Data Protection Declaration
Personal data as a matter of confidentiality
We appreciate your interest in our company. The protection of your privacy is paramount to us. We therefore wish to inform you in the following sections about the collection and handling of your personal data.
PASCHAL-Werk G. Maier GmbH, Kreuzbühlstr. 5, 77790 Steinach, Germany
Management: Barbara R. Vetter and Michael Stovelbaek
Phone: +49 7832 / 71-0
Fax: +49 7832 / 71 -209
Data protection officer for the company:
Marianne Lehmann, Lawyer
Anwaltskanzlei Ribstein & Ribstein
76646 Bruchsal, Germany
Phone: +49 7251 / 71 41 0
Fax: +49 7251 / 71 41 41
I. Information related to the processing of data when visiting the PASCHAL internet website
Processing of the data
The use of our website is generally possible without providing personal data. Any data we eventually collect is not used to identify you, but to ensure that you are provided with an optimal web presentation. When you visit our website, data is collected, processed and used. During this process, it might not always be possible to exclude a personal reference. The IP address must be recorded and stored (in a compacted form) to enable the pages to be displayed in your browser. Usually, an IP address is currently dynamically assigned by your provider. This address usually changes regularly, we are thus unable to establish a personal reference based on the IP address. However, it would be theoretically possible to establish a personal reference in individual cases with static IP addresses.
The following dataset is stored every time you visit our website:
- The IP address of the visiting computer (stored in a compact form)
- The visiting computer´s operating system
- The visiting computer´s browser version
- The name of the retrieved file
- The date and time of the retrieval
- The amount of transmitted data
- The referring URL
These stored data are collected and stored in anonymous form for marketing purposes, as well as to optimise the website´s user-friendly features. These data are not used to personally identify visitors, the visitor personally, even though the website operator may analyse the user´s interaction behaviour at the level of individual sessions. Your data will never be disclosed to commercial address dealers. The legal basis for the data processing for the informational use of our website is our legitimate interest in the presentation of our company to the outside world in accordance with Article 6 Section 1 Letter f) GDPR.
Isofar as personal data are collected on our pages (for example name, address or e-mail address), this occurs on a voluntary basis, for example, when you register for events, subscribe to newsletters, participate in online questionnaires, request documentation or offers or make purchases. PASCHAL only collects and uses your personal data to the extent that they are required for the implementation of the contractual relationship or for processing your inquiry. The legal bases for this are Article 6 Section 1 Letter a) GDPR in cases in which you have explicitly granted your consent, or Article 6 Section 1 Letter b) GDPR for cases of contract initiation or contract performance.
We take the opportunity to highlight the fact that data transmission via the internet (e.g. communication by email) may involve security gaps and cannot be completely protected against access by third parties.
For the implementation of our website presence, we cooperate with various service providers who are bound by our right to issue directives and whom we have contractually committed to comply with data protection regulations (order data processing). To this extent, this data processing does not require any specific consent on your behalf.
Cookies are very small text files. They store anonymised informationwhich you transmitted to us. We use “session specific” cookies: They do not permanently remain on your computer. The temporary cookie is deleted as soon as you leave our site.The compiled information enables us to analyse the usage patterns and structures on our website. Thus, we are able to continue optimising our website by improving its content or customisation and simplifying its use. We apply “permanent” cookies: They remain on your computer to simplify shopping, personalisation and registration services the next time you visit our website. For example, cookies may store your purchase selections while you continue shopping. You can manually remove “permanent” cookies (refer to the Use of Google Analytics and the Use of Piwik sections). The lifespan of permanent cookies when being used by Google Analytics is 2 years, when being used by Piwik it is 1 year).
In principle, we set the following cookies:
|PHPSESSID||Login, preferred site presentation mobile / desktop|
Use of Google Analytics
This website uses the “Google Analytics” web analysis service from Google Inc. Google Analytics uses so-called “Cookies”, text files that are saved on your computer and enable the analysis of your usage of the website. The information generated by the cookie which is related to your usage of this website is generally transmitted to a Google server in the USA and is stored there.
As a general rule, the IP addresses from within member states of the European Union or in other parties to the agreement about the European Economic Area (EEA) are previously abbreviated by Google. In exceptional cases, your full IP address may be transferred to a US server of Google. Inc. and thus initially only abbreviated in the USA. If IP anonymisation is activated on this website, your IP address will however beabbreviated beforehand by Google within member states of the European Union or in other parties to the agreement about the European Economic Area.
Google Inc. will use this information to analyse your usage of the website on behalf of PASCHAL.
You can prevent cookies from being stored by performing an appropriate setting on your browser software. However, we wish to inform you that in this case, this website´s functions may not be available to their full extent. For cases in which you merely want to prevent the processing of data by Google Inc., this can be done by clicking the mouse in the box below.
Click here to change the settings.
Use of Piwik/Matomo
Furthermore, this website also deploys Piwik/Matomo, an open source software for the statistical analysis of visitor access. Piwik/Matomo also uses so-called cookies. The information generated by the cookie related to your usage of this internet service will be stored on our server in Germany. The (abbreviated) IP address is anonymised immediately after processing and prior to its storage, so that you as a user remain anonymous to us.
Revocation of the consent
Click here to change the settings.
We would like to point out that deleting all of your cookies will result in the opt-out cookie also being deleted and it is possible that it will have to be reactived by you.
Links to other websites
Our online services contain links to the websites of other providers, in particular in the social media sector. Since we have no influence on these external providers, we clarify that we assume no responsibility for compliance with the applicable data protection regulations on these platforms and refer to the respective data protection information for further details.
On our online presence, we use social plug-ins (plug-ins) from the social network LinkedIn, operated by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland.
When you visit a page of our online presence which contains such plug-ins, they are initially de-activated. Only when you click on the button provided by LinkedIn are the plug-ins activated. This creates a connection to LinkedIn and your data is transmitted to LinkedIn.
Facebook, Twitter, Google+ and Instagram
We use social plugins (“plugins”) of the aforementioned social networks on our website.
Facebook is operated by Facebook Inc. 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”).
Twitter is operated by Twitter Inc., 1355 Market St. Suite 900, San Francisco, CA 94103, USA (“Twitter”).
Google+ is operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”).
Instagram is operated by Instagram LLC., 1601 Willow Road, Menlo Park, CA 94025, USA (“Instagram”).
In order to increase the protection of your data when visiting our website, the plugins are restricted when they are integrated into the page by using an HTML link (so-called “Shariff solution” from c`t). This integration ensures that when you access a page on our website that contains such plugins, no connection with the servers of the provider of the respective social network is established. If you click on one of the buttons, a new window opens in your browser and accesses the page of the respective service provider where you are able to press, e.g. the Like or Share button (if necessary, after entering your login data).
We receive the following data when you are active on our Facebook page: If you comment on a post on our Facebook page, this automatically triggers an email to us as the administrator of the Facebook page. We receive the following data: Name, date and time, profile picture and the comment. We also receive an email if you send us your message via Facebook messenger. Thereby we receive information on the name, date, time, profile picture as well as the message itself.
If you are active on PASCHAL’s Twitter profile (“paschalformwork”) we also receive a message from Twitter by email. We receive the following data: Name, date and time, profile picture and any messages.
If you leave a comment on our Google+ company page, Google will send us your name, profile picture as well as your comment by email.
If you are active on our Instagram account, your name, profile picture and any messages will be visible.
Our website contains at least one or several social plugins (“plugins”) of the video portal YouTube. YouTube is operated by YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066 USA. YouTube is a subsidiary of Google Inc..
When you visit our website, the integrated YouTube player establishes a connection to YouTube in order to ensure the technical transmission of a video or audio file. When you connect to YouTube, your connection data is transmitted to YouTube for the purpose of playing a video or an audio file.
If you are logged in to your YouTube account when you visit our website, YouTube can assign the visit to our website directly to your personal profile. If you do not want this, you must log out of your YouTube account before you visit our website.
II. Information on data collection and processing by PASCHAL in general:
Which parts of your data will be processed by us?
If we have received data from you, then these data will be processed by us only for the fundamental purposes for which the data were received or obtained.
Data processing for other purposes is only considered if the necessary legal regulations are present in accordance with Article 6 Section 4 GDPR. Any accompanying information requirements in accordance with Article 13 Section 3 GDPR and Article 14 Section 4 GDPR shall be observed by us in this case.
The legal basis of data processing
The legal basis for the processing of personal data is fundamentally Article 6 GDPR - insofar as there are no specific legal regulations. In particular, Article 6 includes the following legal bases for processing.
- Consent (Article 6 Section 1 Letter a) GDPR)
- Data processing for the fulfilment of contracts or for the processing of pre-contractual enquiries and for taking steps at the request of the data subject prior to entering into a contract (Article 6 Section 1 Letter b) GDPR)
- Data processing as a result of our legitimate interest after the weighing of interests has been carried out (Article 6 Section 1 Letter f) GDPR)
- Data processing for complying with a legal obligation (Article 6 Section 1 Letter c) GDPR)
Individual processing operations:
The sharing of personal data
In principle, we do not share any personal data with third parties, unless this is carried out with the consent of the data subject, or if it is necessary as a result of a contractual or legal obligation, or if it concerns the commissioning of service providers by us. In this case, the service providers will only receive access to the data to the extent that they require the data to carry out their tasks. The service providers deployed are contractually obliged not to alter the data and in particular to not use the data for their own purposes and they must comply with the relevant data protection laws.
Deletion of data and storage period
We shall process the data for as long as the data are required for the corresponding purpose. The personal data of the data subject shall be deleted or blocked when the reason for the data being stored has expired. Storage of the data may also take place if this is required as a result of legal regulations. This could for example be due to statutory storage regulations in accordance with commercial law or tax law.
If we receive your data as a result of your consent, then you have the right to revoke the consent you have granted to us at any time with future effect (see Rights of the data subject).
If our data processing is based on the weighing of interests, then you as the data subject have the right to veto the processing of your personal data taking into consideration the provisions of Article 21 GDPR (see Rights of the data subject).
Rights of the data subject
Every data subject has the following rights:
Right of access by the data subject (Article 15 GDPR))
The data subject can demand from us information about the personal data that we have processed. In particular, you have the right to demand information about the purposes of the processing, categories of processed data, categories of receivers of data, the planned duration of storage, the existence of the right to rectification, deletion, the restriction of processing or rejection, the existence of a right to lodge a complaint, the origin of your data if they were not obtained by us, and the existence of automated decision making including profiling and any possible meaningful information about its particular details.
Right to rectification (Article 16 GDPR)
The data subject shall have the right to request without undue delay the rectification or the completion of inaccurate personal data concerning him or her.
Right to erasure (Article 17 GDPR)
This contains the right to demand deletion, as long as the processing is not required for exercising the right of freedom of expression and information, for the fulfilment of a legal obligation, for reasons of public interest or for the establishment, exercise or defence of legal claims. Right to restriction of processing
Right to restriction of processing (Article 18 GDPR
The restriction of processing can be demanded in the presence of the cases that are described in Article 18 GDPR.
Right to data portability (Article 20 GDPR)
The data subject can demand to receive the personal data which he or she has provided to us in a structured, commonly used and machine-readable format or to have the data transmitted to another controller.
Right to withdraw consent (Article 7 Section 3 GDPR)
There exists the right to withdraw any consent that has previously been granted to us at any time with future effect. This will mean that we will no longer be able to continue the data processing that is based on this consent in the future.
Right to object (Article 21 GDPR)
If your personal data are processed on the basis of a legitimate interest in accordance with Article 6 Section 1 Sentence 1 Letter f) GDPR, you have the right in accordance with Article 21 GDPR to file an objection against the processing of your personal data if there are good reasons for this present that arise from your particular situation, or if the objection is made against direct advertising. In the last case, you have a general right to object which will be implemented by us without requiring information about a particular situation.
Please address your issue to the following address:
PASCHAL-Werk G. Maier GmbH
77790 Steinach, Germany
Phone: +49 7832 / 71-0
Fax: +49 7832 / 71-209
Your right to lodge a complaint
If you should have any complaints, then we would be very happy to discuss your issue with you directly. Please do not delay contacting us in this case. Furthermore, you have the right to contact the supervisory authority that is responsible for us with regards to data protection.
The State Representative for Data Protection and Freedom of Information in Baden-Württemberg
70173 Stuttgart, Germany
Phone: +49 711 / 615541-0
Fax: +49 711 / 615541-15
Up-to-dateness and alteration of this Data Protection Declaration
This Data Protection Declaration is currently valid as of February 2019. It may be necessary to alter this Data Protection Declaration due to the further development of our website and our product range, or as a result of altered legal or official guidelines.