Privacy policy

The privacy policy applies to the processing of personal data

• for visits to our website (see clause 2.1 below);
• for the handling of personal data of our customers, suppliers, visitors and other communication partners (clause 2.2) and
• for the handling of personal data of applicants (clause 2.3).

TOX® PRESSOTECHNIK GMBH & CO. KG
Riedstrasse 4
88250 Weingarten
Deutschland
Telephone: +49 (0) 751 5007-0
Fax: +49 (0) 751 5007-139
E-mail: info@tox-pressotechnik.com

is the controller of the personal data according to Art. 4 para. 7 of the General Data Protection Regulation (GDPR) in the context of this privacy policy (see also our imprint).

Our data protection officer is:

Dr. Florian Deusch, specialist lawyer for IT law, law firm Dr. Gretter;
external data protection officer (certified by TÜV and udis gGmbH - Ulmer Akademie für Datenschutz und Datensicherheit gGmbH).

The data protection officer can be contacted during normal office hours as follows

Anwaltskanzlei Dr. Gretter
Eisenbahnstraße 41
88212 Ravensburg
Telephone: +49 751 362250
E-mail: datenschutz(at)gretter-rae.de

He is at the same time the data protection officer of TOX® PRESSOTECHNIK INTERNATIONAL GmbH & Co. KG.

Processing is any process in connection with personal data. Processing includes, for example, the collection, recording, organization, sorting, storage, adaptation or modification, reading, calling-up, use, disclosure by transmission, dissemination or any other form of provision, reconciliation or linking, restriction, deletion or destruction of personal data.

2.1.1 Use of our websites for information purposes

When our websites are used for information purposes only, i. e. when you do not register or transmit data to us in any other way, we collect only the personal data which your browser transmits to our server. When you want to view our websites, we collect the following data:

• IP address;
• date and time of the request;
• time zone difference to Greenwich Mean Time (GMT);
• content of the request (specific page);
• access status/HTTP status code;
• the respective data transferred;
• the website the request originates from;
• browser;
• the operating system and its user interface;
• the language and version of the browser software.

Purpose and legal basis

The purpose of the processing of this data is to display our websites to you and to guarantee stability and security. The legal basis is Art. 6 para. 1 sentence 1 lit. f) of the GDPR. It states that the processing of personal data is legal in order to protect our legitimate interests, unless the interests or fundamental rights or freedoms of the data subject prevail.
This personal data will only be stored for the duration of your visit to our website.

2.1.2 Contacting us by e-mail or use of the contact form on our website

When you contact us by e-mail or via a contact form, the data you provide (your e-mail address, if applicable, your name and your telephone number) will be stored by us for the purpose of answering your questions. We delete the data generated in this context after the storage is no longer necessary, or restrict the processing if statutory retention obligations exist. The legal basis for these processing operations is Art. 6 para. 1 sentence 1 lit. f) GDPR unless there are legal obligations to retain data, then the legal basis for storage is Art. 6 para 1 sentence 1 lit. c) GDPR according to which processing is legal provided this is necessary to fulfil a legal obligation.

2.1.3  Cookies

a) Additionally to the aforementioned data, cookies are stored on your computer when you use our websites. Cookies are small text files that are stored on your hard drive in the browser you use and through which certain information is transmitted to the person setting the cookie (here: us). Cookies cannot run any programs or transfer viruses to your computer. Their purpose is to make the Internet offer in general more user-friendly and more effective. The legal basis for this is your consent – which can be revoked at any time – in accordance with Art. 6 para. 1 sentence 1 lit. a) GDPR which you give at the start of your visit to our website or Art. 6 para. 1 sentence 1 lit. f) GDPR.

b) These websites use the following kinds of cookies, the scope and functionality of which are explained below:

• Transient cookies (see aa)
• Persistent cookies (see bb).
  
  aa) Transient cookies will automatically be deleted when your close your browser. These include in particular the session cookies. These store the so-called session ID with which different requests of your browser can be assigned to the shared session. This allows your computer to be recognized when you return to our website. The session cookies will be deleted when you log out and close the browser.
  
  bb) Persistent cookies will automatically be deleted after a period specified by us, which may vary depending on the cookie. You can delete cookies any time in the security settings of your browser. By deleting the cookies, you also revoke your consent to the processing of the respective cookies.

c) You can configure your browser settings according to your wishes and for example refuse the acceptance of third party cookies or all cookies. Please note that in that case you might not be able to use all the functions of our website.

2.1.4. Google Analytics

a) These websites use Google Analytics, a web analysis service of Google Inc. ("Google“). Google Analytics uses so-called "cookies“, text files which are stored on your computer and which allow an analysis of your use of the websites. The information created by the cookie about your use of our websites (such as your anonymized IP address) is generally transmitted to a Google server in the USA and stored there. If IP anonymization is activated on these websites, your IP address is first shortened by Google within the member states of the European Union and in other countries which are contracting parties to the Agreement on the European Economic Area. It is only in exceptional cases that the IP address is transmitted to a Google server in the USA and shortened there. On behalf of the operator of these websites Google will use this information to analyze your use of the websites to create reports about the website activities and provide further services for the website operator in connection with the use of the websites and the Internet.

b) The IP address transmitted by your browser in connection with Google Analytics will not be linked to other data by Google.

c) You can prevent the storage of cookies with the according setting in your browser software; however, please note that in this case you might not be able to use the full extent of all the functions of our websites. In addition, you can prevent the collection of the data created by the cookie and related to your use of the websites (including your IP address) as well as the processing of these data by Google with the download and installation of the browser plug-in available at the following link:
http://tools.google.com/dlpage/gaoptout?hl=de.
You can also prevent the collection by Google Analytics by clicking on the following link. An opt-out cookie is set with this link which prevents the collection of your data in the future during your visit of these websites: Deactivate Google Analytics.

d) These websites use Google Analytics with the extension "_anonymizeIp()“. As a result, IP addresses are further processed in shortened form, so that they cannot be linked to a particular individual. As far as the data collected about you contain personal reference, it will be excluded immediately and the personal data will be deleted immediately.

e) We use Google Analytics to analyze and regularly improve the use of our websites. With the help of the obtained statistics we can improve our offer and make it more interesting for you as a user. For the exceptional cases in which personal data is transferred to the USA, Google has submitted to the EU-US Privacy Shield https://www.privacyshield.gov/EU-US-Framework. The legal basis for the use of Google Analytics is Art. 6 para. 1 sentence 1 lit. f) GDPR.

f) Information of the third-party supplier: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. User terms and conditions: http://www.google.com/analytics/terms/de.html, overview of data protection: http://www.google.com/intl/de/analytics/learn/privacy.html, as well as the privacy policy: http://www.google.de/intl/de/policies/privacy

g) These websites also use Google Analytics for an analysis of visitor flows across devices which is carried out via a user ID. You can deactivate the analysis of your use across multiple devices in you customer account under "My data“, "Personal data“.

2.1.5 Integration of YouTube videos

a) We integrated YouTube videos in our online offer which are stored at http://www.YouTube.com and can be played directly from your websites.

b) When you visit the websites YouTube will receive the information that you accessed the according subsite of our websites. Additionally, the data mentioned under clause 2.1.1 of this policy are transmitted. This is independent of whether YouTube provides a user account through which you are logged in or whether no user account exists. When you are logged into Google your data will be allocated directly to your account. If you do not want the allocation to your profile on YouTube, you must log out before activating the button. YouTube stores your data as user profiles and uses them for the purposes of advertising, market research and/or demand-oriented design of its websites. Such an evaluation takes place in particular (even for users which are not logged-in) to provide demand-oriented advertising and to inform other users of the social network about your activities on our websites. You have a right of objection to the creation of these user profiles, and you must contact YouTube to exercise this right.

c) For more information on the purpose and scope of data collection and processing by YouTube, please refer to the privacy policy. There you will also find further information about your rights and setting options to protect your privacy: https://www.google.de/intl/de/policies/privacy. Google processes you data also in the USA and has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

2.1.6 Registration and newsletter

a) If you would like to use certain service areas of our websites, for example the download of CAD data, it is necessary that you register the following personal data about yourself:

• first name, last name;
• the company you work for;
• business contact details (e-mail, postal address, telephone number; the information "indus-try" is optional). You must assign a sufficiently secure password for this data.

b) For the registration for our CAD download we use the so-called double opt-in procedure. This means that after entering your registration data, we will send you an e-mail to the e-mail address you provided in which we ask you to confirm your registration details. If you do not confirm your registration, your information will be blocked and deleted after the legal storage periods have expired (at least until the expiry of the limitation period for any claims). In addition, we store your IP addresses and the time at which your registration data was entered and confirmed. The purpose of the procedure is to be able to prove your registration and, if necessary, to clarify any possible misuse of your personal data. The legal basis for this is Art. 6 para. 1 sentence 1 lit. f) of the GDPR.

c) Newsletter
During the registration process you have the opportunity to subscribe to our newsletter with current information about our company and our range of services. The declaration of the option to subscribe to our newsletter is optional. You can register to download the CAD data without subscribing to the newsletter. After your subscription to the newsletter, we will carry out the so-called "double opt-in procedure", as described above under letter b). If you have subscribed to the newsletter during registration, you also confirm your consent to receiving the newsletter by means of the double opt-in procedure. For the newsletter we only process your e-mail address, your name and the name of the company you work for, so that we can send you the newsletter and address you personally. The legal basis for the processing of your personal data is Art. 6 para. 1 sentence 1 lit. a) GDPR. You can revoke your consent to receiving the newsletter and unsubscribe from the newsletter at any time. You can declare your revocation by e-mail to in-fo@tox-de.com or by sending a message to the contact details in the imprint.

2.2.1 We process the following data of the contact persons of our customers, suppliers (or supplier applicants), visitors to our offices and premises and other communication partners (hereinafter also referred to as "data subject(s)"):

• title, first name and last name as well as position (if applicable, in the company and/or the authority the data subject is working for);
• communication data at the company and/or authority consisting of address, telephone number (landline / cellphone) and e-mail address;
• all information necessary to process each required communication, in particular project and contract data (especially of customers and suppliers), e-mails, appointment dates and meeting results;
• for customer contact data: last contact made;
• for visitors: date and time of the visit, arrival at and departure from the company premises, contact partner of the visitor in our company, number plate of the car the visitor parked on our company premises.

2.2.2 We process the data according to section 2.2.1 for the following purposes and in accordance with the following legal bases:

• for contact persons of customers and suppliers: for reliable communication when fulfilling our contracts with our customers and suppliers and (for customers) in order to present our company's services (advertising);
• for visitors: to facilitate the visit and to exercise our domiciliary rights in the interest of the security of our company;
• for all other communication partners: to handle the communication requested by the data subject concerned.

In all cases the legal basis is Art. 6 para. 1 sentence 1 lit. f) of the GDPR. Unless there is a permanent contractual or other legal relationship with the company and/or the authority of the person concerned, his or her personal data will only be processed or stored to perform the respective specific task.

2.2.3 In addition, we process personal data of our customers or their contact persons (first name, last name, company and in some circumstances date of birth) also in order to fulfil our obligations under public law towards authorities, for example for tax and commercial law documentation as well as export control. The legal basis for this is Art. 6 para. 1 sentence 1 lit. c) of the GDPR.

2.3.1 We process the following data of persons applying for an employment with us via the application form on our websites or in another way:

• first name, last name, e-mail address, address, telephone number (if provided) as well as the application data transmitted to us.

2.3.2 Subject to a separately declared consent, we only process the data in order to carry out the application procedure on which the respective application is based. The data will not be stored without consent after the end of the application procedure and the storage periods applicable in this respect.

As a principle, we do not disclose your data to third parties without your consent.

Sometimes we use the support of third-party companies for processing electronic data. These are reliable service providers that we have carefully selected to process your data in accordance with our instructions. The legal basis for this is Art. 28 GDPR. Our service providers are, of course, obligated to handle the data carefully, to act only in accordance with our instructions and according to the applicable data protection regulations, and especially not to use the data for their own purposes nor pass them on to third parties.

In addition, individual cases may arise in which we are legally obliged to pass on your data on official orders as and insofar as this is necessary for the purposes of criminal prosecution or to avert danger by police or other authorities. The legal basis for the passing on of the data in these cases is Art. 6 para. 1 lit. c) of the GDPR.

Finally, there may be cases in which your data is disclosed to companies associated with TOX® PRESSOTECHNIK GmbH & Co. KG (subsidiary or sister company) for one of the purposes mentioned under clause 2 for distribution of work within the TOX group. The purpose of the disclosure is to fulfil the tasks arising in the pursuit of business objectives within a group of companies in a structured manner within our group of companies and in accordance with our division of labour; the legal basis for this is Article 6 para. 1 sentence 1 lit. f) GDPR.

Insofar as personal data is processed outside the states of the European Economic Area ("EEA"), we protect your personal data by transmitting them and processing them within our group of companies exclusively in accordance with the standard contractual clauses stipulat-ed by the EU Commission in the sense of Art. 46 para. 2 lit c GDPR. The standard contractu-al clauses are available at: ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu/model-contracts-transfer-personal-data-third-countries_de.

4.1 With regard to personal data concerning yourself, you have the following rights against us:

• the right to information if we process your personal data and which personal data about you we process;
• the right to rectification and erasure of your personal data;
• the right to restriction of processing;
• the right to opposition to processing, provided that the legal basis for processing is arti-cle 6, para. 1 sentence 1 lit. f) GDPR and
• the right to data portability.

4.2 In addition, you have the right to complain to a data protection supervisory authority about our processing of your personal data.

We reserve the right to change this privacy policy at any time with effect for the future. A respective up-to-date version is available on our websites. Please visit our websites regularly and inform yourself about the applicable data protection regulations.

Latest update: May 23, 2018