Privacy Statement

Below, we inform you of what happens to your personal data when you visit our homepage or when you actively contact us, and what claims and rights under data protection law you are entitled to. Personal data comprise any data that can be used to personally identify you. For detailed information on the subject of data privacy, please refer to our Privacy Statement set out below this text.

Who is responsible for data collection and data processing?

STEMA Metalleichtbau GmbH
represented by its Managing Director Michael Jursch
Riesaer Straße 50, 01558 Großenhain
Telephone: 03522/3094-0
Fax: 03522/3094-15
Email: info@stema.de

Data protection officer required by law:
We have appointed a data protection officer for our company.
Mr Wilfried Rode
Riesaer Straße 50, 01558 Großenhain
Telephone: 03522 3094-0
Fax: 035223094-15
Email: wilfried.rode@stema.de

How do we collect your data?

On the one hand, your data are collected when you provide them to us, whether by entry in the contact form, by email, telefax or other written means or by telephone. Other data are collected by our IT systems automatically or with your consent when you visit the website.

a) Contacting us by email, telephone, telefax or other written means

If you contact us by email, telephone, telefax or other written means, your enquiry/order including all personal data resulting therefrom will be stored and processed by us for the purpose of dealing with your matter. These data are processed on the basis of Art. 6 (1) (b) GDPR, provided that your enquiry relates to the fulfilment of a contract or is necessary for taking steps prior to entering into a contract. In all other cases, processing is based on our legitimate interest in the effective processing of the enquiries addressed to us (Art. 6 (1) (f) GDPR) or on your consent (Art. 6 (1) (a) GDPR), provided that this consent has been requested. The data sent by you via contact requests remain with us until you ask us to erase them, or you withdraw your consent to their storage, or until the purpose of their storage has ceased to apply (e.g. after your matter has been dealt with). Mandatory statutory provisions - in particular statutory retention periods - remain unaffected.

b) Data protection on this website

Server log files

The provider of the sites automatically collects and stores information in so-called server log files transmitted by your browser to us automatically. This information comprises:

• browser type and version
• operating system used
• referrer URL
• host name of the accessing computer
• time of the server request
• IP address

These data are not merged with other data sources.

The collection of these data is based on Art. 6 (1) (f) GDPR. The website operator has a legitimate interest in the technically faultless display and optimisation of its website - the server log files must be recorded for this.

Cookies

Our website uses so-called "cookies". Cookies are small text files and do not cause any harm on your terminal device. They are either stored temporarily for the duration of a session (session cookies) or permanently on your terminal device (permanent cookies). Session cookies are automatically deleted when your visit ends. Permanent cookies remain stored on your terminal device until you delete them yourself or until they are automatically deleted by your web browser.

In some cases, cookies from third-party companies may also be stored on your terminal device when you enter our site (third-party cookies). These enable us or you to use certain services of the third-party company (e.g. cookies for the processing of payment services). Cookies have various functions. Many cookies are technically necessary, as certain website functions would not work without them (e.g. the shopping basket function or the display of videos). Other cookies are used to evaluate user behaviour or to display advertisements.

Cookies that are required to carry out the electronic communication process (necessary cookies) or to provide certain functions requested by you (functional cookies, e.g. for the shopping basket function) or to optimise the website (e.g. cookies for measuring the web audience) are stored on the basis of Art. 6 (1) (f) GDPR, unless another legal basis is specified. The website operator has a legitimate interest in the storage of cookies for the technically faultless and optimised provision of its services. If consent to the storage of cookies has been requested, the storage of the cookies concerned will be carried out exclusively on the basis of this consent (Art. 6 (1) (a) GDPR); the consent can be withdrawn at any time. This website uses Google Analytics, a web analysis service from Google Inc. ("Google"). Google Analytics uses so-called "cookies", which are stored on your computer and enable your use of the website to be analysed. The information generated by such cookie concerning your use of this website is ordinarily transferred to a Google server in the USA and stored there. You can set your browser to inform you about the placement of cookies and to allow cookies only on a case-by-case basis or to decline the acceptance of cookies in certain cases or generally and to automatically delete cookies when the browser is closed. You can also prevent Google from collecting the data generated by the cookie relating to your use of the website (including your IP address), and from processing these data, by downloading and installing the browser plug-in available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de. If cookies are deactivated, the functionality of this website may be restricted.

Plug-ins and tools

Google Web Fonts (local hosting)

For the uniform display of fonts, this site uses so-called Web Fonts from Google. The Google fonts are installed locally. This does not involve a connection to Google servers. Further information on Google Web Fonts can be found at https://developers.google.com/fonts/faq and in Google's privacy statement: https://policies.google.com/privacy?hl=de.

Google Maps

This website uses Google Maps to display maps and create route maps. Google Maps is operated by Google Inc. 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. By using this website, you agree to the collection, processing and use of the data collected automatically as well as the data you have entered, by Google and any of its agents or third-party providers.

Please note that we, as the provider of the site, receive no knowledge of the content of the data transferred or how Google Maps uses these data. The terms of use for Google Maps can be found under Terms of Use for Google Maps. Detailed information can be found in the privacy centre of google.de: Transparency and options https.//policies.google.com/privacy? HL=de#infochoices as well as the privacy policy https://policies.google.com/privacy?hl=de

YouTube videos

We integrate the videos from the "YouTube" platform of the provider Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Privacy statement: https://www.google.com/policies/privacy/ https://www.google.com/policies/privacy/, Opt-out: https://adssettings.google.com/authenticatet< https://adsettings.google.com/authenticatet> Please note that we, as the provider of the sites, receive no knowledge of the content of the data transferred or how YouTube uses these data.

Social plug-ins

Please note that our company is represented on social media platforms (e.g. Facebook, Instagram) with selected Internet offerings. When integrating these offerings into our website, we use so-called social plug-ins. These establish, via your browser, a direct connection to the servers of the social networks and already transfer data to the operators when the content is loaded and displayed. To make the connection of the external offerings just as convenient as it is secure, we have disabled as standard these functions of the social plug-ins. A connection to the servers of the respective social media platform is established only if you activate the displaying of social media content.

Duration of storage

We process and store personal data from you only for the period necessary for attaining the purpose of the storage, or insofar as this has been provided for by the European legislator of directives and regulations or any other legislator in laws or regulations to which the controller responsible for the processing is subject. If the purpose of the storage ceases to exist, or a storage period prescribed by the European legislator of directives or regulations or another legislator expires, the personal data will be routinely blocked or erased in accordance with the statutory provisions. We have no influence over how long your data will be stored by the operators of the social networks for their own purposes. For details of this, please turn to the social network operators directly for information.

Your rights

Where personal data from you are processed, you are the data subject within the meaning of the GDPR, and you are entitled - following successful identification - to the following rights in relation to us.

Right of access

You have the right to obtain from our company confirmation as to whether we process personal data concerning you. Where this is the case, you have the right under the GDPR to obtain from us information on a multitude of matters, such as for example

(1) the purposes for which your personal data are being processed;
(2) the categories of personal data that are being processed;
(3) the recipients, or the categories of recipients, to whom your personal data have been disclosed or are yet to be disclosed;
(4) the planned period of storage of your personal data, or, if it is not possible to provide specific information on this, criteria for determining this storage period;
(5) the existence of a right to rectification or erasure of your personal data, a right to restriction of the processing by our company, or a right to object to this processing;
(6) the existence of a right to lodge a complaint with a supervisory authority;
(7) any available information on the origin of your personal data, insofar as your personal data were not collected from you yourself;
(8) the existence of automated decision-making, including profiling, referred to in Art. 22 (1) and (4) GDPR and - at least in these cases - meaningful information about the logic involved, as well as the significance and the envisaged consequences for the data subject of such processing.

You have the right to be informed of whether the personal data concerning you will be transferred to a third country or to an international organisation. In this context, you have the right to be informed of the suitable safeguards under Art. 46 GDPR in connection with the transfer.

Right to rectification

You have a right to rectification and/or completion of your personal data, insofar as these data are inaccurate or incomplete. We shall carry out the rectification without delay.

Right to restriction of the processing

You have the right, under certain conditions, to obtain restriction of the processing of your personal data
(1) if you contest the accuracy of the personal data concerning you, for a period enabling us to verify the accuracy of the personal data;
(2) if the processing is unlawful, and you decline the erasure of your personal data and obtain instead restriction of the use of your personal data;
(3) if we no longer need your personal data for the purposes of the processing, but you need these data for asserting, exercising or defending legal claims, or
(4) if you have objected to the processing pending verification of whether the legitimate grounds of our corporate group and affiliates override those of yours.

Where the processing of your personal data has been restricted, such data will, with the exception of storage, be processed by us only with your consent or for the assertion, exercise or defence of legal claims or for the protection of the rights of another natural or legal person. Where processing has been restricted under the aforementioned conditions, we shall inform you before the restriction is lifted.

Right to erasure

You have the right to obtain from us, without delay, erasure of your personal data, and we shall then be obliged to erase these data without delay where one of the following grounds applies:
(1) your personal data are no longer needed for the purposes for which they were collected or otherwise processed;
(2) you withdraw your consent on which the processing is based in accordance with Art. 6 (1) (a) or 9 (2) (a) GDPR, and there is no other legal basis for the processing.
(3) You object to the processing in accordance with Art. 21 (1) GDPR, and there are no overriding legitimate reasons for the processing, or you object to the processing in accordance with Art. 21 (2) GDPR.
(4) The personal data concerning you have been unlawfully processed.
(5) The personal data concerning you need to be erased for compliance with a legal obligation under Union or Member State law to which the controller is subject.

Where we have made your personal data public, and we are obliged under Art. 17 (1) GDPR to erase these personal data, we shall, taking account of available technology and the cost of implementation, take reasonable steps to inform other companies that process your personal data that you have requested the erasure by such companies of any links to (and copies of) your personal data ("right to be forgotten").

The right to erasure does not apply to the extent that the processing is necessary:
(1) for the exercise of the right to freedom of expression or to information;
(2) for compliance with a legal obligation that requires processing under Union or Member State law that the controller is subject to, or for the performance of a task carried out in the public interest or in exercise of official authority vested in the controller;
(3) for reasons of public interest in the field of public health in accordance with Art. 9 (2) (h) and (i) as well as Art. 9 (3) GDPR, or
(4) for the assertion, exercise or defence of legal claims.

Right to informing of third parties by our company

If you have asserted in relation to our company your right to rectification, to erasure or to restriction of processing, we shall be obliged to communicate this data rectification or erasure, or this restriction of processing, to all recipients to whom your personal data have have disclosed, unless this proves to be impossible or would involve a disproportionate effort. You also have the right to be informed by us of these recipients.

Right to data portability

You have the right to receive in a structured, commonly used and machine-readable format the personal data concerning you that have been provided to us. Additionally, you have the right to transfer those data to another controller without hindrance from the controller to which the personal data have been provided, where
(1) the processing is based on consent in accordance with Art. 6 (1) (a) GDPR or Art. 9 (2) (a) GDPR or on a contract in accordance with Art. 6 (1) (b) GDPR, and
(2) the processing is carried out by automated means.

In exercise of this right, you also have the right to have the personal data concerning you transferred directly from one controller to another, insofar as this is technically feasible. Freedoms and rights of other persons must not be affected by this. The right to data portability does not apply to processing of personal data that is necessary for the performance of a task carried out in the public interest or in exercise of official authority vested in the controller.

Right to object to data processing in particular cases, and to object to direct marketing (Art. 21 GDPR)

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you that is based on Art. 6 (1) (e) or (f) GDPR; this also applies to profiling based on those provisions.

In such case, we shall no longer process the personal data concerning you, unless there are compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the assertion, exercise or defence of legal claims.

Where the personal data concerning you are processed for direct marketing purposes, you have the right to object at any time to the processing of the personal data concerning you for the purpose of such marketing; this also applies to profiling to the extent that profiling is related to such direct marketing. Where you object to processing for direct marketing purposes, we shall no longer process the personal data concerning you for such purposes.

Right to revoke the declaration of consent under data protection law

You have the right to revoke at any time your declaration of consent under data protection law. Withdrawing your consent will not affect the lawfulness of the processing carried out on the basis of your consent prior to withdrawal.

Right to lodge a complaint with the supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, your place of work or the place of the alleged infringement, if you consider that the processing of the personal data concerning you infringes the GDPR. The names and contact details of the relevant supervisory authorities in the European Union can be found at https://ec.europa.eu/justice/article-29/structure/dataprotection-authorities/index_en.htm

The supervisory authority with which the complaint has been lodged will inform the complainant on the progress and the outcome of the complaint, including the possibility of a judicial remedy under Art. 78 GDPR.

Newsletter

With the following information, we inform you about the content of our newsletter as well as the registration and dispatch procedure and your rights of objection. By subscribing to our newsletter, you agree to receive the newsletter and to the procedures described.

Content of the newsletter

We send newsletters only with the recipients' consent. Our newsletter contains exclusively information on our company, new products and offerings from our online shop.

Double opt-in

Registration for our newsletter takes place using a so-called double opt-in procedure. This means that, following registration, you will receive an email asking you to confirm your registration. This confirmation is necessary to prevent anyone from registering with an email address that is not theirs.

Registration data

To register for the newsletter, you need to enter your email address and your first name and surname. The provision of your first name and surname serves merely to personalise the newsletter.

Unsubscribing/Withdrawing your consent

You can unsubscribe to our newsletter, i.e. withdraw your consent, at any time. A link for unsubscribing to the newsletter can be found at the end of every newsletter.

Legal bases, General Data Protection Regulation

In accordance with the provisions of the applicable General Data Protection Regulation (GDPR), we hereby inform you that the consent to the sending of email addresses is based on Art. 6 (1) (a), 7 GDPR and Section 7 (2) no. 3 and (3) Act Against Unfair Competition (UWG). Your data will be used exclusively for sending the newsletter. We do not use these data internally for other purposes, nor do we pass on these data to third parties. Please also note that you may object at any time to the future processing of your personal data in accordance with the statutory provisions under Art. 21 GDPR. The Privacy Statement is referred to.

Contact

STEMA Metalleichtbau GmbH

Riesaer Straße 50
01558 Großenhain

+49 3522 3094-0
+49 3522 3094-15