Privacy statement

Privacy statement

Thank you for visiting our website. The protection and security of your personal data is very important to us. We would therefore like to inform you at this point about which personal data we process when you visit our website and for what purposes.

This privacy statement applies to the website (available at https://www.ews-tools.de), apps and other services of EWS Weigele GmbH & Co KG.

 

 

Who is responsible and how do I contact you?

Controller

for the processing of personal data in accordance with the EU's General Data Protection Regulation (GDPR)

EWS Weigele GmbH & Co. KG
represented by the managing director Matthias Weigele
Maybachstr. 1
73066 Uhingen, Germany

Data protection officer

GALILEO Data Protection Lawyers

rme[at]galileo-ds.de

Tel.: 089 / 20 60 41 42 00

 

What is it all about?

This privacy statement meets the legal requirements for transparency in the processing of personal data. This is all information relating to an identified or identifiable natural person. This includes, for example, information such as your name, age, address, telephone number, date of birth, e-mail address, IP address or user behaviour when visiting a website. Information where we cannot establish a connection to your person, e.g. through anonymisation, is not personal data. The processing of personal data always requires a legal basis and a defined purpose.

 

Stored personal data will be deleted as soon as the purpose of the processing has been achieved and there are no legitimate reasons for further storage of the data. We will inform you in the individual processing operations about the specific storage periods or criteria for storage. Irrespective of this, we will store your personal data in individual cases to assert, exercise or defend legal claims and in the event of statutory storage obligations.

 

Who gets my data?

We only pass on your personal data, which we process on our website, to third parties if this is necessary to fulfil the specified purposes and if this is covered by the legal basis (e.g. consent or protection of legitimate interests) in individual cases. In addition, in individual cases, we will pass on personal data to third parties if this serves to assert, exercise or defend legal claims. Possible recipients could then be, for example, law enforcement agencies, lawyers, auditors, courts, etc.

 

Insofar as we use service providers for the operation of our website who process personal data in accordance with Article 28 GDPR within the scope of order processing on our behalf, these service providers may be recipients of your personal data. For more information on the use of processors and web services, please refer to the overview of the individual processing operations.

 

Do you use cookies?

Cookies are small text files which are sent by us to the browser of your end device and stored there during your visit to our website. As an alternative to the use of cookies, information can also be stored in the local memory (local storage) of your browser. Some functions of our website cannot be offered without the use of cookies or local storage (technical cookies). Other cookies, on the other hand, enable us to carry out various analyses, so that we are able, for example, to recognise the browser you are using when you return to our website and to transmit various information to us (analytical cookies). Cookies enable us to make our website more user-friendly and effective for you, for example by tracking your use of our website and determining your preferred settings (e.g. country and language settings). If third parties process information via cookies, they collect the information directly via your browser. Cookies do not cause any damage to your end device. They cannot run programs or contain viruses.

 

We provide information about the respective services for which we use cookies in the individual processing procedures. For details on the cookies used, refer to the [Cookie Settings of this Privacy Policy / Consent Manager].

 

What rights do I have?

Under the conditions of the statutory provisions of the General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG), you have the following rights as a data subject:

 

  • Information in accordance with Article 15 GDPR, section 34 BDSG on the data about you stored in the form of meaningful information on the details of the processing as well as a copy of your data;
  • Correction in accordance with Article 16 GDPR of incorrect or incomplete data stored by us;
  • Erasure in accordance with Article 17 GDPR of the data stored with us, insofar as the processing is not necessary for the exercise of the right to freedom of expression and information, for the fulfilment of a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims;
  • Restriction of processing in accordance with Article 18 GDPR if the accuracy of the data is disputed, the processing is unlawful, we no longer require the data and you refuse to delete it because you need it to assert, exercise or defend legal claims or you have objected to the processing in accordance with Article 21 GDPR.
  • Data transferability in accordance with Article 20 GDPR, insofar as you have provided us with personal data within the scope of a consent in accordance with Article 6(1)(a) GDPR or on the basis of a contract in accordance with Article 6(1)(b) GDPR and these have been processed by us using automated procedures. You will receive your data in a structured, common and machine-readable format or we will transfer the data directly to another controller, as far as this is technically feasible.
  • Objection in accordance with Article 21 GDPR to the processing of your personal data, insofar as this is carried out on the basis of Article 6(1)(e, f) GDPR and there are reasons for this which arise from your particular situation or the objection is directed against direct advertising. The right of objection does not exist if predominant, compelling reasons for processing that merit protection are proven or the processing is carried out to assert, exercise or defend legal claims. Where the right of objection does not apply to individual processing operations, this is indicated there.
  • • Revocation in accordance with Article 7(3) GDPR of your given consent with effect for the future.
  • • Complain pursuant to Article 77 GDPR to a supervisory authority if you believe that the processing of your personal data violates the GDPR. As a rule, you can contact the supervisory authority of your usual place of residence, your place of work or our company headquarters.

 

How is my data processed in detail?

In the following we inform you about the individual processing procedures, the scope and purpose of data processing, the legal basis, the obligation to provide your data and the respective storage period. No automated decision-making, including profiling, take places in individual cases.

 

1. Provision of the website

Type and scope of processing

When you access and use our website, we collect personal data that your browser automatically transmits to our server. The following information is temporarily stored in a log file:

 

  • IP address of the requesting computer
  • Date and time of access
  • Name and URL of the retrieved file
  • Website from which access is made (referrer URL)
  • Browser used and, if applicable, the operating system of your computer, as well as the name of your access provider

 

Our website is not hosted by ourselves, but by a service provider who, for the purpose of providing the website, processes the aforementioned data on our behalf in accordance with Article 28 GDPR.

 

Purpose and legal basis

The processing is carried out in order to safeguard our predominant legitimate interest in displaying our website and to guarantee security and stability on the basis of Article 6(1)(f) GDPR. The collection of data and the storage in log files is absolutely necessary for the operation of the website. There is no right of objection to the processing on the basis of the exception under Article 21(1) GDPR. Insofar as the further storage of log files is required by law, processing is based on Article 6(1)(c) GDPR. There is no legal or contractual obligation to provide the data, but it is technically impossible to access our website without providing the data.

 

Storage period

The aforementioned data will be stored for the period that the website is displayed and for technical reasons for a maximum of 7 days.

 

2. Contact form

Type and scope of processing

On our website we offer you the possibility to contact us via a provided form. The information collected through mandatory fields is required to process the request. In addition, you may voluntarily provide additional information that you believe is necessary to process the contact request.

 

When using the contact form, your personal data will not be passed on to third parties.

 

Purpose and legal basis

The processing of your data by using our contact form is for the purpose of communicating and processing your enquiry based on your consent in accordance with Article 6(1)(a) GDPR. Insofar as your enquiry relates to an existing contractual relationship with us, processing for the purpose of fulfilling the contract is based on Article 6(1)(b) GDPR. There is no legal or contractual obligation to provide your data, but it is not possible to process your request without providing the information in the mandatory fields. If you do not wish to provide this information, please contact us by other means.

 

Storage period

If you use the contact form on the basis of your consent, we store the data collected for each enquiry for a period of three years, starting with the completion of your enquiry or until your consent is revoked.

 

If you use the contact form within the framework of a contractual relationship, we will store the data collected for each enquiry for a period of three years from the end of the contractual relationship.

 

3. Newsletter

Type and scope of processing

If you register on our website to receive our newsletter, we collect your e-mail address as well as your first names and surname and store this information together with the date of registration and your IP address. You will then receive an e-mail in which you must confirm your subscription to the newsletter (double opt-in). If you do not confirm your registration within 24 hours, it will automatically expire and the data will not be processed for sending the newsletter.

 

To send the newsletter we use a service of TWILIO SendGrid [https://www.twilio.com/legal/privacy#sendgrid-services], which processes your personal data on our behalf in accordance with Article 28 GDPR. Your data will not be passed on to third parties.

 

Purpose and legal basis

We process your data for the purpose of sending you the newsletter on the basis of your consent in accordance with Article 6(1)(a) GDPR. By unsubscribing from the newsletter, you can declare your revocation at any time with effect for the future in accordance with Article 7(3) GDPR. There is no legal or contractual obligation to provide your data, but it is not possible to send the newsletter without providing your data.

 

Storage period

After registering for the newsletter, we store the data for a maximum of 24 hours until the registration is confirmed. After successful confirmation, we will store your data until you withdraw your consent (unsubscribe from the newsletter) and for technical reasons for a maximum of 7 days.

 

4. CDNJS

Type and scope of processing

We use CDNJS to properly provide the content of our website. CDNJS is a service provided by Cloudflare, Inc. which acts as a Content Delivery Network (CDN) on our website.

 

A CDN helps to make the contents of our online presence, especially files such as graphics or scripts, available more quickly with the help of regionally or internationally distributed servers. When you access this content, you will connect to Cloudflare, Inc. servers, which will transmit your IP address and possibly browser information such as your user agent. This data is processed solely for the above purposes and to maintain the security and functionality of CDNJS.

 

Purpose and legal basis

The use of the Content Delivery Network is based on our legitimate interests, i.e. interest in a secure and efficient provision and optimisation of our online presence in accordance with Article 6(1)(f) GDPR.

 

Storage period

The specific storage period of the processed data cannot be influenced by us, but is determined by Cloudflare, Inc. For further details please see the CDNJS Privacy Policy: https://www.cloudflare.com/privacypolicy/.

 

5. Google Analytics

Type and scope of processing

We use Google Analytics from Google LLC, Gordon House, Barrow Street, Dublin 4, Ireland, as an analysis service for statistical evaluation of our online presence. This includes, for example, the number of hits on our website, sub-pages visited and the length of time visitors stay on our website.

 

Google Analytics uses cookies and other browser technologies to evaluate user behaviour and recognise users.

 

This information is used, inter alia, to compile reports on the activity of the website.

 

Purpose and legal basis

We process data with the help of Google Analytics for the purpose of optimising our website and for marketing purposes on the basis of your consent in accordance with Article 6(1)(a) GDPR.

 

Storage period

The actual storage period of the processed data cannot be influenced by us, but is determined by Google LLC. For more information, please refer to the Google Analytics privacy policy: https://policies.google.com/privacy?hl=de-DE.

 

6. Google Fonts

Type and scope of processing

We use Google Fonts from Google LLC, Gordon House, Barrow Street, Dublin 4, Ireland, as a service to provide fonts for our online presence. To obtain these fonts, you connect to Google LLC's servers and your IP address is transmitted.

 

Purpose and legal basis

The use of Google Fonts is based on our legitimate interests, i.e. interest in a uniform provision and optimisation of our online presence in accordance with Article 6(1)(f) GDPR.

 

Storage period

The actual storage period of the processed data cannot be influenced by us, but is determined by Google LLC. For more information, please see the Google Fonts privacy policy: https://policies.google.com/privacy.

  

 

Updated 11.08.2020