We take data privacy very serious. The processing and use of personal data by us is always done confidentially, as far as statutory regulations allow or if you have agreed to it.
However, please be aware that online data transfer always bears safety risks. A full protection from third parties accessing data is not possible. If this makes reconsider the usage of our website, you can always contact us in different ways, e.g. via mail or by phone.
A. Responsible authority; Contact person
GMH Stachow-Metall GmbH
represented by the business executives Friederike Stachow-Leitz and Marc Thompson
If you have questions regarding the processing of your personal data by us, as well as questions about your inquiry, regarding your rights which are listed further down in this policy, please contact the aforementioned address via mail or by phone: 05321/39594-0 or Email: firstname.lastname@example.org.
B. Processing of personal data; Purpose; Erasure
Personal data describes all data that refers to an identified or identifiable person (in the following referred to as “data subject”). Identifiable refers to a person, which can be identified directly or indirectly, especially through assignment of an identifier such as a name, an identification number, location data, online identification or to one or more special features, which express the physical, physiological, genetic, psychological, economic, cultural or social identity of that person.
Processing of data describes all, with or without assistance, automated procedures or any kind of process in regards to personal data such as the collection, the acquisition, the organization, the arranging, the storage, the adjusting or changing, the selecting, the scanning, the use, the disclosure through transmission, processing or any other form of provision, the reconciliation or the conjunction, the limitation, the erasure or the annihilation.
The use of the website is generally anonymous, which means that no personal data of yours will be processed by us. Exceptions are cases in which the browser you use transfers possible person data on its own accord. If not stated otherwise in the following, in regards to the processing of your personal data, we rely on the legal basis of Article 6 Paragraph 1 Sentence 1 b) data privacy basic regulation (in the following referred to as DP-BR), because the processing of data for the provision of functions that you asked for on this website is necessary.
When accessing our website, we collect the following, if necessary anonymous data, store and use them short-termed:
- the accessed website
- the time when the website was accessed
- URL of the website, which the user of website has accessed immediately before accessing our website
- amount of transferred data measured in byte
- the user's browser and its version
- the user's system software
- the user's IP-address
We do not at all use the data in order to identify or draw conclusions about you. That data will be stored in our server log-files for a limited amount of time. The data only serves to enable the correct display of our website, to perform an anonymous static evaluation, to improve our website, to expose or understand possible technical difficulties of our website and to induce a derivation of personal data in the case of third party accesses or an attempt of a third party access. Our warrant is based on Article 6 Paragraph 1 f) of the DP-BR. After the purpose, because of which the data was stored, has been achieved, the data will be routinely deleted or suspended, if legal regulations or legitimate interests oppose the erasure.
We will only process the person data, which you transferred online, if it is only necessary for the justification, procedure, closure or billing of a contractual relationship between us and you, or in order to fulfill any of your other requests. If this is the case, the following personal data will be processed by us:
- first and last name
- address, Email address, fax and telephone number
- reason for contacting
- contract data, if any
- documents transferred by you, if any
- verbally given information by you, if any
We do not share your personal data with third parties. Exceptions are third parties, which help us with the processing of the contract, e.g. the shipping company hired to make the delivery and the financial institute hired to handle the payment matters such as PayPal. Another exception is the necessary transmission of data to accountants and tax offices. However, the data transfer to those third parties will be kept to a minimum of necessary data.
The aforementioned data will be deleted after fulfilling the purpose for which they have been collected, unless, based on Article 6 Paragraph 1 Sentence 1 a), we are obliged to store the data longer because of an obligation to preserve and document records according or tax and commercial laws; or because you have agreed to a longer-term storage of data based on Article 6 Paragraph 1 Sentence 1 a) of the DP-BR; or because we require the data for our own legitimate interests or those of a third party and your fundamental rights do not outweigh our interests.
Cookies serve to recognize the user, to for example perceive the shopping cart of a user for a certain amount of time or to insert behavior-based ads on the website. Therefore, the data that is stored in the Cookie will be read when the website is accessed once again or if certain other websites are accessed. These information can contain static and personal data, such as the IP-address of the user.
If the Cookies that are set by us also process personal data, the processing of data follows Article 6 Paragraph 1 Sentence 1 b) of the DP-BR for the processing of the contract or following Article 6 Paragraph 1 Sentence 1 f) of the DP-BR for the preservation of our legitimate interests in the optimal user-friendly functionality of our website.
Common browsers give you the option in the settings to not allow Cookies, such as:
- MS Internet Explorer: http://windows.microsoft.com/de-DE/windows-vista/Block-or-allow-cookies
- Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
- Google Chrome: http://support.google.com/chrome/bin/answer.py?hl=de&hlrm=en&answer=95647
- Apple Safari: https://support.apple.com/kb/ph21411?locale=de_DE
- Opera: http://help.opera.com/Windows/10.20/de/cookies.html
Please note: It is not guaranteed that you can access all functions of this website without any limitations if you have disabled Cookies.
D. Users' Rights
1. Disclosure (Art. 15 DP-BR)
If requested, we will disclose to you, free of charge, which personal data of yours we have processed, to which purpose we have done so, to which category of receivers we have disclosed the data or if intend to, if possible the storage period or at least the criteria which determines that period, and if we did not receive the data directly from you: where we received the data from.
2. Authorization (Art. 16 DP-BR)
You are entitled to demand the authorization of false personal data or the completion of uncompleted personal data by us.
3. Erasure (Art. 17 DP-BR)
As long as your request does not go against any legal requirement to store data or the processing of data does not go against our freedom of expression and information or we need the data in question for enforcement, exertion or defense of titles, you are entitled to request immediate erasure of your personal data.
4. Limitation of processing (Art. 18 DP-BR)
Furthermore you are entitled to limitation of processing, if at least one of the following conditions is given:
- if you dispute the validity of your personal data that was processed by us, we will limit the period of processing which will allow us to verify your data;
- if the processing is illegitimate but you deny the erasure of your personal data and demand a limitation to the use of your data instead;
- if we do no longer need your personal data for purposes of processing data, however you need them for enforcement, exertion or defense of titles;
- in the case that you have raised objection against the processing of data under Article 21 Paragraph 1 DP-BR while it is not yet clear, if our legitimate interests outweigh yours.
5. Data Portability (Art. 20 DP-BR)
You also have the right to receive a copy of the personal data, that you have provided us, in a structured and machine-parsable format; you have the right to forward the data to third parties without obstruction by us if:
- the processing is according to a consent under Article 6 Paragraph 1 a) DP-BR or Article 9 Paragraph 2 a) DP-BR or a contract under Article 6 Paragraph 1 b) DP-BR
- and if the processing ensued via automated processes
- and thus the rights and freedom of others are not impaired.
When exercising the aforementioned right to data portability, you are entitled to request that we forward your personal data to a third party, provided that this is technically possible.
6. Right to object (Art. 21 DP-BR)
In the cases in which we process your personal data in accordance to legitimate interests under Article 6 Paragraph 1 Sentence 1 f) DP-BR, you are entitled to object the processing of your personal data, provided you have special reasons for this. You are further entitled to object the processing of your personal data if it is in one of the direct advertisements operated by us.
7. Cancellation right
In the cases in which we process your personal data in accordance to your given consent under Article 6 Paragraph 1 Sentence 1 a) or Article 9 Paragraph 2 a) DP-BR, you are entitled to cancel your given consent at any point in time. The legitimacy of our processing of data is not affected by the cancellation until then.
8. Right of appeal (Art appeal. 77 DP-BR)
If you find that our processing of your personal data violated the DP-BR, then you are entitled to complain to the controlling authority. In order to do so, you can turn to the data protection authority, which is responsible for us or your place of residence or country. You can find out which data protection authority is responsible for us under the following link: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html
9. Exercise of rights
If you have requests regarding the exercise of the aforementioned rights, please contact the person responsible that was listed under A.
E. Google Services
Transmission of data to third party states: When using Google services and the associated data transfer to Google, which will be described in detail in the following, this data transfer will ensue in third party states (non-EU states). The transmission of personal data to Google ensues according to the EU-US Privacy Shield based on the adequacy decision of the European Commission in the US. The compliance of the data protection law of EU states is guaranteed. You can view the respective certificate here: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI abrufen.
a) Google Analytics
This website uses IP anonymization. The IP-address of the users will be shortened within the EUstates and within the European Economic Area. This shortening cancels the personalization of your IP-address. Under the agreement of the order-related data processing, which the operators of this website have with Google Inc., using the collected data, this will create an evaluation of the use of the website and the website activity and renders services according to the internet usage.
Adapting the settings of your browser, you have the option to prevent the Cookies to be saved on your device. It is no guaranteed that you can access all functions of this website without any limitations if you have disabled Cookies.
Furthermore, with the help of a browser plugin you can prevent that the information collected by Cookies (which includes your IP-address) will be sent to and used by Google Inc. The following link will lead you to the plugin: https://tools.google.com/dlpage/gaoptout?hl=de
You can find further information to the data usage of Google Inc. here: https://support.google.com/analytics/answer/6004245?hl=de
b) Google Maps
This website uses the Google Maps API, in order to illustrate the location of our company and possibly facilitate the navigation for you. When using Google Maps, Google (Google Inc., 1600 Amphitheatre Parkway, Mountain View, California, 94043) also collects, processes and uses data regarding the website users' use of the Maps services.
You can find Google's terms of service here: http://www.google.de/intl/de/policies/terms/regional.html einsehen. You can find further information regarding the processing of data by Google in the data privacy statement of Google, which you can find here: http://www.google.de/intl/de/policies/privacy/ abrufen können.