1. An overview of data protection
The following information gives you an overview of the processing of your personal data by our company as well as the rights deriving from the GDPR for you.
Information about the responsible party (referred to as the “controller” in the GDPR)
The data processing controller („company“, „we“) on this website is:
Kaidi Electrical Europe GmbH
2. Data processing when visiting our website
When using the website for informational purposes only, i.e. if you do not register or otherwise provide us with information, we only collect the personal data that your browser sends to our server.
a. Processed data types:
If you wish to view our website, we collect the following data:
- Information about the browser type and version used;
- The user’s operating system and its interface
- The Internet service provider of the user
- The IP address of the user
- Date and time of access
- Websites from which the user’s system accesses our website
- Websites that are called up by the user’s system via our website
- data volume transferred
b. Purpose and legal basis for the processing
Data processing within the scope of informational use of the website is carried out for the purpose of pursuing our legitimate interests (legal basis Art. 6 para 1 sentence 1 lit. f) GDPR). Our legitimate interest lies in the technical necessity of the processing in order to display our website and to guarantee its stability and security.
c. Retention period
We delete or anonymise your personal data as soon as they are no longer required for the purposes for which we collected or used them in accordance with the above-mentioned purposes.
With regard to the storage of data in log files, the deletion or anonymisation will take place after 7 days at the latest.
Hosting with All-Inkl
The use of All-Inkl is based on Art. 6 sentence 1 lit. f GDPR. We have a legitimate interest in the most reliable representation of our website. If a corresponding consent has been obtained, the processing is carried out exclusively on the basis of Art. 6 sentence 1 lit. a GDPR; the consent can be revoked at any time.
We have concluded a data processing agreement (DPA) with the above-mentioned provider. This is a contract mandated by data privacy laws that guarantees that they process personal data of our website visitors only based on our instructions and in compliance with the GDPR.
4. Data processing in the context of business relations
a. Processed data types
We process personal data which we receive from you in the course of our business relationship in your function as customer / contractual partner or as representative / authorised representative / contact person of the company which is our customer / contractual partner. In the business initiation phase and during the business relationship, personal data is generated by us and you. In the case of companies, this data mainly concerns the contact person responsible for you and, if applicable, the company management (managing director, board of directors). The usually generated personal data are:
Name, form of address, title, address, telephone number, fax number, e-mail address, account data, your company / firm (with VAT ID), department, position, date of birth, subject matter of the contract, credit assessments, inquiries and correspondence for the conclusion, administration, execution and billing of the contract.
b. Purpose and legal basis for the processing
The processing of personal data is done for reasons of contract establishment, execution and fulfilment as well as for the implementation of pre-contractual measures. We use your personal data in particular to prepare offers, process orders and contact you (legal basis Art. 6 para 1 sentence 1 lit. b) GDPR).
In addition, we store your personal data within the scope of your business relationship with us due to statutory archiving obligations (legal basis Art. 6 para 1 sentence 1 lit. c GDPR).
c. Retention period
Your personal data will be processed and stored for as long as it is necessary to fulfil our contractual and legal obligations. After fulfilment of the contractual and legal obligations, the personal data is regularly deleted. Exceptions to this are:
The fulfilment of commercial and tax law retention periods. The periods for this are between two and ten years.
The preservation of evidence within the framework of the applicable statute of limitations. In accordance with Sec. 195 ff. of the German Civil Code [BGB], these limitation periods can be up to thirty years. The regular limitation period here is three years until the end of the year.
5. Cookie Consent with Complianz
Our website uses Complianz’s cookie consent technology to obtain your consent to store certain cookies on your device and to document this consent in a manner compliant with data protection regulations. The provider of this technology is Complianz B.V., Atoomweg 6B, 9743 AK Groningen, the Netherlands (hereinafter “Complianz”).
6. Contact form
If you submit inquiries to us via our contact form, the information provided in the contact form as well as any contact information provided therein will be stored by us in order to handle your inquiry and in the event that we have further questions. We will not share this information without your consent.
The processing of these data is based on Art. 6 para 1 sentence 1 lit. b) GDPR, if your request is related to the execution of a contract or if it is necessary to carry out pre-contractual measures. In all other cases the processing is based on our legitimate interest in the effective processing of the requests addressed to us (Art. 6 para 1 sentence 1 lit. f) GDPR) or on your agreement (Art. 6 para 1 sentence 1 lit. a) GDPR) if this has been requested.
The information you have entered into the contact form shall remain with us until you ask us to eradicate the data, revoke your consent to the archiving of data or if the purpose for which the information is being archived no longer exists (e.g., after we have concluded our response to your inquiry). This shall be without prejudice to any mandatory legal provisions, in particular retention periods.
If you would like to subscribe to the newsletter offered on this website, we will need from you an e-mail address as well as information that allow us to verify that you are the owner of the e-mail address provided, and consent to the receipt of the newsletter. No further data shall be collected or shall be collected only on a voluntary basis. We shall use such data only for the sending of the requested information and shall not share such data with any third parties.
The processing of the information entered into the newsletter subscription form shall occur exclusively on the basis of your consent (Art. 6 para 1 sentence 1 lit. a) GDPR). You may revoke the consent you have given to the archiving of data, the e-mail address and the use of this information for the sending of the newsletter at any time, for instance by clicking on the “Unsubscribe” link in the newsletter. This shall be without prejudice to the lawfulness of any data processing transactions that have taken place to date.
The data deposited with us for the purpose of subscribing to the newsletter will be stored by us until you unsubscribe from the newsletter or the newsletter service provider and deleted from the newsletter distribution list after you unsubscribe from the newsletter or after the purpose has ceased to apply. We reserve the right to delete or block e-mail addresses from our newsletter distribution list at our own discretion within the scope of our legitimate interest in accordance with Art. 6 para 1 sentence 1 lit. f) GDPR.
After you unsubscribe from the newsletter distribution list, your e-mail address may be stored by us or the newsletter service provider in a blacklist to prevent future mailings. The data from the blacklist is used only for this purpose and not merged with other data. This serves both your interest and our interest in complying with the legal requirements when sending newsletters (legitimate interest within the meaning of Art. 6 para 1 sentence 1 lit. f) GDPR). The storage in the blacklist is indefinite. You may object to the storage, so we delete your personal information if your interests outweigh our legitimate interest.
8. Plug-ins and Tools
Google Web Fonts
To ensure that fonts used on this website are uniform, this website uses so-called Web Fonts provided by Google. When you access a page on our website, your browser will load the required web fonts into your browser cache to correctly display text and fonts.
To do this, the browser you use will have to establish a connection with Google’s servers. As a result, Google will learn that your IP address was used to access this website. The use of Google Web Fonts is based on Art. 6 para 1 sentence 1 lit. f) GDPR. The website operator has a legitimate interest in a uniform presentation of the font on the operator’s website. If a respective declaration of consent has been obtained (e.g., consent to the archiving of cookies), the data will be processed exclusively on the basis of Art. 6 para 1 sentence 1 lit. a) GDPR. Any such consent may be revoked at any time.
If your browser should not support Web Fonts, a standard font installed on your computer will be used.
When using this tool, your personal data may be transferred to the USA. For more information on Google Web Fonts, please follow this link: https://developers.google.com/fonts/faq and consult Google’s Data Privacy Declaration under: https://policies.google.com/privacy?hl=en.
We use “Google reCAPTCHA” (hereinafter referred to as “reCAPTCHA”) on this website. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
The purpose of reCAPTCHA is to determine whether data entered on this website (e.g., information entered into a contact form) is being provided by a human user or by an automated program. To determine this, reCAPTCHA analyzes the behavior of the website visitors based on a variety of parameters. This analysis is triggered automatically as soon as the website visitor enters the site. For this analysis, reCAPTCHA evaluates a variety of data (e.g., IP address, time the website visitor spent on the site or cursor movements initiated by the user). The data tracked during such analyses are forwarded to Google.
reCAPTCHA analyses run entirely in the background. Website visitors are not alerted that an analysis is underway.
Data are stored and analyzed on the basis of Art. 6 para 1 sentence 1 lit. f) GDPR. The website operator has a legitimate interest in the protection of the operator’s websites against abusive automated spying and against SPAM. If a respective declaration of consent has been obtained, the data will be processed exclusively on the basis of Art. 6 para 1 sentence 1 lit. a) GDPR. Any such consent may be revoked at any time.
10. Your Rights
As a “data subject”, you have the following rights towards us with regard to the personal data concerning you (Art. 15 ff. GDPR) in addition to the rights already mentioned:
a. Right of access
The person concerned has the right to obtain confirmation from us as to whether personal data relating to him or her is being processed; if this is the case, he or she has the right to be informed of this personal data and to receive the information specified in Art. 15 GDPR.
b. Right to rectification
The person concerned has the right to ask us to correct incorrect personal data concerning him/her and, if necessary, to complete incomplete personal data (Art. 16 GDPR).
c. Right to erasure
The person concerned has the right to demand from us that personal data relating to him/her be deleted without delay if one of the reasons listed in detail in Art. 17 GDPR applies, e.g. if the data are no longer required for the purposes pursued (right to erasure).
d. Right to restriction of processing
The data subject has the right to request us to restrict processing if one of the conditions listed in Art. 18 GDPR is met, e.g. if the data subject has lodged an objection to the processing, for the duration of the examination by the controller.
e. Right to object
THE DATA SUBJECT SHALL HAVE THE RIGHT TO OBJECT AT ANY TIME, ON GROUNDS RELATING TO HIS PARTICULAR SITUATION, TO THE PROCESSING OF PERSONAL DATA CONCERNING HIM. WE WILL THEN NO LONGER PROCESS THE PERSONAL DATA UNLESS WE CAN DEMONSTRATE COMPELLING REASONS FOR PROCESSING WHICH ARE WORTHY OF PROTECTION AND WHICH OUTWEIGH THE INTERESTS, RIGHTS AND FREEDOMS OF THE DATA SUBJECT, OR UNLESS THE PROCESSING SERVES TO ASSERT, EXERCISE OR DEFEND LEGAL CLAIMS (ART. 21 GDPR). THE REVOCATION ONLY TAKES EFFECT IN THE FUTURE. PROCESSING OF PERSONAL DATA PRIOR TO THE REVOCATION IS NOT AFFECTED BY THIS.
f. Right to data portability:
Pursuant to Art. 20 GDPR, the person concerned has the right to receive the personal data you have provided us with in a structured, common and machine-readable format or to request that it be transferred to another responsible party.
g. Right to lodge a complaint with a supervisory authority
Without prejudice to any other administrative or judicial remedy, every data subject has the right to lodge a complaint with a supervisory authority if the data subject considers that the processing of personal data relating to him or her is in breach of the GDPR (Art. 77 GDPR). The data subject may invoke this right before a supervisory authority in the Member State in which he or she is resident, at his or her place of work or at the place where the alleged infringement is committed.
h. Withdrawal of consent
Consent granted by a data subject for the processing of personal data can be revoked at any time. This also applies to consents granted before 25 May 2018 (validity of the GDPR). The revocation shall only take effect in the future. Processing of personal data prior to the revocation is not affected by this.