Privacy Policy

The following data privacy statement applies to the use of our website.

We attach great importance to data protection. The collection and processing of your personal data are carried out in accordance with the applicable data protection regulations, and particularly the General Data Protection Regulation (GDPR).

Controller

The controller responsible for the collection, processing and use of your personal data within the meaning of Art. 4(7) GDPR is:

OTTE Aufzugstechnik GmbH
Geschäftsführung: Manfred Otte
Industriezentrum 52
32139 Spenge
Telefon: 05225 - 85030
Fax: 05225 - 8503 20
E-Mail: datenschutz@fassadenlift.de

If you wish to object to the collection, processing or use of your data by us in accordance with this data privacy statement, either as a whole or in relation to specific measures, you can address your objection to the controller.

You can save and print this data privacy statement at any time.

General purposes of the processing

We use personal data for the purpose of operating our website.

What data we use and why

Hosting

The hosting services we use provide the following services, which we in turn use for the purpose of operating the website: infrastructure and platform services, computing capacity, storage space and database services, security services, and technical maintenance services.

For this purpose, we or our hosting provider process inventory data, contact data, content data, contract data, usage data, and the meta and communications data of customers, interested parties and visitors to this website on the basis of our legitimate interests in the efficient and secure provision of our website in accordance with Art. 6(1)(f) GDPR in conjunction with Art. 28 GDPR.

Access data

We collect information about you when you use this website. We automatically collect information about your usage patterns and interaction with us, and record data about your computer or mobile device. We collect, store and use data related to every access to our website (so-called "server log files"). These access data include:

• name and URL of the retrieved file
• date and time of the retrieval
• data volume transferred
• message about successful retrieval (HTTP response code)
• browser type and browser version
• operating system
• referrer URL (i.e. the previous page visited)
• websites that are accessed by the user's system via our website
• internet service provider of the user
• IP address and the requesting provider

We use these log data without associating them with your person and without other profiling for statistical evaluation for the purpose of operating, securing and optimising our website. We also use them to anonymously track the number of visitors to our website (traffic) and the extent and type of use of our website and services, as well as for billing purposes to measure the number of clicks received via our partners. This information allows us to provide personalised and location-based content, as well as to analyse data traffic, troubleshoot, and improve our services.

This is also our legitimate interest pursuant to Art. 6(1)(f) GDPR.

However, we reserve the right to subsequently verify log data if concrete evidence reasonably suggests that data are being used unlawfully. We store IP addresses for a limited period of time in the log files if this is necessary for security purposes or for the provision or invoicing of a service, e.g. if you use one of our services. After cancellation of the order process or after receipt of payment, we delete the IP address if it is no longer required for security purposes. We also store IP addresses if we have a concrete suspicion of a crime in connection with the use of our website. In addition, we store the date of your last visit (during registration, login, clicking on links, etc.) as part of your account.

Cookies

We use so-called "session cookies" to optimise our website. A session cookie is a small text file which is sent by the relevant servers when you visit a website and is temporarily stored on your hard drive. This file contains a so-called session ID through which various requests from your browser can be assigned to the shared session. This allows your computer to be recognised when you return to our website. These cookies are deleted once you have closed your browser.

To a lesser extent, we also use persistent cookies (also small text files stored on your end device), which remain on your device and enable us to recognise your browser on your next visit. The cookies are stored on your hard drive and deleted automatically after a certain period of time has elapsed. Their lifespan ranges from 1 month to 10 years. This enables us to present our website to you in a more user-friendly, effective and secure manner and, for example, to display information on the site that is specially tailored to your interests. Persistent cookies enable you to use the shopping cart function over several pages and sessions, for instance.

Our legitimate interest in the use of cookies in accordance with Art 6(1)(f) GDPR is to make our website more user-friendly, effective and secure.

The cookies store the following data and information:

• login information
• language settings
• search terms entered
• information about the number of visits to our website and the use of individual website functions

When a cookie is activated, it is assigned an identification number; your personal data are not associated with this identification number. Your name, IP address and similar data that would allow the cookie to be associated with you will not be stored in the cookie. On the basis of cookie technology, we only receive pseudonymised information, for example about which pages of our shop were visited, which products were viewed, etc.

You can set your browser to inform you in advance about the storing of cookies and can decide on an individual basis whether you want to block the acceptance of cookies generally or in specific cases, or whether cookies should be disabled altogether. This may limit the functionality of the website.

Google Analytics

This website uses Google Analytics, a web analytics service provided by Google Inc. ("Google"). Google Analytics uses so-called "cookies" (text files stored on your computer) to analyse your use of this website. The information generated by these cookies about your use of this website is generally transmitted to a Google server in the USA and stored there.

However, if IP anonymity is activated on this website within the member states of the European Union or in other countries party to the Agreement on the European Economic Area, your IP address will be shortened beforehand by Google. Only in exceptional cases will your full IP address be transmitted to a Google server in the USA and shortened there.

Google will use this information on behalf of the website operator to analyse your use of the website, compile reports on website activity and provide additional services related to the use of the website and the internet.

Google will under no circumstances link the IP address transmitted by your browser to any other data held about you. You can prevent cookies from being stored by adjusting the relevant settings in your browser, however, this may restrict your use of the site's features.

You can prevent Google from collecting and processing the data generated by cookies regarding your use of the website (including your IP address) by downloading and installing the browser plugin available on the following website: h t t p : / / t o o l s . g o o g l e . c o m / d l p a g e / g a o p t o u t? h l = e n

Further details regarding the terms of use and data privacy are available at h t t p : / / w w w . g o o g l e . c o m / a n a l y t i c s / t e r m s / g b . h t m l and h t t p : / / w w w . g o o g l e . c o m / i n t l / d e / a n a l y t i c s / p r i v a c y o v e r v i e w . h t m l . Please note that on this website Google Analytics has been extended with the code gat._anonymizeIp(); in order to ensure that the IP addresses collected are anonymised (so-called "IP masking").

We also use Google Analytics to analyse data from AdWords and the DoubleClick cookie for statistical purposes. If you do not want this, you can deactivate it via the ad settings manager ( h t t p : / / w w w . g o o g l e . c o m / s e t t i n g s / a d s / o n e b / h h = e n ).

Data collected in the performance of our contractual obligations

We process personal data which we need to fulfil our contractual obligations, including your name, address, email address, products ordered, and invoicing and payment details. The collection of your personal data is necessary in order to conclude a contract.

The data will be deleted after expiry of the warranty periods and statutory retention periods. Data that are linked to a user account (see below) are retained in any case for the period of time that the account is maintained.

The legal basis for the processing of these data is Art. 6(1)(b) GDPR, because these data are required to enable us to fulfil our contractual obligations towards you.

E-Mail contact

When you contact us (e.g. by using our contact form or by email), we process your data insofar as this is necessary to process your query, including where follow-up questions arise.

If the data processing is carried out in order to take pre-contractual measures, which are carried out at your request, or, if you are already our customer, in order to perform the contract, the legal basis for this data processing is Art. 6(1)(b) GDPR.

We only process other personal data if you give your consent (Art. 6(1)(a) GDPR) or if we have a legitimate interest in processing your data (Art. 6(1)(f) GDPR). A legitimate interest is, for example, to reply to your email.

Retention period

Unless specified otherwise, we only store personal data for as long as is necessary to fulfil our stated purposes.

In some cases, the legislator provides for the retention of personal data, for example in tax or commercial law. In these cases, the data will only be further stored by us for these legal purposes, will not be processed in any other way, and will be deleted after expiry of the statutory retention period.

Your rights as a data subject

Under the applicable laws, you have various rights regarding your personal data. If you wish to exercise these rights, please send your request by email or by post, clearly identifying yourself, to the controller address mentioned above.

You will find a summary of your rights below.

Right of confirmation and access

You have the right to receive clear information about the processing of your personal data.

Further details are provided below:

You have the right to obtain confirmation at any time of whether or not we have processed your personal data. If this is the case, you are entitled to request information from us free of charge regarding the personal data we have stored about you, as well as a copy of these data. Furthermore, you have a right to the following information:

1. the purposes of processing;
2. the categories of personal data concerned;
3. the recipients or categories of recipient to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organisations;
4. where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period;
5. the existence of the right to request from the controller rectification or erasure of your personal data or restriction of processing of your personal data or to object to such processing;
6. the right to lodge a complaint with a supervisory authority;
7. where the personal data are not collected from you, any available information as to their source;
8. the existence of automated decision-making, including profiling referred to in Arts. 22(1) and (4) GDPR and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for you.

Where personal data are transferred to a third country or to an international organisation, you have the right to be informed of the appropriate safeguards pursuant to Article 46 GDPR relating to the transfer.

Right to rectification

You have the right to obtain from us without undue delay the rectification and, if necessary, completion of incorrect personal data held about you.

Further details are provided below:

You have the right to obtain from us without undue delay the rectification of incorrect personal data held about you. Taking into account the purposes of the processing, you have the right to have incomplete personal data completed, including by means of providing a supplementary statement.

Right to erasure ("Right to be forgotten")

In a number of cases, we are obliged to delete personal data held about you.

Further details are provided below:

You have the right to obtain from us the erasure of your personal data without undue delay pursuant to Art. 17(1) GDPR. We have the obligation to erase personal data without undue delay where one of the following grounds applies:

1. The personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed.
2. You withdraw consent on which the processing is based pursuant to Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR and there is no other legal ground for the processing.
3. You object to the processing pursuant to Article 21(1) GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Article 21(2) GDPR.
4. The personal data have been unlawfully processed.
5. The personal data have to be erased for compliance with a legal obligation in Union or Member State law to which we are subject.
6. The personal data have been collected in relation to the offer of information society services referred to in Article 8(1) GDPR.

If we have made the personal data public and are obliged pursuant to Art. 17(1) GDPR to erase the personal data, we will, taking account of the available technology and the cost of implementation, take reasonable steps, including technical measures, to inform controllers which are processing the personal data that you have requested the erasure by such controllers of any links to, or copy or replication of, those personal data.

Right to restriction of processing

In a number of cases, you are entitled to ask us to restrict the processing of your personal data.

Further details are provided below:

You have the right to obtain from us restriction of processing where one of the following applies:

1. The accuracy of the personal data is contested by you for a period enabling us to verify the accuracy of the personal data.
2. The processing is unlawful and you oppose the erasure of the personal data and request the restriction of their use instead.
3. We no longer need the personal data for the purposes of the processing, but they are required by you for the establishment, exercise or defence of legal claims.
4. You have objected to processing pursuant to Art. 21(1) GDPR pending the verification of whether our legitimate grounds override yours.

Right to data portability

You have the right to receive, transmit or have us transmit your personal data in machine-readable format.

Further details are provided below:

You have the right to receive the personal data you have provided to us in a structured, commonly used and machine-readable format, and have the right to transmit those data to another controller without hindrance from us where:

1. the processing is based on consent provided pursuant to Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR or concerns a contract pursuant to Art. 6(1)(b) GDPR and
2. the processing is carried out by automated means.

In exercising your right to data portability pursuant to Art. 20(1) GDPR, you have the right to have your personal data transmitted directly from us to another controller, provided that this is technically feasible.

Right to object

You have the right to object to the lawful processing of your personal data by us if this is justified by your particular situation and if our interests in the processing do not override yours.

Further details are provided below:

You have the right to object at any time to the processing of personal data held about you based on Art. 6(1)(e) or (f) GDPR for reasons arising from your particular situation. This also applies to profiling based on these provisions. We will then no longer process your personal data unless we can provide compelling reasons for processing that override your interests, rights and freedoms, or unless the processing serves to establish, exercise or defend legal claims.

Where personal data are processed for direct marketing purposes, you have the right to object at any time to processing of personal data for such marketing, which includes profiling to the extent that it is related to such direct marketing.

Where personal data are processed for scientific or historical research purposes or statistical purposes pursuant to Art. 89(1) GDPR, you have the right, on grounds relating to your particular situation, to object to processing of your personal data, unless the processing is necessary for the performance of a task carried out in the public interest.

Right to withdraw data privacy consent

You have the right to withdraw your consent to the processing of your personal data at any time.

Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with a supervisory authority, and particularly with the relevant authority in the Member State where you reside or work or where you suspect that the processing of personal data held about you is unlawful, at any time.

Data security

We make every effort to ensure the security of your data within the scope of the applicable data protection laws and in accordance with technical feasibility.

Your personal data are securely transferred to us via encryption. This applies both to your orders and your customer login. We use the SSL (Secure Socket Layer) encryption system. Please note, however, that data transfers via the internet (e.g. when communicating by email) can be subject to security vulnerabilities. It is not possible to totally safeguard your data from unauthorised access by third parties.

To secure your data, we maintain technical and organisational security measures in accordance with Art. 32 GDPR, which we continually adapt to the state of the art.

Furthermore, we do not guarantee that our website is available at specified times, as faults, interruptions and failures cannot be excluded. The servers we use are carefully backed up at regular intervals.

Data transfers to third parties (no transfers to non-eu countries)

In principle, we only use your personal data internally in our company.

If and insofar as we involve third parties in the fulfilment of contracts (e.g. logistics service providers), they will only receive personal data to the extent that the data are necessary for the corresponding service. In the event that we outsource certain aspects of data processing, we contractually oblige third-party processors to use personal data only in accordance with data protection laws and to ensure the protection of the rights of the data subject.

Data transfers to bodies or persons outside the EU in cases other than those mentioned in this privacy statement do not take place and are not anticipated to take place.