Data Privacy Statement Kessel AG
Name and address of the person in charge (data controller)
The data controller as defined by the General Data Protection Regulation (GDPR) (Datenschutz Grundverordnung; DSGVO) and other national data protection laws of the member states and other provisions under data protection laws, is:
represented by the Management Board
Bernhard Kessel (Chairman), Alexander Kessel, Edgar Thiemt
Tel.: 08456 / 27 - 0
Kessel AG respects the personal rights of the visitors to this website. Accordingly, the protection and security of personal data is a high priority for us, and we strictly comply with the provisions of the German Federal Data Protection Act (BDSG) and the European General Data Protection Regulation (GDPR). Our data privacy guidelines aim to protect the privacy of individual users. They disclose what type of information we obtain from visitors to this website during the course of our relationship, how we use this information and how visitors can update and verify the ways in which the information made available on this website is used. From time to time, these guidelines for the protection of your personal data will be updated and adjusted as conditions change. Therefore we ask that you occasionally consult these guidelines to obtain up-to-date information about how we use and protect your data and continuously improve the contents of our website. In the event that we make major changes to the collection, use and/or forwarding of the personal data you have provided to us, we will place a clear and visible reference to the same on the website.
Additional questions or concerns:
If you have questions or concerns regarding our data privacy guideline or the collection of your data, feel free to contact us at any time by writing an e-mail to firstname.lastname@example.org or by contacting the Data Protection Officer of Kessel AG:
Petra Gummermann CIPP/E
Data Business Services GmbH & Co KG
1. Legal basis for the processing of personal data
Where we obtain the consent of the affected person (the data subject) for the processing of personal data, Art. 6 para. 1 a GDPR serves as the legal basis for the processing of personal data.
Art. 6 para. 1 b GDPR serves as the legal basis for the processing of personal data that is required to implement a contract to which the data subject is party. This also applies to processing events that are required to implement pre-contractual measures.
Art. 6 para. 1 c GDPR serves as the legal basis to the extent that personal data must be processed in order to comply with a legal obligation that applies to our company.
Art. 6 para. 1 d GDPR serves as the legal basis in the event that the vital interests of the data subject or another natural person require the processing of personal data.
Art. 6 para. 1 f GDPR serves as the legal basis for processing if this is required to protect a justified interest of our company or a third party, and if the interests, basic rights and basic freedoms of the data subject do not outweigh the former interest.
2. General Data Privacy Statement
By using our website, and in the event that contracts and orders are implemented, you agree to the collection, processing and use of data pursuant to the description below.
What type of information do we collect?
In principle, you do not need to register to visit our website. During that process, data such as the pages accessed or the names of the accessed file, date and time will be stored on the server for statistical purposes, whereby this data cannot be directly attributed to your person.
However, for some services or areas associated with this site, you will be asked to register if you have not done so already, and you will be asked to transmit information about yourself and/or your company, such as name, occupation, e-mail address, customer number and other information that enables us to provide you with services and information. In these cases, Kessel AG has a justified interest to process your personal data, since this information is required to provide you with the services and information. Personal data, particularly name, address or e-mail address is collected on a voluntary basis where possible. No data is forwarded to third parties without the existence of a legal basis or your consent.
We may ask you for additional information if you utilise specific services such as configurators or calculation programmes on our website.
We may also collect other personal information if you send us comments or participate in surveys and data research.
When you visit our website, we will collect certain information about routing and the technical data of your computer to facilitate your use of our website. For example, we use a web server to register e.g. environmental data such as browser type, operating system, access information, referrer URL and the speed of your main computer as well as the internet protocol address of your original internet service provider to optimise the service. We also store search requests and results to improve the accuracy and efficiency of our search engine. We use your IP address for statistical purposes to be able to track your use of this site. None of this information can be used to draw inferences about your person.
To whom do we forward your data?
We do not sell your e-mail address or other identifying information to third parties. But we will forward your information to companies that are part of the Kessel group of companies or their trading partners, or to selected third parties in order to pursue the objectives that have been outlined in this guideline, other times that we are in contact with you, or on the site. For example, in order to implement an order at Kessel AG, we are required to forward your personal data for processing to contract partners who look after the implementation of the order, process the shipment or provide additional services. This is also done for the delivery of advertising and information material that may be of interest to you.
We forward information about you to others if we believe, in good faith, by operation of law or on the basis of a legal process, that we are required to respond to claims or must protect the rights, property or security of Kessel AG or others.
3. Description and scope of data processing
Every time our web page is accessed, our system will automatically gather data and information from the computer system of the accessing computer.
The following data is collected:
(1) Information about the browser type and the version used
(2) The user's operating system
(3) The user's internet service provider
(4) The user's IP address
(5) Date and time of access
(6) Websites from which the user's system accesses our web page
(7) Websites that are accessed by the user's system via our website
The log files contain IP addresses or other data that can be attributed to a user. This may be the case, for example, if the link to the website from which the user reaches the web page, or the link to the website to which the user moves to next, contains personal data. This data is also stored in the log files of our system. It is not stored together with other personal details about the user.
Purpose of data processing
The system must store the IP address on a temporary basis so it can make the website available to the user's computer. To this end, the user's IP address must be stored for the duration of the session.
The data is stored in log files to ensure the functionality of the website. In addition, we also use the data to optimise the website and to ensure the security of our IT systems. An analysis of the data for marketing purposes is not performed in this context.
Duration of storage
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In instances where data was collected to make the website available, this will be the case once the respective session has ended,
In the event the data is stored in log files, the user’s IP addresses will be deleted or distorted so that the accessing client can no longer be assigned.
4. Data privacy statement for cookies
This website uses Google Analytics, a web analysis service offered by Google Inc. ("Google"). Google Analytics uses so-called "cookies", text files which are stored on the user's computer and that make it possible to analyse their use of the website.
The information that is generated by the cookie about how users use this website is usually transmitted to and stored on a Google server in the United States. IP anonymisation has been activated on this website, which means that Google will shorten users’ IP addresses within the member states of the European Union or in other contracting states of the Treaty on the European Economic Area beforehand. Only in exceptional cases will the full IP address be transferred to a Google server in the US and shortened in that location. On the order of the operator of this website, Google will use this information for the purpose of evaluating the use of the website by the users, to compile reports on website activities, and to provide other services relating to the use of the website and the internet to the website operator. The IP address transmitted by your browser in the context of Google Analytics will not be combined with other Google data.
You may prevent the storage of cookies by selecting the appropriate settings on your browser; however, please note that if you do this, you may not be able to use all of the functions of this website. Users can also prevent the data (including your IP address) created by the cookie relating to their use of the website from being forwarded to and processed by Google by downloading and installing the browser plug-in available at the link below.
The current link is: tools.google.com/dlpage/gaoptout.
Aumago banner advertising
This website uses Piwik, an open source software for the statistical analysis of user access. Piwik uses so-called cookies. Cookies are small text files that are stored in the user’s browser. They are used to analyse the use of this website. In the process, data is collected, processed and stored on servers in Germany in order to create anonymous usage profiles. The data includes the name of the accessed web page, file, date and time of access, transmitted data volume, report of successful access, browser type including version, the user's operating system, referrer URL (the previously visited page), IP address and the requesting provider. The personal IP address is anonymised immediately after processing (IP-based company identification) by deleting the last number block (masking) and is not combined with the cookies or other data. Users can prevent tracking by cookies by making the corresponding settings in their browser software or by clicking on the following link (opt-out): discover.aumago.com/index.php
5. Access to information, changes, cancellations, right to object:
Information about access to our website is stored for a time period that corresponds to our business requirements. Please contact us if you wish to correct or update personal information that you have forwarded to us, or if you have questions about the information that is stored with us.
If you are active within the European Community or other legal systems that provide you with a statutory right to access your data, you have access to your personal information or the right to correct or update data in accordance with the applicable law when you contact us.
You can decide that you no longer wish to receive information about activities, products or services from companies that are part or partners of the Kessel group of companies, and/or you can decide to prohibit your data from being forwarded to third parties for marketing purposes by contacting us. In the absence of obligatory or statutory reasons in connection with the processing of a transaction, and provided you have consented to processing, you can object to the storage of your personal data at any time by sending an e-mail to email@example.com.
Please note: The collection of data to make available the website and the storage of data in log files is an absolute requirement for the operation of the web page. Therefore you do not have the option to object in this regard. However, if you have complaints about the processing of your personal data, you can contact the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA) https://www.lda.bayern.de/de/beschwerde.html.
6. Security of your data and duration of storage
All technical and organisational security measures will be taken to protect the personal data you have provided to us against unauthorised access. When sending very sensitive data or information, it is recommended that regular post is used, since full data security cannot be warranted for e-mails.
The personal data you have provided will be stored at the admissible scope for the duration of the use of the website or in the event that information or other services are rendered, taking into account of the main principles of the GDPR and BDSG. The personal data of the data subject is erased or blocked as soon as the purpose for the storage no longer applies. Data may be stored for longer periods if this is required by the European or national legislator in EU regulations, laws or other provisions that apply to the data controller. Data will also be blocked or erased if a retention period specified by the aforementioned standards expires, unless the data must continue to be stored for the closing or implementation of a contract.
Websites frequently use the Like buttons of Facebook, Google+ and Twitter. At the same time, these buttons already send data to the operators of the network platforms when the page is loaded - i.e. without the visitor doing anything else. With the two-click solution selected by us, the Like buttons must be activated with a separate click before the actual function is made available.
7. Registration for the newsletter using the web page
The newsletter is sent out based on your registration on the website. Our web page offers the option to sign up for a free newsletter. During this process, the data from the input screen will be forwarded to us when you register for the newsletter.
At this point, the specific data that is collected should be identified. At minimum, this will be the user's e-mail address.
(1) IP address of the accessing computer
(2) Date and time of registration.
For processing the data, your consent is obtained in the context of the registration process and reference is made to this Data Privacy Statement.
The newsletter is sent out based on the user’s registration on the website.
Provided the user has provided consent, Art. 6 para. 1 a GDPR forms the legal basis for the processing of data after the user has registered for the newsletter.
The collection of other personal data in line with the registration process is used to prevent the misuse of the services or the e-mail address that is used for this purpose.
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. Accordingly, the user's e-mail address is stored as long as the newsletter subscription is active.
Option to object / Removal option
The affected user can unsubscribe the newsletter at any time. For this purpose, a corresponding link is included with each newsletter.