PRIVACY

PRIVACY STATEMENT

Responsible

Oliver Melhaff

Philippstr. 30

50823 Cologne

Phone: +49 (0) 221 - 9987-4664

Fax: +49 (0) 202 - 264 80 211

e-mail: info@artab.de

(hereafter provider)

Scope of application

towards the users of the website www.artab.de. With the following declaration, we inform you about the type, scope and purposes of the collection, processing and use of your data in connection with your visit to our website.

1. Summary

The provider stores and processes your personal data in compliance with the relevant data protection regulations, in particular the German Data Protection Regulation (DSGVO), German Federal Data Protection Act (BDSG) and the German Telemedia Act (TMG).

The provider observes the principle of data minimization. This means that data is processed to the extent necessary for the purposes of processing, as is appropriate and necessary for the provision of a functional website and with regard to the content and services offered. In this context, processing is carried out either on the basis of prior consent or if permitted by legal regulations.

When you access the provider's website, the provider processes certain usage data to enable you to use its offer.

If you enter data in the provider's contact form, the provider processes this data exclusively for the purposes specified in each case.

All processed personal data will be deleted by the provider after the storage period has expired.

You have a right to information regarding your data or to correction, deletion and restriction of the processing of your data, a right to object to the processing, a right to data portability and a right of complaint to a supervisory authority.

You will find more detailed information below.

1. data protection information in accordance with Art. 13, 14 DSGVO and in accordance with §§ 32 et seq. BDSG 2018
2. definitions
3. Personal data

Personal data means any information relating to an identified or identifiable natural person (hereinafter "data subject"); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

1. Inventory Data

Inventory data is personal data of a user that is required for the establishment, content or modification of a contractual relationship between the service provider and the user regarding the use of telemedia.

1. Usage data

Usage data is personal data of a user that is required to enable and bill the use of telemedia. This includes, in particular, features for identifying the user, information about the beginning and end as well as the scope of the respective use and information about the telemedia used by the user.

1. Processing

Processing means any operation or set of operations which is performed upon personal data, whether or not by automatic means, such as collection, recording, organization, filing, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

1. Pseudonymization

Pseudonymization is the processing of personal data in such a way that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separate and is subject to technical and organizational measures to ensure that the personal data is not attributed to an identified or identifiable natural person;

1. Cookies

Cookies are small text files that are stored on your computer. Cookies always have a validity period, which can be limited to the end of the user session (so-called session cookies) or can also exist for a longer period (so-called permanent cookies). These permanent cookies remain on your computer and enable the provider or its partner companies (so-called third party cookies) to recognize your computer on your next visit. You can set your browser so that you are informed about the setting of cookies and can decide individually whether to accept them or refuse the setting of cookies for certain cases or in general. If you do not accept cookies, the functionality of the website may be limited.

1. Website

A website, also known as a web presence, is the presence of a private or corporate provider of telemedia on the worldwide web (World Wide Web), summarized under a specific Internet address. The web presence includes web pages or sub-pages and optionally available downloadable documents as well as other retrievable audiovisual media services.

2. Description and scope of the processing of your data

With this section we inform you about the purposes for which the personal data will be processed and the legal basis for the processing.

The Provider publishes information about its company and about its range of goods via the Website.

1. Processing operations concerning the entire website

The Provider processes the data you provide to enable you to use this Website. The provider uses technologies for range measurement in the context of advertising and market research. You can find more detailed explanations in the explanations below.

1. Processing in the case of sending e-mails and contacting us by telephone

You can contact the provider via the e-mail address and telephone numbers provided on the website. The provider processes the data you provide to respond to your contact request.

Data collection (inventory data):

- First and last name

- Company name

- Street address

- ZIP CODE

- City

- Country

- Phone number

- telefax

- e-mail address

- web

In the event that you send an e-mail or contact us by telephone, the aforementioned inventory data will be processed if you provide it to the provider.

The legal basis for the processing of the data is Art. 6 para. 1 lit. a DSGVO, if you have given the provider your consent, and furthermore also the exercise of legitimate interests pursuant to Art. 6 para. 1 lit. f DSGVO. Legitimate interests of the provider consist, among other things, in the implementation of advertising measures. However, the provider will only ever use this option in a concretely appropriate manner. If the purpose of contacting you is to initiate a contract, Art. 6 para. 1 lit. b DSGVO is also a legal basis for data processing.

Data provided by you will be deleted immediately after completion of your request, in the absence of completion at the latest after the expiry of 1 year after the last contact, unless your data is subject to a longer storage period for a separate reason (e.g. the storage of information that serves the fulfillment of the contract). The request is considered to have been completed when it can be inferred from the circumstances that the matter in question has been conclusively clarified.

You have the possibility at any time to revoke your consent to the processing of personal data or to object to data processing that is not based on consent. The exercise of the revocation or objection can be made in particular by e-mail to the above contact e-mail addresses. All personal data that the provider has stored in the course of your contact will be deleted in this case.

In principle, your right of revocation does not apply to such data that the provider requires in the context of the fulfillment of a contract or pre-contractual measures. However, you may be entitled to further rights.

1. Processing of log data

When accessing the provider's website, your internet browser automatically transmits certain data to the provider's server for technical reasons. The following data is collected by the provider separately from other data that you may transmit to the provider and used for the aforementioned purposes:

Data collection (usage data)

- Name of the retrieved website or url

- Date and time of access

- Access status / Http status code

- amount of data transferred in each case

- Website from which the request comes

- Browser software and software version

- Operating system and version

- IP address (anonymized, shortened by the last 3 digits)

- randomly generated key number of the cookie or session.

The legal basis for the storage of the data and the log files are the legitimate interests of the provider (including the detection of hacker attacks) according to Art. 6 para. 1 lit. f DSGVO.

In the case of storage of data in log files, the usage data is deleted after 7 days at the latest. Storage beyond this is possible in accordance with data protection law permissions. In this case, the IP addresses are deleted or alienated, so that it is no longer possible to assign the Internet page retrieval to your computer.

The collection of data for the provision of the website and the storage of the data in log files is absolutely necessary for the operation of the website. Consequently, there is no possibility of objection on the part of the user. However, you can exercise your right of objection by means of automated processes that use technical specifications, such as in the case of anonymization of your IP address by VPN providers.

1. Processing in the case of the use of forms (contact form, order function in the webshop, newsletter subscription).

The provider keeps contact forms available, through which you can send a message to the provider.

Data collection (inventory data):

The collected data results from the respective form. As a rule, it is the following data:

- First and last name

- Company name

- Street (concerning contact, billing and delivery address)

- Postal code (concerning contact, invoice and delivery address)

- City (concerning contact, billing and delivery address)

- Country (regarding

- Phone number

- telefax

- e-mail address

- Website

The legal basis for the processing of data is Art. 6 para. 1 lit. a DSGVO, if you have given the provider your consent, and furthermore in the case of data processing for legitimate interests of the provider also Art. 6 para. 1 lit. f DSGVO. If the purpose of contacting you is to initiate a contract, Art. 6 para. 1 lit. b DSGVO is also a legal basis for data processing.

Data provided by you will be deleted immediately after completion of your request, in the absence of completion at the latest after the expiry of 1 year after the last contact, unless your data is subject to a longer storage period for a separate reason (e.g. the storage of information that serves the fulfillment of the contract). The request is considered to have been completed when it can be inferred from the circumstances that the matter in question has been conclusively clarified. You have the possibility at any time to revoke your consent to the processing of personal data or to object to data processing that is not based on consent. The exercise of the revocation or objection can be made in particular by e-mail to the above contact e-mail addresses. All personal data that the provider has stored in the course of your contact will be deleted in this case. In principle, your right of revocation does not apply to such data that the provider requires in the context of the fulfillment of a contract or pre-contractual measures. However, you may be entitled to further rights.

1. Use of cookies

Use of cookies from the provider for the purpose of website use:The provider uses session cookies to make visiting the websites attractive and to enable the use of certain functions. These cookies of the provider are generally deleted from your hard drive after the end of the browser session.

Data collection (usage data):

- Randomly generated key number of the cookie or session.

The legal basis for the storage of the data and the log files are the legitimate interests of the provider pursuant to Art. 6 (1) lit. f DSGVO. In the present case, these consist of ensuring the functionality and attractiveness of the website, which serves the purpose of provider advertising.

You have the option at any time to revoke your consent to the processing of personal data or to object to data processing that is not based on consent. Cookies are stored on your computer and transmitted from it to our websites. Therefore, you as a user have control over the use of cookies. By changing the settings in your Internet browser, you can disable or restrict the transmission of cookies. You can delete cookies that have already been stored at any time.

3. existence of appropriate guarantees
4. Pseudonymization

Insofar as the provider collects usage data, it always stores this under pseudonyms (in the case of cookies, for example, via a unique session key). The provider does not merge pseudonymous data with data about the bearer of the pseudonym (such as inventory data).

1. Use of encryption technologies

When transferring data between your computer or mobile device and the provider's server, the provider uses the SSL security system (Secure Socket Layer). This technology is designed to protect your data from being read by unauthorized third parties and offers a very high standard of security. You can recognize that your data is transmitted in encrypted form by the closed display of a key or lock symbol in the lower status bar of your browser.

4. recipients of personal data in the EU

The provider transmits your data to the following companies:

IONOS SE

Elgendorfer Str. 57

56410 Montabaur

Germany

 

5. recipients of personal data in third countries

The provider does not transfer your data to recipients outside the EU.

6. further processing for other purposes

Unless otherwise stated above, your data will not be disclosed to third parties and will not be further processed for purposes other than those stated.

7. data subject rights

You have a right to information about the personal data concerning you, as well as to rectification or erasure or to restriction of processing or a right to object to processing, the right to data portability and the right to lodge a complaint with a supervisory authority as described below. In the cases of Sections 32 et seq. BDSG 2018, however, these claims exist only to the extent that they are provided for under the BDSG 2018.

1. Your right to information

You have the right to request confirmation from the provider as to whether personal data relating to you is being processed. If this is the case, you have the right to obtain information about this personal data and the following information: the purposes of processing; the categories of personal data processed; the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular in the case of recipients in third countries or international organizations; if possible, the planned duration for which the personal data will be stored or, if this is not possible, the criteria for determining this duration; the existence of a right to rectification or erasure of the personal data concerning you or to restriction of processing by the controller or a right to object to such processing; The existence of a right of appeal to a supervisory authority; if the personal data are not collected from the data subject, any available information about the origin of the data; the existence of automated decision-making, including profiling (pursuant to Article 22(1) and (4) of the GDPR) and, at least in these cases, meaningful information about the logic involved and the scope and intended effects of such processing for the data subject.

1. Right to rectification

You have the right to request that the provider immediately rectify any inaccurate personal data concerning you. You have the right to request the completion of incomplete personal data - also by means of a supplementary declaration - if this is compatible with the above-mentioned purposes of the processing or if there is an objective reason for doing so.

1. Right to deletion

You have the right to demand that the provider delete personal data concerning you without delay. We are obliged to delete personal data immediately if one of the following reasons applies:

The personal data are no longer necessary for the purposes for which they were collected or otherwise processed; the data subject revokes the consent on which the processing was based pursuant to Article 6(1)(a) or Article 9(2)(a) of the GDPR and there is no other legal basis for the processing; the data subject objects to the processing pursuant to Article 21(1) DSGVO and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing pursuant to Article 21(2) DSGVO; the personal data have been processed unlawfully; erasure of the personal data is necessary for compliance with a legal obligation under Union or Member State law to which the controller is subject; the personal data have been collected in relation to information society services offered pursuant to Article 8(1) DSGVO (consent of a child in relation to information society services).

If we have made the personal data public and we are obliged to erase it, we shall, taking into account the available technology and the cost of implementation, take reasonable steps, including technical measures, to inform data controllers which process the personal data that a data subject has requested that we erase all links to, or copies or replications of, that personal data.

You have a right to erasure in accordance with Art. 17 para. 3 DSGVO, however, insofar as the processing is necessary for the exercise of the right to freedom of expression and information; for compliance with a legal obligation which requires processing under Union or Member State law to which the controller is subject; or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller; for reasons of public interest in the area of public health pursuant to Article 9(2)(h) and (i) and Article 9(3) of the GDPR; for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes pursuant to Article 89(1) of the GDPR, where the right referred to in paragraph 1 is likely to make impossible or seriously prejudice the achievement of the purposes of such processing, or for the establishment, exercise or defense of legal claims.

1. Right to restriction of processing

You have the right to request us to restrict processing if one of the following conditions is met: the accuracy of the personal data is contested by the data subject for a period enabling the controller to verify the accuracy of the personal data; the processing is unlawful and the data subject objects to the erasure of the personal data and requests instead the restriction of the use of the personal data; the controller no longer needs the personal data for the purposes of the processing but the data subject needs them for the establishment, exercise or defense of legal claims, or the data subject has objected to the processing pursuant to Article 21(1) for as long as it is not yet clear whether the legitimate grounds of the controller override those of the data subject.

Where processing has been restricted, such personal data may - apart from being stored - only be processed with your consent or for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or a Member State. If you have obtained a restriction on processing, we will inform you before the restriction is lifted.

1. Right to data portability

You have the right to receive the personal data concerning you that you have provided to a controller in a structured, commonly used and machine-readable format, and you have the right to transfer this data to another controller without hindrance from us or the controller to whom the personal data was provided, provided that the processing is based on consent pursuant to Article 6(1)(a) of the GDPR or Article 9(2)(a) of the GDPR or on a contract pursuant to Article 6(1)(b) of the GDPR and the processing is carried out with the aid of automated procedures.

When exercising your right to data portability pursuant to paragraph 1, you have the right to obtain that the personal data be transferred directly from one controller to another controller, where technically feasible. This right shall not affect the rights and freedoms of other persons.

The exercise of the right to data portability is without prejudice to Article 17 DSGVO (right to erasure / "right to be forgotten"). This right does not apply to processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

1. Right to object to processing

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Article 6(1)(e) (performance of a task carried out in the public interest) or (f) (safeguarding the legitimate interests of the controller or a third party) of the GDPR; this also applies to profiling based on these provisions. We will then no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or for the establishment, exercise or defense of legal claims.

If personal data are processed for the purposes of direct marketing, you have the right to object at any time to processing of personal data concerning you for such marketing; this also applies to profiling insofar as it is related to such direct marketing. If you object to processing for direct marketing purposes, the personal data will no longer be processed for these purposes.

We must expressly draw your attention to your aforementioned right to object to processing at the latest at the time of the first communication with you; this reference must be made in a comprehensible form that is separate from other information.

In connection with the use of information society services, notwithstanding Directive 2002/58/EC, you may exercise your right to object by means of automated procedures (e.g. by pressing "do not track" functions in the phone, by changing browser settings), using technical specifications.

You have the right to object, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out for scientific or historical research purposes or for statistical purposes pursuant to Article 89(1) of the GDPR, unless the processing is necessary for the performance of a task carried out in the public interest.

If you wish to exercise your right to object, a telephone message or an email to the contact email address above will suffice.

1. Right of appeal to a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, place of work or the place of the alleged infringement, if you consider that the processing of personal data concerning you infringes this Regulation.

The supervisory authority to which the complaint has been lodged shall inform you, as the complainant, of the status and outcome of the complaint, including the possibility of a judicial remedy under Article 78 GDPR.