Data protection
Stand 28. August 2021
Controller’s
name and address
The
controller within the meaning of the General Data Protection Regulation (GDPR)
and other data protection regulations is:
Wertstoff S2 GmbH GmbH
Am Wiesenbusch 2
45966 Gladbeck
Deutschland
Phone +49 208-899560
theodor.weiss@wertstoff-s2-gmbh.com
https://www.Wertstoff S2 GmbH-gmbh.de
https://www.Wertstoff S2 GmbH-gmbh.com
Data Protection Officer’s contact details
The
controller’s Data Protection Officer is:
DataCo GmbH
Dachauer Straße 65
80335 München
Deutschland
+49 89 7400 45840
www.dataguard.de
General information on data processing
1. Scope of the processing of personal data
We
only process our users’ personal data if this is necessary to provide a
functional website as well as our contents and services Normally, we will only
process our users’ personal data after they have consented. An exception
applies in those cases where prior consent cannot be obtained for practical
reasons and the processing of the data is required by law.
2. Legal
basis for the processing of personal data
Article
6(1)(a) GDPR constitutes the legal basis for the processing of personal data if
we have obtained the data subject’s consent.
Article
6(1)(b) GDPR is the legal basis for the processing of personal data required
for the performance of a contract to which the data subject is a party. This
also applies to processing operations necessary to implement pre-contractual
measures.
Article 6(1)(c) GDPR is the legal basis for a processing of personal data
necessary to fulfil a legal obligation to which our company is subject.
Article 6(1)(d) GDPR is the legal basis if the vital interests of the data
subject or another natural person render the processing of personal data
necessary.
Article 6(1)(f) GDPR is the legal basis for processing that is necessary to
protect a legitimate interest of our company or a third party, and if the data
subject’s interests, fundamental rights and freedoms do not outweigh the
first-mentioned interest.
3. Data
erasure and storage duration
The
data subject’s personal data shall be deleted or blocked once the purpose of
storage ceases to apply. Data may also be stored if this is required by
national laws or by EU regulations, laws or other provisions to which the
controller is subject. Data shall also be blocked or erased if a storage period
prescribed by the above-mentioned regulations expires, unless there is a need
for further storage of the data for the conclusion or performance of a
contract.
4. Data
subject’s rights
When
your personal data is processed, you are a data subject within the meaning of
the GDPR, and you have the following rights with respect to the
controller:
a) Right to information
You
can request from the controller a confirmation as to whether or not personal
data concerning you are being processed. Where that is the case, you can obtain
the following information from the controller:
1. the purposes for which they are being processed;
2. the categories of personal data
that are being processed;
3. the recipients or categories of
recipients to whom the personal data concerning you has been or will still be
disclosed;
4. the planned duration of the
storage of the personal data concerning you or, if specific information on this
is not possible, criteria for determining the storage period;
5. the existence of a right to rectify
or erase the personal data concerning you or to restrict its processing by the
controller or a right to object to such processing;
6. the existence of a right to lodge
a complaint with a supervisory authority;
7. any available information on the
data’s source if the personal data has not been collected from the data
subject;
8. the existence of an automated
decision-making process, including profiling in accordance with Articles 22(1)
and (4) GDPR and - in these cases at least - meaningful information on the
logic involved and the scope and intended effects of such processing on the
data subject.
You
have the right to request information as to whether or not personal data
concerning you has been transferred to a third country or an international
organization. In this context, you may request to be informed of the
appropriate guarantees in accordance with Article 46 GDPR in connection with
the transmission.
b)
Right to rectification
You have a right to rectification and/or completion vis-à-vis the data
controller if the processed personal data concerning you are incorrect or
incomplete. The controller shall carry out the rectification without
delay.
c) Right to restriction of
processing
You can request the restriction of the processing of personal data concerning
you where one of the following conditions applies:
1. if you dispute the accuracy of
the personal data concerning you, for a period enabling the controller to
verify the personal data’s accuracy;
2. the processing is unlawful, and
you oppose the personal data’s erasure and request the restriction of the
personal data’s use instead;
3. the controller no longer requires
the personal data for the purposes of the processing, but you need them for the
establishment, exercise or defence of legal claims, or
4. If you have lodged an objection
to the processing in accordance with Article 21(1) GDPR and it has not yet been
established whether the controller's justified grounds override your grounds.
If the processing of the personal data concerning you has been restricted, this
data may only be processed - with the exception of storage - with your consent
or for the purpose of establishing, exercising or defending legal claims or
protecting the rights of another natural person or legal entity or on the
grounds of an important public interest of the Union or a Member State.
If processing has been restricted according to the above conditions, the
controller shall notify you before the restriction is lifted.
4. Right to erasure
a) Obligation to erase data
You have the right to request the data controller to erase personal data
concerning you immediately, and the controller shall be obliged to erase
personal data immediately if one of the following reasons applies:
1. The personal data concerning you
are no longer necessary for the purposes for which they were collected or
otherwise processed.
2. You withdraw your consent on
which the processing under Article 6(1)(a) or Article 9(2)(a) GDPR was based,
and there is no other legal basis for processing.
3. You oppose the processing under
Article 21(1) GDPR, and there are no overriding legitimate grounds for the
processing or you oppose the processing under Article 21(2) GDPR.
4. The personal data concerning you
was processed illegally.
5. The erasure of the personal data
concerning you is necessary to fulfil a legal obligation under Union law or the
law of the Member States to which the controller is subject.
6. The personal data concerning you
was collected in relation to the information society services offered under
Article 8(1) GDPR.
b) Information to third parties
If the controller has made the personal data concerning you public and is
obliged to erase them in accordance with Article 17(1) GDPR, it shall take
appropriate measures, including technical measures, taking into account the
available technology and implementation costs, to inform data processors who
process the personal data that you, as a data subject, have requested them to
erase all links to this personal data or copies or reproductions of it.
c) Exceptions
There is no right to erasure if the processing is necessary:
1. for the exercise of the right to
freedom of expression and information.
2. for the performance of a legal
obligation that requires the processing under Union law or the law of the
Member States to which the controller is subject or for the performance of a
task in the public interest or in the exercise of official authority conferred
on the controller;
3. on grounds of public interest in
the field of public health in accordance with Article 9(2)(h) and (i) and
Article 9(3) GDPR;
4. for archiving purposes in the
public interest, scientific or historical research purposes or for statistical
purposes in accordance with Article 89(1) GDPR, if the right referred to in
paragraph a) is likely to render impossible or seriously impair the achievement
of the objectives of that processing; or
5. for the establishment, exercise
or defence of legal claims.
5. Right to information
If you have exercised your right to rectification, erasure or restriction of
processing with respect to the controller, they shall notify all recipients to
whom the personal data concerning you have been disclosed of this rectification
or erasure of the data or restriction on processing, unless this proves
impossible or involves a disproportionate effort.
You also have the right to obtain information from the controller about these
recipients.
6. Right to data portability
You have the right to receive the personal data concerning you that you have
supplied to the controller in a structured, commonly used and machine-readable
format. You also have the right to transmit this data to another controller
without hindrance from the controller to which the personal data have been
provided, if:
1. the processing is based on
consent pursuant to Article 6(1)(a) GDPR or Article 9(2)(a) GDPR or on a
contract pursuant to Article 6(1)(b) GDPR, and
2. the processing is carried out by
automated means.
When exercising the right to data portability, you have the right to have the
personal data concerning you transmitted directly to another controller, where
this is technically feasible. The rights and freedoms of other persons shall
not be affected by this.
The right to data portability shall not apply to a processing of personal data
necessary for the performance of a task in the public interest or in the
exercise of official authority conferred on the controller.
7. Right to object
You also have the right to object at any time, for reasons arising from your
particular situation, to the processing of personal data concerning you under
Article 6(1)(e) or (f) GDPR. This also applies to a profiling based on these
provisions.
The controller shall no longer process personal data concerning you unless it
can prove compelling reasons worthy of protection for the processing that
override your interests, rights and freedoms, or the processing is for the
establishment, exercise or defence of legal claims
If personal data concerning you is processed for direct marketing purposes, you
have the right to object at any time to the processing of personal data
concerning you for the purposes of such advertising. This also applies to
profiling if it is associated with such direct marketing.
If you object to the processing for direct marketing purposes, the personal
data concerning you will no longer be processed for these purposes.
In connection with the use of information society services, notwithstanding
Directive 2002/58/EC, you may exercise your right to object by means of
automated procedures using technical specifications.
8. Right to withdraw declaration of
consent under data protection law
You have the right to withdraw at any time your declaration of consent given
under data protection law. In the event of withdrawal, the lawfulness of the
processing carried out on the basis of the consent until the withdrawal shall
not be affected.
9. Automated individual decision-making, including profiling
You have the right not to be subject to a decision based exclusively on
automated processing - including profiling - which produces legal effects
concerning you or similarly affects you significantly. This does not apply if
the decision
1. is necessary for the conclusion
or performance of a contract between you and the data controller;
2. is permitted by Union law or the
law of the Member States to which the data controller is subject and that law
contains appropriate measures to safeguard your rights, freedoms and legitimate
interests; or
3. is made with your express
consent.
However, these decisions may not be based on special categories of personal
data under Article 9(1) GDPR, unless Article 9(2)(a) or (g) GDPR applies and
appropriate measures have been taken to protect your rights and freedoms and
your legitimate interests.
With respect to the cases described in (1) and (3), the controller shall
implement suitable measures to safeguard your rights, freedoms and legitimate
interests, including at least the right to obtain human intervention on the
controller’s part, to express your point of view and to contest the
decision.
10. Right to lodge a complaint with a supervisory authority
Without prejudice to any other administrative or judicial remedy, you shall
also have the right to lodge a complaint with a supervisory authority, in
particular in the Member State of your habitual residence or place of work or
wherein the alleged infringement occurred if you believe that the processing of
personal data concerning you infringes the GDPR.
The supervisory authority with which the complaint has been lodged shall inform
the complainant on the progress and the outcome of the complaint including the
possibility of a judicial remedy pursuant to Article 78 GDPR.
11. Use of cookies
1. Description and scope of data processing
Our website uses cookies. Cookies are text files that are stored in the
internet browser or by the internet browser on the user's computer system. A
cookie may be stored on a user's operating system when they visit a website.
This cookie contains a characteristic character string that enables a unique
identification of the browser when the website is called up again.
We use cookies to make our website more user-friendly. Some elements of our
website require the accessing browser’s identification even after a page
change.
In this connection, the following data will be stored in the cookies and
transmitted:
Cookie name: fe_typo_user
Technically necessary cookie
Purpose: This cookie is used to retain your entries when using the contact
form.
Retention period: User session
The user data collected in this way will be pseudonymised through technical
measures. Consequently, it will no longer be possible to assign the data to the
accessing user. The data will not be stored together with the user’s other
personal data.
2. Purpose of the data
processing
The purpose of using technically necessary cookies is to simplify the use of
websites for users. Some of our website’s functions cannot be offered without
the use of cookies. This requires recognition of the browser even after a page
change.
We require cookies for the following applications: see V.1.
The user data collected by technically necessary cookies is not used to create
user profiles.
3. Legal basis for data
processing
The legal basis for the processing of personal data using technically necessary
cookies is Article 6(1) (f) GDPR.
4. Duration of storage, objection
and rectification options
Cookies are stored on the user's computer and transmitted from it to our site.
Therefore, you as a user also have full control over the use of cookies. You
can deactivate or restrict the transmission of cookies by changing the settings
in your internet browser. Previously stored cookies can be deleted at any time.
This can also be automated. If cookies are deactivated for our website, it may
no longer be possible to use all the website’s functions in full.
Cookies are automatically deleted after seven days if you use a Safari browser
version 12.1 or higher. This also applies to opt-out cookies, which are set to
prevent tracking measures.
12. Email contact
1. Description and scope of data
processing
You can contact us via the email address provided on our website. In this case,
the user's personal data transmitted with the email will be stored.
The data will be used exclusively for processing the exchange.
2. Purpose of the data
processing
Where contact is made by email, this will also constitute the necessary
legitimate interest in the processing of the data.
3. Legal basis for data
processing
The legal basis for the processing of data when the user’s consent has been
obtained is Article 6(1)(a) GDPR.
The legal basis for the processing of data transmitted in the course of sending
an email is Article 6(1)(f) GDPR. If the purpose of making contact by email is
for the conclusion of a contract, then Article 6(1)(b) GDPR shall constitute an
additional legal basis for the processing.
4. Duration of storage
The data will be erased once it is no longer necessary to achieve the purpose
for which it was collected. The personal data sent by email shall be erased
when the respective exchange with the user has ended. The exchange will be
deemed terminated when it can be inferred from the circumstances that the facts
in question have been finally clarified.
The additional personal data collected during the sending process will be
deleted after a period of seven days at the latest.
5. Objection and rectification
option
The user may withdraw their consent to the processing of personal data at any
time. If the user contacts us by email, they can object to the storage of their
personal data at any time. The exchange cannot be continued in such a
case.
You have the right to withdraw at any time your declaration of consent given
under data protection law. In the event of withdrawal, the lawfulness of the
processing carried out on the basis of the consent until the withdrawal shall
not be affected.
In this event, all personal data stored in the course of making contact shall
be deleted.
13. Contact form
(where available)
1. Description and scope of data
processing
There is a contact form on our website for making contact electronically. If a
user avails themselves of this possibility, the data entered in the input mask
will be transmitted to us and stored.
The following data will also be stored when the message is sent:
- Email address
- Name
- Forename
- Address
- Telephone / mobile phone number
- Date and time of making contact
- Selection of topics/ concerns
During the dispatch process, your consent will be obtained for the processing
of the data and reference will be made to this privacy policy.
Alternatively, you can contact us via the email address provided. In this case,
the user's personal data transmitted with the email will be stored.
The data will be used exclusively for processing the exchange.
2. Purpose of the data
processing
We will only process the personal data from the input mask for handling the
establishment of contact. Where contact is made by email, this will also
constitute the necessary legitimate interest in the processing of the
data.
The other personal data processed during the sending process serve to prevent
misuse of the contact form and to ensure the security of our information
technology systems.
3. Legal basis for data
processing
The legal basis for the processing of data when the user’s consent has been
obtained is Article 6(1)(a) GDPR.
The legal basis for the processing of data transmitted in the course of sending
an email is Article 6(1)(f) GDPR. If the purpose of making contact by email is
for the conclusion of a contract, then Article 6(1)(b) GDPR shall constitute an
additional legal basis for the processing.
4. Duration of storage
The data will be erased once it is no longer necessary to achieve the purpose
for which it was collected. The personal data from the contact form’s input
mask and the data sent by email will be erased when the respective exchange
with the user has ended. The exchange will be deemed terminated when it can be
inferred from the circumstances that the facts in question have been finally
clarified.
The additional personal data collected during the sending process will be
deleted after a period of seven days at the latest.
5. Objection and rectification
option
The user may withdraw their consent to the processing of personal data at any
time. If the user contacts us by email, they can object to the storage of their
personal data at any time. The exchange cannot be continued in such a
case.
You have the right to withdraw at any time your declaration of consent given
under data protection law. In the event of withdrawal, the lawfulness of the
processing carried out on the basis of the consent until the revocation shall
not be affected.
In this event, all personal data stored in the course of making contact shall
be deleted.
14. Hosting
The website is hosted on servers of a service provider commissioned by
us.
Our service provider is:
Zahm & Zornig
The servers automatically collect and store information in so-called server log
files, which your browser automatically transmits when you visit the website.
The information stored is:
- Browser type and version;
- operating system used;
- Referrer URL
- Accessing computer’s host name;
- Date and time of the server request;
- IP address
This data will not be merged with other data sources. This data is collected on
the basis of Art. 6(1)(f) GDPR. The website operator has a legitimate interest
in the technically error-free presentation and optimisation of its website and
the server log files must be recorded for this purpose.
The website server is geographically located in Germany.
This privacy policy was created with the support of DataGuard.
