1. Name and contact details of the person responsible for processing data and the data protection officer
This privacy information applies to data processing carried out by
Board of directors: Hans-Peter Fricke, Holger Wachholtz
Local court Tostedt HRB 205740
VAT identification number: DE 815 646 089
The Wilhelm Fricke data protection officer can be contacted at the address given above (all correspondence should be marked ‘for the attention of the data protection officer’), or via email at firstname.lastname@example.org.
2. Collection and storage of personal data, and the nature and purpose of its use
a) When visiting the website
When you visit our website, the browser that you use on your device automatically sends information to our website’s server. This information is temporarily stored in a log file. The following information is collected and stored until an automated deletion takes place:
- IP address of the computer,
- date and time of access,
- name and URL of file accessed,
- webpage from which our website was accessed (referrer URL),
- browser used and, where appropriate, the computer operating system plus the name of your access provider.
This data is processed by us for the following purposes:
- to ensure smooth connection to the website,
- to ensure easy use of our website,
- to evaluate system security and stability, and
- for other administrative purposes.
The legal basis for processing data is set out in Art. 6 Para. 1 S. 1 Point f of the GDPR (General Data Protection Regulation). Our legitimate interests arise from the reasons for collecting data listed above. Under no circumstances will we use the data collected to draw conclusions about individuals.
b) When signing up for our newsletter
Provided that you have given your consent in accordance with Art. 6 Para. 1 S. 1 Point a of the GDPR, we will use your email address to regularly send you our newsletter. In order to receive the newsletter, only an email address is required.
You can unsubscribe at any time, for example via the link at the end of each newsletter. Alternatively, you can email email@example.com.
c) When using our contact form
If you have questions of any kind, we give you the option of contacting us via a contact form on our website. To do so, you must provide a valid email address so that we know who submitted the enquiry, and to enable us to respond. Further information can be given voluntarily.
With your consent, data processing for the purpose of contacting us is carried out in accordance with Art. 6 Para. 1 S. 1 Point a of the GDPR.
The personal data collected by us for the purpose of the contact form will be automatically deleted after your enquiry has been dealt with.
d) When using our FRI:X IDENT app
Our FRI:X IDENT app can recognise text on images of type plates, parts, stickers, parcels and packaging using the camera function on your smartphone. This allows you to quickly and accurately identify products, parts and machines. Your smartphone uses text recognition software (OCR) and a simultaneous camera recording for this purpose. The data are converted accordingly and transferred to the GRANIT shop search via server call. To improve text recognition, the frames (fixed photos or images from the simultaneous camera recording) plus the recognised and converted text can be transferred to our servers and manually checked by our staff (including the developers of the app). These servers are located in data centres, with whose operators we have concluded order processing contracts that have been reviewed in accordance with data protection law.
These images usually also contain metadata from your smartphone which vary depending on your settings, and which you may be able to influence.
In addition to general error analysis (including functionality improvements and creation of updates), our staff and developers can also check whether the result of the automatic text recognition matches the expected result. They also analyse what type of part or number has been scanned. The images are then saved in the archive and deleted after 2 years.
When you download our app, the required information is transferred to the relevant app store, namely username, email address and customer number linked to your account, download time, and individual device identification number. We have no influence over this data collection, and are not responsible therefor. We only process the data insofar as it is necessary for downloading the mobile app to your smartphone. When you use the app, we collect the personal data described below to allow you to use its functions, and because said data are technically required for us to offer the functions of our app and to ensure stability and security:
- IP address, date and time of the request, time zone difference from Greenwich Mean Time (GMT), content of the request (specific page), access status/HTTP status code, amount of data transferred, website from which the request came, browser, operating system and interface, language and browser software version;
- Your device identification, unique device number (IMEI = International Mobile Equipment Identity), unique mobile subscriber number where applicable (IMSI = International Mobile Subscriber Identity), mobile phone number (MSISDN), MAC address for WLAN use, name of your mobile device, email address.
In addition to the data mentioned above, cookies are stored on your computer or a comparable technology is used when you use our app. Cookies are small text files that are stored in your smartphone’s memory and assigned to the app you are using. Cookies can provide us with certain information. Cookies cannot run programmes or transfer viruses to your smartphone. They are used to make apps more user-friendly and more effective. The legal basis for data processing is Art. 6, Para. 1, S. 1, Point b and Point f of the GDPR. Our legitimate interest follows from the purposes of data collection listed above. Under no circumstances will we use the data collected to draw conclusions about you.
3. Transfer of data
Your personal data will not be transferred to third parties except for the purposes stated below.
We will only pass your personal details on to third parties if:
- you have given your consent in accordance with Art. 6 Para. 1 S. 1 Point a of the GDPR,
- it is necessary for the enforcement, exercise or defence of legal claims in accordance with Art. 6 Para 1 S. 1 Point f of the GDPR, and there is no reason to believe that you have a legitimate interest in preventing your data from being passed on,
- it is a legal requirement in accordance with Art. 6 Para. 1 S. 1 Point c of the GDPR, or
- it is permitted by law and necessary for developing contractual relationships with you in accordance with Art. 6 Para. 1 S. 1 Point b of the GDPR.
Information relating to the device used is stored in the cookie. However, this does not mean that we can use it to discover your identity.
Cookies are used to make our online offering more enjoyable for you to use. We use session cookies to see that you have already visited individual pages of our website. These are automatically deleted once you leave our page.
We also use temporary cookies to optimise user-friendliness, and these are stored on your device for a set period. If you revisit our page to make use of our services, it will be automatically recognised that you have already visited the page. Your inputs and settings will also be remembered so that you do not have to re-enter them.
The data processed using cookies are required for the purposes stated to protect our legitimate interests and those of third parties in accordance with Art. 6 Para. 1 S. 1 Point f of the GDPR.
Most browsers accept cookies automatically. You can configure your browser to prevent cookies from being stored on your computer or to always display a notification before a new cookie is created. However, complete deactivation of cookies may mean that you are unable to use all the functions of our website.
5. Analytics tools
a) Tracking tools
The tracking tools listed below and used by us are implemented in accordance with Art. 6 Para. 1 S. 1 Point f of the GDPR. Our aim is to use tracking tools to ensure a tailored website design as well as continuous optimisation. We also use tracking tools to compile statistics about the use of our website, and to evaluate the optimisation of our offering for you. These are considered legitimate interests according to the regulation mentioned above.
The purposes of data processing plus the data categories can be gathered from the relevant tracking tools.
i) Google Analytics
For the purposes of demand-based website design and continuous optimisation of our pages we use Google Analytics, a web analytics service from Google Inc. (https://www.google.com/intl/en/about/) (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter ‘Google’). As part of this, pseudonymised usage profiles are created and cookies (see point 4) are used. The following information relating to your use of our website is generated by the cookie
- browser type/version,
- operating system used,
- referrer URL (previously visited page),
- host name of computer (IP address),
- time of server request,
and transferred to a Google server in the USA and stored there. The information is used to analyse how the website is used, to compile reports relating to website activities, and to provide further services relating to website and internet use for the purposes of market research and demand-based design of said web pages. This information is also passed on to third parties where appropriate, provided that this is required by law or where third parties are authorised to process this data. Under no circumstances is your IP address linked with other data from Google. IP addresses are anonymised to prevent this (IP masking).
You can prevent cookies from being installed by adjusting your browser settings. Please note that doing so will mean that you will be unable to use all the functions of the website to their full extent.
You can also prevent the data generated by the cookie relating to your use of the website (incl. your IP address) from being collected and processed by Google by downloading and installing a browser add-on (https://tools.google.com/dlpage/gaoptout?hl=en).
As an alternative to the browser add-on, particularly for browsers on mobile devices, you can prevent Google Analytics from collecting data by clicking on the link below. By doing so, an opt-out cookie is placed on your device which prevents future collection of your data when you visit this website. The opt-out cookie will be stored on your device, and only works in this browser and for our website. If you delete the cookies in this browser, you will have to enable the opt-out cookie again.
ii) Google AdWords conversion tracking
In order to collect statistics relating to the use of our website and to evaluate the optimisation of our website for you, we also use Google Conversion Tracking. If you access our website via a Google ad, Google AdWords will place a cookie (see point 4) on your computer.
These cookies are only valid for 30 days and are not used for personal identification. If a user visits particular pages of an AdWords customer’s website before the cookie has expired, Google and the customer can see that the user has clicked on the ad and been redirected to that page.
Each AdWords customer receives a different cookie. Therefore, cookies cannot be tracked via the websites of AdWords customers. The information collected using the conversion cookie is used to create conversion statistics for AdWords customers using conversion tracking. AdWords customers see the total number of users that have clicked on their ad and been redirected to a page with a conversion tracking tag. However, they do not receive any information with which users could be personally identified.
For the purposes of demand-based design and optimisation of this website, solutions and technologies from econda GmbH are used to collect and store anonymised data, from which usage profiles using pseudonyms are created. To this end, cookies can be used to allow recognition of a browser. However, usage profiles are not linked with information about the user behind the pseudonym without the consent of the user. IP addresses in particular are concealed as soon as they are received, meaning that it is not possible to match usage profiles to IP addresses. Visitors to this website can opt out of future data collection and storage at any time here. You will only be opted out on your current device and browser, please repeat the process on all devices as required.
If you delete the opt-out cookie, any requests that occur subsequently will be saved by us as standard; you can opt out here.
Our website uses the pixel-counting technology of WiredMinds GmbH (www.wiredminds.de) to analyze visitor behavior. In doing so, the IP address of a visitor is processed. The processing takes place exclusively for the purpose of collecting company-relevant information such as the company name. IP addresses of natural persons are excluded from further use (whitelist procedure). The IP address is not stored in LeadLab under any circumstances. When processing the data, it is our particular interest to protect the data protection rights of natural persons. Our interest is based on Art. 6 para. 1 lit. (f) DSGVO. The data we collect does not allow any inference to an identifiable person at any time.
WiredMinds GmbH uses this information to create anonymous usage profiles related to visitor behavior on our website. The data obtained in this way is not used to personally identify visitors to our website.
6. Social media plug-ins
In accordance with Art. 6 Para. 1 S. 1 Point f of the GDPR, we use social plug-ins for Facebook on our website to publicise the Wilhelm Fricke Group. The promotional aims behind this are considered a legitimate interest according to the GDPR. The responsibility for operation in accordance with privacy policies lies with the individual providers.
Social media plug-ins for Facebook are used on our website to make your visit more personal. These include the ‘LIKE’ and ‘SHARE’ buttons and the Facebook pixel (Facebook functions).
If you visit one of our pages containing a plug-in or pixel, your browser creates a direct connection with the Facebook servers. The plug-in content is transferred from Facebook directly to your browser and integrated in the website.
By integrating plug-ins, Facebook receives information that your browser has accessed the corresponding page from our online offering, even if you do not have a Facebook account or are not currently logged in to Facebook. This information (including your IP address) is transferred from your browser directly to a Facebook server in the USA and stored there. A cookie is normally placed on your device and used to collect information about your interests using pseudonyms. This information is then used when you visit our partners’ websites to generate advertisements for our offerings that are tailored to your interests. No personal data are saved, and no usage profiles containing personal data are attributed to you.
If you are logged into Facebook, Facebook can attribute the visit to our website to your Facebook account. If you interact with the plug-ins, for example by clicking the ‘LIKE’ or ‘SHARE’ buttons, this information is also transferred directly to a Facebook server and stored there. The information will also be posted on Facebook and shared with your Facebook friends.
Facebook can use this information for the purposes of advertising, market research and demand-based design of Facebook pages (also known as retargeting). To this end, Facebook creates usage, interest and relationship profiles, e.g. to evaluate your use of our website with regard to the ads you see on Facebook, to inform other Facebook users of your activity on our website, and to provide further services connected with the use of Facebook. If you do not want Facebook to attribute the data collected via our web pages to your Facebook account, you must log out of Facebook before visiting our website.
7. Rights of affected persons
You have the right,
- according to Art. 15 of the GDPR, to request information about your personal data processed by us. You can request information about the processing purposes, the personal data categories, the categories of recipients to whom your data have been or will be disclosed, the planned storage period, the existence of the right to request the amendment or deletion of your data, the restriction of the processing thereof and the right to object to such processing, the existence of the right to lodge a complaint with a supervisory authority, the origin of your data when these were not collected by us, and the existence of automated decision making, included profiling, plus meaningful details about this;
- according to Art. 16 of the GDPR, to request the immediate amendment of incorrect personal data saved by us, or the completion thereof;
- according to Art. 17 of the GDPR, to request the deletion of personal data saved by us provided that processing is not required to exercise the right to freedom of expression and information, to meet a legal requirement, for reasons of public interest, or for the enforcement, exercise or defence of legal claims;
- according to Art. 18 of the GDPR, to request the restriction of the processing of your personal data if the accuracy of the data is contested by you, the processing is unlawful, you oppose the deletion of the data and we no longer require it, you require the data for the enforcement, exercise or defence of legal claims, or you have objected to the processing in accordance with Art. 21 of the GDPR;
- according to Art. 20 of the GDPR, to receive the personal data provided to us in a structured, commonly used and machine-readable format or to request the transmission thereof to another responsible party;
- according to Art. 7 Para. 3 of the GDPR, to withdraw your consent at any time. The withdrawal of your consent will mean that we will no longer be permitted to process your data, and
- according to Art. 77 of the GDPR, to lodge a complaint with a supervisory authority. You can lodge a complaint with the supervisory authority in your habitual residence or place of work, or our place of business.
8. Right to object
If your personal data are processed on the basis of legitimate interests in accordance with Art. 6 Para. 1 S. 1 Point f of the GDPR, you have the right, in accordance with Art. 21 of the GDPR, to object to the processing of your personal data on grounds relating to your particular situation, or where data are processed for direct marketing purposes. In the latter case you have a general right to object which will be observed regardless of the situation.
If you would like to exercise your right to withdraw or object to the processing of your data, please email firstname.lastname@example.org .
To manage our marketing campaigns and improve our offering, we use the Unbounce tool from Unbounce Marketing Solutions Inc., 400-401 West Georgia Street, Vancouver, BC, Canada, V6B 5A1 on some pages in accordance with Art. 6 Para. 1 f of the GDPR. These pages are hosted by Unbounce, and our users’ browsers communicate directly with Unbounce to transfer IP addresses and place cookies. In addition to the IP address, Unbounce can record the date and time of a user’s visit to the pages, as well as the browser signatures, the operating system and the device type. The reasons for using Unbouce stated above constitute a legitimate interest within the meaning of the law. Further information about the types of data collected by Unbounce, and how they are used, can be found here: unbounce.com/privacy You can prevent cookies from being stored by setting your browser software accordingly.
Our website employs the widely-used SSL (Secure Sockets Layer) protocol in conjunction with the highest level of encryption supported by your browser (normally 256-bit encryption). If your browser does not support 256-bit encryption, we use 128-bit v3 technology. Encrypted pages can be recognised by the key or padlock symbol next to your browser’s address bar.
We use appropriate technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, deletion and unauthorised access by third parties. We continuously improve our security measures in line with technological developments.