Data Protection

1. Data protection at a glance

General remarks

The following remarks give a simple overview on what happens to your personal data if you visit this website. Personal data are any data with which you can be personally identified. You can infer detailed information on the topic of data protection from our Privacy Policy below.

Recording of data on this website

Who is responsible for recording data on this website?

Data are processed on this website by the website operator. The operator’s contact information is listed in Section 2.

How do we record your data?

Your data are, firstly, collected by you informing us of it. This may, for example, concern data that you enter on a contact form.

Other data may be automatically recorded or recorded after your consent by our IT systems or the IT systems we use. These are mainly technical data (for instance Internet browser, operating system or time when the page was accessed). Such data are recorded automatically as soon as you enter this website.

What do we use your data for?

Some of the data are collected in order to guarantee that the website is provided free of faults. Other data may be used to analyse your usage pattern.

Analysis tools and tools of third-party providers

When you visit this website, your surfing patterns may be statistically evaluated. This is done primarily on the basis of analysis programs.

You can find detailed information on these analysis programs in the Privacy Policy below.

What rights do you have in regard to your data?

You shall be entitled at any time to receive information free of charge regarding the origin, recipient and purpose of your stored personal data. You are also entitled to order that these data be rectified or erased. If you have given your consent to data processing, you may withdraw this consent at any time with regard to any future processing. Under certain circumstances, you shall also have the right to request restriction of the processing of your personal data. Furthermore, you are entitled to lodge a complaint with the responsible supervisory authorities.

With regard to this and other questions about data protection, you may contact us at any time by means of the contact information listed in Section 2.

 

2. General remarks and obligatory information

Data protection

The operators of this website take the privacy of your personal data very seriously. We treat your personal data as confidential and in accordance with the statutory data privacy regulations and this Privacy Policy.

Various personal data are collected when you use this website. Personal data are data with which you can be personally identified. The present Privacy Policy explains what data we collect and what we use it for. It also explains how, and for what purpose, that is done.

However, we would like to point out that data transmission via internet (e.g. email communication) may be subject to security vulnerabilities. Complete protection of personal data against unauthorized access by third parties is not possible.

Note on the institution responsible

The institution responsible for processing the data on this website is:

SVT GmbH
Eisenwerkstr. 21-27
58332 Schwelm / Germany

Managing director: Michael Schauerte

Telephone: +49 2336 4430
Email: info@svt-gmbh.com

Hagen Local Court: HRB (Commercial Register, Companies’ Section) Record No. 6660

The institution responsible is the natural or legal person who or which decides on the purposes and means of the processing of personal data (e.g. names, email addresses, etc.), either alone or together with another party.

Data protection officer required by law

We have appointed a data protection officer for our company.

Marie-Luise Hasenmayer
Telephone: +49 2336 443-121
Email: datenschutz@svt-gmbh.com or kontakt@datenschutz-nrw.org

SSL or TLS encryption

For security reasons, and in order to protect the transmission of confidential contents such as inquiries that you transmit to us in our capacity as website operator, this site uses SSL or TLS encryption. You can recognize an encrypted connection by the fact that your browser’s address bar changes from “http://” to “https://” and by the lock symbol shown in your browser’s browser line.

If the SSL or TLS encryption is enabled, the data that you transmit to us cannot be read by any third parties.

Information on forwarding of data to the USA

Tools from companies headquartered in the USA are integrated into our website. If these tools are active, your data may be forwarded to the US server of the respective companies. We hereby inform you that the USA is not a secure third country as defined by EU data protection law. US companies may be obliged to turn over your personal data to security authorities without you being able to take court action against this in your capacity as affected party. Therefore, it cannot be ruled out that US authorities (for instance intelligence services) may process, evaluate, and permanently store any of your data which is located on US servers for surveillance purposes. We have no influence over these activities.

 

3. Legal basis for the processing of personal data

If we obtain the data subject’s consent for processing procedures in regard to personal data, Art. 6(1)(a) EU General Data Protection Regulation (GDPR) serves as a legal basis.

In regards to the processing of personal data that is required to fulfil a contract, of which the person concerned is a contracting party, Art. 6(1) point (b) of the General Data Protection Regulation serves as the legal basis. This also applies to data processing activities required for the implementation of pre-contractual measures.

As far as the processing of personal data is required to fulfil a legal obligation, which our company is subject to, Art. 6(1) point (c) of the General Data Protection Regulation serves as the legal basis.

In the event that vital interests of the person concerned or another private individual require the processing of personal data, Art. 6(1) point (d) of the General Data Protection Regulation serves as the legal basis.

If the processing is necessary in order to protect a legitimate interest on the part of our company or a third party, and if the interests, basic rights and basic freedoms of the data subject do not outweigh the aforementioned interest, Art. 6(1)(f) GDPR shall serve as a legal basis for the processing.

Storage period

Insofar as no special storage period is stipulated in this Privacy Policy, your personal data will remain with us until the purpose for the data processing lapses. If you file a justified request for erasure or withdraw your consent to data processing, your data are erased insofar as we do not have any other legally permissible reasons for storing your personal data (for instance retention periods stipulated by fiscal or commercial legislation). If that is the case, your data will be erased after these reasons no longer apply.

 

4. Provision of the website and creation of log files

Hosting and Content Delivery Networks (CDN)

External Hosting

This website is hosted by an external service provider (host). The personal data which are collected on this website are stored on the host’s servers. These data may include, in particular, IP addresses, contact queries, meta and communication data, contract data, contact data, names, websites accessed, and other data which are generated by a website.

The host is used for the purpose of fulfilling contracts with potential and existing clients (Art. 6(1) point (b) GDPR) and in the interest of providing a secure, fast and efficient provision of our online services through a professional provider (Art. 6(1) point (f) GDPR).

Our host will only process your data as required for fulfilling its obligations and following our instructions with regard to these data.

We use the following hosts:

Mittwald CM Service GmbH & Co.KG

Königsberger Str. 4 – 6

32339 Espelkamp, Germany

 

Tel.: 05772 293100

 

Contracts for Order Processing

In order to ensure that processing conforms with data protection legislation, we have entered into an order processing contract with our host.

Server log files

The web server’s access logs record what pages are accessed and what time this occurs. They contain the following data: IP, directory protection user, date, time, pages accessed, logs, status code, data volume, referrer, user agent, accessed host name.

IP addresses are stored in anonymised form. For this purpose the last three digits are removed, i.e. 127.0.0.1 is changed to 127.0.0.*. IPv6 addresses are also anonymised. The anonymised addresses are stored for 60 days. Information about the directory protection user is anonymised after one day.

Error logs which record erroneous accessing of pages are deleted after 7 days. Apart from the error messages, these include the accessing IP address and, depending on the type of error, the accessed web page.

Access via FTP is logged with anonymised information on user name and IP address and kept for 60 days.

The mail logs for sending emails from the web environment are anonymised after one day and subsequently kept for 60 days. The anonymisation process removes all data on sender/recipient, etc. What remains are only the data on the time when the email was sent as well as information on how it was processed and received (queue ID or not sent).

Mail logs for sending via our mail server are erased after four weeks. The longer retention time is necessary to ensure the functionality of the mail services and prevent spam.

The individual length of storage cannot be defined in individual cases.

These data are collected based on Article 6(1) sentence 1 point (f) GDPR. The website operator has a legitimate interest in the technical error-free presentation and optimisation of its website – server log files have to be recorded for this purpose.

 

5. Recording of data on this website

Cookies

Our websites use cookies. Cookies are small files and do not cause any damage to your device. They are either temporarily stored for the duration of a session (session cookies) or permanently stored on your device (permanent cookies). Session cookies are erased automatically after your website visit. Permanent cookies remain stored on your  device until you yourself erase them or your web browser automatically erases them.

Cookies have various functions. Many cookies are technically necessary, because certain website functions would not function without them (for instance playing videos). Other cookies are used for evaluating user behaviour or displaying advertisements.

Cookies which are necessary for electronic communication (necessary cookies) or for providing certain functions that you require (functional cookies) or for optimizing the website (for instance cookies for measuring the web audience) are stored on the basis of Art. 6(1)(f) GDPR, insofar as no other legal basis is cited. The website operator has a legitimate interest in the storage of cookies for technically error-free and optimised provision of its services. Insofar as consent for storing cookies is requested, the respective cookies are stored exclusively on the basis of this consent (Art. 6(1)(a) GDPR); consent can be withdrawn at any time.

You can adjust the settings of your browser in such a way that you are informed about the creation of cookies and permit such cookies only in individual cases, exclude the acceptance of cookies in certain cases or in general and activate the automatic deletion of cookies whenever you close the browser. If cookies are deactivated, the functionality of this website may be restricted.

Insofar as cookies are used by third-party companies or for analysis purposes, you will be separately notified about this within the framework of this Privacy Policy and, if necessary, queried about consent.

Cookie consent with Borlabs cookie

Our website uses the cookie consent technology from Borlabs Cookie to obtain your consent for storing cookies in your browser and documenting this in accordance with data protection legislation. The provider of this technology is Borlabs – Benjamin A. Bornschein, Georg-Wilhelm-Str. 17, 21107 Hamburg (hereinafter Borlabs).

If you access our website, a Borlabs cookie is stored in your browser. This cookie records your granted consents or withdrawal of these consents are stored. These data are not passed on to the provider of the Borlabs cookie.

The collected data are stored until you request us to erase them, you erase the Borlabs cookie yourself, or the purpose for storing the data lapses. This does not affect mandatory statutory retention periods. You can find details on data processing of the Borlabs cookie at https://de.borlabs.io/kb/welche-daten-speichert-borlabs-cookie/

The Borlabs cookie consent technology is used in order to obtain mandatory statutory consent for the use of cookies. The legal basis for this is Art. 6(1) sentence 1 point (C) of the GDPR.

 

6. Registration

Description and scope of data processing

 

On our website we offer our users the possibility of registering by providing personal information, in order to receive additional information, such as product brochures, SVT representations, etc. These data are entered in an online form and transferred to us and stored. The data are not passed on to third parties. The following data are collected during the registration process:

 

– Name

– Telephone no.

– Email address

– Company

These data are processed on the basis of Art. 6(1) sentence 1 point (b) GDPR, insofar as your inquiry relates to the fulfilment of a contract or is necessary for performing pre-contractual measures. In all other cases the processing is based on our legitimate interests in the effective processing of the queries directed to us (Art. 6(1) sentence 1 point (f) GDPR) or your consent (Art. 6(1) sentence 1 point (a) GDPR) insofar as this was queried.

The data entered on the registration form by you remains with us until such time as you request us to erase it, revoke your consent to its storage, or the reason for the data storage lapses (e.g. once the processing of your inquiry has been concluded). Mandatory statutory provisions – in particular archival periods – shall not be affected thereby.

 

7. Contact form and email contact

Contact form

If you send us enquiries via the contact form, we shall save your information provided in the enquiry form, including your contact data stated therein, for purposes of processing the enquiry and in the event of additional questions. We shall not pass on these data without your consent.

These data are processed on the basis of Art. 6(1) sentence 1 point (b) GDPR, insofar as your inquiry relates to the fulfilment of a contract or is necessary for performing pre-contractual measures. In all other cases the processing is based on our legitimate interests in the effective processing of the queries directed to us (Art. 6(1) sentence 1 point (f) GDPR) or your consent (Art. 6(1) sentence 1 point (a) GDPR) insofar as this was queried.

The data entered on the contact form by you remains with us until such time as you request us to delete it, withdraw your consent to its storage, or the reason for the data storage lapses (e.g. once the processing of your inquiry has been concluded). Mandatory statutory provisions – in particular retention periods – shall not be affected thereby.

Inquiry by email, telephone or telefax

If you contact us by email, telephone or telefax, we will store and process your inquiry, including all personal data involved with this (name, inquiry) for the purposes of processing your request. We shall not pass on these data without your consent.

These data are processed on the basis of Art. 6(1) sentence 1 point (b) GDPR, insofar as your inquiry relates to the fulfilment of a contract or is necessary for performing pre-contractual measures. In all other cases the processing is based on our legitimate interests in the effective processing of the queries directed to us (Art. 6(1) sentence 1 point (f) GDPR) or your consent (Art. 6(1) sentence 1 point (a) GDPR) insofar as consent was obtained.

The data you sent to us by contact inquiries remain with us until such time as you request us to erase it, withdraw your consent to its storage, or the reason for the data storage lapses (e.g. once the processing of your inquiry has been concluded). Mandatory statutory provisions – in particular statutory retention periods – shall not be affected thereby.

 

Applications

We offer you the opportunity to apply to our company (for instance by email or by post). In the following, we inform you about the scope, purpose and use of your data collected within the course of the application process. We assure you that the collection, processing and use of your data complies with applicable data protection legislation and all other statutory regulations, and that your data will be treated strictly confidentially.

Scope and purpose of data collection

If you send us an application, we use it to process your related personal data (for instance, contact and communication data, application documents, notes in connection with application interviews, etc.), insofar as this is necessary for establishing an employment relationship. The legal basis for this is § 26 German Federal Data Protection Act (BDSG) – new pursuant to German law (establishing an employment relationship), Art. 6(1) point (b) GDPR (general entering into a contract) and – insofar as you have given your consent – Art. 6(1) point (a) GDPR. Consent may be withdrawn at any time. Your personal data are passed on within our company exclusively to people who are involved in processing your application.

Insofar as the application is successful, the data you provided are stored in our data processing system for establishing the employment relationship on the basis of § 26 German Federal Data Protection Act (BDSG) and Article 6(1) sentence 1 point (b) GDPR.

If we are unable to offer you a job, or if you reject a job offer, revoke your application, withdraw your consent for data processing, or request us to erase the data, we shall store the data you provided, including any remaining physical application documents, for a maximum of 3 months after conclusion of the application process (retention period), in order to be able to reconstruct the details of the application process in the event of disputes (Article 6(1) point (f) GDPR).

YOU MAY OBJECT TO THIS STORAGE, INSOFAR AS YOU HAVE LEGITIMATE INTERESTS WHICH OUTWEIGH OUR INTERESTS.

The data shall be erased after the end of the retention period, insofar as there is no statutory retention obligation or another legal reason for further storage. Insofar as it is evident that the retention of your data is necessary after the end of the retention period (for instance because of an impending or pending legal dispute), the data will only be erased when they become irrelevant. Other statutory retention obligations shall remain unaffected by this.

 

8. Web analysis

For the web analysis we use Google Analytics with IP anonymisation.

This website uses the service “Google Analytics”, which is offered by Google Inc. (1600 Amphitheatre Parkway Mountain View, CA 94043, USA), for analysing the way the user uses the website. This information is generally stored on a Google server  which may be located outside the EU.

On this website, IP anonymisation is implemented. This means there is no longer any personal reference to your IP address. Pursuant to the agreement on order data processing which the website operators have concluded with Google, Google will use the collected information to evaluate website use and website activity and provides services related to the use of the Internet.

You can adjust your browser’s settings to prevent cookies being stored on your device. If your browser does not allow any cookies it cannot be ensured that you will be able to access all functions on this website without any restrictions. You can also use a browser plugin to prevent the information collected by cookies (including your IP address) being sent to Google Inc. and being used by Google Inc. The following link takes you to the appropriate plugin: https://tools.google.com/dlpage/gaoptout?hl=de

Here you can find further information on the use of data by Google Inc.: https://support.google.com/analytics/answer/6004245?hl=de

Google Analytics is used based on Art. 6(1) sentence 1 (a) GDPR. Consent may be withdrawn at any time.

The retention period for the data is six months.

 

9. Plugins and tools

Google Maps

This site uses the map service of Google Maps. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

In order to use the functions of Google Maps, it is necessary to store your IP address. This information is usually transmitted to a server of Google in the USA and stored there. The provider of this site has no control over such data transmission.

Google Maps is used in the interest of our online offers being displayed attractively and for you to be able to find the locations, specified by us on the website, easily. To the extent you have given your consent, processing takes place exclusively on the basis of Art. 6(1) point (a) GDPR; consent can be withdrawn at any time.

Data transfer to the USA is based on the standard contract clauses of the EU Commission. You can find details here: https://privacy.google.com/businesses/gdprcontrollerterms/ and https://privacy.google.com/businesses/gdprcontrollerterms/sccs/.

More information on dealing with user data can be found in Google’s data privacy policy at: https://policies.google.com/privacy?hl=en.

 

11. Rights of the person concerned

Withdrawal of your consent to the data processing

Many data processing procedures are only possible with your explicit consent. You may withdraw previously-granted consent at any time. The lawfulness of the data processing which occurred before your consent was withdrawn shall not be affected by the revocation.

Please send the revocation to the data protection officer

of SVT GmbH, Eisenwerkstraße 21 – 27, 58332 Schwelm or by email to datenschutz@svt-gmbh.com.

Right to object to data collection in particular cases and to object to direct marketing (Art. 21 GDPR)

If the data processing is performed on the basis of article 6 (1) sentence 1 point (e) or (f) GDPR, you shall have the right to object, on grounds relating to your particular situation, at any time to processing of your personal data, including profiling based on those provisions. Please refer to this privacy policy for the respective legal basis for processing. If you raise an objection, we shall cease processing your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defense of legal claims (right of objection pursuant to art. 21 (1) GDPR).

Should your personal data be processed in order to effect direct marketing, you are entitled to raise an objection to the processing of personal data concerning you for the purpose of such advertising at any time in so far as it is connected with such direct marketing. If you object, your personal data shall no longer be used for direct marketing purposes (objection pursuant to art. 21 (2) GDPR).

Right to complain with the responsible supervisory authority

In the event of infringements of the GDPR, the affected party shall have the right to lodge a complaint (Art. 77(1) GDPR) with a supervisory authority, in particular in the Member State of his or her habitual residence, place of work, or place of the alleged infringement. The right to lodge a complaint shall exist without prejudice to any other administrative or judicial remedy.

Right to data portability

You are entitled to have any data that we automatically process based on your consent or in fulfilment of a contract handed over to you or a third party in a common, machine-readable format. Should you require direct transmission of the data to another Controller, this is only done if it is technically feasible.

Information, erasure and rectification

You are entitled, at any time and within the context of the applicable statutory provisions, to receive information free of charge (Art. 15 GDPR) on your stored personal data as well as on their origin, their recipient and the purpose of data processing. You are also entitled to request  rectification (Art. 16 GDPR) or erasure of such data (Art. 17 GDPR). For further questions about your personal data, you may contact us at any time using the contact information in Section 2.

Right to restriction of the data processing

You shall have the right to demand restriction of the processing of your personal data. Regarding this you may contact us at any time using the contact information in Section 2. There shall be a right to restriction of the data processing in the following cases:

• If you dispute the correctness of your personal data stored by us, we generally require time to check this. During the time while this is being checked, you shall have the right to demand restriction of the processing of your personal data.
• If your personal data was / is unlawfully processed, you may demand the erasure of these data instead of restriction of the data processing.
• If you have raised an objection pursuant to Art. 21(1) GDPR, your interests will be weighed against our interests. As long as it is not clear whose interests predominate, you shall have the right to demand restriction of the processing of your personal data.

If you have restricted the processing of your personal data, such personal data shall, with the exception of storage, only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.

 

 

As of December 2020