We, as the operator of the website www.volkgermany.de (also referred to as the “Website”), are the data controller responsible for the processing of your personal data under applicable data protection law, in particular the General Data Protection Regulation (“GDPR”). In the following, we refer to users of our Website as “you”.

Below, we provide you with a clear overview, in accordance with our information obligations under Articles 13 et seq. GDPR, of which data is processed when you visit our Website and the legal basis for such processing. We also provide information on how we protect your data through technical and organisational measures and what rights you have in relation to us and the competent supervisory authority.

1. Information on the Data Controller

Name and contact details:

Frieder Volk GmbH & Co. KG

Phone: +49 (0)7121-994380

E-mail: info@volkgermany.de

Fax: +49 (0) 7121 – 99438-40

2. Data Protection Officer

We have appointed an external Data Protection Officer.

Michael Nachtigall

c/o DS Compliance GmbH

Carlsplatz 24

40213 Düsseldorf

Germany

Tel.: 0211 942 588 – 24

E-mail: m.nachtigall@wecomply.de

3. Processing of Your Personal Data

3.1. Informational Use of Our Website

When you access our Website solely for the purpose of visiting it, so-called log files are processed. These are automatically collected by our system.

The following log file data is automatically processed:

• IP address of the requesting computer
• Type of Internet browser used
• Version of the Internet browser used
• Operating system and its version
• Pages accessed
• Date and time of the visit
• Time zone difference from Greenwich Mean Time (GMT)
• Access status/HTTP status code
• Amount of data transferred
• Successful or unsuccessful loading of the requested content
• Referrer

The log files contain your IP address and may contain other personal data. It is therefore generally possible to associate this data with you. However, we only store your data temporarily and, in particular, do not store it together with other personal data.

The processing of the above-mentioned data is necessary to provide our Website. We also store this data for the purpose of ensuring the security of our information technology systems. Our legitimate interest in these purposes constitutes the legal basis for processing under Art. 6 (1) lit. f GDPR. The log files, which also contain your IP address, are deleted or anonymised without undue delay as soon as they are no longer required to achieve the purposes stated above, and in any event no later than three months.

4. Use of Services

4.1. Contact by E-mail

You have the option of contacting us by e-mail. The personal data you provide in your e-mail will be stored by us. Your data will not be disclosed to third parties. The data is processed exclusively for the purpose of handling your enquiry. The legal basis for processing your personal data is Art. 6 (1) lit. f GDPR. The data will be stored until it is no longer required to achieve the purpose of the communication with you and your enquiry has been fully resolved.

If your e-mail is intended to initiate or conclude a contract with us, the additional legal basis for processing your personal data is Art. 6 (1) lit. b GDPR. This data will be stored for as long as necessary to fulfil the contract. Beyond this period, we will only store your data in order to comply with contractual or legal obligations, such as tax obligations (Art. 6 (1) lit. c GDPR).

In addition to the data you voluntarily provide to us, we also receive the date and time at which your data was transmitted to us, as well as your IP address. The processing of this data is based on our legitimate interest (Art. 6 (1) lit. f GDPR) in ensuring the security of our systems and preventing misuse. This additional data collected during your contact with us will be deleted as soon as it is no longer required, and at the latest once your enquiry has been fully resolved.

You may withdraw your consent to the processing of your personal data at any time by notifying us by e-mail at info@volkgermany.de. In this case, all personal data relating to the communication will be deleted and it will no longer be possible to continue the communication.

5. Cookies

Please note the following: You can configure your Internet browser so that no cookies are stored on your computer at all, or so that only certain cookies are permitted. You can select the appropriate settings in your Internet browser. You can also view and delete cookies that have already been stored there.

If you block all cookies, some functions of our Website may no longer be available to you.

We use cookies on our Website. Cookies are text files that are sent from our web server to your browser when you visit our Website and stored on your computer for later retrieval. A cookie allows your Internet browser to be recognised when you visit the Website again.

There are session cookies, which are deleted when you close your browser, and persistent cookies, which remain stored on your hard drive until their predefined expiry date is reached or until you actively remove them.

5.1. First-Party Cookies

We use our own cookies to ensure the functionality of our Website. Some elements of our Website require your Internet browser to be recognised again after you move from one page to another.

The following cookies are used on our Website:

• cookie_notice_accepted – This cookie stores your consent to the use of cookies. It is stored for 1 month .
• pll_language – This cookie stores your language preference. It is stored until the end of the browser session .
• wordpress_test_cookie – This cookie is used to check whether your browser accepts cookies. It is stored until the end of the browser session.

The legal basis for the processing of personal data in cookies that we place on our Website in order to ensure the functionality of our Website and our services is Art. 6 (1) lit. f GDPR.

Right to Object and Remove Cookies

As stated at the beginning of this section, you can allow or restrict the transmission of cookies by changing the settings in your Internet browser. Cookies that have already been stored by your Internet browser can be deleted there at any time. If cookies are restricted or disabled for our Website, some functionalities may no longer be available.

6. Your Rights

If we process your data, you are a data subject within the meaning of the GDPR. You have the following rights: the right of access, the right to rectification, the right to restriction of processing , the right to erasure, the right to notification, and the right to data portability. In addition, you have a right to object and a right to withdraw consent .

The following provides details of your individual rights:

6.1 Right of Access

You have the right to request confirmation from us as to whether we process your personal data.

If we process your personal data, you have the right to obtain information about the following:

• the purposes of the processing;
• the categories of personal data being processed;
• the recipients or categories of recipients to whom your personal data has been or will be disclosed, in particular recipients in third countries or international organisations;
• where possible, the planned period for which your personal data will be stored or, if this is not possible, the criteria used to determine that period;
• the existence of a right to request rectification or erasure of personal data concerning you or restriction of processing by us, or a right to object to such processing;
• the existence of a right to lodge a complaint with a supervisory authority;
• where the personal data has not been collected directly from you, any available information regarding its source;
• the existence of automated decision-making, including profiling, pursuant to Art. 22 (1) and (4) GDPR and, at least in these cases, meaningful information about the logic involved, as well as the scope and intended effects of such processing for you.

If we transfer your data to an international organisation or to a third country, you also have the right to request information as to whether appropriate safeguards pursuant to Art. 46 GDPR are in place in connection with the transfer.

6.2 Right to Rectification

You have the right to have the personal data we store about you rectified and/or completed if this data is inaccurate or incomplete. We will rectify or complete the data without undue delay.

6.3 Right to Restriction of Processing

Under certain conditions, you have the right to request that we restrict the processing of your personal data. At least one of the following conditions must be met:

• You dispute the accuracy of the personal data, for a period enabling us to verify the accuracy of the personal data;
• The processing is unlawful and you refuse to have the personal data erased and instead request the restriction of its use;
• We no longer need the personal data for the purposes of processing, but you require it for the establishment, exercise or defence of legal claims; or
• You have objected to processing pursuant to Art. 21 (1) GDPR, pending the verification of whether our legitimate grounds override your interests.

6.4 Right to Erasure

You have the right to request that we erase your personal data without undue delay where we are legally obliged to do so. This is the case if one of the following conditions applies:

• Your personal data is no longer necessary for the purposes for which it was collected or otherwise processed.
• You withdraw your consent on which the processing was based pursuant to Art. 6 (1) lit. a or Art. 9 (2) lit. a GDPR, and there is no other legal basis for the processing.
• You object to the processing pursuant to Art. 21 (1) GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Art. 21 (2) GDPR.
• Your personal data has been unlawfully processed.
• The erasure of your personal data is necessary to comply with a legal obligation under Union or Member State law to which we are subject.
• Your personal data has been collected in relation to information society services offered pursuant to Art. 8 (1) GDPR.

If we have made your personal data public and are obliged to erase it under the conditions described above, we will, taking account of available technology and the cost of implementation, take reasonable measures, including technical measures, to inform other controllers processing the personal data that you have requested the erasure of all links to, or copies or replications of, that personal data.

However, your right to erasure does not apply where processing is necessary for the following reasons:

• For exercising the right of freedom of expression and information;
• for compliance with a legal obligation which requires processing under Union or Member State law to which we are subject, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in us;
• for reasons of public interest in the area of public health pursuant to Art. 9 (2) lit. h and i and Art. 9 (3) GDPR;
• for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes pursuant to Art. 89 (1) GDPR, insofar as the right referred to above is likely to render impossible or seriously impair the achievement of the objectives of that processing; or
• for the establishment, exercise or defence of legal claims.

6.5 Right to Notification

If you have exercised your right to rectification, erasure or restriction of processing against us, we are obliged to notify all recipients to whom we have disclosed your personal data of the rectification, erasure or restriction of processing, unless this proves impossible or involves disproportionate effort.

6.6 Right to Data Portability

Under the following conditions, you have the right to receive the personal data that you have provided to us in a structured, commonly used and machine-readable format and the right to transmit that data to another controller:

• The processing is based on consent pursuant to Art. 6 (1) lit. a or Art. 9 (2) lit. a GDPR or on a contract pursuant to Art. 6 (1) lit. b GDPR; and
• the processing is carried out by automated means.

You have the right to have your personal data transmitted directly from us to another controller where technically feasible and where this does not adversely affect the rights and freedoms of others.

The right to data portability does not apply where the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us.

6.7 Right to Object

You have the right, on grounds relating to your particular situation, to object at any time to the processing of your personal data based on Art. 6 (1) lit. e or lit. f GDPR. This also applies to profiling based on these provisions.

Following an objection, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

Where we process your personal data for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such marketing purposes. This also applies to profiling insofar as it is related to such direct marketing.

If you object to the processing of your personal data for direct marketing purposes, we will no longer process your personal data for these purposes.

You may exercise your right to object in connection with the use of information society services, notwithstanding Directive 2002/58/EC (ePrivacy Directive), by automated means using technical specifications.

6.8 Right to Withdraw Consent

Pursuant to Art. 7 (3) GDPR, you have the right to withdraw your consent at any time. The withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal.

6.9 Right to Lodge a Complaint with a Supervisory Authority

You have the right to lodge a complaint with a supervisory authority, without prejudice to any other administrative or judicial remedy. In particular, you may exercise this right in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of your personal data infringes the GDPR.

An overview of the respective data protection supervisory authorities in Germany and their contact details can be found at the following link:

Overview of German Data Protection Supervisory Authorities

7. Up-to-Date Information and Changes to This Privacy Policy

Last updated: 25 May 2018.

Datenschutz maßgeschneidert.
www.datenschutz-stuttgart.com

Real Cookie Banner

To manage the cookies and similar technologies used on our Website (such as tracking pixels and web beacons) and the related consents, we use the consent management tool “Real Cookie Banner” . Details on how “Real Cookie Banner” processes data can be found here:  Real Cookie Banner – Data Processing

The legal bases for the processing of personal data in this context are Art. 6 (1) lit. c GDPR and Art. 6 (1) lit. f GDPR. Our legitimate interest is the management of the cookies and similar technologies used and the associated consents. The provision of personal data is neither required by contract nor necessary for entering into a contract. You are not obliged to provide personal data. If you do not provide the personal data, we cannot manage your consents.