Data Protection

This Privacy Statement is to inform you about the manner, scope and purpose of data processing when you visit our website. In addition, we would like to give you information on your rights in connection with data processing. When processing data, we comply with statutory requirements, including the General Data Protection Regulation (Regulation (EU) 2016/679, briefly GDPR).

1. Controller

We, the Wendroth & Co. (GmbH & Co.) KG act as controller within the meaning of data protection law. Our contact details are as follows:

Wendroth & Co. (GmbH & Co.) KG, ABC-Straße 4-8, 20354 Germany,
Phone +49 (0) 40 3690526-0, Fax +49 (0) 40 373267, E-Mail: datenschutz@wendroth.de

2. Supervisory Authority

The supervisory authority competent for us is:

Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit,
Ludwig-Erhard-Straße 22, 20459 Hamburg, Germany
Phone: +49 (0)40 – 42854-4040, Fax: +49 (0)40 – 42854-4000,
E-Mail: mailbox@datenschutz.hamburg.de, website: https://www.datenschutz.hamburg.de

3. Personal Data

Personal data are information relating to an identified or identifiable natural person (“data subject”), cf. Art. 4 (1) GDPR. Such information includes, e.g., name, years of age, date of birth, civil status, address, e-mail address, other contact details etc.

4. Server Log Files

When accessing our website, the browser of your end device transfers server log files to our provider. Server log files are anonymised data enabling us to make statistical evaluations and to optimise our website for the users. Such data, however, do not allow any conclusions regarding the person concerned.

Server log files include: internet protocol (IP) address, your operating system, the browser type and browser version used, the browser language, date and time of access, referrer URL (website from where the request comes), content of the request (precise page) as well as the data volume transferred.

Legal basis for this data processing is Art. 6 (1) s. 1 (f) GDPR. Our legitimate interest consists in using data processing operations for being able to perform statistical assessments concerning the use of our website and to optimise the website for the user.

5. Cookies

We do not use any cookies on our website.

(for your information: cookies are data sets in the form of text files allocated to the browser used by you and placed and stored on the hard disk of your end device (PC, laptop, tablet, smartphone etc.). Cookies are not able to implement any programmes or to transmit any viruses to your end device.)

6. Contact to Wendroth & Co. (GmbH & Co.) KG by E-Mail

You have the possibility to contact us via e-mail. Information given by you in this context (including personal data) as well as the time of your contacting and you e-mail address will be stored. These data will not be forwarded to third parties. We collect and use such data for dealing with your message and to give you a reply. As soon as it is no longer necessary to store such data and if there are no statutory retention obligations, the collected data will be deleted.

Legal basis for this data processing is Art. 6 (1) s. 1 (f) GDPR. Our legitimate interest consists in our need in such data in order to be able to deal with your message and give you a reply.

In this context, we explicitly point out that data transmission in the internet (e.g. when communicating via e-mail) is subject to security loopholes and cannot be absolutely protected against an access by third parties.

7. Links

When clicking a link, you will leave our website. Websites operated by third parties may place their own cookies on your computer or, as the case may be, collect, store and use personal data on their own. When visiting websites of third parties, you should obtain information about the data protection regulations applied there.

8. Disclosure of Information

Your personal data will only be disclosed

if you have given your explicit consent in this respect according to Art. 6 (1) s. 1 (a) GDPR;
if such disclosure is necessary for fulfilling contractual duties according to Art. 6 (1) s. 1 (b);
if we are legally obliged to disclose data within the meaning of Art. 6 (1) s. 1 (c) GDPR;
if the disclosure of data is in the public interest within the meaning of Art. 6 (1) (e) GDPR, or
if the disclosure of data is, according to Art. 6 (1) s. 1 (f) GDPR, necessary for protecting our legitimate interests or the legitimate interests of a third party, unless outweighed by your interest in the protection of your data.

9. Period of Storage

Your data will be stored by us as long as they are required for the respective purposes underlying their processing. In addition, we will store the data only if we are legally required to do so, for instance due to statutory retention obligations.

10. Rights of Data Subjects

In connection with our processing of your data, you have the following rights:

Right of access according to Art. 15 GDPR concerning the processing of your personal data by us and to the purposes of processing, categories of processed data, recipients or categories of recipients, period of storage or criteria concerning the determination of such period, right to rectification, erasure, restriction of processing or right to object the processing, right to lodge a complaint with a supervisory authority, right to obtain information on the source of the data, when appropriate, and the existence of automated decision-making and, when appropriate, information on the safeguards according to Art. 46 GDPR in case of a transmission to a third country or to international organisations;
Right to immediate rectification of incorrect personal data or to immediate completion of incomplete personal data according to Art. 16 GDPR;
Right to erasure of the stored personal data according to Art. 17 GDPR if the data are no longer necessary for the purposes for which they were collected or otherwise processed; if a consent given by a data subject is withdrawn and there is no longer any legal ground for the processing; if the data subject has objected the processing and the data may, according to Art. 21 (1) or (2) GDPR, no longer be processed; if the data have been unlawfully processed; if the personal data have to be erased for compliance with a legal obligation or if the data were collected in relation to the offer of information society services referred to in Art. 8 (1) GDPR. This does not apply if the processing is necessary for exercising the right of freedom of expression and information, for complying with a legal obligation, for reasons of public interest or for the assertion, exercise or defence of legal claims;
Right to restriction of processing according to Art. 18 GDPR if you contest the accuracy of data (and then for the period required for verifying the accuracy of the personal data); if processing is unlawful, but you oppose the erasure of the data and, instead, request a restriction of their use; if we are no longer in need of the data for processing purposes, but you need the data for the assertion, exercise or defence of legal claims, or if you have lodged an objection against processing according to Art. 21 (1) GDPR as long as it has not been clarified whether our legitimate interests override your interests;
Right to object the processing of your personal data according to Art. 21 (2) GDPR (if the data are processed for direct marketing purposes) or according to Art. 21 (1) GDPR (if the data are processed according to Art. 6 (1) s. 1 (e) or (f) GDPR for reasons resulting from your particular situation, unless we have compelling legitimate grounds for the processing which override your interests or unless the processing serves to assert, exercise or defend against legal claims). For more detailed information on the right to object, reference is made to clause 11 below;
Right to data portability according to Art. 20 GDPR, that means right to receive your personal data made available to us in a structured, commonly used and machine-readable format or right to have those data transmitted to another controller;
Right to withdraw your consent at any time according to Art. 7 (3) GDPR. As a result of such withdrawal, we will cease to process your data in future as from the time of such withdrawal. In this respect, cf. clause 12 below;
Right to lodge a complaint with a supervisory authority according to Art. 77 GDPR. The supervisory authority competent for us can be found in clause 2 above. The right of appeal applies irrespective of other legal remedies available under administrative law or before the courts.

11. Information on the Right to Object

According to Art. 21 GDPR, you may at any time raise objections against the processing of your personal data on the basis of Art. 6 (1) (e) (data processing in the public interest) or (f) (data processing for the purposes of legitimate interests after having balanced the interests of each party). If you object the processing of your personal data, they will no longer be processed, unless it is possible to give evidence of compelling legitimate grounds for their processing, which override the interests, rights and freedoms of the data subject or unless data processing serves to assert, exercise or defend against legal claims.

Please address your objection to the contact details mentioned in clause 1 above or via e-mail to datenschutz@wendroth.de

12. Information on the Right to Withdraw

If you have given us your consent to the processing of personal data, you may withdraw such consent at any time. This is, of course, also possible with respect to a consent, if any, granted to us prior to 25 May 2018 (prior to the coming into effect of the GDPR). A withdrawal of the consent can only become effective with respect to the future. The lawfulness of data processing prior to the date of withdrawal will not be affected.

Please address your withdrawal to the contact details mentioned in clause 1 above or via e-mail to datenschutz@wendroth.de