Data protection information

1. who is responsible for data processing and who can I contact?

The responsible body is the

Kitzmann GmbH
Gutenbergstrasse 24-29
49525 Lengerich
Germany

Phone: +49 5481 9345-0
E-mail: info@kitzmann-gruppe.de
Website: www.kitzmann-gruppe.de

You can reach our data protection officer at:

ComProvide GmbH
Stahlwerksweg 10b
49084 Osnabrück
Osnabrück, Germany
Phone: +49 541 506160
E-mail: datenschutz@comprovide.de
Website: www.comprovide.de

2 What sources and data does Kitzmann use?

We process personal data that we receive from you as part of our business relationship with you or through the use of our online offering. For this purpose, we process personal data that we have received from third parties with your consent or that we have obtained from publicly accessible sources such as the commercial or debtor register and are permitted to process.

Relevant personal data are your personal details such as name, address and date of birth, identification data such as ID card data, data from the fulfillment of our contractual obligations (e.g. sales data), advertising and sales data as well as data about your use of our telemedia offer (e.g. time of access to our website, pages clicked on and other data comparable to the categories mentioned)

3. what does Kitzmann process your data for (purpose of processing) and on what legal basis?

We process personal data in order to fulfill our contractual obligations towards you. In addition, we process this data in order to fulfill our verification and documentation obligations, which arise, for example, from commercial and tax law. We may also have to comply with requirements under the Money Laundering Act. All processing takes place on the basis of the GDPR and the BDSG.

3.1 Use for the fulfillment of contractual obligations The legal basis in this case is Art. 6 para. 1 letter b GDPR

We process personal data to provide the service owed to you under a contract with you, to execute your orders and to ensure all activities necessary for the operation and administration of a trading, design and production company. The purpose of the data processing depends primarily on the specific service provided to you (sales, consulting, execution of a design, etc.).

3.2 Use in the context of balancing interests The legal basis in this case is Art. 6 (1) (f) GDPR

If necessary, we process your data beyond our contractual obligations if we or third parties have a legitimate interest in doing so. For example:

• Examination and optimization of needs analysis procedures for the purpose of addressing customers directly

• for advertising and opinion research purposes if you have not objected to its use

• Assertion of legal claims and defense in legal disputes

• Ensuring IT operations and IT security at Kitzmann

• Prevention and investigation of criminal offenses

• Measures for building and system security (e.g. access controls) and to ensure domiciliary rights

• Measures for business management and further development of products and services

• Risk management measures

3.3 Use within the framework of legal requirements or in the public interest Legal basis in this case is Art. 6 para. 1 letter c GDPR

Due to the goods we trade in and the services we provide, Kitzmann may be subject to special legal obligations, such as those resulting from the Money Laundering Act. In addition, we are also subject to the usual tax and commercial law regulations on the retention of data in order to fulfill our control, reporting and documentation obligations.

3.4 Use on the basis of your consent; the legal basis in this case is Art. 6 (1) (a) GDPR

If you have given Kitzmann your consent to process personal data for specific purposes (e.g. for a job application, marketing purposes, photos as part of events or newsletter distribution), the lawfulness of this processing is based on your consent. You can withdraw your consent at any time. However, the revocation only takes effect for the future.

4 Who receives your data?

Within Kitzmann, those employees who need your data to fulfill their respective tasks and obligations will receive it. Processors employed by us (Art. 28 GDPR) may also receive data for this purpose. This may be, for example, an IT or telecommunications service provider or a print service provider if you order a catalog.

Under certain circumstances, Kitzmann may pass on your data to public bodies and institutions if there is a legal or official obligation to do so, e.g. to courts or tax authorities.

Finally, Kitzmann will pass on your data to payment service providers and transport companies if we are dependent on their cooperation for the execution of a contract (delivery of goods to you) with you.

Kitzmann uses payment service providers that are based in a country outside the EU. The transfer of personal data only takes place within the scope of the necessity to fulfill the contract.

5. storage period

We process your data for as long as is necessary to fulfill our obligations to you. If the data is no longer required for the fulfillment of contractual or legal obligations, it is regularly deleted.

In addition, we are required by retention and documentation obligations under the German Commercial Code (HGB), the German Fiscal Code (AO) and the German Banking Act (GWG) to store data for between 2 and 11 years.

6. data transfer to a third country

Data will not be transferred to a third country, i.e. a country outside the EU or the EEA, unless the payment service provider you have specified is based there.

7. your rights under the GDPR

Every data subject has the right of access pursuant to Art. 13 GDPR, the right to rectification pursuant to Art. 16 GDPR, the right to erasure pursuant to Art. 17 GDPR, the right to restriction of processing pursuant to Art. 18 GDPR and the right to data portability pursuant to Art. 20 GDPR.

The restrictions pursuant to Sections 34 and 35 BDSG apply to the right to information and the right to erasure.

In addition, you have the right to lodge a complaint with a data protection supervisory authority in accordance with Art. 77 GDPR in conjunction with Section 19 BDSG.

8. obligation to provide your data

As part of a business relationship with Kitzmann, you only need to provide the data that is required for the establishment, execution and termination of a business relationship or that Kitzmann is obliged to collect. If you do not provide this data, we will refuse to conclude a contract or execute an order or will no longer execute or terminate an existing contract.

We may be obliged under anti-money laundering regulations to identify you by means of an identity document and to store your name, place of birth, date of birth, nationality and address. In order to comply with this obligation, you must provide us with this data. If you do not wish to do so, Kitzmann may not enter into the desired business relationship with you.

9. automated decision in individual cases pursuant to Art. 22 GDPR

Kitzmann does not carry out automated decision-making in accordance with Art. 22 GDPR.

10. scoring

Kitzmann does not carry out any scoring.

Information on the right to object pursuant to Art. 21 (1) GDPR

Individual right of objection

You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data that we process on the basis of a balancing of interests pursuant to Art. 6 (1) GDPR. We will then no longer process your data unless we have compelling legitimate grounds for the processing which override your interests, rights and freedoms or the processing serves the establishment, exercise or defense of legal claims.

Right to object to data processing for direct marketing purposes

In individual cases, Kitzmann processes your data for the purposes of direct advertising. You have the right to object at any time to the processing of personal data concerning you for the purpose of such advertising. If you file such an objection, Kitzmann will no longer use your personal data for this purpose.

The objection can be sent, for example, to info@kitzmann-gruppe.de or to the above address. Please state “Objection” in the subject line, as this will make it easier for us to assign your objection.

Special data protection information when using our online services such as the website

The following information applies in addition to the information provided above when you use our online offering in the form of our website and possible other telemedia services.

1. scope of the processing of personal data

Kitzmann processes personal data of website users beyond the cases mentioned above under 3. and its subsections only insofar as this is necessary to provide a functional website and our content and services. However, we inevitably pass on the data to our web host.

2. provision of the website and creation of log files

Each time our website is accessed, our system automatically collects data and information from the computer system of the accessing computer.

The following data is collected:

Information about the browser type and version used

(1) Your operating system
(2) Your internet service provider
(3) Your IP address
(4) Date and time of access
(5) Websites from which your system accessed our website
(6) Websites that are accessed by your system via our website

The data is also stored in the log files of our system. This data is not stored together with your other personal data.

Temporary storage of the IP address by the system is necessary to enable delivery of the website to the user’s computer. For this purpose, the user’s IP address must remain stored for the duration of the session.

Data is stored in log files to ensure the functionality of the website. In addition, we use the data to optimize the website and to ensure the security of our information technology systems. The data is not analyzed for marketing purposes in this context. The data is also analyzed for statistical purposes. Our legitimate interest in processing lies in these purposes.

The legal basis for the temporary storage of data and log files is Article 6(1)(f) GDPR.

3. SSL encryption

To protect the security of your data during transmission, we use state-of-the-art encryption methods (e.g. SSL) via HTTPS.

4. use of so-called cookies

Our website uses cookies. Cookies are text files that are stored in the Internet browser or by the Internet browser on your computer system. When you access a website, a cookie may be stored on your end device. This cookie contains a characteristic string of characters that enables the browser to be uniquely identified when the website is called up again.

We use cookies to make our website more user-friendly. Some elements of our website require that the accessing browser can be identified even after a page change.

The following data is stored and transmitted in the cookies:

• Language settings

• Region code

• Log-in information

We also use cookies on our website that enable an analysis of your surfing behavior.

The following data can be transmitted in this way:

• Search terms entered

• Frequency of page views

• Use of website functions

The data collected from you in this way is pseudonymized by technical precautions. It is therefore no longer possible to assign the data to you. The data is not stored together with your other personal data.

When you visit our website, an information banner informs you about the use of cookies for analysis purposes and refers you to this privacy policy. In this context, there is also a note on how the storage of cookies can be prevented in the browser settings.

The purpose of using technically necessary cookies is to simplify the use of websites for users. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary for the browser to be recognized even after a page change.

We need cookies for the following applications:

• Transfer of language settings

• Remembering search terms

The user data collected by technically necessary cookies is not used to create user profiles.

Analysis cookies are used for the purpose of improving the quality of our website and its content. Through the analysis cookies, we learn how our website is used and can thus constantly optimize our offer.

Our legitimate interest in the processing of personal data also lies in these purposes.

The legal basis for the temporary storage of data and log files is Article 6(1)(f) GDPR.

5. storage period

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended.

If the data is stored in log files, this is the case after seven days at the latest. Storage beyond this period is possible. In this case, the IP addresses of the users are deleted or anonymized so that it is no longer possible to identify the accessing client.

Cookies are stored on your end device and transmitted from it to Kitzmann. As a user, you therefore have full control over the use of cookies. You can deactivate or restrict the transmission of cookies by changing the settings in your Internet browser. You can delete cookies that have already been saved at any time.

6. e-mail advertising without subscribing to the newsletter

If we receive your e-mail address in connection with the sale of a product and you have not objected to this, we reserve the right to regularly send you offers for products similar to those already purchased from our range by e-mail on the basis of Section 7 (3) UWG. This serves to safeguard our legitimate interest in your advertising approach, which predominates in the context of a balancing of interests. You can object to this use of your e-mail address at any time by sending a message to info@kitzmann-gruppe.de or the link provided for this purpose in the advertising e-mail, without incurring any costs other than your transmission costs.

7. contact form and e-mail contact

There is a contact form on our website which can be used to contact us electronically. If you use this option, the data entered in the input mask will be transmitted to us and stored. At the time the message is sent, your IP address and the date and time are also stored.

Your consent is obtained for the processing of the data as part of the sending process via the contact form and reference is made to this privacy policy.

Alternatively, it is possible to contact us via the e-mail addresses provided. In this case, the user’s personal data transmitted with the e-mail will be stored.

The legal basis for the processing of the data is Art. 6 para. 1 lit. a GDPR if the user has given consent.

The processing of the personal data from the input mask serves us solely to process the contact. If you contact us by email, this also constitutes the necessary legitimate interest in processing the data.

The other personal data processed during the sending process is used to prevent misuse of the contact form and to ensure the security of our information technology systems.

The legal basis for the processing of data transmitted in the course of sending an email is Article 6(1)(f) GDPR. If the e-mail contact is aimed at concluding a contract, the additional legal basis for the processing is Art. 6 (1) (b) GDPR.

We automatically store your messages to us via the contact form or by e-mail in our e-mail archive. We are obliged to do this for documentation and control reasons in accordance with the German Commercial Code (HGB) and the German Tax Code (AO). The maximum storage period in our mail archive system is 11 years.

8. use of script and font libraries

We use script and font libraries from Google Webfonts(www.google.com/webfonts) to display the content of our website correctly and graphically appealing. These are transferred to the cache of your browser to avoid multiple loading. Calling up script and font libraries automatically triggers a connection to Google. It is theoretically possible, but currently unclear whether and, if so, for what purposes, that Google collects data about usage.

9. use of Google Maps, legal basis for the use of Google Maps is Art. 6 para. 1 letter a GDPR

We use the Google Maps service. Google Maps is operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter “Google”). This allows us to show you interactive maps directly on the website and enables you to use the map function conveniently.

You can find more information about data processing by Google in the Google data protection information. You can also change your personal data protection settings there in the data protection center.

Detailed instructions on managing your own data in connection with Google products can be found here.

Kitzmann itself does not collect any personal data through or when you use Google Maps.

When you visit the website, Google receives information that you have accessed the corresponding subpage of our website. This occurs regardless of whether Google provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data will be assigned directly to your account.

If you do not wish to be associated with your Google profile, you must log out of Google before activating the button. Google stores your data as user profiles and uses them for the purposes of advertising, market research and/or the needs-based design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact Google to exercise this right.

Third country transfer

Google processes your data in the USA and has submitted to the EU_US Privacy Shield.

https://www.privacyshield.gov/EU-US-Framework/

10. embedding of YouTube videos

We embed YouTube videos on some of our websites. The operator of the corresponding plugins is YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA (hereinafter “YouTube”). When you visit a page with the YouTube plugin, a connection to YouTube servers is established. YouTube is informed which pages you visit. If you are logged into your YouTube account, YouTube can assign your surfing behavior to you personally. You can prevent this by logging out of your YouTube account beforehand.

When a YouTube video is started, the provider uses cookies that collect information about user behavior.

Further information on the purpose and scope of data collection and its processing by YouTube can be found in the provider’s privacy policy, where you will also find further information on your rights in this regard and setting options to protect your privacy(https://policies.google.com/privacy). Google processes your data in the USA and has submitted to the EU-US Privacy Shield.

https://www.privacyshield.gov/EU-US-Framework/

The legal basis for the use of YouTube is Article 6(1)(a) GDPR

The legal basis is your consent

Receiver

Accessing YouTube automatically triggers a connection to Google.

Storage period and withdrawal of consent

If you have deactivated the storage of cookies for the Google Ad program, you will not have to expect any such cookies when watching YouTube videos. However, YouTube also stores non-personal usage information in other cookies. If you wish to prevent this, you must block the storage of cookies in your browser.

Further information on data protection at “YouTube” can be found in the provider’s privacy policy at: https://www.google.de/intl/de/policies/privacy/

Third country transfer:

Google processes your data in the USA and has submitted to the EU_US Privacy Shield. https://www.privacyshield.gov/EU-US-Framework/

11. google analytics

This website uses Google Analytics, a web analysis service of Google Inc (“Google”). Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyze how users use the site. The web analytics service is provided by Google Ireland Limited, a company incorporated and operated under Irish law with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland (www.google.de). This serves to safeguard our legitimate interests, which predominate in the context of a balancing of interests, in an optimized presentation of our offer in accordance with Art. 6 Para. 1 S. 1 lit. f GDPR. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. However, if IP anonymization is activated on this website, your IP address will be shortened by Google beforehand within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. Google will use this information on behalf of the operator of this website for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available at the following link(http://tools.google.com/dlpage/gaoptout?hl=de).

You can also prevent Google Analytics from collecting your data when you visit this website by clicking on the following link. This will set an opt-out cookie: Deactivate the collection of data by Google Analytics for this website.

Further information on the terms of use and data protection can be found at https://marketingplatform.google.com/about/analytics/terms/de/ or at https://marketingplatform.google.com/about/analytics/terms/de/. On this website, we have added the function “gat._anonymizeIp()” to the Google Analytics code. This anonymizes the collection of IP addresses.

Insofar as information is transferred to Google servers in the USA and stored there, the American company Google LLC is certified under the EU-US Privacy Shield. A current certificate can be viewed here. Based on this agreement between the USA and the European Commission, the latter has established an adequate level of data protection for companies certified under the Privacy Shield.

12. postal advertising and your right to object

We reserve the right to use your first and last name and your address for our own advertising purposes, e.g. to send you our catalog. This serves to safeguard our overriding interests in your advertising approach in accordance with Art. 6 para. 1 letter f GDPR. These advertising mailings are provided by a service provider as part of order processing, to whom we pass on your data for this purpose. There is an agreement with this service provider for order processing in accordance with Art. 28 GDPR.

You can object to this use of your data for this purpose at any time by sending a message to info@kitzmann-gruppe.de or by sending a message to the contact option mentioned above.

13. lead info

This website uses the service of the provider Leadinfo B.V., based in Rotterdam. This service shows us publicly accessible company data, such as company names and addresses, based on IP addresses. The recognition of companies is based solely on IP addresses. The IP addresses are not saved after use. In addition to this recognition via IP addresses, two first-party cookies are used to provide us with information on how visitors use the website (analytics). These cookies are not linked to other information and nothing is passed on to third parties.

Objection to data collection: If you would like to deactivate data collection (tracking), please click on the corresponding button:

https://www.leadinfo.com/de/opt-out/

Contract data processing: We have concluded a contract with Leadinfo for contract data processing and implement the data protection regulations.
Contact Leadinfo:
Leadinfo B.V.
Rivium Quadrant 141
2909 LC Capelle aan den IJssel
The Netherlands
hallo@leadinfo.com
+31 (0)85 2500 450