I.        Name and address of the responsible entity

The responsible entity as per the General Data Protection Regulation and other national data protection laws of the member states and other data protection regulations is:

TRENNSO-TECHNIK
Trenn- und Sortiertechnik GmbH
Siemensstr. 3
D-89264 Weißenhorn
Germany

Phone: + 49 (0)7309 / 96 20 0
e-mail: info[at]trennso-technik.de
Website: www.trennso-technik.de

II.      Name and address of the data protection officer

The data protection officer of the responsible entity is:

Matthias Wölkner
CAD connect e.K.
Mariental 4
D-99817 Eisenach
Germany

Phone: +49 (0)3691 / 72355 0
e-mail: M.Woelkner[at]CAD-connect.de
Website: www.CAD-connect.de

III.     General information on data processing

1.     Scope of processing of personal data

We generally only process personal data of our users insofar as it is necessary to provide a functional website and our contents and services. Personal data of our users are only regularly processed with the permission of the user. An exception applies in such cases where it is not possible to previously obtain permission for factual reasons and processing of the data is permitted by legal regulations. 

2.     Legal basis for processing of personal data

Insofar as we obtain the permission for processing personal data of the person concerned, Art. 6, Section 1 lit. a of the EU General Data Protection Regulation (GDPR) serves as the legal basis.

In the case of processing of personal data required to comply with an agreement to which the contractual party is the person concerned, Art. 6 Section 1 lit. b of the GDPR serves as the legal basis. This also applies to processing required to carry out pre-contractual measures.

Insofar as processing of personal data is required to meet a legal requirement to which our company is subject, Art. 6 Section 1 lit. c of the GDPR serves as the legal basis.

If vital interests of the person concerned or of another natural person require processing of personal data, Art. 6 Section 1 lit. d of the GDPR serves as the legal basis.

If processing is required to protect a legitimate interest of our company or of a third party and if the interests, basic rights and basic freedoms of the party concerned do not outweigh the first-mentioned interest, Art. 6, Section 1 lit. f GDPR serves as the legal basis for processing.

3.     Data deletion and period of storage

The personal data of the person concerned are deleted or blocked as soon as the purpose of storage no longer applies. In addition, storage may be carried out if this is provided for by the European or national legislator in EU directives, laws or other provisions to which the responsible person is subject. Data are also blocked or deleted if a retention period specified by the standards referred to expires, unless further storage of the data is required for conclusion or fulfilment of an agreement.

IV.    The rights of the person involved

If you process personal data, you are a person involved in accordance with the GDPR and you have the following rights in relation to the responsible person:

1.     Right to information

You can request confirmation from the responsible person as to whether personal data concerning you are processed by us.

If such processing has been carried out, you can request disclosure of the following information from the responsible person:

(1)       the purposes for which the personal data are processed;

(2)       the categories of personal data which are processed;

(3)       the recipients or the categories of recipients which were provided or are still provided with personal data pertaining to you;

(4)       the planned duration of personal data pertaining to you or, if concrete information hereof is not possible, criteria for the determination of the duration of storage;

(5)       the existence of a right to correct or delete personal data pertaining to you, a right to restrict processing by the person responsible or the right to object to this processing;

(6)       the right to appeal to a supervisory authority;

(7)       all available information on the origin of the data if the personal data are not obtained from the person concerned;

(8)       the existence of automated decision-making pursuant to Art. 22 Section 1 and 4 of GDPR and – at least in these cases – clear information on the logic involved and the scope and intended effects of such processing for the person involved.

You are entitled to request information on whether personal data pertaining to you are sent to a third country or an international organisation. In this regard, you can request to be informed of the suitable guarantees as per Art. 46 GDPR in connection with the transmission.

2.     Right to correction

You have a right of correction and / or completion vis-à-vis the responsible person in so far as the processed personal data pertaining to you are incorrect or incomplete. The responsible person is to correct the data without delay.

3.     Right to restriction of processing

Under the following conditions, you can request the restriction of processing of your personal data:

(1)       if you dispute the correctness of the personal data pertaining to you for a period of time which allows the responsible person to check the correctness of the personal data;

(2)       processing is unlawful and you object to deletion of the personal data, instead of which you request restriction of use of the personal data;

(3)       the person responsible no longer requires the personal data for the purposes of processing but you do to assert, exercise or defend legal claims or

(4)       if you raise an objection against processing in accordance with Art. 21 Section 1 GDPR and it is not yet defined whether the justified reasons of the responsible person outweigh your reasons.

If processing of your personal data has been restricted, these data - apart from storage thereof - may only be processed with your permission or to assert, exercise or defend legal claims or to protect the rights of another person or legal entity or for reasons of a significant public interest of the European Union or of a member state.

If the restriction of processing has been limited in accordance with the above-mentioned conditions, you will be informed by the responsible person before the restriction is lifted.

4.     Right to deletion

a)     Obligation to delete

You can request that the responsible person delete your personal data immediately and the responsible person is obliged to delete these data immediately if one of the following reasons applies:

(1)       your personal data are no longer required for the purposes for which they were collected or processed in any other way.

(2)       You revoke your permission on which processing was based in accordance with Art. 6, Section 1, lit. a or Art. 9, Section 2, lit. a GDPR, and there is no other legal basis for processing.

(3)       You object in accordance with Art. 21, Section 1 GDPR to processing and there are no overriding, authorised reasons for processing, or you object to processing in accordance with Art. (21), Section 2, GDPR.

(4)       Your personal data were processed unlawfully.

(5)       Deletion of your personal data is necessary to fulfil a legal requirement in accordance with EU law or the law of the member states to which the responsible person is subject.

(6)       Your personal data were collected in relation to services offered by the information society as per Art. 8 Section 1 GDPR.

b)     Information to third parties

If the responsible person has published your personal data and if he is obliged to delete them in accordance with Art. 17, Section. 1, GDPR, he takes suitable measures with regard to the available technology and implementation costs, also of a technical nature, in order to inform those responsible for data processing of personal data that you as the person concerned have requested the deletion of all links to these personal data or of copies and reproductions of these personal data.

c)      Exceptions

There is no right of deletion if processing is necessary

(1)       to exercise the right of freedom of expression and information;

(2)       to comply with a legal obligation which requires the processing in accordance with the law of the European Union or of the member states, or to carry out a task which is in the public interest or is carried out in the exercise of official authority which was transferred to the responsible person;

(3)       for reasons of the public interest in the field of public health and safety in accordance with Art. 9, Section 2, lit. h and i as well as Art. 9, Section 3, GDPR;

(4)       for archive purposes in the public interest, scientific or historical purposes or for statistical purposes as per Art. 89, Section 1, GDPR, insofar as the right specified under a) is liable to render the achievement of the aims of this processing impossible or seriously impairs them, or

(5)       to assert, exercise or defend legal claims.

5.     Right to information

If you have asserted a right to information, deletion or restriction of processing against the responsible person, the latter is obliged to inform all recipients to which you have disclosed the corresponding personal data of the correction or deletion of the data or restriction of processing unless this proves to be impossible or involves a disproportionate amount of work.

You are entitled to be informed by the responsible person of these recipients.

6.     Right to data transferability

You have the right to receive the data pertaining to you which you have provided to the responsible person in a structured, conventional and machine-readable format. In addition, you have the right to transmit these data to another responsible person without hindrance by the responsible person to which the personal data were supplied provided that

(1)       processing is based on approval in accordance with Art. 6, Section 1, lit. a, GDPR or Art. 9, Section 2, lit. a GDPR or on an agreement in accordance with Art. 6, Section. 1 lit. b GDPR and

(2)       processing is carried out with the aid of automated processes.

By exercising this right, you also have the right to ensure that your personal data are directly transmitted by a responsible person to another responsible person insofar as far as this is technically possible. This must not impair the freedoms and rights of other persons.

The right to data transferability does not apply to processing of personal data required to carry out a task in the public interest or to exercise public powers which have been transferred to the responsible person.

7.     Right of objection

You have the right at all times to object at any time to processing of your data for reasons resulting from your particular situation based on Art. 6, Section 1, lit. e or f GDPR. This also applies to profiling based on these provisions.

The responsible person no longer processes your personal data unless he can provide evidence of compelling, legitimate grounds for processing which outweigh your interests, rights and freedoms or processing serves the assertion, exercising or defence of legal claims.

If your personal data are processed in order to use direct advertising, you are entitled to object to processing of your personal data for the purpose of such advertising; this also applies to profiling insofar as it is associated with such direct advertising.

If you object to processing for the purpose of direct advertising, your personal data are no longer processed for this purpose.

Notwithstanding the Directive 2002/58/EC, you can exercise your right of objection in connection with the use of services of the information society by means of automated processes for which technical specifications are used.

8.     Right to revoke the declaration of consent in accordance with the data protection law

You are entitled to revoke your consent to the data protection law at any time. By revoking your consent, the legality of processing based on the consent remains unaffected until revoked.

9.     Automated decision in individual cases including profiling

You are entitled not to be subject to a decision exclusively based on automated processing - including profiling - has a legal effect on you or considerably disadvantages you in a similar way. This does not apply if the decision

(1)       is necessary for the conclusion or fulfilment of an agreement between you and the person responsible,

(2)       is permissible due to legal regulations of the European Union or member states to which the person responsible is subject and these legal regulations comprise adequate measures to protect your rights and freedoms as well as your legitimate interests or

(3)       is made with your express permission.

However, these decisions must not be based on particular categories of personal data as per Art. 9, Section 1 GDPR unless Art. 9, Section 2 lit. a or g GDPR applies and suitable measures have been taken to protect the rights and freedoms as well as your legitimate interests.

With regard to the cases specified in (1) and (3), the responsible person takes suitable measures to protect the rights and freedoms and your legitimate interests, which at least includes the right to effect the intervention of a person on the part of the responsible person, to present his own case and to challenge the decision.

10.  The right to appeal to a supervisory authority

Irrespective of any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the member state of your place of residence, your workplace or the place of the alleged infringement if you are of the opinion that processing of your personal data infringes the GDPR.

The supervisory authority with which the complaint has been lodged informs the complainant of the status and the results of the complaint, including the possibility of a right to apply to the courts in accordance with Art. 78 GDPR.

V.     Provision of the website and creation of log files

1.     Hosting

The hosting services used by us serve to provide the following service: infrastructure and platform services, computing capacity, memory and database services, security services as well as technical maintenance services which we use to operate this website.

In this connection, we or our web hosting service process inventory data, contact details, content data, contractual data, usage data, meta-data and communication data of customers, interested parties and visitors of this website on the basis of our legitimate interests in an efficient and secure provision of this website in accordance with Art. 6, Section 1, lit. F GDPR in connection with Art. 28 GDPR (conclusion of order processing agreement)

2.     Encrypted connection

For reasons of security and to protect confidential contents and personal data, we use an SSL or TLS encryption. The data which you send to us are thus protected from easily being read by third parties. The encrypted connection is recognisable by the closed padlock icon in front of the opened website. 

3.     Description and scope of data processing

Every time our website is accessed, our system automatically records information of the computer system which accesses the site.

The following data are then collected:

(1)  IP address

(2)  Country of origin

(3)  Date and time of access

The data are also stored in the log files of our system. This does not apply to the IP addresses of the users or other data which enable allocation of the data to a user. These data are not stored together with other personal data of the user.

4.     Legal basis for data processing

The legal basis for temporary storage of data is Art. 6, Section 1, lit. f GDPR.

5.     Purpose of data processing

Temporary storage of the IP address by the system is necessary to enable provision of the website to the computer of the user. To this end, the IP address of the user must remain stored for the duration of the session.

These purposes also represent our legitimate interest in data processing as per Art. 6, Section 1, lit. f GDPR.

6.     Duration of storage

The data are deleted as soon as they are no longer required to achieve their purpose. If the data are collected to provide the website, this is the case when the individual session is ended.

7.     Possibility of appeal and disposal
Recording of data for provision of the website and store the data in log files is essential to operate the website. Consequently, the user has no right of appeal.

VI.    Use of cookies

1.     Description and scope of data processing

Our website uses cookies. Cookies are text files which are stored in the internet browser or by the internet browser on the computer system of the user. If a user accesses a website, a cookie may be stored on the operating system of the user. This cookie contains a distinctive string of characters which enables clear identification of the browser when the website is accessed again.

We use cookies to make our website more user-friendly. Some elements of our website require the browser accessing it to also be identifiable when changing to another page.

The following data are then stored and transmitted in the cookies:

(1) Language settings

We also use cookies on our website which enable an analysis of the surfing behaviour of users.

In this way, the following data can be transmitted:

(1) Search terms entered

(2) Frequency of access to pages

(3) Use of website functions

When our website is accessed, the user is informed of the use of cookies for the purpose of analysis and his permission for processing of the personal data used in this connection is requested. This data protection declaration is also mentioned in this connection.

2.     Legal basis for data processing

The legal basis for processing of personal data using technically necessary cookies is Art. 6, Section 1, lit. f GDPR.

The legal basis for the processing of personal data using cookies for the purpose of analysis is Art. 6, Section 1, lit. a, GDPR in the case of consent to this effect of the user. 

3.     Purpose of data processing

Technically necessary cookies are used to simplify the use of websites for users. Some features of our website cannot be offered without using cookies. For these it is necessary for the browser to be recognised when changing pages.

We require cookies for the following applications:

(1)  Acceptance of language settings

(2) Remembering search terms

The user data collected by technically necessary user data are not used to create user profiles.

Analysis cookies are used to improve the quality of our website and its contents. With the analysis cookies, we learn how the website is used and can thus continually improve it.

These purposes also represent our legitimate interest in processing of personal data as per Art. 6, Section 1, lit. f GDPR.

4.     Duration of storage, possibility of appeal and disposal
Cookies are stored on the computer of the user and sent from it to our site. Therefore, as a user, you also have full control over the use of cookies. You can restrict or deactivate transmission of cookies by changing the settings in your internet browser. Cookies already stored can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all functions of the website to the full extent.

VII.  Administration, accounting, office organisation, contact management

1.     Description and scope of data processing

We process data for administrative purposes as well as the organisation of our company, accounting and observation of statutory obligations such as archiving. To this end, we process the same data which we use to provide our contractual services. Processing involves customers, interested parties, business partners and visitors to the website. To this end, we publish or transmit data to financial management, consultants, such as tax consultants or auditors as well as other billing centres and payment service providers.

2.     Legal basis for processing of personal data

Processing is based on Art. 6, Section 1, lit. c GDPR, Art. 6, Section 1, lit. f GDPR.

3.     Purpose of data processing

The purpose of and our interest in processing is administration, accounting, office organisation, archiving of data, i.e. tasks which serve to maintain our business activities, performance of tasks and provision of our services. Deletion of the data with regard to contractual services and contractual communication corresponds to the information specified for these processing activities.

4.     Duration of storage

In addition, we store information on suppliers, organisers and other business partners based on our business interests, e.g. for the purpose of making contact later. We generally store these mostly company-related data permanently.

5.     Possibility of appeal and disposal

The user can withdraw his permission to process the personal data at any time. If the user contacts us by e-mail, he can object to storage of his personal data at any time. In such a case, the conversation cannot be continued.

Furthermore, it is also possible in this way:

(1) to change the personal information collected

(2) to object to storage of the personal data collected

(3) to demand that the data stored be deleted

All personal data stored in the course of making contact are deleted in this case if this does not contradict the reasons specified in Section IV / 4.

VIII. Business analyses and market research

1.     Description and scope of data processing

In order to run our business economically, to identify market trends and the requirements of customers and users, we analyse the data available to us on business processes, contracts, enquiries etc. To this end, we process the following data:

(1) inventory data

(2) communication data

(3) contract data

(4) payment data

(5) usage data

(6) metadata

The persons concerned include customers, interested parties, business partners, visitors and users of the website.

2.     Legal basis for processing of personal data

Art. 6, Section 1, lit. f GDPR

3.     Purpose of data processing

The analyses are carried out for the purpose of business assessments, marketing and market research. To this end, we can take account of the registered users with information, for example, on their purchase processes. We use the analyses to increase user-friendliness and to optimise our services and operating efficiency. The analyses are only used by us and are not published externally if they are not anonymous analyses with combined values.

4.     Duration of storage

Insofar as these analyses or profiles are related to persons, they are deleted or anonymised on termination of the user relationship, otherwise after two years from conclusion of the agreement. Otherwise, the overall economic analyses and general determination of trends are drawn up anonymously where possible.

5.     Possibility of appeal and disposal

The user can withdraw his permission to process the personal data at any time. If the user contacts us by e-mail, he can object to storage of his personal data at any time. In such a case, the conversation cannot be continued.

Furthermore, it is also possible in this way:

(1) to change the personal information collected

(2) to object to storage of the personal data collected

(3) to demand that the data stored be deleted

All personal data stored in the course of making contact are deleted in this case if this does not contradict the reasons specified in Section IV / 4.

IX.        Contact form and e-mail contact

1.     Description and scope of data processing

Our website includes a contact form which can be used to make contact electronically. If a user uses this option, the data entered in the input mask are sent to us and stored. These data are:

(1)   subject

(2)   required contact

(3)   name

(4)   surname

(5)   e-mail

(6)   company

(7)   street / no.

(8)   postal code

(9)   town / city

(10) country

(11) phone

(12) fax

(13) message

When the message is sent, the following data are also stored:

(1)  the IP address of the user

(2)  date and time of contact

To process the data, your permission is obtained in the course of the sending process and reference is made to this data protection declaration.

It is also possible to make contact via the e-mail addresses provided. In this case, the personal data of the user sent with the e-mail are stored.

No data are forwarded to third parties in this connection. The data are used exclusively for processing the conversation.

2.     Legal basis for data processing

If permission of the user is given, the legal basis for processing of the data is Art. 6, Section 1, lit. a, GDPR.

The legal basis for processing of the data submitted when an e-mail is sent is Art. 6, Section 1, lit. f GDPR. If the e-mail contact is for the purpose of concluding a contract, the additional legal basis for processing is Art. 6, Section 1, lit. b GDPR.

3.     Purpose of data processing

Processing of personal data from the input mask is only used by us to process the contact. In the event of contact by e-mail, this also represents the necessary legitimate interest in processing of the data.

The other personal data processed during the sending process serves to prevent the contact form from being misused and to ensure the security of our IT systems.

4.     Duration of storage

The data are deleted as soon as they are no longer required to achieve the purpose of their collection. For the personal data from the input mask of the contact form and those sent by e-mail, this is the case when the individual conversation with the user is ended. The conversation is ended if circumstances indicate that the relevant matter has been clarified.

The personal data additionally collected during the sending process are deleted after seven days at the latest.

5.     Possibility of appeal and disposal

The user can withdraw his permission to process the personal data at any time. If the user contacts us by e-mail, he can object to storage of his personal data at any time. In such a case, the conversation cannot be continued.

Furthermore, it is also possible in this way:

(1)  to change the personal information collected

(2) to object to storage of the personal data collected

(3) to demand that the data stored be deleted

All personal data stored in the course of making contact are deleted in this case if this does not contradict the reasons specified in Section IV / 4.

X.      Web analysis

1.     Scope of processing of personal data

We use Google Analytics, a web analysis service of Google LLC (“Google”) on the basis of our justified interests (i.e. interest in the analysis, optimisation and economic operation of our website in the sense of Art. 6, Section, 1 lit. f. GDPR). Google uses cookies. The information generated by the cookie on use of the website by users are generally transmitted to a server of Google in the USA and stored there.

Google is certified according to the Privacy Shield Agreement and thus offers a guarantee to observe the European Data Protection Law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).

Google will use this information on our behalf to evaluate use of our website by users in order to compile reports on the activities on this website and in order to provide us with further services connected with the use of this website and of the internet. From the processed usage data, pseudonymous usage profiles of the users can be created.

We only use Google Analytics with enabled IP anonymisation. This means that the IP address of users is abbreviated by Google within the member states of the European Union or in other contracting states of the Agreement on the European Economic Area. The full IP address is only sent to a server of Google in the USA and abbreviated there in exceptional cases.

The IP address sent by the browser of the user is not linked to other data of Google. Users can prevent storage of cookies with a corresponding setting of their browser software; users can also prevent collection of the data generated by the cookie and their use of data connected to their use of the website to Google as well as processing of these data by Google by downloading and installing the browser plug-in available from the following link: tools.google.com/dipage/gaoptout.

Further information on the use of data by Google, setting and objection options are given on the websites of Google: by Google on your use of websites or apps of our partners), for advertising purposes which Google uses to show you advertisements).

2.     Legal basis for processing of personal data

The legal basis for processing personal data of users is Art. 6, Section 1, lit. f GDPR.

3.     Purpose of data processing

Processing of personal data of users enables us to analyse the surfing behaviour of our users. By evaluating the data collected, we are able to compile information on the use of the individual components of our website. This helps us to continually improve our website and its user-friendliness. These purposes also represent our legitimate interest in processing of personal data as per Art. 6, Section 1, lit. f GDPR. By anonymisation of the IP address, the interests of users and protection of their personal data are sufficiently taken into account.

4.     Duration of storage

The data collected are deleted after 7 days.

5.     Possibility of appeal and disposal
Cookies are stored on the computer of the user and sent from it to our site. Therefore, as a user, you also have full control over the use of cookies. You can restrict or deactivate transmission of cookies by changing the settings in your internet browser. Cookies already stored can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all functions of the website to the full extent.

XI.    Use of social plug-ins

1.     Facebook

We use social plug-ins on the basis of our justified interests (i.e. interest in the analysis, optimisation and economic operation of our website in the sense of Art. 6, Section 1, lit. f GDPR, social plug-ins (plug-ins”) of the social network facebook.com, which is operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Facebook”). The plugins may take the form of interactive elements or contents (e.g. videos, graphics or texts) and are marked by a Facebook logo (a white “f” on a blue tile, the terms “Like” or a thumbs-up symbol) or are marked with the additional title “Facebook Social Plugin”. The list and appearance of Facebook social plug-ins is given here: https://developers.facebook.com/docs/plugins/.

Google is certified according to the Privacy Shield Agreement and thus offers a guarantee to observe the European Data Protection Law (https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active).

If a user accesses a function of this website containing such a plug-in, his device sets up a direct connection with the servers of Facebook. The content of the plug-in is sent by Facebook directly to the device of the user, which integrates it in the website. From the processed usage data, usage profiles of the users can be created. We therefore have no influence over the scope of data which Facebook collects with the aid of this plug-in and therefore informs the users in accordance with our state of knowledge.

By integrating the plug-ins, Facebook receives the information that a user has accessed the corresponding page of the website. If the user is logged in on Facebook, Facebook can assign his visit to his Facebook account. When users interact with the plug-ins, e.g. by pressing the Like button or commenting, the corresponding information is sent by their device directly to Facebook and stored there. If a user is not a member of Facebook, it is still possible for Facebook to see and store his IP address. According to Facebook, only an anonymised IP address is stored in Germany.

The purpose and scope of data collection and further processing and use of the data by Facebook as well as corresponding rights and setting options to protect the privacy of users are given in the data protection information if Facebook: https://www.facebook.com/about/privacy/.

If a user is a member of Facebook and does not wish Facebook to collect data on him via this website and link them to his membership data stored at Facebook, he must log out and delete his cookies before using our website. Further settings and objections to the use of data for advertising purposes are possible in the Facebook profile settings: https://www.facebook.com/settings?tab=ads  or via the US American site http://www.aboutads.info/choices/  or the EU site http://www.youronlinechoices.com/. The settings are carried out independently of the platform, i.e. they are adopted for all devices, such as desktop computers or mobile devices.