We thank you for visiting this website. The protection of personal data is very important to us. According to Article 4 of the European General Data Protection Regulation (DSGVO), personal data are all information relating to an identified or identifiable natural person ('the data subject'). These include z. Name, date of birth, address, telephone number and e-mail address.
Name and address of the data controller:
GENICRAFT GmbH & Co. KG
Telephone +49 (0) 1778290409
Internet site: www.genicraft.de
We are not obliged to order a data protection officer.
We and our processors take extensive organizational and technical measures to protect the data collected when visiting this website. However, the transmission of data on the Internet, including via e-mail, can not be completely protected against unauthorized access by third parties. Accordingly, data, news and information may also be sent by post to the above address.
In the following, we inform you how and to what extent personal data is collected, processed and used in connection with the visit to this website. In addition, we inform in Section III. Visitors to our website and data subjects have their rights to them.
I. General information about data processing
1. What is data processing?
For the purposes of the GDPR, the term "processing" means any process or series of operations performed with or without the aid of automated processes, in connection with personal data such as the collection, collection, organization, ordering, storage, adaptation or modification Reading, querying, using, disclosing through transmission, dissemination, or other form of provisioning, reconciliation or association, restriction, erasure or destruction.
2. Scope of processing of personal data
In principle, we process personal data of visitors to our website only insofar as this is necessary for the provision of a functioning website and its content and for the provision of our services and in accordance with the European Union or national legislature's enacted EU regulations, laws or other regulations.
3. Legal basis for the processing of personal data
1. Insofar as consent has been given by the data subject to the processing of personal data, Art. 6 (1) (a) of the GDPR is the legal basis.
2. The processing of personal data necessary for the performance of a contract of which the data subject is a party is the legal basis of Article 6 (1) (b) of the GDPR. This also applies to processing operations necessary to carry out pre-contractual measures, which are carried out at the request of the data subject.
3. Insofar as processing of personal data is required to fulfill a legal obligation that our company is subject to, the legal basis is Art. 6 para. (1) letter c) of the GDPR.
4. In the event that vital interests of the data subject or any other natural person require the processing of personal data, the legal basis is Article 6 (1) (d) of the GDPR.
5. If the processing is necessary for the performance of a task which is in the public interest or in the exercise of official authority and has been entrusted to us as the controller, the legal basis is Article 6 (1) (e) of the GDPR.
6. If processing is necessary to safeguard the legitimate interests of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the interests of our company or of the third party, Art. 6 (1) (f) of the GDPR the legal basis.
4. Storage and deletion of personal data
The personal data of the data subject will be deleted or blocked as soon as the purpose of the storage is deleted. In addition, such storage may be provided by the European or a national legislator in EU regulations, laws or other regulations, eg. B. statutory storage obligations, which our company is subject to. Upon expiration of a prescribed retention period, the personal data will be deleted or blocked unless further storage is made in accordance with any of the foregoing paragraphs 3. b., 3. c., 3. d., 3. e. or 3. f. legal bases required and allowed.
II. Data processing when using our website
1. Call our website and logfile
Each time you visit our website, the system of our order processor u. a. from the computer system used by the user for this purpose, different data and information and stores them in a so-called. Logfile. These data and information may include
1. the browser type and version used by the user,
2. the operating system used by the user,
3. the user's Internet service provider,
4. the IP address of the user,
5. Date and time of access,
6. Internet sites from which the user's system reaches our website,
7. Websites that are accessed by the user's system via our website.
In addition, data and information may be recorded in the log file, which may appear appropriate in order to ward off possible attacks on our contract processor's information technology systems.
The log files are stored to ensure the security of our contractor's information technology systems and the functioning of our website. In addition, the data and information stored in the log files serve us for statistical evaluations and the improvement of our website.
The data stored in the logfiles will be passed on to third parties only if we or our processor are legally obliged to do so or by court order or if this is necessary after attacks on the IT systems of our processor to assert their rights or prosecution.
In order to avoid the processing of personal data, the IP address of the user is pseudonymized before being stored in the log file. In addition, the data and information contained in the log files are stored separately from the otherwise collected personal data of data subjects, so that the data and information contained in the log file can not be assigned to a data subject.
In order to facilitate the visit of our website, so-called temporary cookies (session cookies) are temporarily stored in the working memory of the computer used for the visit by our website. These are data records with randomly generated identification numbers and information about their origin and storage duration. These session cookies do not contain any personal data and can not be used for the purpose of recognizing later visits to our website or for evaluating the interests or surfing behavior of the visitor. The session cookies are automatically deleted when you visit our website or close the Internet browser used by the visitor.
Permanently stored cookies (persistent cookies) that help Visitors to web pages recognized even after a long time, individual settings saved or the user behavior of visitors can be evaluated, our website does not use.
Visitors to our website can prevent the storage of cookies and delete already stored cookies by setting the Internet browser they use. In this case, not all features of our website may be used.
For your right to withdraw consent to the processing of personal data, please refer to paragraph 8. In the following section III.
III. Your rights as an affected person
1. Right to information
You have the right, at any time from us as the person responsible (see under preliminary remarks) to ask for confirmation of whether personal data concerning you are processed by us. If this is the case, you, the data subject, have a right to free information on such personal data and the following information:
1. the purposes for which the personal data are processed;
2. the categories of personal data being processed;
3. the recipients or the categories of recipients to whom the personal data concerning you have been disclosed or are still being disclosed;
4. if possible, the planned duration for which personal data relating to you are stored or, if this is not possible, the criteria for determining the duration of storage;
5. the right of rectification or erasure of personal data concerning you, a right to restriction of processing by the controller or a right to object to such processing;
6. the existence of a right of appeal to a supervisory authority;
7. all available information about the origin of the data, if the personal data not be collected from the data subject;
8. the existence of automated decision-making including profiling according to Art. 22 (1) and (4) GDPR and - at least in these cases - meaningful information about the logic involved and the scope and the intended effects of such processing for you as affected Person.
You also have the right to request information about whether your personal information relates to a third country or an international organization. If this is the case, you have the right to be informed about the appropriate guarantees under Art. 46 GDPR in connection with the transfer.
2. Right to rectification
As the data subject, you have the right at any time to request from us as the person responsible (see preliminary remarks) the correction of inaccurate personal data concerning you. Furthermore, as the data subject, you have the right, under consideration of the purposes of the processing, to request the completion of incomplete personal data, including by means of a supplementary statement.
3. Right to restriction of processing
As the data subject, you have the right to demand, at any time from us as the controller (see preliminary remarks), the restriction of the processing of your personal data if any of the following conditions apply:
1. You deny the accuracy of your personal information for a period of time that enables the controller to verify the accuracy of your personal information;
2. the processing is unlawful and you as the data subject refuse to delete the personal data and instead request the restriction of the use of the personal data;
3. the person responsible no longer needs the personal data for the purposes of the processing, but you as the data subject need this data to assert, exercise or defend your legal claims;
4. As the person concerned, you have lodged an objection against the processing in accordance with Art. 21 (1) of the GDPR and it is not yet certain whether the legitimate reasons of the person responsible prevail over your reasons.
If the processing of personal data concerning you has been restricted, this data may only be used with your consent or for the purpose of asserting, exercising or defending legal claims or protecting the rights of another natural or legal person or for reasons of important public interest the European Union or a Member State.
Was the processing after the o.g. If you have limited prerequisites, you, the affected person, will be notified by the person responsible before the restriction is lifted.
4. Right to cancellation ("right to be forgotten")
As the data subject, you have the right to demand deletion of personal data concerning you at any time from us as the person responsible (see preliminary remarks) and the person responsible is obliged to delete this data immediately, if one of the following reasons applies:
1. The personal data concerning you are no longer necessary for the purposes for which they were collected or otherwise processed.
2. You as the data subject withdraw your consent on which the processing of the personal data was based, in accordance with Article 6 (1) (a) or Article 9 (2) (a) of the GDPR, and there is a lack of consent another legal basis for the processing.
3. You as the data subject object to the processing in accordance with Art. 21 (1) of the GDPR and there are no legitimate reasons for the processing, or you object according to Art. 21 (2) of the GDPR against the processing.
4. Your personal data have been processed unlawfully.
5. The deletion of personal data concerning you is required to fulfill a legal obligation under the law of the European Union or the law of the Member States to which the person responsible is subject.
6. The personal data concerning you were collected in relation to information society services offered pursuant to Article 8 (1) of the GDPR.
Information to third parties
If we have made the personal data relating to you public and if we as the person responsible are obliged to delete them pursuant to Art. 17 (1) of the GDPR, we will take appropriate measures, including technical ones, for others, taking into account the available technology and implementation costs Inform the data controllers who process the personal data that you if you have requested the deletion of any links to such personal data or copies or replications of such personal data.
The right to erasure does not exist if the processing is necessary
1. to exercise the right to freedom of expression and information;
2. to fulfill a legal obligation which requires processing under the law of the European Union or of the Member States to which the controller is subject or for the performance of a task of public interest or in the exercise of official authority conferring on the controller has been;
3. for reasons of public interest in the field of public health pursuant to Article 9 (2) (h) and (i) and Article 9 (3) of the GDPR;
4. for archival purposes of public interest, scientific or historical research purposes or for statistical purposes pursuant to Article 89 (1) of the GDPR, where the right to erasure is likely to render impossible or seriously prejudice the achievement of the objectives of that processing, or
5. to assert, exercise or defend legal claims.
5. Notification obligation and right to information
If, as the data subject, you have the right to rectify, delete or restrict the processing to us as the controller, we are obliged to make any correction or deletion of the data or restriction of processing to all recipients to whom your personal data have been disclosed unless this proves impossible or involves disproportionate effort.
As the person in charge, we will inform you about these recipients if you as the person concerned request this.
6. Right to Data Portability
You as the Data Subject have the right at any time to receive personal data concerning you provided to us as the controller in a structured, common and machine-readable format. You also have the right to transfer this information to another person without hindrance by us as the person responsible for providing the personal data, provided that
1. processing on consent pursuant to Article 6 (1) (a) or Article 9 (2) (a) of the GDPR or to a contract pursuant to Article 6 (1) (b) of the DSGVO is based and
2. the processing is done by automated means.
Freedoms and rights of other persons may not be affected. Your right to limit the processing of personal data concerning you (see Section III, paragraph 3) is not restricted by the exercise of your right to data portability.
In exercising your right to data portability, you as the data subject also have the right to obtain that personal data concerning you are transmitted directly from one controller to another responsible party, as far as technically feasible.
The right to data portability does not apply to the processing of personal data necessary for the performance of a task in the public interest or in the exercise of official authority delegated to the controller.
7. Right to object
1. You as the data subject have the right, at any time for reasons arising out of their particular situation, to us as the person responsible (see preliminary remarks) against the processing of personal data relating to you, which pursuant to Art. 6 para. 1) letter e) or f) of the GDPR, to object; this also applies to profiling based on these provisions. We as the controller will no longer process your personal information, unless we can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or the processing is intended to assert, exercise or defend legal claims.
2. If the personal data relating to you are processed in order to carry out direct mail, you have the right to object to the processing of your personal data for the purpose of such advertising at any time as the person responsible (see preliminary remarks); this also applies to profiling insofar as it is associated with such direct mail. If you object to the processing for direct marketing purposes, your personal data will no longer be processed for these purposes.
3. You as the data subject have access to your right of objection in connection with the use of information society services, regardless of Directive 2002/58 / EC automated procedure using technical specifications.
8. Right to revoke the data protection consent declaration
You have the right to revoke your privacy statement at any time. The revocation of consent does not affect the legality of the processing carried out on the basis of the consent until the revocation. Please direct your revocation by e-mail to email@example.com or contact us as the responsible person via one of the other communication channels mentioned under Preliminary Remarks.
9. Automated decisions on a case-by-case basis, including profiling
You as the data subject have the right not to be subject to a decision based solely on automated processing - including profiling - that will have legal effect or similarly affect you in a similar manner. This does not apply if the decision
1. is required for the conclusion or performance of a contract between you as the data subject and us as the controller,
2. is permissible under European Union or Member State legislation to which we are responsible, and that this legislation contains reasonable measures to safeguard your rights and freedoms and your legitimate interests, or
3. with your express consent.
However, these decisions must not be based on specific categories of personal data under Article 9 (1) of the GDPR unless Article 9 (2) (a) or (g) of the GDPR is applicable and appropriate measures have been taken to ensure that Protect rights and freedoms as well as the legitimate interests of you as a concerned person.
With respect to the cases referred to in paragraphs a) and c) above, we as the controller shall take reasonable steps to safeguard the rights and freedoms and legitimate interests of you as the data subject, including at least the right to obtain the intervention of a person by the controller , heard of its own position and on contesting the decision.
10. Right to complain to a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right to complain to a supervisory authority, in particular in the Member State of its place of residence, employment or the place of alleged infringement, if, as an affected person, you consider that the processing concerns you personal data violates the GDPR.
The supervisory authority to which the complaint has been submitted shall inform the complainant of the status and results of the complaint, including the possibility of a judicial remedy under Article 78 of the GDPR.