Privacy Policy
With this privacy policy, we – as the data controller responsible according to the provisions of Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR) – inform you about the nature, scope, and purpose of the processing of personal data in connection with our online offer.
Definitions “Personal data” means any information relating to an identified or identifiable natural person; an identifiable natural person is one who can be identified, directly or indirectly, especially by reference to an identifier such as a name, identification number, location data, online identifier, or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person. “Processing” means any operation or set of operations performed on personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction. “Controller” means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data. Where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law. “Recipient” means a natural or legal person, public authority, agency or another body to which personal data are disclosed, whether a third party or not. However, public authorities which may receive personal data in the context of a particular inquiry in accordance with Union or Member State law shall not be regarded as recipients; the processing of those data by those authorities shall be in compliance with the applicable data protection rules according to the purposes of the processing.
General Information Controller for data processing: indEAS - Eingabe- und Antriebs-Systeme GmbH Carl-Zeiss-Straße 6 D-72124 Pliezhausen E-Mail: info@indeas.de Internet: www.indeas.de
Contact details of the company data protection officer: We have not appointed a data protection officer and are not obliged to appoint one.
Legal bases We process personal data based on at least one of the following legal bases:
- Consent of the data subject to the processing of their personal data for one or more specific purposes (Art. 6 para. 1 sentence 1 lit. a GDPR);
- Performance of a contract with the data subject or to take steps at the request of the data subject prior to entering into a contract (Art. 6 para. 1 sentence 1 lit. b GDPR);
- Compliance with a legal obligation to which we are subject (Art. 6 para. 1 sentence 1 lit. c GDPR);
- Protection of our legitimate interests or those of a third party (Art. 6 para. 1 sentence 1 lit. f GDPR).
This privacy policy will indicate the specific legal basis for individual processing operations below.
Disclosure of data to recipients We only disclose personal data to recipients (processors or other third parties) to the extent necessary and only under one of the following conditions:
- The data subject has consented to the disclosure;
- Disclosure is necessary to fulfill contractual obligations or pre-contractual measures at the request of the data subject;
- We are legally obliged to disclose;
- Disclosure is based on legitimate interests of ours or of a third party.
Third countries The transfer of personal data to a country or international organization outside the European Union (EU) or the European Economic Area (EEA) is only made under the conditions of Articles 44 et seq. GDPR. This means that for the respective country, there is either an adequacy decision by the EU Commission according to Art. 45 GDPR, appropriate safeguards for data protection according to Art. 46 GDPR, or binding internal data protection rules according to Art. 47 GDPR.
Rights of data subjects As a data subject, you have the following rights:
- According to Art. 15 GDPR, you may request information about the personal data processed by us, including purposes, categories of data, recipients, storage periods, data source, existence of automated decision-making including profiling, and other relevant details;
- According to Art. 16 GDPR, you may request immediate correction of inaccurate or incomplete personal data;
- According to Art. 17 GDPR, you may request deletion of your personal data, unless processing is necessary for freedom of expression, legal obligation, public interest, or legal claims;
- According to Art. 18 GDPR, you may request restriction of processing in certain cases (e.g., contesting accuracy, unlawful processing, objection to deletion, etc.);
- According to Art. 20 GDPR, you may request data portability, i.e., transfer of your data in a structured, commonly used and machine-readable format or transmission to another controller;
- According to Art. 21 GDPR, you may object to processing based on legitimate interests or direct marketing;
- According to Art. 7 para. 3 GDPR, you may withdraw your consent at any time;
- According to Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority.
To exercise these rights, please contact us at the contact details above.
Deletion and restriction of personal data Unless otherwise stated, personal data are deleted as soon as they are no longer necessary for the purposes for which they were collected or processed. We delete personal data upon request under Art. 17 GDPR if conditions are met. If personal data are necessary for other lawful purposes, they will be restricted instead of deleted under Art. 18 GDPR. For example, data must be retained for commercial and tax retention periods (6 or 10 years according to German law).
Cookies We use cookies on our website. Cookies are small text files automatically created by your browser and stored on your device. They do not harm your device and do not contain viruses or malware. Cookies store information related to the specific device but do not give us direct knowledge of your identity. Cookies mainly serve to make the internet offer more user-friendly, effective, and secure.
We use session cookies that are deleted after your visit. These cookies help recognize visited pages and enable certain functionalities.
Processing data through cookies is necessary to protect our legitimate interests and those of third parties under Art. 6 para. 1 lit. f GDPR.
Most browsers accept cookies automatically. You can configure your browser to block or warn you before cookies are stored. Disabling cookies might limit the functionality of our website.
Individual processing operations
Hosting We use hosting services to provide our internet offer, such as web servers, storage, databases, security, and maintenance. Here, we or our hosting provider process personal data based on our legitimate interest in a secure and efficient provision of the online offer (Art. 6 para. 1 lit. f GDPR).
Access data and log files When accessing our website, your browser automatically sends information to our server. This data is stored in log files and deleted after 6 months at the latest.
Stored information includes IP address, date and time, file name and URL, referring website, browser and operating system, status code, data volume, and access provider.
These data are processed to provide the website, ensure connection stability, secure the system, optimize the website, evaluate statistics anonymously, and for legal or administrative purposes.
The legal basis is Art. 6 para. 1 lit. f GDPR. Data are not used to identify individuals.
Contract data In connection with contractual obligations or pre-contractual measures initiated by the data subject, we process necessary data such as name, address, contact details, delivery and billing addresses, birth date if required, contract details, payment data, etc.
The legal basis is Art. 6 para. 1 lit. b GDPR.
Data are only shared with third parties as necessary, e.g., banks, payment providers, and shipping services.
Statistics and analysis We use the open-source software Matomo for visitor data collection to optimize our website and measure marketing success. Data are anonymized, and IP addresses are not linked to other user data. Legal basis is Art. 6 para. 1 lit. f GDPR.
You can prevent Matomo from processing your data via an opt-out cookie.
Google services We use various Google services based on our legitimate interests (Art. 6 para. 1 lit. f GDPR). Google complies with EU-US Privacy Shield standards for data transfer.
Information about Google’s data protection practices and advertising preferences can be found on their websites.
Google Maps Our website uses Google Maps to display maps and location data. This service collects your IP address and other information needed to provide maps. Data may be stored in the USA and shared with third parties if legally required or for service provision.
Falls du möchtest, kann ich dir auch eine kürzere Zusammenfassung oder weitere Abschnitte übersetzen!