Data protection information according to Art. 13 GDPR.
Name and address of the data controller
The data controller within the meaning of the General Data Protection Regulation (“GDPR”) and other statutory data protection provisions is:
MS Industrie AG
Brienner Straße 7,
80333 München
Deutschland
Telefon: +49 89 20 500-900
E-Mail: info@ms-industrie.ag
Name and address of the data protection officer
The data protection officer of the data controller is: Hartmut Grande
dominox – information security and data protection
Email: datenschutz@dominox.de
General information on data processing; Legal basis for the processing of personal data
According to Art. 13 GDPR, we hereby inform you about the legal basis of our data processing activities. If the legal basis is not mentioned in the data protection information, the following applies: The legal basis for the obtaining of consent is point (a) of Art. 6(1) GDPR in connection with Art. 7 GDPR. The legal basis for processing for the fulfillment of our services and the completion of contractual measures as well as responding to inquiries is point (b) of Art. 6(1) GDPR. The legal basis for the processing for the fulfillment of our legal obligations is point (c) of Art. 6(1) GDPR. If the processing of your data is necessary for the purposes of any legitimate interest pursued by our company or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject, the legal basis for the processing is point (f) of Art. 6(1) GDPR. If the processing of personal data is necessary to protect the vital interests of the data subject or another natural person, point (d) of Art. 6(1) GDPR serves as the legal basis.
Erasure of data and retention period
We comply with the principles of data minimization according to point (c) of Art. 5(1) GDPR and restriction of storage according to point (e) of Art. 5(1) GDPR. We only store your personal data for as long as is necessary to achieve the purposes stated here or as required by the retention periods provided for by law. After the respective purpose has been omitted and/or after these retention periods have expired, the corresponding data will be erased as soon as possible.
External links
This website may contain links to third party websites and/or to other websites for which we are responsible. If you follow a link to one of the websites for which we are not responsible, please note that these websites have their own data protection information. We do not assume any responsibility or liability for such third-party websites or their data protection information. Therefore, before using these websites, it is necessary for you to check whether you agree with their respective privacy policy. External links can be recognized either as their color differs slightly from the rest of the text or as they are underlined. Your cursor will show you external links when you move over such a link. Your personal data will only be transferred to the destination of the link when you click on an external link. In particular, the operator of the other website will receive your IP address, the time at which you clicked on the link, the page on which you clicked on the link, as well as further information which you can find in the data protection information of the respective provider. Please also note that individual links may lead to a data transfer outside the European Economic Area. This could give foreign public authorities access to your data. You may not be entitled to appeal against such instances of data access. If you do not want your personal data to be transferred to the destination of the link or to be exposed to access by foreign public authorities, please do not click on any links.
Rights of the data subject
As a data subject within the meaning of the GDPR, you are able to assert various rights. The rights of data subjects according to the GDPR are the right of access (Article 15), the right to rectification (Article 16), the right to erasure (Article 17), the right to the restriction of processing (Article 18), the right to object (Article 21), the right to submit a complaint to a supervisory authority and the right to data portability (Article 20).
Right of withdrawal:
Some forms of data processing can only take place with your explicit consent. You are able to withdraw your consent at any time. A withdrawal shall not affect the lawfulness of the data processing until the time of the withdrawal, however.
Right to object:
Where the processing is based on point (e) of (f) of Art. 6(1) GDPR, you, as a data subject, are able to object to the processing of your personal data on grounds relating to your particular situation at any time. This right is also available to you in the case of profiling which is based on these provisions in terms of Art. 4(4) GDPR. If we are unable to demonstrate a legitimate interest in the processing that overrides your interests, rights and freedoms, or a processing which serves to assert, exercise or defend legal claims, we will refrain from processing your data after the objection has been received. If the processing of personal data is used for direct advertising, you also have the right to make an objection at any time. The same applies to profiling, which is related to direct advertising. Again, we will no longer process personal data as soon as you make an objection.
Right to lodge a complaint with a supervisory authority:
If you consider that the processing of your personal data infringes the GDPR, without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the member state of your habitual residence, place of work or place of the alleged infringement.
Right to data portability:
If your data are processed automatically on the basis of consent or the fulfillment of a contract, you have the right to receive this data in a structured, common and machine-readable format. You also have the right to request the transfer and provision of the data to another data controller, insofar as this is technically feasible.
Right of access, rectification and erasure:
You have the right of access concerning your processed personal data regarding the purpose of the data processing, the categories, the recipients and the duration of its storage. If you have any questions about this topic or on other topics concerning personal data, you are welcome to contact us via the contact options provided in the legal notice.
Right to restriction of processing:
You can request the restriction of processing regarding your personal data at any time. To do this, you must fulfill one of the following requirements: You object to the accuracy of the personal data. You have the right to request a restriction of processing for the duration of the verification of the accuracy. If the processing is unlawful, you can request a restriction of the use of the data rather than its erasure. If we do not need your personal data for the fulfillment of our purposes but you need such data for the establishment, exercise or defense of legal claims, you can request a restriction of processing of the data rather than its erasure. If you make an objection to the processing in terms of Art. 21(1) GDPR, a balance will be drawn between your interests and our interests. Until this balance has been drawn, you have the right to request the restriction of processing. A restriction of processing has the consequence that the personal data, apart from its storage, may only be processed with your consent or for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or on the grounds of an important public interest of the European Union or of an EU member state.
Provision of the website (web hosting)
Our website is hosted by:
Hetzner Online GmbH
Industriestr. 25, 91710 Gunzenhausen
Germany
When you access our website, we automatically collect and store information in what are commonly referred to as server log files. Your browser transfers this information to our server or to the server of our hosting company automatically.
This includes the following:
- IP address of the end device used by the visitor to access the website
- Host name of the computer used for access
- Operating system of the user
- Browser type and version
- Name of the accessed file
- Time of the server query
- Quantity of data
- Information of whether the access to the data was successful
This data will not be merged with other data sources. The legal basis for the processing of this data is point (f) of Art. 6(1) GDPR. Our legitimate interest is the technically error-free presentation and optimization of this website. Instead of running this website on a separate server, we can also arrange for it to be run on the server of an external service provider (hosting company). In this case, the personal data collected on this website will be stored on the servers of the hosting company. In addition to the above-mentioned data, the data may include, for example, contact requests, contact data, names, website access data, meta and communication data, contract data as well as other data generated via a website. A further legal basis given is the purpose of the fulfillment of the pre-contract and/or contract with regard to the data subject. (point (b) of Art. 6(1) GDPR). If we have hired a hosting company, there will be a contract for the order processing with this service provider.
Rights of Data Subjects
Under Article 15 of the General Data Protection Regulation you have to right to obtain information on the processing of your personal data (“Right of access by the data subject”).
Under Article 16 of the General Data Protection Regulation you have the right to rectification of incorrect personal data and deletion of personal data concerning you (“Right to rectification”).
Under Article 17 of the General Data Protection Regulation you can demand the deletion of personal data concerning you if one of the listed grounds applies (“Right to erasure/ Right to be forgotten”).
You also have the right, under Article 18 of the General Data Protection Regulation, to restrict the processing of personal data concerning you if one of the listed grounds applies (“Right to restriction of processing”).
Under Article 20 of the General Data Protection Regulation you have the right to receive the personal data concerning you and to transmit that data to another controller (“Right to data portability”).
Your rights to object, as defined in Article 21 of the General Data Protection Regulation, are set out in this Data Privacy Statement for each type of processing.
You have the right to lodge a complaint with the relevant supervisory authority. The relevant supervisory authority is
Der Bayerische Landesbeauftragte für den Datenschutz (BayLfD)
Wagmüllerstraße 18, 80538 München
Postfach 22 12 19, 80502 München
Phone: 089 212672-0
Fax: 089 212672-50
poststelle@datenschutz-bayern.de
www.datenschutz-bayern.de