Data privacy

I. Name and address of the responsible person

The person responsible within the meaning of the Basic Data Protection Regulation (EU- GDPR) and other national data protection laws of the member states as well as other data protection regulations is the:

Ziegener + Frick GmbH

Schillerstrasse 50

74248 Ellhofen

Germany

Phone: +49 (0) 07134-13992-0

E-Mail: contact (at) ziegener-frick.de

Website: www. ziegener-frick .com

Controller for data protection

Mr. Markus Geiger

MaGe Solutions GmbH

Lilienstr. 17/1

71272 Renningen

Germany

Phone: +49 7159 496 5728

E-Mail: info(at)mage-solutions.de

Website: www.mage-solutions.de

II. Information for persons concerned

Information for customers, suppliers and service providers

III. General information about data processing

Data privacy protection is considered a very important issue in our company. All internet activities of our company are performed in accordance with the running rules and regulations concerning data security.

Ziegener + Frick GmbH is making provisions to guarantee the security of personal data. Personal data are protected conscientiously against loss, damage, manipulation, illegal access and illegal storage.

1. Extent of processing of personal data

We process personal data of our users generally only to the extent necessary to provide a functioning website and our content and services. The processing of personal data of our users takes place regularly only with the consent of the user. An exception applies to cases in which prior consent is not possible for reasons of fact and law permits the processing of the data.

2. Legal basis for the processing of personal data

If we obtain the consent of the data subject for processing of personal data, Article 6(1) point (a) EU General Data Protection Regulation (GDPR) is the legal basis.

In the processing of personal data, is used to perform a contract, the contracting party is the person concerned is required Article 6(1) point (b) GDPR is the legal basis. This also applies to processing operations required to carry out pre-contractual actions.

If processing of personal data is required to fulfill a legal obligation to which our company is subject, Article 6(1) point (c) GDPR as legal basis. In the case that vital interests of the data subject or any other natural person require the processing of personal data, Article 6(1) point (d) GDPR is the legal basis.

If the processing is necessary to safeguard the legitimate interests of our company or a third party, and the interests, fundamental rights and fundamental freedoms of the person concerned do not outweigh the former interest, Article 6(1) point (f) GDPR is the legal basis for processing.

3. Data erasure and storage duration

The personal data of the data subject will be deleted or blocked as soon as the purpose of the storage is eliminated. In addition, the European or national legislator in EU regulations, laws or other regulations to which the responsible is subject may provide for such storage. Blocking or deletion of the data also takes place when a storage period prescribed by the standards mentioned above expires, unless there is a need for further storage of the data for concluding a contract or fulfillment of the contract.

IV. Provision of the website and creation of log files

1. Description and scope of data processing

Each time our website is accessed, our system automatically collects data and information from the computer system of the calling computer.

The following data is collected here:

(1) Information about the browser type and version used

(2) The user’s operating system

(3) The user’s IP address

(4) The user’s Country

(5) Date, time and duration of access

(6) Websites from which the system of the user comes to our website

(7) Visited pages of our website and downloads

Ziegener + Frick GmbH uses this data exclusively for statistical purposes, a transfer of these data to third parties will not take place.

2. Legal basis for data processing

The legal basis for the temporary storage of data and logfiles is Article 6(1) point (f) GDPR.

3. Purpose of the data processing

The temporary storage of the IP address by the system is necessary to allow delivery of the website to the computer of the user. To do this, the user's IP address remain stored for the duration of the session.

The storage in log files is done to ensure the functionality of the website. In addition, the data is used to optimize the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context.

For these purposes, our legitimate interest in the processing of data pursuant to Article 6(1) point (f) GDPR.

4. Duration of storage

The data will be deleted as soon as it is no longer necessary for the purpose of its collection. In the case of collecting the data for providing the website, this is the case when the respective session is completed.

In the case of storing the data in log files, this is the case after no more than seven days. An additional storage is possible. In this case, the IP addresses of the users are deleted or alienated, so that an assignment of the calling client is no longer possible.

5. Opposition and removal possibility

The collection of data for the provision of the website and the storage of the data in log files is essential for the operation of the website. There is consequently no contradiction on the part of the user.

V. Use of web page analysis services

1. Description and scope of data processing

On our website we use the statistics tool to analyze the logfiles "AWStats". In this connection, the following personal databe evaluated:

(1) Information about the browser type and version used< /p>

(2) The operating system of the user

(3) The IP address of the user

(4) Country of the user

(5) Date and time and duration of access<p/>

(6) Websites, of which the system of the user on our website reaches

(7) Visited pages of our website and downlo

2. Legal basis for data processing

The legal basis for the processing of personal data using Web analysis services is Article 6(1) point (f) GDPR.

3. Purpose of the data processing

The use of the web analysis service is for statistical purposes. Through "AWStats" we learn how many users access the website at what times and for how long used operating systems and browser types and what documents from downloaded from our website. So we can use our online offer, especially the availability of the site, its compatibility with operating systems and Browser types as well as the quality and quantity of the provided documents improve.
In these purposes, our legitimate interest lies in the processing of personal data according to Article 6(1) point (f) GDPR.

4. Duration of storage

The data will be deleted as soon as it fails to achieve the purpose of its collection more are needed. In the case of storage of the data by the website analysis service this is the case no later than 12 months. The IP addresses of the users However, they are anonymized so that an assignment to the user is no longer possible.

5. Opposition and removal possibility

The data is collected in anonymous form. For this reason exists on the part the user no contradiction.

VI. E-mail contact

1. Description and scope of data processing

The use of the offers and services on our site is largely possible without providing personal information.Contact is possible via the provided e-mail address. In this case, the user's personal data transmitted by e-mail will be stored. The disclosure of this data on the part of the user on an express voluntary basis.

There is in this context no transfer of data to third parties. Data is used exclusively for processing the conversation.

2. Legal basis for data processing

The legal basis for the processing of the data received during the sending of an e-mail is Article 6(1) point (f) GDPR. If the e-mail contact aims to conclude a contract, then additional legal basis for the processing is Article 6(1) point (b) GDPR.

3. Purpose of the data processing

In the case of contact via e-mail, this also includes the required legitimate interest in the processing of the data for processing the contact.

4. Duration of storage

The data will be deleted as soon as it is no longer necessary for the purpose of its collection. For the personal data sent by e-mail, this is the case when the respective conversation with the user has ended. The conversation is finished when it can be inferred from the circumstances that the relevant facts have been finally clarified.

5. Opposition and removal possibility

The user always has the possibility at any time to revoke his consent to the processing of the personal data. If the user contacts us by e-mail, he may object to the storage of his personal data at any time. In such a case, the conversation cannot continue.

The objection should be addressed to the following e-mail address: info@ziegener-frick.de

All personal data that has been stored in the course of the contact are deleted in this case.

VII. Rights of the person concerned

If your personal data is processed, you are the person concerned within the meaning of the GDPR and you have the following rights towards the responsible person:

1. Right to information

You may ask the responsible person to confirm if we process personal data concerning you.

If such processing is available, you can request information from the person responsible about the following information:

(1) The purposes of the processing for which the personal data are intended as well as the legal basis for the processing

(2) The categories of personal data concerned

(3) The recipients or categories of recipients to whom the personal data relating to you have been disclosed or are still being disclosed

(4) The planned duration of the storage of your personal data or, if specific information is not available, criteria for determining the duration of storage

(5) The existence of a right to rectification or erasure of personal data concerning you, a right to restriction of processing by the responsible or a right to object to such processing

(6) The existence of a right of appeal to a supervisory authority

(7) All available information on the source of the data if the personal data are not collected from the data subject

(8) This includes an automated decision-making process including profiling according to Article 22 (1) and (4) GDPR and - at least in these cases - meaningful information about the logic involved as well as the significance and the intended effects of such processing on the data subject.

You have the right to request information about whether the personal data relating to you are transmitted to a third country or to an international organization. In this regard, you can request to fgem over the appropriate guarantees. Article 46 GDPR in connection with the transfer.

2. Right to rectification

You have a right to rectification and / or completion to the responsible, if your personal data processed is incorrect or incomplete. The responsible person have to make the correction immediate.

3. Right to restriction of processing

You may request the restriction of the processing of your personal data under the following conditions:

(1) The accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal data

(2) The processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of their use instead

(3) The controller no longer needs the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise or defence of legal claims

(4) If you have objected to processing pursuant to Article 21(1) pending the verification whether the legitimate grounds of the controller override those of the data subject.

Where processing has been restricted under paragraph 1, such personal data shall, with the exception of storage, only be processed with the data subject’s consent or for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.

A data subject who has obtained restriction of processing pursuant to paragraph 1 shall be informed by the controller before the restriction of processing is lifted.

4. Right to delete

a) Obligation to delete

The data subject shall have the right to obtain from the controller the erasure of personal data concerning him or her without undue delay and the controller shall have the obligation to erase personal data without undue delay where one of the following grounds applies:

(1) Your personal data are no longer necessary for the purposes for which they were collected or otherwise processed

(2) The data subject withdraws consent on which the processing is based according to point (a) of Article 6(1), or point (a) of Article 9(2), and where there is no other legal ground for the processing

(3) The data subject objects to the processing pursuant to Article 21(1) and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing pursuant to Article 21(2)

(4) Your personal data have been unlawfully processed

(5) The personal data have to be erased for compliance with a legal obligation in Union or Member State law to which the controller is subject

(6) The personal data have been collected in relation to the offer of information society services referred to in Article 8(1).

b) Information to third parties

Where the controller has made the personal data public and is obliged pursuant to paragraph 1 to erase the personal data, the controller, taking account of available technology and the cost of implementation, shall take reasonable steps, including technical measures, to inform controllers which are processing the personal data that the data subject has requested the erasure by such controllers of any links to, or copy or replication of, those personal data.

c) Exceptions

The right to erasure does not exist if the processing is necessary

(1) For exercising the right of freedom of expression and information

(2) For compliance with a legal obligation which requires processing by Union or Member State law to which the controller is subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller

(3) For reasons of public interest in the area of public health in accordance with points (h) and (i) of Article 9(2) as well as Article 9(3)

(4) For archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Article 89(1) in so far as the right referred to in paragraph 1 is likely to render impossible or seriously impair the achievement of the objectives of that processing; or

(5) For the establishment, exercise or defense of legal claims.

5. Right to information

If you have the right of rectification, erasure or restriction of processing to the controller, he / she is obliged to notify all recipients to whom your personal data have been disclosed of this correction or deletion of the data or restriction of processing, unless: this proves to be impossible or involves a disproportionate effort.

You have a right to the person responsible to be informed about these recipients.

6. Right to data portability

You have the right have the right to receive the personal data concerning him or her, which he or she has provided to a controller, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided, where:

(1) the processing is based on consent pursuant to point (a) of Article 6(1) or point (a) of Article 9(2) or on a contract pursuant to point (b) of Article 6(1); and

(2) the processing is carried out by automated means

In exercising the right to data portability pursuant to paragraph 1, you have the right to have the personal data transmitted directly from one controller to another, where technically feasible.

The exercise of the right referred to in paragraph 1 of this Article shall be without prejudice to Article 17. That right shall not apply to processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

The right referred to in paragraph 1 shall not adversely affect the rights and freedoms of others.

7. Right to objection

You have the right at any time, for reasons that arise from your particular situation, to prevent the processing of your personal data, her which is based on point (e) or (f) of Article 6(1), including profiling based on those provisions.

The controller will no longer no longer process the personal data unless the controller demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defense of legal claims.

8. Right to revoke the data protection consent declaration

You have the right to revoke your data protection declaration at any time. The revocation of consent does not affect the legality of the processing carried out on the basis of the consent until the revocation.

9. Right to complain to a supervisory authority

Without prejudice to any other administrative or judicial remedy, every you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of his or her habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes this Regulation.

The supervisory authority with which the complaint has been lodged shall inform the complainant on the progress and the outcome of the complaint including the possibility of a judicial remedy pursuant to Article 78.

VIII. Plugins and Tools

1. You Tube

We maintain an online presence on YouTube to present our company and our services and to communicate with customers/prospects. YouTube is a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, a subsidiary of Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043 USA.

We would like to point out that this might cause user data to be processed outside the European Union, particularly in the United States. This may increase risks for users that, for example, may make subsequent access to the user data more difficult. We also do not have access to this user data. Access is only available to YouTube.

The YouTube privacy policy can be found here:

https://policies.google.com/privacy

The YouTube privacy policy can be found here:

https://policies.google.com/privacy

2. LinkedIn

We maintain an online presence on LinkedIn to present our company and our services and to communicate with customers/prospects. LinkedIn is a service of LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Irland, a subsidiary of LinkedIn Corporation, 1000 W. Maude Avenue, Sunnyvale, CA 94085, USA.

The LinkedIn privacy policy can be found here:

https://www.linkedin.com/legal/privacy-policy

3. Xing

We maintain an online presence on Xing to present our company and our services and to communicate with customers/prospects.

Xing is a service of XING AG, Dammtorstraße 29-32, 20354 Hamburg, Deutschland.

The Xing privacy policy can be found here:

https://www.xing.com/app/share?op=data_protection

4. Social media links via graphics

We also integrate the following social media sites into our website. The integration takes place via a linked graphic of the respective site. The use of these graphics stored on our own servers prevents the automatic connection to the servers of these networks for their display. Only by clicking on the corresponding graphic will you be forwarded to the service of the respective social network.

Once you click, that network may record information about you and your visit to our site. It cannot be ruled out that such data will be processed in the United States. Initially, this data includes such things as your IP address, the date and time of your visit, and the page visited. If you are logged into your user account on that network, however, the network operator might assign the information collected about your visit to our site to your personal account. If you interact by clicking Like, Share, etc., this information can be stored your personal user account and possibly posted on the respective network. To prevent this, you need to log out of your social media account before clicking on the graphic. The various social media networks also offer settings that you can configure accordingly.

The following social networks are integrated into our site by linked graphics:

YouTube

Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland, a subsidiary of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA

LinkedIn

LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Irland, a subsidiary of LinkedIn Corporation, 1000 W. Maude Avenue, Sunnyvale, CA 94085 USA.

Xing

XING AG, Dammtorstraße 29-32, 20354 Hamburg, Deutschland.