Privacy statement

under Article 13 and 14 GDPR and § 55 BDSG

Controller (under Articles 13 1. (a) and 14 1. (a) of the GDPR) (hereinafter ‘we’)

coaxworks GmbH
Sebastian Thieme
Winterbergstr. 28
01277 DRESDEN
GERMANY

Under § 38 BDSG, no data protection officer has been appointed. (Related to Article 13 1. (b) and 14 1. (b) GDPR)

Condition of processing personal data (under Article 6 1. GDPR)

We will only store and process your data if at least one of the following conditions is met:
(a) You give your consent. (see right of withdrawal)
(b) It is necessary for the performance of a contract to which you are a party or in order to take steps at your request prior to enter into a contract.
(c) It is necessary for compliance with a legal obligation.
(d) We don’t use that.
(e) We don’t use that.
(f) It is for the purposes of our legitimate interests or those of third parties. This will be detailed at the appropriate point in this text.

Data protection-relevant processes

Web hosting service

The basis is additionally Article 28 GDPR and § 62 BDSG with contract for a processor.

Data subject:

  • All visitors to our website

Personal data:

  • called up (our) website (URL)
  • browser type and browser version
  • operating system used
  • previously visited website (URL)
  • host name of your device
  • IP address of your device
  • data sent via the contact form (at least name and email address)

These are processed with date and time and stored in server log files.

Interest:

  • Article 6 1. (f) GDPR to maintain technical communication and to facilitate communication.

Explanation:
We use an external service provider (‘host’) to provide and maintain our website. Stricter rules apply to processors (under article 29 GDPR).

We use the following hoster:
webgo GmbH
Heidenkampsweg 81
20097 HAMBURG
GERMANY
www.webgo.de

Contact form

Data subject:

  • individuals when using the contact form

Personal data:

  • data sent via the contact form (at least name and email address)

These are processed directly with date and time and saved as an email.
Further processing of your data takes place depending on the content of your request.

Interest:

  • Article 6 1. (f) GDPR to facilitate communication.
  • Article 6 1. (b) GDPR to take steps at your request prior to entering into a contract

Duration of processing and storage:
Until the completion of the pre-contractual measure at your request or if the temporal connection with the content of your enquiry no longer exists.

Processing applications and storage applications

Data subject:

  • Individuals whose data we received in the course of a public interaction (for example, their advertising).
  • Individuals whose data we received in the course of performing a contract (for example, contact details of a project manager, provided by the contractor).

Personal data:

  • Contact details of the type of contact used (probably email address or telephone number).
  • Relevant data sent by you (often, for example, contact details such as address, payment methods, company assignment of employees).

Processed with other data we generate (such as quotes and invoices).

Interest:

  • Article 6 1. (f) GDPR for the compatibility of the applications used, for example, in terms of easy contactability with other entrepreneurs (for example you) with reasonable effort.
  • Article 6 1. (b) GDPR for the performance of a contract to which you are party or to take steps at your request prior to entering into a contract.
  • Article 6 1. (c) GDPR for compliance with a legal obligation, for example to meet product safety requirements.

Duration of processing and storage:
Until the completion of the pre-contractual measure at your request or if the temporal connection with the content of your enquiry no longer exists.

Explanation:
For basic processes in the cooperation, several necessary personal data must be stored and processed by us.

Communication applications

The basis is additionally § 3 (1) TTDSG, § 206 StGB and TKG.

Data subject:

  • People who contact us and are contacted by us.

Personal data:

  • contact details of the contact type used (often e-mail address or telephone number)
  • content-related data (often e. g. names of employees and thus their company assignment)

Interest:

  • Article 6 1. (f) GDPR for the compatibility of the applications used, for example, in terms of easy contactability with other entrepreneurs (for example you) with reasonable effort.
  • Article 6 1. (b) GDPR for the performance of a contract to which you are party or to take steps at your request prior to entering into a contract.

Duration of processing and storage:
Until the completion of the pre-contractual measure at your request or if the temporal connection with the content of your enquiry no longer exists.

Explanation:
Our preferred communication applications are e-mail and telephone. In addition, we are happy to adapt ourselves to the individual communication applications of our customers at reasonable expense, so that you can implement your security requirements.

Delivery, payment, on-site appointments, authorities and the like

Event-related required data transmission to third parties

Data subject:

  • Contractors

Personal data:

  • physical consignment: for example address and name, partly telephone number of a contact person
  • transfer: for example name and IBAN of the account holder
  • on-site appointments: for example address and name of a Contact person

Interest:

  • Article 6 1. (b) GDPR for the performance of a contract to which you are party or to take steps at your request prior to entering into a contract
  • Article 6 1. (c) GDPR for compliance with a legal obligation, for example, regarding taxes or insurance

Duration of processing and storage:
Until the completion of the pre-contractual measure at your request or if the temporal connection with the content of your enquiry no longer exists.

Explanation:
It may also be necessary to pass on data to third parties for the fulfilment of the contract, such as address data for a delivery by an external company, account data for an order for transfers by an external banking institution or receipts for financial transactions for audits by supervisory authorities.

We won’t

  • We do not process personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, or genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning a natural person's sex life or sexual orientation (under Article 9 GDPR and § 46 BDSG).
  • We refrain from automated processing and profiling in connection with personal data (under Article 22 GDPR and § 37 BDSG).
  • Website: We do not use features that let your browser establish direct connections in third countries.

Deviating provisions to all of the aforementioned points may be determined in separate consents.

Your rights

Right to withdraw your consent (under Article 7 3., Article 13 2. (c) and Article 14 2. (c) GDPR, as well as § 51 (3) BDSG)

You can withdraw your consent at any time with effect for the future.

Right of access (under Article 15, Article 13 2. (b) and Artikel 14 2. (b) GDPR, as well as § 57 BDSG)

You have the right to obtain from us confirmation as to whether or not personal data concerning you are being processed, And, where that is the case, you have the right of access to the personal data and the corresponding information (under Article 15 GDPR).

Right to rectification (under Article 16, Article 13 2. (b) and Artikel 14 2. (b) GDPR)

You have the right to obtain from us without undue delay the rectification of inaccurate personal data concerning you. Taking into account the purposes of the processing, the you have the right to have incomplete personal data completed, including by means of providing a supplementary statement.

Right to erasure (under Article 17, Article 13 2. (b) and Artikel 14 2. (b) GDPR)

You have the right to obtain from us the erasure of personal data concerning you without undue delay. Article 17 GDPR specifies the reasons why we must delete this data without undue delay. We have to examine these reasons on a case-by-case basis and weigh them against other interests Article 6 (1) GDPR.

Right to restriction of processing (under Article 18, Article 13 2. (b) and Article 14 2. (b) GDPR)

You have the right to obtain from us restriction of processing.

Right to data portability (under Article 20, Article 13 2. (b) and Article 14 2. (b) GDPR)

You have the right to receive the personal data concerning you in a structured, commonly used and machine-readable format and you have the right to transmit those data to another controller. Restrictions are defined in Article 20 GDPR.

Right to object (under Article 21, Article 13 2. (b) and Article 14 2. (b) GDPR)

You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data, based on public interest, legitimate interest Article 6 1. (e) or (f) GDPR, concerning you.

Right to lodge a complaint (under Article 77, Article 13 2. (e) and Article 14 2. (d) GDPR)

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority (for example pursuant to § 40 BDSG), in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if the data subject considers that the processing of personal data relating to you infringes the GDPR.

It is clear that the current legal texts apply before the quotations indicated here.

Abbreviations used are

  • BDSG: ‘Bundesdatenschutzgesetz’ (Germany, Federal Data Protection Act, to extend the GDPR)
  • GDPR: Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation)
  • StGB: ‘Strafgesetzbuch’ (Germany, Criminal Code)
  • TKG: ‘Telekommunikationsgesetz’ (Germany, law for telecommunication)
  • TTDSG: ‘Gesetz über den Datenschutz und den Schutz der Privatsphäre in der Telekommunikation und bei Telemedien’ (Germany, implementation and extension of Directive 2002/58/EC concerning the processing of personal data and the protection of privacy in the electronic communications sector (Directive on privacy and electronic communications))

Please note that this privacy statement may change due to, for example, the development of the website or legal requirements. An up-to-date version of the privacy statement can be found on the website.