DATA PROTECTION DECLARATION

Contact Data of Website Operator:

SDT-Technology GmbH
Gottlieb-Daimler-Straße 24
76703 Kraichtal-Münzesheim
Germany
Phone: +49 7250 331 02 38
Fax: +49 7250 331 02 39
E-mail: sdt-tec.com

Contact Data of Data Protection Officer:

Thomas Kolb LL.M., External Data Protection Officer
kolbcom GmbH
Augustaanlage 22
68165 Mannheim
Germany
Fax: 0621/121829-32
E-mail: dsb@schneider-pv.de

Welcome to our website! Protecting your data is a matter of utmost importance for us. Accordingly we would like to provide information below on how we process your personal data.

Data Categories; Data Sources

In principle, we process the personal data that is transmitted by you in connection with the use of our website or that you provide to us in the context of an inquiry, a pre-contractual legal relationship or a contractual relationship. In individual cases and insofar as this is necessary for the fulfillment of the contract, we also process personal data that has been permissibly taken from publicly accessible sources (e.g. commercial registers, debtor directories, Internet) or permissibly transmitted to us by third parties (e.g. credit agencies).

This may include technical data relating to you (IP address, browser type), personal data (name, birthday, legal representative), address data (address, e-mail address, contact person), financial data (name of account holder, IBAN, BIC), contract data (contract period, purchased services, cancellations), communication data (correspondence, e-mail correspondence), advertising data (advertising letters) and other similar categories of personal data.

General processing of visitor data

The use of our website is generally possible without providing personal data.

However, we would like to point out that access data is also collected and processed in this case.

We evaluate this information in anonymous form in order to defend against attacks and to improve our services (processing of personal data in the context of a balancing of interests in accordance with Art. 6 Para. 1 S. 1 lit. f) DSGVO) and then delete it. The data is regularly not traceable to your person and will not be merged with other data.

However, in the event of concrete indications of unlawful use, we reserve the right to evaluate the data retrospectively.

Processing of personal data after consent (Art. 6 para. 1 p. 1 lit. a) DSGVO)

We obtain consent from you in individual cases for specific purposes expressly designated in connection with the collection of data.

In these cases, data processing is carried out exclusively on the basis of your consent. It may be that the processing of your request is not possible without your consent and must therefore be made dependent on it. The data will be processed exclusively for the purpose(s) expressly stated.

You can revoke the consent you have given at any time with effect for the future. The revocation has no influence on the lawfulness of the processing until the time of revocation.

Cross-border data transfer (Art. 49 para. 1 p. 1 lit. a) DSGVO)

Insofar as personal data is transferred to a third country, we comply with the data protection requirements for this by basing the data transfer on standard contractual clauses or by obtaining your consent to this in accordance with Art. 49 (1) sentence 1 lit. a) DSGVO.

A data transfer takes place, for example, in connection with the use of Google services. Due to the use of these services, data is transferred to the United States of America.

The data transfer will only take place if you give us your consent.

The specific details of the recipient, the personal data transferred and the purpose of the data transfer can be found in the notes on the respective processing below.

Due to the data transfer, there is a risk for your personal data. In the United States of America, there is no level of data protection comparable to EU law (GDPR) and / or national regulations (e.g. BDSG) or sufficient guarantees to ensure an adequate level of data protection. Any deficits cannot be compensated for by other specific guarantees due to the U.S. legal situation. Nevertheless, depending on the service, standard contractual clauses are sometimes used in order to achieve the greatest possible protection for your data. You can find out whether standard contractual clauses are used in the explanations for the respective services.

You can revoke your consent at any time with effect for the future. The revocation has no influence on the lawfulness of the processing until the time of the revocation.

Processing of personal data for contract execution or contract initiation (Art. 6 para. 1 p. 1 lit. b) DSGVO)

If a contract is concluded with us, we use personal data insofar as this is necessary for the execution of the contract or for the implementation of pre-contractual measures. The purposes of the data processing depend on the concrete contents of the contract, which you can find in the contract documents.

If a contract already exists with us, we process your data in order to verify that you are our contractual partner as well as to properly provide the contractual service owed.

Processing of personal data in the context of a balancing of interests (Art. 6 para. 1 p. 1 lit. f) DSGVO)

We process personal data after balancing interests, insofar as this is necessary to safeguard our interests or the interests of third parties.

Examples of such purposes are:

  • Ensuring the IT security and integrity of our systems,
  • Prevention or investigation of criminal acts,
  • assertion or defense of legal claims.

Contacting

If you contact us by e-mail or telephone, we process the personal data you provide in order to respond to your inquiry. The legal basis for this is generally Art. 6 (1) p. 1 lit. b) DSGVO, but exceptionally, if there is no contractual reference, Art. 6 (1) p. 1 lit. f) DSGVO, whereby the legitimate interest lies in the proper response to your inquiry. We delete the data after the final processing of your request, unless there is a contractual or legal obligation to retain the data.

Contact form

If you send us an inquiry via our contact form, we process the data you provide based on your consent pursuant to Art. 6 para. 1 p. 1 lit. a) DSGVO in order to process your inquiry. In principle, your data will be deleted after processing the request, unless there is a contractual or legal obligation to retain it. If you provide us with contractually relevant information, we will transfer it to our inventory system.

You can revoke your consent at any time with effect for the future using any of the contact details provided.

Order

When an order is placed via our website, we require the personal data necessary to process the order in order to conclude the contract. The legal basis for data processing is Art. 6 para. 1 p. 1 lit. a) DSGVO as well as Art. 6 para. 1 p. 1 lit. b) DSGVO, as these are pre-contractual measures.

Insofar as a contract is concluded with us, further data processing is based on Art. 6 para. 1 p. 1 lit. b) DSGVO.

Our General Terms and Conditions can be found at:

https://sdt-tec.com/us/tac_us

If you contact us within the framework of an existing contractual relationship for a purpose that is necessary for the execution of the contract, we also process this data on the basis of Art. 6 para. 1 sentence 1 lit. b) DSGVO.

Customer account

You have the option of voluntarily opening a customer account, through which your data will be stored within the framework of the contractual relationship with us. The data processing is based on your consent according to Art. 6 para. 1 p. 1 lit. a) DSGVO. When registering, the data entered will be stored revocably. You can delete the data you entered as well as the entire account at any time. This does not apply to those data that are absolutely necessary for the implementation of the contractual relationship underlying the customer account.

In part, we process in the customer account such data that you have provided to us upon conclusion of the contract or in the course of the execution of the contract by adding, supplementing and evaluating them to your customer account.

Use of cookies

Various cookies may be used during your visit to our website. These are text files that are placed on your computer and, among other things, enable a smooth visit to our website.

In some cases, cookies are necessary to ensure the functionality or IT security of our website. The use of such function cookies is based on a legitimate interest in enabling the use of our website incl. its functions according to Art. 6 para. 1 p. 1 lit. f) DSGVO.

We may use other - unnecessary - cookies on the basis of Art. 6 para. 1 p. 1 lit. a) DSGVO and thus on the basis of your consent. The purposes of the cookies used in each case may include:

  • The enabling of the use of special functions,
  • The (pseudonymized) analysis of user behavior in order to optimize our website,
  • Increasing the attractiveness and user comfort of our website,
  • improvement and needs-based design of our offer,

The use of cookies that are not necessary is carried out within the framework of so-called usage profiles. You will be assigned a pseudonym under which the usage data will be stored. Your IP address is stored exclusively in shortened form, so that a personal assignment of the usage profile is basically no longer possible.

If we use cookies, especially for the purpose of (re-)marketing or the implementation of (social media) plugins, we base this use on your free consent to such data processing and require your consent in this respect. With regard to the individual plugins or tracking tools, we refer to the following detailed explanations.

Most of the cookies we use are deleted from your computer after you close the browser (session cookies). Other types of cookies may remain on your computer and enable us to recognize your computer the next time you visit our site by means of the user profile created (permanent cookies).

Cookies are used on our site exclusively by us and not by third parties, with the exception of third-party cookies, which are explicitly mentioned in this privacy policy.

You can declare your consent by confirming our cookie banner when you visit our website. Once you have given your consent, you can revoke it at any time with effect for the future.

We use the following cookies:

CookiePurposeStorage duration
SdwccCookie consent1 year
SdwsessionWebsite operation2 hours

Data transfer

Data is passed on to the following affiliated companies for the purpose of contract processing:

SDT-Technology GmbH, Gottlieb-Daimler-Straße 24, 76703 Kraichtal-Münzesheim.

The data transfer takes place in each case within the framework of a contract for order processing, which ensures compliance with all data protection requirements.

We pass on data to other third parties if and to the extent that we have delegated the performance of tasks to them. Data is only passed on insofar as this is necessary for the performance of the assigned tasks.

We work together with the following companies:

  • Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Furthermore, service providers may be entrusted with tasks in the following areas, for example:

  • IT maintenance
  • IT development
  • IT deployment
  • Lawyers

The transfer of data always takes place on the basis of a legal standard or a suitable contract in accordance with Art. 26 or 28 DSGVO, which ensures compliance with all data protection requirements.

Otherwise, data will only be disclosed in the cases provided for by law, for example in the case of a legal obligation to provide information to law enforcement authorities. In these cases, the data transfer is legitimized according to Art. 6 para. 1 p. 1 lit. c) DSGVO.

Data transfer to a third country

Data transfer to a third country is intended. This transfer will take place on the basis of your consent. Recipients of the data provided by you are the following companies:

  • Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

If data is transferred to a third country on the basis of consent without an adequacy decision or other suitable guarantees being in place at the same time, reference must be made to the associated increased risk of data processing in the context of the transfer on the basis of Article 49 (1) sentence 1 a) DSGVO. However, we would like to assure you that thanks to careful selection and constant review of the standards of our contractual partners, potential risks are successfully minimized.

Duration of data storage

Your personal data will be deleted by us immediately as soon as the data is no longer required for the fulfillment of contractual and legal obligations or for the exercise of our legitimate interests.

In the case of a contractual relationship, personal data is stored at least for as long as is necessary for the fulfillment of contractual obligations and the exercise of contractual rights. This period may extend beyond the actual contractual period, as the data may still be relevant after the end of the contract within the framework of the limitation periods. In addition, deletion can only take place once any retention periods under tax and commercial law have expired.

The criteria for the duration of the storage of cookies can be found in the corresponding section.

Data subject rights

As a person affected by the processing of personal data, you have the following rights:

You have the right to request confirmation as to whether personal data is being processed. If this is the case, you have a right to information about the personal data involved and to the information listed in detail in Article 15 of the GDPR.

You have the right to demand that the controller immediately rectify any inaccurate personal data concerning you and, if necessary, complete any incomplete personal data (Art. 16 GDPR).

You have the right to demand from the controller that personal data concerning you be deleted without undue delay, provided that one of the reasons listed in detail in paragraph 17 of the GDPR applies, e.g. if the data is no longer required for the purposes pursued (right to erasure).

You have the right to request the controller to restrict processing if one of the conditions listed in Art. 18 DSGVO applies, e.g. if you have objected to the processing, for the duration of the controller's review.

You have the right to receive the personal data concerning you that you have provided to us in a structured, common and machine-readable format, and you have the right to transfer this data to another controller without hindrance from us, provided that the processing of this data is based on your consent or on a contract and the processing is carried out with the aid of automated processes (Art. 20 DSGVO). When exercising the right to data portability, you have the right to obtain that the personal data be transferred directly from us to another controller, insofar as this is technically feasible (right to data portability).

You have the right to object to the processing of personal data concerning you at any time on grounds relating to your particular situation. The controller will then no longer process the personal data unless it can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the purpose of asserting, exercising or defending legal claims (Art. 21 DSGVO).

Regarding the exercise of your rights, you can contact us at any time via the contact options offered on our website.

Right to object to direct advertising

In individual cases, we process personal data in order to conduct direct advertising. In this case, you have the right to object at any time to the processing of personal data concerning you for the purpose of such advertising (Article 21 DSGVO).

If you object to the processing for direct marketing purposes, the personal data will no longer be processed for these purposes.

The objection can be made form-free at any time via one of the contact options provided in this privacy policy or in our imprint.

Right of appeal

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority if you believe that the processing of personal data concerning you violates the GDPR (Article 77 GDPR). You can assert this right at a supervisory authority in the member state of your residence, your place of work or the place of the alleged infringement. In Baden-Württemberg, the competent supervisory authority is the State Data Protection Commissioner of Baden-Württemberg.

For more information, please visit the website of the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg at the following link:

https://www.baden-wuerttemberg.datenschutz.de/

Of course, you can also contact us directly if you are dissatisfied or have questions about data protection. The quickest way to reach our responsible contact person on the subject of data protection is to use the following contact details:

Thomas Kolb LL.M., external data protection officer
kolbcom GmbH
Augustaanlage 22
68165 Mannheim
Germany
Fax: 0621/121829-32
E-mail: dsb@schneider-pv.de

Obligation to provide data

In principle, there is no obligation to provide data. However, the provision of data may be necessary for the use of certain functions or for the conclusion of a contract. If you do not provide the required data, you will not be able to use certain functions or services or a contract cannot be concluded.