Foreword

 

The owners/operators of these website pages take the protection of your personal data very seriously. We treat your personal data confidentially and in compliance with the statutory data protection regulations and this data protection statement.

 

As a rule, use of this website is possible without providing personal data. Where personal data is collected on our web pages (for example, name, address or e-mail addresses), this will, to the extent possible, always be on a voluntary basis. Such data will not be passed on to third parties without your express consent.

 

We point out that the transmission of data over the internet (e.g. when communicating by e-mail) may involve security issues. Complete end-to-end protection of data from access by third parties is impossible.

 

– – – – – – – – – –

 

Data Protection Statement pursuant to Art. 13 GDPR:

 

1. Introduction

 

This website is provided to you by CLAGE GmbH. In the following, we inform you pursuant to the EU General Data Protection Regulation (GDPR) about how our website processes your personal data when the website is called up and used.

 

2. Responsibilities

 

Name and contact details of the person responsible can be found in our provider identification / imprint here: https://www.clage.com/en/contact/imprint.php.

 

3. Data Protection Officer

 

Our Data Protection Officer can be contacted by post, adding the address component “Data Protection Officer”, at:

CLAGE GmbH

“Data Protection Officer”

Pirolweg 1-5

21337 Lüneburg

or by e-mail at datenschutz@clage.de

 

4. Processing of personal data

 

4.1. General overview of the processing activities

 

Our website uses personal data for the following purposes:

– Presentation of products and services

– Establishing contact with our teams

– Presentation of maps to find us more easily

– Presentation of corporate and product films

– Coverage analysis for optimising the website

– Improvement in customer service

 

In the secure area of our websites we offer existing customers the following services:

– Appliance registration

– Service reports

– Spare parts shop

– Customer survey

– Contact person

 

4.2. Operation of the website

 

4.2.1. Nature and scope of the processing of personal data

The following information transferred automatically to us by your browser is processed during every visit to our website:

– Browser type/version

– Operating system used

– Name of the website visited previously

– IP address or hostname of your computer

– Date and time of the server inquiry

 

4.2.2. Purposes of and legal basis for the processing of personal data

The above data is processed by the person responsible to ensure proper operation of the website (compliance with legal duties, i.e. security of processing pursuant to Art. 5 Section 1 (f) GDPR, such as to combat or investigate cyber attacks)

 

4.2.3. Recipients or categories of recipients

Our websites are hosted by LüneCom Kommunikationslösungen GmbH, Marie-Curie-Str., 21337 Lüneburg and Datadock, 1 Rue du Havre, 67100 Strasbourg, France. A job processing agreement was concluded with the service providers pursuant to Art. 28 GDPR. The aforementioned data will be forwarded to other recipients only to the extent necessary for the prevention of criminal offences and/or if we are otherwise legal required to do so.

 

4.2.4. Period of retention

The personal data is deleted automatically 4 weeks after termination of the connection unless prevented by statutory retention periods.

 

4.2.5. Right to deletion, objection and correction

Collection of the data for the provision of the website and storage of the data in log files is absolutely necessary for the operation of the webpage. There is consequently no possibility to delete, object to or correct the data on the part of the user.

 

4.3. Use of cookies

 

4.3.1. Nature and scope of the processing of personal data

Our internet site uses cookies in order to provide you with a convenient and feature-rich online service and to verify your entitlement to use the range of services. Cookies are text files that contain information in order to identify returning visitors exclusively for the duration of the visit to the website. Cookies are stored on the hard disk of your computer and do not cause any damage there.

 

The website’s cookies contain personal data. Cookies save you the effort of entering data more than once, make the transmission of specific content easier and help us to identify particularly popular areas of our internet site. They help us to constantly improve the structure and content of our internet site.

 

The following cookies are stored on your terminal device:

 

– – – – – – – – – –

 

type:

Browser preference cookie

 

name:

Browser window cookie

 

function / purpose:

The pop-up window is displayed on the homepage. It contains information on data protection and Google Analytics in particular. The cookie serves to perform a review (exclusively locally on the visitor’s computer) whether the pop-up window has to be displayed again. No server-side communication takes place.

 

Storage period:

7 days

 

– – – – – – – – – –

 

type:

Browser preference cookie

 

name:

Google Analytics consent cookie

 

function / purpose:

This cookie stores whether the visitor consents to the use of Google Analytics: Google Analytics is only activated if consent if provided; if denied, Google Analytics remains switched off.

 

Storage period:

7 days

 

– – – – – – – – – –

 

type:

Browser statistics cookie

 

name:

_ga cookie

 

function / purpose:

Cookie from Google Analytics. Is used to differentiate between users. This cookie is set only after the visitor has given consent to the use of Google Analytics.

 

Storage period:

2 years

 

– – – – – – – – – –

 

type:

Browser statistics cookie

 

name:

_gid cookie

 

function / purpose:

Cookie from Google Analytics. Is used to differentiate between users. This cookie is set only after the visitor has given consent to the use of Google Analytics.

 

Storage period:

24 hours

 

– – – – – – – – – –

 

type:

Browser preference cookie

 

name:

Partner area login cookie

 

function / purpose:

Cookie that contains access authorisation of a existing registered customers to the protected partner area of the CLAGE websites. This cookie contains only an ID number. In addition, a further ID number is stored in a database that is linked to the user. Then, if the cookie ID matches the ID in the database the user is logged in automatically. The cookie is set only if the access data entered is correct. This cookie is deleted again when the user logs off. Personal data is therefore not stored directly in the cookie. In addition, the IP address of the most recent login is stored in a database for security and technical reasons.

 

Storage period:

30 days

 

– – – – – – – – – –

 

4.3.2. Purposes of and legal basis for the processing of personal data

The legal basis for the processing of personal data using cookies for analysis purposes is, if the user has given consent to this, Art. 6 Section 1 (a) GDPR. In this case we ask users for their consent on the website before setting the cookie.

 

4.3.3. Period of retention, possibility of objection and elimination

Cookies are stored on the user’s computer and are transferred from there to our website. Consequently, you the user also have full control over the use of cookies.

 

By changing the settings in your internet browser, you can deactivate or limit the transfer of cookies. Cookies already stored can be deleted at any time. This process can also be automated. If cookies are deactivated for our website, it may no longer be possible to use all the website’s functions in full.

 

4.4. Contact form or making contact by e-mail

 

4.4.1. General information

Our contact form offers a simple way to send us online typical inquiries about products and services. This might include the following: request printed information material, search for a dealer or fitter, request to use a CLAGE online service, registration for an event, technical questions, distribution questions, general questions, etc.

If you send us inquiries by contact form, we process the following data for the purpose of handling the inquiry:

– Personal master data

– Address data

– Communication data

– Data on your inquiry

 

Alternatively, it is possible to make contact using the e-mail addresses provided. In the latter case, your personal data transmitted with the e-mail is stored.

 

In neither case is the data passed on to third parties. The data are used exclusively for the internal processing of the inquiry and for the communications required for this.

 

4.4.2. Purposes of and legal basis for the processing of personal data

The processing of personal data from the dialogue box serves solely the purpose of processing the establishment of contact. If the making of contact is directed at the initiation, fulfilment or termination of an agreement, the legal basis for processing is Art. 6 Section 1 (b) GDPR. In all other cases, the legal basis of Art. 6 Section 1 (a) GDPR (consent) will apply.

 

4.4.3. Recipients or categories of recipients

Alternatively, it is possible to make contact using the e-mail addresses provided.

 

4.4.4. Transmission of personal data to third countries

No data is transmitted to countries outside of the EU or the EEA (known as “third countries”).

 

4.4.5. Period of retention

Your data is processed as part of your making contact and deleted when no longer necessary, i.e. when it can be assumed from the circumstances that the matter concerned has been conclusively clarified and processing is not prevented by statutory retention periods.

 

4.4.6. Right to information, deletion, objection and correction

You have the possibility at all times to revoke your consent to processing of personal data effective for the future. If you have contacted us by e-mail, you can revoke your permission for storage of your personal data at any time. In such a case, it will be impossible to continue the conversation. For this purpose, write an e-mail to the following address: datenschutz@clage.de. All personal data stored over the course of establishing contact is deleted in such a case.

 

4.5. Range measurement

 

4.5.1. General information

On this website we use the Google Analytics component (with anonymisation function). Google Analytics is a web analysis service. Web analysis is the collection, compilation and evaluation of data on the behaviour of visitors to websites. A web analysis service records, among other things, data on the website from which a data subject arrives at a website (known as a referrer), which subpages of the website were accessed and how often and how long a subpage was looked at.

The person responsible for processing uses the “_gat._anonymizeIp” feature for the web analysis using Google Analytics. Google uses this feature to abbreviate and anonymise the IP address of the internet connection of the data subject if our internet pages are accessed from a member state of the European Union or another contracting state of the Treaty on the European Economic Area.

 

4.5.2. Purposes of and legal basis for the processing of personal data

The processing of users’ personal data makes it possible to analyse the surfing behaviour of our users. Evaluating the harvested data puts us into a position to compile information on the use of the individual components of our website. This helps us to constantly improve our website and its user-friendliness. If you have given your consent at the beginning of the visit, the legal basis for the processing of the data will be pursuant to Art. 6 Section 1 (a) GDPR. Anonymisation of the IP address adequately takes account of the users’ interest in the protection of their personal data.

 

4.5.3. Recipients or categories of recipients

The operator of the Google Analytics component is Google, Inc., 1600 Amphitheatre Parkway Mountain View, CA 94043, USA.

 

4.5.4. Transmission of personal data to third countries

The personal data is transmitted to a third country. In its adequacy decision (EU) 2016/1250 of 12 July 2016 (EU-U.S. Privacy Shield), the European Commission decided that the USA provides an adequate level of data protection. You can request in writing further information from our Data Protection Officer.

 

4.5.5. Period of retention

The data is deleted as soon as it is no longer needed for our record-keeping purposes. In this case, this is upon expiry of 14 months.

 

4.5.6. Right to deletion, objection and correction

The data subject can at any time prevent the setting of cookies by our website by means of a corresponding setting in the internet browser used and thus object to the setting of cookies on a permanent basis. Such a setting in the internet browser used would also prevent Google from setting a cookie on the IT system of the data subject. In addition, any cookie already set by Google Analytics can be deleted at any time through the internet browser or another computer program.

Furthermore, the data subject has the possibility of objecting to collection of the data generated by Google Analytics relating to use of this website and the processing of such data by Google and to prevent the same.

To achieve this, the data subject must download and install a browser add-on from this link: https://tools.google.com/dlpage/gaoptout. This browser add-on informs Google Analytics via JavaScript that no data or information on visitors to internet pages may be transferred to Google Analytics. Google treats installation of the browser add-on as objection. If the information technology system of the data subject is deleted, formatted or installed again at a later date, the data subject will have to install the browser add-on again in order to deactivate Google Analytics. If the browser add-on is deinstalled or deactivated by the data subject or another person attributable to that person’s sphere of influence, there is the possibility of reinstalling or reactivating the browser add-on.

More information and Google’s current data protection regulations can be retrieved at https://www.google.de/intl/de/policies/privacy/ and at http://www.google.com/analytics/terms/de.html. Google Analytics is explained in more detail at this link https://www.google.com/intl/de_de/analytics/.

 

Changing of Google Analytics decision:

Google Analytics is completely turned off on our English website.

 

4.6. Google Maps

 

4.6.1. General information

Various sections of our website uses Google Maps (Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) in order, for example, to show our specialist partners or other information on a street map and make it easier for you to get there.

 

4.6.2. Purposes of and legal basis for the processing of personal data

When calling up this website, personal data is automatically transferred to the service provider pursuant to Item 4.2. Your personal data is processed in order to make it possible to display the location of our specialist partners etc. (legitimate interest pursuant to Art. 6 Section 1 (f) GDPR).

 

4.6.3. Recipients or categories of recipients

The operator of the Google Analytics component is Google, Inc., 1600 Amphitheatre Parkway Mountain View, CA 94043-1351, USA.

Google may transfer information harvested by Google Maps to third parties to the extent required by law or to the extent that companies process such data on behalf of Google. It cannot be ruled out that Google will associate your IP address with other Google data.

It is technically feasible for Google to identify at least individual users on the basis of the data received. We are not able to exert any influence on whether personal data and users’ personality profiles are processed by Google for other purposes.

 

4.6.4. Transmission of personal data to third countries

The personal data is transmitted to a third country. In its adequacy decision (EU) 2016/1250 of 12 July 2016 (EU-U.S. Privacy Shield), the European Commission decided that the USA provides an adequate level of data protection. You can request in writing further information from our Data Protection Officer.

 

4.6.5. Period of retention

We are not aware of how long Google stores the aforementioned data.

 

4.6.6. Right to deletion, objection and correction

If you do not consent to transmission of data to Google, then you will not be allowed to visit subpages of our website where Google Maps has been integrated. It is easily possible for you to deactivate the service provided by Google Maps and thus prevent the transmission of data to Google. To achieve this, deactivate JavaScript in your browser. We point out, however, that you will not be able to use the map function in such a case. More information on this can be found in the terms of service for Google Maps and Google’s data protection statement.

 

4.7. Corporate and product films

 

4.7.1. General information

We embed videos from the “YouTube” platform provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 (USA). Our videos act as a source of information for end customers, specialist partners and other individuals who want to obtain more information on our company, our products and our services.

 

4.7.2. Purposes of and legal basis for the processing of personal data

When calling up this website, personal data is automatically transferred to the service provider pursuant to Item 4.2. The data is processed in order to facilitate the display of videos (legitimate interest pursuant to Art. 6 Section 1 (f) GDPR).

 

4.7.3. Recipients or categories of recipients

The operator of the Google Analytics component is Google, Inc., 1600 Amphitheatre Parkway Mountain View, CA 94043-1351, USA.

 

4.7.4. Transmission of personal data to third countries

The operator of the Google Analytics component is Google, Inc., 1600 Amphitheatre Parkway Mountain View, CA 94043-1351, USA.

Google may transfer information harvested by YouTube to third parties to the extent required by law or to the extent that companies process such data on behalf of Google. It cannot be ruled out that Google will associate your IP address with other Google data.

It is technically feasible for Google to identify at least individual users on the basis of the data received. We are not able to exert any influence on whether personal data and users’ personality profiles are processed by Google for other purposes.

 

4.7.5. Period of retention

We are not aware of how long YouTube or Google stores the aforementioned data.

 

4.7.6. Right to deletion, objection and correction

Google’s data protection statement: https://www.google.com/policies/privacy/

Opt-out in Google accounts: https://adssettings.google.com/authenticated

 

4.8. Appliance registration

 

4.8.1. General information

Appliance registration allows customers to register the products they have bought along with communication details, customer master data and appliance-specific data (article number, serial number, etc.). For this purpose, the customer is able to log in with his/her password and can call up online his/her registered appliances and registered users. It is possible to register without a login.

 

4.8.2. Purposes of and legal basis for the processing of personal data

CLAGE offers the possibility of registering appliances as a voluntary service aimed at providing better customer service. In this case, the legal basis of Art. 6 Section 1 (a) GDPR (consent) will apply.

 

4.8.3. Recipients or categories of recipients

A job processing agreement was concluded with the service provider pursuant to Art. 28 GDPR. The above data is forwarded exclusively to CLAGE.

 

4.8.4. Transmission of personal data to third countries

No data is transmitted to countries outside of the EU or the EEA (known as “third countries”).

 

4.8.5. Period of retention

The storage period for all archived documents complies at the least to the statutory periods pursuant to Sec. 257 HGB (German Commercial Code) and Sec. 147 AO (German Fiscal Code).

 

4.8.6. Right to deletion, objection and correction

You have the possibility at all times to revoke your consent to processing of personal data effective for the future. If you have contacted us by e-mail, you can revoke your permission for storage of your personal data at any time. In such a case, it will be impossible to continue the conversation. For this purpose, write an e-mail to the following address: datenschutz@clage.de. All personal data stored over the course of establishing contact is deleted in such a case.

 

– – – – – – – – – –

 

The following items (4.9. to 4.11.) relate to the protected partner area of our websites. This area is only accessible by registered existing customers. In order to obtain authorisation for this area, existing customers have to apply to us in writing for access quoting their customer number. They will be given a password which, used along with their customer number, will allow them to log in. After a successful log in, access authorisation is stored with a cookie for no longer than 30 days (see “Cookies” section).

 

– – – – – – – – – –

 

4.9. Spare parts shop

4.9.1. General information

Existing customers can purchase spare parts on this page. Customer-, order- and item-specific data is stored.

 

4.9.2. Purposes of and legal basis for the processing of personal data

CLAGE uses this service to provide better customer service. This is a voluntary service provided to our customers.

The processing of personal data from the dialogue box serves solely the purpose of processing the establishment of contact. If the making of contact is directed at the initiation, fulfilment or termination of an agreement, the legal basis for processing is Art. 6 Section 1 (b) GDPR. In all other cases, the legal basis of Art. 6 Section 1 (a) GDPR (consent) will apply.

 

4.9.3. Recipients or categories of recipients

The above data is forwarded exclusively to CLAGE.

 

4.9.4. Transmission of personal data to third countries

No data is transmitted to countries outside of the EU or the EEA (known as “third countries”).

 

4.9.5. Period of retention

The storage period for all archived documents complies at the least to the statutory periods pursuant to Sec. 257 HGB (German Commercial Code) and Sec. 147 AO (German Fiscal Code).

 

4.9.6. Right to deletion, objection and correction

You have the possibility at all times to revoke your consent to processing of personal data effective for the future. If you have contacted us by e-mail, you can revoke your permission for storage of your personal data at any time. In such a case, it will be impossible to continue the conversation. For this purpose, write an e-mail to the following address: datenschutz@clage.de. All personal data stored over the course of establishing contact is deleted in such a case.

 

4.10. Online service report

 

4.10.1. General information

Service partners commissioned by CLAGE can document their assignments performed on behalf of CLAGE on this page. Order, location, appliance, material and billing data are stored.

 

4.10.2. Purposes of and legal basis for the processing of personal data

We offer this service to our service providers on a voluntary basis. The processing of personal data from the dialogue box serves solely the purpose of processing the establishment of contact. If the making of contact is directed at the initiation, fulfilment or termination of an agreement, the legal basis for processing is Art. 6 Section 1 (b) GDPR. In all other cases, the legal basis of Art. 6 Section 1 (a) GDPR (consent) will apply.

 

4.10.3. Recipients or categories of recipients

The above data is forwarded exclusively to CLAGE.

 

4.10.4. Transmission of personal data to third countries

No data is transmitted to countries outside of the EU or the EEA (known as “third countries”).            

 

4.10.5. Period of retention

The storage period for all archived documents complies at the least to the statutory periods pursuant to Sec. 257 HGB (German Commercial Code) and Sec. 147 AO (German Fiscal Code).

 

4.10.6. Right to deletion, objection and correction

You have the possibility at all times to revoke your consent to processing of personal data effective for the future. If you have contacted us by e-mail, you can revoke your permission for storage of your personal data at any time. In such a case, it will be impossible to continue the conversation. For this purpose, write an e-mail to the following address: datenschutz@clage.de. All personal data stored over the course of establishing contact is deleted in such a case.

 

4.11. Customer survey (“Feedback”)

 

4.11.1. General information

Existing customers can use this page to let us known, on a scale of 1 to 6, how satisfied they are with our products and services.

 

4.11.2. Purposes of and legal basis for the processing of personal data

This service offers customers the opportunity to rate CLAGE. It serves to improve our products, our services and our advertising. This is a voluntary service provided to our customers. The processing of personal data from the dialogue box serves solely the purpose of processing the establishment of contact. If the making of contact is directed at the initiation, fulfilment or termination of an agreement, the legal basis for processing is Art. 6 Section 1 (b) GDPR. In all other cases, the legal basis of Art. 6 Section 1 (a) GDPR (consent) will apply.

 

4.11.3. Recipients or categories of recipients

The above data is forwarded exclusively to CLAGE.

 

4.11.4. Transmission of personal data to third countries

No data is transmitted to countries outside of the EU or the EEA (known as “third countries”).

 

4.11.5. Period of retention

The storage period for all archived documents complies at the least to the statutory periods pursuant to Sec. 257 HGB (German Commercial Code) and Sec. 147 AO (German Fiscal Code).

 

4.11.6. Right to deletion, objection and correction

You have the possibility at all times to revoke your consent to processing of personal data effective for the future. If you have contacted us by e-mail, you can revoke your permission for storage of your personal data at any time. In such a case, it will be impossible to continue the conversation. For this purpose, write an e-mail to the following address: datenschutz@clage.de. All personal data stored over the course of establishing contact is deleted in such a case.

 

5. Data subject rights

 

You have various rights relating to the handling of your personal data, e.g. the right to obtain information on the data we have stored on you or the right to correction, limitation of processing, right to data transferability, right of objection or deletion or your data. If you have any questions regarding how to assert your rights, please contact our Data Protection Officer at the address stated in item 3.

 

6. Right to complain to the supervisory authority

 

You have the right to file a complaint to the following supervisory authority if you are of the opinion that our processing of your personal data is in breach of current data protection legislation: Data Protection Officer for the State of Lower Saxony, Prinzenstraße 5, 30159 Hanover.

 

7. Links to other internet sites

 

Our website contains links to other internet sites. We have no influence on whether the operators of such sites comply with the provisions of data protection. Despite careful checks of the content carried out beforehand, we cannot assume any liability for external links to third-party content.

 

8. Security of processing

 

For reasons of security and to protect the transfer of confidential content, such as the inquiries you send us as website operator, this site uses SSL encryption. You can recognise an encrypted connection by the change in the address line of the browser from "http://" to "https://” and the lock symbol on your browser line.

 

9. Validity and updating of the data protection statement

 

The ongoing development of our website or the implementation of new technologies may make it necessary to amend this data protection statement effective for the future. We recommend that you always refer to the current data protection statement.

 

Lüneburg, 06.06.2018

v2