Data protection notice regarding the obligation to provide information
Thank you for visiting our Internet pages and for your interest in our company. We take the protection of your private data very seriously and want you to feel at ease when visiting our website. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this data protection notice. The use of our website is generally possible without the need to provide personal data. When you visit our Internet pages, we store the date, time, duration, and IP address, as well as the pages you view. This is done exclusively for statistical purposes. This data will not be passed on to third parties. No user-related surfer profiles or the like will be created or processed. Please note that sending data over the Internet (e.g. when communicating by e-mail) may not be fully secure. Complete protection of data against access by third parties is not possible.
Protecting your personal data is very important to us. We therefore process your data strictly in compliance with legal requirements (GDPR). This notice informs you about the way your personal data is processed by KRIWAN Industrie-Elektronik GmbH. The General Data Protection Regulation (GDPR) regulates the information obligations of the data controller towards the data subject, depending on whether personal data is collected from the data subject (direct collection, Art. 13 GDPR) or from third parties (third party collection, Art. 14 GDPR). We process your personal data exclusively within the framework of legal regulations. This includes the following categories of personal data: Master data (e.g. last name, first name, address), contract data (e.g. customer number, insurance number), billing data and bank data, and other similar data.
1. Controller of the processed data
KRIWAN Industrie-Elektronik GmbH
Phone and hotline: +49 (0) 79 47 - 8 22 – 0
Fax: +49 (0) 79 47 - 71 22
1.1 Name of the external data protection officer
2. Purposes and legal bases of data processing
2.1 Data processing for the purpose of initiating and executing contracts (Art. 6 Para. 1 b GDPR)
Data processing is necessary for the initiation, execution, and settlement of your contract.
2.2 Data processing with your consent (Art. 6 Para.1 a GDPR)
In so much as we have obtained your consent to process your personal data for specific purposes, processing on this basis is legal. A given consent can be withdrawn at any time. This also applies to the withdrawal of declarations of consent that you gave us prior to the validity of the GDPR on May 25, 2018. The withdrawal of consent affects the future and does not affect the legality of the data processed up to the withdrawal.
2.3 Data processing for legitimate interests (Art. 6 Para. 1 f GDPR)
We process your data in a permissible manner to protect our legitimate interests. This also includes the use of your personal data to Take steps to improve and develop services and products to be able to offer you a customized approach with customized offers and products. Do market and opinion research or to have it carried out by market and opinion research institutes. This gives us an overview of the transparency and quality or our products, services, and communication, and enables us to align and design these in the interests of our customers.
Defend our legal claims in the case of legal disputes
Anonymize your data for analysis
Should we wish to process your personal data for a purpose not previously mentioned, we will inform you in advance within the framework of the statutory provisions.
2.4 Data processing based on legal requirements (Art. 6 Para. 1 c GDPR) or in the public interest (Art. 6 Para. 1 e GDPR)
As a company, we are subject to various legal obligations (e.g. tax laws, commercial code), which require the processing of your data to comply with the law.
3. Categories of recipients of personal data
Within our company, your data is accessed by those who require it for the purposes mentioned above (see Purposes and legal bases of data processing). This also applies to service providers and agents appointed by us. We will only transfer personal data to third parties if this is necessary for the aforementioned purposes or if you have given your prior consent. Recipients of personal data can be, for example: Print service providers, dealers, analysis specialists, processing companies Data transmission, in particular by way of administrative access to organizations or states outside the European Union (third country transmission), is not possible on the basis of the aforementioned purposes and legal bases. In these cases, data is only accessed if either a Commission decision on adequacy exists for the respective country, we have agreed with the service providers on the standard contractual clauses provided by the EU Commission for these cases, or the respective company has established its own internal binding data protection regulations, which have been recognized by the data protection supervisory authorities. (https://ec.europa.eu/info/law/law-to-pic/data-protection_en).
4. Duration of data storage
We store your personal data for the purposes mentioned above. Your data is only processed from the time of collection insofar as you or a third party share it with us. We delete your personal data when the contractual relationship with you ends, all mutual claims have been fulfilled and there are no other legal storage obligations or legal justifications for storage. These include storage obligations under the German Commercial Code (HGB) and Tax Code (AO). This means that we delete your personal data at the latest after the expiry of the legal storage obligations, usually 10 years after the end of the contract.
5. Rights of the data subject
You can request information, Art. 15 GDPR, about the personal data stored about you from the address above. Subject to the provisions of the GDPR, you may also request the rectification, Art. 16 GDPR, erasure, Art. 17 GDPR and restriction of processing, Art. 18 GDPR, of your data. You have the right to receive the data you provided in a structured, commonly used, and machine-readable format. Rights may be subject to restrictions of legal and business interests – in this case, you will be provided with appropriate information based on your rights to information.
5.1 Right of objection
If we process data to protect our legitimate interests (see 2.3 Data processing for legitimate interests), you have the right to object to such processing at any time for reasons arising from your situation. This also includes the right to object to processing for advertising purposes.
5.2 Right of withdrawal of consent
A given consent can be withdrawn at any time (see 2.2 Data processing with your consent).
6. Provision of personal data
Within the framework of our business relationship, you must provide the personal data that is required to establish and implement the business relationship, and to fulfill the associated contractual obligations, or that we are legally obligated to collect. Without this data, we cannot conclude the contract.
7. Automated decision-making
No automated decision-making including profiling takes place to justify or implement this contract.
8. Data sources
We process personal data that we receive from our customers during our business relationship. We also process personal data that we legitimately obtain from publicly accessible sources such as debtor registers, land registers, commercial and association registers, the press, and the Internet. In addition, we use personal data that we receive legitimately from companies within our Group or from third parties, e.g. credit agencies.
9. Amendment clause
Since our data processing is subject to changes, we will also adapt our data protection information from time to time. We will inform you of any amendments in good time.
We use technical and organizational measures to protect your data against accidental or intentional manipulation, loss, destruction, or unauthorized access. Our security measures are continuously improved in line with technical developments.
Personal data should not be transmitted to the KRIWAN website by children under 18 years of age without the consent of their parents or guardian. KRIWAN encourages all parents and guardians to instruct their children in the safe and responsible handling of personal data on the Internet. KRIWAN will not knowingly collect, process, or use the personal data of children.
You can also disable cookies. More detailed information on this can be found via your Internet browser's user manual. In this case, visiting the website may only be possible to a limited extent.
13. Google Analytics
For statistical analysis, KRIWAN uses "Matomo" ( previously "PIWIK") on this website. This is an open source tool for web analysis. With Matomo, no data is transmitted to servers that are beyond KRIWAN's control. Matomo uses so-called "cookies". These are text files that are stored on your computer and enable KRIWAN to analyse the use of its website. For this purpose, the information about the use gained from the cookie is transferred to the KRIWAN server and stored so that the user behaviour can be evaluated. Your IP address will be anonymised immediately; this means that you as a user remain anonymous. The information generated by the cookie about your use of this website is not passed on to third parties.
15. Right to information
If you have any questions or comments regarding the processing of your personal data, please contact our Data Protection Officer:
Upon request, we will inform you in writing as soon as possible in accordance with the applicable laws and regulations whether and which personal data about you is stored by us. If outdated or incorrect information is stored, we will correct this at your request. You are also entitled to block or delete data in compliance with legal obligations.