A. Basic information
The protection of your privacy is very important to us. We attach great importance to the protection of your personal data and your right to informational self-determination. In the following we inform about the collection and processing of personal data when using our website or our online offer at schuko-wzv.com. Personal data are all data that can be related to you personally, e.g. name, address, email address, user behaviour.
Responsible for data protection in accordance with Art. 4 No. 7 General Data Protection Regulation („GDPR“):
SCHUKO - Warenzeichenverband e.V.
Phone: 0049 (0) 2355 - 806 201
Further information and contact data can be found in our imprint.
2. Data Security
We protect our website and other systems by technical and organizational measures against loss, destruction, access, modification or distribution of your data by unauthorized persons. For secure communication with us, we offer encrypted communication via the TLS protocol as standard.
In connection with access to our website, data that may allow identification (e.g. IP address) is temporarily stored on our servers for data and system security purposes, but in principle for no longer than thirty days. The processing of possibly personal data for data and system security purposes is carried out on the basis of Art. 6 para. 1 sentence 1 lit f GDPR and our legitimate interest in securing our systems and preventing misuse.
3. Principles for the storage and deletion of personal data
Personal data will only be processed for the period required to achieve the respective storage purpose or if this is provided for in the laws or regulations applicable to us, e.g. commercial or tax storage obligations. If a storage purpose or a legally prescribed storage period expires, affected personal data will be deleted routinely and in accordance with legal regulations or their processing will be restricted, e.g. limited processing within the scope of commercial or tax storage obligations.
The processing of personal data on the basis of a legal obligation, namely the fulfilment of legal storage obligations, is based on Art. 6 para. 1 sentence 1 lit. c GDPR. Insofar as personal data pursuant to Art. 6 para. 1 sentence 1 f GDPR are processed for the purpose of preserving evidence, these processing purposes shall cease after expiry of the statutory limitation periods; the statutory regular limitation period is three years.
For further details on specific storage and deletion periods, we also refer to individual service descriptions or information in this data protection declaration.
If you merely use our website for information purposes, i.e. if you do not provide us with personal information, we may collect personal data that your browser transmits to our server.
When you visit our website, we collect the following data, which is technically necessary for us to display our website and to guarantee the stability and security of our online offer:
- IP address
- Date and time of the request
- Time zone difference to Greenwich Mean Time (GMT)
- Content of the request (specific page)
- Access Status/HTTP Status Code
- the amount of data transferred in each case
- Website from which the request comes
- Operating system and its interface
- Language and version of the browser software.
The legal basis for this collection and processing is Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interest lies in the provision of a functional website offer and its system security. In addition, we use the aforementioned data in non-personal form for statistical purposes and to improve our online offering.
C. Use of contact
On our website we offer you various ways to get in touch with us and to send us messages. In particular, you can contact us by telephone or by email.
If you contact us accordingly, we will store and process the data you provide (e.g. your email address, if applicable your name and your telephone number) in order to process your request. The legal basis in this respect is Art. 6 para. 1 lit. b and f GDPR. Our legitimate interests lie in an efficient and structured collection and processing of customer inquiries. We delete the accruing data after the storage is no longer necessary, or limit the processing if statutory retention obligations exist.
D. Rights of data subjects
We would like to inform you about your rights under the GDPR as "data subject". As a data subject you have the following rights with respect to the personal data that concerns you:
- Right to information (Art. 15 para. 1, 2 GDPR)
- Right to rectification (Article 16 GDPR) or to erasure (Article 17 GDPR)
- Right to restrictionof processing (Art. 18 GDPR)
- Right to data portability (Art. 20 GDPR)
- Right to object to processing (Art. 21 GDPR)
- Right to withdraw consent (Art. 7 para. 3 GDPR)
- Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)
In addition, we summarise for you the key points of the rights of data subjects under the GDPR as follows, although this description does not claim to be exhaustive, but merely addresses the basic features of the rights of affected persons under the GDPR:
Right to information (including right to confirmation and rights to data provision)
The data subject has the right to obtain from the controller confirmation as to whether or not personal data concerning him or her are being processed.
The data subject has the right of access to personal data concerning him/her and to the following information:
- the purposes of the processing;
- the categories of personal data concerned;
- the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organisations;
- if possible, the envisaged period for which the personal data will be stored or, if this is not possible, the criteria used to determine that period;
- the existence of the right to request from the controller rectification or erasure of personal data or restriction of processing of personal data concerning the data subject or to object to such processing
the right to lodge a complaint with a supervisory authority;
- if the personal data are not collected from the data subject, any available information as to their source;
- the existence of automated decision-making, including profiling, referred to in Article 22 para. 1 and 4 GDPR and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject the right to be informed of the appropriate safeguards pursuant to Article 46 GDPR relating to the transfer, where personal data are transferred to a third country or to an international organisation.
The data subject has the right to receive a copy of the personal data undergoing processing of him/her.
Right to rectification
The data subject has the right to optain from the controller without undue delay the rectification of inaccurate personal data concerning him/her. Taking into account the purposes of the processing, the data subject has the right to have incomplete personal data completed, including by means of providing a supplementary statement
Right to restriction of processing
The data subject has the right to obtain from the controller restriction of processing where one of the following applies:
- the accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal data,
- the processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of their use instead;
- the controller no longer needs the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise or defence of legal claims; or
- the data subject has objected to processing pursuant to Article 21(1) GDPR pending the verification whether the legitimate grounds of the controller override those of the data subject.
Right to erasure (‚right to be forgotten‘)
In principle and subject to certain legal requirements for data processing (cf. exception Article 17 para. 3 GDPR), the data subject has the right to obtain from the controller the erasure of personal data concerning him/her without undue delay and the controller has the obligation to erase personal data without undue delay where one of the following grounds applies:
- the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed.
- the data subject withdraws consent on which the processing is based according to Article 6 para. 1 lit. a, or Article 9 para. 2 lit. a GDPR, and where there is no other legal ground for the processing.
- the data subject objects to the processing pursuant to Article 21 para. 1 GDPR and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing pursuant to Article 21 para. 2 GDPR.
- The personal data have been unlawfully processed.
- the personal data have to be erased for compliance with a legal obligation in Union or Member State law to which the controller is subject.
- the personal data have been collected in relation to the offer of information society services referred to in Article 8 para. 1 GDPR.
Rights to data portability
The data subject has the right to receive the personal data concerning him/her which he/she has provided to a controller in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided, if the processing is based on an consent or on a contract in accordance with Article 6 para. 1 lit. b GDPR and the processing is carried out by means of automated means.
In exercising his/her right to data portability, the data subject shall have the right to have the personal data transferred directly by a data controller to another data controller, where this is technically feasible.
Right to withdraw
The data subject has the right to withdraw his/her consent at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
Right to lodge a complaint with a supervisory authority
Every data subject has the right to lodge a complaint with a supervisory authority, in particular in the Member State of his/her habitual residence, place of work or place of the alleged infringement, if the data subject considers that the processing of personal data relating to him/her infringes the GDPR.
The supervisory authority for data protection responsible for us is:
The North Rhine-Westphalia Commissioner for Data Protection and Freedom of Information (LDI NRW)
40213 Düsseldorf, Germany
Separate reference to the right to object pursuant to Art. 21 para. 1, 2 GDPR
You have the right to object,on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on Article 6 para. 1 lit. e or f GDPR, including profiling based on those provisions.
If you object, we will no longer process the personal data unless we demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms of or for the establishment, exercise or defence of legal claims.
Where personal data are processed for direct marketing purposes, you have the right to object at any time to processing of personal data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing.
You can contact us at any time for the exercise of your rights as well as for general questions regarding data protection by sending us an email to schuko(at)cbh.de or by using the other contact information provided under point A.1.