The responsible person in accordance with data protection laws is
Mr. Peter Riesen
Brönninghauser Str. 26, 33729, Bielefeld
The data protection officer of ATH&S GmbH is Herr Peter Riesen.
By these data protection regulations, we hereby inform you (hereinafter also referred to as the «User» or «Data Subject») about our general data processing, when visiting our website and when contacting us by email or telephone. We hereby inform you of your rights regarding the processing of your data. Conceptually, «data processing» always means processing of personal data.
- Credentials (e.g. names, addresses, responsibilities organization affiliation, etc.);
- Contact details (e.g. email, phone/fax numbers, etc.);
- Content data (e.g. text data, image files, video files, etc.);
- Usage data (e.g. access data);
- Metadata/communication data (e.g. IP addresses).
If, as part of our data processing, we disclose, transfer data or otherwise provide access to data to other persons and companies, such as web hosts, order processors or third parties, we do so legally (for example, if the transfer of data to third parties in accordance with Article 6 of Chapter 1, paragraph b DS-GVO (General Data Protection Regulation) is necessary to fulfill the terms of a contract), if data subjects have expressed their consent to this or it is provided for by a legal obligation.
The criterion for the duration of storage of personal data is the corresponding statutory retention period. After this period, we delete relevant data if they are no longer required for target achievements, as well as contract fulfillment or preparation.
If we process data in a third country (i.e. outside the European Union (EU) or the European Economic Area (EEA)) or we do so as part of the use of third-party services, or there is a disclosure or transfer of information to third parties, then this can only take place if required to fulfill our (preliminary) contractual obligations, on the basis of your consent, on the basis of a legal obligation or on the basis of our legitimate interests. Provided that there are no legal or contractual obstacles, we process or allow the processing of data in a third country only if there are special conditions in accordance with Article 44 et seq. articles of DS-GVO (General Data Protection Regulation), that is, processing is carried out, for example, on the basis of special guarantees, such as an officially recognized conclusion on the compliance of the level of confidentiality with EU standards, or compliance with officially recognized special contractual obligations (so-called «standard contractual provisions»).
- date and time of data call (time tag);
- information about the request and the transmission address (protocol version, HTTP method, referrer, client application identification string (UserAgent));
- name of the activated file and the amount of data transmitted (requested URL, including the Query string, size in bytes);
- a message indicating whether the data call was successful (HTTP status code).
When using this general data and information, we do not draw any conclusions about the data subject. Personal evaluation or evaluation of personal data for marketing purposes or for the formation of a profile are not carried out. The IP address is not saved in connection thereof. The legal basis for temporary data storage is Article 6, Chapter 1, paragraph f of DS-GVO (General Data Protection Regulation). The collection of data to enable the use of the site and the storage of data in the registration files are absolutely necessary for smooth operation of our website. Therefore, no objections can be filed on the part of the data subject.
We collect log data accumulated during operation of our company’s communication equipment and automatically analyze it if it is necessary to detect, trace or eliminate failures or errors in communication devices or to protect against attacks on our information engineering, or to detect and protect against malware.
The legal basis for temporary storage and analysis of data is Article 6, Chapter 1, paragraph f of DS-GVO (General Data Protection Regulation). Data storage and analysis are absolutely necessary to ensure the possibility of using the website and its smooth operation. Therefore, there is no possibility of objection on the part of the person concerned.
The hosting services we use are designed to provide the following services: infrastructure and platform support services, computing capabilities, disk space and database services, security services and also maintenance services that we use to operate our website. At the same time, we or our third-party service provider process credentials, contact data, content data, contract data, usage data, metadata and communication data of users of our website based on our legitimate interests in the effective and reliable provision of this Internet service platform in accordance with Article 6, Chapter 1, Clause f of DS-GVO (General Data Protection Regulation) together with Article 28 DS-GVO (conclusion of contracts for data processing by third-party service providers).
You can contact us at the email address published on our website.If you use this communication method, the data specified in your message (for example, first name, last name, address), but at least the email address and the information contained in the email, may be stored together with the personal data that you provide for the purposes of contacting and processing your requests. In addition, our system collects the following data:
- IP address of the computer from which the request is being sent;
- Date and time of email sending.
The legal basis for processing personal data within the framework of the messages sent to us by e-mail is Article 6, Chapter 1, paragraph b or f of DS-GVO (General Data Protection Regulation).
If you send us an email or fax, the data that you transmit (for example, first name, last name, address) and the information specified in the email or fax are stored together with the personal data that you provide for the purposes of contacting and processing your requests.
The legal basis for the processing of personal data within the framework of messages sent to us by email and fax is Article 6, Chapter 1, paragraph b or f of the DS-GVO (General Data Protection Regulation).
If you send us requests using the contact form, your data from the request form, including the contact details that you provided there, is stored with us for the purposes of processing the request and in case there are any clarifications. We do not share this data with third parties without your consent. The legal basis for the processing of personal data obtained as a result of sending us letters and telefaxes is Article 6, Chapter 1, paragraph b or f of DS-GVO (General Data Protection Regulation).
As a data subject, you have the following rights in connection with the processing of your personal data:
The data subject has the right to immediately demand from the responsible person the rectification of any incorrect personal data related to the data subject. Taking into account the purpose of processing, the data subject has the right to request additional completion of incomplete personal data, including by means of an additional application.
The data subject has the right at any time to object to the processing of personal data relating to them, occurring in accordance with Article 6, Chapter 1, paragraph e) or f) of the DS-GVO (General Data Protection Regulation), for reasons arising from his specific situation; this also applies to profiling data based on these provisions. In such a case, the responsible person stops processing personal data, except in cases when he can present valid legal grounds for processing that prevail over the interests, rights and freedoms of the data subject, or when the processing serves to comply with, fulfill or protect legitimate requirements.
Due to the use of information society services and regardless of Directive 2002/58/EC, the data subject may exercise their right to object by automated means using technical specifications.
The data subject has the right to withdraw their consent to the processing of personal data carried out in accordance with the legislative provision on data protection at any time. The consent withdrawal does not affect the legality of processing performed on the basis of consent prior to its revocation.
Any data subject has the right to lodge a complaint with a supervisory authority without prejudice to any other administrative-legal or judicial remedies, in particular in the EU Member State at his place of residence, place of work or place of alleged violation, if the data subject believes that the processing of personal data concerning him violates this Provision.