Data protection
1. Data protection – a summary
General information
The following information provides a quick overview of what happens to your personal data when you visit our website. Personal information is any data that can be used to personally identify you. The Privacy Statement below contains detailed information on data protection.
How data is collected on this website
Who is responsible for the data collection on this website?
The data collected on this website are processed by the website operator. The website operator’s contact details can be found in this Privacy Statement in the section entitled “Information on data controller”.
How do we collect your data?
One way your data is collected is when you provide this to us. This may be data that you enter into a contact form, for example.
Other data are collected automatically, or after you give your consent, by our IT systems when you visit our website. This mainly involves technical data (such as your internet browser, operating system or when you accessed the online page). These data are collected automatically whenever you visit this website.
What do we use your data for?
Some data are collected to ensure this website operates faultlessly. Other data may be used to analyse your browsing behaviour.
What rights do you have regarding your data?
You may, at any time and at no cost to you, request the disclosure of information detailing your stored personal data, and the origins and recipients of your data, and the purposes for which your data is used. You also have the right to request that your data be rectified or erased. If you have given your consent for your data to be processed, you may withdraw this consent at any time; this shall be effective for the future. Moreover, under certain circumstances, you have the right to demand the restriction of the processing of your personal data. In addition, you may also file a complaint with the competent regulatory authority.
You can contact us, at any time, if you have any questions on this, or if you have any other questions on the issue of data protection.
2. Hosting
Mittwald
We use Mittwald to host our website. This service is provided by Mittwald CM Service GmbH & Co. KG, Königsberger Straße 4-6, 32339 Espelkamp (hereinafter referred to as “Mittwald”).
Details are set out in Mittwald’s Privacy Statement: https://www.mittwald.de/datenschutz.
The use of Mittwald’s services is based on Art. 6(1)(f) GDPR. We have a legitimate interest in ensuring the most reliable possible presentation of our website. If corresponding consent is requested, the processing will be performed solely on the basis of Art. 6(1)(a) GDPR and sect. 25(1) Telecommunications and Telemedia Data Protection Act (Telekommunikation-Telemedien-Datenschutzgesetz – TTDSG), provided the consent includes the storage of cookies or accessing information on the user’s terminal device (e.g. device fingerprinting) within the definition of the TTDSG. You may withdraw your consent at any time.
3. General information and mandatory information
Data protection
The operators of this website take the protection of your personal data very seriously. We treat your personal data as confidential, and handle it in accordance with statutory data protection regulations and this Privacy Policy.
Various personal data are collected when you use this website. “Personal data” is any data that can be used to personally identify you. This privacy policy explains what information we collect and what we use it for. It also explains how and for what purpose this takes place.
Please note that data transmitted via the internet (e.g. via email communication) may be exposed to security holes. It is not possible to guarantee that data will be fully and continuously protected from third-party access.
Notice concerning the responsible party (controller)
The data controller responsible for processing data on this website is:
metz Gravuren GmbH
Otto-Brenner Str. 196
33604 Bielefeld, Germany
Telephone: +49 521 96 20 25 90
Email: o.metz@metz-gravuren.de
The data controller is the natural or legal person who alone or jointly with others decides the purposes and means of processing personal data (names, email addresses, etc.).
Duration of storage
If this Privacy Policy does not contain any specific storage period, we will retain your personal data until the data processing purpose no longer exists. If you raise a legitimate request for the erasure of data, or you withdraw your consent to the data processing, your data will be erased unless we have other legally permissible reasons for storing your personal data (such as retention periods stipulated under tax or commercial law); in the latter case, the data will be deleted once these reasons no longer apply.
General information about the legal bases for the processing of data on this website
If you have consented to the processing of your data, we will process your personal data on the basis of Art. 6(1)(a) GDPR and/or Art. 9(2)(a) GDPR, insofar as this includes the processing of special categories of personal data under Art. 9(1) GDPR. In cases where consent has been explicitly given for personal data to be transferred to third countries, the data processing will also be performed on the basis of Art. 49(1)(a) GDPR. If you have consented to the storage of cookies or to the accessing of information on your terminal device (e.g. fingerprinting), the data processing will be additionally performed on the basis of sect. 25(1) TTDSG. You may withdraw your consent at any time. If your data are needed for performing a contract or in order to carry out activities prior to the contract, we process your data on the basis of Art. 6(1)(b) GDPR. We also process your data on the basis of Art. 6(1)(c) GDPR insofar as this is necessary for compliance with a legal obligation. Data processing may also take place on the basis of our legitimate interest under Art. 6(1)(f) GDPR. The legal bases applicable in the specific case are described in the following paragraphs of this Privacy Statement.
Withdrawal of your consent to data processing
Many data processing operations are only possible with your express consent. You may withdraw your consent at any time. This is without prejudice to the lawfulness of the data processing performed up until the time you withdraw your consent.
Right to object to the collection of data in special cases, and the right to object to direct marketing (Art. 21 GDPR)
IF DATA ARE PROCESSED ON THE BASIS OF ART. (6) (1) (E) OR (F) GDPR, YOU HAVE THE RIGHT, AT ANY TIME, TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA BASED ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION; THIS LIKEWISE APPLIES TO ANY PROFILING BASED ON THESE PROVISIONS. THIS PRIVACY STATEMENT SETS OUT THE APPLICABLE LEGAL BASIS ON WHICH THE PROCESSING OF DATA IS BASED. IF YOU SUBMIT AN OBJECTION, WE WILL NO LONGER PROCESS YOUR RELEVANT PERSONAL DATA, UNLESS WE ARE ABLE TO DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR PROCESSING YOUR DATA, WHICH OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS, OR IF WE PROCESS YOUR DATA TO ESTABLISH, EXERCISE OR DEFEND AGAINST LEGAL CLAIMS (OBJECTION PURSUANT TO ART. 21 (1) DSGVO).
WHERE PERSONAL DATA ARE PROCESSED FOR DIRECT MARKETING PURPOSES, YOU THEN HAVE THE RIGHT, AT ANY TIME, TO OBJECT TO THE PROCESSING OF YOUR RELEVANT PERSONAL DATA FOR THE PURPOSES OF SUCH MARKETING; THIS ALSO APPLIES TO PROFILING ACTIVITIES, IF THIS IS CONNECTED WITH SUCH DIRECT ADVERTISING. IF YOU OBJECT, YOUR PERSONAL DATA WILL NO LONGER BE PROCESSED FOR DIRECT MARKETING PURPOSES (RIGHT TO OBJECT PURSUANT TO ART. 21 (2) DSGVO).
Right to lodge a complaint with the competent supervisory authority
If there have been breaches of the GDPR, the data subject shall have the right to lodge a complaint with a supervisory authority, in particular in the Member State of his or her habitual residence, place of work or place of the alleged infringement. This right to lodge a complaint exists regardless of other available administrative or judicial legal remedies.
Right to data portability
You have the right to demand that any data we automatically process on the basis of your consent or in order to fulfil a contract be handed over to you or a third party in a commonly used, machine-readable format. If you demand the direct transmission of the data to another controller, this will only be performed if it is technically feasible.
Disclosure of information, erasure and rectification of data
You have the right, at any time and free of charge, to access your stored personal data as well as to be informed of its origin, recipients of the data, and the purpose for which it is processed. You also have the right for this data to be rectified or erased. You can contact us at any time if you have any questions on this or anything else regarding personal data.
Right of restriction of processing
You have the right to demand the restriction of the processing of your personal data. Please do not hesitate to contact us at any time. The right of restriction of processing is available in the following cases:
- If you dispute the accuracy of your personal data stored by us; we will usually require time to investigate this. You have the right to demand restrictions on the processing of your personal data for the time we need to examine your request.
- If the processing of your personal data was/is performed unlawfully, you have the option of demanding the restriction of the processing of your data, rather than their erasure.
- If we no longer need your personal data, but you need them for the establishment, exercise or defence of legal claims, you have the right to demand restrictions on the processing of your personal data, rather than demand your data be erased.
- If you have objected in accordance with Art. 21 (1) GDPR, it will be necessary to weigh up your interests against ours. Until such time as it is determined whose interests prevail, you shall have the right to demand restrictions on the processing of your personal data.
If you have restricted the processing of your personal data, your personal data may – apart from its archiving – only be processed with your consent or to claim, exercise or defend legal entitlements or to protect the rights of other natural persons or legal entities or for important public interest reasons cited by the European Union or a EU member state.
SSL or TLS encryption
This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as purchase orders or enquiries you submit to us, the website operator. You can recognise an encrypted connection in your browser’s address line by the change from “http://” to “https://” and a lock icon displayed in the address bar of your browser.
If SSL or TLS encryption is activated, the data you transfer to us cannot be read by third parties.
4. How data is collected on this website
Email, telephone and fax inquiries
When you contact us by email, telephone, or by fax, we will store and process your inquiry, including all relevant personal data (name, inquiry), for the purpose of attending to your request. We will not share this information without your permission.
These data are processed on the basis of Art. 6 (1) b of the GDPR where your inquiry is connected with performing a contract, or for taking steps prior to entering into a contract. In all other cases the processing is based on our legitimate interest in effectively processing the enquiries directed to us (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR) if this was requested from you; you may withdraw this consent at any time.
We will retain the data you provide in our contact form until you demand it be erased, or you withdraw your consent for us to retain such data, or once the purpose for retaining such data no longer exists (e.g. once we have fully processed your request). This does not affect any mandatory statutory provisions – especially those stipulating particular statutory data retention periods.