Privacy Policy
As the operators of this website, we take the protection of your personal data very seriously and treat it accordingly.
confidential and in accordance with current legal data protection regulations and this privacy policy.
In accordance with Article 13 of the EU General Data Protection Regulation (EU-GDPR), we hereby inform you about the processing of your personal data.
Your personal data (hereinafter referred to as "data").
1. Definition of terms
The following privacy policy is based on the terms defined by the European Directive and
The legislator used the following terms when enacting the EU GDPR. To ensure easy readability and comprehensibility,
To ensure clarity, we would like to explain the terminology used beforehand.
In this privacy policy, we use, among other things, the following terms:
a) personal data
Personal data is any information relating to an identified or identifiable natural person (in the context of data protection).
The following refers to the “data subject”. An identifiable natural person is one who, directly or indirectly,
in particular by assigning it to an identifier such as a name, an identification number, location data, to a
online identifier or to one or more special characteristics that express the physical, physiological,
genetic, psychological, economic, cultural or social identity of this natural person are identified
can be.
b) affected person (user)
A data subject is any identified or identifiable natural person whose personal data is processed by the controller.
The data controllers are responsible for processing.
c) Processing
Processing means any operation or set of operations which is performed with or without the aid of automated means.
Connection with personal data such as collection, recording, organization, structuring, the
Storage, adaptation or modification, retrieval, querying, use, disclosure by
Transmission, dissemination or any other form of making available, matching or linking, which
Restriction, deletion, or destruction.
d) Restriction of processing
Restriction of processing is the marking of stored personal data with the aim of limiting its future processing.
to restrict processing.
e) Profiling
Profiling is any type of automated processing of personal data that consists of...
personal data may be used to identify certain personal aspects relating to a natural person
to relate to, evaluate, in particular to aspects relating to work performance, economic situation, health,
personal preferences, interests, reliability, behavior, place of residence or changes of residence of this natural person
to analyze or predict.
f) Pseudonymization
Pseudonymization is the processing of personal data in a manner that makes the personal data virtually unidentifiable.
Data can no longer be attributed to a specific data subject without the use of additional information.
can, provided that this additional information is stored separately and technical and organizational
Measures are subject to ensure that personal data is not shared with an identified or
be assigned to an identifiable natural person.
g) Controller or data controller
The controller or data controller is the natural or legal person, public authority, agency
or other body which, alone or jointly with others, determines the purposes and means of the processing of
personal data is decided. Are the purposes and means of this processing governed by Union law or the
As stipulated by the law of the Member States, the responsible party or the specific criteria may
his designation is provided for under Union law or the law of the Member States.
h) Data processors
A data processor is a natural or legal person, public authority, agency or other body that
personal data is processed on behalf of the controller.
i) Recipient
The recipient is a natural or legal person, public authority, agency or other body to whom personal data is processed.
Data will be disclosed, regardless of whether the data subject is a third party or not. Authorities that are in
within the framework of a specific investigation mandate under Union law or the law of the Member States
They may receive personal data, but are not considered recipients.
j) Third
A third party is a natural or legal person, authority, agency or body other than the data subject.
the controller, the processor and the persons who are under the direct responsibility of the
The controller or the processor is authorized to process the personal data.
k) Consent
Consent is any freely given, specific, informed and unambiguous indication of the data subject's wishes by which he or she, by a statement or by a clear affirmative action, is given by the data subject or by a third party, except where such information is provided or otherwise obtained.
unambiguously expressed intention in the form of a declaration or other unambiguous affirmative statement
Action by which the data subject indicates that they consent to the processing of their personal data.
agrees to the personal data.
2. Data Controller
PQR Service GmbH
Lungwitzer Straße 81
09356 St. Egidien
Legal representative: Matthias Pochmann
Tel.: 4937204507271
E-Mail: m.pochmann@pqr-service.de
3. Data Protection Officer
Ass. jur. Dirk Sonnenfeld
Gehart-Hauptmann-Str. 1
D-08451 Crimmitschau
Tel.: 0049 160 8380835
Email: ra.sonnenfeld@pmf-automotive.de
4. General information on data processing
a) Scope of data processing
We generally only process the personal data of our users to the extent necessary for providing a
This is necessary for the proper functioning of our website and our content and services. The processing of personal data
Our users are regularly only contacted with their consent. An exception applies in cases where a
obtaining prior consent is not possible for factual reasons and the processing of data by
is permitted by legal regulations.
b) Legal basis for data processing
Insofar as we obtain the consent of the data subject for processing operations involving personal data, this serves as the basis for our actions.
Article 6 paragraph 1 letter a of the General Data Protection Regulation (EU GDPR) as the legal basis.
When processing personal data necessary for the performance of a contract to which the contracting party is a
If the data subject is involved, and processing is necessary, Article 6(1)(b) of the GDPR serves as the legal basis. This also applies to
Processing operations that are necessary for carrying out pre-contractual measures. Insofar as processing
personal data is necessary for compliance with a legal obligation to which our company is subject,
Article 6 paragraph 1 letter c of the EU GDPR serves as the legal basis.
In the event that vital interests of the data subject or another natural person are at risk,
The processing of personal data is necessary, and Article 6(1)(d) of the EU GDPR serves as the legal basis.
the processing is necessary to protect a legitimate interest of our company or a third party and
If the interests, fundamental rights and freedoms of the person concerned do not outweigh the aforementioned interest, then
Article 6 paragraph 1 letter f of the EU GDPR as the legal basis for the processing.
c) Duration of processing
We process your data only for as long as necessary to fulfill the contract, maintain our relationship, or as required by law.
required by applicable legal regulations.
Different retention periods apply to the storage of business documents. For data containing
For documents relevant under tax law, a retention period of 10 years generally applies according to the German Fiscal Code; for other documents, the retention period is longer.
Data is retained for 6 years in accordance with the provisions of the German Commercial Code.
Unless you object, we will process your data within the framework of our trusted business relationship with
to their mutual advantage.
Should you wish to have your data deleted, we will carry out the deletion immediately, provided that the deletion is possible.
This does not conflict with any legal retention obligations.
5. SSL encryption
This website uses SSL (Secure Socket Layer) encryption for the transmission of data from your browser to
our server and to servers that provide files which we embed on our website. You can recognize this.
The presence of SSL encryption is indicated by the prefix "https" before the website address.
Open in your browser.
6. Provision of the website and creation of log files
a) Description and scope of data processing
Each time our website is accessed, our system automatically collects data and information from the system of the
The following data is collected from the calling device:
Browser type and version used
User's operating system
User's Internet service provider
User's IP address
Date and time of access
Websites from which the system accessed our website
Websites accessed by the user's system via our website
The data is also stored in our system's log files. Storing this data together with
No other personal data of the user is processed.
b) Legal basis for data processing
The legal basis for the temporary storage of the data and log files is Art. 6 para. 1 lit. f GDPR.
c) Purposes of processing
The temporary storage of the IP address by the system is necessary to deliver the website to the user.
To enable access to the user's computer, the user's IP address must be stored for the duration of the session.
remain.
The data is stored in log files to ensure the website's functionality. We also use this data for...
Website optimization and ensuring the security of our IT systems. An evaluation.
The data will not be used for marketing purposes in this context.
These purposes also constitute our legitimate interest in data processing pursuant to Art. 6 para. 1 lit. f GDPR.
d) Duration of processing
The data will be deleted as soon as it is no longer needed to fulfill the purpose for which it was collected. In the case of
The collection of data for the provision of the website is the case when the respective session has ended.
In the case of data being stored in log files, this occurs after a maximum of seven days. Any further processing
Storage is possible. In this case, the users' IP addresses are deleted or anonymized so that...
It is no longer possible to assign the calling client.
e) Right to object and have the matter rectified
The collection of data for the provision of the website and the storage of data in log files is necessary for the operation of the
Website access is mandatory. Consequently, the user has no right to object.
7. Use of cookies
a) Description and scope of data processing
Our website uses cookies. Cookies are text files that are stored in the internet browser or by the website.
Internet browsers are stored on the user's computer system. When a user visits a website, a
A cookie is stored on the user's operating system. This cookie contains a characteristic
A string that allows for the unique identification of the browser when the website is visited again.
We use cookies to make our website more user-friendly. Some elements of our website require them.
This ensures that the requesting browser can be identified even after a page change. We use this on our
The website also uses cookies that allow for the analysis of users' browsing behavior.
The user data collected in this way is pseudonymized through technical measures. Therefore, a
It is no longer possible to associate the data with the requesting user. The data will not be stored together with other data.
personal data of users is stored.
b) Legal basis for data processing
The legal basis for processing personal data using cookies is Article 6(1)(f).
EU-DSGVO.
c) Purpose of processing
The purpose of using technically necessary cookies is to simplify the use of websites for users.
Some features of our website cannot be offered without the use of cookies. For these features, it is
It is necessary that the browser is recognized even after a page change. This is due to technical requirements.
User data collected via cookies is not used to create user profiles.
The use of analytics cookies is for the purpose of improving the quality of our website and its content.
Through analytics cookies, we learn how the website is used and can thus continuously optimize our offering.
These purposes also constitute our legitimate interest in processing personal data pursuant to Article 6.
Abs. 1 lit. f EU-DSGVO.
d) Duration of storage, right to object and erasure
Cookies are stored on the user's computer and transmitted from there to our site. Therefore, you
As a user, you also have full control over the use of cookies. By changing the settings in your
You can disable or restrict the transmission of cookies in your internet browser. Cookies that have already been saved
Cookies can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website,
It may no longer be possible to fully use all the functions of the website.
8. Contact form and email contact
a) Description and scope of data processing
Our website includes a contact form which can be used for electronic communication.
If a user takes advantage of this option, the data entered in the input form will be transmitted to us.
and stored. This data includes:
contact_fields
additional
In addition, the following data is collected during registration:
Date/Time
Browser
Devices
Anonymized IP addresses of visitors
Anonymized IP addresses of returning visitors
Your consent for the processing of your data will be obtained during the submission process and you will be referred to this.
Privacy policy referenced.
Alternatively, you can contact us via the provided email address. In this case, the information sent with the email will be processed.
The user's transmitted personal data is stored.
In this context, no data will be shared with third parties. The data will be used exclusively for the following purposes:
Used to process the conversation.
b) Legal basis for data processing
The legal basis for processing the data, if the user has given their consent, is Article 6(1)(a) of the EU GDPR.
The legal basis for processing data transmitted when sending an email is Article 6.
Article 1(f) of the EU GDPR. If the email contact aims at concluding a contract, an additional legal basis applies.
for processing Art. 6 para. 1 lit. b EU-GDPR.
c) Purpose of data processing
The processing of personal data from the input form serves solely for processing the
Contacting us. In the case of contact via email, this also constitutes the necessary legitimate interest.
the processing of the data.
The other personal data processed during the sending process serves to prevent misuse of the
to prevent contact forms and to ensure the security of our information technology systems.
d) Duration of storage
The data will be deleted as soon as it is no longer needed to fulfill the purpose for which it was collected. For the
personal data from the input form of the contact form and those that were sent by e-mail,
This is the case when the respective conversation with the user has ended. A conversation is considered ended when...
if it can be inferred from the circumstances that the matter in question has been conclusively resolved.
The additional personal data collected during the sending process will be deleted no later than after a certain period.
deleted within seven days.
e) Right to object and have the matter rectified
The user has the right to withdraw their consent to the processing of their personal data at any time.
If the user contacts us via email, they can object to the storage of their personal data at any time.
To disagree. In such a case, the conversation cannot be continued.
All personal data stored during the contact process will be deleted in this case.
9. Your rights as a data subject
According to the EU GDPR, you have the following rights:
a) Right to information
You can request confirmation from the data controller as to whether personal data concerning you is being processed.
processed by us.
If such processing takes place, you can request the following information from the controller:
(1) the purposes for which the personal data are processed;
(2) the categories of personal data which are processed;
(3) the recipients or categories of recipients to whom the personal data concerning you are disclosed
have been disclosed or will be disclosed;
(4) the planned duration of the storage of personal data concerning you or, if specific details
criteria for determining the storage duration are not possible here;
(5) the existence of a right to rectification or erasure of personal data concerning you, a
Right to restriction of processing by the controller or right to object to this
Processing;
(6) the existence of a right to lodge a complaint with a supervisory authority;
(7) all available information on the source of the data, if the personal data are not held by the
data collection will be carried out on the data subject concerned;
(8) the existence of automated decision-making, including profiling, pursuant to Article 22(1) and (4) of the GDPR
and – at least in these cases – meaningful information about the logic involved and the implications
and the intended effects of such processing on the data subject.
You have the right to request information about whether your personal data is being processed in a
be transferred to a third country or to an international organization. In this context, you can request that
to be informed about the appropriate safeguards pursuant to Art. 46 GDPR in connection with the transfer.
b) Right to rectification of your data
You have the right to rectification and/or completion from the data controller, provided that the
The data controller has the right to rectification of inaccurate or incomplete personal data concerning you that has been processed.
Correction must be made immediately.
c) Right to restrict the processing of your data
Under the following conditions, you can restrict the processing of your personal data.
request personal data:
(1) if you contest the accuracy of the personal data concerning you for a period of time which is necessary for the
Enables controllers to verify the accuracy of personal data;
(2) the processing is unlawful and you object to the erasure of the personal data and instead request the
request restriction of the use of personal data;
(3) the controller no longer needs the personal data for the purposes of processing, you
however, they are needed to assert, exercise or defend legal claims, or
(4) if you have objected to the processing pursuant to Article 21(1) GDPR and have not yet
It is established whether the legitimate grounds of the controller outweigh your grounds.
If the processing of your personal data has been restricted, this data may – from your
Storage except with your consent or for the establishment, exercise or defense of legal claims
legal claims or to protect the rights of another natural or legal person or for reasons of a
data are processed in the important public interest of the Union or of a Member State.
If the processing has been restricted in accordance with the aforementioned conditions, you will be notified by the
Those responsible will be informed before the restriction is lifted.
d) Right to erasure of your data
aa) Obligation to delete
You can request that the controller delete your personal data without undue delay.
The data will be deleted, and the controller is obliged to delete this data without undue delay if one of the following applies:
Reasons apply:
(1) The personal data concerning you shall be retained for the purposes for which they were collected or otherwise processed
They were processed, no longer necessary.
(2) You withdraw your consent on which the processing is based pursuant to Article 6(1)(a) or Article 9(2)(a) of the GDPR.
supported, and there is no other legal basis for the processing.
(3) You object to the processing pursuant to Article 21(1) GDPR and there are no overriding legitimate grounds.
You have legitimate grounds for the processing, or you object to the processing pursuant to Article 21(2) GDPR.
Processing.
(4) Your personal data has been processed unlawfully.
(5) The erasure of your personal data is necessary for compliance with a legal obligation under the
Union law or the law of the Member States to which the controller is subject is required.
(6) Your personal data was processed in relation to information society services offered
Collected in accordance with Article 8 Paragraph 1 of the EU GDPR.
bb) Information to third parties
If the controller has made the personal data concerning you public and is obliged to erase it pursuant to Article 17(1)
If the EU GDPR obliges him to delete them, he must take into account the available technology and the
Implementation costs include appropriate measures, including technical ones, to ensure that data controllers
to inform those who process personal data that you, as the data subject, have the right to be informed by them of the
Deletion of all links to this personal data or of copies or replications of this personal data.
They requested data.
cc) Exceptions
The right to erasure does not apply insofar as the processing is necessary.
(1) to exercise the right to freedom of expression and information;
(2) to comply with a legal obligation which requires processing under Union or Member State law,
to which the controller is subject, or for the performance of a task carried out in the public interest or
in the exercise of official authority vested in the person responsible;
(3) for reasons of public interest in the area of public health in accordance with Article 9(2)(h) and (i) and
Art. 9 Abs. 3 EU-GDVO;
(4) for archiving purposes in the public interest, scientific or historical research purposes or for
statistical purposes pursuant to Art. 89 para. 1 GDPR, insofar as the right mentioned under section a) is likely to
makes the achievement of the objectives of this processing impossible or seriously impairs it, or
(5) for the establishment, exercise or defense of legal claims.
e) Right to information
Do you have the right to rectification, erasure or restriction of processing vis-à-vis the controller?
If this claim is made, the data controller is obliged to disclose the personal data to all recipients to whom the data concerning you has been disclosed.
have been disclosed, to communicate this rectification or erasure of the data or restriction of processing, unless
because this proves impossible or involves disproportionate effort.
They have the right to be informed about these recipients by the data controller.
f) Right to data portability
You have the right to access the personal data concerning you that you have provided to the controller,
to receive this data in a structured, commonly used, and machine-readable format. Furthermore, you have the right to [access, rectify, erase, or delete this data].
to another controller without hindrance from the controller to whom the personal data have been disclosed
have been provided, to be transmitted, provided that
(1) processing is based on consent pursuant to Article 6(1)(a) GDPR or Article 9(2)(a) GDPR or on
a contract pursuant to Art. 6 para. 1 lit. b GDPR and
(2) processing is carried out using automated procedures.
In exercising this right, you also have the right to request that the personal data concerning you be deleted or erased.
directly from one controller to another controller, insofar as this is technically feasible.
The freedoms and rights of other persons must not be infringed upon.
The right to data portability does not apply to the processing of personal data necessary for the performance of a contract to which the controller is a party or in order to take steps at the request of the data subject prior to entering into a contract.
a task which is in the public interest or is carried out in the exercise of official authority which is required
was transferred to those responsible.
g) Right to object
You have the right to object, on grounds relating to your particular situation, at any time to the processing of your personal data.
You have the right to object to the processing of your personal data based on Article 6(1)(e) or (f) of the EU GDPR.
to file an objection; this also applies to profiling based on these provisions.
The controller will no longer process your personal data unless they can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms.
demonstrate legitimate grounds for the processing which override your interests, rights and freedoms, or the
Processing serves the purpose of asserting, exercising or defending legal claims.
If your personal data is processed for direct marketing purposes, you have the right to
You have the right to object at any time to the processing of your personal data for the purpose of such processing.
to engage in advertising; this also applies to profiling insofar as it is related to such direct marketing.
If you object to processing for direct marketing purposes, the personal data concerning you will be deleted.
Data will no longer be processed for these purposes.
You have the option, in connection with the use of information society services – regardless of the
Directive 2002/58/EC – to exercise your right to object by automated means where technical
Specifications are used.
h) Right to withdraw consent under data protection law
You have the right to withdraw your consent to data processing at any time. By withdrawing your consent, you agree to the following:
Consent does not affect the lawfulness of processing based on consent before its withdrawal.
i) Right to lodge a complaint with the data protection supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right to
Complaint to a supervisory authority, in particular in the Member State of your residence, place of work or
of the place of the alleged infringement, if you believe that the processing of your personal data is unlawful.
personal data is processed in violation of the EU GDPR. The supervisory authority to which the complaint was submitted
was informed of the status and results of the appeal, including the
Possibility of a judicial remedy under Article 78 GDPR
The supervisory authority responsible depends on your place of residence. You can find a list of supervisory authorities here:
https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html
This privacy policy was created by b2.legal lawyers.