Personal data as a matter of confidentiality
We appreciate your interest in our company. The protection of your privacy is paramount to us. We therefore wish to inform you in the following sections about the collection and handling of your personal data.
Responsible authority:
PASCHAL-Werk G. Maier GmbH, Kreuzbühlstr. 5, 77790 Steinach, Germany
Management: Dipl.-Bauing. (FH) Peter Fischer, Barbara R. Vetter
Phone +49 7832 / 71-0
Fax +49 7832 / 71 -209
service@paschal.com
Data protection officer for the company:
Marianne Lehmann, Lawyer
Anwaltskanzlei Ribstein & Ribstein
Reserveweg 4
76646 Bruchsal, Germany
Phone +49 7251 / 71 41 0
Fax +49 7251 / 71 41 41
dsb@paschal.de
I. Information related to the processing of data when visiting the PASCHAL internet website
Processing of the data
The use of our website is generally possible without providing personal data. Any data we eventually collect is not used to identify you, but to ensure that you are provided with an optimal web presentation. When you visit our website, data is collected, processed and used. During this process, it might not always be possible to exclude a personal reference. The IP address must be recorded and stored (in a compacted form) to enable the pages to be displayed in your browser. Usually, an IP address is currently dynamically assigned by your provider. This address usually changes regularly, we are thus unable to establish a personal reference based on the IP address. However, it would be theoretically possible to establish a personal reference in individual cases with static IP addresses.
The following dataset is stored every time you visit our website:
- The IP address of the visiting computer (stored in a compact form)
- The visiting computer´s operating system
- The visiting computer´s browser version
- The name of the retrieved file
- The date and time of the retrieval
- The amount of transmitted data
- The referring URL
These stored data are collected and stored in anonymous form for marketing purposes, as well as to optimise the website´s user-friendly features. These data are not used to personally identify visitors, the visitor personally, even though the website operator may analyse the user´s interaction behaviour at the level of individual sessions. Your data will never be disclosed to commercial address dealers. The legal basis for the data processing for the informational use of our website is our legitimate interest in the presentation of our company to the outside world in accordance with Article 6 Section 1 Letter f) GDPR.
Isofar as personal data are collected on our pages (for example name, address or e-mail address), this occurs on a voluntary basis, for example, when you register for events, subscribe to newsletters, participate in online questionnaires, request documentation or offers or make purchases. PASCHAL only collects and uses your personal data to the extent that they are required for the implementation of the contractual relationship or for processing your inquiry. The legal bases for this are Article 6 Section 1 Letter a) GDPR in cases in which you have explicitly granted your consent, or Article 6 Section 1 Letter b) GDPR for cases of contract initiation or contract performance.
We take the opportunity to highlight the fact that data transmission via the internet (e.g. communication by email) may involve security gaps and cannot be completely protected against access by third parties.
For the implementation of our website presence, we cooperate with various service providers who are bound by our right to issue directives and whom we have contractually committed to comply with data protection regulations (order data processing). To this extent, this data processing does not require any specific consent on your behalf.
Cookies
Cookies are very small text files. They store anonymised informationwhich you transmitted to us. We use “session specific” cookies: They do not permanently remain on your computer. The temporary cookie is deleted as soon as you leave our site.The compiled information enables us to analyse the usage patterns and structures on our website. Thus, we are able to continue optimising our website by improving its content or customisation and simplifying its use. We apply “permanent” cookies: They remain on your computer to simplify shopping, personalisation and registration services the next time you visit our website. For example, cookies may store your purchase selections while you continue shopping. To the extent that we use cookies from third-party providers, it is possible that they may also use the information obtained through the cookies to show you interest-based advertising when visiting other websites. You can manually remove “permanent” cookies (refer to the Use of Google Analytics). The lifespan of permanent cookies when being used by Google Analytics is 2 years).
You will generally be informed about our use of cookies upon accessing our website. You can also configure the use of cookies which are not technically necessary.
We differentiate between the following types of cookies:
Strictly necessary cookies
These cookies are necessary for the functionality of the website. Without them, the core functions of the website will not work. We base their use on our legitimate legal interest to offer all interested parties and customers an informative website to present our company, our products and our services. We are permitted to use these cookies without your consent.
Functional cookies
These cookies enable us to analyse the use of the website in order to analyse and improve its performance. The cookies provide information about how a visitor navigates the website, e.g. which pages are accessed, but do not store any information that would allow us to identify the user. The information collected is aggregated and analysed in such a way that it cannot be assigned to a specific person. These cookies are used solely for the purpose of improving the website and user experience.
Cookies for marketing purposes / targeting cookies
These cookies are used by advertising companies in order to display interest-based advertising. They can be used to share pages on social networks and to write comments. They are also used to show you interest-based advertising.
YouTube cookies
If a YouTube video is started, the provider uses cookies which collect information on user behaviour. When playing the video, a connection is established to the YouTube servers. This informs YouTube which pages you are visiting. When you are logged into your YouTube account, YouTube can link your browsing behaviour to your person. You can prevent this by logging out of your YouTube account beforehand.
The following cookies are used on our website:
Strictly necessary cookies
Cookie name | Provider | Purpose/Description | Lifetime |
PHPSESSID | paschal.de | Session identifier | Browser session |
pro_cookie_ok | paschal.de | Saving consent to the use of cookies | Browser session |
pro_track_ok | paschal.de | Saving consent to the use of functional cookies | Browser session |
pro_ta_ok | paschal.de | Saving consent to the use of targeting cookies | Browser session |
Functional cookies
Cookie name | Provider | Purpose/Description | Lifetime |
_ga | Google Analytics | User recognition through analytics | 2 years |
_gat | Google Analytics | Used to throttle the request rate | 1 minute |
_gid | Google Analytics | Distinguishing visitors | 1 day |
_pk_id | paschal (Matomo; formerly Piwik) | Usage analysis by PIWIK. Individually supplemented with an ID | 1 year |
_pk_ses | paschal (Matomo; formerly Piwik) | Usage analysis by PIWIK. Individually supplemented with an ID | Browser session |
SIDCC | Security cookies from Google to authenticate users | 90 days | |
ad_user_data | Consent to send user data to Google for advertising purposes | ||
ad_personalization |
For personalised advertising |
||
ad_storage | Triggering Google Ads tags | ||
analytics_storage | Triggering Google Analytics tags |
Under https://policies.google.com/technologies/cookies?hl=de#managing-cookies will provide you with more details on how Google uses cookies.
Cookies for marketing purposes / targeting cookies
Cookie name | Provider | Purpose/Description | Lifetime |
DV | Supporting Google advertising services | 10 minutes | |
1P_JAR | Optimisation of advertising from Google DoubleClick | Browser session |
YouTube cookies
Cookie name | Provider | Purpose/Description | Lifetime |
YSC | .youtube.com | Storage of user inputs and assignment of the user actions | Browser session |
VISITOR_INFO1_LIVE | .youtube.com | Stores user settings, personalisation of ads | 6 months |
IDE | .doubleclick.net | Insertion of Google ads on websites | 13 months |
CONSENT | .youtube.com | Storing consent to the use of cookies | 2 years |
PREF | .youtube.com | Information on the preferred page configuration and playback settings | 8 months |
Strictly necessary cookies
Cookie name | Provider | Purpose/Description | Lifetime |
language | schalung-shop.de | Saving selected language | Browser session |
pro_cookie_ok | schalung-shop.de | Saving consent to the use of cookies | Browser session |
pro_track_ok | schalung-shop.de | Saving consent to the use of functional cookies | Browser session |
pro_ta_ok | schalung-shop.de | Saving consent to the use of targeting cookies | Browser session |
sid | schalung-shop.de (OXID) | Session identifier | Browser session |
sid_key | schalung-shop.de (OXID) | Session identifier | Browser session |
Functional cookies
Cookie name | Provider | Purpose/Description | Lifetime | |
_ga | Google Analytics | User recognition through analytics | 2 years | |
_gat | Google Analytics | Used to throttle the request rate | 1 minute | |
_gid | Google Analytics | Distinguishing visitors | 1 day | |
_pk_id | paschal (Matomo; formerly Piwik) | Usage analysis by PIWIK. Individually supplemented with an ID | 1 year | |
_pk_ses | paschal (Matomo; formerly Piwik) | Usage analysis by PIWIK. Individually supplemented with an ID | Browser session | |
_pk_ref | paschal (Matomo; formerly Piwik) | Usage analysis by PIWIK. Individually supplemented with an ID | 6 months | |
SIDCC | Security cookies from Google to authenticate users | 90 days | ||
ad_user_data | Consent to send user data to Google for advertising purposes | |||
ad_personalization |
For personalised advertising |
|||
ad_storage | Triggering Google Ads tags | |||
analytics_storage |
|
Under https://policies.google.com/technologies/cookies?hl=de#managing-cookies will provide you with more details on how Google uses cookies.
Cookies for marketing purposes / targeting cookies
Cookie name | Provider | Purpose/Description | Lifetime |
DV | Supporting Google advertising services | 10 minutes | |
1P_JAR | Optimisation of advertising from Google DoubleClick | Browser session |
YouTube cookies
Cookie name | Provider | Purpose/Description | Lifetime |
YSC | .youtube.com | Storage of user inputs and assignment of the user actions | Browser session |
VISITOR_INFO1_LIVE | .youtube.com | Stores user settings, personalisation of ads | 6 months |
IDE | .doubleclick.net | Insertion of Google ads on websites | 13 months |
CONSENT | .youtube.com | Storing consent to the use of cookies | 2 years |
PREF | .youtube.com | Information on the preferred page configuration and playback settings | 8 months |
Use of Google Analytics 4
Google Analytics 4, a web analytics service offered by Google LLC, is used on this website, provided you have given your consent. The controller for users in the EU/EEA and Switzerland is Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). Google processes website usage data on our behalf and is contractually obliged to use measures that safeguard the security and confidentiality of the data it processes.
Google Analytics uses cookies that enable your use of our websites to be analysed. The majority of the information collected by the cookies about your use of this website is transmitted to a Google server in the USA where it is then stored.
We use this web analysis service to analyse the use of our website. We seek to use the insights gained from this to understand what content is of interest to you as a website user, to improve the content of the website and, if necessary, to adapt our promotional measures.
The anonymity of IP addresses is standard with Google Analytics 4. Due to IP anonymisation, your IP address will be shortened by Google within member states of the European Union or other parties to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. According to Google, the IP address transmitted by your browser as part of Google Analytics is not merged with other Google data.
During your visit to our website, your user behaviour is recorded in the form of "events". Events may include:
- Starting the session
- Your "click path", interaction with the website
- Scrolls (whenever a user scrolls to the end of the page [90%])
- Clicks on external links
- Internal searches
- Interaction with videos
- File downloads
- Adverts that have been viewed/clicked on
- Language settings
Other recorded information includes:
- Your approximate location (region)
- Your IP address (in truncated form)
- Technical information on your browser and the end devices you use (e.g. language settings, monitor resolution)
- Your internet provider
- The referrer URL (which website/advert you used to reach this website)
The purpose of processing
On behalf of the operator of this website, Google will use this information to evaluate your pseudonymous use of the website and to compile reports on website activity. We use the reports provided by Google Analytics to analyse the performance of our website and the success of our marketing campaigns.
Recipients
Data recipients are/may be
- Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (as the processor in accordance with Art. 28 GDPR)
- Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
- Alphabet Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
Third country transfer
If data are processed outside the EU/EEA and there is no level of data protection in place that is equal to the European standard, we have agreed an order-processing contract https://business.safety.google/adsprocessorterms/sccs/c2p/ with Google to provide an appropriate level of data protection.
The parent company of Google Ireland, Google LLC, is based in California, USA (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). The transmission of data to the USA and access to the data stored at Google by US authorities cannot be excluded. Under data protection law, the USA is currently considered a third country. You do not have the same rights there as within the EU/EEA. You may not be entitled to legal remedies against access by authorities.
Duration of storage
Data sent by us and linked to cookies is erased automatically after 14 months. The deletion of data that has reached the end of its storage period takes place automatically once a month.
Legal basis
The legal basis for this data processing is based on your consent, as defined in Art.6 (1) p.1 lit.a GDPR / Section 6 (2) DSG-EKD.
In addition, our interest in attracting the attention of those interested in our services and in our organisation through appropriate measures and in determining the effectiveness of the measures we have taken comes into consideration, Art. 6 (1) lit. f GDPR/ Section 6 (4) DSG-EKD (legitimate interest). However, we do not use Google Analytics without your consent.
Withdrawal rights
You can withdraw your consent at any time with future effect by accessing your cookie settings and changing your selection
Click here to change the settings.
The lawfulness of the processing carried out on the basis of consent until withdrawal shall remain unaffected.
You can also prevent cookies from being stored beforehand by adjusting the settings in your browser software. If you configure your browser to reject all cookies, this may limit the functionality on this and other websites. You can also prevent the collection of the data generated by the cookies and related to your use of the website (incl. your IP address) by Google as well as the processing of these data by Google by
a. not consenting to the placement of the cookie or
b. downloading and installing the browser add-on here to disable Google Analytics: https://tools.google.com/dlpage/gaoptout?hl=de
More information on the terms of use of Google Analytics and data protection at Google can be found at https://marketingplatform.google.com/about/analytics/terms/de/ and at https://policies.google.com/?hl=de.
Use of Google Ads
How Google Ads functions
If you access our website via an advertisement placed by us on Google, Google will store a cookie on your computer (conversion tracking). This cookie enables Google to recognise your Internet browser the next time it appears. If a user visits a website of ours that is registered for Google Ads and the cookie stored on their computer is still active, we and Google will be able to recognise that the user clicked that ad and has been redirected to this page. A different cookie is assigned to every Ads customer (which may for example, be ourselves). This means that cookies cannot be tracked across the websites of Ads customers. In most cases, the ad server cookies cease to be valid after 30 days and they should not serve to identify you personally.
Due to the marketing tools employed, your browser automatically establishes a direct connection with the Google server. We have no influence on the scope and further use of the data collected by Google through the use of this tool and therefore inform you here to the best of our knowledge: Through the integration of Ads Conversion, Google receives the information that you have called up the corresponding part of our website or clicked on the ad from us. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google and/or have not logged into a Google service, it is possible for the provider to learn your IP address and to store it.
Why we use Google Ads
We use Google Ads to make information about our services and our organisation more visible to interested users with the help of advertising media (Google Ads) on external websites. We do this to show you advertising that is of interest to you and to adapt our website to the interests of our website visitors. Finally, this enables us to establish how successful our promotional measures are proving to be.
In those promotional measures, we do not ourselves capture and process any personal details. All we receive from Google are statistical evaluations. These evaluations enable us to identify which of the promotional measures are particularly effective. We do not receive any further data from the use of the advertising media; in particular, we cannot identify users on the basis of this information.
Recipients
Data recipients are/may be
- Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (as the processor in accordance with Art. 28 GDPR)
- Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
- Alphabet Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
It cannot be ruled out that US authorities may access the data stored by Google.
Third country transfer
If data gets processed outside the EU/EEA and if there is no level of data protection in place that is equal to the European standard, we have agreed an order processing contract with Google to provide an appropriate level of data protection. The parent company of Google Ireland, Google LLC, is based in California, USA. The transmission of data to the USA and access to the data stored at Google by US authorities cannot be excluded. Under data protection law, the USA is currently considered a third country. You do not have the same rights there as within the EU/EEA. You may not be entitled to legal remedies against access by authorities.
Duration of storage
In most cases, the ad server cookies cease to be valid after 30 days and they should not serve to identify you personally.
Legal basis
The legal basis for this data processing is based on your consent, as defined in Art.6 (1) p.1 lit.a GDPR / Section 6 (2) DSG-EKD.
In addition, our interest in attracting the attention of those interested in our services and in our organisation through appropriate measures and in determining the effectiveness of the measures we have taken also comes into consideration, Art. 6 (1) lit. f GDPR/ Section 6 (4) DSG-EKD (legitimate interest). The Google Conversion Tracking cookies does not get set without your consent.
Withdrawal/rejection of Google Ads
You can withdraw your consent at any time with future effect by accessing your cookie settings and changing your selection:
Click here to change the settings.
The lawfulness of the processing carried out on the basis of the consent until withdrawal shall remain unaffected.
You can also prevent cookies from being stored beforehand by adjusting the settings in your browser software. If you configure your browser to reject all cookies, this may limit functionality on this and other websites. You can also prevent the collection of the data generated by the cookies and related to your use of the website (incl. your IP address) by Google as well as the processing of these data by Google by
a. not consenting to the placement of the cookie or
b. downloading and installing the browser add-on here to disable Google Analytics: https://tools.google.com/dlpage/gaoptout?hl=de
More information on the terms of use of Google Analytics and data protection at Google can be found at https://marketingplatform.google.com/about/analytics/terms/de/ and at https://policies.google.com/?hl=de.
Links to other websites
Our online services contain links to the websites of other providers, in particular in the social media sector. Since we have no influence on these external providers, we clarify that we assume no responsibility for compliance with the applicable data protection regulations on these platforms and refer to the respective data protection information for further details.
LinkedIn
On our online presence, we use social plug-ins (plug-ins) from the social network LinkedIn, operated by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland.
When you visit a page of our online presence which contains such plug-ins, they are initially de-activated. Only when you click on the button provided by LinkedIn are the plug-ins activated. This creates a connection to LinkedIn and your data is transmitted to LinkedIn.
For information about the purpose and scope of data collection, the further processing and use of the data by LinkedIn, your rights regarding this and the settings for protecting your privacy, see LinkedIn’s privacy policy: https://www.linkedin.com/legal/privacy-policy
Twitter and Instagram
We use social plugins (“plugins”) of the aforementioned social networks on our website.
Twitter is operated by Twitter Inc., 1355 Market St. Suite 900, San Francisco, CA 94103, USA (“Twitter”).
Instagram is operated by Instagram LLC., 1601 Willow Road, Menlo Park, CA 94025, USA (“Instagram”).
In order to increase the protection of your data when visiting our website, the plugins are restricted when they are integrated into the page by using an HTML link (so-called “Shariff solution” from c`t). This integration ensures that when you access a page on our website that contains such plugins, no connection with the servers of the provider of the respective social network is established. If you click on one of the buttons, a new window opens in your browser and accesses the page of the respective service provider where you are able to press, e.g. the Like or Share button (if necessary, after entering your login data).
Information about the purpose and scope of data collection, the further processing and use of the data by the providers on their pages as well as your rights in this regard and the setting options for protecting your privacy can be found in the privacy policy statements of each provider.
https://twitter.com/privacy
https://help.instagram.com/155833707900388
If you are active on PASCHAL’s Twitter profile (“paschalformwork”) we also receive a message from Twitter by email. We receive the following data: Name, date and time, profile picture and any messages.
If you are active on our Instagram account, your name, profile picture and any messages will be visible.
YouTube
Our website contains at least one or several social plugins (“plugins”) of the video portal YouTube. YouTube is operated by YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066 USA. YouTube is a subsidiary of Google Inc..
When you visit our website, the integrated YouTube player establishes a connection to YouTube in order to ensure the technical transmission of a video or audio file. When you connect to YouTube, your connection data is transmitted to YouTube for the purpose of playing a video or an audio file.
If you are logged in to your YouTube account when you visit our website, YouTube can assign the visit to our website directly to your personal profile. If you do not want this, you must log out of your YouTube account before you visit our website.
Information about the purpose and scope of data collection, the further processing and use of the data by YouTube as well as your rights in this regard and the setting options for protecting your privacy can be found in Google’s privacy policy statement: https://www.google.de/intl/de/policies/privacy/
II. Information on data collection and processing by PASCHAL in general:
Which parts of your data will be processed by us?
If we have received data from you, then these data will be processed by us only for the fundamental purposes for which the data were received or obtained. You can find further information on our data processing below under 'Individual processing operations'.
Data processing for other purposes is only considered if the necessary legal regulations are present in accordance with Article 6 Section 4 GDPR. Any accompanying information requirements in accordance with Article 13 Section 3 GDPR and Article 14 Section 4 GDPR shall be observed by us in this case.
The legal basis of data processing
The legal basis for the processing of personal data is fundamentally Article 6 GDPR - insofar as there are no specific legal regulations. In particular, Article 6 includes the following legal bases for processing.
- Consent (Article 6 Section 1 Letter a) GDPR)
- Data processing for the fulfilment of contracts or for the processing of pre-contractual enquiries and for taking steps at the request of the data subject prior to entering into a contract (Article 6 Section 1 Letter b) GDPR)
- Data processing as a result of our legitimate interest after the weighing of interests has been carried out (Article 6 Section 1 Letter f) GDPR)
- Data processing for complying with a legal obligation (Article 6 Section 1 Letter c) GDPR)
Individual processing operations:
Measures for advertising messages and information
In particular the measures we have implemented to address advertisements and information related to our products are based – insofar as we have not already obtained consent for this purpose - on the weighing of interests that it is also beneficial for our customers and interested parties to be informed about our products and activities.
Registration for the newsletter, subscription to “Schalzeit” and white paper requirements
1. Our newsletter and our specialist publication "Schalzeit" can only be subscribed to with prior consent. We use the so-called double opt in process for registering so that it is ensured that only those people who are actually interested in our newsletter will receive it. If you are no longer interested in our newsletter, then you can unsubscribe from it at any time by sending us a message at digitalmarketing@paschal.de When you unsubscribe, we will erase your information from our distribution list.
2.You can request what are known as white papers for selected products via our website. We use the personal data requested in this regard to deliver the white paper. You can register for this using our form. We use the double opt-in procedure for registration. A confirmation email will be sent to your specified email address with a request for confirmation. The registration only becomes effective when you click on the activation link contained in the confirmation email. We use the data you transmit to us exclusively for sending the newsletter, which may contain information or offerings.
We use rapidmail, Augustinerplatz 2, 79098 Freiburg i.Br., to send our white papers. Your data will therefore be transferred to rapidmail GmbH. rapidmail GmbH is prohibited from using your data for purposes other than sending the requested white paper. rapidmail GmbH is not permitted to pass on or sell your data. rapidmail is a certified German newsletter software provider and has been carefully selected pursuant to the requirements of the GDPR and the BDSG [German Federal Data Protection Act].
You can revoke your consent to the storage of your data and its use for sending the newsletter or your consent to other forms of contact for advertising purposes at any time. For this purpose, you simply need to send an email to digitalmarketing@paschal.de.
Use of CAPTCHA
We use a CAPTCHA to protect ourselves from computer-generated spam. This stores the IP address in truncated form and the information received is erased at the end of the session. The CAPTCHA will be stored on our server if it is used for the newsletter request; if a white paper is requested, the CAPTCHA will be stored by our service provider rapidmail GmbH, Augustinerplatz 2, Freiburg. Rapidmail is contractually bound towards us to comply with the GDPR.
CheckInSite portal use
When you register for our customer portal Checkinsite, we process the data that you transmit to us for registration. You will then receive your access ID with which you can view your customer account. We do not record any log files. Once you log out of the customer portal, we erase the access data.
Processing of customer data/data disclosed by interested parties
We process personal data such as surnames, first names, contact details such as phone numbers, fax numbers, email addresses and postal addresses, as well as other information disclosed in this regard within the scope of initiating and performing contracts.
The legal basis for this is point (b) of Art. 6 (1) GDPR data processing within the scope of initiating and performing a contract, as well as point (a) of Art. 6 (1) GDPR if you have given your consent to the processing of data that goes beyond the purposes above.
We use these data to process your request, prepare quotes, perform contracts as well as for invoicing and quality assurance purposes.
If you have any enquiries about the software products offered by our group of undertakings, we may forward your data to our IT sister company planitec GmbH, Schwimmbadstrasse 2, 77790 Steinach for further support and assistance. In the event of enquiries from areas which are managed by our trading partners, we forward your data to our trading partners for the purposes of further processing the enquiry and support.
Your data shall only be disclosed to service providers for printing and communicating information within the scope of our electronic data processing and hosting (order processing), to organise and perform shipping, transport and logistics. Furthermore, our quality assurance measures may require the disclosure of your data to material suppliers and external service providers. Your data shall only be disclosed to public authorities if the disclosure is required for compliance with statutory provisions (e.g. customs). If you have given consent hereto or we have an overriding legal interest therein, we reserve the right to obtain information on your credit rating from third parties (purchase on account).
For the performance of the contract, we may be required to disclose your data to third parties located outside the European Union.
Processing of data disclosed by suppliers and service providers
We process surnames, first names, contact details such as phone numbers, fax numbers, email addresses and postal addresses, and other information disclosed in this regard within the scope of collaborations with our suppliers and service providers.
The legal basis for this is point (b) of Art. 6 (1) GDPR data processing within the scope of initiating and performing a contract, as well as point (a) of Art. 6 (1) GDPR if you have given your consent to the processing of data that goes beyond the purposes above.
The purposes of this data processing are the performance of contracts, handling enquiries, purchasing, quality assurance and utilising services for the company.
Your data shall only be disclosed to external parties within the scope of our electronic data processing and hosting (order processing), to process payment and for quality assurance measures (supplier audits). Your data shall only be disclosed to public authorities if the disclosure is required for compliance with statutory provisions (e.g. customs).
For the performance of the contract, we may be required to disclose your data to third parties located outside the European Union.
Processing of data disclosed by applicants
We collect and process data that are disclosed to us by applicants for recruitment purposes. We also process data for the purpose of processing non-solicited applications.
Your data shall only be disclosed to external parties within the scope of our electronic data processing and hosting (order processing). Your data shall only be disclosed to public authorities if the disclosure is required for compliance with statutory provisions.
For the performance of the contract, we may be required to disclose your data to third parties located outside the European Union.
If an application is unsuccessful, we shall erase all applicant data within 6 months after the date on which the rejection notification was sent, unless the applicant has given consent to longer data storage for the purposes of joining our applicant pool.
The sharing of personal data
In principle, we do not share any personal data with third parties, unless this is carried out with the consent of the data subject, or if it is necessary as a result of a contractual or legal obligation, or if it concerns the commissioning of service providers by us. In this case, the service providers will only receive access to the data to the extent that they require the data to carry out their tasks. The service providers deployed are contractually obliged not to alter the data and in particular to not use the data for their own purposes and they must comply with the relevant data protection laws.
Deletion of data and storage period
We shall process the data for as long as the data are required for the corresponding purpose. The personal data of the data subject shall be deleted or blocked when the reason for the data being stored has expired. We adhere to the standard limitation period of 3 years, as per Sec. 195 BGB [German Civil Code], unless the purpose entails a shorter or longer storage period. Storage of the data may also take place if this is required as a result of legal regulations. This could for example be due to statutory storage regulations in accordance with commercial law or tax law. The statutory retention period for documents with tax relevance is usually 10 years, for business letters it is 6 years.
If we receive your data as a result of your consent, then you have the right to revoke the consent you have granted to us at any time with future effect (see Rights of the data subject).
If our data processing is based on the weighing of interests, then you as the data subject have the right to veto the processing of your personal data taking into consideration the provisions of Article 21 GDPR (see Rights of the data subject).
Rights of the data subject
Every data subject has the following rights:
Right of access by the data subject (Article 15 GDPR))
The data subject can demand from us information about the personal data that we have processed. In particular, you have the right to demand information about the purposes of the processing, categories of processed data, categories of receivers of data, the planned duration of storage, the existence of the right to rectification, deletion, the restriction of processing or rejection, the existence of a right to lodge a complaint, the origin of your data if they were not obtained by us, and the existence of automated decision making including profiling and any possible meaningful information about its particular details.
Right to rectification (Article 16 GDPR)
The data subject shall have the right to request without undue delay the rectification or the completion of inaccurate personal data concerning him or her.
Right to erasure (Article 17 GDPR)
This contains the right to demand deletion, as long as the processing is not required for exercising the right of freedom of expression and information, for the fulfilment of a legal obligation, for reasons of public interest or for the establishment, exercise or defence of legal claims. Right to restriction of processing
Right to restriction of processing (Article 18 GDPR
The restriction of processing can be demanded in the presence of the cases that are described in Article 18 GDPR.
Right to data portability (Article 20 GDPR)
The data subject can demand to receive the personal data which he or she has provided to us in a structured, commonly used and machine-readable format or to have the data transmitted to another controller.
Right to withdraw consent (Article 7 Section 3 GDPR)
There exists the right to withdraw any consent that has previously been granted to us at any time with future effect. This will mean that we will no longer be able to continue the data processing that is based on this consent in the future.
Right to object (Article 21 GDPR)
You have the right to object, on grounds relating to your particular situation, at any time to processing of your personal data which is based on point (e) or (f) of Art. 6 (1) GDPR. In the last case, you have a general right to object which will be implemented by us without requiring information about a particular situation.
Please address your issue to the following address:
PASCHAL-Werk G. Maier GmbH
Kreuzbühlstraße 5
77790 Steinach, Germany
digitalmarketing@paschal.de
Phone +49 7832 / 71-0
Fax +49 7832 / 71-209
Your right to lodge a complaint
If you should have any complaints, then we would be very happy to discuss your issue with you directly. Please do not delay contacting us in this case. You also have the right to lodge a complaint with any (data protection) supervisory authority. The address of the supervisory authority responsible for us is:
The State Representative for Data Protection and Freedom of Information in Baden-Württemberg
Lautenschlagerstraße 20
70173 Stuttgart, Germany
Phone +49 711 / 615541-0
Fax +49 711 / 615541-15
poststelle@lfdi.bwl.de
baden-wuerttemberg.datenschutz.de
Up-to-dateness and alteration of this Data Protection Declaration
This Data Protection Declaration is currently valid as of April 2023.
It may be necessary to alter this Data Protection Declaration due to the further development of our website and our product range, or as a result of altered legal or official guidelines.