Privacy

Table of contents

Introduction

Responsible body and data protection officer

Terms

Information on data processing

Automated data processing (log files, etc.)

Use of cookies (general, functionality, OPT-OUT LINKS, etc.)

Web analysis and optimization

Google Analytics

Online Marketing

Google Tag Manager

Google AdWords and conversion measurement

Social Media Presences

Instagram

Facebook

Twitter

YouTube

Online conferences, meetings and webinars

Microsoft Teams

Newsletter and mass communication

Emarsys eMarketing Systems AG

Sweepstakes and Contests

Information on the processing of customer/supplier data

Contact

Online Shop

Transmission

Storage period

Automated decision-making

Legal bases

Rights of data subjects

Revocation

External links

Changes

Introduction

Thank you for visiting our website. SPAX International GmbH & Co. KG (hereinafter referred to as "SPAX", "SPAX International", "we" or "us") attaches great importance to the security of user data and compliance with data protection regulations. We would like to inform you below about the processing of your personal data on our website.

Responsible body and data protection officer

Responsible body:
SPAX International GmbH & Co. KG
Kölner Strasse 71-77
58256 Ennepetal, Germany
Phone: +49 2333 799-0
E-mail: info@spax.com

External Data Protection Officer:
DDSK GmbH
Mr. Stefan Fischerkeller
Phone: 07542 949 21 - 01
E-mail: datenschutz@spax.com

Terms

The technical terms used in this data protection declaration are to be understood as legally defined in Article 4 GDPR.

Information on data processing

Automated data processing (log files, etc.)

Our site can be visited without active personal information about the user. However, each time the website is accessed, we automatically store access data (server log files) such as the name of the Internet service provider, the operating system used, the website from which the user visits us, the date and duration of the visit or the name of the requested file, as well as for security reasons, e.g. to detect attacks on our website, the IP address of the terminal device used for a period of 7 days. This data is evaluated exclusively to improve our offer and does not allow any conclusions to be drawn about the person of the user. This data is not merged with other data sources. The legal basis for the processing of the data is Art. 6 para. 1 lit. f) GDPR. We process and use the data for the following purposes: 1. Provision of the website, 2. Improvement of our websites and 3. Prevention and detection of errors/malfunctions as well as misuse of the website. The processing takes place to pursue legitimate interests in ensuring the functionality and error-free and secure operation of the website and adapting this website to the requirements of the users.

Use of cookies (general, functionality, opt-out links, etc.)

In order to make visiting our website attractive and to enable the use of certain functions, we use so-called cookies on our websites. The use of cookies serves our legitimate interest in making your visit to our website as pleasant as possible and is based on Art. 6 para. 1 lit. f) GDPR. Cookies are a standard Internet technology for storing and retrieving login and other usage information for all users of the SPAX website. Cookies are small text files that are stored on your device. Among other things, they allow us to store user preferences so that our websites can be displayed in a format tailored to your device. Some of the cookies we use are deleted after the end of the browser session, i.e. after closing your browser (so-called session cookies). Other cookies remain on your device and enable us or our partner companies to recognize your browser on your next visit (so-called permanent cookies).

The browser can be set in such a way that the user is informed about the setting of cookies and can decide individually about their acceptance or exclude the acceptance of cookies for certain cases or in general. Furthermore, the cookies can be deleted retrospectively in order to remove data that the website has stored on the user's computer. Disabling cookies (so-called opt-out) may lead to some restrictions on the functionality of our website.

This website uses cookies. We use cookies to personalize content and ads, to provide social media features, and to analyze traffic to our website. We also share information about your use of our website with our social media, advertising and analytics partners. Our partners may combine this information with other information that you have provided to them or that they have collected as part of your use of the Services.

Cookies are small text files used by websites to make the user experience more efficient.

By law, we may store cookies on your device if they are strictly necessary for the operation of this site. For all other types of cookies, we need your permission.

This site uses different types of cookies. Some cookies are placed by third parties that appear on our pages.

You can change or withdraw your consent at any time from the cookie statement on our website.

Find out more about who we are, how to contact us and how we process personal data in our Privacy Policy.

Please provide your consent ID and date when contacting us regarding your consent.

Your consent applies to the following domains: www.spax.com

Your current state: Allow all. 

Your consent ID: nFqSYzcgWLSy3ANsk2wRn3bBvD60cQ4E/zF7xyGZ/0ZWfF7BHrMwaw==Date of consent: Tuesday, October 11, 2022 at 13:40:  29 CEST

Change  consent |  withdraw consent

The cookie statement was last updated by Cookiebot on 03.10.22:

Necessary (8)

Necessary cookies help to make a website usable by enabling basic functions such as page navigation and access to secure areas of the website. The website cannot function properly without these cookies.

 This cookie is necessary for compliance with the GDPR of the website. 2 years HTTP Cookie CookieConsent Cookiebot Stores the user's consent status for cookies on the current domain. 6 months HTTP Cookie Debug www.spax.com This cookie is used to detect errors on the website – this information is sent to the website's support staff in order to optimise the user experience on the website. Persistent HTML Local Storage PHPSESSID www.spax.com Preserves the user's states on all page requests. Session HTTP Cookie rc::a Google This cookie is used to distinguish between humans and bots. This is beneficial for the website to create valid reports on the use of its website.  Persistent HTML Local Storage rc::c Google This cookie is used to distinguish between humans and bots. Session HTML Local Storage spaxcom www.spax.com Pending 6 days HTTP Cookie

Preferences (1)

Preference cookies allow a website to remember information that affects the way a website behaves or looks, such as: Your preferred language or the region you are in.

Statistics (6)

Statistics cookies help website owners understand how visitors interact with websites by collecting and reporting information anonymously.

Marketing (14)

Marketing cookies are used to follow visitors on websites. The intent is to show ads that are relevant and engaging to the individual user and therefore more valuable to publishers and third-party advertisers.

Persistent HTML Local Storage ytidb::LAST_RESULT_ENTRY_KEY YouTube Saves user settings when retrieving a YouTube video integrated on other websites Persistent HTML Local Storage yt-remote-cast-available YouTube Saves user settings when retrieving a YouTube video integrated on other websites Session HTML Local Storage yt-remote-cast-installed YouTube Saves user settings when retrieving a YouTube video integrated on other websites Session HTML Local Storage yt-remote-connected-devices YouTube Saves user settings when retrieving a YouTube video integrated on other websites Persistent HTML Local Storage yt-remote-device-id YouTube Saves user settings when retrieving a YouTube video integrated on other websites Persistent HTML Local Storage yt-remote-fast-check-period YouTube Saves user settings when retrieving a YouTube video integrated on other websites Session HTML Local Storage yt remote session app YouTube Saves user settings when retrieving a YouTube video integrated on other websites Session HTML Local Storage yt-remote-session-name YouTube Saves user settings when retrieving a YouTube video integrated on other websites Session HTML Local Storage

Categories of data subjects:

Website visitors, users of online services

Opt out:

- Internet Explorer:

https://support.microsoft.com/de-de/help/17442

- Firefox:

https://support.mozilla.org/de/kb/cookies-informationen-websites-auf-ihrem-computer?redirectlocale=en-US&redirectslug=Cookies

- Google Chrome:

https://support.google.com/chrome/answer/95647?hl=de

-Safari:

https://support.apple.com/de-de/HT201265

Legal bases:

consent (Art. 6 para. 1 lit. a) GDPR); legitimate interests (Art. 6 para. 1 lit. f) GDPR)

The relevant legal basis is specifically specified for the corresponding tool.

Legitimate interests:

Storage of opt-in preferences, presentation of the website, ensuring the functionality of the website, preservation of user status via complete website, recognition for next website visitors, user-friendly online offer, ensuring chat function

Web analysis and optimization

In order to be able to evaluate visitor flows on our online offer, we use tools for web analysis or range measurement. For this purpose, we collect information about the behavior, interests or demographic information about our visitors, such as age, gender, etc. This helps us to recognize at what time our online offer, its functions or content are most frequented or invite you to call it up again. In addition, we can use the information collected to determine whether our online offer is in need of optimization or adaptation.

The information collected for this purpose is stored in cookies or similar procedures and is used for range measurement and optimization. The data stored in the cookies may include content viewed, websites visited, settings and functions and systems used. However, no clear user data is regularly processed for the purposes described. In this case, the data is changed in such a way that the actual identity of the users is known neither to us nor to the provider of the tool used. The data changed in this way is often stored in user profiles.

Categories of data subjects:

Website visitors, users of online services

Categories Data:

User data (e.g. websites visited, interest in content, access times), meta and communication data (e.g. device information, IP addresses), contact data (e.g. e-mail address, telephone number), content data (e.g. text information, photographs, videos)

Purposes of processing:

Website analysis, reach measurement, utilization and evaluation of website interaction, lead evaluation

Legal bases:

Consent (Art. 6 para. 1 lit. a) GDPR)

Legitimate interests:

Optimization and further development of the website, increase in profits, customer loyalty and new acquisition

Google Analytics

Service used:

Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland

Privacy:

https://policies.google.com/privacy

Opt-out link:

https://tools.google.com/dlpage/gaoptout?hl=de

Legal basis:

Consent (Art. 6 para. 1 lit. a) GDPR)

Online Marketing

In order to constantly increase our reach and awareness of our online offer, we process personal data in the context of online marketing, in particular with regard to potential interests and the measurement of the effectiveness of our marketing measures.

For the purpose of measuring the effectiveness of our marketing measures and identifying potential interests, relevant information is stored in cookies or similar procedures are used. The data stored in the cookies may include content viewed, websites visited, settings and functions and systems used. However, no clear user data is regularly processed for the purposes described. The data is then changed in such a way that the actual identity of the users is known neither to us nor to the provider of the tool used. The changed data is often stored in user profiles.

If user profiles are stored, the data can be read, supplemented and supplemented on the server of the online marketing provider when visiting other online offers that use the same online marketing procedure.

We can determine the success of our advertisements on the basis of summarized data made available to us by the provider of the online marketing process (so-called conversion measurement). As part of these conversion measurements, we can understand whether a marketing measure has led to a purchase decision by the visitor to our online offer. This evaluation serves to analyze the success of our online marketing.

Categories of data subjects:

Website visitors, users of online services, interested parties, communication partners, business and contractual partners

Categories Data:

User data (e.g. websites visited, interest in content, access times), meta and communication data (e.g. device information, IP addresses), location data, contact data, content data (e.g. text information, photographs, videos)

Purposes of processing:

Marketing (partly also interest-based and behavioral), conversion measurement, target group formation, click tracking, development of marketing strategies and increasing the efficiency of campaigns

Legal bases:

consent (Art. 6 para. 1 lit. a) GDPR); legitimate interests (Art. 6 para. 1 lit. f) GDPR)

Legitimate interests:

Optimization and further development of the website, increase in profits, customer loyalty and new acquisition

Google Tag Manager

Service used:

Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland

Privacy:

https://policies.google.com/privacy

Opt-out link:

https://tools.google.com/dlpage/gaoptout?hl=de

Legal basis:

Legitimate interest (Art. 6 para. 1 lit. f) GDPR)

Legitimate interests:

Coordination of different tools, management, ease of use and presentation

Google AdWords and conversion measurement

Service used:

Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irlan

Privacy:

https://policies.google.com/privacy

Opt-out link:

https://tools.google.com/dlpage/gaoptout?hl=de or https://myaccount.google.com/

Legal basis:

Consent (Art. 6 para. 1 lit. a) GDPR)

Social Media Presences

We maintain online presences on social networks and career platforms in order to exchange information with the users registered there and to be able to get in touch easily.

In some cases, the data of users in social networks is used to conduct market research and thus pursue advertising purposes. User profiles can be created and used via the usage behaviour of users, for example the indication of interests, in order to adapt advertisements to the interests of target groups. For this purpose, cookies are regularly stored on the end devices of the users, sometimes regardless of whether they are registered users of the social network.

Depending on where the social network is operated, user data may be processed outside the European Union or outside the European Economic Area. This can result in risks for users, for example because it makes it more difficult to enforce their rights.

Categories of data subjects:

Registered users and non-registered users of the social network

Categories Data:

Master data (e.g. name, address), contact data (e.g. e-mail address, telephone number), content data (e.g. text information, photographs, videos), usage data (e.g. websites visited, interests, access times), meta and communication data (e.g. device information, IP address)

Purposes of processing:

Expansion of reach, networking

Legal bases:

Legitimate interests (Art. 6 para. 1 lit. f) GDPR), consent (Art. 6 para. 1 lit. a) GDPR)

Legitimate interests:

Interaction and communication on social media presence, profit increase, insights into target groups

Instagram

Assigned service:

Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Irland

Privacy:

https://help.instagram.com/519522125107875 and https://www.facebook.com/about/privacy

Opt-out link:

https://www.instagram.com/accounts/login/?next=/accounts/privacy_and_security/

Facebook

Service used:

Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Irland

Privacy:

https://www.facebook.com/privacy/explanation and https://www.facebook.com/legal/terms/page_controller_addendum

Opt-out link:

https://www.facebook.com/settings?tab=ads

Twitter

Assigned service:

Twitter International Company, One Cumberland Place, Fenian Street Dublin 2, D02 AX07 Ireland

Privacy:

https://twitter.com/de/privacy

Opt-out link:

https://help.twitter.com/de/rules-and-policies/twitter-cookies#privacy-options

YouTube

Service used:

Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland

Privacy:

https://policies.google.com/privacy?hl=de&gl=de

Opt-out link:

https://tools.google.com/dlpage/gaoptout?hl=de or https://myaccount.google.com/

Online conferences, meetings and webinars

We make use of the possibility to hold online conferences, meetings and/or webinars. For this we use the offer of other providers, which we have carefully selected.

During the active use of such offers, data of the communication participants are processed and stored on the servers of the third-party providers used, insofar as data is required for the communication process. Furthermore, usage and metadata can be processed.

Categories of data subjects:

Participants in the respective online offer (conference, meeting, webinar)

Categories Data:

Master data (e.g. name, address), contact data (e.g. e-mail address, telephone number), content data (e.g. text input, photographs, videos), meta and communication data (e.g. device information, IP addresses)

Purposes of processing:

Processing of inquiries, increasing efficiency, promoting cross-company or cross-location cooperation

Legal bases:

Consent (Art. 6 para. 1 lit. a) GDPR)

Microsoft Teams

Service used:

Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399

Privacy:

https://privacy.microsoft.com/de-de/privacystatement

Opt-out link:

https://account.microsoft.com/privacy/ad-settings/signedout?ru=https:%2F%2Faccount.microsoft.com%2Fprivacy%2Fad-settings

Legal basis:

Consent (Art. 6 para. 1 lit. a) GDPR)

Newsletter and mass communication

On our website, users have the option of subscribing to our newsletter or any notifications via various channels (hereinafter referred to as newsletters). We send newsletters within the framework of the statutory provisions only to recipients who have consented to receive the newsletter and. We use a selected service provider to send our newsletter.

In order to subscribe to a newsletter from us, it is necessary to provide an e-mail address. If necessary, we collect additional data, such as the name, in order to provide our newsletters with a personal address.

Our newsletter will only be sent after complete completion of the so-called double opt-in procedure. If visitors to our online offer decide to subscribe to our newsletter, they will receive a confirmation e-mail, which serves to prevent the misuse of false e-mail addresses and to exclude that the dispatch of the newsletter is triggered by a simple, possibly accidental click. The subscription to our newsletter can be terminated at any time for the future. An opt-out link is included at the end of each newsletter.

In addition, we are obliged to provide proof that our subscribers actually wanted to receive the newsletter. For this purpose, we collect and store the IP address as well as the time of registration and deregistration.

Categories Users:

Newsletter subscribers

Categories Data:

Master data (e.g. name, address), contact data (e.g. e-mail address, telephone number), meta and communication data (e.g. device information, IP address), usage data (e.g. interests, access times)

Purposes of processing:

Marketing, customer loyalty and new customer acquisition

Legal basis:

Consent (Art. 6 para. 1 lit. a) GDPR)

Emarsys eMarketing Systems AG

Service used:

Emarsys eMarketing Systems AG, Hans-Fischer-Strasse 10, 80339 Munich, Germany

Privacy:

https://emarsys.com/de/datenschutzrichtlinie/

Sweepstakes and Contests

We use our online presences to conduct sweepstakes and/or competitions. In doing so, we process the data of the action participants required for the execution of the respective action. This also includes such data as we need to inform the winner and distribute the prize.

Depending on the nature of the Promotion, entries by or through the Promotion Participants may be published, for example when reporting on the respective Promotion or if a vote on a Participant's submitted entry is part of the Promotion. Which data we process in individual cases depends on the specific action carried out and on what data we receive from the participant.

Categories of data subjects:

Action participants

Categories Data:

Master data (e.g. name, address), contact data (e.g. e-mail address, telephone number), content data (e.g. text input, photos, videos)

Purposes of processing:

Competition including distribution of prizes and announcement of the winner in various media

Legal bases:

Consent (Art. 6 para. 1 lit. a) GDPR)

Information on the processing of customer/supplier data

Source and origin of data collection.

We process personal data that we have collected directly from you.

Insofar as this is necessary for the provision of our services, we process personal data legitimately received from other companies or other third parties (e.g. credit agencies, address publishers). In addition, we process personal data that we have legitimately extracted, received or acquired from publicly accessible sources (such as telephone directories, commercial and association registers, population registers, debtor directories, land registers, press, Internet and other media) and may process.

Categories

Relevant categories of personal data may be in particular:

Personal data (name, date of birth, profession/industry and comparable data)

Contact details (address, e-mail address, telephone number and similar data)

Data about your use of the telemedia offered by us (e.g. time of accessing our websites, apps or newsletters, clicked pages/links from us or entries and comparable data)

Creditworthiness data

Purposes and legal bases of the processed data

We process personal data in accordance with the provisions of the General Data Protection Regulation (GDPR), the new version of the Federal Data Protection Act (BDSG) and other applicable data protection regulations (details below). Which data is processed in detail and how it is used depends largely on the services requested or agreed in each case. Further details or additions to the purposes of data processing can be found in the respective contract documents, forms, a declaration of consent and/or other information provided to you (e.g. in the context of the use of our website or our terms and conditions).

Purposes for the fulfilment of a contract or pre-contractual measures (Art. 6 para. 1 b) GDPR)

The processing of personal data takes place for the execution of our contracts with you and the execution of your orders as well as for the execution of measures and activities within the framework of pre-contractual relationships, e.g. with interested parties. This essentially includes: contract-related communication with you, the corresponding billing and associated payment transactions, the traceability of orders and other agreements as well as quality control through appropriate documentation, goodwill procedures, measures to control and optimize business processes as well as to fulfill general due diligence obligations, management and control by affiliated companies; statistical evaluations for corporate management, cost recording and controlling, reporting, internal and external communication, emergency management, billing and tax evaluation of operational services, risk management, assertion of legal claims and defence in legal disputes; Ensuring IT security (including system or plausibility tests) and general security, ensuring and exercising domiciliary rights (e.g. through access controls); Ensuring the integrity, authenticity and availability of data, preventing and investigating criminal offences and monitoring by supervisory bodies or supervisory bodies (e.g. auditing).

Purposes within the scope of a legitimate interest of us or third parties (Art. 6 para. 1 f GDPR)

In addition to the actual fulfilment of the contract or preliminary contract, we may process your data if it is necessary to safeguard our legitimate interests or those of third parties, in particular for the purposes of

• advertising or market and opinion research, unless you have objected to the use of your data;
• the examination and optimisation of needs analysis procedures;
• the further development of services and products as well as existing systems and processes;
• enriching our data, including by using or researching publicly available data; statistical evaluations or market analysis; benchmarking;
• the assertion of legal claims and defence in legal disputes that are not directly attributable to the contractual relationship;
• the prevention and investigation of criminal offences, unless exclusively for the fulfilment of legal requirements;
• building and plant safety (e.g.

through access controls), insofar as they go beyond the general duties of care;

• internal and external investigations and security audits;
• obtaining and maintaining certifications of a private or regulatory nature;
• securing and exercising domiciliary rights through appropriate measures (such as video surveillance) as well as securing evidence in the event of criminal offences and preventing them.
• the effective and resource-saving execution of web meetings through the use of Internet-based communication tools.

•  

   

  Purposes within the scope of your consent (Art. 6 para. 1 a) GDPR)

  Processing of your personal data for specific purposes (e.g. use of your e-mail address for marketing purposes) may also take place on the basis of your consent. As a rule, you can revoke them at any time. This also applies to the revocation of declarations of consent that were issued to us before the GDPR came into force, i.e. before 25 May 2018. You will be informed separately about the purposes and consequences of revocation or non-granting of consent in the corresponding text of the consent. In principle, the revocation of consent only has effect for the future. Processing that took place before the revocation is not affected and remains lawful.

   

  Purposes to comply with legal requirements (Art. 6 para. 1 c) GDPR) or in the public interest (Art. 6 para. 1 e) GDPR)

  Like everyone involved in the economy, we are subject to a variety of legal obligations. These are primarily legal requirements (e.g. commercial and tax laws), but also regulatory or other official requirements. The purposes of processing may include the fulfilment of tax control and reporting obligations as well as the archiving of data for the purposes of data protection and data security as well as the examination by tax and other authorities. In addition, the disclosure of personal data may become necessary in the context of official/judicial measures for the purposes of gathering evidence, prosecution or enforcement of civil claims.

   

  Existence of automated decision-making in individual cases (including profiling)

  We do not use purely automated decision-making procedures in accordance with Art. 22 GDPR. If we should use such a procedure in individual cases in the future, we will inform you separately if this is required by law.

   

  Consequences of non-provision of data

  As part of the business relationship, you must provide the personal data that is necessary for the establishment, execution and termination of the legal transaction and the fulfillment of the associated contractual obligations or that we are legally obliged to collect. Without this data, we will not be able to carry out the legal transaction with you.

   

  Recipients of the data

   

  Within the EU

  Within our company, those internal departments or organisational units receive your data that need it to fulfil our contractual and legal obligations or in the context of processing and implementing our legitimate interest.

  Your data will only be passed on to external bodies

  • in connection with the execution of the contract;
  • for the purposes of fulfilling legal requirements according to which we are obliged to information, report or pass on data or the transfer of data is in the public interest (cf. Section 2.4);
  • insofar as external service providers process data on our behalf as processors or functional transferees (e.g. data centres, support/maintenance of EDP/IT applications, archiving, document processing, call centre services, compliance services, controlling, data validation or plausibility check, data destruction, purchasing/procurement, customer management, lettershops, marketing, media technology, research, risk controlling, billing, telephony, website management, auditing services, credit institutions, printers or companies for data disposal, courier services, logistics);
  • on the basis of our legitimate interest or the legitimate interest of the third party for the purposes stated (e.g. to authorities, credit agencies, debt collection, lawyers, courts, experts, subsidiaries and bodies and supervisory bodies);
  • if you have given us your consent to transfer data to third parties.

  We will not pass on your data to third parties. Insofar as we commission service providers in the context of order processing, your data is subject to the same security standards as with us. In other cases, recipients may use the data only for the purposes for which they were communicated to them.

   

  Outside the EU

  Data will not be transferred to bodies in countries outside the European Union (EU) or the European Economic Area (EEA), so-called third countries.

   

  Storage periods

  We process and store your data for the duration of our business relationship. This also includes the initiation of a contract (pre-contractual legal relationship) and the execution of a contract.

  In addition, we are subject to various storage and documentation obligations, including those arising from the German Commercial Code (HGB) and the German Tax Code (AO). The periods specified there for storage or documentation are up to ten years to the end of the calendar year beyond the end of the business relationship or the pre-contractual legal relationship.

  Furthermore, special legal regulations may require a longer retention period, such as the preservation of evidence within the framework of the statutory statute of limitations. According to §§ 195 et seq. of the German Civil Code (BGB), the regular limitation period is three years; however, limitation periods of up to 30 years may also apply.

  If the data are no longer required for the fulfilment of contractual or legal obligations and rights, they are regularly deleted, unless their - temporary - further processing is necessary for the fulfilment of the purposes for an overriding legitimate interest. Such an overriding legitimate interest also exists, for example, if deletion is not possible or only possible with disproportionately high effort due to the special type of storage and processing for other purposes is excluded by suitable technical and organizational measures.

   

  Your rights

  Under certain conditions, you can assert your data protection rights against us. Your requests to exercise your rights should, if possible, be addressed in writing or by e-mail to the above address or directly in writing or by e-mail to our Data Protection Officer.

  • You have the right to obtain information from us about your data stored by us in accordance with the rules of Art. 15 GDPR (possibly with restrictions according to § 34 BDSG).
  • At your request, we will correct the data stored about you in accordance with Article 16 GDPR if it is incorrect or incorrect.
  • If you wish, we will delete your data in accordance with the principles of Art. 17 GDPR , provided that other legal regulations (e.g. statutory retention obligations or the restrictions according to § 35 BDSG) or an overriding interest on our part (e.g. to defend our rights and claims) do not conflict with this.
  • Taking into account the requirements of Article 18 GDPR, you may request us to restrict the processing of your data .
  • If your personal data are processed on the basis of legitimate interests pursuant to Art. 6 para. 1 sentence 1 lit. f) GDPR or if they are necessary for the performance of a task that is processed in the public interest or in the exercise of official authority, you have the right to object pursuant to Art. 21 GDPR  to object to the processing of your personal data, insofar as there are reasons for this arising from your particular situation or the objection is directed against direct advertising. In the latter case, you have a general right of objection, which will be implemented by us without specifying a particular situation.
  • You also have the right to receive your data in a structured, common and machine-readable format under the conditions of Article 20 GDPR or to transmit it to a third party.
  • In addition, you have the right to revoke your consent to the processing of personal data at any time with effect for the future .
  • Furthermore, you have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). However, we recommend that you always first address a complaint to our data protection officer.

Online Shop

We offer our customers the opportunity to access our products via our online shop. Our online shop gives you an overview of our product range and allows you to add the products you want to your shopping cart. Within the shopping cart function you have the possibility to select a sales partner. By selecting the sales partner, you will be taken to their online shop, where your selection of SPAX products is stored in their shopping cart.

Categories of data subjects:

Shop Visitors

Categories Data:

Meta and communication data (e.g. device information, IP addresses), usage data (e.g. websites visited, interests, access times)

Purposes of processing:

To fulfil the initiation and execution of the contract between shop visitors and sales partners

Legal bases:

Contract initiation and execution (Art. 6 para. 1 lit. b) GDPR), legitimate interests (Art. 6 para. 1 lit. f) GDPR

Legitimate interests:

Simplification of workflows, resource-efficient fulfillment

Transmission

A transmission of personal data of visitors to our online offer does not take place.

Storage period

In principle, we store the data of visitors to our online offer for as long as this is necessary to provide our service or insofar as this has been provided for by the European legislator or another legislator in laws or regulations to which we are subject. In all other cases, we delete the personal data after completion of the purpose, with the exception of such data that we must continue to store to fulfil legal obligations (e.g. due to tax and commercial retention periods, we are obliged to keep documents such as contracts and invoices for a certain period of time).

Automated decision-making

We refrain from automated decision-making or profiling, in accordance with Article 22 GDPR.

Legal bases

Relevant legal bases arise mainly from the GDPR. These are supplemented by national laws of the Member States and may be applicable together with or in addition to the GDPR.

Consent:

Art. 6 (1) (a) GDPR serves as the legal basis for processing operations for which we have obtained consent for a specific processing purpose.

Contract:

Art. 6 para. 1 lit. b) GDPR serves as the legal basis for processing necessary for the performance of a contract to which the data subject is a party or for the implementation of pre-contractual measures taken at the request of the data subject.

Legal obligation:

Art. 6 para. 1 lit. c) GDPR serves as the legal basis for processing which is necessary to fulfil a legal obligation.

Vital interests:

Art. 6 para. 1 lit. d) GDPR serves as the legal basis if the processing is necessary to protect the vital interests of the data subject or another natural person.

Public interest:

Art. 6 para. 1 lit. e) GDPR serves as the legal basis for processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

Legitimate interest:

Art. 6 para. 1 lit. f) GDPR serves as the legal basis for processing which is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require the protection of personal data, in particular where the data subject is a child.

Rights of data subjects

Right of access:

In accordance with Article 15 GDPR, data subjects have the right to request confirmation as to whether we are processing data concerning them. You may request information about this data as well as the further information listed in Article 15 (1) GDPR and a copy of your data.

Right to erasure:

Data subjects have the right pursuant to Article 17 GDPR to demand the immediate deletion of data concerning them. Alternatively, you can request us to restrict the processing of your data in accordance with Article 18 GDPR.

Right to data portability:

In accordance with Article 20 GDPR, data subjects have the right to request the provision of the data provided to us by them and to request their transmission to another controller.

Right to lodge a complaint:

Data subjects also have the right to complain to the supervisory authority responsible for them in accordance with Article 77 GDPR.

Right to object:

If personal data are processed on the basis of legitimate interests pursuant to Art. 6 para. 1 sentence 1 lit. f) GDPR, data subjects have the right to object to the processing of their personal data pursuant to Art. 21 GDPR, provided that there are reasons for this arising from their particular situation or the objection is directed against direct marketing. In the latter case, data subjects have a general right of objection, which will be implemented by us without specifying a particular situation.

Revocation

Some data processing operations are only possible with the express consent of the data subjects. You have the possibility to revoke your consent at any time. For this purpose, an informal message or e-mail to datenschutz@spax.com to us is sufficient. The legality of the data processing carried out until the revocation remains unaffected by the revocation.

External links

On our website you will find links to the online offers of other providers. We hereby point out that we have no influence on the content of the linked online offers and compliance with data protection regulations by their providers.

Changes

We reserve the right to adapt this data protection information at any time in the event of changes to our online offer and in compliance with the applicable data protection regulations, so that they meet the legal requirements.

conform.

This privacy policy was created by DDSK GmbH