The person responsible within the meaning of the General Data Protection Regulation and the General Data Protection Regulation (GDPR) is:
KOX Datentechnik
In der Aue 75
50999 Köln
Phone: +49 (0) 2236 - 963303
Email: info@koxit.com
Value Added Tax number: DE123082363
Company management: Rolf Kox
A data protection officer has not been appointed.
Your rights as a user
You can at any time exercise the following rights under the above contact details:
- Information about your data stored with us and their processing
- Correction of incorrect personal data
- Restriction of processing
- Deletion of your data stored by us as soon as the purpose of storage is not required
- Notification of all recipients of corrections or deletions where personal data has been disclosed
- Data transferability, if you have agreed to the data processing or have concluded a contract with us
- Objection to the processing of your data
- Revocation of the data protection declaration of consent if you have given us your consent
- Complaint to the appropriate supervisory authority
Your competent supervisory authority depends on your state of residence, your work or the alleged violation. A list of the "Aufsichtsbehörden für den nichtöffentlichen Bereich" with contact details can be found at.
Definitions
Personal data:
'Personal data' means any information relating to an identified or identifiable natural person ('data subject'); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
Processing:
'Processing' means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
Profiling:
'Profiling' means any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects concerning that natural person's performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements.
Pseudonymisation:
'Pseudonymisation' means the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures to ensure that the personal data are not attributed to an identified or identifiable natural person.
Controller:
'Controller' means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law.
Processor:
'Processor' means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.
Recipient:
'Recipient' means a natural or legal person, public authority, agency or another body, to which the personal data are disclosed, whether a third party or not. However, public authorities which may receive personal data in the framework of a particular inquiry in accordance with Union or Member State law shall not be regarded as recipients; the processing of those data by those public authorities shall be in compliance with the applicable data protection rules according to the purposes of the processing.
Collection of general information when you visit our website
Type and purpose of processing:
When you access our website, information of a general character will be collected automatically. This information (server log files) includes the type of web browser, the operating system used, the domain name of your Internet service provider, your IP address and similar information. This information is technically necessary for the correct delivery of requested contents of websites and is mandatory when using the internet. Anonymous information of this type is statistically evaluated by us in order to optimize our Internet presence and the technology behind it. We do not use your data to draw conclusions about you personally.
Legal basis:
The legal basis for processing is Art. 6 para. 1 lit. a GDPR for processing operations requiring consent. Art. 6 para. 1 lit. b serves as the legal basis for the processing for the fulfilment of the contract. Art. 6 para. 1 lit. c serves as the legal basis for processing transactions to which we are legally obliged. Article 6 para. 1 lit. d serves as the legal basis for processing operations to protect the vital interests of the data subject. Art. 6 para. 1 lit. f serves as the legal basis for protecting the legitimate interests of our company or third parties.
Recipient:
The recipients of the data are only the responsible party and, if applicable, technical service providers who act as processors for the operation and maintenance of our website.
Duration of storage:
The data will be deleted as soon as they are no longer necessary to achieve the purpose for which they were collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended.
If the data is stored in log files, this is the case after seven days at the latest. Further storage is possible. In this case, the IP addresses of the users are deleted or alienated, so that an assignment of the calling client is no longer possible.
Provision mandatory or required:
The provision of the previously mentioned personal data is neither required by law nor by contract. Without the IP address, however, the service and functionality of our website are not possible. An objection is excluded for this reason.
Contacting
Type and purpose of processing:
When contacting us personally on site, by post, via the website, or by email/telephone/fax, the personal data of the person concerned will be processed in order to process the contact request and its handling. In case of contacting us, all personal data transmitted to us for the processing of the contact request and any resulting business activities will be stored. Categories of data collected are inventory data (e.g., names, addresses), contact data (e.g., email, telephone numbers) and financial data (e.g., account numbers, bank codes). We only store and process your data if you provide us with this data of your own accord. You have the right to object to the processing of your personal data and to revoke your consent at any time.
Legal basis:
The data entered in the contact form is processed on the basis of a legitimate interest (Art 6 Para. 1 lit f GDPR).
By providing the contact form, we would like to make it easy for you to contact us. Your data will be stored for the purpose of processing your inquiry and for possible followup questions.
If you contact us to request a quotation, the data entered in the contact form will be processed to carry out precontractual measures (Art 6 Para. 1 lit b GDPR).
Recipient:
The recipients of the data are only the responsible authorities or processors.
Duration of storage:
Data will be deleted at the latest 6 months after processing the request. If it comes to a contractual relationship, we are subject to the legal retention periods according to German Commercial Code and delete your data after expiry of these periods.
Provision mandatory or required:
Your personal data is provided on a voluntary basis. However, we can only process your request if you provide us with your name, email address and the reason for your request.
Cookies
Type and purpose of processing:
The Internet sites of KOX Datentechnik use Cookies. Cookies are text files that are stored as files on a device via an Internet browser. A cookie is used to store information about a user (or the device on which the cookie is stored) during or after their visit to an online site.
We use cookies to make our website more user-friendly. Some elements of our website require that the calling browser can be identified after the change of website. Cookies cannot be used to start programs or to transmit viruses to a computer. In general, our website can also be viewed without cookies.
You can use your browser settings to delete individual cookies or the entire cookie inventory. You will also receive information and instructions on how to delete these cookies or block their storage in the future. Depending on the provider of your browser you will find further information under the following links:
Use of Google Analytics
Type and purpose of processing:
On our website we use "Google Analytics", a web analysis service of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA (subsequently called "Google"). The purpose of data processing is to evaluate the use of the website and to generate reports on activities on the website. Other related services will then be provided based on the use of the website and the Internet.
Legal basis:
The data is processed on the basis of the user's consent (Art. 6 para. 1 lit. a GDPR).
Recipient:
The recipients of the data are the responsible authorities and Google as processor. We have signed the corresponding order processing contract with Google for this purpose.
Duration of storage:
The data will be deleted as soon as they are no longer required for our recording purposes.
Third country transfer:
Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. Google has submitted to the EU_US Privacy Shield. In addition, we have concluded standard data protection clauses with Google for the use of Google Analytics.
However, due to the activation of IP anonymisation on these websites, your IP address will previously be truncated by Google within Member States of the European Union or in other states party to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to generate reports on website activity and to provide the website operator with other services relating to website and Internet use. The IP address transmitted by your browser in the scope of "Google Analytics" will not be merged with other Google data.
Provision mandatory or required:
The provision of your personal data is voluntary, solely on the basis of your consent. If you prevent access, this may result in functional restrictions on the website.
Revocation of agreement:
You may refuse the use of cookies by changing the settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can stop the collection of the data by downloading and installing the browser plugin available under the following link: Browser Add On to disable Google Analytics
Profiling:
With the help of the tracking tool "Google Analytics" the behaviour of the visitors of the website can be rated and the interests can be analysed. For this purpose we create a pseudonymous user profile.
Use of script libraries (Google Webfonts)
Type and purpose of processing:
In order to display fonts correctly and graphically in an attractive way across all browsers, we use script libraries and font libraries such as "Google Web fonts" from Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; subsequently called "Google" https://www.google.com/webfonts) on our website. "Google Web Fonts" are transferred to your browser's cache to avoid multiple loading. If the browser does not support "Google Web Fonts" or does not allow access, the fonts on our website are displayed in a standard font.
The privacy policy of the library operator Google can be found here.
Legal basis:
Your agreement is the legal basis for the integration of "Google Web Fonts" and the associated data transfer to Google (Art. 6 para. 1 lit. a GDPR).
Recipient:
Calling script libraries or font libraries automatically triggers a connection to the library operator. It is theoretically possible - but currently also unclear if and for what purposes - that the operator collects Google data in this case.
Duration of storage:
We do not collect any personal data by integrating Google Web Fonts.
Further information about "Google Web Fonts" can be found at https://developers.google.com/fonts/faq and in Google's privacy policy.
Third country transfer:
Google processes your data in the USA and has submitted to the EU_US Privacy Shield.
Provision mandatory or required:
The provision of personal data is neither required by law nor by contract. However, it is not possible without the correct display of the contents of standard fonts.
Revocation of agreement:
The programming language JavaScript is frequently used to display the contents. You can therefore object to the data processing by deactivating the execution of JavaScript in your browser or by installing an integrated JavaScript blocker. Please note that this may result in functional restrictions on the website.
Use of Google Maps
Type and purpose of processing:
Our website uses the Google Maps API, a map service of Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, to display an interactive map. By using Google Maps, information about your use of this website (including your IP address) may be transmitted to and stored by Google on servers in the United States.
Legal basis:
Your consent is the legal basis for the integration of Google Maps and the associated data transfer to Google (Art. 6 Par. 1 lit. a GDPR).
Recipient:
By visiting websites with Google Maps, Google receives information that you have called such websites.
Google may transfer the information obtained by Google Maps to third parties if this is required by law or if third parties process this data on behalf of Google. It would also be technically possible for Google to use the data obtained to identify at least individual users. It is possible that personal data and personality profiles of users of the Google website could be processed for other purposes over which we have and cannot influence. This is regardless of whether Google provides a user account that you are logged in with or whether no user account exists. If you are logged in to Google, your information will be directly associated with your account.
If you do not want your profile to be associated with Google, you must first log out of Google. Google stores your data as usage profiles and uses them for the purposes of advertising, market research and/or demand-oriented shaping of its website. Such evaluation takes place in particular (even for unlogged-in users) to provide demand-oriented advertising and to inform other users of the social network about your activities on our website. You have a right to object to the creation of these user profiles, whereby you must contact Google to exercise this right. You can find more information about Google's data processing in the Google Privacy Policy. There you can change your personal data protection settings in the Data Protection Center.
Duration of storage:
We do not collect any personal data by integrating Google Maps.
Third country transfer:
Google processes your data in the USA and has submitted to the EU_US Privacy Shield.
Revocation of agreement:
If you do not want Google to collect data about you via our website, you have the option of deactivating the Google Maps service in a simple manner and thus preventing data transfer to Google: To do this, disable JavaScript in your browser and disable third-party cookie permissions. However, we would like to point out that in this case you will not be able to use the map display.
Provision mandatory or required:
The provision of your personal data is voluntary, solely on the basis of your consent. If you prevent access, this may result in functional restrictions on the website.
Detailed instructions on how to manage your own data in context with Google products can be found here.
Embedded YouTube videos
Type and purpose of processing:
We embed YouTube videos on some of our websites. YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA (subsequently called "YouTube") is the operator of the corresponding plug-ins. When you visit a website with the YouTube plugin, a connection to YouTube servers is established. YouTube is informed which websites you visit. If you are logged into your YouTube account, YouTube can associate your surfing behavior with you personally. You can prevent this by logging out of your YouTube account beforehand. When a YouTube video is started, the provider uses cookies that collect information about user behavior.
Further information on the purpose and scope of data collection and its processing by YouTube can be found in the privacy policy of the Provider. They will also provide you with more information about your rights and privacy settings (https://policies.google.com/privacy). Google processes your data in the USA and has submitted to the EU-US Privacy Shield.
Legal basis:
Your consent is the legal basis for the integration of YouTube and the associated data transfer to Google (Art. 6 para. 1 lit. a GDPR).
Recipient:
Calling YouTube automatically triggers a connection to Google.
Duration of storage and revocation of consent:
If you have deactivated the storage of cookies for the Google-ad-program, you will not have to expect such cookies when watching YouTube videos. YouTube also stores non-personal usage information in other cookies. If you want to prevent this, you must block the saving of cookies in your browser.
Further information on data protection at "YouTube" can be found in the provider's privacy policy.
Third country transfer:
Google processes your data in the USA and has submitted to the EU_US Privacy Shield.
Provision mandatory or required:
The provision of your personal data is voluntary, solely on the basis of your consent. If you prevent access, this may result in functional restrictions on the website.
SSL encoding
To protect the security of your data during transmission, we use state-of-the-art encryption methods (with an SSL or TLS certificate) via the HTTPS transport protocol.
Changes to our Privacy Policy
We reserve the right to adapt this Privacy Policy so that it always complies with current legal requirements or to implement changes to our services in the Privacy Policy, e.g. when introducing new services. The new data protection declaration will then apply for your next visit.
This document was last updated on 24 June 2018