal data. Below, we detail how we process this data:
– What personal data is captured and to what extent is it processed?
The data you have entered in our contact forms, which you have entered on the form input screen.
– Legal basis for the processing of personal data
Article 6(1)(a) (Consent through a clear affirmative action or behavior).
– Purpose of data processing
We only use the data captured through our contact form or forms to process specific contact inquiries received through it. Please note that we may also send emails to the specified address to fulfill your contact inquiry. The purpose of this is to obtain confirmation from you that your inquiry has been correctly sent to us. The return of this confirmation email is not mandatory for us and is for informational purposes only.
– Storage duration
The captured data is deleted immediately once your inquiry has been processed, provided that no legal retention periods exist.
– Right of revocation and deletion
Your right of revocation and deletion is based on the general provisions governing the right of revocation and deletion regarding legal data protection described later in this Privacy Policy.
– Necessary provision of personal data
You use the contact form voluntarily and it is not required either contractually or legally. You are not obliged to contact us via the contact form; instead, you can use the other contact options on our website. If you wish to use our contact form, you must complete the fields indicated as mandatory. If you do not complete the required details, you will not be able to send the inquiry or, unfortunately, we will not be able to process it.
– Scope of processing of personal data and captured personal data
The registration and login data that you have entered or that we have shared with you.
– Legal basis for the processing of personal data
Article 6(1)(b) of the GDPR (Execution of (pre)contractual measures).
– Purpose of data processing
You have the option to use a separate login area on our website. You must enter your access data (email or username and password) in the corresponding form to allow us to verify that you are authorized to use the protected area and/or protected documents. If necessary, we can send you your access data or an option to reset your password by email upon request.
– Storage duration
The captured data is stored as long as you maintain a user account with us.
– Right of objection and deletion
You may object to the processing of your data at any time in accordance with Article 21 of the GDPR and demand that the data be deleted in accordance with Article 17 of the GDPR. The last section of this Privacy Policy describes your rights and how to exercise them.
– Necessary provision of personal data
The use of the login area on our website is contractually required for the use of the protected area. The use of content protected by the login area is impossible without the entry of personal data. If you wish to use our login area, you must complete the fields indicated as mandatory (username and password). You must have created a user account in advance to allow for the entry of data. You will not be able to log in if the data you have entered is incorrect. The protected area cannot be used if the data entered is incorrect or if you have not entered it. You can continue to use the rest of the website without needing to log in.
If you wish to enter into a contract with us, we reserve the right to perform exclusive automated processing of your personal data to verify your creditworthiness. We are also entitled to this type of automated decision-making in accordance with Article 22(2)(a) of the GDPR. The decision on whether or not the contract can be concluded depends on the result of the automated credit check. The credit check calculates the statistical probability of non-payment. Creditworthiness information may include probability values (score values), which are calculated on the basis of scientifically recognized mathematical and statistical procedures. A series of criteria, such as income, address data, occupation, marital status, and previous payment behavior, are used to determine the customer’s future risk of non-payment. The result is expressed in the form of a payment value (the so-called score). The information received in this way forms the basis of our decision on the justification, execution, or termination of a contractual relationship. Please do not hesitate to contact us by email to explain your point of view if you believe you have been unfairly denied the right to enter into a contract based on the credit check. We will check the automated decision on a case-by-case basis in accordance with Article 22(3) of the GDPR. We may store and process your personal data in accordance with Article 6(1)(b) of the GDPR to perform the credit check.
In view of the possible imminent conclusion of a contract, we will send your data to the following provider or providers in the following cases:
Creditsafe Deutschland GmbH:
Creditsafe Deutschland GmbH, Schreiberhauer Straße 30, 10317 Berlin, Germany (www.creditsafe.com): Our company regularly checks your creditworthiness when entering into contracts and, in certain cases, when a legitimate interest exists, even with existing customers. To do this, we work with Creditsafe Deutschland GmbH, from whom we obtain the necessary data. We send your name and contact details to Creditsafe Deutschland GmbH for this purpose.
Automated identity verification and credit check when “PayPal” is selected as the payment method
– What personal data is captured and to what extent is it processed?
If you have selected PayPal as your payment method, we will send the customer’s personal data that we have captured when processing your order to PayPal (Europe) S.à r.l. et Cie, P.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter, “PayPal”) as part of our payment processing procedure. If you give your consent, the following data is involved in the data transfer: first and last name, house number, street name, postal code, city/town, date of birth, telephone number, and data relating to your order.
– Legal basis for the processing of personal data
Article 6(1)(b) of the GDPR (Execution of (pre)contractual measures).
– Purpose of data processing
PayPal performs a credit check when you select the “PayPal” payment method. To do this, PayPal uses mathematical and statistical processes to calculate a rating score for the probability of non-payment (the so-called calculation of a scoring value). PayPal bases its decision on the provision of the respective payment methods on the calculated scoring value. The scoring value is calculated on the basis of recognized scientific procedures. We also refer you to PayPal’s Privacy Policy: https://www.paypal.com/es/webapps/mpp/ua/privacy-full
– Storage duration
We will keep the relevant data for payment processing for as long as necessary to complete the transaction. When data is subject to legal retention obligations, it will be deleted after the expiration of the required retention period. The period of time during which your data is stored by PayPal can be found in their Privacy Policy mentioned above.
– Right of objection and deletion
You may object to the processing of your data at any time in accordance with Article 21 of the GDPR and demand that the data be deleted in accordance with Article 17 of the GDPR.
We capture, process, and store the following data when you access this website or individual files from it: IP address, website from which the file was accessed, file name, date and time of access, volume of data transferred, and notification of successful access (the so-called web log). We exclusively use this access data in a non-personalized form for the continuous improvement of our website and for statistical purposes. We also use the following web trackers to analyze visits to this website:
– What personal data is captured and to what extent is it processed?
We use the service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter: Google Tag Manager) on our website. Google Tag Manager provides a technical platform to run other web services and web tracking programs using so-called “tags” and control them jointly. In this context, Google Tag Manager stores cookies on your computer and analyzes your browsing behavior (so-called “tracking”), provided that the web tracking tools are executed by Google Tag Manager. This data sent by the individual tags integrated into Google Tag Manager is combined, stored, and processed under a single user interface. All incorporated “tags” will be treated separately in this Privacy Policy. The corresponding section of this Policy contains more detailed information on the data protection of the integrated tools. Data such as your IP address and your user activities are transmitted to Google Ireland Limited servers and processed and stored outside the European Union, for example, in the USA. Google is certified under appropriate data transfer frameworks. The tracking tools in Google Tag Manager use IP anonymization of the source code to ensure that the IP address is anonymized by Google before the data is transmitted (IP masking).
– Legal basis for the processing of personal data
Your consent to the use of cookies and web tracking in our banner (Consent through clear affirmative action) constitutes the legal basis in accordance with Article 6(1)(a) of the GDPR.
– Purpose of data processing
Google uses the information collected by Google Tag Manager on our behalf to analyze your visit to this website, compile reports on website activity, and provide us with other services associated with the use of the website and the Internet.
– Storage duration
Google stores the data necessary for the correct functionality of Google Tag Manager for as long as necessary to fulfill the contracted web service. Data capture and storage are anonymous.
– Right of objection and deletion
You can prevent the collection and sending of personal data to Google (especially your IP address) by disabling script code execution in your browser, installing a script blocker, or enabling the “Do Not Track” setting in your browser. You can also download the Google Analytics opt-out browser add-on.
– Scope of processing of personal data
We use the web tracking service provided by Google Ireland Limited (hereinafter: Google Analytics) on our website. Google Analytics uses cookies that allow for an analysis of the use of our website and your browsing behavior. We perform this analysis to continuously optimize our offer and make it more accessible. Data is transmitted to Google servers. We also need web tracking for security reasons to track whether third parties are attacking our website. We have enabled IP anonymization.
– Legal basis for the processing of personal data
Your consent in accordance with Article 6(1)(a) of the GDPR.
– Purpose of data processing
Google uses this information on our behalf to analyze your visit, compile activity reports, and provide us with related services.
– Storage duration
Google stores the relevant data as long as necessary to fulfill the contracted service.
– Rights of objection and deletion
You can prevent data capture through your browser settings or by installing the plug-in available at: http://tools.google.com/dlpage/gaoptout?hl=en
We use active content from external providers, so-called web services, on our website. When visiting our site, these providers may obtain personal information about your visit. This data may be processed outside the EU. You can prevent this by installing a suitable browser plug-in or disabling script execution. This may restrict the functions available on the sites you visit.
We use the following external web services:
Service from CloudFlare, Inc., San Francisco, USA. Legal basis: Art. 6 para. 1(f) GDPR (legitimate interest: fault-free functionality). More information: https://www.cloudflare.com/privacypolicy/
Service from Google Ireland Limited. Legal basis: Art. 6 para. 1(f) GDPR. Purpose: Full functionality of the website. https://policies.google.com/privacy
These are all services provided by Google Ireland Limited. Legal basis: Art. 6 para. 1(f) GDPR (legitimate interest in the functionality and security of the site). Data is deleted once the purpose is fulfilled. Policies at: https://policies.google.com/privacy
Service from Cybot A/S, Copenhagen, Denmark. Used to ensure functionality and consent management. Legal basis: Art. 6 para. 1(f) GDPR. https://www.cookiebot.com/es/privacy-policy/
– Scope of processing of personal data
We integrate and use cookies on different pages to enable certain functions of our website and integrate external web services. “Cookies” are small text files that your browser can store on your device.
– Legal basis for the processing of personal data
Art. 6 para. 1(f) GDPR (legitimate interest) and Art. 6 para. 1(a) GDPR (consent). The legitimate interest lies in ensuring the technical functionality of the site (necessary cookies).
– Purpose of data processing
Maintaining full functionality, improving user experience or, with your consent, analysis purposes.
– Storage duration
Until manually deleted in the browser or until the session expires.
– Right of objection, revocation of consent and deletion
You can configure your browser to prevent the placement of cookies. You can withdraw your consent at any time without affecting the lawfulness of previous processing.
Your personal data is protected by technical and organizational measures to prevent it from being accessible to third parties. We cannot guarantee complete data security in the transmission of unencrypted emails, so we recommend the use of encrypted means or postal mail for highly confidential information.
You have the right to demand confirmation as to whether we are processing your personal data and to receive information according to Art. 15 of the GDPR.
According to Art. 16 of the GDPR, you have the right to have inaccurate personal data rectified or incomplete data completed immediately.
In accordance with Art. 17(1) of the GDPR, you have the right to ask us to delete your data if it is no longer necessary, if you withdraw your consent, if you object to the processing, if it is processed illegally or by legal obligation.
According to Art. 18 of the GDPR in specific cases (contested accuracy, illegal processing but refusal of deletion, etc.).
You can revoke your consent at any time (Art. 6 para. 1(a) or Art. 9 para. 2(a) of the GDPR).
In accordance with Art. 21 of the GDPR against processing based on legitimate interests (Art. 6 para. 1(f)).
How do I exercise my rights?
You can contact us at:
Paul Wiegand GmbH, Eschengrund 5, D-36124 Eichenzell-Kerzell, Germany.
Email: info@paulwiegand.de
RIGHT TO DATA PORTABILITY
In accordance with Art. 20 of the GDPR, you have the right to receive your data in a structured, commonly used, and machine-readable format, or to have it transmitted to another controller if technically feasible.
If you suspect that your data is being processed illegally, you have the right to contact a supervisory authority in your place of residence, place of work, or place of the alleged infringement.
Date: 2020-01-13