We are pleased that you are interested in our website. Protecting your privacy when processing personal data and the security of all business data is very important to us and we take this into account in our business processes. This is where we provide you with detailed information about how we handle your data.
Carl Stahl GmbH
Tobelstraße 2
73079 Süßen
Germany
Tel: +49 (0) 7162 / 4007 – 3000
E-Mail: carlstahl@carlstahl.com
Website:www.carlstahl.com/ie/en/
Dr Ralf W. Schadowski
E-mail: datenschutz@carlstahl.com
Tel: +49 241 / 44688 25
(1) Insofar as we request the consent of the data subject for the processing of personal data, Art. 6 (1) (a) of the EU General Data Protection Regulation (GDPR) as the legal basis.
(2) When processing personal data that is necessary for the performance of an agreement to which the data subject is party, Art. 6 (1) (b) GDPR serves as the legal basis. This also applies to processing operations that are necessary to carry out pre-contractual measures.
(3) Insofar as the processing of personal data is required to fulfil a legal obligation to which our company is subject, Art. 6 (1) (c) GDPR as the legal basis.
(4) If the vital interests of the data subject or of another natural person require the processing of personal data, Art. 6 (1) (d) GDPR as the legal basis.
(5) If processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not override the former interest, Art. 6 (1) (f) GDPR as the legal basis for the processing.
(1) The personal data of the data subject will be erased or blocked as soon as the purpose of the storage no longer applies.
(2) Storage beyond that time may be carried out if it is provided for by the European or national legislator in EU regulations, laws or other provisions to which the controller is subject.
(3) The data will also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or fulfilment of a contract.
(1) In the following, we will inform you about the collection of personal data when using our website. Personal data is any data that can be related to you personally, e.g. name, address, email addresses, user behaviour.
(2) When you contact us by email or using a contact form, we store the data you provide (your email address, possibly your name and your telephone number) in order to answer your questions. We will delete the data collected in this context once it no longer needs to be stored, or we will restrict its processing if there are statutory retention requirements.
(3) If we use instructed service providers for individual functions of our offer or would like to use your data for advertising purposes, we will inform you in detail about the respective processes below. We will also state the criteria for the storage period.
Collection of personal data when visiting our website
If you use the website for informational purposes only, i.e. if you do not register or otherwise provide us with information, we will only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure stability and security (the legal basis for this is Art. 6 (1) sentence 1 point f GDPR):
Use of cookies
(1) In addition to the data mentioned above, cookies are stored on your computer when you use our website. Cookies are small text files that are stored on your hard drive and assigned to the browser you are using, and through which certain information flows to the location that sets the cookie. Cookies cannot execute any programmes or transmit any viruses to your computer. They serve to make the internet offering more user-friendly and effective overall.
(2) The cookies are managed by the provider Cookiebot, represented by Usercentrics A/S, Havnegade 39, 1058 Copenhagen.
Privacy Policy: https://www.cookiebot.com/en/privacy-policy/
(1) In addition to the use of our website for purely informational purposes, we offer various services that you can use if interested. To do this, you will generally need to provide additional personal information that we use to provide the respective service and to which the aforementioned data processing principles apply. Mandatory information is marked with an asterisk. Information in fields not marked in this way is provided purely voluntarily.
(2) When you contact the service provider by email or using the contact form, we store your email address and, if you provide it, your name, telephone number, company and address in order to answer your questions.
(3) In some cases, we use external service providers to process your data. These have been carefully selected and instructed by us, are bound by our instructions and are regularly checked.
(4) If our service providers or partners are based in a country outside the European Economic Area (EEA), we will inform you of the consequences of this circumstance in the description of the offer.
In the following, we will inform you about your rights as a data subject in accordance with Art. 15 GDPR. You can exercise these rights at any time by contacting us directly. If you assert these rights against us, we will examine them in detail, taking into account the related legal requirements and conditions. We may ask you for further information in this regard. We will explain the results of our inspection and our approach to fulfilling your request in detail. It is possible that we will not be able to fully comply with your wishes in the manner you desire.
This should not deter you from claiming your rights from us or from asking us about them. We will be happy to answer any questions you may have.
(1) Right of access
You have the right to request information from us at any time as to whether and which of your personal data we process. This also includes information on the purposes of the processing, if applicable, on recipients to whom we have disclosed your data, the planned storage period and, if applicable, information on the origin of this data, unless we have collected it directly from you. Furthermore, you have the right to a single free copy of your personal data stored by us. We reserve the right to charge a reasonable administrative fee for the creation of any additional copies.
(2) Right to rectification
You have the right to request that we rectify any inaccurate data that we have stored about you. This also includes the right to have incomplete personal data completed.
(3) Right to erasure
You have the right to request that we erase the data we have stored about you. If we have published data about you, this also includes our obligation, in the context of the ‘right to be forgotten’ in accordance with Art. 17 (2) GDPR, taking into account available technology and the cost of implementation, your request for deletion of all links to such data and copies or replications of such data to other persons responsible for processing such published personal data.
(4) Right to restriction of processing
You have the right to request that we restrict the processing of personal data that we have stored about you. After that, the processing of this data is only possible with your consent or for a few, legally defined purposes.
(5) Right to object to the processing
If we base the processing of your personal data on the weighing of interests, you can object to the processing. This is the case if the processing is not necessary for the fulfilment of an agreement with you, which we describe in the following description of the functions. When exercising such an objection, we ask you to explain the reasons why we should not process your personal data as we have done. If your objection is justified, we will review the situation and either discontinue or adjust the data processing, or point out to you our compelling legitimate grounds for continuing the processing.
Of course, you can object to the processing of your personal data for advertising and data analysis purposes at any time. You can inform us of your objection to advertising using the contact details provided above.
(6) Right to revoke consent under data protection law
If you have given your consent to the processing of your data, you can revoke this at any time. Such a revocation influences the permissibility of the processing of your personal data after you have expressed it to us.
(7) Right to data portability
You have the right to receive the personal data that you have provided to us in a structured, commonly used and machine-readable format for the purpose of transferring it to another controller. At your request and taking into account the available technical options, this also includes direct transfer from us to the other responsible party.
(8) Right to appeal to a supervisory authority
You have the right to complain to a data protection supervisory authority about our processing of your personal data at any time.
(9) Automated decision-making, including profiling
You have the right to obtain information about the existence of automated decision-making, including profiling, in accordance with Art. 22 (1) and (4) GDPR and – at least in these cases – meaningful information about the logic involved and the scope and intended impact of such processing on the data subject.
(1) You can make public comments on our blog, where we publish various posts on topics related to our activities. Your comment will be published with the post along with the username you provided. We recommend using a pseudonym instead of your real name. The provision of a username and email address is required, all other information is voluntary. If you leave a comment, we will continue to store your IP address, which we will delete after one week. The storage is necessary for us to be able to defend ourselves against liability claims in the event of a possible publication of illegal content. We need your email address to contact you if a third party should object to your comment as unlawful. The legal basis for this is Art. 6 Para. 1 S. 1 lit. b and f GDPR. Comments are not checked before publication. We reserve the right to delete comments if third parties complain that they are unlawful.
(1) If you wish to place an order in our web shop, you must provide the personal data that we require for the processing of your order in order to conclude the contract. The mandatory information required for the execution of the agreements is marked separately; any further information is voluntary. We process the data you provide to process your order. For this purpose, we may forward your payment data to our principal bank. The legal basis for this is Art. 6 (1) 1st sentence (b) GDPR.
You can voluntarily create a customer account that allows us to store your data for later purchases so that you do not have to re-enter your data for each subsequent order. When you create an account, the data you provide will be stored until you revoke such storage. If you wish to delete your account, please inform us by sending an e-mail to carlstahl@carlstahl.com
We may also process the data you provide to inform you about other interesting products from our portfolio or to send you e-mails with technical information.
(2) We are obliged by commercial and tax law to store your address, payment and order data for a period of ten years. However, we will restrict the processing of your data after two years, i.e. your data will only be used to comply with legal obligations.
(3) To prevent unauthorised access to your personal data, in particular financial data, by third parties, the ordering process is encrypted using TLS technology.
(1) Mit Ihrer Einwilligung können Sie unseren Newsletter abonnieren, mit dem wir Sie über unsere aktuellen interessanten Angebote informieren. The advertised goods and services are named in the declaration of consent.
(2) We use the so-called double opt-in procedure for registering for our newsletter. This means that after your registration, we will send you an e-mail to the e-mail address provided, in which we ask you to confirm that you wish to receive the newsletter. If you do not confirm your registration within 24 hours, your information will be blocked and automatically deleted after one month. In addition, we store the IP addresses you use and the times of registration and confirmation. The purpose of this procedure is to be able to verify your registration and, if necessary, clarify any possible misuse of your personal data.
(3) The only mandatory information for sending the newsletter is your email address. The provision of further, separately marked data is voluntary and is used to address you personally. After you have confirmed, we store your email address for the purpose of sending you the newsletter. The legal basis for this is Article 6 (1) sentence 1 point (a) GDPR.
(4) You can revoke your consent to receive the newsletter and unsubscribe from the newsletter at any time. You can declare your cancellation by clicking on the link provided in every newsletter email.
The legal basis for the use of all the web analysis tools listed in this section is Art. 6 (1) sentence 1 point (f) GDPR, i.e. the protection of our legitimate interests in consideration of the interests of our website visitors. Our interest lies in analysing how our website visitors use our website in order to improve our services and make them more interesting for you as a user based on the statistics obtained in this way. If the analysis tool used also serves other purposes or we use it for other of our interests, we will inform you of this directly in the explanations for the respective analysis tool.
(1) This website uses Google Analytics, a web analysis service of Google Inc. (‘Google’). Google Analytics uses so-called ‘cookies’, text files that are stored on your computer and that enable an analysis of your use of the website. The information generated by the use of cookies about your use of this website is usually transferred to a Google server in the USA and stored there. However, if IP anonymisation is activated on this website, your IP address will be shortened by Google within member states of the European Union or in other states that are party to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the US and shortened there. On agreement with the operator of this website, Google will use this information to analyse your use of the website, to compile reports on website activities and to provide further services associated with the use of the website and the internet for the website operator.
(2) The IP address transmitted by your browser in the context of Google Analytics is not combined with other data from Google.
(3) You can prevent the storage of cookies by selecting the appropriate settings on your browser; however, please note that if you do this you may not be able to use the full functionality of this website. You can also prevent the data generated by cookies about your use of the website (incl. your IP address) from being passed to Google, and the processing of these data by Google, by downloading and installing the browser plugin available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de.
(4) This website uses Google Analytics with the extension ‘_anonymizeIp()’. This means that IP addresses are further processed in abbreviated form, thus excluding the possibility of personal references. Insofar as the data collected about you is personally identifiable, this is therefore immediately excluded and the personal data is thus promptly deleted.
(5) For the exceptional cases in which personal data is transferred to the United States, Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
(6) Third-party information: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001
Terms of service: http://www.google.com/analytics/terms/de.html
Privacy overview: http://www.google.com/intl/de/analytics/learn/privacy.html
Privacy Policy: http://www.google.de/intl/de/policies/privacy.
(1) We have embedded YouTube videos in our online offering. These videos are stored at http://www.YouTube.com and can be played directly from our website. These are all embedded in ‘extended data protection mode’, i.e. no data about you as a user is transferred to YouTube if you do not play the videos. Only when you play the videos will the data mentioned in paragraph 2 be transferred. We have no influence over this data transfer. By embedding YouTube videos, we are pursuing our interest in making our website more interesting and attractive for our visitors and to achieve a better presentation of content and facts. The legal basis for the use of the plug-in is Art. 6 (1) (1) (f) GDPR.
(2) When you visit the website, YouTube receives the information that you have accessed the corresponding subpage of our website. In addition, the data mentioned in § 5 of this declaration will be transmitted. This occurs regardless of whether YouTube provides a user account that you are logged in to or whether no user account exists. If you are logged in to Google, your information will be directly associated with your account. If you do not want this information to be associated with your YouTube profile, you must log out before activating the button. YouTube stores your data as a user profile and uses it for the purposes of advertising, market research and/or the customised design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide customised advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, but you must contact YouTube to exercise this right.
(3) For more information about the purpose and scope of data collection and processing by YouTube, please refer to the privacy policy. You can also find more information about your rights and settings options for protecting your privacy there: YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA, represented by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; https://www.google.de/intl/de/policies/privacy. Google also processes your personal data in the United States and is subject to the EU-US Privacy Shield, https://www.privacyshield. gov/EU-US-Framework.
(1) On this website, we use the Google Maps service. In doing so, we pursue our interest in increasing the attractiveness of our website by displaying interactive maps directly on our website and enabling you to use the map function conveniently. The legal basis for the use of the plug-in is Art. 6 para. 1 sentence 1 lit. f GDPR.
(2) When you visit the website, Google receives the information that you have accessed the corresponding subpage of our website. In addition, the data mentioned in § 5 of this declaration will be transmitted. This occurs regardless of whether Google provides a user account that you are logged in to or whether there is no user account. If you are logged in to Google, your information will be directly associated with your account. If you do not want this information to be associated with your Google profile, you must log out before activating the button. Google stores your data as a user profile and uses it for the purposes of advertising, market research and/or the needs-based design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, but you must contact Google to exercise this right.
(3) Further information on the purpose and scope of the data collection and its processing by the plug-in provider can be found in the provider's data protection declarations. These also contain further information about your rights in this regard and settings options for protecting your privacy: Google Inc., 1600 Amphitheater Parkway, Mountainview, California 94043, USA; https://www.google.de/intl/de/policies/privacy. Google also processes your personal data in the United States and is subject to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
We integrate the function for recognising bots, e.g. when entering data into online forms (‘ReCaptcha’) from the provider Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Privacy Policy: https://www.google.com/policies/privacy
Opt-Out: https://adssettings. google.com/authenticated
(1) We use the external payment service providers Stripe, whose platforms we and our users can use to carry out payment transactions.
(2) In the context of fulfilling agreements, we use Stripe on the basis of Art. 6 para. 1 lit. b. GDPR. Otherwise, we use Stripe on the basis of our legitimate interests in accordance with. Art. 6 para. 1 lit. f. GDPR in order to offer our users effective and secure payment options.
(3) The data processed by Stripe includes inventory data, such as name and address, bank details such as account or credit card numbers, passwords, TANs and checksums, as well as contract-, amount- and recipient-related information. This information is required to carry out the transactions. The data entered is processed exclusively by Stripe and stored by them. This means that we do not receive any account or credit card-related information, but only confirmation or negative information about the payment. Under certain circumstances, Stripe may transmit the data to credit agencies for the purpose of identity and creditworthiness checks. In this regard, we refer you to Stripe’s terms and data privacy information.
(4) Payment transactions are subject to the terms and conditions and the data protection notices of Stripe, which are available on their website or within their transaction applications. We also refer you to these for further information and the assertion of rights of revocation, information and other data subject rights.
(5) Addresses of the provider and URL with data protection information:
(1) On this website, we also use Google services (fonts). By using these offers, we can provide you with a better user experience on our website. This serves our interest in increasing the attractiveness of our website. The legal basis for the use of these offers is Art. 6 (1) sentence 1 point f GDPR.
(2) When you visit the website, the respective third-party provider receives the information that you have accessed the corresponding subpage of our website. In addition, the data mentioned in § 5 of this declaration will be transmitted. This occurs regardless of whether this third-party provider provides a user account that you are logged in to or whether no user account exists. If you are logged in to the third-party provider, your data will be assigned directly to your account. If you do not want the assignment with your profile with the respective third-party provider, you must log out before activating the button. The third-party provider may store your data as a user profile and may use this for the purposes of advertising, market research and/or the design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide customised advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, but to exercise this right you must contact the respective third-party provider.
(3) Further information on the purpose and scope of the data collection and its processing by the plug-in provider can be found in the data protection declarations of these providers, which are provided below. They will also provide you with further information about your rights in this regard and settings options for protecting your privacy.
(4) Addresses of the respective providers and URLs with their data protection notices:
(1) This website also uses the online marketing tool DoubleClick by Google. DoubleClick uses cookies to deliver ads that are relevant to users, to improve campaign performance reports, or to prevent a user from seeing the same ads more than once. Google uses a cookie ID to record which ads are displayed in which browser and can thus prevent them from being displayed more than once. In addition, DoubleClick can use cookie IDs to capture so-called conversions that are related to ad requests. This is the case, for example, when a user sees a DoubleClick ad and later visits the advertiser's website with the same browser and buys something there. According to Google, DoubleClick cookies do not contain any personal information. By using this tool, we are pursuing the interest of showing you advertising that is of interest to you, increasing the attractiveness of our website for you and achieving a fair calculation of advertising costs. The legal basis for the processing of your data is Art. 6 (1) (1) (f) GDPR.
(2) Due to the marketing tools used, your browser automatically establishes a direct connection with the Google server. We have no influence on the extent and further use of the data collected by Google through the use of this tool and therefore inform you according to our level of knowledge: Through the integration of DoubleClick, Google receives the information that you have accessed the corresponding part of our website or clicked on one of our ads. If you are registered with a Google service, Google can associate the visit with your account. Even if you are not registered with Google or are not logged in, there is a possibility that the provider may obtain and store your IP address.
(3) You can prevent participation in this tracking process in various ways:
Alternatively, you can visit the Network Advertising Initiative (NAI) website at http://www.networkadvertising.org.
(4) You can find more information about DoubleClick by Google at https://www.google.de/doubleclick and http://support.google.com/adsense/answer/2839090, and for general information about data protection at Google: https://www.google.de/intl/de/policies/privacy. Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
(1) This website uses Google Tag Manager. Google Tag Manager is a solution that allows marketers to manage website tags through a single interface. Google Tool Manager only implements tags. Tag Manager is a cookie-free domain. This means that no cookies are used and no personal data is collected. The tool is used to trigger other tags, which in turn may collect data under certain circumstances. Google Tag Manager does not access this data. If disabled at the domain or cookie level, it will remain disabled for all tracking tags implemented with Google Tag Manager.
Privacy Policy: http://www.google.de/tagmanager/use-policy.html
Last updated: 11 February 2019