Data Protection

Data Protection Information for Visitors to the Website in accordance with the EU General Data Protection Regulation (GDPR)

We attach great importance to protecting your data which can be collected during your visit to the website www.kiesow.org. By the way, you can visit our site at any time without providing any personal information. Your personal data will only be collected and, if necessary, stored when you contact us voluntarily. You can find the statutory provisions for the protection of your data in the General Data Protection Regulation and in the German Federal Data Protection Act. The responsible body within the meaning of the data protection law provisions is

KIESOW DR. BRINKMANN GmbH Co. KG
Wittekindstrasse 27-35
D-32758 Detmold
Phone: +49 5231 7604-0
Fax: +49 5231 7604-28
e-mail: vertrieb@kiesow.org

The data protection officer is Mr Thomas Werning, Afrikastr. 42, 32791 Lage, Phone: +49 5232 696555-8, Fax: +49 5232 696555-9, e-mail: thomas@werning.com. Below you can find the information on what data we collect during your visit to our website and how it is used. Should you still have any questions, you are welcome to get in touch with us at vertrieb@kiesow.org. In addition, you have the right, in the event of illegal use of your data, to complain to the following competent supervisory authority:

Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen
P.O. Box 20 04 44
40102 Düsseldorf
Phone: +49 211/38424-0
Fax: +49 211/38424-10
e-mail: poststelle@ldi.nrw.de

Collection of server data collection

During the visit to our site, various server statistics are automatically stored which your browser transmits to our provider’s server. Among other things, the name of the website called up, file, date and time of the retrieval, data volume transferred, report of successful retrieval, browser type plus version, the user’s operating system, referrer URL (the site previously visited), IP address and the access provider requesting are logged.

This data is used for statistical evaluation of the visits to our site and for us is not allocable to specific people. The legal basis of the data collection is Art. 6 I f of GDPR. No merging of these data with other data sources is carried out. The IP address is anonymized. We are legitimately interested in collection of these data for the following reasons: with the help of the data we can optimize our offer for users by, for example, being able to prevent the accessing of malicious sites or to optimize access via certain browsers. What is more, it is by the logging of the IP address that delivery of the site to the visitor is made possible in the first place.

As a matter of principle, you have the right to object to this collection of data. By way of an exception, this can de facto not be considered in this case, as otherwise use of the site would be impossible.

The data is deleted as soon as it is no longer required for the above-mentioned purposes.

Use and Passing-on of Personal Data

a. General remarks

If you have placed personal data at our disposal, we use it to answer your inquiries, for advice and for handling of contracts concluded with you and/or for technical administration. Your personal data is only passed on to third parties or otherwise transmitted if this is necessary for the purposes of the handling of a contract, this is required for billing purposes or you have given your authorization beforehand. You have the right at any time to revoke any issued authorization with effect for the future, see also Item 7 regarding your rights as a person concerned. 

b. Contract handling:

Within the scope of contracts concluded with you we collect and store the personal data transmitted by you for contract handling, for example also for invoicing. Passing-on of the data is carried out within the scope of settlement with banks or transport service providers. The settlement data is transferred to the tax consultant’s office and to the fiscal authority with the scope of the tax regulations. The legal basis for the collection and processing of the data is within the scope of contract handling Art. 6 I (b) of the GDPR. The legal basis for the transmission of the data to the tax advisor’s office and to the fiscal authority is Art. 6 I (c) of the GDPR.

The deletion of this data is carried out after the expiry of the statutory retention obligations. If we are not under any statutory retention obligations, the deletion of the data takes place when the purpose ceases to exist.

c. Contact form, return of empties and inquiry by e-mail

In the case of use of our contact form as well as inquiries concerning return of empties, we collect and store the name and the e-mail address as well as the contents of your inquiry for the purpose of answering your question. Further details are optional. If you send us a contact request by e-mail, we collect and store the e-mail address and the data included in the e-mail. The legal basis is Art. 6 I (a) GDPR, as you consent to the above-mentioned processing of your data if the form is used. Deletion of the data takes place when the purpose of storage has ceased, that is, after reply to your e-mail/contact form inquiry and/or when the matter relating to the inquiry has been conclusively clarified. You have the right at any time to revoke the consent granted, without the legality of the processing carried out on the basis of the consent being affected. Concerning the entitlement to deletion and information, see Item 7 below regarding your rights as a person concerned.

Cookies

This site uses cookies. They are small text files that are stored in your Internet browser (e.g. Firefox, Chrome, Microsoft Explorer/Edge, Safari etc.) when our site is visited or by the latter in your computer (in the narrower sense: in your operating system). With the help of the cookie that contains a certain string of characters, our website recognizes your Internet browser again when it calls. We use our own cookies, so-called session cookies. These are used to improve the use of the Internet site and to optimize the presentation of the content for you.

The legal basis is Art. 6 I (f) GDPR. Our legitimate interest results from the fact that we merely make the retrievability of the site easier for you with the above-mentioned cookies, do not collect any tracking data in the process and hence there is no interference with your personal rights and fundamental liberties.

You can exclude the acceptance of cookies in your web browser. However, this can, under certain circumstances, lead to adverse effects on functionality. For your further rights as a person affected see Item 7 below. These cookies are only valid for the duration of your browser session and are deleted upon the end of the visit to our site. You have a right at any time to information on and to objection concerning your data stored by us, see Item 7 below regarding your rights as a person affected. In your web browser, you can completely exclude the acceptance of cookies. However, this can, under certain circumstances, lead to adverse effects on functionality.

You have a right at any time to information on and to objection concerning your data stored by us, see Item 7 below regarding your rights as a person affected. In your web browser, you can completely exclude the acceptance of cookies. However, this can, under certain circumstances, lead to adverse effects on functionality.

Web fonts

This website uses "fonts.com", a font service of Monotype GmbH ("fonts.com"), Werner-Reimers-Straße 2-4, 61352 Bad Homburg ("fonts.com"). The fonts used are locally installed, merely the number of site views is transmitted to "fonts.com". In this case, your IP address can be additionally transmitted to a server of "fonts.com" and stored within the scope of the usual server log. 

The further processing of this information is the responsibility of "fonts.com"; please see the data protection notes (www.monotype.com/legal/privacy-policy) of "fonts.com" for the corresponding conditions and setting possibilities.

The legal basis for the use of web fonts is Art. 6 I (f) of GDPR. We are legitimately interested in this because we can present the representation of the fonts to you in a uniform manner. You are entitled at any time to a right of information and objection regarding your data stored by us, see Item 7 below regarding your rights as a person concerned.

Rights of persons concerned

a. Rights of information
You have the right at any time to receive information about the personal data stored by us concerning you. You can request information on the following information. We must provide the information within a period of one month:

  1. the purposes for which the personal data is processed;
  2. the categories of personal data that are processed;
  3. the recipients and/or the categories of recipients to whom the personal data concerning you were disclosed or are yet to be disclosed;
  4. the planned duration of storage of the personal data concerning you or, if specific details of this are not possible, criteria for the fixing of the storage period;
  5. the existence of a right of correction or deletion of the personal data concerning you, a right of restriction of the processing by the person responsible or of a right of objection to this processing;
  6. the existence of a right to complain to a supervisory authority;
  7. all the available information about the origin of the data if the personal data was not collected from the person concerned;
  8. the existence of automated decision-making including profiling in accordance with Art.22 paragraphs 1 and 4 of the GDPR and – at least in these cases – meaningful information on the logic involved as well as on the consequences as well as the effects for the person concerned striven for with such processing. We point out that such automated decision-making is not carried out on our part.
  9. regarding whether the personal data concerning you is transmitted to a third country or to an international organization. In this connection you can demand that you are to be informed about the appropriate guarantees relating to transmission in accordance with Art.46 of the GDPR.

b. Right of correction
You are entitled to demand correction without undue delay of incorrect personal data concerning you and/or the completion of incomplete personal data concerning you.

c. Right of deletion Entitlement to deletion

You are entitled to have the personal data concerning you deleted without undue delay and we are obliged to delete this data without undue delay if one of the following reasons applies:

  1. The personal data concerning you is no longer necessary for the purposes for which they were collected or otherwise processed.
  2. You revoke your consent on which the processing was based according to Art. 6 I (a), and no other legal basis for the processing exists.
  3. You object, in accordance with Art. 21 I of GDPR, to the processing of your data which we collect based on our legitimate interests presented (e.g. at Google Analytics), and there are no overriding legitimate reasons for the processing, or you object according to Art. 21 II DSGVO to processing within the scope of direct advertising.
  4. The personal data concerning you was unlawfully processed by us, for example without consent or without legitimate interests.
  5. The deletion of the personal data concerning you is necessary for the meeting of a legal obligation affecting us in accordance with European Union legislation or German law.
  6. The data was collected within the scope of services offered by the information society to you as a minor in accordance with Art. 8 of GDPR.

If we have published personal data of yours and if we are obliged to delete for one of the above-mentioned reasons, we will inform the companies on whose Internet sites the data is published about your wish for deletion in an appropriate way and state that you as a person concerned have requested us to delete all links to this data as well as the deletion of all copies or replications.

Exceptions

The right to delete does not exist if the processing is required

  1. for exercising of the right of freedom of expression and information;
  2. or meeting a legal obligation that processing according to European Union or German legislation requires, e.g. within the tax law retention obligations, or for the performance of a task that is in the public interest or takes place in the exercising of public authority that was transferred to us;
  3. for reasons of public interest in the area of public health in accordance with Art. 9 II (h) and (i) as well as Art. 9 III of GDPR;
  4. for archiving purposes in the public interest, scientific or historical research purposes or for statistical purposes according to Art. 89 (I) GDPR, as far as the right of deletion probably makes the achievement of the objectives of this processing impossible or seriously impairs it, or
  5. for the making, exercising of or defending against legal claims, e.g. in court proceedings.

d. Right of restriction of data processing

You are entitled to demand from us the restriction of processing if one of the following prerequisites has been fulfilled:

  1. If you dispute the correctness of the personal data and in fact for a length of time that makes it possible for us to check the correctness of the personal data,
  2. If the processing is unlawful and you reject the deletion of the personal data and instead demand the restriction of the use of the personal data.
  3. If we no longer require the personal data for the purposes of processing, but you need it for claiming, exercising of or defending against legal claims.
  4. If you object to the processing of your personal data that we collect based on our legitimate interests presented (e.g. for Google Analytics) if it is not yet certain whether our legitimate interests outweigh your rights.

If the processing was restricted in accordance with the above-mentioned reasons, this personal data – apart from its storage – may only be processed with your consent or for making or exercising of or defending against legal claims or for the protection of the rights of another natural person or legal entity (GmbH, AG etc.) or for reasons of an important public interest of the European Union or of a member state. If you have brought about the restriction of processing, you will be informed by us before the restriction is lifted.

e. Reporting obligation

If you have claimed the right of correction, deletion or restriction of processing in relation to us, we are obliged to report to all recipients to whom the personal data concerning you has been disclosed, this correction or deletion of the data or restriction of processing, unless this proves impossible or involves a disproportionately high degree of effort/expenditure. You are entitled in relation to us to be informed about these recipients.

f. Right to transferability of the data

You are entitled to receive the personal data concerning you that you have provided us with in a structured, usual and machine-readable form. Moreover, you have the right to transfer this data to another company without obstruction by us, if

  1. processing is based on consent in accordance with Art. 6 (I) GDPR or on a contract in accordance with Art.6 I (b) of the GDPR and
  2. processing is carried out with the help of automated processes.

In exercising this right, you have, in addition, the right to obtain a situation where the personal data concerning you is transmitted directly from us to another company as far as this is technically feasible. The rights and liberties of other persons must not be detrimentally affected by this.
The right to data transferability does not apply to processing of personal data that is required for the performance of a task that is carried out in the public interest or in the exercising of public authority that was transferred to us.

g. Right of objection
You are entitled for reasons arising from your special situation to object at any time to the processing of the personal data concerning you that is carried out on the basis of Art. 6 I (e) – necessary processing on the basis of a task in the public interest or (f) GDPR – presenting our legitimate interest, e.g. in the case of online marketing; this applies also to profiling based on these provisions.
We no longer process the personal data concerning you, unless we can provide evidence of compelling defendable reasons for the processing that outweigh your interests, rights and liberties, or the processing is used for making, exercising or defending legal claims. If the personal data concerning you is processed to carry out direct advertising, you have the right at any time to object to the processing of the personal data concerning you for such advertising purposes; this also applies to the profiling, insofar as it is related to such direct advertising.
If you object to processing for the purposes of direct advertising, the personal data concerning you will no longer be processed for these purposes. You have the possibility in connection with the use of services of the information society – irrespective of Directive 2002/58/EC – to exercise your right of objection by means of automated processes in which technical specifications are used.

h. Right of revocation of the data protection declaration of consent
You are entitled to revoke your data protection declaration of consent at any time. The lawfulness of processing carried out on the basis of the consent up to revocation will not be affected by revocation of the consent.

i. Contact person for the rights of the person concerned
If we cannot directly make it possible for you to exercise your rights within the scope of processing of the data, please get in touch with us at vertrieb@kiesow.org or by post at the address stated in the imprint.

Status of this Data Protection Declaration as of: 29.05.2018