Data Protection

Data Protection Information for Visitors to the Website in accordance with the EU General Data Protection Regulation (GDPR)

We attach great importance to protecting your data which can be collected during your visit to the website www.kiesow.org. By the way, you can visit our site at any time without providing any personal information. Your personal data will only be collected and, if necessary, stored when you contact us voluntarily. You can find the statutory provisions for the protection of your data in the General Data Protection Regulation and in the German Federal Data Protection Act. The responsible body within the meaning of the data protection law provisions is

KIESOW DR. BRINKMANN GmbH Co. KG
Wittekindstrasse 27-35
D-32758 Detmold
Phone: +49 5231 7604-0
Fax: +49 5231 7604-28
e-mail: vertrieb@kiesow.org

The data protection officer is Mr Thomas Werning, Afrikastr. 42, 32791 Lage, Phone: +49 5232 696555-8, Fax: +49 5232 696555-9, e-mail: thomas@werning.com. Below you can find the information on what data we collect during your visit to our website and how it is used. Should you still have any questions, you are welcome to get in touch with us at vertrieb@kiesow.org. In addition, you have the right, in the event of illegal use of your data, to complain to the following competent supervisory authority:

Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen
P.O. Box 20 04 44
40102 Düsseldorf
Phone: +49 211/38424-0
Fax: +49 211/38424-10
e-mail: poststelle@ldi.nrw.de

Collection of server data collection

During the visit to our site, various server statistics are automatically stored which your browser transmits to our provider’s server. Among other things, the name of the website called up, file, date and time of the retrieval, data volume transferred, report of successful retrieval, browser type plus version, the user’s operating system, referrer URL (the site previously visited), IP address and the access provider requesting are logged.

This data is used for statistical evaluation of the visits to our site and for us is not allocable to specific people. The legal basis of the data collection is Art. 6 I f of GDPR. No merging of these data with other data sources is carried out. The IP address is anonymized. We are legitimately interested in collection of these data for the following reasons: with the help of the data we can optimize our offer for users by, for example, being able to prevent the accessing of malicious sites or to optimize access via certain browsers. What is more, it is by the logging of the IP address that delivery of the site to the visitor is made possible in the first place.

As a matter of principle, you have the right to object to this collection of data. By way of an exception, this can de facto not be considered in this case, as otherwise use of the site would be impossible.

The data is deleted as soon as it is no longer required for the above-mentioned purposes.

Use and Passing-on of Personal Data

a. General remarks

If you have placed personal data at our disposal, we use it to answer your inquiries, for advice and for handling of contracts concluded with you and/or for technical administration. Your personal data is only passed on to third parties or otherwise transmitted if this is necessary for the purposes of the handling of a contract, this is required for billing purposes or you have given your authorization beforehand. You have the right at any time to revoke any issued authorization with effect for the future, see also Item 7 regarding your rights as a person concerned. 

b. Contract handling:

Within the scope of contracts concluded with you we collect and store the personal data transmitted by you for contract handling, for example also for invoicing. Passing-on of the data is carried out within the scope of settlement with banks or transport service providers. The settlement data is transferred to the tax consultant’s office and to the fiscal authority with the scope of the tax regulations. The legal basis for the collection and processing of the data is within the scope of contract handling Art. 6 I (b) of the GDPR. The legal basis for the transmission of the data to the tax advisor’s office and to the fiscal authority is Art. 6 I (c) of the GDPR.

The deletion of this data is carried out after the expiry of the statutory retention obligations. If we are not under any statutory retention obligations, the deletion of the data takes place when the purpose ceases to exist.

c. Contact form, return of empties and inquiry by e-mail

In the case of use of our contact form as well as inquiries concerning return of empties, we collect and store the name and the e-mail address as well as the contents of your inquiry for the purpose of answering your question. Further details are optional. If you send us a contact request by e-mail, we collect and store the e-mail address and the data included in the e-mail. The legal basis is Art. 6 I (a) GDPR, as you consent to the above-mentioned processing of your data if the form is used. Deletion of the data takes place when the purpose of storage has ceased, that is, after reply to your e-mail/contact form inquiry and/or when the matter relating to the inquiry has been conclusively clarified. You have the right at any time to revoke the consent granted, without the legality of the processing carried out on the basis of the consent being affected. Concerning the entitlement to deletion and information, see Item 7 below regarding your rights as a person concerned.

Cookies

This site uses cookies. They are small text files that are stored in your Internet browser (e.g. Firefox, Chrome, Microsoft Explorer/Edge, Safari etc.) when our site is visited or by the latter in your computer (in the narrower sense: in your operating system). With the help of the cookie that contains a certain string of characters, our website recognizes your Internet browser again when it calls. We use our own cookies, so-called session cookies. These are used to improve the use of the Internet site and to optimize the presentation of the content for you.

The legal basis is Art. 6 I (f) GDPR. Our legitimate interest results from the fact that we merely make the retrievability of the site easier for you with the above-mentioned cookies, do not collect any tracking data in the process and hence there is no interference with your personal rights and fundamental liberties.

You can exclude the acceptance of cookies in your web browser. However, this can, under certain circumstances, lead to adverse effects on functionality. For your further rights as a person affected see Item 7 below. These cookies are only valid for the duration of your browser session and are deleted upon the end of the visit to our site. You have a right at any time to information on and to objection concerning your data stored by us, see Item 7 below regarding your rights as a person affected. In your web browser, you can completely exclude the acceptance of cookies. However, this can, under certain circumstances, lead to adverse effects on functionality.

You have a right at any time to information on and to objection concerning your data stored by us, see Item 7 below regarding your rights as a person affected. In your web browser, you can completely exclude the acceptance of cookies. However, this can, under certain circumstances, lead to adverse effects on functionality.

Google Analytics

This website uses Google Analytics, a web analysis service of Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”). Google Analytics uses so-called “cookies”, see Item 3 above for a general explanation of cookies.
The use of cookies within the scope of Google Analytics is carried out for the purpose of analyzing the use of the website by you as well as for reach measurement. According to Google Inc., the following cookies are applied during the use of Google Analytics. This overview is based on the Google overview (there in English).

Name of the cookie Pre-set deletion deadline Intended use
_utma 2 years after installation/respective update This cookie is used for distinguishing between the users and the respective visit to the site. This cookie is installed if the JavaScript library is executed and no _utma cookie so far exists. The cookie is updated whenever data is used by Google Analytics
_utmt 10 minutes Is used to reduce the demand mode
_utmb 30 minutes after installation/update This cookie is used to identify new visitors /page views. This cookie is installed if the JavaScript library is executed and no _utma cookie so far exists. The cookie is updated whenever data is used by Google Analytics
_utmz 6 months after installation/update This cookie stores the source data and/or the campaign that explains to us how and from where the respective visitor reached our site. This cookie is installed if the JavaScript library is executed and no _utma cookie so far exists. The cookie is updated whenever data is used by Google Analytics.
_utmv 2 years after installation/respective update This cookie is used to store variables adapted to the visitor quality. This cookie is generated if a software developer uses the _setCustomVar method with a variable adapted to the visitor quality. The cookie is updated whenever data is used by Google Analytics.

The legal basis for the collection and storage of the data is Art. 6 I (f) GDPR. We have a legitimate interest because the analysis data make it possible for us to see where users break off the visit to our site and we can improve our pages correspondingly for you or to see from which countries our site is called up and we can adjust our language selection accordingly. On our website, we have extended Google Analytics by the code “gat._anonymizeIp();” to ensure anonymized collection of IP addresses (so-called IP masking). Therefore, it is not possible for us to allocate the analysis data collected to a specific person.

Transmission of the data to third countries: the data generated by the cookies concerning your use of this website are as a rule transferred to a Google server in the USA and stored there. Due to the activated IP anonymization on this website, your IP address will, however, be abbreviated by Google within the member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and abbreviated there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on the website activities and to provide further services associated with use of the website and use of the Internet for the website operator. The IP address transmitted from your browser within the scope of Google Analytics will not be merged with other data by Google.

Google LLC is certified according to the US Privacy Shield in order to ensure a level of data protection adequate for the GDPR. We have concluded an order processing agreement with Google LLC, with which Google Inc provides us with evidence of compliance with reasonable and appropriate technical and organizational measures for the protection of your personal data.

Objection and deletion:
You can prevent storage of the cookies by an appropriate adjustment of your browser software; but we draw your attention to the fact that in such case you will possibly not be able to use all the functions of this website to the full extent. Moreover, you can prevent the collection of the data generated by the cookie and relating to your use of the website (incl. your IP address) for Google as well as the processing of these data by Google by downloading and installing the add-on available under the following link: Browser-Add-on.

Under certain circumstances, the above-mentioned add-on will not be available when it is called up via browsers of mobile devices. In this case as well as generally, you can therefore, as an alternative, prevent use and passing-on of the data to Google by clicking this link. Please note that it is a so-called opt-out cookie that is valid only for www.kiesow.org and the respective browser used. If you delete the cookies in your browser history, you must again click the link if you call up our site again to object to use of the data. The same applies if you call up the site with a different browser.

You can find more detailed information on data protection at Google Analytics at https://support.google.com/analytics/answer/6004245?hl=de.
You have at any time the right of information and objection regarding your data stored by us, see Item 7 below regarding your rights as a person affected.

Google-Maps

This site makes use of the cartographic service Google Maps of Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”). If you view our location via Google Maps, data can be collected by you through that service. You can see details from the conditions for use of Maps such as the data protection guidelines from “Google”.

The legal basis for the collection and storage of the data is Art. 6 I (f) of the GDPR. We are legitimately interested in collection of these data because we can make it easier for you to find our premises.

Web fonts

This website uses "fonts.com", a font service of Monotype GmbH ("fonts.com"), Werner-Reimers-Straße 2-4, 61352 Bad Homburg ("fonts.com"). The fonts used are locally installed, merely the number of site views is transmitted to "fonts.com". In this case, your IP address can be additionally transmitted to a server of "fonts.com" and stored within the scope of the usual server log. 

The further processing of this information is the responsibility of "fonts.com"; please see the data protection notes (www.monotype.com/legal/privacy-policy) of "fonts.com" for the corresponding conditions and setting possibilities.

The legal basis for the use of web fonts is Art. 6 I (f) of GDPR. We are legitimately interested in this because we can present the representation of the fonts to you in a uniform manner. You are entitled at any time to a right of information and objection regarding your data stored by us, see Item 7 below regarding your rights as a person concerned.

Rights of persons concerned

a. Rights of information
You have the right at any time to receive information about the personal data stored by us concerning you. You can request information on the following information. We must provide the information within a period of one month:

  1. the purposes for which the personal data is processed;
  2. the categories of personal data that are processed;
  3. the recipients and/or the categories of recipients to whom the personal data concerning you were disclosed or are yet to be disclosed;
  4. the planned duration of storage of the personal data concerning you or, if specific details of this are not possible, criteria for the fixing of the storage period;
  5. the existence of a right of correction or deletion of the personal data concerning you, a right of restriction of the processing by the person responsible or of a right of objection to this processing;
  6. the existence of a right to complain to a supervisory authority;
  7. all the available information about the origin of the data if the personal data was not collected from the person concerned;
  8. the existence of automated decision-making including profiling in accordance with Art.22 paragraphs 1 and 4 of the GDPR and – at least in these cases – meaningful information on the logic involved as well as on the consequences as well as the effects for the person concerned striven for with such processing. We point out that such automated decision-making is not carried out on our part.
  9. regarding whether the personal data concerning you is transmitted to a third country or to an international organization. In this connection you can demand that you are to be informed about the appropriate guarantees relating to transmission in accordance with Art.46 of the GDPR.

b. Right of correction
You are entitled to demand correction without undue delay of incorrect personal data concerning you and/or the completion of incomplete personal data concerning you.

c. Right of deletion Entitlement to deletion

You are entitled to have the personal data concerning you deleted without undue delay and we are obliged to delete this data without undue delay if one of the following reasons applies:

  1. The personal data concerning you is no longer necessary for the purposes for which they were collected or otherwise processed.
  2. You revoke your consent on which the processing was based according to Art. 6 I (a), and no other legal basis for the processing exists.
  3. You object, in accordance with Art. 21 I of GDPR, to the processing of your data which we collect based on our legitimate interests presented (e.g. at Google Analytics), and there are no overriding legitimate reasons for the processing, or you object according to Art. 21 II DSGVO to processing within the scope of direct advertising.
  4. The personal data concerning you was unlawfully processed by us, for example without consent or without legitimate interests.
  5. The deletion of the personal data concerning you is necessary for the meeting of a legal obligation affecting us in accordance with European Union legislation or German law.
  6. The data was collected within the scope of services offered by the information society to you as a minor in accordance with Art. 8 of GDPR.

If we have published personal data of yours and if we are obliged to delete for one of the above-mentioned reasons, we will inform the companies on whose Internet sites the data is published about your wish for deletion in an appropriate way and state that you as a person concerned have requested us to delete all links to this data as well as the deletion of all copies or replications.

Exceptions

The right to delete does not exist if the processing is required

  1. for exercising of the right of freedom of expression and information;
  2. or meeting a legal obligation that processing according to European Union or German legislation requires, e.g. within the tax law retention obligations, or for the performance of a task that is in the public interest or takes place in the exercising of public authority that was transferred to us;
  3. for reasons of public interest in the area of public health in accordance with Art. 9 II (h) and (i) as well as Art. 9 III of GDPR;
  4. for archiving purposes in the public interest, scientific or historical research purposes or for statistical purposes according to Art. 89 (I) GDPR, as far as the right of deletion probably makes the achievement of the objectives of this processing impossible or seriously impairs it, or
  5. for the making, exercising of or defending against legal claims, e.g. in court proceedings.

d. Right of restriction of data processing

You are entitled to demand from us the restriction of processing if one of the following prerequisites has been fulfilled:

  1. If you dispute the correctness of the personal data and in fact for a length of time that makes it possible for us to check the correctness of the personal data,
  2. If the processing is unlawful and you reject the deletion of the personal data and instead demand the restriction of the use of the personal data.
  3. If we no longer require the personal data for the purposes of processing, but you need it for claiming, exercising of or defending against legal claims.
  4. If you object to the processing of your personal data that we collect based on our legitimate interests presented (e.g. for Google Analytics) if it is not yet certain whether our legitimate interests outweigh your rights.

If the processing was restricted in accordance with the above-mentioned reasons, this personal data – apart from its storage – may only be processed with your consent or for making or exercising of or defending against legal claims or for the protection of the rights of another natural person or legal entity (GmbH, AG etc.) or for reasons of an important public interest of the European Union or of a member state. If you have brought about the restriction of processing, you will be informed by us before the restriction is lifted.

e. Reporting obligation

If you have claimed the right of correction, deletion or restriction of processing in relation to us, we are obliged to report to all recipients to whom the personal data concerning you has been disclosed, this correction or deletion of the data or restriction of processing, unless this proves impossible or involves a disproportionately high degree of effort/expenditure. You are entitled in relation to us to be informed about these recipients.

f. Right to transferability of the data

You are entitled to receive the personal data concerning you that you have provided us with in a structured, usual and machine-readable form. Moreover, you have the right to transfer this data to another company without obstruction by us, if

  1. processing is based on consent in accordance with Art. 6 (I) GDPR or on a contract in accordance with Art.6 I (b) of the GDPR and
  2. processing is carried out with the help of automated processes.

In exercising this right, you have, in addition, the right to obtain a situation where the personal data concerning you is transmitted directly from us to another company as far as this is technically feasible. The rights and liberties of other persons must not be detrimentally affected by this.
The right to data transferability does not apply to processing of personal data that is required for the performance of a task that is carried out in the public interest or in the exercising of public authority that was transferred to us.

g. Right of objection
You are entitled for reasons arising from your special situation to object at any time to the processing of the personal data concerning you that is carried out on the basis of Art. 6 I (e) – necessary processing on the basis of a task in the public interest or (f) GDPR – presenting our legitimate interest, e.g. in the case of online marketing; this applies also to profiling based on these provisions.
We no longer process the personal data concerning you, unless we can provide evidence of compelling defendable reasons for the processing that outweigh your interests, rights and liberties, or the processing is used for making, exercising or defending legal claims. If the personal data concerning you is processed to carry out direct advertising, you have the right at any time to object to the processing of the personal data concerning you for such advertising purposes; this also applies to the profiling, insofar as it is related to such direct advertising.
If you object to processing for the purposes of direct advertising, the personal data concerning you will no longer be processed for these purposes. You have the possibility in connection with the use of services of the information society – irrespective of Directive 2002/58/EC – to exercise your right of objection by means of automated processes in which technical specifications are used.

h. Right of revocation of the data protection declaration of consent
You are entitled to revoke your data protection declaration of consent at any time. The lawfulness of processing carried out on the basis of the consent up to revocation will not be affected by revocation of the consent.

i. Contact person for the rights of the person concerned
If we cannot directly make it possible for you to exercise your rights within the scope of processing of the data, please get in touch with us at vertrieb@kiesow.org or by post at the address stated in the imprint.

Status of this Data Protection Declaration as of: 29.05.2018