Privacy policy

This privacy policy informs you about the type, scope and purpose of the processing of personal data (hereinafter referred to as “Data”) within our website. For more information on the terms used, such as “processing” or “data controller”, we refer to the definitions in Article 4 of the General Data Protection Regulation (GDPR).

Data controller

CLAYTEC GmbH & Co. KG
Nettetaler Str. 113
41751 Viersen
Tel. +49 2153 918-0
E-mail: service(at)claytec.com

Data protection officer

Arndt Spelten
BScom GmbH
Fröbelstr. 4
41844 Wegberg
Tel. +49 2431 81244-55
E-mail: info(at)bscom.de

Types of data processed

• Inventory data (e.g. name, address)
• Contact data (e.g. e-mail address, telephone number)
• Content data (e.g. text input)
• Meta/communications data (e.g. websites visited, browser type, IP address)

Purpose of processing

• The provision of the website, its function and its content
• Responding to contact inquiries
• Security measures
• The fulfillment of the contracts/orders placed
• Customer care and information

Relevant legal bases

Unless a specific legal basis is expressly stated, the following generally applies:

Data processing for the fulfillment of our services and the implementation of contractual measures, as well as the answering of inquiries, takes place on the basis of Art. 6 para. 1 (a) and Art. 7 GDPR. Data for the fulfillment of our legal obligations is processed on the basis of Art. 6 para. 1 (c) GDPR. Data processing to safeguard our legitimate interests takes place in accordance with Art. 6 para. 1 (f) GDPR. Art. 6 para. 1 (d) GDPR serves as the legal basis in cases where the vital interests of the data subject or another natural person require the processing of Data.

We ask you to inform yourself regularly about the content of our privacy policy. We will adapt the privacy policy as soon as this becomes necessary due to changes to the data processing carried out by us. We will inform you as soon as the changes require your cooperation (e.g. consent).

Cooperation with contract processors and third parties

If we disclose, transmit or otherwise grant access to Data to persons and companies (contract processors or third parties) in the course of our processing, this is done on the basis of legal permission (e.g. the transmission of data to fulfil the order or to financial service providers, Art. 6 para. 1 (b) GDPR), your consent, based on a legal obligation or a legitimate interest (e.g. when using agents, web hosting, etc.). If we commission third parties to process Data on the basis of a “data processing contract”, this is done on the basis of Art. 28 GDPR.

If Data is transmitted to outside countries (countries outside the EU / EEA) in order to fulfill our (pre-)contractual obligations, this is done subject to recognized guarantees for compliance with a data protection level equivalent to that of the EU (e.g. the “whitelist” of the EU, “Privacy Shield” of the USA etc.) or in compliance with recognized contractual duties (“standard contractual clauses of the EU”).

Rights of data subjects

• You have the right to be informed as to whether the Data concerning you is being processed and to receive information about this Data in accordance with Art. 15 GDPR.
• You have the right to request the completion or rectification of this Data (Art. 16 GDPR)
• You have the right to request the immediate erasure of the Data in accordance with Art. 17 GDPR or, alternatively, a restriction on the processing of Data in accordance with Art. 18 GDPR.
• You have the right to receive the Data concerning you that you have provided to us or to request that it be transmitted to other data controllers (Art. 20 GDPR).
• You also have the right to lodge a complaint with the responsible supervisory authority (Art. 77 para. 3 GDPR). You can find a list at https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html

Right of withdrawal and right of objection

You can revoke your consent in accordance with Art. 7 para. 3 GDPR with effect for the future. You can also object to the future processing of Data at any time in accordance with Art. 21 GDPR. The objection can be made against processing for direct marketing purposes in particular. The legality of the data processing carried out up to the point of the revocation remains unaffected by the revocation.

Cookies

Cookies are small files that are stored on your device when you visit our website. The basic purposes of cookies are to recognise you when using our website and to store information that is necessary for the operation of the website’s functions. Our website uses cookies to analyse the use of our website and to integrate external services such as Google Analytics, YouTube, Facebook and Instagram. The legal basis for the use is the legitimate interest pursuant to Article 6 para. 1 sent. 1 (f) GDPR.

You have the option of preventing the storage of cookies on your device by selectingthe appropriate settings in your browser. There is no guarantee that you will be able to access all functions of this website without restrictions if your browser does not allow cookies.

Google Analytics

This website uses the “Google Analytics” service offered by Google Inc. (1600 Amphitheater Parkway Mountain View, CA 94043, USA) to analyse website usage by users. The service uses “cookies” – text files that are stored on your device. The information collected by the cookies is usually sent to a Google server in the USA and stored there.

IP anonymisation is used on this website. The user’s IP address is shortened within the member states of the EU and the European Economic Area. This abbreviation eliminates the personal reference to your IP address. As part of the contract data agreement that the website operators have concluded with Google Inc., Google Inc. uses the information collected to compile an evaluation of website usage and website activity and provides services related to Internet usage.

You can also use a browser plug-in to prevent the information collected by cookies (including your IP address) from being sent to Google Inc. and used by Google Inc. The following link takes you to the corresponding plugin: https://tools.google.com/dlpage/gaoptout?hl=de

You can find more information on data usage by Google Inc. here: https://support.google.com/analytics/answer/6004245?hl=de

Mailings

Information is sent by email using the “CleverReach” software provided by CleverReach GmbH & Co. KG, Mühlenstr 43, 26180 Rastede. The Data required for dispatch (email address, name, address) is transmitted for this purpose. During processing, CleverReach also collects the following data, stores it temporarily and deletes it after a period of time:

· Information as to whether the email was delivered or not (detection of incorrect email addresses). Incorrect email addresses are listed for data maintenance purposes. The deletion takes place automatically after three weeks.

· Information on mailing success. The storage takes place anonymously in the form of statistics that contain neither personal data nor metadata.

· Information about unsubscribing from the distribution list. The deletion takes place automatically after three weeks.

By unsubscribing from the distribution list, your email address is deleted from the distribution list and automatically placed on the blacklist so that no further emails are sent via this route. You can unsubscribe using the method shown in the emails (unsubscribe link), on our website or informally by email. Irrespective of this, the rights under the GDPR (see above “Rights of data subjects” and “Right of withdrawal and right of objection”) remain unchanged.

Use of YouTube in extended data protection mode

We use the provider YouTube to embed videos. The videos have been embedded in extended data protection mode. Like most websites, YouTube also uses cookies to collect information about visitors to its website. Among other things, YouTube uses these to collect video statistics, to avoid fraud and to improve user-friendliness. This also leads to a connection being established with the Google DoubleClick network. When you start the video, it could trigger further data processing. We have no influence on that. You can find more information about data protection at YouTube in their privacy policy at: http://www.youtube.com/t/privacy_at_youtube

Erasure of Data

The Data processed by us will be erased or restricted in processing (e.g. blocked) in accordance with Art. 17 and 18 GDPR as soon as it is no longer required for the intended purpose or for the services to be provided and there is no legal obligation to retain it. Under legal requirements in Germany, the storage takes place for ten years in accordance with sections 147 para. 1 German Tax Code (AO), 257 para. 1 no. 1 and para. 4 no. 4 German Commercial Code (HGB) (books, records, management reports, accounting documents, trading books, documents relevant for taxation etc.) and six years in accordance with section 257 para. 1 (2) and (3), para. 4 HGB (commercial correspondence).

Business-related processing

In addition, we process contract data (e.g. subject matter, term, customer category), payment data (e.g. bank details, payment history) and booking data (e.g. hotel bookings, booking participation) from our customers, prospects and business partners for the purpose of providing the contractual services, service and customer care.

Hosting

The hosting services we use serve to make it possible to provide our website. We, or our hosting provider, process inventory data, contact data, content data, contract data, usage data, meta and communication data from customers, prospects and visitors to this website on the basis of our legitimate interests in an efficient and secure provision of this website in accordance with Art. 6 para. 1 (f) GDPR in conjunction with Art. 28 GDPR (conclusion of an order processing contract).

We, or our hosting provider, collect data about each access to the server on which this service is located (known as server log files) on the basis of our legitimate interests under Art. 6 para. 1 (f). The access data includes the name of the website or file accessed, the date and time of access, the amount of data transferred, notification of successful access, browser type and version, the user’s operating system, referrer URL (the previously visited page), IP address and the requesting provider. For security reasons (e.g. to investigate acts of abuse or fraud), log file information is stored for a maximum of 30 days and then erased. Data that requires further storage for evidence purposes is excluded from erasure until the matter in question has been conclusively dealt with.

Contact form

Data transmitted via the contact form, including your contact details, will be stored in order to be able to process your request or to be available for follow-up questions. This Data will not be passed on without your consent.

The Data entered in the contact form will be processed exclusively on the basis of your consent (Art. 6 para. 1 (a) GDPR). You can revoke your previously provided consent at any time. An informal email notification is sufficient for the revocation. The legality of the data processing operations carried out prior to the revocation remains unaffected by the revocation.

We will retain Data transmitted via the contact form until you ask us to delete it, revoke your consent to storage or there is no longer any need to store the Data. Mandatory legal provisions – in particular retention periods – remain unaffected.

Financial accounting, office organisation, contact management

We process Data in the context of administrative tasks as well as the organisation of our operations, financial accounting and compliance with legal obligations, such as archiving. We process the same Data that we process in the context of providing our contractual services. The bases for processing are Article 6 para. 1 (c) GDPR, Art. 6 para. 1 (f) GDPR. The purpose of and our interest in processing lies in financial accounting, office organisation, archiving of Data, i.e. tasks that serve to maintain our business activities, perform our tasks and provide our services. The Data that is erased with regard to contractual services and contractual communication corresponds to the information provided for these processing activities.
We disclose or transmit data to the financial authorities, consultants such as tax consultants or auditors, as well as other charges offices and payment service providers. Furthermore, on the basis of our business interests, we store information about suppliers, organisers and other business partners, e.g. for the purpose of subsequent contact. We generally store this data, which is mostly company-related, permanently.

SSL or TLS encryption in the booking system

Our website uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content that you send to us as the site operator. This means that Data that you transmit via this website cannot be read by third parties. You can recognise an encrypted connection by the “https: //” address line of your browser and by the padlock symbol in the browser bar.