Privacy policy

Privacy statement for ffg-ea.com

    Privacy policy

    Privacy statement for ffg-ea.com

    Thank you for visiting our website www.ffg-ea.com and for your interest in our company. The protection of your personal data is an important concern for us. Personal data is information about the personal or factual circumstances of an identified or identifiable natural person. This includes the real name, address, telephone number and date of birth, for example, but also all other data that can be related to an identifiable person.
    Since personal data enjoys special legal protection, we only collate it to the extent necessary for the provision of our website and of our performance. Indicated below is the personal information we collect during your visit to our website and how we use it.
    Our privacy policy practices conform to the legal regulations, in particular those of the German Privacy Policy Act (BDSG), the Telemedia Act (TMG) and the EU General Privacy Policy Regulations (GDPR). We will collect, process and store your personal data exclusively to the extent necessary for operational provision of this website and our content and services and for any necessary processing of inquiries, orders and contracts, but only insofar as there is a legitimate interest within the meaning of Art. 6, 1 (f) GDPR or where express permission has been granted. Only if you have given your express prior consent will your data also be used for further purposes specifically defined in such consent, e.g. to send advertising information via newsletter.

    1. Controller within the meaning of Art. 4, (7) GDPR
    The controller within the meaning of the GDPR and other national privacy policy laws of the Member States as well as other privacy policy provisions is:

    FFG European & American Holdings GmbH
    Salacher Straße 93
    73054 Eislingen

    Tel. +49 71 61 805-0
    info@ffg-ea.com
     

    2. Name and address of the privacy policy officer
    Andreas Zimmermann
    Liststraße 4, 73035 Göppingen, Germany 
    a.zimmermann@consilium-zimmermann.eu
     

    3. Provision of the website and creation of log files
    Our system automatically collates data and information from the calling computer's system each time our website is accessed.
    The following data is collated:

    Scope of data processing
    (1) Information about the browser type and version
    (2) The calling device's operating system
    (3) The calling device's IP address
    (4) The date and time of access
    (5) Web pages and resources (images, files, additional page content) accessed on our website
    (6) Websites from which the user's system gained access to our website (referrer tracking)

    This data is stored in our system's log files. Storage of this data along with the personal data of a specific user occurs in a manner that does not permit identification of individual site visitors.

    • The legal basis for processing this personal data is
      Art. 6, 1 (f) GDPR (legitimate interest). Our legitimate interest is to achieve the purpose described below.

    • Purpose for processing your data
      We log data so that we can maintain the compatibility our website for as many visitors as possible, to counter abuse and for fault rectification. This requires the calling computer's technical data to be logged so that we can respond as early as possible to display errors, attacks on our IT systems and/or errors in the functionality of our website. We also use the data to optimize the website and generally safeguard our technical information systems.

    • Storage duration
      We delete the technical data listed above when it is no longer needed for ensuring the compatibility of our website for all visitors, but no later than 3 months after you access our website.

    • Rights to object and to erasure
      Your rights to object and to erasure conform to the general privacy policy regulations on the legal rights to objection and erasure described later in this privacy statement.
       

    4. Special functions on our website
    Our site offers you various features where we collect, process and store personal data when you use them. We explain below what happens with this data:

    Newsletter registration form:

    • Scope of personal data processing
      The data you enter when registering for our newsletter.

    • The legal basis for processing this personal data is
      Art. 6, 1 (a) GDPR (tacit consent)

    • Purpose for processing your data
      We will exclusively use the data recorded in our newsletter registration screen to send you our newsletter informing you about our services and latest news. After you apply we will send a confirmation e-mail containing a link you have to click to complete the registration for our newsletter (double opt-in).

    • Storage duration
      You can cancel our newsletter at any time by clicking on the unsubscribe link, which also is included in each newsletter. We will delete your data promptly after cancellation. We will also promptly delete your data in the event of a non-completed application. We reserve the right to delete without giving reasons and without prior or subsequent information.

    • Rights to object and to erasure
      Your rights to object and to erasure conform to the general privacy policy regulations on the legal rights to objection and erasure described later in this privacy statement.

    Contact form(s):

    • Scope of personal data processing
      The data you enter in our contact forms.

    • The legal basis for processing this personal data is
      Art. 6, 1 (a) GDPR (tacit consent)

    • Purpose for processing your data
      We will only use the data collated via our contact form or forms to deal with the specific inquiry raised in the contact form.

    • Storage duration
      The collated data will be deleted promptly after dealing with your inquiry unless there are statutory retention periods.

    • Rights to object and to erasure
      Your rights to object and to erasure conform to the general privacy policy regulations on the legal rights to objection and erasure described later in this privacy statement.

    Order form:

    • Scope of personal data processing
      The data you enter in the form fields.

    • The legal basis for processing this personal data is
      Art. 6, 1 (b) GDPR (steps prior to entering into a contract)

    • Purpose for processing your data
      The data is processed to complete your order and to facilitate performance of the contract.

    • Storage duration
      The data will be deleted as soon as it is no longer required to process the order and there are no statutory retention obligations. This is usually after 10 years (cf. § 147 para. 2 in comparison with para.1, nos. 1, 4 and 4a of the Tax Code, § 14b (1) of the VAT Act).

    • Rights to object and to erasure
      Your rights to object and to erasure conform to the general privacy policy regulations on the legal rights to objection and erasure described later in this privacy statement.

    Application form:

    • Scope of personal data processing
      The data you enter in the form fields and any data you upload.

    • The legal basis for processing this personal data is
      Art. 6, 1 (b) GDPR (performance of a contract)

    • Purpose for processing your data
      Processing your application

    • Storage duration
      We erase the data once your application has been processed and there is no longer a legitimate interest in storing the application data. Your application documents are therefore deleted at the latest after 6 months unless an employment relationship is established.

    • Rights to object and to erasure
      Your rights to object and to erasure conform to the general privacy policy regulations on the legal rights to objection and erasure described later in this privacy statement.

    Appointment booking form:

    • Scope of personal data processing
      The data you enter when booking an appointment.

    • The legal basis for processing this personal data is
      Art. 6, 1 (b) GDPR (steps prior to entering into a contract)

    • Purpose for processing your data
      We will only use the data collated via our appointment booking form to deal with appointment inquiries received via the appointment booking form.

    • Storage duration
      We will promptly delete your appointment booking with us 12 months after the date of the appointment unless there are statutory retention obligations. We reserve the right to delete without giving reasons and without prior or subsequent information.

    • Rights to object and to erasure
      Your rights to object and to erasure conform to the general privacy policy regulations on the legal rights to objection and erasure described later in this privacy statement.
       

    5. Statistical evaluation of visits to this website - web tracker
    We collect, process and store the following data when you access this website or its individual website files: IP address, website used to access the file, name of the file, date and time of access, amount of data transferred and notification about success of the access (so-called web log). We only use this access data in non-personalized form for the continuous improvement of our website and for statistical purposes.
    We also use the following web tracker to evaluate visits to this website:

    Google Tag Manager

    • Scope of personal data processing
      Our site uses the service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland (hereafter referred to as: Google Tag Manager). Google Tag Manager provides a technical platform for execution and bundled control of other web services and web tracking programs using so-called "tags". Google Tag Manager accordingly stores cookies on your computer and analyzes your surfing behavior (so-called "tracking") if web tracking tools are run using Google Tag Manager. This data sent by individual tags integrated within Google-Tag Manager is compiled, stored and processed by Google Tag Manager under a uniform user interface. All integrated "tags" are later listed separately in this privacy statement. Please refer to the relevant section in this privacy statement for more information about privacy policy in relation to the tools integrated within Google Tag Manager. Accessing our website when Google Tag Manager tags are actively integrated results in data, in particular your IP address and your user activities, being transmitted to Google Ireland Limited servers and processed and stored outside the European Union, e.g. in the USA.
      The EU Commission has determined that an adequate privacy policy level exists in the USA if the data processing company has committed itself to the US-EU Privacy Shield Agreement and the data was exported to the USA in a permissible manner. This is the case with Google Ireland Limited. The provisions in the relevant section of this privacy statement apply to the web services integrated via Google Tag Manager. The tracking tools in Google Tag Manager use IP anonymization of the source code to ensure that Google Tag Manager anonymizes the IP address before transmission. Google Tag Manager is therefore only enabled for anonymous collection of IP addresses (so-called IP masking).

    • The legal basis for processing this personal data is
      Art. 6, 1 (a) GDPR (consent), either as part of registration with Google (opening a Google account and acceptance of the privacy policy implemented there) or by explicit consent when you access our site if you are not registered with Google.

    • Purpose for processing your data
      Google will use this information on our behalf to evaluate your visit to our website, compile reports about website activities and provide us with other services related to website and Internet use. The IP address sent by your browser as part of Google Analytics will not be combined with any other data held by Google Ireland Limited.

    • Storage duration
      Google will store the data relevant to web tracking for as long as it is necessary to perform the contracted web service. Data collation and storage occurs anonymously. Should data relating to natural persons nevertheless exist, it will be deleted immediately unless it is subject to statutory retention obligations. The data will be deleted in any case after expiry of the retention obligation.

    • Rights to object and to erasure
      You can prevent the collation and forwarding of personal data (especially your IP address) to Google and processing of this data by Google by installing a script blocker in your browser to deactivate the execution of script code (these are for instance available via www.noscript.net or www.ghostery.com) or via the "Do Not Track" setting on your browser. You can further prevent the collation of personal data (including your IP address) generated by the Google cookie and related to your use of our website and the processing of such data by Google by downloading and installing the browser plug-in available via the following link ( tools.google.com/dlpage/gaoptout ). For the Google Analytics security and privacy policies, see policies.google.com/privacy
       

    6. Integration of external web services and processing of data outside the EU
    Our website uses active JavaScript content from external providers, so-called web services. Accessing our website may result in these external providers obtaining personal information about your website session. This data may also be processed outside the EU. You can prevent this by installing a JavaScript blocker, such as the "NoScript" browser plug-in (www.noscript.net ), or by disabling JavaScript in your browser. This may result in functional limitations on Internet sites that you visit.
    We use the following external web services:

    Google
    A web service provided by Google Ireland Limited, Gordon House, Barrow Street, 4 Dublin, Irland is reloaded on our website (hereafter referred to as: Google). We use this data to ensure the full functionality of our website. Your browser may accordingly transmit personal data to Google. The legal basis for processing this data is Art. 6, 1 (f) GDPR. The legitimate interest is fault-free operation of our website. Google is self-certified under the EU-US Privacy Shield Agreement (cf. https://www.privacyshield.gov/list ). The data is deleted once the purpose for which it was collated has been fulfilled. Please refer to Google's privacy policy for further information about how the transmitted data is handled: policies.google.com/privacy . You can prevent Google from collating and processing your data by installing a script blocker in your browser to deactivate the execution of script code (these are for instance available via www.noscript.net or www.ghostery.com ).

    Google Video
    A web service provided by Google Ireland Limited, Gordon House, Barrow Street, 4 Dublin, Irland is reloaded on our website (hereafter referred to as: Google Video). We use this data to ensure the full functionality of our website. Your browser may accordingly transmit personal data to Google Video. The legal basis for processing this data is Art. 6, 1 (f) GDPR. The legitimate interest is fault-free operation of our website. Google Video is self-certified under the EU-US Privacy Shield Agreement (cf. https://www.privacyshield.gov/list ). The data is deleted once the purpose for which it was collated has been fulfilled. Please refer to Google Video's privacy policy for further information about how the transmitted data is handled: policies.google.com/privacy . You can prevent Google Video from collating and processing your data by installing a script blocker in your browser to deactivate the execution of script code (these are for instance available via www.noscript.net or www.ghostery.com ).

    gstatic
    A web service provided by Google Ireland Limited, Gordon House, Barrow Street, 4 Dublin, Irland is reloaded on our website (hereafter referred to as gstatic). We use this data to ensure the full functionality of our website. Your browser may accordingly transmit personal data to gstatic. The legal basis for processing this data is Art. 6, 1 (f) GDPR. The legitimate interest is fault-free operation of our website. gstatic is self-certified under the EU-US Privacy Shield Agreement (cf. https://www.privacyshield.gov/list ). The data is deleted once the purpose for which it was collated has been fulfilled. Please refer to gstatic's privacy policy for further information about how the transmitted data is handled: policies.google.com/privacy . You can prevent gstatic from collating and processing your data by installing a script blocker in your browser to deactivate the execution of script code (these are for instance available via www.noscript.net or www.ghostery.com ).

    YouTube
    A web service provided by Google Ireland Limited, Gordon House, Barrow Street, 4 Dublin, Irland is reloaded on our website (hereafter referred to as: YouTube). We use this data to ensure the full functionality of our website. Your browser may accordingly transmit personal data to YouTube. The legal basis for processing this data is Art. 6, 1 (f) GDPR. The legitimate interest is fault-free operation of our website. YouTube is self-certified under the EU-US Privacy Shield Agreement (cf. https://www.privacyshield.gov/list ). The data is deleted once the purpose for which it was collated has been fulfilled. Please refer to YouTube's privacy policy for further information about how the transmitted data is handled: policies.google.com/privacy . You can prevent YouTube from collating and processing your data by installing a script blocker in your browser to deactivate the execution of script code (these are for instance available via www.noscript.net or www.ghostery.com ).

    ytimg
    A web service provided by Google Ireland Limited, Gordon House, Barrow Street, 4 Dublin, Irland is reloaded on our website (hereafter referred to as ytimg). We use this data to ensure the full functionality of our website. Your browser may accordingly transmit personal data to ytimg. The legal basis for processing this data is Art. 6, 1 (f) GDPR. The legitimate interest is fault-free operation of our website. ytimg self-certified under the EU-US Privacy Shield Agreement (cf. https://www.privacyshield.gov/list ). The data is deleted once the purpose for which it was collated has been fulfilled. Please refer to ytimg's privacy policy for further information about how the transmitted data is handled: policies.google.com/privacy . You can prevent ytimg from collating and processing your data by installing a script blocker in your browser to deactivate the execution of script code (these are for instance available via www.noscript.net or www.ghostery.com ).

    ggpht.com
    A web service provided by Google Ireland Limited, Gordon House, Barrow Street, 4 Dublin, Irland is reloaded on our website (hereafter referred to as ggpht.com). We use this data to ensure the full functionality of our website. Your browser may accordingly transmit personal data to ggpht.com. The legal basis for processing this data is Art. 6, 1 (f) GDPR. The legitimate interest is fault-free operation of our website. ggpht.com is self-certified under the EU-US Privacy Shield Agreement (cf. https://www.privacyshield.gov/list ). The data is deleted once the purpose for which it was collated has been fulfilled. Please refer to ggpht.com's privacy policy for further information about how the transmitted data is handled: policies.google.com/privacy . You can prevent ggpht.com from collating and processing your data by installing a script blocker in your browser to deactivate the execution of script code (these are for instance available via www.noscript.net or www.ghostery.com ).

    website-check.de
    A web service provided by Website-Check GmbH, Beethoven Straße 24 in 66111 Saarbrücken, Germany is reloaded on our website (hereafter referred to as website-check.de). We use this data to ensure the full functionality of our website. Your browser may accordingly transmit personal data to website-check.de. The legal basis for processing this data is Art. 6, 1 (f) GDPR (legitimate interest). The legitimate interest is fault-free operation of our website. The data is deleted once the purpose for which it was collated has been fulfilled. Please refer to website-check.de's privacy policy for further information about how the transmitted data is handled: https://www.website-check.de/datenschutzerklaerung/ . You can prevent website-check.de from collating and processing your data by installing a script blocker in your browser to deactivate the execution of script code (these are for instance available via www.noscript.net or www.ghostery.com ).
     

    7. Information about the use of cookies

    • Scope of personal data processing
      We use cookies on various pages to enable the use of certain functions on our website. These so-called 'cookies' are small text files that your browser can store on your computer. These text files contain a character string that enables unique identification of the browser when our website is next accessed. The process of storing a cookie file is also known as 'setting a cookie'.

    • The legal basis for processing this personal data is
      Art. 6, 1 (f) GDPR (legitimate interest). Our legitimate interest is to maintain the full functionality of our website, to increase its usability and to permit a more individual customer approach. We can only identify individual site visitors using cookie technology if the site visitor has previously granted express consent to the appropriate use of personal data.

    • Purpose for processing your data
      Our website uses cookies to ensure the full functionality of our site and to improve its usability. Cookie technology also enables us to recognize individual visitors by pseudonyms, by any unique ID for example, so that we can provide more individualized services.

    • Storage duration
      Our cookie is stored until you delete it in your browser or, in the case of a session cookie, until the session has expired.

    • Rights to object and to erasure
      You can if you wish set your browser so that the setting of cookies is generally prevented. You can then decide whether to accept cookies on a case-by-case basis or to always accept cookies. Cookies can be used for different purposes, e.g. to detect that your PC has already connected to our website (permanent cookies) or to save recently viewed offerings (session cookies). We use cookies to offer you improved user convenience. We recommend you accept cookies from our website to enjoy the full benefit of our enhanced functionality. Your rights to object and to erasure otherwise conform to the general privacy policy regulations on the legal rights to objection and erasure described later in this privacy statement.
       

    8. Data security and privacy policy, communication via e-mail
    We use technical and organizational measures to protect your personal data during collation, storage and processing so that it is not accessible to third parties. We cannot guarantee complete data security for unencrypted communication by e-mail during transmission to our IT systems. We therefore recommend that highly confidentiality information be sent by encrypted communication or by post.
     

    9. Withdrawal of consent - data information and change requests - deletion and blocking of data
    You have a right at reasonable intervals to free information about your stored data and a right at any time to correction, blocking or erasure of your data. We will erase your data upon first request unless statutory regulations prevent this. You can also revoke consent for us to use your personal data at any time. You can send requests for information, erasure and correction of your data, or even suggestions, at any time to the following address:

    FFG European & American Holdings GmbH
    Salacher Straße 93
    73054 Eislingen

    Tel. +49 71 61 805-0
    info@ffg-ea.com
     

    10. Right to data portability
    You have the right to demand that we provide personally relevant information you have divulged to us in a structured, commonly used and machine-readable format. You can also demand from us that we transmit this data without delay to another controller on your first instruction, provided that the processing is based on consent as per Art. 6, 1 (a) GDPR or Art. 9, 2 (a) GDPR or on a contract as per Art. 6, 1 (b) GDPR and our processing is carried out by automated means.
    In exercising your right to data portability you also have the right to have your personal data transmitted directly from one controller to another, where technically feasible. This right may not adversely affect the rights and freedoms of others.
    The right to data portability does not apply to the processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
     

    11. Right to lodge a complaint with a supervisory authority under Art. 77, 1 GDPR
    If you suspect that your data is being processed unlawfully on our site you can naturally seek judicial remedy at any time. You also have the right to lodge a complaint with a supervisory authority without prejudice to this remedy. This right of complaint is available in the EU Member State of your habitual residence, place of work or place of the alleged infringement, i.e. you can choose the supervisory authority you use based on the above-mentioned places. The supervisory authority with which the complaint has been lodged will then inform you on the progress and the outcome of your complaint, including the possibility of a judicial remedy pursuant to Art. 78 GDPR.
     

    Created by:
    © IT-Recht-Kanzlei DURY – www.dury.de
    © Website-Check GmbH – www.website-check.de