The Data privacy statement of Baude Kabeltechnik GmbH is based on regulations which have been used by the European Directive and Regulatory authority in the adoption of the General Data Protection Regulation (GDPR). Our Data privacy statement is meant to be easily readable and understandable for the public as well as for our customers and business partners. We want to clarify all terms beforehand, in order to be able to guarantee the aforesaid.
The terms used in this Data privacy statement include:
A) PERSON-RELATED DATA
Person-related data is all information, that refers to one identified or identifiable existing Person (following Data subject). A person is referred to as identifiable when it is directly or indirectly identifiable through assigning an identifier like a name, recognition code, location data, online recognition code, or through more specific features like physical, physiological, genetical, psychological, economical, cultural or social identity of this natural person.
B) DATA SUBJECT
A Data subject is every identified or identifiable natural person, whose person-related data is being processed by the Party responsible for processing foresaid data.
Processing is every automatically or non-automatically conducted procedure or every set of procedures such as the aforesaid that is connected to person-related data such as collecting, recording, organizing, arranging, saving, adapting or changing, selecting, questioning, using, disclosure through transfer, distribution or any other form of provision, alignment and linkage, restriction, the process of deleting and the erasure.
D) RESTRICTION OF PROCESSING
Restriction of processing is the marking of saved person-related data with the aim of restricting future processing of aforementioned data.
Profiling is every type of automatic processing of person-related data, which consists of using this person-related data in order to evaluate specific personal aspects that refer to a natural person, especially in order to analyse and predict aspects regarding the work performance, economic situation, health, personal preferences, interests, reliability, behaviour, current location or change of location of said natural person.
Pseudonymization is the processing of person-related data in a way in which the person-related data can not be assigned to a specific Data subject without adding additional Information, as long as this additional information is separately stored and subject to technical and organisational measures which ensure that the person-related data is not going to be assigned to an identified or an identifiable natural person.
G) PARTY RESPONSIBLE FOR THE PROCESSING OR THE CONTROLLER
The Party responsible for the processing or the Controller is a natural or a jurisdictional person, authority, institution or any other office that decides alone or together with other parties about the intent and ways of processing person-related data. If the intent and ways are predetermined by the European Union law or the law of the Member States, then the Party responsible for the processing or that is to say the certain criterias of appointing one can be provided according to the European Union law or the law of the Member States.
H) DATA PROCESSOR
A Data processor is a natural or a jurisdictional person, authority, institution or any other office that processes person-related data according to the assignment of the Party responsible for the processing.
A Receiver is a natural or jurisdictional person, authority, institution or any other office, to whom person-related data is being disclosed, regardless whether the receiving party is a third one or not. Authorities, that potentially receive person-related data within a specific inquiry according to the European Union law or the law of the Member States are however not considered as receivers.
The Third is a natural or jurisdictional person, authority, institution or any other office, except for the Data subject, the Party responsible for the processing, the Data processor and the persons, that are authorised to process person-related data under the immediate responsibility of the Party responsible for the processing or the Data processor.
A Consent is every declaration of will in form of an explanation or any other clear confirmatory action from a Data subject that was informed beforehand about this case and voluntarily and unambiguously submitted one for the purpose of indicating that they consent with the processing of the person-related data regarding them.
2. Name and address of the Party responsible for the processing and the privacy officer
The Party responsible for the processing in terms of the General Data Protection Regulation, or other valid data protection regulations within the Member States of the European Union and other designations with data protection characteristics is the:
Baude Kabeltechnik GmbH
Phone.: +49 5066 7001-0
Data Protection Officer:
Phone: +49 151 12039683
Numerous websites and servers are using cookies. Many cookies contain a so-called Cookie ID. A Cookie ID is a clear identifier of a cookie. It consists of a character sequence through which websites and servers can be assigned to a specific internet browser, in which the Cookie was saved. This enables the visited websites and servers to distinguish the individual Data subject’s browser from other internet browsers that contain different Cookies. A specific internet browser can be recognized and identified through the distinct Cookie ID.
By using cookies, the Baude Kabeltechnik GmbH can provide more user friendly services for users of the website which would be impossible without Cookie placement.
The Data subject can at any given point prevent the placement of cookies through our website by adjusting the settings of the internet browser accordingly and this way they can permanently object to the placement of cookies. Furthermore, already placed cookies can be deleted anytime through an internet browser or through other software programs. This is possible through all major internet browsers. In some circumstances, If the Data subject deactivates the placement of cookies within the used internet browser, some of the functions of our website won't be fully usable.
4. Acquisition of general data and information
Everytime it is accessed through a Data subject or another automatic system, the website of Baude Kabeltechnik GmbH acquires a variety of general data and information. This data and information is saved in the log files of the server. Data that can be acquired is (1) used browser types and versions, (2) the operational system used by the accessing system, (3) the website, from which the accessing system reaches our website (so-called referrers), (4) the subsites, which are being directed to our site through an accessing system, (5) the date and time of accessing the website, (6) an Internet Protocol Address (IP Address), (7) the internet service provider of the accessing system and (8) other similar data and information, which serve as an active defense in case of an attack on our IT systems.
By using this general data and information the Baude Kabeltechnik GmbH is not assigning any data to the Data subject. This information is instead needed in order to (1) deliver the content of our website properly, (2) optimize the contents of our website as well as the advertising of them (3) to ensure the sustainable viability of our IT systems and the technology of our website and (4) to provide information necessary for criminal prosecution to prosecuting authorities in case of a cyberattack. This anonymously acquired data and information is therefore on the one hand statistically evaluated by Baude Kabeltechnik GmbH and furthermore with the goal of improving the data privacy and data security within our company in order to ensure optimal security of all person-related data that was processed by us. The anonymous data from the server log files are stored separately from all data subject stated person-related data.
5. Newsletter subscription
It is offered to users on the website of Baude Kabeltechnik GmbH to subscribe to our company’s newsletter. Which person-related data is been shared with the Party responsible for the processing while ordering the Newsletter is indicated by the input screen used.
The Baude Kabeltechnik GmbH informs its customers and business partners regularly through a newsletter about offers of the company. The newsletter of our company can principally be received by Data subjects only when (1) the Data subject possesses a verified email address and (b) the Data subject registers for the newsletter subscription. For legal reasons a confirmation email is sent out using a double opt in method to the email address which the Data subject has provided during their first time subscription registration. This confirmation email serves the purpose of checking if the owner of the email address – the Data subject – has authorised receiving the newsletter. You're welcome to apply for the newsletter through email or through a form which you receive from us.
Furthermore, during the registration for the subscription, we save the IP Address of the computer system which was used by the Data subject during the time of registration and which was provided to them by their Internet Service Providers (ISP) as well as the date and time of the registration. The elicitation of this data is needed in order to understand the (potential) abuse of the Data subject’s email address at a later point in time and therefore serves the legal protection of the Party responsible for the processing.
The personal-data elicited during the registration for the newsletter subscription is exclusively used for sending out our newsletter. Furthermore, subscribers of the newsletter can be informed per email, provided that it is needed to register for one of the newsletter service features or anything regarding this matter, what would be the case regarding changes in the newsletter offer, or if it comes to changes of technical nature. There will be no passing on of person-related data to third parties as part of the newsletter service. The subscription of our newsletter can be cancelled anytime by the Data subject. The consent to save person-related data, which the Data subject has provided for the newsletter subscription, can be retracted anytime. An applicable link can be found in every newsletter for the purpose of revoking the consent. Furthermore, there is a possibility to unsubscribe the newsletter on the website of the Party responsible for the processing, or to inform the Party responsible for the processing in another way.
The newsletter of Baude Kabeltechnik GmbH contains so-called tracking pixels. A tracking pixel is a miniature graphic, which is embedded in such emails, which are sent out in HTML form, to allow the recording of log files and the analysis of log files. That is how a statistic evaluation of the success or the failure of online marketing campaigns can be conducted. The Baude Kabeltechnik GmbH can perceive, based on the embedded tracking pixels, if and when an email was opened by a Data subject and which placed links have been accessed by the Data subject.
Such person-related data that was acquired through the tracking pixels embedded in the newsletter is saved and evaluated by the Party responsible for the processing in order to optimize the newsletter dispatch and to further adapt the content of prospective newsletters according to the interests of the Data subjects. This person-related data will not be passed on to third parties. Data subjects are at any given moment entitled to retract hereof separate consents provided through the double-opt-in-method or any other way. After the retraction, the person-related data is deleted by the Party responsible for the processing. An unsubscription from the newsletter is perceived by the Baude Kabeltechnik GmbH automatically as retraction.
7. Contact possibilities through the website
The website of Baude Kabeltechnik GmbH has services based on legal regulations, that allow fast electronic contact approach to our company as well as immediate communication with us, which also includes a general address of the so-called electronic post (email address). The transferred person-related data of the Data subject are automatically saved, as long as the Data subject approaches the Party responsible for the processing per email or a contact form. Such voluntarily given person-related data of a Data subject to the Party responsible for the processing is used for the purpose of processing or establishing contact with the Data subject. There is no transfer of person-related data to a third party.
8. Routinely erasure and blockage of person-related data
The Party responsible for the processing processes and saves person-related data of the Data subject only for the time span, which is needed for the attainment of the saving purpose, or if it is scheduled by the European Directive and Regulatory body, or another lawmaker within laws or regulations, to which the Party responsible for the processing subjects.
If the saving purpose lapses or if another alloted saving period, from the European Directive and Regulatory body, or another lawmaker, lapses, then the person-related data is perfunctory and according to legal regulations blocked or deleted.
9. Rights of the Data subject
A) CONFIRMATION RIGHT
According to the European Directive and Regulatory body every Data subject has the given right to ask the Party responsible for the processing about whether or not the their person-related data is being processed. If a Data subject wants to claim their confirmation right, they can address one of the employees of the Party responsible for the processing.
B) RIGHT TO INFORMATION
According to the European Directive and Regulatory body every Data subject whose person-related data is being processed has at any given time the right to get (free of charge) information from the Party responsible for the processing about the person-related data saved about them and to get a copy of this information. Furthermore, the European Directive and Regulatory body has given the Data subject the right to access following information:
The purpose of processing
- The categories of person-related data, that are being processed
- The Receiver or categories of Receivers, to whom person-related data has been disclosed or is still being disclosed, especially Receivers in third countries or in international organisations
- If possible, the planned duration of saving the person-related data, or, if this is not possible, the criteria for determining this duration
- The existence of a right to rectification or deletion the Data subject’s person-related data, or to restrict processing through the Party responsible for the processing, or the right to object to the processing
- The existence of a right to appeal to a regulatory authority
- If the person-related data is not collected by the Data subject: All available information about the origin of the data
- The existence of an automatic decision making including profiling according to section 22 paragraph 1 and 4 GDPR and – at least in these cases – expressive information about the involved logic, as well as the scope and the intended ramification of this sort of processing for the Data subject.
Furthermore, the Data subject has the right to access information about whether person-related data was transferred to third country parties or an international organization. If that is the case, the Data subject incidentally has the right to access information about suitable guarantees in correlation to the transfer.
If a Data subject wishes to make use of this right to access information, they can at any time address a staff member of the Party responsible for the processing.
C) THE RIGHT TO RECTIFICATION
Every Data subject whose person-related data is being processed, has, according to the European Directive and Regulatory body, the given right to demand immediate rectification of inaccurate person-related data regarding them. Furthermore the affected Data subject has, taking into consideration the purpose of the processing, the right to demand the completion of incomplete person-related data - even through an additional explanation.
D) THE RIGHT TO ERASURE (THE RIGHT TO BE FORGOTTEN)
Every Data subject, whose person-related data is being processed, has, according to the European Directive and Regulatory body, the given right to demand from the Party responsible for the processing the immediate deletion of all person-related data regarding the Data subject, if one of the following reasons applies and the processing is not required:
- The person-related data was collected for such purposes, or processed in any other way, for which they are no longer needed.
- The Data subject retracts their consent, which the processing was based on according to section 6 paragraph 1 letter a of the GDPR or section 9 paragraph 2 letter a GDPR, and there is no other legal basis for the processing.
- The Data subject objects to the processing according to section 21 paragraph 1 GDPR and there are no prior eligible reasons for the processing, or the Data subject objects to the processing according to section 21 paragraph 2 GDPR.
- The person-related data was unlawfully processed.
- The erasure of person-related data is necessary in order to fease a legal obligation according to the European Union law or the law of the Member States, to which the Party responsible for the processing subjects.
- The person-related data was collected in terms of the services of the Information society according to section 8 paragraph 1 GDPR.
Provided one of the above mentioned reasons applies and a Data subject wants to request the erasure of person-related data regarding them, which is saved at Baude Kabeltechnik GmbH, they can at any given time address one of the staff members of the Party responsible for the processing. The staff member of Baude Kabeltechnik GmbH will arrange, that the erasure procedure is conducted promptly.
If the person-related data was made public by Baude Kabeltechnik GmbH and if our company is obliged to delete the person-related data according to section 17 paragraph 1 GDPR, then the Baude Kabeltechnik GmbH initiates appropriate measures in consideration with the provided technology and implementing costs, also of technical nature, in order to inform other Parties responsible for the processing, which are processing the published person-related data, that the Data subject has requested the erasure of links to this person-related data or copies or replicas of this person-related data, from the other Parties responsible for the processing of the data, as long as the processing is not required. The staff member of Baude Kabeltechnik GmbH will arrange everything necessary for the individual case.
E) THE RIGHT TO RESTRICT PROCESSING
Every Data subject, whose person-related data is being processed has, according to the European Directive and Regulatory body, the given right, to request the restriction of processing from the Party responsible for the processing, if one of the following conditions is met:
- The Data subject denies the accuracy of the person-related data regarding them for as long as it is needed for the Party responsible for the processing to determine the accuracy of the person-related data.
- The processing is unlawful, the Data subject refuses an erasure of the person-related data and instead requests a restriction of the utilization the person-related data.
- The Party responsible for the processing no longer needs the person-related data for processing purposes, the Data subject however needs it for asserting, exercising or defending legal claims.
- The Data subject has objected to the processing according to section 21 paragraph 1 GDPR and it is not yet clear, if the reasonable grounds of the Party responsible for the processing outweigh the ones of the Data subject.
Given that one of the above mentioned conditions is met and a Data subject wants to request the restriction of person-related data, that is saved at the Baude Kabeltechnik GmbH, they can contact one of the staff members of the Party responsible for the processing. The staff member of the Baude Kabeltechnik GmbH will initiate the restriction of processing.
F) RIGHT TO DATA TRANSFERABILITY
Every Data subject, whose person-related data is being processed has, according to the European Directive and Regulatory body, the given right to receive the person-related data regarding them, which they have provided to a Party responsible for the processing, in a structured, established, machine-parsable form. In addition to that, the Data subject has the right to transfer the person-related data to another Party responsible for processing without obstruction of the Party responsible for the processing, that was given access to this person-related data, given that the processing is based on the consent according to section 6 paragraph 1 letter b GDPR or section 9 paragraph 2 letter a GDPR or a contract according to section 6 paragraph 1 letter b GDPR and that the processing happens through an automatically assisted process, given that the processing is not necessary for the perception of a task, which is in the public interest or for the exercising of public authority and which the Party responsible for the processing was given.
Furthermore, during exercising its right to data transferability the Data subject has, according to section 20 paragraph 1 GDPR, the right to secure that the person-related data is transferred directly from one Party responsible for processing to another Party responsible for processing, as long as this is technically feasible and as long as the rights and liberties of another person are not impaired hereof.
To assert the right to data transferability, the Data subject can at any given time contact one of the staff members of Baude Kabeltechnik GmbH.
G) THE RIGHT TO OBJECTION
Every Data subject, whose person-related data is being processed, has, according to the European Directive and Regulatory body, at any given time the given right to object, for reasons resulting from their specific situation, to the processing of person-related data regarding them, which happens according to section 6 paragraph 1 letter e or f GDPR. This also applies to a profiling based on these regulations.
In case of an objection the Baude Kabeltechnik GmbH no longer processes the person-related data, unless, we can verify compelling, protection worthy reasons for the processing, which outweigh the interests, rights and liberties of the Data subject, or the processing serves the assertion, exercise or defense of legal claims.
If the Baude Kabeltechnik GmbH processes person-related data to conduct direct advertising, then the Data subject has the right to at any given time object to the processing of the person-related data for the means of such advertising. This also applies to profiling, as long as it is connected to such direct advertising. If the Data subject objects to the processing for the means of direct advertising by Baude Kabeltechnik GmbH, then the Baude Kabeltechnik GmbH will no longer process the person-related data for these purposes.
Moreover, the Data subject has the right to object, for reasons resulting from their specific situation, to the processing of person-related data regarding them, which is used for scientific or historical research purposes or for statistical purposes by the Baude Kabeltechnik GmbH according to section 89 paragraph 1 GDPR, unless such processing is needed to complete a task in the public interest.
To assert the right to objection, the Data subject can directly contact our chief privacy officer of Baude Kabeltechnik GmbH or another employee. The Data subject is furthermore free to, in connection with the usage of services of the Information society and despite the policy 2002/58/EG within the objection law, assert their right to objection through an automatic process, which involves technical specifications.
H) AUTOMATIC DECISIONS IN INDIVIDUAL CASES INCLUDING PROFILING
Every Data subject, whose person-related data is being processed, has, according to the European Directive and Regulatory body, the given right not to be subjected exclusively to a decision based on automatic processing – including profiling – which has legal impact on them or impaires them significantly in similar ways, given that the decision (1) is not necessary for the closure or fulfilment of a contract between the Data subject and the Party responsible for the processing, or (2) based on legal regulations of the European Union or the Member States, to which the Party responsible for the processing subjects, is permissible and these legal regulations contain appropriate measures for protecting the rights and liberties as well the eligible interests of the Data subject, or (3) if it is made following the explicit consent of the Data subject.
If the decision (1) is necessary for the closure or fulfilment of a contract between the Data subject and the Party responsible for the processing or (2) if it is made following the explicit consent of the Data subject, the Baude Kabeltechnik GmbH takes appropriate measures to preserve the rights and liberties as well as the eligible interests of the Data subject, which at the minimum includes the right to obtain the intervention of a person on behalf of the Party responsible for the processing, the right to present their own standpoint and the right to refute a decision.
If the Data subject wants to assert their rights in connection with automatic decisions, it can at any given time contact one of the staff members of the Party responsible for the processing.
I) RIGHT TO REVOKE A CONSENT REGARDING DATA PROTECTION LAW
Every Data subject, whose person-related data is being processed has, according to the European Directive and Regulatory body, at any given moment the given right to revoke a consent regarding data processing of person-related data.
If the Data subject wants to assert its right to revoke a consent, it can at any time contact one of the staff members of the Party responsible for the processing.
10. Legal basis of processing
Section 6 I lit. a GDPR serves our company as a legal basis for processing procedures, for which we obtain a consent for the specific processing purpose. If the processing of person-related data is needed for fulfilling a contract, to which the Data subject is a contracting party, as is the case in for example processing procedures, that are needed for delivering goods or other service activities, or return services, then the processing relies on Section 6 I lit. b GDPR. The same applies for processing procedures, that are needed for performing pre-contractual measures, for instance in cases of inquiries regarding our products or services. If our company subjects to a legal commitment which requires the processing of person-related data, as for example to fease taxational commitments, then the processing is based on Section 6 I Lit. c GDPR. The processing of person-related data may be necessary in rare cases, in order to protect vital interests of the Data subject or another natural person. This would be the case, for example, if a customer got injured in our firm, then his name, his age, his insurance data, or any other vital information would be forwarded to a doctor, a hospital or other third parties. Then the processing would be based on Section 6 I lit. d GDPR. Lastly, processing procedures could be based on Section 6 I lit. f GDPR. Based on this legal basis are processing procedures which are not included in the aforementioned legal bases, if the processing is needed for preserving an eligible interest of our company or a third party, given that they aren’t outweighed by the interests, the basic rights and basic liberties of the Data subject. Such processing procedures are granted to us particularly because they have been especially emphasized by the European Legislature. It stands by this opinion to the extent that an eligible interest were to be accepted, if the Data subject is a customer of the Party responsible for the processing (Recital 47 Sentence 2 GDPR).
11. Eligible interest in the processing, that is being pursued by a Party responsible for processing or a third party
If the processing of person-related data is based on Section 6 I lit. f GDPR, then our eligible interest is the implementation of our business activity in favor of all our employees and our shareholders.
12. Duration of saving person-related data
The criteria for the duration of saving person-related data is the respective legal storage period. After expiration of the storage period, the respective data is routinely deleted, given that it is no longer necessary for fulfillment of a contract or contract negotiations.
13. Legal or contractual regulations for provision of person-related data;
Necessities for contract closure, Obligation of the Data subject to provide person-related data; potential consequences of not providing the person-related data
We clarify to you that granting person-related data is partly legally compulsory (e.g. taxation rules), or it can result from contractual regulations (e.g. information on the contractual partner). Occasionally it can be a necessity for concluding a contract, that a Data subject provides us with person-related data which as a result has to be processed by us. The Data subject is, for example, obliged to share person-related data with us, when our company is concluding a contract with them. As a consequence of not providing person-related data it would be possible for the contract with the Data subject to be concluded. Before the Data subject provides any person-related data, they have to contact one of our employees. Our employee clarifies to the Data subject whether the provision of person-related data is legally or contractually compulsory in their individual case, or if it is a necessity for concluding a contract, if there is an obligation to provide the person-related data and what consequences not providing the person-related data would have.
14. Existence of automatic decision making
As a responsible company, we refuse to engage in automatic decision making or in profiling.