Privacy policy

A. Name and contact details of the controller responsible for data processing

The controller within the meaning of the General Data Protection Regulation (GDPR) and other data protection laws applicable to data processing is:

    Alois Korzilius Interbau Fabrikation für moderne Baukeramik GmbH & Co KG,
    Hauptstr. 73 – 79, 56235 Ransbach-Baumbach, Deutschland
    Phone: 02623 / 896-0
    Fax: 02623 / 896-40
    E-Mail: info@interbau-blink.de
    Webseite: www.interbau-blink.de

Legal representatives: Uta Kern Verwaltungsgesellschaft mbH, Hauptstraße, 56235 Ransbach-Baumbach,
which in turn is represented by its Managing Director Olaf Mayer.

C. Scope and purpose of the data processing of personal data

     1.    Accessing our website and creation of log files
          a)    Description of data processing and storage
          Each time our website is accessed, we automatically collect data and information from the computer system of the accessing device. 
          The following data is collected:
          -    Information about the browser type and version used
          -    The user’s operating system
          -    The user’s IP address
          -    Date and time of access
          -    Websites from which the user’s system accessed our website (referrer URL)
          -    The subpages of our website accessed by the user
          -    Name of the requested file
          -    Notification of whether the request was successful

          These data are deleted from the web server log files after 3 days, unless further processing is exceptionally required to protect our legitimate interests (e.g., to initiate blocking of IT addresses or filing a criminal complaint). The data is deleted as soon as it is no longer required for the purpose for which it was collected.
Storage and/or merging of this data with other personal data of the user does not take place.

     b)    Purpose and legal basis of data processing
    The data mentioned under a) is collected:

• To enable delivery of the website to the user’s computer. The legal basis for this is Art. 6 para. 1 lit. f GDPR. Temporary collection of the IP address to display the pages requested by the user is technically necessary and represents a legitimate interest on our part under Art. 6 para. 1 sentence 1 lit. f GDPR, which is not overridden by the user’s interests.

• To ensure the security of our web server and the smooth operation of our website including the online shop system, e.g., recording failed customer account login attempts, monitoring to prevent or detect hacker attacks. These purposes represent a legitimate interest on our part under Art. 6 para. 1 sentence 1 lit. f GDPR, which is not overridden by the user’s interests.

     c)    Disclosure / recipients of data
     The collected data is stored by our web hosting provider. This provider acts on our behalf and provides storage space for our website. In addition, our web hosting provider performs other related services, e.g., stores the associated data processing operations and ensures that the website is accessible online.
The service provider is based in the European Union or in a country of the European Economic Area. Processing by the service provider serves to safeguard our legitimate interests in the delivery of the website and IT security, cf. Art. 6 para. 1 lit. f GDPR.
The data collected under a) is not transmitted to third parties unless necessary in the event of IT attacks, e.g., in the context of filing a criminal complaint with law enforcement authorities.

     d)    Possibility of objection
     Collection of the IP address is necessary to provide the website, and storage in log files is required for website operation. Therefore, the user has no possibility to object.

     With regard to the other data mentioned under a), which is processed under Art. 6 para. 1 sentence 1 lit. f GDPR, you have the right to object to the processing at any time for reasons arising from your particular situation; for further information, see section D.

     2.    Contact form and contact by e-mail by the user
          a)    Description of data processing and storage

Our website includes a contact form that can be used for electronic communication. If you use this option, the data you enter into the input fields is transmitted to us. Your e-mail address, name, and the field “Subject/Request” are mandatory. Providing additional information is voluntary and is used, for example, to contact you by phone or address you personally if necessary.

In addition, we record and store:

• Your IP adress
• Date and time of sending the request

Alternatively, you can contact us via the e-mail addresses provided in the imprint and on our website. In this case, the personal data of the user transmitted via e-mail is stored.

The data is used to answer your request. If you provide us with your name and postal address, we process this data according to section C.3 (postal advertising).

The data is deleted as soon as it is no longer required for the purpose for which it was collected. If the request relates to a concluded or ongoing contract, the communication content and timestamps are stored until any claims arising from it become time-barred.

Otherwise, the personal data from the contact form input and the data sent by e-mail are restricted in their further processing and are only used to defend against possible legal claims once the respective conversation with the user has ended. A conversation is considered ended when it can be inferred from the circumstances that the matter has been conclusively clarified. After the expiration of the limitation period, the data is deleted.

Any additional personal data collected during the submission process is deleted no later than seven days after collection.

          b)    Purpose and legal basis of data processing

The processing of personal data from the input fields serves to handle the contact request. Your e-mail address and any additional data you provide are stored in order to respond to your request. The legal basis for this is Art. 6 para. 1 lit. f GDPR. The same applies to contact via e-mail.

The storage of the IP address and the time of the contact request is intended to document your request and, if necessary, to clarify possible misuse of your personal data. The legal basis for processing this data is also Art. 6 para. 1 lit. f GDPR.

If the contact request is aimed at concluding a contract, the additional legal basis for processing is Art. 6 para. 1 lit. b GDPR.

          c)    Disclosure

In this context, there is no disclosure of data to third parties. The data is used exclusively for processing and responding to the contact request.

The collected data is stored on our own web server, hosted by a German service provider. This provider acts on our behalf, provides storage space for our website, and stores the associated data processing operations. The provider has been carefully selected and commissioned by us, is bound by our instructions, and is regularly monitored. The provider is based in the European Union or in a country of the European Economic Area.

          d)    Possibility of objection and deletion

The user may object to the use of their personal data at any time. In such a case, the conversation cannot be continued. Section D applies additionally.

 

     3.    Postal advertising 

          a)    Description of data processing, storage, purpose, disclosure

If you provide us with your name and postal address, we store this information for the possible future sending of postal advertising regarding our products. The data is not shared with external service providers for this purpose, and no other disclosure to third parties takes place. The data is deleted as soon as it is no longer required for the purpose for which it was collected or if you object to the processing.

          b)    Legal basis of data processing, right to object

The legal basis for the data processing described under a) is Art. 6 para. 1 lit. f GDPR. Sending product information by postal mail constitutes a legitimate interest of our company. You may object to this use of your personal data at any time. In such a case, we will cease sending postal advertising. Section D applies additionally.

 

      4.    Download of brochures and other informational materials (PDF)

Through our website, you can view or save catalogs or other informational materials after downloading the respective PDF file to your device. In doing so, we only temporarily collect the data mentioned under C.1 (log files). Otherwise, the information specified under C.1 applies.

 

D. Rights of the data subject

As a data subject, you have the right to obtain free information about the personal data we store about you and, where applicable, the right to rectification, restriction of processing, erasure, notification to third parties, data portability, objection, revocation of any data protection consent given, non-participation in automated decision-making, and/or to lodge a complaint with the competent data protection supervisory authority. Details can be found in the following additional information.

If you have questions about data processing or the exercise of your rights, you can contact us as the controller or our data protection officer; see the contact information under A. and B. of this text.

 

     1.    Right of access

If we process your personal data, you have the right to request from us, as the controller, free information as to whether we are processing your personal data. If this is the case, you, as the data subject, have the right to obtain information about these personal data and the following:

• The purposes for which the personal data is being processed;

• The categories of personal data being processed;

• The recipients or categories of recipients to whom the personal data concerning you have been or will be disclosed;

• The planned period of storage of your personal data, or if concrete information is not possible, the criteria for determining the storage period;

• The existence of a right to rectification or erasure of the personal data concerning you, a right to restriction of processing by the controller, or a right to object to this processing;

• The existence of a right to lodge a complaint with a supervisory authority;

• Any available information about the source of the data if the personal data was not collected from you as the data subject;

• The existence of automated decision-making including profiling pursuant to Art. 22 paras. 1 and 4 GDPR and – at least in these cases – meaningful information about the logic involved as well as the scope and intended effects of such processing for you as the data subject.

You also have the right to request information on whether your personal data is transferred to a third country or to an international organization. In this context, you can request to be informed about the appropriate safeguards under Art. 46 GDPR in connection with the transfer.

 

     2.    Right to rectification

You have the right to request the rectification and/or completion of personal data concerning you if the processed personal data is inaccurate or incomplete.

 

     3.    Right to restriction of processing

You may request the restriction of processing of your personal data if one of the following conditions applies:

• You contest the accuracy of your personal data, and processing is restricted for the period necessary to allow us as the controller to verify the accuracy of the data;

• The processing is unlawful, and you oppose the erasure of the personal data and instead request the restriction of its use;

• We as controllers no longer need the personal data for the purposes of processing, but you need it for the establishment, exercise, or defense of legal claims; or

• You have objected to the processing under Art. 21 para. 1 GDPR and we as controllers are verifying the legitimacy of our reasons against yours. As long as it is not yet clear whether the legitimate reasons of the controller override your reasons, processing is restricted.

Once processing of the personal data concerning you has been restricted, these data – aside from storage – may only be processed with your consent, for the establishment, exercise, or defense of legal claims, to protect the rights of another natural or legal person, or for reasons of important public interest of the Union or a Member State.

If the restriction of processing has been applied under the above conditions, you will be informed by us as the controller before the restriction is lifted.

 

     4.    Right to erasure

          a)    Obligation to delete

You may request that we, as the controller, delete the personal data concerning you without undue delay, and we as controllers are obliged to delete this data immediately if one of the following reasons applies:

• The personal data concerning you are no longer necessary for the purposes for which they were collected or otherwise processed.

• You withdraw your consent on which the processing was based according to Art. 6 para. 1 lit. a or Art. 9 para. 2 lit. a GDPR, and there is no other legal basis for processing.

• You object to the processing pursuant to Art. 21 para. 1 GDPR and there are no overriding legitimate grounds for the processing, or you object pursuant to Art. 21 para. 2 GDPR.

• The personal data concerning you have been unlawfully processed.

• The erasure of the personal data concerning you is required to fulfill a legal obligation under Union law or the law of the Member States to which the controller is subject.

• The personal data concerning you have been collected in relation to information society services offered pursuant to Art. 8 para. 1 GDPR.

          b)    Notification to third parties

If we, as controllers, have made personal data concerning you public and are obliged to delete it under Art. 17 para. 1 GDPR, we as controllers will take reasonable measures, considering available technology and implementation costs, including technical measures, to inform other controllers processing the personal data that you, as the data subject, have requested the deletion of all links to these personal data or copies or replications of these personal data.

          c)    Exceptions

The right to erasure and to notify third parties does not exist to the extent that processing is necessary:

• For exercising the right of freedom of expression and information;

• To comply with a legal obligation requiring processing under Union law or the law of the Member States to which we as controllers are subject, or for performing a task carried out in the public interest or in the exercise of official authority vested in the controller;

• For reasons of public interest in the area of public health pursuant to Art. 9 para. 2 lit. h and i and Art. 9 para. 3 GDPR;

• For archiving purposes in the public interest, scientific or historical research purposes, or statistical purposes pursuant to Art. 89 para. 1 GDPR, insofar as the right to erasure under section a) is likely to make the achievement of the purposes of processing impossible or seriously impair it; or

• For the establishment, exercise, or defense of legal claims.

      5.    Right to information

We will communicate any correction, deletion, or restriction of processing of your personal data to all recipients to whom your personal data have been disclosed, unless this proves impossible or involves a disproportionate effort.

You have the right, against us as the controller, to be informed about these recipients.

 

      6.    Right to data portability

You have the right to receive the personal data concerning you that you have provided to us as the controller in a structured, commonly used, and machine-readable format. You also have the right to transmit this data to another controller without hindrance from us as the controller to whom the personal data was provided, provided that:

• The processing is based on your consent pursuant to Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR, or on a contract pursuant to Art. 6 para. 1 lit. b GDPR, and

• The processing is carried out by automated means.

In exercising this right, you also have the right to request that the personal data concerning you be transmitted directly from us as the controller to another controller, insofar as this is technically feasible. The freedoms and rights of other persons must not be adversely affected by this.

The right to data portability does not apply to the processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us as the controller.

 

      7.    Right to object

You have the right, for reasons arising from your particular situation, to object at any time to the processing of personal data concerning you which is based on Art. 6 para. 1 lit. e or f GDPR; this also applies to profiling based on these provisions.

We as the controller will no longer process the personal data concerning you unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or the processing serves the establishment, exercise, or defense of legal claims.

If the personal data concerning you are processed for the purpose of direct marketing, you have the right to object at any time to the processing of your personal data for such marketing purposes; this also applies to profiling insofar as it is related to such direct marketing.

If you object to the processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes.

You have the option, in connection with the use of information society services – irrespective of Directive 2002/58/EC – to exercise your right to object by automated means using technical specifications.

 

      8.    Right to withdraw consent to data processing

If you have given us your consent to the processing of personal data, you have the right to withdraw this consent at any time. The withdrawal of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the withdrawal.

 

      9.    Automated decision-making in individual cases, including profiling

You have the right not to be subject to a decision based solely on automated processing – including profiling – which produces legal effects concerning you or similarly significantly affects you.

This does not apply if the decision:

a) is necessary for the conclusion or performance of a contract between you and us as the controller,

b) is permitted by Union or Member State law to which we as controllers are subject and that law contains appropriate measures to safeguard your rights, freedoms, and legitimate interests, or

c) is made with your explicit consent.

However, such decisions may not be based on special categories of personal data according to Art. 9 para. 1 GDPR, unless Art. 9 para. 2 lit. a or g applies and appropriate measures have been taken to protect your rights, freedoms, and legitimate interests.

If a case under a) or c) applies, we as controllers take appropriate measures to safeguard your rights, freedoms, and legitimate interests, including at least the right to obtain human intervention by us as controllers, to express your point of view, and to challenge the decision.

 

      10.    Right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, particularly in the Member State of your habitual residence, workplace, or the place of the alleged infringement, if you consider that the processing of personal data concerning you violates the GDPR.

The supervisory authority with which the complaint is lodged shall inform the complainant of the status and outcome of the complaint, including the possibility of a judicial remedy pursuant to Art. 78 GDPR.