Data protection declaration

The name and contact of the responsible person according to Article 4 Para. 7 GDPR

Schiller Automatisierungstechnik GmbH
Schiller Engineering & Maschinenbau GmbH
Donau-Gewerbepark 30
94486 Osterhofen, Germany

E-mail: firma@schiller.de
Phone: +49 9932 9504 0
Fax: +49 9932 9504 900

Data protection officer
Schiller Automatisierungstechnik GmbH
Donau-Gewerbepark 30
94486 Osterhofen, Germany
datenschutz@schiller.de

 

Security and protection of your personal data

We consider it our priority to preserve the confidentiality of the personal data provided by you and to protect it against unauthorised access. For this reason, we apply extreme care and the most modern safety standards to ensure the maximum level of protection for your personal data.

As a legal private company, we are subject to the specifications of the European General Data Protection Regulation (GDPR) and the regulations of the German Data Protection Act (BDSG). We have taken technical and organisational measures that ensure that the regulations concerning data protection are observed both by us and our external service providers.

Term definitions

The law requires that personal data is processed in a legal manner, in good faith, and in a way that can be understood by the person who is affected (“legality, processing in good faith, transparency”). To ensure this, we shall inform you regarding the individual legal definitions, which are also used in this data protection declaration:

1. Personal data
“Personal data” refers to all information that relates to an identified or identifiable natural person (the “data subject” in the following); a natural person is considered identifiable if they are directly or indirectly able to be identified by assignment of an identifier like a name, ID name, location data, an online ID, or according to one or more special characteristics that express information about the physical, physiological, genetic, psychical, economic, cultural, or social identity of this natural person.

2. Processing
“Processing” refers to any process completed with or without the help of automation or any sequence of processes in the context of personal data such as collection, organisation, arrangement, storage, adjustment, or alteration, exporting, querying, use, disclosure via transfer, distribution, or another form of provision, comparison, or connection, limitation, deletion, or destruction.

3. Limitation of processing
“Limitation of processing” refers to specification of stored personal data with the goal of limiting future processing.

4. Profiling
“Profiling” refers to any type of automated processing that involves use of personal data for the purpose of analysing or forecasting certain personal aspects that relate to a natural person, especially with regard to work performance, economic status, health, personal preferences, interests, reliability, behaviour, present location or future location of this natural person.

5. Pseudonymisation
“Pseudonymisation” refers to processing personal data in a manner that does not enable the personal data to be assigned to a specific data subject without the application of additional information, provided this additional information is stored separately and is subject to technical and organisational measures that ensure that the personal data is no longer able to be assigned to an identified or identifiable person.

6. File system
“File system” refers to any structured collection of personal data that is accessible according to specific criteria, independent of whether this collection is maintained centralised, decentralised, or organised according to functional or geographical characteristics.

7. Data controller
The “data controller” is a natural person or a legal person, an authority, institution, or another official agency, who decides alone or together with others regarding the objectives and means of personal data processing; if the objectives and means of this processing are specified by European Union law or the laws of its member states, then the data controller or the specific criteria of his designation according to European Union law or the laws of the member states.

8. Data processor
The “data processor” is a natural or legal person, authority, institution, or another official agency, who processes personal data on behalf of the data controller.

9. Data recipient
The “data recipient” is a natural or legal person, authority, institution, or another official agency, who the personal data is disclosed to, independent of whether the recipient involves a third party or not. Civic authorities who may receive personal data within the scope of a certain examination order according to European Union law or the laws of member states shall not, however, qualify as recipients; this data is processed by the indicated authorities in harmony with the applicable data protection regulations with regard to the purpose of processing.

10. Third party
A “third party” is a natural or legal person, authority, institution, or another official agency, except for the data subject, the data controller, the data processor, and the persons who are authorised to process the personal data under the direct responsibility of the data controller or the data processor.

11. Consent
“Consent” of the data subject refers to any voluntary declaration of will for the specific case, provided in an informed and unmistakable way in the form of a declaration or another clear action that is provided by the data subject to signify that they are in agreement with processing their respective personal data.

 

Legality of processing

Personal data is only legally permissible if there is a legal basis for processing. In particular, the legal basis for processing according to 6 Para. 1 lit. a – f GDPR could be:

a. The data subject has provided their consent to processing the corresponding personal data for one or more purposes;

b. The processing is required for fulfilment of a contract that the data subject is party to, or to complete pre-contractual measures that are taken upon request by the data subject;

c. Processing is required to fulfil a legal obligation that the data controller is subject to;

d. Processing is required to protect the vital interests of the data subject or another natural person;

e. Processing is required to execute a task that is of public interest or occurs during execution of public authority that has been transferred to the data controller;

f. Processing is required to preserve the justified interests of the data controller or another third party, provided the interests or basic rights and freedoms of the data subject who requires protection of personal data do not outweigh this, especially if the data subject is a child.

 

Information about collection of personal data

(1) The following provides information about collection of personal data while using our website. Personal data includes, for example, name, address, e-mail addresses, user behaviour.

(2) In case contact is established with us via e-mail or a contact form, the data provided by you (your e-mail address, possibly your name and telephone number) will be saved by us to answer your questions. The data occurring in this context shall be deleted by us after storage is no longer required or processing shall be limited, if legal storage obligations are present.

 

Collection of personal data while visiting our website

In case of purely information use of the website, i.e. if you do not register yourself or otherwise provide information to us, then we shall only transfer the personal data that your browser provides to our server. If you would like to view our website, we will collect the following data, which are technically required by to display our website to you and ensure its stability and security (the legal basis for this is provided by Art. 6 Para. 1 Line 1 lit. f GDPR):

• IP address
• Date and time of the request
• Time zone difference from Greenwich Mean Time (GMT)
• Contents of the request (specific page)
• Access status/HTTP status code
• Amount of data transferred
• Website the requirement comes from
• Browser
• Operating system and its surface
• Language and version of the browser software.

Use of cookies

(1) In addition to the previously indicated data, cookies will be saved on your computer during use of our website. Cookies are small text files that are saved on the hard drive of the browser you are using and which specific information flows through the position that places the cookie. Cookies cannot cause problems or transfer viruses to your computer. They are used to make the website more user-friendly and effective overall.

(2) This website uses the following types of cookies, which are explained in terms of scope and functionality in the following:

• Transient cookies (see a.)
• Persistent cookies (see b.).

a. Transient cookies are deleted automatically when you close your browser. In particular, this includes session cookies. These save a so-called session ID, which may be used to assign different requests made by your browser to the shared session. This ensures that your computer is able to be recognised again when you return to our website. Session cookies are deleted when you log out or close the browser.

b. Persistent cookies are deleted automatically after a specified duration which may be different depending on the cookie. You can delete the cookies in the security settings of your browser at any time.

c. You may configure your browser settings according to your needs and also reject the acceptance of third-party cookies or all cookies. So-called “third-party cookies” are cookies that have been set by a third party, therefore not by the actual website that the user is currently visiting. We inform you that the deactivation of cookies may result in inability to use all of the functions of this website.

 

Additional functions and offers of our website

(1) In addition to the purely informative use of our website, we offer different services that you are able to use if you are interested. In this case, you will need to provide additional personal information that we will use to provide the respective service and that apply to the previously indicated basic principles of data processing.

(2) We may use external service providers at different times to process your data. They have been carefully selected and employed by us, they are bound to our instructions, and we check them regularly.

(3) We may also provide your personal data to third parties in case of participation in sales, contests, completed contracts, or similar services that are offered by us together with our partners. More information about this is provided upon submission of your personal data or below in the description of the offer.

(4) If our service providers or partners are located in a state outside of the European Economic Area (EEA), we will inform you about the consequences of these circumstances in the description of the offer.

 

Children

Our offer is essentially intended for adults. Persons under 18 years old should not transfer any personal data to us without the approval of their parents or guardian.

 

Rights of the data subject

(1) Withdrawal of consent

If processing of personal data involves consent that has been given, then you shall have the right to withdraw this consent at all times. Withdrawal of consent shall not affect the legality of processing that has taken place already up until the withdrawal.

You may contact us at any time to exercise your right of withdrawal.

(2) Right to confirmation

You have the right to demand a confirmation from the data collector to determine if we are processing personal data affecting you. You may demand a confirmation at any time via the contact data indicated above.

(3) Right to information

If personal data are processed, then you may demand a report about this personal data at any time and receive the following detailed information:

a. the purposes of processing;

b. the categories of personal data that are being processed;

c. the recipient or categories of recipients who the personal data have been disclosed to or will still be disclosed to, especially in case of recipients in non-EU countries or in case of international organisations;

d. if possible, the planned duration that personal data may be saved for, or, if this is not possible the criteria for the specification of this duration;

e. the existence of the right to correct or delete personal data affecting you or to limit processing by the data collector or the right to reject this processing;

f. the existence of the right to complain to a supervisory authority;

g. if the personal data is not collected from the data subject, then all available information about the origin of the data;

h. the existence of automated decision-making, including profiling according to article 22 Paragraph 1 and 4 GDPR and, at least in these cases, descriptive information about the involved logic and the range and desired effects of this type of processing for the affected person.

If personal data are transferred to a non-EU country or an international organisation, then you have the right to be informed regarding suitable guarantees according to Article 46 GDPR in relation to the transfer. We shall provide a copy of the personal data that are the objective of processing. We may demand a suitable fee for all additional copies that you apply for on the basis of administrative fees. If you submit the application electronically, then the information will be provided in a conventional electronic format, so long as nothing else is specified. The right to receive a copy according to Paragraph 3 may not impair the rights and freedoms of other persons.

(4) Right to correction

You have the right to demand immediate correction of incorrect personal data that affects you. On the basis of the purpose of processing, you have the right to demand completion of incomplete personal data, including by way of a complementary declaration.

(5) Right to deletion (“right to be forgotten”)

You have the right to demand on the data collector to delete personal data affecting you immediately, and we shall be obligated to delete this personal data immediately, provided one of the following reasons applies:

a. The personal data are no longer necessary for the purposes that they were collected or otherwise processes for.

b. The data subject withdraws their consent, upon which processing is based according to Article 6 Paragraph 1 Item a or Article 9 Paragraph 2 Item a GDPR, and another legal basis for processing is lacking.

c. The data subject rejects processing according to Article 21 Paragraph 1 GDPR and there are no prioritised and justified reasons for processing, or the data subject rejects processing according to Article 21 Paragraph 2 GDPR.

d. The personal data was processed illegally.

e. The deletion of personal data is required to meet a legal obligation according to European Union law or the laws of the member states that the data collector is subject to.

f. The personal data were collected in relation to the offered services of the information company according to Article 8 Paragraph 1 GDPR.

If the data collector has publicly disclosed the personal data and he is obligated to delete it according to Paragraph 1, then he must take appropriate measures in accordance with the technology and the implementation costs, also of a technical type, in order to inform the data collector responsible for processing personal data that a data subject of theirs has demanded deletion of all links to this personal data or copies or replications of this personal data.

The right to deletion (“right to be forgotten”) shall not be present if processing is required:

• to exercise the right to freedom of speech and information;
• to fulfil a legal obligation that requires processing according to European Union law or the laws of member states that the data collector is subject to, or to execute a task that is of public interest or occurs during execution of public authority that has been transferred to the data controller;
• for reasons in the public interest in the area of public health according to Article 9 Paragraph 2 Items h and i, as well as Article 9 Paragraph 3 GDPR;
• archival purposes, scientific or historical research purposes, statistical purposes in the public interest in accordance with Article 89 Paragraph 1 GDPR, provided the law indicated in Paragraph 1 foreseeably makes realisation of the goals of this processing impossible or seriously impairs them, or
• to enforce, exercise, or defend legal claims.

(6) Right to limit processing

You have the right to demand limitation of processing of your personal data if one of the following requirements is present:

a. The correctness of the personal data of the data subject is disputed, and in fact for the duration that enables the data collector to check the correctness of the personal data,

b. Processing is illegal, the data subject rejects deletion of personal data, and he demands limitation of the use of personal data instead;

c. The data collector no longer requires the personal data for the purposes of processing, but the data subject nevertheless requires them to enforce, exercise, or defend legal claims, or

d. The data subject has rejected processing according to Article 21 Paragraph 1 GDPR, as long it has not yet been determined if the justified reasons of the data collector outweigh those of the data subject.

If processing was limited according to the requirements indicated above, then this shall be limited to personal data, not including its storage, with the consent of the data subject only or to enforce, exercise, or defend legal claims, or to protect the rights of another natural person or legal person, or for reasons involving important public interests of the European Union or a member state.

In order to enforce the right to limit processing, the data subject may contact us at any time via the contact data indicated above.

(7) Right to data transfer

You have the right to receive personal data affecting you from us in a structured, conventional, and machine-readable format, and you have the right to have this data provided to another data collector without hindrance by the data collector who the personal data was provided to:

a. Processing is based on consent according to Article 6 Paragraph 1 Item a or Article 9 Paragraph 2 a or on a contract according to Article 6 Paragraph 1 Item b GDPR, and

b. Processing takes place using automated processes.

If the right to transfer data is exercised according to Paragraph 1, then you have the right to have personal data directly from a data collector to another data collector, provided this is technically feasible. Exercising the right to transfer data shall not affect the right to deletion (“right to be forgotten”). This right shall not apply to processing that is required to execute a task that is of public interest or occurs during execution of public authority that has been transferred to the data controller.

(8) Right to object

For reasons resulting from your particular situation, you have the right to object to processing involving personal data affecting you that takes place on the basis of Article 6 Paragraph 1 Item e or f GDPR; this shall also apply to profiling on the basis of these specifications. The data collector processes no longer process your personal data, unless he is able to demonstrate compulsory and legitimate reasons which take precedence over the interests, rights and freedoms of the data subject, or demonstrate that the data is being processed in order to assert, exercise or defend legal claims.

If your personal data are processed for direct advertising purposes, then you have the right to object to data processing involving personal data affecting you for the purposes of direct advertising at any time; this also applies to profiling, provided this is in conjunction with direct advertising. If you object to processing for the purposes of direct advertising, then your personal data shall no longer be used for these purposes.

In connection with the use of services of the information company, you may exercise your right to object regardless of 2002/58/EC via an automated process that utilises technical specifications.

For reasons resulting from your special situation, you have the right to object to processing personal data affecting you that takes place for scientific or historical research purposes or statistical purposes according to Article 89 Paragraph 1, unless processing is required to fulfil a task on behalf of the public interest.

You may exercise the right to object at any time by referring to the respective data collector.

(9) Automated decision-making in individual cases including profiling

You have the right not to be subject to a decision involving automated processing, including profiling, which results in legal effects vis-a-vis yourself or impairs you significantly in a similar manner. This shall not apply if the decision:

a. is required to complete or fulfil a contract between the data subject and the data controller,

b. is permitted on the basis of legal regulations of the European Union or the member states that the data collector is subject to and these legal regulations include suitable measures to preserve the rights and freedoms and the justified interests of the data subject, or

c. occurs with the explicit consent of the data subject.

The data controller shall take suitable measures to preserve the rights and freedoms and the justified interests of the data subject, whereby this shall include the right to cause intervention by a person on behalf of the data controller, to reveal their own location, and to dispute the decision at a minimum.

This right may be exercised by the data subject by contacting the respective data collector.

(10) Right to complain to a supervisory authority

Regardless of another legal administrative or official legal remedy, you have the right to complain to a supervisory authority, especially in the member state of your current location, your workplace, or the location of the suspected violation of the affected person has the opinion that the processing of the personal data affecting them violates this regulation.

(11) Right to effective legal remedy

Regardless of an available legal administrative or extrajudicial legal remedy, including the right to complain to a supervisory authority according to Article 77 GDPR, you have the right to an effective legal remedy if you have the opinion that the rights available to you on the basis of this regulation have been violated over the course of processing involving your personal data that is not in harmony with this regulation.