Home » Privacy policy
Information on data protection
Your personal data will be processed and protected in accordance with the legal regulations. In the following text, we will inform you about how we handle your personal data, the purpose for which this data is used, to whom we may pass this data on, if applicable, and what rights you have with regard to the processing of your data.
Principles of data processing
Controller
Controller and responsible for the processing of your personal data within the meaning of the general data protection regulation
TANDLER Gear and Gear Factory GmbH & Co KG
Kornstraße 297-301
28201 Bremen Germany
You will find further information about our company, details of the persons authorized to represent us and also further contact possibilities in the imprint of our website.
Purpose of data processing
The personal data we receive from you will only be used for the purposes for which we have received or collected it, such as to answer your inquiries, to establish, process and terminate contracts concluded with you, for technical administration and possibly to advertise our products and services, if you have given your consent or if a legal provision permits this.
Data processing for other purposes will only be considered if the necessary legal requirements are met. In this case we will of course observe any information obligations.
Legal basis of the data processing
The legal basis for the processing of your personal data is generally – unless there are specific legal provisions – Art. 6 and Art. 49 GDPR. The following possibilities are particularly relevant:
- Data processing based on consent (Art. 6 para. 1 lit. a) GDPR)
- Data processing on the basis of consent (Art. 49 para. 1 lit. a) GDPR
- Data processing for the performance of contracts (Art. 6 para. 1 lit. b) GDPR
- Data processing for the performance of contracts (Art. 49 para. 1 lit. b) or c) GDPR
- Data processing for the fulfilment of a legal obligation (Art. 6 para. 1 lit. c) GDPR
- Data processing based on a balancing of interests (Art. 6 para. 1 lit. f) GDPR)
In connection with the respective processing, we refer to the corresponding terms so that you can classify on which basis we process your personal data.
Storage duration/deletion of data
Unless a specific storage period has been specified within this data protection declaration, we will delete your personal data as a matter of principle if there is no need for further storage. A requirement may exist in particular if the data is still needed to fulfill contractual services, to check and grant or ward off warranty and, if applicable, guarantee claims. If you assert a justified request for deletion or revoke your consent to data processing, your data will be deleted unless we have another legally permissible reason for storing your personal data (e.g. tax or commercial law retention periods). In the case of legal storage obligations, deletion will only be considered after the expiry of the respective storage obligation.
Recipients / transfer to third parties
Your personal data will only be passed on or transferred to third parties, e.g. service providers/suppliers, if this is necessary for the purpose of fulfilling the contract, if we are legally obliged to do so, if the transfer is permitted on the basis of a weighing of interests in the sense of Art. 6 Par. 1 letter f) GDPR, or if you have given your prior consent. We select our service providers/suppliers carefully – especially with regard to data protection and data security – and take all measures required by data protection law for permissible data processing.
Place of data processing
A transfer of the personal data provided by you to a third country does not generally take place. If we process data in a third country (i.e. outside the European Union (EU) or the European Economic Area (EEA)) or if this is done in connection with the use of services of third parties or disclosure/transmission of data to third parties, this is only done to fulfill our (pre-)contractual obligations, due to a legal obligation, based on our legitimate interests, or based on your consent.
Note on data transfer to the USA
We only pass on your data to service providers who transfer your data to the USA after your express consent. We would like to point out that the USA is not a safe third country within the meaning of EU data protection law. US companies are obliged to surrender personal data to security authorities without you as the person concerned being able to take legal action against this. Therefore, it cannot be excluded that US authorities (e.g. secret services) may process, evaluate and permanently store your data on US servers for monitoring purposes. We have no influence on these processing activities.
Information on the consent to data processing
You can revoke a given consent to the processing of your personal data at any time for the future without additional costs, i.e. with no higher than the usual fees for the transmission. The legality of the data processing carried out until the revocation remains unaffected by the revocation.
Your rights as a data subject
You have the right to obtain information about your personal data processed by us. Within the framework of the legal and data protection regulations, you have a right to data transfer, rectification, restriction of processing and erasure, as well as, if applicable, a right of revocation or a right to object to data processing for the future. In particular, you have a right of objection in accordance with Art. 21 Para. 1 and 2 GDPR against the processing of your data in connection with a direct advertising campaign, if this is based on a weighing of interests. You have the right to complain about the processing of personal data by us to a supervisory authority for data protection.
Requests for information should be made in writing or otherwise verified to ensure that the information is provided to the correct person.
You can contact us at any time at the address given in the imprint for this and other questions about data protection.
Protection of stored data
We use technical and organizational security measures to protect the personal data you provide us from manipulation, loss, destruction or access by unauthorized persons. Our security measures are continuously improved and adapted according to the state of the art. It cannot be ruled out that data transmitted by you without encryption may be viewed by third parties during transmission. Please note that no conclusively secure transmission can be guaranteed with regard to data transmission via the Internet (e.g. communication by e-mail). Sensitive data should therefore either not be transmitted over the Internet at all or only via a secure connection (SSL).
Further information on data protection
Protection of minors
Consent to process personal data can only be given by a person of full age. For information society services, the consent of a child is permissible from the age of sixteen years in accordance with Art. 8 GDPR.
Contact by e-mail, telephone or fax
If you contact us by e-mail, telephone or fax, your inquiry including all personal data (name, inquiry) will be stored and processed by us for the purpose of processing your request. We will not pass on this data without your consent. The processing of this data is based on Art. 6 para. 1 lit. b GDPR, if your inquiry is related to the fulfillment of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, processing is based on our legitimate interest in the effective processing of the inquiries addressed to us (Art. 6 para. 1 lit. f GDPR) or on your consent (Art. 6 para. 1 lit. a GDPR), provided that the inquiry was made. The data sent to us by you via contact inquiries will remain with us until you request us to delete it, revoke your consent to storage or the purpose for which the data was stored ceases to apply. Mandatory legal provisions – in particular legal retention periods – remain unaffected.
contact form
If you send us inquiries via the contact form, your details from the inquiry form, including the contact data you provide there, will be stored by us for the purpose of processing the inquiry and in the event of follow-up questions. A transfer of the personal data provided by you to a third country or an international organization does not take place and is not planned. Your personal data will not be forwarded to external third parties. The processing of this data is carried out on the basis of Art. 6 para. 1 lit. b) GDPR, provided that your inquiry is related to the fulfilment of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, processing is based on our legitimate interest in the effective processing of the inquiries addressed to us (Art. 6 para. 1 lit. f) GDPR) or on your consent (Art. 6 para. 1 lit. a) GDPR), provided that the inquiry was made. The data entered by you in the contact form will remain with us until you request us to delete it, revoke your consent for storage or the purpose for which the data was stored ceases to apply. Mandatory legal provisions – in particular retention periods – remain unaffected.
Further information on data processing on this website
On the one hand, your data is collected when you give it to us. This can be data that you enter in a contact form, for example. Other data is collected automatically or with your consent by our IT systems when you visit the website. These are mainly technical data (e.g. Internet browser, operating system or time of the page call). This data is collected automatically as soon as you enter this website. Part of the data is collected to ensure that the website is provided without errors. Other data can be used to analyze your user behavior.
Every access to our website and every retrieval of a file stored on the website is logged. The storage serves internal system-related and statistical purposes.
Data transferred:
* Name of the retrieved file
* Date and time of retrieval
* transferred data volume
* Message about successful retrieval
* Operating system used
* Browser and browser type
* the website from which the redirection was made
* the Internet Service Provider
* visited pages
* enquiring domain
In addition, the IP addresses of the requesting computers are logged. However, the person responsible does not draw any conclusions about a person.
This data is only required to display the content of our website correctly, to optimize the content for you on a permanent basis and to support criminal prosecution in case of hacker attacks.
Personal data is collected and processed by us in accordance with the provisions of the German Telemedia Act (TMG), the European Data Protection Basic Regulation (GDPR) and the German Federal Data Protection Act (BDSG).
External Hosting
This website is hosted by an external service provider (hoster). The personal data collected on this website is stored on the hoster’s servers. This may include, but is not limited to, IP addresses, contact requests, meta and communication data, contract data, contact details, names, website accesses and other data generated by a website.
The use of the hoster is for the purpose of fulfilling the contract with our potential and existing customers (Art. 6 para. 1 lit. b GDPR) and in the interest of a secure, fast and efficient provision of our online offer by a professional provider (Art. 6 para. 1 lit. f GDPR).
Our hoster will only process your data to the extent necessary to fulfill its performance obligations and will follow our instructions regarding this data.
In order to guarantee data protection compliant processing, we have concluded a contract for order processing with our hoster.
Storage of anonymized data/cookies
Our Internet pages use so-called “cookies”. Cookies are small text files. They are either stored temporarily for the duration of a session (session cookies) or permanently (permanent cookies) on your end device. Session cookies are automatically deleted at the end of your visit. Permanent cookies remain stored on your end device until you delete them yourself or until your web browser automatically deletes them or deletes them after a certain period of time.
Numerous cookies are technically necessary, as certain website functions would not work without them (e.g. the shopping basket function). Other cookies are used to evaluate user behavior or display advertising.
In some cases, third-party cookies may also be stored on your terminal device when you enter our site (third-party cookies). These enable us or you to use certain services of the third-party company (e.g. cookies for the processing of payment services).
Cookies are used to collect and store usage data in anonymous form. Cookies enable an analysis of your use of the website. The data is collected and stored in pseudonymous form only. They are not used to identify you personally and are not combined with data about the bearer of the pseudonym.
Cookies that are necessary for the electronic communication process (necessary cookies) or for the provision of certain functions you require (functional cookies, e.g. for the shopping basket function) are stored on the basis of Art. 6 para. 1 lit. f GDPR, unless another legal basis is given. The website operator has a legitimate interest in the storage of cookies for the technically error-free and optimized provision of his services. If consent to the storage of cookies has been requested, the storage of the cookies in question will be based exclusively on this consent (Art. 6 para. 1 lit. a) GDPR); consent may be revoked at any time for the future.
You can set your browser to inform you when cookies are set and to allow cookies only in individual cases, to exclude the acceptance of cookies for certain cases or in general, and to activate the automatic deletion of cookies when the browser is closed. If you deactivate cookies, the functionality of this website may be limited.
Insofar as cookies are used by third-party companies or for analysis purposes, we will inform you separately about this within the scope of this data protection declaration and, if necessary, request your consent.
Cookie Wall Consent
If you agree to the setting of cookies and further processing of your personal data through the cookie wall, we and our partners can use the data collected with the cookies for marketing purposes. Furthermore, it may be possible that your data is transferred to the USA. This will take place in accordance with your consent due to Art. 6 paragraph 1 lit. a) or Art. 49 paragraph 1 lit. a) DSGVO. You can revoke your consent at any time for the future without additional costs, i.e. with no higher than the usual fees for the transfer. The legality of the data processing carried out up to the time of revocation remains unaffected by the revocation.
Cookie Banner: CookieBot
We use the tool “Cookiebot” for the Cookie Banner. “Cookiebot” is a product of Cybot A/S, Havnegade 39, 1058 Copenhagen, Denmark, hereinafter “Cybot”. By means of the “Cookiebot” tool, the provider informs the user about the use of cookies on the website and enables the user to make a decision about their use. If the user gives his consent to the use of cookies, the following data will automatically be logged at Cybot:
- The anonymised IP number of the user;
- The date and time of consent;
- User agent of the end user’s browser;
- The URL of the provider;
- An anonymous, random and encrypted key.
- The authorised cookies of the user (cookie status), which serves as proof of consent.
The encrypted key and the cookie status are stored on the user’s terminal device by means of a cookie in order to establish the corresponding cookie status for future page visits. This cookie is automatically deleted after 12 months. The legal basis for this is Art. 6 para. 1 lit. f) DSGVO. The provider’s legitimate interest is in the user-friendliness of the website and in compliance with the legal requirements of the DSGVO. The user can prevent or terminate the installation of the cookie and its storage, and thus his consent to the cookie, at any time by adjusting his browser settings. More information on this can be found above under the heading “Cookies”. Cybot offers further information under the following links: https://www.cookiebot.com/de/privacy-policy/
Analysis and Marketing
The setting of analysis and marketing cookies and the resulting data processing such as tracking and analysis or, if applicable, transfer to the USA will only take place with your consent in accordance with Art. 6 Paragraph 1 lit. a) or Art. 49 Paragraph 1 lit. a) GDPR. You can revoke your consent at any time with effect for the future.
Google Analytics
This website uses functions of the web analysis service Google Analytics. The provider is Google IrelandLimited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics enables the website operator to analyze the behavior of website visitors. In doing so, the website operator receives various usage data, such as page views, length of stay, operating systems used and origin of the user. This data may be summarized by Google in a profile which is assigned to the respective user or his terminal device.
Google Analytics uses technologies that enable the recognition of the user for the purpose of analysing user behaviour (e.g. cookies or device fingerprinting). The information collected by Google on the use of this website is usually transferred to a Google server in the USA and stored there.
The use of this tool and, if applicable, corresponding cookies and the corresponding data processing is based on your consent to the setting of cookies and tracking or data processing in the USA within the meaning of Art. 6 para. 1 lit. a) or Art. 49 para. 1 lit. a) GDPR. You can revoke your consent for the future at any time.
We have activated the IP anonymization function on this website. This means that your IP address will be truncated by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area before it is transmitted to the USA. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on the website activities and to provide further services to the website operator in connection with the use of the website and the Internet. The IP address transmitted by your browser within the scope of Google Analytics is not combined with other data from Google.
This website uses the “demographic characteristics” feature of Google Analytics to help the website visitors find appropriate ads within the Google advertising network. This allows reports to be generated that contain statements about the age, gender and interests of the site visitors. This data is derived from Google’s interest-based advertising and from third-party visitor data. This data cannot be associated with any particular person. You can disable this feature at any time in the ad settings in your Google Account or generally prohibit the collection of your data by Google Analytics as described in the “Opting out of data collection” section.
You can prevent the collection and processing of your data by Google by downloading and installing the browser plugin available at the following link
https://tools.google.com/dlpage/gaoptout?hl=de.
You can also prevent Google Analytics from collecting your data by clicking on the following link. An opt-out cookie is set which prevents the collection of your data on future visits to this website: Disable Google Analytics.
You can find more information on how Google Analytics handles user data in the Google privacy policy:
https://support.google.com/analytics/answer/6004245?hl=de.
We have concluded a contract with Google for order processing and fully implement the strict requirements of the German data protection authorities when using Google Analytics.
Google DoubleClick
This website uses features of Google DoubleClick. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland, (hereinafter “DoubleClick”).
DoubleClick is used to display interest-based advertisements throughout the Google advertising network. The advertisements can be adapted by means of DoubleClick purposefully to the interests of the respective viewer. For example, our ads may appear in Google search results or in banner ads associated with DoubleClick.
In order to serve ads to users based on their interests, DoubleClick must be able to recognize the viewer and track the web pages they visit, clicks they make, and other information about their behavior. DoubleClick uses cookies or similar recognition technologies (e.g., device fingerprinting) to do this. The information collected is combined into a pseudonymous user profile in order to display advertising that is relevant to the user’s interests.
The use of this tool is based on your consent to cookies and further data processing like tracking, analysis and data processing in the USA basis in accordance with Art. 6 para. 1 lit. a) or Art. 49 para. 1 lit. a) GDPR. The consent can be revoked at any time.
For further information on the possibility to object to the advertisements displayed by Google, please refer to the following links:
https://policies.google.com/technologies/ads and
https://adssettings.google.com/authenticated.
Tools
OpenStreetMap
We use the map service of OpenStreetMap (OSM). Provider is the Open-Street-Map Foundation (OSMF), 132 Maney Hill Road, Sutton Coldfield, West Midlands, B72 1JU, United Kingdom.
When you visit a website where OpenStreetMap is included, your IP address and other information about your behavior on that website is reported to OSMF. OpenStreetMap may store cookies in your browser or use similar recognition technologies.
Furthermore, your location can be recorded if you have allowed this in your device settings – e.g. on your cell phone. The provider of this site has no influence on this data transfer. For details, please refer to the OpenStreetMap privacy policy at the following link:
https://wiki.osmfoundation.org/wiki/Privacy_Policy.
The use of OpenStreetMap is in the interest of an attractive presentation of our online offers and easy findability of the locations we have indicated on the website. This represents a legitimate interest in the sense of Art. 6 para. 1 lit. f GDPR.
Google Maps (Link)
On our website we use a link to Google Maps. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. To use the functions of Google Maps it is necessary to store your IP address. This Information is usually transferred to a Google server in the USA and stored there.
The provider of this site has no influence on this data transfer. For more information on how we handle user data, please refer to Google’s privacy policy: https://policies.google.com/privacy?hl=de.
More about your rights as data subject
Access: You have the right to request information from us at any time about the personal data we have stored about you (Art. 15 GDPR). This also applies to the recipients or categories of recipients, if data is passed on to them, the purpose and duration of the storage.
Rectification, erasure, restriction of processing: You also have the right to request rectification under the conditions of Art. 16 DS-GVO, erasure under the conditions of Art. 17 DS-GVO or restriction of processing under the conditions of Art. 18 GDPR.
Data portability: Furthermore, you can request to recieve the personal data at any time under the conditions of Art. 20 GDPR.
Automated individual decision-making, including profiling: You have the right not to be subject to a decision based solely on automated processing – including profiling – which has legal effect on you or which significantly affects you in a similar way. No automated decision-making based on the personal data collected will take place. (Art.22 GDPR)
Right of appeal to the supervisory authority: Without prejudice to any other administrative or judicial remedy, you have the right to complain to a data protection supervisory authority. You may do so by contacting the data protection authority at your usual place of residence or at our headquarters. (Art.77 GDPR)
Objection to processing: In the case of processing of personal data for the performance of tasks in the public interest (Art. 6 para. 1 sentence 1 letter e) GDPR) or for the protection of legitimate interests (Art. 6 para. 1 sentence 1 letter f) GDPR), you may object to the processing of personal data concerning you at any time with effect for the future. In the event of an objection, we must refrain from any further processing of your data for the aforementioned purposes, unless there are compelling reasons for processing which are worthy of protection and outweigh your interests, rights and freedoms, or the processing is necessary for the assertion, exercise or defence of legal claims.
Under the conditions of Art. 21 para. 1 GDPR, data processing may be objected to for reasons arising from the specific situation of the data subject.
RIGHT TO OBJECT TO DATA COLLECTION IN SPECIAL CASES AND TO DIRECT ADVERTISING (ART. 21 GDPR)
IF THE DATA PROCESSING IS BASED ON ART. 6 ABS. 1 LIT. E OR F GDPR, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA AT ANY TIME FOR REASONS ARISING FROM YOUR SPECIFIC SITUATION, INCLUDING PROFILING BASED ON THESE PROVISIONS. THE RESPECTIVE LEGAL BASIS ON WHICH PROCESSING IS BASED CAN BE FOUND IN THIS DATA PROTECTION DECLARATION. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA UNLESS WE CAN PROVE THAT THERE ARE COMPELLING REASONS FOR PROCESSING WHICH ARE WORTHY OF PROTECTION AND WHICH OUTWEIGH YOUR INTERESTS, RIGHTS AND FREEDOMS OR IF THE PROCESSING SERVES TO ASSERT, EXERCISE OR DEFEND LEGAL CLAIMS (OBJECTION ACCORDING TO ART. 21 PARA. 1 GDPR).
IF YOUR PERSONAL DATA ARE PROCESSED FOR THE PURPOSE OF DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR THE PURPOSE OF SUCH MARKETING, INCLUDING PROFILING, INSOFAR AS IT IS CONNECTED WITH SUCH DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA WILL SUBSEQUENTLY NO LONGER BE USED FOR THE PURPOSE OF DIRECT MARKETING (OBJECTION ACCORDING TO ART. 21 PARA. 2 GDPR).
Data protection officer
We have appointed a data protection officer in our company. You can reach them under the following contact:
Changes to this data protection information
We will revise this data protection information whenever there are changes to this website or other reasons that make it necessary. You will always find the current version on this website.
Status: 16.11.2020
