PRIVACY NOTICE

Name and address of the person responsible

As defined in the privacy basic regulation and other national data protection laws of the member countries as well as other stipulations of data protection law the person responsible is the following:

Riensch & Held GmbH & Co.KG
Hans-Duncker-Straße 1
21035 Hamburg

General Managers:
Horst von Ludowig, Dipl.-Kfm. Christian J. Justus, Per Jakob Justus

Telephone: +49 40 73424-0
Website: http://www.picaro.biz/

Name and address of the data protection officer

The data protection officer of the person responsible is the following:
Erik Weinkauf
Riensch & Held GmbH & Co.KG
Hans-Duncker-Straße 1
21035 Hamburg

Telephone: +49 40 73424-0
E-Mail: datenschutz@riensch.de

Data processing in general

According to our definition the observance of data protection regulations as well as respecting the rights of the people involved belong to the basic principles of a trusting business relationship. Only by handling the entrusted and personal data and the risks involved of the people concerned in a careful and attentive way, we can protect the interest of those people who trust in us. Therefore it is essential for us to implement data protection in all our business processes where personal data is handled.

1. Scope of personal data processing

We collect and use personal data of the users only as far as it is needed to provide a functional website as well as our contents and activities. The collection and use of the personal data of our users will be done regularly only with the user’s consent. An exception only applies in those cases when a prior request of consent is not possible due to factual reasons and when the data processing is permitted by legal regulations.

2. Legal basis for personal data processing

Once we will seek the consent for the personal data processing from the person affected, art. 6, paragraph 1 lit. a EU-Datenschutzgrundverordnung (DSGVO) serves as legal basis. With regard to the processing of personal data which is necessary to fulfill the contract concluded with the person concerned, art. 6, paragraph 1 lit. b DSGVO serves as legal basis. This also applies to processing operations that are necessary for the implementation of precontractual measures. Insofar as the personal data processing is necessary for the fulfilment of a legal obligation governing our company, art. 6, paragraph 1 lit. c DSGVO serves as legal basis. In case where vital interests of the person concerned or of another individual require the processing of personal data, art. 6, paragraph 1 lit. d DSGVO serves as legal basis. In case the processing is necessary to preserve a legitimate interest of our company or of a third party, and if interests, fundamental rights and freedoms of the person affected do not overweigh the first-mentioned interest, art. 6, paragraph 1 lit. f DSGVO serves as legal basis for the data processing.

3. Data erasure and storage period

The personal data of the person concerned will be deleted or blocked as soon as the storage purpose ceases to apply. Furthermore, storage can be made if it is stipulated in regulations of EU-law, other laws or rules by the European or national legislator to which the person responsible is subject. A blocking or erasure of data will also be made if a storage period prescribed by the mentioned standards will expire, unless there will be the necessity for further data-storage due to a conclusion or fulfilment of contract.

Provision of website and preparation of logfiles

1. Description and scope of data processing

Every time our website is accessed, our system records automated data and information from the computer systems of the calling computer. In doing so the following data is collected:
Information about browser type and used version
Operating system of the user
HTTP response code
Number of transmitted bytes
IP address of user
Date and time of access
Websites from where the user’s system gets to our website
Websites which are opened by the user’s system via our website

2. Legal basis for data processing

Legal basis for the temporary storage of data and logfiles is art. 6, paragraph 1 lit. f DSGVO.

3. Purpose of data processing

The temporary storage of the IP address by the system is necessary to enable a delivery of the website to the user’s computer. For this purpose the IP address of the user has to be saved for the duration of the session.

The storage in logfiles is done to guarantee the functioning of the website. Furthermore the data serve for optimizing the website and for guaranteeing the security of our information technology systems. An evaluation of data for marketing purposes does not take place in this context.

According to art. 6, paragraph 1 lit. f DSGVO our legitimate interest on data processing is centred on these purposes.

4. Duration of storage

The data is deleted as soon as it is not needed anymore with regard to the purpose achieved. When entering the data for providing the website, this is the case if the given session is finished. In case of data storage in logfiles this is the case after at least seven days. Any further storage is possible. In this case the IP addresses of the users will be deleted or alienated so that an allocation of the calling client is not possible anymore.

5. Option to object and for elimination

The recording of data for providing a website and the data storage in logfiles is absolutely necessary for operating the website. Therefore the user has no possibility to object.

Use of cookies

1. Description and scope of data processing

Our website partially uses cookies. Cookies are text files that are stored in the internet browser respectively by the internet browser on the user’s computer system. By accessing a website, a cookie can be saved on the operation system of the user. This cookie includes a character string which enables a clear identification of the browser when accessing the site again.

We use cookies to make our site more user-friendly. Some elements of our website require that the calling browser can be identified also after a page break.

2. 2. Legal basis for data processing

The legal basis for the processing of personal data by using cookies is art. 6, paragraph 1 lit.f DSGVO.

3. Purpose of data processing

The purpose of using technically necessary cookies is to simplify the use of websites for the users. Some functions of our site cannot be offered without using cookies. For these it is necessary that the browser can be recognized also after a page break.

The users data collected via technically necessary cookies will not be used for creating user profiles.

Our legitimate interest on data processing according to art. 6, paragraph 1 lit. f DSGVO is centred on these purposes.

4. Duration of storage, option to object and for elimination

Cookies are saved on the user’s computer and are transferred to our site by the user. Therefore you as user have control over the use of cookies. By modifying the settings of your internet browser you can deactivate or limit the transfer of cookies. Already saved cookies can be deleted at any time. This can also be done in an automated way. If cookies are deactivated for our website, not all functions of the website may probably be used entirely.

Contact form and mail contact

1. Description and scope of data processing

On our website there are contact forms available that can be used for electronic contact. If a user chooses this option the data submitted in the entry form is transferred and saved by us.

The data for the contact form is:
Company
Name
First name
Title
Address
Postal code
City
Country
Telephone
Business sector
Type of organization
Products
Fax
E-Mail
Message

From the date of message transfer following data is saved as well:
IP address of user
Date and time of registration

Within the dispatching process your consent for data processing is obtained and we refer to this privacy notice. In this context no data transfer to third parties will be done. The data is only used for the processing of conversation.

2. Legal basis for data processing

The legal basis for this data processing is regularly art. 6, paragraph 1b) DSGVO.

3. Purpose of data processing

The processing of personal data from the entry mask serves us to handle the contact.

The other personal data processed during dispatching process serves to avoid a misuse of the contact form and to guarantee the security of our information technology systems.

4. Duration of storage, option to object and for elimination

Due to statutory obligations (as for example retention periods according to HGB) we are obliged to save data until expiry of specific deadlines. In this case the data can only be limited according to article 18 DSGVO, i. e. the data will be processed only for fulfilling the legal retention obligation but not for other purposes. The deletion is done after expiry of retention periods. At any time you can object to the use of your data and revoke the use of your data. Further you can let correct, block or delete the data processed by us at any time.

Plugins and tools

No analysis of the surfing and use behavior of the visitors of our site is made.

Rights of people concerned

According to DSGVO the following list contains all rights of people concerned. If your personal data is processed, according to DSGVO you fall in the category “person concerned” and you are entitled to make use of following rights:

1. Right of information

You can ask the responsible person for a confirmation indicating if your personal data is processed by us.

If you have received such a confirmation you may require the following information from the person responsible:

(1) purposes for personal data processing;
(2) categories of personal data that are processed;
(3) addressees respectively categories of addressees towards those your personal data has already been or will be disclosed;
(4) intended duration of storage of your personal data or, if concrete information about this is not possible, criteria regarding the stipulation of storage duration;
(5) existence of a right concerning rectification or deletion of your personal data, a right regarding restriction of processing through the person responsible or a right of objection against this processing;
(6) existence of a right of appeal at a supervisory authority;
(7) all information available concerning the origin of data if the personal data is not collected at the person concerned;
(8) existence of an automated decision making incl. profiling according to art. 22, paragraph 1 and 4 DSGVO and – at least in these cases – relevant information about the logic involved as well as the importance and effects pursued on such a processing for the person concerned.

You are entitled to request information about the fact if your personal data may be transferred to a third country or to another international organization. In this context you are allowed to ask for appropriate guarantees according to art. 46 DSGVO in connection with the transfer.

2. Right of rectification

You are entitled to ask for rectification and / or completion towards the person responsible if your personal data processed is incorrect and incomplete. The responsible person has to carry out this rectification immediately.

3. Right of restriction of processing

Under the following conditions you may request the restriction of the processing of your personal data:

(1) if you deny the accuracy of your personal data for a duration that enables the responsible person to verify the accuracy of your personal data.
(2) if the processing is illegal and you refuse the deletion of your personal data and instead ask for a restriction of the use of your personal data.
(3) if the person responsible does not need the personal data for processing purposes any longer but you require those data for assertion, exercise and defense of legal rights, or
(4) if you have appealed against the processing according to art. 21, paragraph 1 DSGVO and it is still not clear whether the justified reasons of the responsible person towards your reasons overweigh.

In case the data processing of your personal data has been restricted, this data may be processed only with your consent or for assertion, exercise and defense of legal rights or for protection of the rights of another natural or legal person or due to reasons of a substantial public interest of the Union or a member country.

If the restriction of the processing has been restricted according to the above mentioned conditions you will be informed by the responsible person before the restriction will be canceled.

4. Right of deletion

4.1. Obligation to delete
You may request from the person responsible that your personal data is deleted immediately and the person responsible is obliged to delete this data immediately if one of the following reasons can be applied:

(1) your personal data is not anymore necessary for the purposes for which it has been collected and processed.
(2) you will revoke your consent on which the processing according to art. 6, paragraph 1 lit. a or art. 9, paragraph 2 lit. a DSGVO was based, and there is a lack of other legal basis for the processing.
(3) you appeal against the processing according to art. 21, paragraph 1 DSGVO and there are no prior legitimate reasons for the processing, or you appeal against the processing according to art. 21, paragraph 2 DSGVO.
(4) your personal data has been processed illegally.
(5) the deletion of your personal data is necessary for the achievement of a legal obligation according to the European Union law or to the law of member countries to which the responsible person is subject.
(6) your personal data has been collected with regard to offered services of the information society according to art. 8, paragraph 1 DSGVO.

4.2. Information to third parties
If the responsible person has disclosed your personal data and he is obliged to delete this data according to art. 17, paragraph 1 DSGVO, he will take appropriate measures considering the available technology and cost of implementation to inform the person who is responsible for the data processing that you as person concerned have required the deletion of all links to this personal data or copies or replications of this data.

4.3. Exceptions
The right of deletion does not exist if the processing is necessary

(1) for exercising the law of freedom of expression and information;
(2) for fulfilling a legal obligation that requires the processing according to the Union law or to the law of member countries to which the responsible person is subject or for the performance of a task that is in the public interest or that takes place in the exercise of official authority that has been transferred to the responsible person.
(3) due to reasons of public interest in the field of public health according to article 9, paragraph 2 lit. h and i as well as article 9, paragraph 3 DSGVO;
(4) for public interest archiving purposes, scientific or historic research purposes or for statistical purposes according to art. 89, paragraph 1 DSGVO if the law mentioned under paragraph a) will probably make the realization of the processing aims impossible or will seriously influence them, or
(5) for assertion, exercise or defense of legal claims.

5. Right to information

In case you have asserted the right to correction, deletion or restriction of the processing towards the responsible person, this one is obliged to inform all addressees (to whom the personal data has been revealed) of this correction or deletion of all data or restriction of processing, unless this proves impossible or this requires a disproportionate effort.

You have the right to be informed about these addressees by the person responsible.

6. Right to data portability

You are permitted to obtain your personal data that you provided to the person responsible in a structured, common and machine-readable format. In addition, you are allowed to transfer this data to another responsible person without any obstruction by the responsible person to whom the personal data has been supplied if

(1) the processing is based on a consent according to art. 6, paragraph 1 lit. a DSGVO or art. 9, paragraph 2 lit. a DSGVO or on a contract according to art. 6, paragraph 1 lit. b DSGVO and
(2) the processing is done by means of automated processes.

By exercising this right you are also permitted to obtain that your personal data will directly be transferred from one responsible to another responsible person provided that this is technically feasible. Freedoms and rights of other people may not be affected by this.

The right to data portability cannot be applied to a processing of personal data that is necessary for a performance of a task which is in the public interest or that is carried out in the exercise of official authority that has been transferred to the person responsible.

7. Right of objection

Due to reasons arising out of their specific situation you are entitled to object at any time to the processing of your personal data that is made due to art. 6, paragraph 1 lit e or f DSGVO; this also applies to a profiling based on these regulations. The responsible person does not process your personal data anymore unless he can prove compelling and legitimate reasons for the processing that overweigh your interests, rights and freedoms or the processing serves for assertion, exercise or defense of legal claims. In case your personal data is processed to pursue direct advertising you are entitled to object at any time to the processing of your personal data for such advertising purposes; this concerns also the profiling provided that it is related to such direct advertising. In case you object to the processing for direct advertising purposes, your personal data will not be processed any longer for these purposes. In connection with the use of services of an information society – notwithstanding the rule 2002/58/EG – you can exercise your right of objection by means of automated processes where technical specifications are used.

8. Right of withdrawal of the data protection consent declaration

You are allowed to object to your data protection consent declaration at any time. By doing so the legality of the effected processing (from time of consent to withdrawal) remains unaffected.

9. Automated decision in the individual case inclusive profiling

You have the right not to be bound to a prior decision based only on an automated processing incl. profiling, that becomes legally effective to you or that severely affects you in a similar way. This does not apply if the decision

(1) is necessary for the conclusion of the performance of a contract between you and the person responsible,
(2) is permitted due to legislation of the union or member states to which the responsible person is subject, and this legislation does contain appropriate measures for the protection of your rights and freedoms as well as your legitimate interests or
(3) is made with your explicit consent.

However these decisions may not be based upon special categories of personal data according to art. 9, paragraph 1 DSGVO, unless art. 9, paragraph 2 lit. a or g DSGVO is valid and appropriate measures for the protection of the rights and freedoms as well as your legitimate interests have been taken.

With regard to the cases mentioned in (1) and (3) the person responsible takes appropriate measures to protect the rights and freedoms as well as your legitimate interests to which at least the right for obtaining the interference of a person on the part of the person responsible, the right for explaining your own point of view and the right for challenging the decision belongs.

10. Right of appeal at a supervisory authority

Without prejudice to another administrative or judicial remedy you are allowed to complain at a supervisory authority, especially in the member country of your place of residence, your working place or the place of the supposed infringement, if you are of the opinion that the processing of your personal data does breach the DSGVO. The supervisory authority where the complaint has been submitted informs the complainant about the situation and the results of the complaint incl. the possibilities of a judicial remedy according to art. 78 DSGVO.

Date: 18.05.2018