Privacy Policy

1. Data protection: an at-a-glance summary

General information

The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data means any data that can be used to identify you personally. You can find detailed information on data protection in the Privacy Policy set out below.

Data collection on this website

Who is responsible for data collection on this website?

The website operator processes the data collected on this website. The operator’s contact details can be found in the section entitled “Information about the controller” in this Privacy Policy.

How do we collect your data?

In some cases, your data is collected when you provide it to us. This may include data such as information that you enter in a contact form.

Our IT systems record other data automatically or with your consent when you visit our website. This is primarily technical data (such as the type of browser, the operating system or when the page was accessed). This data is collected automatically from the moment you access our website.

What do we use your data for?

Some data is collected to ensure the error-free operation of this website. Other data may be used to analyse your user behaviour. Where contracts can be concluded or initiated via the website, the data transmitted is also processed to provide quotations, deliver orders or respond to other enquiries concerning an order.

What rights do you have regarding your data?

You have the right at any time to obtain information, free of charge, about the source, recipients and purpose of your personal data that is stored. You also have the right to request that this data be rectified or erased. If you consented to data processing, you may withdraw that consent at any time with effect for the future. In certain circumstances, you also have the right to request that the processing of your personal data be restricted. In addition, you have the right to lodge a complaint with the competent supervisory authority.

You may contact us at any time regarding this or any other questions concerning data protection.

2. Hosting

We host the content of our website with the following provider:

Mittwald

The provider is Mittwald CM Service GmbH & Co. KG, Königsberger Straße 4-6, 32339 Espelkamp, Germany (hereinafter referred to as “Mittwald”).

Further information can be found in Mittwald’s Privacy Policy: https://www.mittwald.de/datenschutz.

We use Mittwald’s services on the basis of Article 6(1)(f) of the General Data Protection Regulation (GDPR). We have a legitimate interest in ensuring that the presentation of our website is as reliable as possible. Where the relevant consent has been requested, processing is carried out exclusively on the basis of Article 6(1)(a) GDPR and Section 25(1) of the Telecommunications Digital Services Data Protection Act (TDDDG), insofar as the consent covers the storage of cookies or access to information on the user’s end device (e.g. device fingerprinting) within the meaning of the TDDDG. Consent may be withdrawn at any time.

Data processing agreement

We have entered into a data processing agreement governing the use of the above service. This agreement is required under data protection law and ensures that the provider processes the personal data of our website visitors solely in accordance with our instructions and in compliance with the GDPR.

3. General and mandatory information

Data protection

As the operator of this website, we take the protection of your personal data very seriously. We treat your personal data as confidential and handle it in accordance with statutory data protection provisions and this Privacy Policy.

When you use this website, various personal data is collected. Personal data means any data that can be used to identify you personally. This Privacy Policy explains what data we collect and what we use it for. It also explains how and for what purposes we do so.

Please note that data transmitted via the internet (for example, when communicating by email) may be subject to security vulnerabilities. It is not possible to protect data completely against access by third parties.

Information about the controller

The controller responsible for data processing on this website is:

Blechdesign und industrielle Blechbearbeitung GmbH
Raiffeisenstraße 25
71706 Markgröningen

Tel.: +49 (0)7145 93537-0
Email: info@blechdesign-gmbh.de

The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data (such as names, email addresses or similar information).

Storage periods

Unless a more specific storage period is stated in this Privacy Policy, we will store your personal data until the purpose for which it was processed no longer applies. If you submit a valid request for erasure or you withdraw your consent to data processing, your data will be erased unless we have other legally permissible grounds for retaining your personal data (such as retention periods under tax or commercial law). In the latter case, the data will be erased once those grounds no longer apply.

General information on the legal bases for data processing on this website

Where you have consented to data processing, we process your personal data on the basis of Article 6(1)(a) GDPR or Article 9(2)(a) GDPR where special categories of data within the meaning of Article 9(1) GDPR are processed. Where explicit consent has been given to the transfer of personal data to third countries, your data is also processed on the basis of Article 49(1)(a) GDPR. Where you have consented to the storage of cookies or to access to information on your end device (for example, using device fingerprinting), your data is additionally processed on the basis of Section 25(1) TDDDG. Consent may be withdrawn at any time. Where your data is required in order to perform a contract or to take steps prior to entering into a contract, we process your data on the basis of Article 6(1)(b) GDPR. In addition, we process your data on the basis of Article 6(1)(c) GDPR where this is necessary for compliance with a legal obligation. Data may also be processed on the basis of our legitimate interests under Article 6(1)(f) GDPR. The applicable legal basis in each individual case is explained in the following sections of this Privacy Policy.

Recipients of personal data

In the course of our business activities, we work with various external organisations. In some cases, this also requires personal data to be transmitted to these external organisations. We share personal data with external organisations only where this is necessary for the performance of a contract, where we are legally required to do so (for example, disclosure of data to the tax authorities), where we have a legitimate interest in sharing the data under Article 6(1)(f) GDPR, or where another legal basis permits disclosure. When using processors, we share our customers’ personal data only on the basis of a valid data processing agreement. If joint processing takes place, an agreement governing joint processing is concluded.

Withdrawing your consent to data processing

Many data processing operations are possible only with your explicit consent. You can withdraw a consent that you have granted at any time. Withdrawing consent does not affect the lawfulness of data processing operations that were performed before its withdrawal.

Right to object to the collection of data in particular situations and to direct marketing (Art. 21 GDPR)

WHERE DATA IS PROCESSED ON THE BASIS OF ARTICLE 6(1)(E) OR (F) GDPR, YOU HAVE THE RIGHT AT ANY TIME, ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION, TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA. THIS ALSO APPLIES TO PROFILING BASED ON THOSE PROVISIONS. THE APPLICABLE LEGAL BASIS FOR THE PROCESSING CAN BE FOUND IN THIS PRIVACY POLICY. IF YOU OBJECT, WE WILL NO LONGER PROCESS THE PERSONAL DATA CONCERNED UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS, OR THE PROCESSING SERVES TO ESTABLISH, EXERCISE OR DEFEND LEGAL CLAIMS (OBJECTION UNDER ARTICLE 21(1) GDPR).

WHERE YOUR PERSONAL DATA IS PROCESSED FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR SUCH MARKETING. THIS ALSO APPLIES TO PROFILING TO THE EXTENT THAT IT IS RELATED TO SUCH DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA WILL NO LONGER BE USED FOR DIRECT MARKETING PURPOSES (OBJECTION UNDER ARTICLE 21(2) GDPR).

Right to lodge a complaint with the competent supervisory authority

In the event of infringements of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, place of work or the place of the alleged infringement. The right to lodge a complaint does not prejudice any other administrative or judicial remedy.

Right to data portability

You have the right to receive data that we process automatically on the basis of your consent or in performance of a contract, or to have such data transmitted to a third party, in a commonly used, machine-readable format. If you request the direct transmission of data to another controller, we will do so only where it is technically feasible.

Access, rectification and erasure

Within the framework of the applicable statutory provisions, you have the right at any time to obtain information, free of charge, about your personal data that is stored, its source and recipients and the purpose of the data processing, and, where applicable, the right to have this data rectified or erased. You may contact us at any time regarding this or any other questions concerning personal data.

Right to restriction of processing

You have the right to request that the processing of your personal data be restricted. You may contact us at any time regarding this. The right to restriction of processing applies in the following cases:

• If you dispute the accuracy of your personal data that we store, we will generally need some time to verify this. While we are verifying the data in question, you have the right to request that the processing of your personal data be restricted.
• If your personal data has been or is being processed unlawfully, you may request that data processing be restricted instead of having the data erased.
• If we no longer require your personal data but you need it in order to establish, exercise or defend legal claims, you have the right to request that the processing of your personal data be restricted instead of having the data erased.
• If you have objected under Article 21(1) GDPR, your interests must be weighed up against ours. Until it has been established whose interests prevail, you have the right to request that the processing of your personal data be restricted.

Where you have restricted the processing of your personal data, this data may, apart from being stored, be processed only with your consent, or in order to establish, exercise or defend legal claims, or in order to protect the rights of another natural or legal person, or for reasons of important public interest of the European Union or a Member State.

SSL or TLS encryption

This website uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or enquiries that you send to us as the website operator. You can recognise an encrypted connection by the fact that the address bar in your browser changes from “http://” to “https://” and a padlock symbol appears in the browser bar.

When SSL or TLS encryption is enabled, the data you transmit to us cannot be read by third parties.

Objection to promotional emails

We hereby object to the use of the contact information that we are required to publish in our legal notice for the purpose of sending advertising and information materials that have not been explicitly requested. The website operators expressly reserve the right to take legal action in the event that unsolicited advertising information is sent, for example, in the form of spam emails.

4. Data collection on this website

Server log files

The website provider automatically collects and stores information that your browser automatically transmits to us in server log files. This information consists of:

• Browser type and browser version
• Operating system used
• Referrer URL
• Hostname of the accessing computer
• Time of the server request
• IP address

This data is not combined with data from other sources.

This data is collected on the basis of Article 6(1)(f) GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimisation of its website; the server log files must be recorded for this purpose.

Email, telephone or fax enquiries

If you contact us by email, telephone or fax, your enquiry, including all the related personal data (such as your name and the nature of your enquiry), will be stored and processed by us for the purpose of handling your request. We do not share this data without your consent.

This data is processed on the basis of Article 6(1)(b) GDPR where your enquiry relates to the performance of a contract or where the processing is necessary in order to take steps prior to entering into a contract. In all other cases, data is processed on the basis of our legitimate interest in effectively handling the enquiries sent to us (Article 6(1)(f) GDPR) or, where your consent has been requested, on the basis of your consent (Article 6(1)(a) GDPR). Consent may be withdrawn at any time.

We will retain the data you send to us in connection with enquiries until you request its erasure, withdraw your consent to its storage, or the purpose for storing the data no longer applies (for example, once your enquiry has been fully dealt with). This does not affect mandatory legal provisions, in particular statutory retention periods.