0 articles   

Privacy policy

Privacy Policy in Accordance with the General Data Protection Regulation


I. Controller's Name and Address

The controller in the sense of the General Data Protection Regulation and other national data protection laws of the EU Member States and other data protection regulations is:

CS - Chromatographie Service GmbH
represented by the Chief Executive Officers (CEO), Mr. Marcel Römer and Mr. Sven Römer
Am Parir 27
52379 Langerwehe
Germany
Telephone: 0049/2423/40493-0
Telefax: 0049/2423/40493-49
E-Mail: info@cs-chromatographie.de
Website: www.cs-chromatographie.de


II. Data Protection Officer's Name and Address

The controller's data protection officer is:

CS - Chromatographie Service GmbH
Mr. Spelthahn
Am Parir 27
52379 Langerwehe
Germany
Telefon: 0049/2423/40493-0
Telefax: 0049/2423/40493-49
E-Mail: datenschutz@cs-chromatographie.de
Website: www.cs-chromatographie.de


III. General Data Processing Information

1. Scope of Personal Data Processing

We only collect and use personal data of our users to the extent required for providing a functional website and our contents and services. Personal data of our users is only collected or used with the user's consent. Exceptions only apply in cases where obtaining consent is not possible for factual reasons and data processing is permitted by law.

2. Legal Basis for Processing Personal Data

If we obtain the data subject's consent for the processing of personal data, Art. 6(1) Letter a of the EU General Data Protection Regulation (GDPR) will serve as the legal basis. When processing personal data is required for performance of a contract to which the data subject is a party, Art. 6(1) Letter b of the General Data Protection Regulation will serve as the legal basis. This also applies to processing required for the performance of pre-contractual measures. If processing of personal data is required for the fulfillment of a legal obligation to which our company is subject, Art. 6(1) Letter c of the General Data Protection Regulation will serve as the legal basis. If vital interests of the data subject or of another natural person necessitate processing of personal data, Art. 6(1) Letter d of the General Data Protection Regulation will serve as the legal basis. If processing is required for safeguarding legitimate interests of our company or of a third party and if the interests, basic rights and basic freedoms of the data subject do not override our legitimate interests, Art. 6(1) Letter f of the General Data Protection Regulation will serve as the legal basis for the processing.

3. Data Deletion and Storage Duration

Personal data of the data subject will be deleted or blocked when the purpose for its storage ceases to apply. Personal data may also be saved if required by EU or national legislatures in EU-law ordinances, laws or other regulations to which the controller is subject. The data will also be blocked or deleted if a storage period specified by the stated regulations expires, unless the data must be saved for contract conclusion or contract performance.


IV. Providing the Website and Creating Log Files

1. Data Processing Description and Scope

When visiting our website, our system automatically collects data and information from the computer system of the accessing computer. The following data is collected thereby:

  • Information on the browser type and version used.
  • The user's operating system.
  • The user's Internet service provider.
  • The user's IP address.
  • Time and date of access.
  • Websites from which the user's system reached our website.

This data is also saved in our system's log files. This data is not saved with other personal data of the user.

2. Legal Basis for Data Processing

The legal basis for the temporary storage of this data is Art. 6(1) Letter f of the General Data Protection Regulation.

3. Data Processing Purpose

Temporary storage of IP addresses by the system is required for displaying the website on the user's computer. For this, the user's IP address must be saved for the duration of the session. Log files are used for saving to ensure the functionality of the website. In addition, this data is used to optimize our website and to ensure the security of our IT systems. This data is not analyzed for marketing purposes.

Our legitimate interest in data processing Art. 6(1) Letter f of the General Data Protection Regulation is also based on these purposes.

4. Storage Duration

The data will be deleted when it is no longer required for the achievement of the purposes for which it was collected. If data is collected for providing our website, this applies when the respective session ends. If data is saved in log files, this will apply after seven days at the latest. Further storage is possible. In such cases, the user's IP address will be deleted or distorted to prevent it from being assigned to the accessing client.

5. Objection and Removal Rights

The collection of data for providing our website and saving the data in log files is necessary for operating our website. Therefore, users have no objection rights.


V. Use of Cookies

a) Data Processing Description and Scope

Our website uses cookies. Cookies are text files saved in the user's Internet browser or on the user's computer system by his Internet browser. If a user opens a website, a cookie may be installed on the user's operating system. This cookie will include a character sequence that enables the user's browser to be identified when visiting our website again. We use cookies to make our website more user-friendly. Some elements of our website may require the accessing browser to be identified after a new page is opened. Cookies save and transmit the following data:

  • Session IDs, shopping cart items, log-in information, language settings and search terms are saved by the server.

b) Legal Basis for Data Processing

The legal basis for processing personal data when using cookies is Art. 6(1) Letter f of the General Data Protection Regulation.

c) Data Processing Purposes

Technically required cookies serve the purpose of making our websites easier to use for our users. Certain functions of our website cannot be offered without cookies. These functions require a user's browser to be recognized when opening a new page. The following applications require cookies:

  • Session IDs, shopping cart items, log-in information, language settings and search terms are saved by the server.

User data collected by technically required cookies is not used to create user profiles. Our legitimate interests in the processing of personal data under Art. 6(1) Letter f of the General Data Protection Regulation is also based on these purposes.

d) Storage Duration, Objection and Removal Rights

Cookies are saved on the user's computer and thereby transmitted to our website. This provides you, the user, with full control over the use of cookies. You may disable or limit cookies through your Internet browser settings. Cookies that have already been saved may be deleted at any time. This may also be done automatically. However, disabling cookies for our website may prevent the use of all of its functions. Our server will delete sessions from the sessions table after 120 minutes and immediately after registered users log out.


VI. Newsletter

1. Data Processing Description and Scope

Our website allows visitors to subscribe to a free newsletter. For this, data from the input screen (required field: Email Address) is transmitted to us when subscribing. In addition, the following data is collected:

  • IP address of the accessing computer.
  • Time and date of subscription.

Your consent to the processing of your data will be obtained during the subscription process and this Privacy Policy will be noted. Your data will not be transferred to third parties for data processing for sending our newsletters. Your data will only be used to send our newsletter.

2. Legal Basis for Data Processing

The legal basis for the processing of user data after subscribing to our newsletter is the user's consent under Art. 6(1) Letter a of the General Data Protection Regulation.

3. Data Processing Purpose

The user's email address is collected to send our newsletter. Other personal data is collected during the subscription process to prevent misuse of our services or of the provided email address.

4. Storage Duration

The data will be deleted when it is no longer required for the achievement of the purposes for which it was collected. The user's email address will be saved for as long as the user's newsletter subscription is active. The other personal data collected as part of the subscription process will usually be deleted after seven days.

5. Objection and Removal Rights

The user may unsubscribe from the newsletter at any time. According links are provided in every newsletter. This also enables consent to the saving of personal data collected during the subscription process to be withdrawn.


VII. Registration

1. Data Processing Description and Scope

Our website allows users to register by providing personal data. This data must be entered into an input screen (required fields: Company Name, Last Name, Street, City, Telephone, Email) and transmitted to us and saved. This data will not be transferred to third parties. In addition, the following data will be saved during the registration process:

  • The user's IP address.
  • Time and date of registration.

The user's consent to the processing of this data will be obtained during the registration process.

2. Legal Basis for Data Processing

If we obtain the data subject's consent for the processing of personal data, Art. 6(1) Letter a of the EU General Data Protection Regulation (GDPR) will serve as the legal basis. If registration data is required for performance of a contract to which the data subject is a party, Art. 6(1) Letter b of the General Data Protection Regulation will serve as an additional legal basis.

3. Data Processing Purpose

User registration is required for the performance of a contract or pre-contractual measures to execute the order process or offer, handle inquiries correctly and to simplify repeat orders.

4. Storage Duration

The data will be deleted when it is no longer required for the achievement of the purposes for which it was collected. This is the case for data collected during the registration process for the performance of a contract or pre-contractual measures if the data is no longer required for the performance of the contract. Even after contract conclusion, the contract partner's personal data may have to be saved to fulfill contractual or legal obligations. Continuing obligations require personal data to be saved for the duration of the contract. In addition, guarantee periods and the storage of data for tax purposes must be observed. Which storage durations apply cannot be generally stated and must be determined separately for every contract and contract party.

5. Objection and Removal Rights

Users to have the right to cancel their registration at any time. Users may have the data saved on them changed at any time. In both cases, contacting us in text form will suffice. You may write us, send us a fax or contact us by email. Our contact details can be found in Point 1 of this Privacy Policy. If data is required for the performance of a contract or pre-contractual measures, the data may only be deleted prematurely if its deletion is not prevented by contractual or legal requirements.


VIII. Contact Forms and Contacting Us by Email

1. Data Processing Description and Scope

Our website provides contact forms that may be used to contact us electronically. If a user does so, the data entered into the input screen will be transmitted to us and saved. This data is:

https://www.cs-chromatographie.de/index.html?page=KONTAKTFORMULAR,
and forms based on it for specific purposes, e.g. event registration:

  • Required fields: Name, Email Address.
  • Optional fields: Company, Department, Customer Number, Street, ZIP City, Telephone, Fax and any other stated fields.

https://www.cs-chromatographie.de/index.html?page=KREDITKARTE:

  • Required fields: First and Last Name, Street, ZIP City, Email, Payment Information and Credit Card Details.
  • Optional fields: Company/Institute, Department, Customer Number.

In addition, when sending us a message, the following data will be saved:

  • The user's IP address.
  • Time and date of registration.

Your consent to the processing of your data will be obtained as part of the sending process and this Privacy Policy will be noted. Alternatively, you may contact us through the email address provided. In such cases, the user's personal data transmitted with the email will be saved. Data will not be transferred to third parties thereby. This data will only be used to process the conversation.

2. Legal Basis for Data Processing

If the user provides his consent, the legal basis for the processing of his data is Art. 6(1) Letter a of the General Data Protection Regulation. The legal basis for processing data transmitted as part of an email is Art. 6(1) Letter f of the General Data Protection Regulation. If we are contacted for the purpose of contract conclusion, the legal basis for processing will be Art. 6(1) Letter b of the General Data Protection Regulation.

3. Data Processing Purpose

We only process personal data obtained from input screens to handle the respective matter. If we are contacted by email, this will also represent our legitimate interest in the processing of the respective data. Other data processed during the sending process is used to prevent misuse of the contact forms and to ensure the security of our IT systems.

4. Storage Duration

The data will be deleted when it is no longer required for the achievement of the purposes for which it was collected. This is the case for personal data transmitted through the input screens or by email when the respective conversation with the user ends. A conversation ends when the circumstances make clear that the respective matter has been conclusively settled. Additional personal data collected through the sending process will be deleted after seven days at the latest.

5. Objection and Removal Rights

The user may withdraw his consent to the processing of his personal data at any time. If the user contacts us by email, he may object to the storage of his personal data at any time. In such cases, conversations may not be continued. In both cases, contacting us in text form will suffice. You may write us, send us a fax or contact us by email. Our contact details can be found in Point 1 of this Privacy Policy. In such cases, any personal data saved when contacting us will be deleted.


IX. Data Subject's Rights

If personal data concerning you is processed, you are the data subject in the sense of the General Data Protection Regulation and you will be entitled to the following rights:

1. Right to Access

You may obtain confirmation from the controller about whether we process personal data concerning you. In case of such processing, you may obtain the following information from the controller:

  • The purposes for which personal data is processed.
  • The categories of personal data being processed.
  • The recipients or categories of recipients to whom personal data concerning you was or will be disclosed.
  • The planned storage duration for personal data concerning you or, if specific information on this cannot be provided, the criteria for determining storage durations.
  • The existence of a right to rectification or erasure of personal data concerning you, a right to processing restriction by the controller or a right to object to this processing.
  • The existence of a right to lodge complaints to supervisory authorities.
  • Any available information on the source of the data if the data is not collected from the data subject.
  • The presence of any automated decision-making processes, including profiling, under Art. 22(1 & 4) of the General Data Protection Regulation and—at least in these cases—meaningful information on the logic involved and the significance and the envisaged consequences of such processing for the data subject.

You have the right to obtain information about whether personal data concerning you is transmitted to a third country or to an international organization. You may also obtain notification about such transfers through the guarantees under Art. 46 of the General Data Protection Regulation.

2. Right to Rectification

You may obtain rectification and/or completion from the controller if processed personal data concerning you is inaccurate or incomplete. The controller must perform rectification without delay.

3. Right to Processing Restriction

Under the following conditions, you may obtain processing restrictions for personal data concerning you:

  • If you contest the accuracy of personal data concerning you for a duration that allows the controller to review your personal data.
  • Processing is unlawful and you reject the erasure of your personal data and instead demand usage restrictions for your personal data.
  • The controller no longer requires the personal data for its processing purposes, but you need this data for the establishment, exercise or defense of legal claims.
  • If you object to the processing in accordance with Art. 21(1) of the General Data Protection Regulation and whether the legitimate interests of the controller override your reasons has not yet been determined.

If the processing of personal data concerning you is restricted, this data may—apart from its storage—only be processed with your consent or for the establishment, exercise or defense of legal claims or to safeguard the rights of another natural or legal person or for reasons that lie in the public interest of the European Union or one of its Member States. If processing is restricted under one of the above-stated requirements, the controller will notify you before the restriction is lifted.

4. Right to Erasure

a) Erasure Obligations

You may obtain from the controller erasure without delay of personal data concerning you in which case the controller must erase this data without delay if one of the following applies:

  • The personal data concerning you is no longer required for the purposes for which it was collected or otherwise processed.
  • You withdraw your consent on which the processing was based under Art. 6(1) Letter a or Art. 9(2) Letter a of the General Data Protection Regulation and there is no other legal basis for processing.
  • You object to the processing in accordance with Art. 21(1) of the General Data Protection Regulation and there are no overriding legitimate reasons for the processing or you object to the processing in accordance with Art. 21(2) of the General Data Protection Regulation.
  • Personal data concerning you is processed unlawfully.
  • The erasure of the personal data concerning you is required for the fulfillment of a legal obligation under EU law or the law of an EU Member State to which the controller is subject.
  • The personal data concerning you was collected for services offered by the information society in accordance with Art. 8(1) of the General Data Protection Regulation.

b) Information to Third Parties

If the controller publicized the personal data concerning you and if he is required to erase your data under Art. 17(1) of the General Data Protection Regulation, the controller must take suitable, including technical, measures in consideration of available technologies and implementation costs to inform the data processing controllers that, as the data subject, you demanded the removal of any links to and of copies or replicas of your personal data.

c) Exceptions

The right to erasure does not apply if processing is required for

  • Exercising the right to freedom of speech and information.
  • Fulfilling a legal obligation required for processing under EU law or the law of an EU Member State to which the controller is subject or carrying out a task in the public interest or in exercise of official authority vested in the controller.
  • Reasons in the public interest regarding health under Art. 9(2) Letters h & i and Art. 9(3) of the General Data Protection Regulation.
  • Archiving purposes in the public interest, scientific or historical research purposes or statistical purposes under Art. 89(1) of the General Data Protection Regulation if the conditions and safeguards under Letter a are likely to render impossible or seriously impair the achievement of the objectives of the processing.
  • The establishment, exercise or defense of legal claims.

5. Right to Information

If you asserted your right to rectification, erasure or processing limitation against the controller, the controller must notify all recipients to whom you disclosed the respective personal data about the rectification, erasure or processing restriction of your data, unless doing so proves to be impossible or requires unreasonable expenditure. You have the right to be informed about these recipients by the controller.

6. Right to Data Portability

You have the right to receive, in a structured, commonly used and machine-readable format, the personal data concerning you that you provided to the controller. Furthermore, you have the right transmit this data to other controllers without hindrance from the controller to who you provided the personal data if

  • The processing is based on consent in accordance with Art. 6(1) Letter a of the General Data Protection Regulation or Art. 9(2) Letter a of the General Data Protection Regulation or on a contract in accordance with Art. 6(1) Letter b of the General Data Protection Regulation.
  • The processing is performed using automated means.

In addition, when exercising this right, you have the right to have the personal data transmitted directly from one controller to another where technically feasible. Freedoms and rights of other persons may not be impaired thereby. The right to data portability does not apply to processing required for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

7. Right to Object

You have the right, at any time and on grounds relating to your particular situation, to object to the processing of personal data concerning you performed under Art. 6(1) Letters e or f of the General Data Protection Regulation. This also applies to profiling-based provisions. The controller may no longer process the personal data, unless the controller demonstrates compelling legitimate grounds for the processing which override your interests, rights and freedoms or if the processing serves the establishment, exercise or defense of legal claims. If the respective personal data concerning you is processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing. If you object to processing for direct marketing purposes, the personal data concerning you may no longer be processed for such purposes. In the context of the use of information society services—and notwithstanding Directive 2002/58/EC—you may exercise your right to object through automated means using technical specifications.

8. Right to Withdraw Consent to Declarations of Consent Made Under Data Protection Law

You have the right to withdraw your declarations of consent made under data protection law at any time. However, withdrawal will not affect the legitimacy of processing performed on the basis of your consent prior to its withdrawal.

9. Individual Cases of Automated Decision-Making, Including Profiling

You have the right to not be subjected to decision-making based exclusively on automated processing—including profiling—that is legally binding to you or significantly impairs you otherwise. This does not apply if the decision

  • Is required for the conclusion or performance of a contract between you and the controller.
  • Is permissible under EU law or the law of an EU Member State to which the controller is subject and if these legal regulations contain adequate measures for safeguarding your rights, freedoms and legitimate interests.
  • Is made with your express consent.

However, these decisions may not be based on special categories of personal data under Art. 9(1) of the General Data Protection Regulation unless Art. 9(2) Letters a or g of the General Data Protection Regulation apply and adequate measures for safeguarding your rights, freedoms and legitimate interests are implemented. For the stated cases, the controller must take adequate measures to safeguard your rights, freedoms and legitimate interests which must include the right to obtain human intervention by the controller, to express one's own view and to challenge the decision.

10. Right to Lodge Complaints to Supervisory Authorities

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint to a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement, if you consider the processing of personal data relating to you to infringe on the General Data Protection Regulation. The supervisory authority to whom the complaint is lodged will inform the complainant on the progress and the outcome of the complaint, including the possibility of a judicial remedy in accordance with Art. 78 of the General Data Protection Regulation.



Created by Lawyer Volker Weingran, www.westanwaelte.de.








© 1996-2019 CS - Chromatographie Service GmbH