How does the Kitzmann Group (hereafter "Kitzmann") handle your data and what rights do you have? Information in accordance with Articles 13, 14 and 21 DSGVO

We would like to inform you about our processing of your personal data within the meaning of Art. 4 No. 1 DSGVO by Kitzmann and the rights and claims you are entitled to according to the data protection regulations.

Which data Kitzmann processes and uses in detail depends largely on the offers and / or services we use online or offline, or the goods or services you purchase from us.

Therefore, not all information provided here may apply to you.

1. Who is responsible for data processing and who can I contact?

The responsible body is the

Magdalena Kitzmann GmbH
Gutenbergstraße 24-29
49525 Lengerich
Germany

Phone: +49 5481 9345-0
Email: info@kitzmann-gruppe.de
Website: www.kitzmann-gruppe.de

You can contact our Privacy Officer at:

ComProvide GmbH
Steelworks 10b
49084 Osnabrück
Germany
Phone: +49 541 506160
Email: datenschutz@comprovide.de
Website: www.comprovide.com

2. Which sources and data does Kitzmann use?

We process personally identifiable information we receive from you as part of our business relationship with you or through the use of our online offer. For this we process personal data that we have received from third parties with your consent or from publicly available sources such. For example, they were able to win and process the trade or debtor register.

Relevant personal data are your personal details such as name, address and date of birth, legitimacy data such as ID data, data from the fulfillment of our contractual obligations (eg sales data), advertising and sales data as well as the data about your use of our telemedia service (eg B. Date of access to our website, clicked pages and other data comparable to the above categories)

3. For what does Kitzmann process your data (purpose of the processing) and on which legal basis?

We process personal information in order to fulfill our contractual obligations to you. In addition, we process this data in order to fulfill our documentation and documentation obligations, which arise, for example, from commercial and tax law. In addition, we may be required to comply with the Money Laundering Act. All processing takes place on the basis of the DSGVO and the BDSG.

3.1 Use for the fulfillment of contractual obligations The legal basis in this case is Article 6 (1) (b) GDPR

We process personally identifiable information to provide you with the services you owe from a contract with you, to execute your orders and to ensure all activities necessary for the operation and administration of a commercial, design and production operation. The purpose of data processing is primarily based on the specific service provided to you (sales, consulting, construction, etc.)

3.2 Use in the balance of interests The legal basis in this case is Article 6 (1) (f) GDPR

If necessary, we will process your information beyond our contractual obligations if we or third parties have a legitimate interest. For example:

• Review and optimization of requirements analysis procedures for direct customer approach
• for advertising and publicity purposes, if you have not objected to the use
• Asserting legal claims and defense in legal disputes
• Guaranteeing the IT operation and IT security at Kitzmann
• Prevention and investigation of criminal offenses
• Measures for building and plant safety (eg access control) and to ensure home-ownership
• Business management and product and service development measures
• Risk Management Measures

3.3 Use in the context of legal requirements or in the public interest The legal basis in this case is Article 6 (1) (c) GDPR

Kitzmann may be subject to special legal obligations, including but not limited to, the goods we trade and the services we provide. B. result from the Money Laundering Act. In addition, the usual tax and commercial regulations for the storage of data also apply to us in order to fulfill our control, reporting and documentation obligations.

3.4 Use on the basis of your consent, legal basis in this case is Article 6 (1) (a) GDPR

If you have given Kitzmann consent to the processing of personal data for specific purposes (eg for an application, marketing purposes, photos during events or newsletter delivery), the legality of this processing is based on your consent. A given consent can be revoked at any time. However, the revocation unfolds effect only for the future.

4th Who gets your data?

Inside the Kitzmann company, employees receive their data, which they need to fulfill their respective duties and duties. Our processors (Art. 28 DSGVO) can also receive data for this. This could be, for example, an IT or telecommunications service provider or a print service provider if you order a catalog.

Kitzmann may transfer your information to public authorities and institutions if there is a legal or regulatory obligation to do so. To courts or fiscal authorities.

Finally, Kitzmann passes your data on to payment service providers and transport companies, as long as we rely on their cooperation to carry out a contract (delivery of goods to you).

Kitzmann uses payment service providers based in a state outside the EU. The transfer of personal data occurs only in the context of the need to fulfill the contract.

5. Storage duration

We process your data for as long as is necessary to fulfill our obligations to you. If the data is no longer required to fulfill contractual or legal obligations, they will be deleted on a regular basis.

In addition, the storage and documentation obligations of the German Commercial Code (HGB), the AO and the GWG require storage for between 2 and 11 years.

6. Data transfer to a third country

There will be no transfer of data to a third country, outside the EU or the EEA, unless the payment service provider you specify is located there.

7. Your rights under the GDPR

Every person concerned has the right to information acc. Art. 13 GDPR, for correction according to Art. Art. 16 DSGVO, on cancellation acc. Art 17 DSGVO, to restriction of processing acc. Art. 18 DSGVO and the right to data portability acc. Art. 20 DSGVO.

In the case of information and cancellation rights, the restrictions apply. §§ 34 and 35 BDSG.

In addition, you have a right of appeal to a data protection supervisory authority. Art. 77 GDPR i. V. m. § 19 BDSG.

8. Duty to provide your information

In the context of a business relationship with Kitzmann, you only need to provide the data necessary for the establishment, execution and termination of a business relationship or which Kitzmann is required to collect. Without the provision, we will refuse to conclude a contract or to execute an order or to terminate or terminate an existing contract.

We may be required by the anti-money laundering regulations to identify you on the basis of a personal document, stating your name, place of birth, date of birth, nationality and address. To fulfill this obligation, you must provide us with this data. If you do not want to do that, Kitzmann can not record the desired business relationship with you.

9. Automated decision in individual cases acc. Art. 22 GDPR

Kitzmann does not make automated decisions in accordance with. Art. 22 DSGVO.

10. Scoring

Kitzmann does not do any scoring.

Information on the right of opposition acc. Art. 21 (1) GDPR

Case-specific right of opposition

You have the right at any time, for reasons that arise from your particular situation, against the processing of your personal data, which we according to a balance of interests acc. Art. 6 para. 1 DSGVO process, appeal. Then we will not process your data unless we have compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or the processing is for the purpose of enforcing, pursuing or defending legal claims.

Right to object to data processing for direct marketing purposes

Kitzmann processes your data in individual cases for direct marketing purposes. You have the right to object at any time to the processing of personal data concerning you for the purpose of such advertising. If you make such a complaint, Kitzmann will no longer use your personal data for this purpose.

The objection can be made, for example, to info@kitzmann-gruppe.de or to the above address. Please state the subject "contradiction", which makes the assignment easier.

Special privacy notices when using our online offer such as the website

The following notices are in addition to the above information, if you use our online offer in the form of our website and any other telemedia services.

1. Extent of processing of personal data

Kitzmann processes personal data of the users of the website beyond those mentioned above under 3. and its sub-items only to the extent necessary to provide a functional website and our content and services. However, we will inevitably pass the data on to our web host.

2. Provision of the website and creation of logfiles

Each time our website is accessed, our system automatically collects data and information from the computer system of the calling computer.

The following data is collected here:

Information about the browser type and the version used

(1) your operating system
(2) your internet service provider
(3) Your IP address
(4) Date and time of access
(5) Websites from which your system reaches our website
(6) Websites accessed by your system through our website

The data are also stored in the log files of our system. There is no storage of this data together with your other personal data.

Temporary storage of the IP address by the system is necessary to allow delivery of the website to the user's computer. To do this, the user's IP address must be kept for the duration of the session.

Storage in log files is done to ensure the functionality of the website. In addition, the data is used to optimize the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context. In addition, an evaluation for statistical purposes takes place. In these purposes, our legitimate interest lies in the processing.

The legal basis for the temporary storage of data and log files is Article 6 (1) (f) GDPR.

3. SSL encryption

To protect the security of your data during transmission, we use state-of-the-art encryption techniques (such as SSL) over HTTPS.

4. Use of so-called cookies

Our website uses cookies. Cookies are text files that are stored in the Internet browser or on the Internet browser on your computer system. If you call up a website, a cookie can be stored on your device. This cookie contains a characteristic string that allows the browser to be uniquely identified when the website is reopened.

We use cookies to make our website more user-friendly. Some elements of our website require that the calling browser be identified even after a page break.

The following data is stored and transmitted in the cookies:

• Language settings
• Region code
• Log-in information

We also use cookies on our website that allow us to analyze your browsing behavior.

In this way the following data can be transmitted:

• Entered search terms
• Frequency of page views
• Use of Website Features

The data collected by you in this way will be pseudonymised by technical means. Therefore, it is no longer possible to assign the data to you. The data will not be stored by you together with other personal data.

When you visit our website, you will be informed by an information banner about the use of cookies for analysis purposes and referred to this privacy statement. In this context, there is also an indication as to how the storage of cookies in the browser settings can be prevented.

The purpose of using technically necessary cookies is to simplify the use of websites for users. Some features of our website can not be offered without the use of cookies. For these, it is necessary that the browser is recognized even after a page break.

We require cookies for the following applications:

• Applying language settings
• Remember keywords

The user data collected through technically necessary cookies will not be used to create user profiles.

The use of the analysis cookies is for the purpose of improving the quality of our website and its contents. The analysis cookies tell us how our website is being used and so we can constantly optimize our offer.

For these purposes, our legitimate interest lies in the processing of personal data.

The legal basis for the temporary storage of data and log files is Article 6 (1) (f) GDPR.

5. Storage duration

The data will be deleted as soon as it is no longer necessary to achieve the purpose of the survey. In the case of the collection of data for the provision of the website, this is the case when the respective session is over.

In the case of storing the data in log files, this is the case after no more than seven days. An additional storage is possible. In this case, the IP addresses of the users are deleted or alienated, so that an assignment of the calling client is no longer possible.

Cookies are stored on your device and transmitted by this to Kitzmann. Therefore, as a user, you have full control over the use of cookies. By changing the settings in your internet browser, you can disable or restrict the transmission of cookies. Already saved cookies can be deleted at any time.

6. E-mail advertising without registration for the newsletter

If we receive your e-mail address in connection with the sale of goods and you have not objected to this, we reserve the right, on the basis of § 7 Abs. 3 UWG regularly offers for similar products as the already purchased from our assortment by e-mail. This serves to safeguard our legitimate interest in your advertising approach, which predominates in the context of a balance of interests. You can object to this use of your e-mail address at any time by sending a message to info@kitzmann-gruppe.de or the dedicated link in the Advertising mail without incurring costs beyond your delivery costs.

7. Contact form and e-mail contact

On our website a contact form is available, which can be used for electronic contact. If you make this possible, the data entered in the input mask will be transmitted to us and saved. At the time the message is sent, your IP address and date and time are also saved.

For the processing of the data in the context of the sending process by contact form your consent is obtained and referred to this privacy policy.

Alternatively, contacting us via provided e-mail addresses is possible. In this case, the user's personal data transmitted by e-mail will be stored.

Legal basis for the processing of the data is in the presence of the consent of the user Art. 6 para. 1 lit. a GDPR.

The processing of the personal data from the input mask serves us only to process the contact. In the case of contact via e-mail, this also includes the required legitimate interest in the processing of the data.

The other personal information processed during the posting process is intended to prevent misuse of the contact form and to ensure the security of our information technology systems.

The legal basis for the processing of the data transmitted in the course of sending an e-mail is Article 6 (1) (f) GDPR. If the e-mail contact is aimed at concluding a contract, the additional legal basis for processing is Article 6 (1) (b) GDPR.

We automatically save your messages to us via contact form or by e-mail in our mail archive. We are obliged to do so for documentation and control purposes in accordance with the HGB and the AO. The maximum storage time in our mail archive system is 11 years.

8. Using Script and Font Libraries

To make the content of our website accurate and graphically appealing, we use Google Web Script fonts and scripts libraries (www.google.com/ Web fonts code). These are transferred to the cache of your browser to avoid multiple loading. Calling script and font libraries automatically triggers a connection to Google. It is theoretically possible, but currently unclear whether and, if so, for what purposes this happens, that Google collects data on the use of

9. Use of Google Maps, legal basis for the use of Google Maps is Art. 6 (1) (a) GDPR

How to use the offer of Google Maps. Google Maps is operated by Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA (hereafter "Google"). This allows us to show you interactive maps directly in the website and allow you to conveniently use the map feature.

For more information about Google's data processing, please see the Google Privacy Notice. There you can also change your personal privacy settings in the privacy center.

Detailed instructions on how to manage your own data related to Google products can be found here.

Kitzmann itself does not collect personal information or use Google Maps.

By visiting this website, Google receives information that you have accessed the corresponding subpage of our website. This is done regardless of whether Google provides a user account that you are logged in to, or if there is no user account. When you're logged in to Google, your data will be assigned directly to your account.

If you do not want to have your profile mapped to Google, you'll need to log out of Google before activating the button. Google stores your data as usage profiles and uses them for purposes of advertising, market research and / or tailor-made website design. Such an evaluation is carried out in particular (even for non-logged in users) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have a right to object to the formation of these user profiles, and you must contact Google to exercise them.

Third-country transfer

Google processes your data in the US and has submitted to the EU_US Privacy Shield.

https://www.privacyshield.gov/EU-US-Framework/

10. Embedding Youtube Videos

We embed YouTube videos on some of our websites. The respective plug-ins are operated by YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA (hereafter "YouTube"). When you visit a page with the YouTube plug-in, it will connect to YouTube's servers. It tells YouTube which pages you visit. If you are logged in to your YouTube account, YouTube may personally associate your browsing behavior with you. This can be prevented by logging out of your YouTube account beforehand.

When a YouTube video is launched, the provider uses cookies that collect information about user behavior.

For more information on the purpose and scope of your data collection and its processing by YouTube, please refer to the provider's privacy policy, where you will also find more information about your rights and preferences for privacy (https://policies.google.com/privacy code). Google processes your data in the US and has submitted to the EU-US Privacy Shield.

https://www.privacyshield.gov/EU-US-Framework/

The legal basis for the use of YoutTube is Article 6 (1) (a) GDPR

Legal basis is your consent

receiver

YouTube will automatically trigger a connection to Google.

Consent Period and Withdrawal

Anyone who has disabled the storage of cookies for the Google Ad program will not have to expect such cookies when watching YouTube videos. However, YouTube also stores non-personal usage information in other cookies. If you want to prevent this, you must block the storage of cookies in the browser.

For more information about "YouTube" privacy, please visit the provider's privacy policy at: https://www.google.com/intl/en/policies/privacy/

Third-Country Transport:

Google processes your data in the US and has submitted to the EU_US Privacy Shield. https://www.privacyshield.gov/EU-US-Framework/

11. Google Analytics

This website uses Google Analytics, a web analytics service provided by Google Inc. ("Google"). Google Analytics uses so-called "cookies", text files that are stored on your computer and that allow an analysis of the use of the website by you. The Web analytics service is an offer of Google Ireland Limited, a company registered and operated under Irish law and located at Gordon House, Barrow Street, Dublin 4, Ireland (www.google.com). This serves to safeguard our legitimate interests, which predominate in the context of a weighing up of interests, in an optimized presentation of our offer in accordance with Art. 6 (1) sentence 1 lit. f DSGVO. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. However, if IP anonymization is enabled on this website, Google will truncate your IP address beforehand within member states of the European Union or other parties to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the US and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services related to website activity and internet usage to the website operator. The IP address provided by Google Analytics within the framework of Google Analytics will not be merged with other data provided by Google. You can prevent the storage of cookies by a corresponding setting of your browser software; however, we point out that in this case you may not be able to use all the functions of this website in full. In addition, you may prevent the collection by Google of the data generated by the cookie and related to your use of the website (including your IP address) as well as the processing of this data by Google by using the following link (http://tools.google.com/dlpage/gaoptout?hl=en) available browser Download and install the plugin.

In addition, clicking the link below will prevent Google Analytics from collecting your information when you visit this site. This sets an opt-out cookie: Disable Google Analytics data collection for this site.

For more information about the Terms of Service and Privacy, please see www.google.com/analytics/terms/en.htmlwww.google.com/intl/en/analytics/privacyoverview.html. On this website we have added the function "gat._anonymizeIp ()" to the code of Google Analytics. The capture of IP addresses is thus anonymized.

To the extent that information is transferred to and stored on Google's servers in the United States, the American company Google LLC is certified under the EU-US Privacy Shield. A current certificate can be viewed here. As a result of this agreement between the US and the European Commission, the latter has established an appropriate level of data protection for companies certified under the Privacy Shield.

12. Postal advertising and your right to object

We reserve the right to use your first and last name and address for promotional purposes such as: B. to use the shipping of our catalog. This serves the preservation of our predominant interest in your advertising approach in the context of a balancing of interests. Article 6 (1) (f) GDPR. These commercials are provided as part of a job processing by a service provider, to which we pass your data to. With this service provider is an agreement for order processing acc. Art. 28 GDPR.

You can object to this use of your data for this purpose at any time by sending a message to info@kitzmann-gruppe.de or by sending a message to the above contact option.