Privacy Policy

Privacy policy in accordance with the GDPR

This website is basically a website in German language. We would like to point out that the translation of the privacy policy has been done via a free online service. For a legal interpretation, the German privacy policy always prevails.

I. Name and address of the controller

Fleischhauer Datenträger GmbH
Forellstraße 120
44653 Herne
Germany


Phone: 02323 / 98779-0
Email: direct(at)fleischhauer-id.com


is the controller within the meaning of the EU General Data Protection Regulation (GDPR) and other national data protection laws.


II. Name and address of the data protection officer


The data protection officer of the controller is:


AGOR AG
Niddastraße 74
60329 Frankfurt am Main
Germany


Phone: +49 (0) 69 - 9494 32 410
Email: info@agor-ag.com
Website: www.agor-ag.com


III. General information on data processing


1. Scope of processing personal data


We only collect and use personal data from users of our website to the extent necessary to provide a functional website, our content, and our services.
As a matter of principle, the collection and use of our users' personal data only takes place with their consent. An exception to this principle applies in cases where the processing of data is permitted by law or where it is not possible to obtain prior consent for practical reasons.

2. Legal basis for the processing of personal data


The legal basis for the processing of personal data is generally derived from:
Art. 6 (1) (a) GDPR when obtaining the consent of the data subject.
Art. 6 (1) (b) GDPR for processing that serves to fulfill a contract to which the data subject is a party. This also includes processing operations that are necessary for the implementation of pre-contractual measures.
Art. 6 (1) (c) GDPR for processing operations that are necessary for compliance with a legal obligation.
Art. 6 (1) (d) GDPR, if the processing of personal data is necessary to protect the vital interests of the data subject or another natural person.
Art. 6 (1) (f) GDPR, if processing is necessary to safeguard a legitimate interest of our company or a third party and the interests, fundamental rights, and freedoms of the data subject do not override the former interest. In order to be able to base the processing of personal data on a legitimate interest, a review is carried out for each relevant process in consultation with the data protection officer, whereby the following three conditions must be met:
1) The controller responsible for processing the personal data or a third party has a legitimate interest in the data processing.
2) The processing is necessary to safeguard the legitimate interest.
3) The interests or fundamental rights and freedoms of the data subject requiring the protection of personal data do not override this interest.


3. Data deletion and storage period


The personal data of users will be deleted or blocked as soon as the purpose of storage no longer applies. Further storage may take place if this has been provided for by the European or national legislator in Union regulations, laws, or other provisions to which the controller is subject. The data will also be blocked or deleted when a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or fulfillment of a contract.


IV. Use of our website, general information


1. Description and scope of data processing


Each time our website is accessed, our system automatically collects data and information from the user's computer system. The following information may be collected:
Information about the browser type and version used, the user's operating system, the user's Internet service provider, the user's IP address, date and time of access, websites from which the user's system accesses our website, websites accessed by the user's system via our website.
The data described is stored in our system's log files. This data is not stored together with other personal data of the user.


2. Purpose and legal basis for data processing


The temporary storage of the IP address by our system is necessary to enable the website to be delivered to the user's computer. For this purpose, the user's IP address must remain stored for the duration of the session.
The data is stored in log files to ensure the functionality of the website. In addition, the data helps us to optimize the website and to ensure the security of our information technology systems. The data is not evaluated for marketing purposes in this context.
The legal basis for the temporary storage of data and log files is Art. 6 (1) (f) GDPR.
The collection of your personal data for the provision of our website and the storage of data in log files is essential for the operation of the website. Therefore, there is no possibility for the user to object.

3. Duration of storage


Your data will be deleted as soon as it is no longer required for the purpose for which it was collected. If your data is collected to ensure the provision of the website, the data will be deleted when the respective session is ended.
If your data is stored in log files, it will be deleted after seven days at the latest. Storage beyond this period is possible, in which case the IP addresses of users will be deleted or anonymized. It will then no longer be possible to assign the data to the client that accessed the website.


V. General information on the use of cookies


We use cookies on our website. Cookies are text files that are stored in the Internet browser or by the Internet browser on the user's computer system. When you visit a website, a cookie may be stored on your operating system. This contains a characteristic string of characters that enables the browser to be uniquely identified when the website is visited again.
We use cookies to make our homepage more user-friendly. Some elements of our website require that the browser can be identified even after a page change.

TDDDG:


The legal basis for the storage of cookies, device identifiers, and similar tracking technologies, as well as for the storage of information on the end user's terminal equipment and access to this information, is the European ePrivacy Directive ( ) in conjunction with the Telecommunications Digital Services Data Protection Act (TDDDG).
Please note that the legal basis for the processing of personal data collected in this context is then derived from the GDPR (Art. 6 (1) sentence 1 GDPR). The legal basis for the processing of personal data relevant in each specific case can be found below for the respective cookie or the respective processing itself.
The primary legal basis for storing information on the end user's terminal equipment – in particular for storing cookies – is your consent, Section 25 (1) sentence 1 TDDDG. Consent is given when you visit our website – although this is of course not mandatory – and can be revoked at any time in the cookie settings.
According to Section 25 (2) No. 2 TDDDG, consent is not required if the storage of information in the end user's terminal equipment or access to information already stored in the end user's terminal equipment is absolutely necessary for the provider of
a telemedia service to be able to provide a telemedia service expressly requested by the user. The cookie settings show you which cookies are classified as strictly necessary (often referred to as "technically necessary cookies"), and therefore fall under the exemption of Section 25 (2) TDDDG and do not require consent.


GDPR:


When cookies are used, the following data is stored and transmitted:

  • Server logs

The legal basis for the processing of personal data using cookies is Art. 6 (1) (f) GDPR. The purpose of using technically necessary cookies is to simplify the use of our website.
We would like to point out that individual functions of our website can only be offered with the use of cookies.
We do not use user data collected by technically necessary cookies to create user profiles.
Cookies are stored on the user's computer and transmitted to our site by the user. As a user, you therefore have control over the use of cookies. You can restrict or deactivate the transmission of cookies by making changes to the settings of your Internet browser. Stored cookies can also be deleted there. Please note that you may no longer be able to use all the functions of our website if you deactivate cookies.
The legal basis for the processing of personal data using cookies for analysis and advertising purposes is Art. 6 (1) (a) GDPR, provided that the user has given their consent.


VI. Your rights / rights of the data subject


Under the EU General Data Protection Regulation, you as the data subject have the following rights:

 

  1. Right to information
    You have the right to obtain information from us as the controller as to whether and which personal data concerning you is processed by us, as well as further information in accordance with the legal requirements under Art. 13, 14 GDPR.
    You can assert your right to information at:
    gdpr(at)fleischhauer-id.com
  2. Right to rectification
    If the personal data we process concerning you is inaccurate or incomplete, you have the right to request that we correct and/or complete it. The correction will be made without delay.
  3. Right to restriction
    You have the right to restrict the processing of personal data concerning you in accordance with the statutory provisions (Art. 18 GDPR).
  4. Right to erasure
    If the reasons set out in Art. 17 GDPR apply, you can request that the personal data concerning you be erased without delay.
    Please note that the right to erasure does not apply if processing is necessary for one of the exceptions listed in Art. 17 (3).
  5. Right to notification
    If you have exercised your right to rectification, erasure, or restriction of processing, we are obliged to notify all recipients to whom your personal data has been disclosed of this rectification, erasure, or restriction of processing, unless this proves impossible or involves disproportionate effort. You also have the right to be informed about these recipients.
  6. Right to data portability
    Under the GDPR, you also have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used, and machine-readable format, or to request that it be transferred to another controller.
  7. Right to revoke your declaration of consent under data protection law
    You have the right to withdraw your declaration of consent under data protection law at any time. We would like to point out that the withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
  8. Right to object
    Furthermore, you have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Article 6(1)(e) or (f) GDPR.
  9. Automated decision-making in individual cases, including profiling
    Under the EU General Data Protection Regulation, you also have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.
  10. Right to lodge a complaint with a supervisory authority
    If you believe that the processing of your personal data violates the GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, your place of work, or the place of the alleged infringement.

VII. Data transfer outside the EU


The GDPR ensures a uniformly high level of data protection within the European Union. When selecting our service providers, we therefore rely on European partners wherever possible if your personal data is to be processed. Only in exceptional cases will we have data processed outside the European Union in the context of using third-party services. We only allow your data to be processed in a third country if the specific requirements of Art. This means that the processing of your data may then only take place on the basis of special guarantees, such as the official recognition by the EU Commission of a level of data protection equivalent to that of the EU or the
observance of officially recognized special contractual obligations, the so-called "standard data protection clauses."


VIII. EU-US Trans-Atlantic Data Privacy Framework


Within the framework of the so-called "Data Privacy Framework" (DPF), the EU Commission has also recognized the level of data protection for certain companies from the US as secure within the framework of the adequacy decision of July 10, 2023. The list of certified companies and further information on the DPF can be found on the website of the US Department of Commerce at www.dataprivacyframework.gov/s/participant-search (in English).

IX. Minors under the age of 16


We would like to point out that legal guardians must supervise their children's online activities. Minors under the age of 16 should not transmit any personal data to us without the consent of their parents or legal guardians. We explicitly do not request personal data from minors under the age of 16, do not knowingly collect such data, and do not pass it on to third parties.

X. Electronic contact


If you would like to contact us, a contact form is available on our homepage, which you can use to contact us electronically. The data entered in the input mask will be transmitted to us and stored. This data includes:

  • First name
  • Last name
  • Email
  • Street
  • Postal code
  • City
  • Phone
  • Fax
  • Message

You can also contact us via the email address provided. In this case, the user's personal data transmitted with the email will be stored.
Your data will not be passed on to third parties in this context; the data will be used exclusively for the purpose of processing the communication.
The legal basis for processing the contact request and its handling is generally Art. 6 (1) (b) GDPR.
If further personal data is processed during the sending process, this is only to prevent misuse of the contact form and to ensure the security of our information technology systems.
Your data will be deleted as soon as it is no longer necessary for the purpose for which it was collected. For personal data from the input mask of the contact form and those sent by email, this is the case when the respective conversation with the user has ended. The conversation is ended when it can be inferred from the circumstances that the matter in question has been conclusively clarified.
The additional personal data collected during the sending process will be deleted after a period of seven days at the latest.