We take the protection of your personal data very seriously. Data is "processed" by us in accordance with the applicable statutory data protection provisions, in particular in accordance with the European Data Protection Regulation (hereinafter referred to as: DSGVO) and the country-specific data protection provisions.
"Personal data" means any information relating to an identified or identifiable natural person; an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
"Processing" means any operation or set of operations which is performed upon personal data, whether or not by automatic means, such as collection, recording, organization, filing, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
In the following, we will inform you about the processing of your data, in particular about the type, scope and purposes of the collection and use of your personal data when you visit our website and use our offers and services, as well as the corresponding legal basis of the individual processing operations. In addition, we will explain to you within the framework of our data protection declaration which rights you are entitled to with regard to data processing.
2. Responsible for data processing
As the provider of our Internet services, we are the data controller. You can reach us at the contact details given below:
AL Messebau & Service GmbH
vertreten durch Herrn Klaus Knickenberg
Hommericher Straße 10 – 14
3. Data procession
The type, scope and purposes of the processing of your data differ depending on whether you only visit our website or make use of services and/or benefits offered by us:
a) Visits to our Internet pages (server log files)
When you visit our website, the server stores in so-called server log files data that your Internet browser automatically transmits to the server, in particular:
- - Visited website
- - Time at the time of access
- - Amount of data sent in bytes
- - Source/reference from which you came to the page
- - Browser used
- - Operating system used
- - P address used
The data collected is only used for statistical evaluations and to improve the website. However, the website operator reserves the right to check the server log files retrospectively if there are concrete indications of illegal use.
This data is processed in order to enable the use of the Internet pages you have accessed in the first place, for statistical purposes, to improve our Internet offering and to provide security against unlawful cyber attacks, as well as to exercise, assert or defend legal claims. Your IP address will only be stored for as long as is necessary to defend against possible cyber attacks and to provide law enforcement authorities with the information they need to prosecute.
The aforementioned data will be processed separately from all personal data that you provide to us when visiting our website and/or using a service and will not be combined under any circumstances.
This data processing described above has its legal basis in Article 6(1)(b) DSGVO for the implementation of necessary pre-contractual measures, which take place at your request to enable you to use the internet pages you have accessed at all. Insofar as the above data is processed for security against unlawful cyber attacks, or in order to exercise, assert or defend legal claims, this is done on the legal basis of Article 6(1)(f) of the DSGVO. Our legitimate interest for this data processing lies in the evaluation of the data to improve our Internet offer, to exercise, assert or defend legal claims, if necessary, and to protect our systems from unlawful cyber attacks.
b) Processing of personal data when using the services and/or performances offered by us:
Personal data will only be processed by us if this is permitted by law or if you consent to the data processing of your personal data.
If you wish to make use of the services offered on our website, it may be necessary for you to provide or communicate further personal data. The mandatory data required by us can be seen from the input mask in the context of our contact form. You may voluntarily provide additional information that is not required for the purposes described above; we mark this information accordingly when collecting the data during the registration or ordering process.
We process your personal data for the above purposes on the legal basis of Article 6(1)(b) DSGVO in order to fulfill a contract with you or to carry out necessary pre-contractual measures, which take place upon your request. Accordingly, the purpose of processing your personal data is, for example, to process inquiries or to provide the requested service. Without the provision of the personal data, we cannot process your request and/or conclude the contract with you and provide the offered services and performance.
In addition, we process your data for the purpose of exercising, asserting or defending any legal claims arising from the contractual relationship and, if necessary, to enable law enforcement authorities to prosecute any misuse of our services. The above data processing is carried out on the legal basis of Art. 6(1)(f) DSGVO. Our legitimate interest for data processing on the legal basis of Art. 6(1)(f) DSGVO is to be able to exercise, assert or defend legal claims arising from the contractual relationship, if applicable, and to enable law enforcement authorities to prosecute criminal proceedings, if applicable.
We also process your personal data for the purpose of complying with our statutory retention obligations. The legal basis for the fulfillment of our legal retention obligations is standardized in Article 6(1)(c) DSGVO.
Your data may be passed on to service providers who support us for the fulfillment of the contract or for the implementation of necessary pre-contractual measures, which are carried out at your request, and which we have of course carefully selected. These may be technical service providers or service providers supporting us in shipping or payment processing or accounting.
Your personal data will otherwise only be disclosed to other third parties if we are legally obliged to do so on the legal basis of Article 6(1)(c) DSGVO and, if applicable, to lawyers and tax advisors on the legal basis of Article 6(1)(f) DSGVO. Our legitimate interest in disclosing your data to tax advisors and lawyers is to comply with our tax obligations or to exercise, assert or defend against legal claims.
Furthermore, we do not pass on your personal data to third parties without your express consent.
This data processing described above has its legal basis in Article 6(1)(b) DSGVO for the implementation of necessary pre-contractual measures, which take place upon your request.
We only use session cookies on our site, which are set when you access the homepage and are only valid until your browser is closed again. The purpose of the session cookies used by our website is to enable you to use our website more effectively. User profiles are not created by the cookies we set.
Third party cookies
You can determine whether cookies can be set and retrieved yourself through the settings in your browser. For example, you can deactivate the storage of cookies altogether in your browser, restrict it to certain websites or configure your browser so that it automatically notifies you as soon as a cookie is to be set and asks for your permission to do so. In addition, you can set your browser to automatically delete cookies when you close the browser. Finally, you may be able to enable a do-not-track ("DNT") feature in your browser so that you are automatically not tracked by any web analytics tool that may be used. Information on how to configure your browser settings can be found in the help function of your respective internet browser.
5. SStorage and deletion periods for personal data
If the processing purpose for your personal data required in each case ceases to apply, your personal data processed by us will be routinely deleted or blocked, unless you have consented to a permanent storage of your personal data.
If individual data must be retained after the processing purposes have ceased to apply due to statutory retention periods (e.g. retention requirements under tax and commercial law), the deletion shall be replaced by the blocking of the data. The data to be retained may then be processed exclusively for the aforementioned purposes on the legal basis of Article 6(1)(c) DSGVO.
6. Your rights as a data subject
You have the rights described below at any time:
- - Right to confirmation and to information about the personal data processed by us in accordance with Article 15 DSGVO
- - Right to rectify your personal data in accordance with Article 16 DSGVO
- - Right to erasure of your personal data („right to be forgotten“) pursuant to Article 17 DSGVO
- - Right to restrict the processing of your personal data pursuant to Article 18 DSGVO
- - Right to data portability of your personal data pursuant to Article 20 DSGVO
- - In accordance with Article 22 of the GDPR, you have the right not to be subject to a decision based solely on automated processing - including profiling - which produces legal effects concerning you or similarly significantly affects you.
7. Right of objection
You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Article 6(1)(e) or (f) DSGVO; this also applies to profiling based on these provisions.
In this case, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the purpose of asserting, exercising or defending legal claims.
If personal data is processed for the purpose of direct marketing, you have the right to object at any time to processing of personal data concerning you for the purpose of such marketing; this also applies to profiling insofar as it is related to such direct marketing.
You also have the right, on grounds relating to your particular situation, to object to the processing of personal data concerning you which is carried out for scientific or historical research purposes, or for statistical purposes pursuant to Article 89(1) of the GDPR, unless the processing is necessary for the performance of a task carried out in the public interest. If you object to processing for direct marketing purposes, the personal data will no longer be processed for these purposes.
8. Right of withdrawal for consents
You may revoke any consent expressly given to us under data protection law at any time with effect for the future. The lawfulness of the processing carried out on the basis of the consent until the revocation is not affected by the revocation.
9. Complaint about data protection violations to the supervisory authorities
If you believe that your data protection rights are being violated, you can contact the supervisory authority in your federal state or in the federal state where our company is based. If a complaint concerns a company that has its registered office in another federal state, the supervisory authority will forward the complaint to the supervisory authority responsible there.
10. Notification obligation in connection with the rectification or erasure of personal data or the restriction of processing
We will notify all recipients to whom personal data has been disclosed of any rectification or erasure of the personal data or restriction of processing pursuant to Article 16, Article 17(1) and Article 18 of the GDPR, unless this proves impossible or involves a disproportionate effort. We will also inform you about these recipients if you request this.
11. Legal or contractual requirements to provide your personal data as well as information about the necessity for the conclusion of the contract as well as about your obligation to provide the personal data and possible consequences of not providing it:
As described above, we collect and process your personal data in particular for the fulfillment of a contract with you or for the implementation of pre-contractual measures that take place at your request. In some cases, the provision of personal data for the conclusion of contracts (e.g. for invoices) is required by law due to tax and/or commercial regulations, otherwise it is a contractual or pre-contractual obligation. If you do not provide us with personal data, this means that we cannot conclude a contract with you and/or answer your inquiries.
Insofar as we process your personal data on the basis of a legitimate interest pursuant to Art. 6(1)(f) of the DSGVO, the provision of your data for these purposes is neither contractually nor legally required. The details of data processing on the basis of legitimate interest can be found in the above information in the respective places. If you do not provide us with personal data for these purposes, this may result in you not being able to use our website and services or not being able to use them to their full extent.
12. Automated decisions in individual cases including profiling
We do not use automated decision-making - including profiling pursuant to Article 22(1) and (4) of the GDPR.
13. Data security
We use technical and organizational security measures to protect the processing of personal data, in particular against accidental or intentional manipulation, loss, destruction or against attack by unauthorized persons. Our security measures are continuously improved in line with technological developments.
14. Questions / comments
If you have any questions or comments about this privacy statement or about data protection in general, please contact us using the contact details provided in section 2 of this privacy statement.