Private Policy & Cookies

 

 

Responsible:

Adam Hall GmbH

Adam-Hall-Str.1

61267 Neu-Anspach

Germany

 

HRB Nr.: 8076

Managing Directors: David Kirby, Markus Jahnel, Alexander Pietschmann

+49 6081 9419-0

info@adamhall.com

 

Data Protection Officer:

Anders Born

Adam-Hall-Str.1

61267 Neu-Anspach

Germany

Anders.Born@adamhall.com

 

Version: May 2018

1. Basic information for data processing

We attach the greatest importance to the protection of your data entrusted to us. The collection, processing and use of personal data is subject to the provisions of current legislation and data protection regulation (GDPR). This privacy statement explains the type, scope and purpose of the processing of personal data within our website and other processing systems, functions and content (hereinafter jointly referred to as "website"). This privacy statement is applicable regardless of the domains, systems, platforms and devices (for example, desktop or mobile) upon which the website is accessed.

 

  • Terminology used, such as "personal data" or its "processing” refers to the definitions in Art. 4 of the General Data Protection Regulation (GDPR).
  • The users' personal data processed within the framework of this website includes inventory data (such as names and addresses of customers), contract data (e.g. Services used, names of agents, payment information), usage data (for example, the pages visited on our website, interest in our products), and content data (for example, entries in the contact form).
  • The term "users" includes all categories of people affected by the data processing. They include our business partners, customers, interested parties and other visitors to our website. Terminology used such as "users" is to be understood as gender-neutral.

 

We only process users’ personal data in compliance with the relevant data protection regulations. This means that the users’ data will be processed only if there is legal permission, i.e. in particular if 

 

  • the data processing is necessary or is a legal requirement for the provision of our services within the scope of the agreement (e.g. processing of orders) and online services, 
  • informed consent has been given by the user, 
  • and for our legitimate interests (i.e., interest in the analysis, optimisation and economic operation and security of our website within the meaning of Art.6, para. 1 lit. f. GDPR), particularly in the range measurement, creation of profiles for advertising and marketing purposes, as well as collection of access data and use of third party services.

 

We would like to point out that the legal basis of the consent Art. 6 para. 1, lit. a and Art. 7 GDPR, the legal basis for the processing and implementation services in order to fulfil our contractual measures Art. 6 para. 1, lit. b. GDPR, the legal basis for the processing in order to fulfil our legal obligations Art. 6 para. a, lit. c GDPR and the legal basis for the processing to protect our legitimate interests is Art. 6, para. 1 lit. f. GDPR.

2. Security Measures

We meet organisational, contractual and technical security measures in accordance with the state of the art, in order to ensure that the provisions of the data protection laws are complied with, and to ensure protection of the data processed by us against accidental or intentional manipulation, loss, destruction or access by unauthorised persons. 

3. Disclosure of data to third parties and third-party suppliers

Disclosure of data to third parties only takes place within the framework of the legal guidelines. We give the data of users to third parties only if required, for example, on the basis of Art. 6 para. 1 lit. b. GDPR for contractual purposes or on the basis of legitimate interests according to Art. 6 para. 1 lit. f. GDPR for economic and effective operation of our business activities.

 

If we use subcontractors in order to provide our services, we will take appropriate legal measures and appropriate technical and organisational measures for the protection of personal data in accordance with the relevant statutory provisions.

 

In as far as content, tools or other resources from other suppliers (hereinafter jointly referred to as "third parties") can be used within the scope of this privacy statement, and their named location is in a third country, it is assumed that a data transfer takes place in the country of domicile of the third party. Third countries are understood to be countries in which the GDPR is not a directly applicable law, that is, in principle, countries outside the EU or the European Economic Area. The transfer of data to third countries is carried out if an adequate level of protection for the data, a user consent or other legal permission is present.

4. Online presence and information about the product portfolio

We process inventory data (eg., names and addresses as well as contact data of users), contract data (eg., services used, names of contact persons, payment information), to fulfil our contractual obligations and services, according to Article 6 paragraph 1 lit b., General Data Protection Regulation (GDPR).

 

We process usage data (eg., the visited pages of our website, interest in our products) and content data (eg., entries in the contact form or user profile), for advertising purposes, in a user profile, to provide users, with eg., product information, based on their services, used to date.

5. Contact

When contacting us (via the contact form or E-mail), the information of the user to edit the contact request and their settlement is processed in accordance with Art. 6 para. 1 lit. b GDPR.

 

The information provided by the users is stored in our customer relationship management system "Fresh desk" - Fresh Works Inc., 1250 Bayhill Drive, Suite 315, San Bruno, CA 94066, USA. Fresh works is certified under the Privacy Shield Agreement and provides a guarantee of compliance with the European Data Protection Law. Please also note the following data protection regulations:  https://www.freshworks.com/privacy/. We use the CRM system on the basis of our legitimate interests (efficient and quick processing of user requests).

6. Collection of access data and log files

We collect information for each access to the server on which this service is located (so-called server log files) on the basis of our legitimate interests in accordance with Art. 6 para. 1 lit. F. GDPR. Access data includes the name of the retrieved page, file, date and time of access, data volume transferred, notification of successful retrieval, browser type with version, the operating system of the user, referrer URL (the page previously visited), IP address, and the requesting provider.

 

Log file information is stored for a maximum period of seven days for security reasons (e.g. for the elucidation of abuse or fraud) and then deleted. Data whose further retention is required for evidential purposes is excluded from deletion up to the final clarification of the respective incident.

7. Cookies & Reach Measurement

Cookies are pieces of information that is transferred from our web server or third-party web servers to the web browser of the user and stored for later retrieval. Cookies can be small files or other types of stored information.  

 

In accordance with this privacy statement, the user is notified of the use of other cookies under pseudonymous reach measurement.

If users do not want cookies to be saved on their computers, they will be asked to the disable relevant option in the system settings of their browsers. Stored cookies can be deleted in the system settings of the browser. The exclusion of cookies may restrict the functionality of this website.

You can deny the use of cookies for the purposes of reach measurement and advertising purposes, via the deactivation page of the Network Advertising Initiative (http://optout.networkadvertising.org/) and, in addition, are in contrast to the US-American website (http://www.aboutads.info/choices) or the European website (http://www.youronlinechoices.com/uk/your-ad-choices/).

8. Google Analytics

We use Google Analytics, a web Analysis service of Google Inc. ("Google"), based on our legitimate interests (i.e., interest in the analysis, optimisation and economic operation, of our website, in the sense of Article 6, paragraph 1 lit. f., General Data Protection Regulation, (GDPR). Cookies used by Google. The information generated, by the cookie, about the use of the website, by the users is usually transferred, to a server of Google, in the USA and stored there. Google is certified, under the Privacy Shield Agreement and provides a guarantee, to comply, with European Data protection law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).

Google will use this information, on our behalf, to evaluate the use of our website by the users, to compile reports on the activities, within this website and to provide further related services, to us, connected with the use of this website and the Internet use related services. In this process, pseudonyms of user profiles can be created, from the processed data. We only use Google Analytics, with IP anonymisation enabled. This means that the IP address of the users is shortened, by Google, within member states, of the European Union or in other contracting states of the European Economic Area Agreement. Only in exceptional cases, will the full IP address, be transferred to a Google server, in the United States and shortened there.

The IP address transmitted, by the user's browser is not merged, with other data, from Google. Users can prevent the storage of cookies, with a corresponding setting, of their browser software. Users may, also, prevent Google from collecting the data generated by the cookie and related to their use, of the website, as well as the processing of that data, by downloading and installing the browser plug-in, available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de. For more information about Google's use of data, settings and opposition, please visit Google's web pages: 

 

9. Newsletter

With the following instructions we will clarify the contents of our newsletter, as well as the registration, dispatch and statistical evaluation procedures, as well as your right to object.

 

By subscribing to our newsletter, you agree to the receipt and the described procedures and confirm that you have completed the 16th year.

 

Content of the newsletter: We send out newsletters, E-mails and other electronic notifications with advertising information (hereinafter referred to as the "newsletter") only with the consent of the recipient or legal permission. In addition, our newsletters contain information on our products, offers, promotions, events and our brand.

 

Double-opt-in and logging: The registration for our newsletter occurs in a so-called double-opt-in procedure. Thus, after you have registered, you will receive an email asking you, to confirm your registration This confirmation is necessary so that no one can register, with foreign email addresses. Registrations for the newsletter are logged, to be able to prove the registration process, according to the legal requirements. This includes the storage of the logon and confirmation date, as well as the IP address. Likewise, changes to your data stored by the shipping service provider are logged.

 

Shipping service: The newsletter is sent via Inxmail GmbH, Wentzingerstr. 17, 79106 Freiburg; hereinafter, referred to as "shipping service provider“. 

 

Statistical collection and analysis – the newsletters contain a so-called "web beacon", i.e. a pixel-sized file which is retrieved from the server of the shipping service provider upon opening the newsletter. During its retrieval, technical information is collected, such as information about the browser and your system, as well as your IP address and time of access. This information is used for technical improvement of services on the basis of the technical data or the target groups and their reading behaviour on the basis of access location (identifiable with the help of the IP address) or the access times. A further part of the statistical surveys is the determination whether or not the newsletter is opened and which links are clicked. This information can be assigned to the individual newsletter recipients for technical reasons. But it is neither our intention nor that of the shipping service provider to monitor individual users. The analysis of personal tracking helps us much more to recognise the reading habits of our users and adapt our content to them or to provide different content in accordance with the interests of our users.

 

The use of the shipping service provider, implementation of the statistical surveys and analyses, as well as recording the registration procedure, is made on the basis of our legitimate interests according to Art. 6, para. 1, lit. f GDPR. Our interest is focused on the use of a user-friendly and secure newsletter system, which serves both our business interests, as well as the expectations of users.

 

Termination/Cancellation – you can cancel receipt of our newsletter at any time, i.e. revoke your consent. In doing so, your consent to shipment by the shipping service provider and statistical analysis are simultaneously deleted. A separate revocation of shipment by the shipping service provider or of the statistical analysis is not possible. You can manage and terminate your newsletter preferences in the settings of your customer account in our online shop. You can also find a link to cancel the newsletter at the end of each newsletter.

10. Integration of services and content of third parties

We use content or service offerings from third-parties within our web site on the basis of our legitimate interests (i.e., interest in the analysis, optimisation and economic operation of our website in accordance with Art. 6 para. 1 lit. f. GDPR) in order to integrate their contents and services, such as videos or fonts (hereinafter referred to as "content"). This always assumes that the third-parties of this content recognise the IP address of the users, as without the IP address they would be unable to send the content to their browsers. The IP address is therefore required for the presentation of this content. We strive to use only such content, whose respective providers use the IP address only for the delivery of the content. Third-party providers can also use so-called pixel tags (invisible graphics, also known as "web beacons") for statistical and marketing purposes. Information such as visitor traffic on the pages of this website can be evaluated by the use of pixel tags. The pseudonymous information may also be stored in cookies on the user’s device and may contain among other things, technical information about the browser and operating system used, referring websites, access period and further information about the use of our website, and may be connected with such information from other sources.

 

The following diagram provides an overview of third-party vendors and their content, along with links to their respective privacy statements, which contain further information about the processing of data and, in some cases already mentioned here, the prevention options (so-called opt-out):

 

  • External fonts from  Google, Inc., https://www.google.com/fonts („Google Fonts“). The integration of the Google fonts is done by a server call by Google (usually in the USA). Privacy Statement: https://www.google.com/policies/privacy/, Opt-Out: https://www.google.com/settings/ads/.
  • Maps of the service "Google Maps" of the third-party provider Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Privacy Statement: https://www.google.com/policies/privacy/, Opt-Out: https://www.google.com/settings/ads/.
  • Videos from the platform "YouTube" of the third-party provider Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Privacy Statement: https://www.google.com/policies/privacy/, Opt-Out: https://www.google.com/settings/ads/.
  • Functions of the Instagram service may be integrated within our website. These functions are offered by Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025\, USA. If you are logged into your Instagram account you can link the contents of our pages with your Instagram profile by clicking on the Instagram buttons. Instagram can thereby match your visit to our site with your user account. We would like to point out that as providers of the website, we do not receive any information as to the content of data sent through Instagram, nor how it is used. Privacy Statement: http://instagram.com/about/legal/privacy/

 

11. Rights of Users

Users have the right to request, free of charge, to receive information about the personal data we have stored about them. In addition, users have the right to correction of incorrect data, restriction of the processing and deletion of their personal data, if applicable, to assert their right to data portability and, in the case of the acceptance of unlawful data processing, file a complaint with the responsible supervisory authority. Users may also, in principle, revoke consent with effect for the future.

 

Deletion of data

 

Data stored by us is deleted as soon as it is no longer required for its intended purpose and its deletion does not contravene any statutory retention obligations. If the user’s data cannot be deleted because it is necessary for other legally permitted purposes, its processing is restricted. In other words, the data is secured and cannot be used for other purposes. This applies, for example, to data of users which must be kept for commercial or tax reasons.

 

Right of objection

 

Users can object to the future processing of their personal data in accordance with the statutory requirements at any time. The objection may be in particular against processing for the purposes of direct marketing.

 

Changes to the Privacy Statement

 

We reserve the right to amend the privacy statement to suit changed legal situations, or if changes are made to the service and the data processing. However, this only applies with regard to explanations of data processing. If user consents are required or if parts of the privacy statement contain provisions of the contractual relationship with the users, the changes take place only with the consent of the user.

 

Users are asked to obtain regular updates about the contents of the data protection policy.