In accordance with the European General Data Protection Regulation (GDPR), DESIGNA Verkehrsleittechnik GmbH, Faluner Weg 3, D-24109 Kiel, is the Data Controller responsible for data processing on this website. We respect your rights to personal privacy. We recognise the importance of the personal data that we receive from you as a user of our website. We respect the protection of your personal data and will collect, store or process all data obtained solely in accordance with the relevant data protection provisions and within the scope of our business purpose.
Personal data is any information relating to an identified or identifiable natural person. An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
3. Legal Basis for the Processing
Provided that we obtain your consent, Article 6(1), sentence (1), point (a) of the European General Data Protection Regulation (GDPR) forms the legal basis for the processing of your personal data.
The processing of personal data required in order to fulfil a contract with you is based on Article 6(1), sentence (1), point (b) of the GDPR. This also applies to processing operations that are necessary prior to entering into a contract.
Insofar as it is necessary to process personal data in order to comply with a legal obligation to which our company is subject, this shall fall within the scope of Article 6(1), sentence (1), point (c) of the GDPR.
If the processing is necessary for the purposes of a legitimate interest pursued by us or by a third party, and your interests and fundamental rights and freedoms do not override that legitimate interest, then Article 6(1), sentence (1), point (f) of the GDPR forms the legal basis for the processing. The legitimate interest of our company generally lies in the execution of our business activity.
4. Data Erasure and Storage Period
Your personal data will be erased or made unavailable as soon as the reason for storage no longer applies. Moreover, they may be stored if this is provided for by the European or national legislator under Union regulations, laws or other mechanisms. The data shall also be made unavailable or erased when a storage period prescribed by the standards mentioned elapses, unless there is a requirement to continue to store the data in order to enter into a contract, or for the performance of a contract.
5. Collection of Personal Data
In principle, when people visit our website we do not collect or use any personal data. We only do so to the extent necessary to deliver a functioning website, and provide our content and services. The personal data of our users is routinely only collected and used with consent. An exception applies in cases where it is not possible for practical reasons to obtain consent in advance and the processing of the data is permitted by law.
The following contains information on the type, scope and purpose of our data handling in relation to this website:
5.1 Server Log Files
Each time our website is called up, the user access data that is required in order to utilise and account for the use of the site is automatically transmitted to our server by your browser in a log file that is stored on our system.
This information includes:
• browser type / browser version;
• operating system used;
• referrer URL;
• host name of the calling computer;
• date and time of the server request;
• IP address of the calling computer;
• website from which the user may have come to the requested website;
• documents called up;
• volume of data transferred.
The storage of the log file has the following purposes:
• evaluation of the file request for statistical purposes;
• checking for use that is either contrary to agreement or otherwise illegal, provided that there are factual indications for this.
These data are not to be related to particular persons. We do not amalgamate this data with other data sources.
After the user logs onto our website, so-called "cookies" are stored on the user's computer.
A cookie is a small text file in a file directory set up for the purpose on the computer. This file is used to identify the user's computer for the duration of the session. Cookies are unable to cause any kind of manipulation on the user's terminal and may be manually deleted at any time. The easiest way to do this is in the browser.
It is possible to set up the way in which cookies are dealt with in your internet browser individually, so that they can be rejected or only accepted after confirmation. The cookies, in this case so-called "session cookies", are used to enhance the functioning of our internet offering and also to make using the site as convenient as possible for you. Your attention is drawn to the fact that should you reject cookies, not all elements of our application will be able to function smoothly.
5.3 Usage Data
We collect and use your personal data, provided that this is necessary, in order to enable the utilisation of our internet offering (usage data).
For the purposes of advertising, market research and to ensure that the design of our internet offering meets the needs of its users, we may create usage profiles using pseudonyms.
You have the right to object to this use of your data at any time. We may not amalgamate the usage profiles with data about the bearer of the pseudonym.
5.4 Data Relating To Contact Made By You
If you send us enquiries using the contact form or via the email address provided for you to make contact, then your information from the form or contact details specified in the email shall only be stored by us for the purposes of processing the particular enquiry or in the event of follow-up questions. This data shall not be passed on to third parties without your consent.
5.5 Use of Google Analytics
Our website uses Google Analytics, a web analysis service operated by Google Inc. ("Google"), 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Google Analytics uses so-called "cookies", text files that are stored on your computer and make it possible to analyse your use of the website. The information about your use of this website generated by the cookie is generally transmitted to a Google server in the USA and stored there. However, if you activate IP anonymization on this website, within the Member States of the European Union or in other signatory countries to the Agreement on the European Economic Area, your IP address will first be cut short. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and cut short there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, collate reports on the website activities and to perform other services connected with the use of the website and the internet for the website operator. The IP address transferred by your browser as part of Google Analytics' service will not be amalgamated with other data held by Google. You may prevent the storage of cookies by choosing the appropriate setting in your browser; however your attention is drawn to the fact that in this case you may be unable to use all of the functions of this website in full. Furthermore, you may prevent the recording of the data generated by the cookie relating to your use of the website (incl. your IP address) by Google and the processing of this data by Google, by downloading and installing the browser plugin available under the following link (http://tools.google.com/dlpage/gaoptout). This sets an opt-out cookie that prevents the future recording of your data when you visit this website.
Your attention is drawn to the fact that on this website the Google Analytics code has been extended with the "anonymizeIP" function in order to guarantee the anonymized collection of IP addresses (known as IP masking). We only use Google Analytics to evaluate data from double-click cookies and also AdWords for statistical purposes. If you would prefer us not to do this, you can deactivate it via the ads settings manager (https://adssettings.google.com)..
6. Your Rights
If we process your personal data on our website, you are the "data subject" as defined by the GDPR. You are entitled to expect the following from us:
6.1 Right of Access
You may request confirmation from us regarding whether or not we have processed your personal data. If your data have been processed, you may request the following information from us:
• the purposes for which the personal data have been processed;
• the categories of personal data that have been processed;
• the recipients and/or the categories of recipients to whom your personal data have been or are still being disclosed;
• the planned duration of storage of your personal data or, if specific information is not available on this, criteria for specifying the duration of storage;
• the existence of the right to lodge a complaint to a supervisory authority;
• all available information on the origin of the data, if the personal data was not collected from you;
• the existence of automated decision-making including profiling as per Article 22(1) and (4) of the GDPR and - at least in these cases - meaningful information on the logic involved and the consequences and intended effects of this kind of processing for you.
You also have the right to request information about whether or not your personal data have been transmitted to a third country or to an international organisation. In this connection you may ask to be informed of the appropriate safeguards in accordance with Article 46 of the GDPR in connection with their transmission.
6.2 Right to Rectification
You have the right to rectification and/or completion of your personal data if the processed data are incorrect or incomplete. If this should be the case, we will rectify the data immediately.
6.3 Right to Restriction of Processing
You may require the processing of data about you to be restricted under the following conditions:
• if you contest the accuracy of the personal data about you for a period enabling the controller to verify the accuracy of the personal data;
• if the processing is unlawful and you decline the erasure of your personal data and request that their use be restricted instead;
• if we no longer need the personal data for the reasons for which they were processed, but they are required by you for the establishment, exercise or defence of legal claims, or
• if you have objected to processing pursuant to Article 21(1) of the GDPR pending verification whether our legitimate grounds override your own.
If you have requested the processing of your personal data to be restricted, such personal data shall, with the exception of storage, only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State. You will be notified by us before the restriction is lifted.
6.4 Right to Erasure
You have the right to require us to immediately erase your personal data. We are obliged to erase the data immediately, provided that one of the following reasons applies:
• your personal data are no longer required for the purposes for which they were collected or processed in any other way;
• you revoke any existing consent upon which the processing was based pursuant to Article 6(1), sentence (1), point (a) or Article 9(2) point (a) of the GDPR, and there is no other legal basis for the processing;
• you file an objection against the processing in accordance with Article 21(1) of the GDPR and there are no overriding legitimate reasons for the processing;
• you file an objection against the processing for the purposes of direct marketing in accordance with Article 21(2) of the GDPR;
• your personal data were processed unlawfully;
• the erasure of your personal data is required in order to fulfil a legal obligation under Union law or the law of the Member States to which we are subject;
• your personal data were collected in relation to the use of information society services in accordance with Article 8(1) of the GDPR.
If we have published your personal details and are obliged to erase them in accordance with Article 17(1) of the GDPR, then we shall take appropriate measures, taking into account the available technology and implementation costs, to inform those responsible for processing the data that you have required them to erase all links to this personal data, or copies or replications.
There is no right to erasure insofar as the processing is required
• for exercising the right of freedom of expression and information;
• in order to fulfil a legal obligation that requires the processing under Union or Member State law to which we are subject, or in order to perform a task carried out in the public interest or in the exercise of official authority vested in us;
• for reasons of public interest in the area of public health as stipulated by Article 9(2) points (h) and (i) as well as Article 9(3) of the GDPR;
• for archiving purposes in the public interest, scientific or historical research purposes or for statistical purposes in accordance with Article 89(1) of the GDPR, insofar as the right referred to in point (1) is likely to render impossible or seriously impair the achievement of the objectives of that processing, or
• for the establishment, exercise or defence of legal claims.
6.5 Right to Information
If you have exercised your right to information, erasure or restriction of processing with respect to us, then we shall be obliged to notify all recipients to whom your personal data were disclosed of this rectification or erasure of data or restriction of processing, unless this should prove impossible or would involve disproportionate effort.
You have the right to ask us to notify you of these recipients.
6.6 Right to Data Portability
You have the right to obtain the personal data that you may have provided to us in a structured, commonly used and machine-readable format. Furthermore, you are entitled to transmit these data to another data controller without hindrance by us, where
• the processing is based on consent pursuant to Article 6(1), sentence (1), point (a) or Article 9(2) point (a) of the GDPR or on a contract pursuant to Article 6(1), sentence (1), point (b) of the GDPR and
• the processing is carried out by automated means.
Furthermore, in this connection, you are entitled to have your personal data transmitted directly by us to another data controller, provided that this is technically feasible. This may not adversely affect the rights and freedoms of others.
The right to data portability shall not apply to processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us.
Within the context of our website offering, we currently do not believe that we process data that is subject to the right to data portability.
6.7 Right of Objection
You have the right to object, on grounds relating to your particular situation, at any time, to the processing of your personal data which is based on Article 6(1), sentence (1), points (e) or (f) of the GDPR; this applies also to profiling based on these provisions.
We shall then no longer process your personal data, unless we are able to demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or for the establishment, exercise or defence of legal claims.
If your personal data are processed for direct marketing purposes, you have the right to object at any time to processing of your personal data for such marketing purposes; this applies also to profiling to the extent that it is related to such direct marketing.
Should you object to processing for direct marketing purposes, your personal data shall no longer be processed for such purposes.
In the context of the use of information society services, and notwithstanding Directive 2002/58/EC, you may exercise your right to object by automated means using technical specifications.
6.8 Right to Revoke the Data Protection Declaration of Consent
You have the right, at any time, to revoke your data protection declaration of consent. The legality of the processing undertaken on the basis of the consent provided up until the time of revocation shall be unaffected by the revocation of consent.
6.9 Automated Individual Decision-Making Including Profiling
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. We do not undertake processing of this kind.
6.10 Right to Lodge a Complaint with a Supervisory Authority
Without prejudice to any other rights of appeal, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of your personal data infringes this Regulation.
7. Responsibility for Linked Content
8. Transmission of Personal Data to Third Parties
9. Data Security
To protect your personal data we have taken technical and organisational steps to ensure that your data are protected against accidental or deliberate loss, destruction or manipulation as well as access by unauthorised persons. Our protective measures are checked at regular intervals and adapted to take account of technical advances where necessary.
10. Data Protection Officer
Should you have any further questions in relation to the processing of your personal data, then please contact our Data Protection Officer on firstname.lastname@example.org.
Last updated: May 2018
© 2009 DESIGNA Verkehrsleittechnik GmbH