Responsible body for processing according to GDPR

The person responsible within the meaning of the General Data Protection Regulation and other data protection laws applicable in the member states of the European Union and other provisions of a data protection nature is:

​

arv GmbH
Owenerstrasse 4
D-72660 Beuren
Phone +49 (0) 7025 / 840300
INFO@ARV-SYSTEME.DE

 

Data collection and data processing

Unless otherwise stated in the following sections, no personal data is collected, processed or used when using our website. However, we learn certain technical information about the use of analysis and tracking tools based on the data transmitted by your browser (e.g. browser type/version, operating system used, websites visited by us including length of stay, previously visited website). We only evaluate this information for statistical purposes. The following data can be recorded in the "log files" of the server: browser type and version used, user's operating system, user's IP address, user's service provider, date and time of access to the website, websites from which the user accessed accesses our site, as well as websites that the user visits from our site (links).

Use of cookies

The website of the arv GmbH uses cookies. Cookies are data that are stored by the Internet browser on the user's computer system. The cookies can be transmitted to a page when it is called up and thus enable the user to be assigned. Cookies help to simplify the use of websites for users.

It is possible to object to the setting of cookies at any time by changing the settings in the Internet browser accordingly. Cookies that have been set can be deleted. We would like to point out that if cookies are deactivated, not all functions of our website can be used to their full extent. The user data collected in this way is pseudonymized by technical precautions. It is therefore no longer possible to assign the data to the calling user. The data is not stored together with other personal data of the user.

When accessing our website, users are informed by an information banner about the use of cookies for analysis purposes and are referred to this data protection declaration. In this context, there is also a reference to how the storage of cookies can be prevented in the browser settings.

The legal basis for the processing of personal data using technically necessary cookies is Article 6 Paragraph 1 Letter f) GDPR. The legal basis for the processing of personal data using cookies for analysis purposes is Article 6(1)(a) GDPR if the user has given their consent.

processing of personal data

If we obtain the consent of the person concerned for the processing of personal data, Article 6 Paragraph 1 lit. a) of the EU General Data Protection Regulation (GDPR) serves as the legal basis for the processing of personal data.

Article 6 (1) (b) GDPR serves as the legal basis for the processing of personal data required to fulfill a contract to which the data subject is a party. This also applies to processing operations that are necessary to carry out pre-contractual measures.

If processing of personal data is required to fulfill a legal obligation to which the person responsible is subject, Article 6 (1) (c) GDPR serves as the legal basis.

In the event that the vital interests of the data subject or another natural person require the processing of personal data, Article 6 (1) (d) GDPR serves as the legal basis.

If the processing is necessary to protect our legitimate interests or those of a third party and if the interests, fundamental rights and fundamental freedoms of the data subject do not outweigh the former interest, Art. 6 (1) lit. f) GDPR serves as the legal basis for the processing.

Contact form and contact

The arv GmbH website contains a contact form which can be used to contact you electronically. Alternatively, it is possible to contact us via the email address provided, telephone numbers or fax. If the data subject contacts the person responsible via one of these channels, the personal data transmitted by the data subject will be automatically saved. The storage serves solely for the purposes of processing or contacting the person concerned. A transfer of data to third parties does not take place. The legal basis for processing the data is Article 6 (1) (a) GDPR if the user has given his consent.

The legal basis for the processing of data that is transmitted in the course of sending an e-mail is Article 6 (1) (f) GDPR. If the e-mail contact is aimed at concluding a contract, the additional legal basis for processing is Art. 6 (1) (b) GDPR.

The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. For the personal data from the input mask of the contact form and those sent by e-mail, this is the case when the respective conversation with the user has ended. The conversation is over when it can be inferred from the circumstances that the facts in question have been finally clarified.

The person responsible processes and stores personal data of the person concerned only for as long as this is necessary to achieve the purpose of storage. Storage can also take place if this has been provided for by the European or national legislator in EU regulations, laws or other regulations to which the person responsible for processing is subject.

As soon as the storage purpose no longer applies or a storage period prescribed by the regulations mentioned expires, the personal data will be blocked or deleted as a matter of routine.

rights of the user

If your personal data is processed, you are a data subject within the meaning of the GDPR and you are entitled to the following rights vis-à-vis the person responsible.

1. 1. Information

You can request confirmation from the person responsible as to whether personal data relating to you is being processed by us.

If such processing is present, you can request information from the person responsible for the following information:

- the purposes for which the personal data are processed;

- the categories of personal data being processed;

- the recipients or categories of recipients to whom your personal data has been or will be disclosed;

- the planned duration of the storage of your personal data or, if specific information on this is not possible, criteria for determining the storage duration;

- the existence of a right to rectification or erasure of your personal data, a right to restriction of processing by the controller or a right to object to such processing;

- the existence of a right of appeal to a supervisory authority;

-all available information about the origin of the data, if the personal data are not collected from the data subject;

- the existence of automated decision-making including profiling in accordance with Art. 22 Para. 1 and 4 GDPR and - at least in these cases - meaningful information about the logic involved and the scope and intended effects of such processing for the data subject.

You have the right to request information as to whether your personal data is being transmitted to a third country or to an international organization. In this context, you can request to be informed of the appropriate guarantees pursuant to Art. 46 GDPR in connection with the transmission.

2. Correction

You have a right to correction and/or completion to the person responsible if the processed personal data concerning you is incorrect or incomplete. The person responsible must make the correction immediately.

3. Restriction

You can request that the processing of your personal data be restricted under the following conditions:

-if you dispute the accuracy of your personal data for a period of time that enables the controller to verify the accuracy of the personal data;

- the processing is unlawful and you refuse to delete the personal data and instead request that the use of the personal data be restricted;

- the person responsible no longer needs the personal data for the purposes of processing, but you need them to assert, exercise or defend legal claims, or

- if you have lodged an objection to the processing pursuant to Art. 21 Para. 1 GDPR and it has not yet been determined whether the legitimate reasons of the person responsible outweigh your reasons.

If the processing of your personal data has been restricted, this data - apart from its storage - may only be used with your consent or to assert, exercise or defend legal claims or to protect the rights of another natural or legal person or for reasons of an important public interest of the Union or a Member State are processed.

If the restriction of processing has been restricted according to the above conditions, you will be informed by the person responsible before the restriction is lifted.

4. Deletion

You can request the person responsible to delete your personal data immediately, and the person responsible is obliged to delete this data immediately if one of the following reasons applies:

- The personal data concerning you are no longer necessary for the purposes for which they were collected or otherwise processed.

- You revoke your consent on which the processing was based pursuant to Article 6 Paragraph 1 Letter a or Article 9 Paragraph 2 Letter a) GDPR and there is no other legal basis for the processing.

- You object to the processing pursuant to Article 21(1) GDPR and there are no overriding legitimate reasons for the processing, or you object to the processing pursuant to Article 21(2) GDPR.

i.e. The personal data concerning you have been processed unlawfully.

- The deletion of the personal data concerning you is necessary to fulfill a legal obligation under Union law or the law of the Member States to which the person responsible is subject.

- The personal data concerning you was collected in relation to information society services offered in accordance with Article 8 (1) GDPR.

If the person responsible has made your personal data public and is obliged to delete them in accordance with Art process the personal data that you, as the data subject, have requested them to delete all links to this personal data or copies or replications of this personal data.

The right to erasure does not exist if processing is necessary

- to exercise the right to freedom of expression and information;

- to fulfill a legal obligation that requires processing under Union or Member State law to which the controller is subject, or to perform a task carried out in the public interest or in the exercise of official authority vested in the controller;

-for reasons of public interest in the field of public health in accordance with Art. 9 (2) lit. h) and i) and Art. 9 (3) GDPR;

- for archiving purposes in the public interest, scientific or historical research purposes or for statistical purposes pursuant to Article 89 Paragraph 1 GDPR, insofar as the law referred to in Paragraph 1 is likely to make it impossible or seriously impair the achievement of the objectives of this processing, or

- to assert, exercise or defend legal claims

5. Notice

If you have asserted the right to correction, deletion or restriction of processing against the person responsible, he is obliged to inform all recipients to whom the personal data concerning you have been disclosed of this correction or deletion of the data or restriction of processing, unless this proves to be impossible or involves a disproportionate effort.

You have the right to be informed about these recipients by the person responsible.

6. Transmission

You have the right to receive your personal data that you have provided to the person responsible in a structured, common and machine-readable format. In addition, you have the right to transmit this data to another person responsible without hindrance by the person responsible for providing the personal data, provided that

- the processing is based on consent pursuant to Article 6(1)(a) GDPR or Article 9(2)(a) GDPR or on a contract pursuant to Article 6(1)(b) GDPR and

- the processing is carried out using automated procedures.

In exercising this right, you also have the right to have your personal data transmitted directly from one person responsible to another person responsible, insofar as this is technically feasible. The freedoms and rights of other people must not be impaired by this.

The right to data portability does not apply to processing of personal data that is required to perform a task that is in the public interest or in the exercise of official authority that has been assigned to the controller.

7. Contradiction

You have the right, for reasons arising from your particular situation, to object at any time to the processing of your personal data, which is based on Article 6 Paragraph 1 lit. e) or f) GDPR; this also applies to profiling based on these provisions.

The person responsible no longer processes your personal data unless he can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

If your personal data is processed in order to operate direct advertising, you have the right to object at any time to the processing of your personal data for the purpose of such advertising; this also applies to profiling insofar as it is associated with such direct advertising.

If you object to the processing for direct marketing purposes, your personal data will no longer be processed for these purposes.

In connection with the use of information society services, you have the option - notwithstanding Directive 2002/58/EC - to exercise your right to object by means of automated procedures that use technical specifications.

8. Withdrawal

You have the right to revoke your declaration of consent under data protection law at any time. The revocation of the consent does not affect the legality of the processing carried out on the basis of the consent up to the point of revocation.

9. Complaint

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State where you live, work or where the alleged infringement took place, if you believe that the processing of your personal data violates the GDPR .

The supervisory authority to which the complaint was lodged will inform the complainant about the status and the results of the complaint, including the possibility of a judicial remedy under Art. 78 GDPR.

Data transfer to third countries

The controller may transfer personal data to a third country. In principle, the person responsible can ensure through various suitable guarantees that an appropriate level of protection for the processing is brought about. It is possible to transmit data on the basis of an adequacy decision, internal data protection regulations, approved rules of conduct, standard data protection clauses or an approved certification mechanism in accordance with Article 46 (2) lit. a) - f) GDPR.

If the person responsible carries out a transfer to a third country on the legal basis of Art. 49 Para. 1 a) DSGVO, you will be informed at this point about the possible risks of data transfer to a third country.

There is a risk that the third country receiving your personal data may not have an equivalent level of protection compared to the protection of personal data in the European Union. This can be the case, for example, if the EU Commission has not issued an adequacy decision for the respective third country or certain agreements between the European Union and the respective third country are declared invalid. Specifically, there are risks in some third countries with regard to the effective protection of EU fundamental rights through the use of surveillance laws (e.g. USA). In such a case, it is the responsibility of the controller and the recipient to assess whether the rights of the data subjects enjoy an equivalent level of protection in the third country as in the Union and can also be effectively enforced.

However, the General Data Protection Regulation should not undermine the level of protection afforded to individuals across the Union when personal data are transferred from the Union to controllers, processors or other recipients in third countries or to international organisations, even when originating in a third country or personal data are transferred from an international organization to controllers or processors in the same or another third country or to the same or another international organization.

Third Party Services and Content

It may happen that content from third parties, such as videos from YouTube, maps from Google Maps, RSS feeds or graphics from other websites are integrated within this online offer. This always presupposes that the providers of this content (hereinafter referred to as "third-party providers") perceive the IP address of the users. Because without the IP address, they could not send the content to the browser of the respective user. The IP address is therefore required for the display of this content. We endeavor to only use content whose respective providers only use the IP address to deliver the content. However, we have no influence if the third-party providers save the IP address, for example for statistical purposes. As far as this is known to us, we inform the users about it.

Duration of storage of personal data

Personal data will be stored for the duration of the respective statutory retention period. After the period has expired, the data is routinely deleted, unless there is a need for the initiation of a contract or the fulfillment of the contract.

Additional information

We have taken extensive technical and operational precautions to protect your data from accidental or intentional manipulation, loss, destruction or access by unauthorized persons. Our security procedures are regularly reviewed and adapted to technological advances. In addition, we guarantee data protection on an ongoing basis through constant auditing and optimization of the data protection organization. arv GmbH reserves all rights to make changes and updates to this data protection declaration.

Status: 10/2022