Data Protection Declaration
This Data Protection Declaration will inform you about the personal data which are collected from you, processed, and/or used (the “Processing”) in the course of the use of e-STULZ.
STULZ GmbH, Holsteiner Chaussee 283, D-22457 Hamburg, Germany (“we” or “us”) is the controller for the processing of personal data in the course of the use of e-STULZ. You can find further details about us in no. 11 of this Data Protection Declaration as well as in the imprint on our website.
3. Data protection officer
You can reach our data protection officer at: Data protection officer, STULZ GmbH, Holsteiner Chaussee 283, D-22457 Hamburg or +49 40 5585 2109 or datenschutz(at)stulz.de.
4. Purpose of the data processing
To the extent that personal data are processed in the course of the use of e-STULZ, this is done solely to facilitate the proper deployment of e-STULZ and of the functionalities made available in it to users.
5. Legal basis of the data processing
The legal basis for the processing of your personal data in the course of the use of e-STULZ and the functions deployed there is Article 6(1)(f) of the EU General Data Protection Regulation (the “GDPR”), unless otherwise specified in this Data Protection Declaration. This standard of permission allows the processing of personal data as part of the “legitimate interest” of the controller. Our legitimate interest consists of providing our partners access to information on products and services, training videos and planning tools to enable the best possible use of our products.
6. Data processing
a) Technical use data
During the use, e-STULZ automatically transfers general information to our server. This information is stored exclusively for purposes of technical administration of e-STULZ. As an example, the webserver and statistical programs used routinely store: date and time of accessing, operating system, IP address, Browser. IP addresses will be anonymized and not stored; no person-related processing takes place.
b) User data
In order to ensure that only you have access to e-STULZ, it shall be necessary for you to register with e-STULZ. For this purpose, the following data are stored: title, your first and last name, a user name to be chosen by you, a password to be set by you, your e-mail address and company name and address. In case we provided you with respective access, these data are partly used (first name, last name, user name, password, e-mail address) to log in to the Digital Asset Management (“DAM”) as well.
c) Optional user data
You can also enter the following optional data through your user account and update these data as needed: academic title, customer number and up to two additional addresses.
7. Sharing of data
We employ service providers in the course of processing when rendering performances, particularly for providing, servicing and maintenance of IT systems. Moreover, personal data are transferred to third persons or locations only if you provided your consent or we are obligated to do so by law.
8. Duration of storage
Your personal data will be stored by us to the extent that and as long as such is necessary for the processing purposes pursued by us. If you use, for example, the functions provided by us in e-STULZ, then we will store the data recorded in connection therewith until the respective use relationship has been resolved or terminated. To the extent there exist any statutory or contractual retention periods extending beyond this date, which periods provide for further retention of your data, your personal data shall be erased after expiration of the respective retention periods, insofar as you have not expressly consented to the further use of your data.
In order to make the visit to e-STULZ attractive and to facilitate the use of certain functions, on various sites we use so-called cookies. These are small text data files that are deposited on your end device. Some of the cookies used by us are erased immediately after the end of the browser session, i.e., after closing your browser, (so-called session cookies). Other cookies remain on your end device and enable us to recognize your browser again at the next visit (so-called persistent cookies).
You can adjust your browser so that you are informed about the placement of cookies and can decide on an individual basis whether to accept them or to preclude their acceptances in certain cases or generally. Also, you can adjust your browser so that it automatically erases cookies once the browser is closed. In the event cookies are not accepted this can result in a restriction of the functionality of our website.
10. Google Analytics
e-STULZ uses Google Analytics, a web-analysis service of Google, Inc. (“Google”). Google Analytics uses so-called “cookies,” text data files that are stored on your mobile end device and enable an analysis of your use of Website. We use Google Analytics in order to record and improve use of e-STULZ to the contents and functions provided there by individual users.
The information generated by the Google Analytics cookie about your use of this site is generally transferred to a Google server in the United States of America and stored there. You can find additional information about the handling of user data recorded by Google Analytics in the data privacy and security principles of Google Analytics at https://support.google.com/analytics/answer/6004245.
In the event the IP anonymization on this App is activated, your IP address will, however, first be abbreviated by Google within the Member States of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in cases of exception will the full IP address be transferred to a Google server in the United States and abbreviated there. On behalf of the operator of this App, Google will use this information to evaluate your use of the App, in order to compile reports about the App activities and to render to the App operator services associated with the use of the App and of the internet.
The IP address transferred by your mobile end device through Google Analytics will not be merged with other data from Google. You can prevent the storage of cookies by adjusting your mobile end device accordingly; however, we would like to point out to you that in this event, it is possible that you may not be able to use all of the functions of e-STULZ to their fullest extent. Moreover, you can prevent the recording of the data generated by the cookie and relating to your use of the Website (incl. your IP address) by Google as well as the processing of this data by Google by downloading and installing the browser plug-in available under the following link: http://tools.google.com/dlpage/gaoptout.
We would like to point out to you that in e-STULZ, Google Analytics has been expanded using the code “gat._anonymizelp ();” in order to guarantee an anonymized recording of IP addresses (so-called IP masking).
The legal basis for this processing is Article 6(1)(f) GDPR. This standard of permission allows the processing of personal data as part of the “legitimate interest” of the controller, to the extent that your fundamental rights, freedoms, or interests are not overriding. Our legitimate interest consists of the analysis of the use of e-STULZ.
11. Rights of the data subject
a) Right of access, rectification, erasure, restriction, and transfer
If your personal data are processed, then you are the data subject within the meaning of the GDPR, and you are entitled to the following rights vis-à-vis the controller:
If the statutory prerequisites are present, then you have the right to obtain from us (i) access to personal data or the processing of personal data concerning you (Article 15 GDPR); (ii) the rectification, erasure, and restriction of personal data or data processing concerning you (Articles 16 through 18 GDPR), and (iii) the transfer of personal data concerning you (Article 20 GDPR). Should the erasure be contradicted by any retention duties pursuant to statute, contracts, tax law, or commercial law, or any other statutorily grounded reasons, then in lieu of the erasure, only the blocking of your data can take place.
b) Right to object
You shall have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on Article 6(1)(f) GDPR (data processing on the basis of a balancing of interests).
If you object, then we shall no longer process your personal data unless (i) we can demonstrate compelling legitimate grounds for the processing, which override your interests, rights, and freedoms, or (ii) the processing serves the establishment, exercise, or defense of legal claims. The objection can be made without using any particular form.
To assert the aforementioned rights and/or to receive more specific information concerning them, please contact our data protection officer or contact us directly at the following address: STULZ GmbH, Holsteiner Chaussee 283, D-22457 Hamburg, Germany, or +49 40 5585 0 or at datenschutz(at)stulz.de.
c) Right to lodge a complaint
If you consider that the processing of your data depicted in this Data Protection Declaration violates any provisions of law, then you can – without prejudice to any other administrative or judicial remedy – lodge a complaint with the respectively responsible supervisory authority, in particular in the Member State of your habitual residence, your place of work, or the place of the alleged violation. The supervisory authority responsible for us is: Hamburg Commissioner for Data Protection and Freedom of Information, Kurt-Schumacher-Allee 4, D-20097 Hamburg, Germany.