Privacy Policy

All personal data is treated confidentially. Our data protection practices comply with the Federal Data Protection Act (BDSG) and the General Data Protection Regulation (GDPR). Below, we provide details regarding data protection:

Data Controller as defined by the GDPR and the BDSG

Peter Cramer GmbH & Co. KG

51-53 Steinbergweg

58099 Hagen

Phone:+49 (0)2304 933-3

Fax: +49 (0)2304 933-500

Email:info@cramer-arbeitsbuehnen.de

Data Protection Officer

ADICOM Systems GmbH

Christian Scobel

75 Schwitter Weg

5706 Menden

Phone: +49 2373 170678-13

Email: dsb@adicom-systems.de

1. Reasons for Data Collection

We collect and process your data to provide our website and to offer you the best possible service by giving you convenient access to our services.

2. What data is collected, processed, or used?

2.1 Visiting Our Website

When you access our website, our servers automatically collect general information, primarily for the purposes of establishing a connection, ensuring functionality, and maintaining system security. This includes

• the type of browser used
• the operating system used
• the domain name of the Internet service provider
• the connection information for the computer being used (IP address)
• the website from which you are visiting us (referrer URL)
• the pages you visit on our site, as well as
• the date and duration of the visit.

Due to pseudonymization, we are unable to identify specific individuals based on this data. This data is not combined with data from other sources.

2.2 Correspondence

2.2 a) Email or telephone correspondence:

If you send us an email or contact us by phone, your email address and the information you provide via email or phone will be used solely for the purpose of corresponding with you. Once the correspondence is complete, your email address and the data you provided will be deleted, and no other use or disclosure to third parties will occur, unless an administrative proceeding or process is initiated. If statutory retention requirements apply, the email correspondence and all data transmitted to us will not be deleted during the period covered by the retention requirement.

2.2 b) Use of our contact form:

If you contact us via a contact form, personal data will be collected. The specific data collected in each case is indicated on the contact form. The data is stored for the purpose of processing your inquiry. Required fields are marked with an asterisk (*). All other information is voluntary. We delete the data collected in connection with the contact form once storage is no longer necessary, or restrict its processing if statutory retention requirements apply.

The legal basis for the processing of your personal data is Article 6(1)(b) of the GDPR when we contact you in connection with the conclusion of a contract. In all other cases, it is in our legitimate interest to respond to your inquiries; therefore, in such cases, the legal basis is Article 6(1)(f) of the GDPR.

2.3 Newsletter Sign-Up

With your consent, you can subscribe to our free email newsletter, through which we’ll keep you informed about current, interesting offers. We use the so-called double opt-in procedure for newsletter sign-ups. This means that after you sign up, we’ll send an email to the address you provided, asking you to confirm that you wish to receive the newsletter. If you do not confirm your subscription, your information will be blocked and automatically deleted after one month. In addition, we store the IP addresses you used and the times of your registration and confirmation. The purpose of this procedure is to verify your subscription and, if necessary, to investigate any potential misuse of your personal data. The only required information for receiving the newsletter is your email address. All other information is voluntary. After your confirmation, we will store your data for the purpose of sending you the newsletter. You can unsubscribe from the newsletter at any time by notifying the data controller (see the beginning of our Privacy Policy), e.g., by sending an email toinfo@cramer-arbeitsbuehnen.de. The legal basis is Art. 6(1)(a) of the GDPR.

2.4 Sending Our Email Newsletter to Our Existing Customers

If you have provided us with your email address when purchasing goods or services, we reserve the right to periodically send you offers via email for goods or services from our product range that are similar to those you have already purchased. Pursuant to Section 7(3) of the German Unfair Competition Act (UWG), this does not require separate consent from you. Data processing is based on our legitimate interest in sending personalized direct marketing in accordance with Article 6(1)(f) of the GDPR. However, if you initially objected to the use of your email address for the aforementioned purpose, we will of course not send you any emails. Even if you did not initially object, you are entitled to object to the use of your email address for the aforementioned promotional purpose at any time with future effect by notifying the data controller (see the beginning of our Privacy Policy). The only costs incurred for this are transmission fees based on standard rates. Upon receipt of your objection, the use of your email address for promotional purposes will be discontinued immediately.

2.5 Device Status Reports

We offer you the option to deregister equipment rented from us early. To do so, please use the form available athttps://www.cramer-arbeitsbuehnen.de/service/geraetefreimeldung/, where you can provide us with the 4-digit inventory number or identification number of the respective piece of equipment, its location, and the last day of use. To identify the equipment, we also need your company name and your name. These required fields are marked with (*). Additional information is optional.

We will confirm your cancellation via email and pick up the aerial work platform, forklift, or bridge inspection device from your location.

The legal basis is Article 6(1)(b) of the GDPR. We store and use the data you provide to us for the purpose of fulfilling the contract between you and us. Once the contract has been fully fulfilled, your data will be blocked in accordance with retention periods under tax and commercial law and deleted upon the expiration of these periods, unless you have expressly consented to further use of your data or we have reserved the right to further use your data as permitted by law, in which case we will inform you of this in this Privacy Policy.

 

2.6 Data Processing When Opening a Customer Account / Registering

We collect and process personal data when you provide it to us in connection with the performance of a contract or when opening a customer account. The legal basis is Article 6(1)(b) of the GDPR. The specific data collected can be found in the respective input forms. Required fields are marked with (*). You may delete your customer account at any time by sending a message to the contact address of the data controller or online via the same form. We store and use the data you provide to fulfill the contract between you and us. After the contract has been fully fulfilled or your customer account has been deleted, your data will be blocked in accordance with retention periods under tax and commercial law and deleted upon the expiration of these periods, unless you have expressly consented to further use of your data or we have reserved the right to further use your data as permitted by law, in which case we will inform you of this in this Privacy Policy.

2.7 Registration for Training Courses

 We offer you the opportunity to register for the training courses we conduct through our website. We have a booking form available for this purpose.

The legal basis is Article 6(1)(b) of the GDPR. The specific data collected can be found in the respective input forms. Required fields are marked with (*). We store and use the data you provide to process the contract between you and us. Once the contract has been fully fulfilled or your customer account has been deleted, your data will be blocked in accordance with retention periods under tax and commercial law and deleted upon the expiration of these periods, unless you have expressly consented to further use of your data or we have reserved the right to further use your data as permitted by law, in which case we will inform you of this in this Privacy Policy.

Before you submit your registration information for our training courses via the booking form, you must also expressly consent to the transmission of your data and its storage as described above by checking the box (so-called “opt-in”). The legal basis for data processing is therefore also Article 6(1)(a) of the GDPR.

3. Embedding YouTube Videos

We have embedded YouTube videos in our website that are hosted on http://www.YouTube.com and can be played directly from our website. These are all embedded in “enhanced privacy mode,” which means that no data about you as a user is transmitted to YouTube unless you play the videos. Only when you play the videos is the data listed below transmitted. We have no control over this data transmission. When you visit the website, YouTube receives the information that you have accessed the corresponding page of our website. The following data is transmitted: IP address, date and time of the request, time zone difference from Greenwich Mean Time (GMT), content of the request (specific page), access status/HTTP status code, amount of data transferred, referring website, browser, operating system and its interface, language, and version of the browser software. This occurs regardless of whether YouTube provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data will be directly associated with your account. If you do not wish for this data to be associated with your YouTube profile, you must log out before clicking the button. YouTube stores your data as usage profiles and uses them for advertising, market research, and/or to tailor its website to user needs. Such analysis is conducted in particular (even for users who are not logged in) to deliver targeted advertising and to inform other users of the social network about your activities on our website.

You have the right to object to the creation of these user profiles; to exercise this right, you must contact YouTube.

For more information on the purpose and scope of data collection and its processing by YouTube, please refer to the privacy policy. There you will also find further information about your rights and settings options for protecting your privacy: https://www.google.de/intl/de/policies/privacy. Google also processes your personal data in the United States and has complied with the EU-U.S. Privacy Shield,https://www.privacyshield.gov/EU-US-Framework.

The legal basis for the processing is Article 6(1)(f) of the GDPR.

4. Integration of Google Maps

On this website, we use Google Maps. This allows us to display interactive maps directly on the website and enables you to conveniently use the map feature. When you visit the website, Google receives information indicating that you have accessed the corresponding page of our website. In addition, the following information is transmitted: IP address, date and time of the request, time zone difference from Greenwich Mean Time (GMT), content of the request (specific page), access status/HTTP status code, amount of data transferred, referring website, browser, operating system and its user interface, language, and browser software version. This occurs regardless of whether Google provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data will be directly associated with your account. If you do not wish for this data to be associated with your Google profile, you must log out before clicking the button. Google stores your data as usage profiles and uses them for advertising, market research, and/or to tailor its website to user needs. Such analysis is conducted in particular (even for users who are not logged in) to deliver targeted advertising and to inform other users of the social network about your activities on our website.

You have the right to object to the creation of these user profiles; to exercise this right, you must contact Google.

For more information on the purpose and scope of data collection and its processing by the plug-in provider, please refer to the provider’s privacy policy. There you will also find further information about your rights in this regard and settings options for protecting your privacy: http://www.google.de/intl/de/policies/privacy. Google also processes your personal data in the United States and has certified its compliance with the EU-U.S. Privacy Shield,https://www.privacyshield.gov/EU-US-Framework.

The legal basis for the processing is Article 6(1)(f) of the GDPR.

5. Cookies

Cookies are used to enhance the user experience and accommodate the preferences of website visitors. For example, they are used to save your selections for country or language. Cookies are small text files that are stored on your hard drive to enable the browser to be identified when you visit the website again.

You can prevent cookies from being stored on your hard drive by adjusting your browser settings accordingly. Cookies that have already been set can be deleted at any time. Please refer to your browser’s help section for instructions on how to delete cookies or prevent them from being stored.

You can use the following links to learn more about this feature for the most commonly used browsers:

• Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies
• Firefox: http://support.mozilla.org/de/kb/cookies-informationen-websites-auf-ihrem-computer
• Google Chrome: http://support.google.com/chrome/bin/answer.py?hl=de&answer=95647
• Safari: https://support.apple.com/kb/PH21411?locale=de_DE
• Opera: http://help.opera.com/Linux/12.10/de/cookies.html

Unless you have changed or plan to change your settings, cookies that are intended to enable or ensure the necessary technical functions will remain on your device until you close your browser; other cookies may remain on your device for a longer period (up to 5 days).

If you do not accept cookies, this may affect your ability to use our website.

The legal basis for the processing of cookies is Article 6(1)(f) of the GDPR. Our legitimate interest in the use of cookies lies in providing an attractive website and in analyzing user behavior to improve our offerings. Some features of our website cannot be provided without the use of cookies. These features also require that the browser be recognized after a page change.

6. Use, Disclosure, and Retention Period of Personal Data 

The website is hosted by NetWork Team® Gesellschaft für Internet und Netzwerktechnik mbH as a so-called data processor pursuant to Article 28 of the GDPR. The technical and organizational security measures at NetWork Team® Gesellschaft für Internet und Netzwerktechnik mbH were reviewed prior to the company being commissioned and are regularly monitored.

Your data will only be disclosed to third parties if it is necessary and legally permissible, if you have expressly consented to such disclosure in advance, or if we are legally required to do so.

If you provide us with personal data based on your express consent, this data will be used only for the purpose underlying that consent and to which you have agreed in advance. You may revoke your consent at any time, effective for the future.

Your personal data will be processed and stored for as long as and to the extent necessary to fulfill the purposes specified in this notice. Once these purposes have been fulfilled, the data will be deleted on a regular basis. The data will not be deleted if further processing for a limited period is necessary to comply with statutory retention periods or for documentation and evidence purposes in accordance with statutes of limitations.

7. Deletion

Personal data will be deleted or blocked as soon as the purpose for which it was stored no longer applies or you request its deletion. The data will also be deleted when a retention period prescribed by the aforementioned regulation expires, unless further storage of the data is necessary for the conclusion or performance of a contract, or you have given your consent in this regard.

8. Data Security

We protect our website and other systems against the loss, destruction, unauthorized access, alteration, or disclosure of your data by unauthorized persons through technical and organizational measures. Depending on the browser used, data is transmitted using SSL encryption ranging from 128-bit to 256-bit. Despite regular checks and continuous improvements to our security measures, it is not possible to provide complete protection against all risks.

9. Google Web Fonts

To ensure that our content is displayed correctly and visually appealing across all browsers, we use script libraries and font libraries on this website, such as Google Web Fonts (https://www.google.com/webfonts/). Google Web Fonts are cached in your browser to prevent them from having to be reloaded multiple times. If your browser does not support Google Web Fonts or blocks access to them, content will be displayed in a standard font.

Calling script libraries or font libraries automatically establishes a connection to the library provider. In doing so, it is possible that the providers of such libraries may collect data.

You can find the privacy policy of the library operator, Google, here:https://www.google.com/policies/privacy/

The legal basis for the processing is Article 6(1)(f) of the GDPR.

 

10. Use of Google Analytics for Web Analytics

This website uses Google Analytics, a web analytics service provided by Google Inc. (www.google.de). Google Analytics uses so-called “cookies,” which are text files stored on your computer that enable an analysis of your use of the website. The information generated by the cookie regarding your use of this website is generally transmitted to and stored on a Google server in the United States. However, if IP anonymization is enabled on this website, your IP address will be truncated by Google beforehand within member states of the European Union or in other signatory states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the United States and truncated there. IP anonymization is enabled on this website. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity, and to provide other services related to website and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics is not combined with other data held by Google. You can prevent the storage of cookies by adjusting your browser settings accordingly; however, please note that in this case, you may not be able to use all functions of this website to their full extent.

You can also prevent Google from collecting the data generated by the cookie and related to your use of the website (including your IP address), as well as from processing this data, by downloading and installing the browser plugin available at the following link:http://tools.google.com/dlpage/gaoptout?hl=de.

Alternativ zum Browser-Plugin können Sie über diesen Link <a href=”javascript:gaOptout()”> ein Opt-out Cookie setzen klicken, um die Erfassung durch Google Analytics auf dieser Website zukünftig zu verhindern. Dabei wird ein Opt-Out-Cookie auf Ihrem Endgerät abgelegt. Löschen Sie Ihre Cookies, müssen Sie den Link erneut klicken. Die Nutzungsbedingungen und Hinweise zum Datenschutz finden Sie unter http://www.google.com/analytics/terms/de.html bzw. unter https://www.google.de/intl/de/policies/.

 

11. Use of Social Media Plug-ins

11.1 Which providers do we use?

We currently use the following social media plug-ins: Facebook, Google+.

11.2 Privacy Policy for the Use of Facebook Plugins (Facebook Button)

Our website incorporates plugins from the social network Facebook, provided by Facebook Inc., 1 Hacker Way, Menlo Park, California 94025, USA. You can recognize the Facebook plugins by the Facebook logo or the “Like” button on our site. You can find an overview of the Facebook plugins here:http://developers.facebook.com/docs/plugins/.

When you visit our pages, the plugin establishes a direct connection between your browser and the Facebook server. This informs Facebook that you have visited our site using your IP address. If you click the Facebook “Like” button while logged into your Facebook account, you can link the content of our pages to your Facebook profile. This allows Facebook to associate your visit to our pages with your user account. Please note that, as the provider of this website, we have no knowledge of the content of the data transmitted or how Facebook uses it. For more information, please see Facebook’s Privacy Policy athttp://de-de.facebook.com/policy.php.

If you do not want Facebook to be able to associate your visit to our pages with your Facebook account, please log out of your Facebook account.

11.3 Privacy Policy for the Use of Google +1

Our website uses features from Google +1. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Collection and Sharing of Information: You can use the Google +1 button to share information worldwide. Through the Google +1 button, you and other users receive personalized content from Google and our partners. Google stores both the fact that you have given a +1 to a piece of content and information about the page you were viewing when you clicked +1. Your +1s may appear as recommendations alongside your profile name and photo in Google services—such as in search results or on your Google Profile—or in other places on websites and in ads across the web. Google records information about your +1 activity to improve Google services for you and others. To use the Google +1 button, you need a public Google profile that is visible worldwide and must include at least the name you selected for the profile. This name is used across all Google services. In some cases, this name may also replace another name you used when sharing content through your Google Account. The identity of your Google profile may be visible to users who know your email address or have other identifying information about you.

Use of the Collected Information: In addition to the purposes described above, the information you provide will be used in accordance with Google’s applicable privacy policies. Google may publish aggregated statistics about users’ +1 activity or share them with users and partners, such as publishers, advertisers, or affiliated websites.

11.4 No Influence on Our Part

We have no control over the data collected or the data processing operations, nor are we aware of the full scope of data collection, the purposes of processing, or the retention periods. We also have no information regarding the deletion of the collected data by the plug-in provider.

11.5 Use by Providers

The plug-in provider stores the data collected about you as usage profiles and uses this data for advertising, market research, and/or to tailor its website to your needs. Such analysis is carried out in particular (even for users who are not logged in) to display targeted advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles; to exercise this right, you must contact the respective plug-in provider. Through the plug-ins, we offer you the opportunity to interact with social networks and other users, enabling us to improve our services and make them more interesting for you as a user. The legal basis for the use of the plug-ins is Article 6(1)(f) of the GDPR.

11.6 Data Disclosure

Data is shared regardless of whether you have an account with the plug-in provider and are logged in there. If you are logged in with the plug-in provider, the data we collect about you is directly associated with your existing account with the plug-in provider. If you click the activated button—for example, to share the page—the plug-in provider will also store this information in your user account and share it publicly with your contacts. We recommend that you log out of social networks regularly after use, and especially before clicking the button, as this will help you avoid having this information linked to your profile with the plug-in provider.

11.7 Providers' Privacy Policy

For more information on the purpose and scope of data collection and its processing by the plug-in provider, please refer to the privacy policies of these providers listed below. There you will also find further information about your rights in this regard and the settings available to protect your privacy.

Addresses of the respective plug-in providers and URLs to their privacy policies:

• Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA; http://www.facebook.com/policy.php; for more information on data collection: http://www.facebook.com/help/186325668085084, http://www.facebook.com/about/privacy/your-info-on-other#applications and http://www.facebook.com/about/privacy/your-info#everyoneinfo. Facebook has complied with the EU-U.S. Privacy Shield,https://www.privacyshield.gov/EU-US-Framework.

• Google Inc., 1600 Amphitheater Parkway, Mountain View, California 94043, USA;https://www.google.com/policies/privacy/partners/?hl=de. Google has complied with the EU-U.S. Privacy Shield,https://www.privacyshield.gov/EU-US-Framework.

12. Applications

We also collect and process personal data from applicants for the purpose of conducting our application process. This processing may also be carried out electronically. This is always the case when an applicant submits application materials to us electronically, i.e., via email (bewerbung@cramer-arbeitsbuehnen.de) or through a web form on our website. If we enter into an employment contract with an applicant, the submitted data will be stored for the purpose of managing the employment relationship in accordance with legal requirements. However, if no employment contract is concluded between us and the applicant, the application documents will be deleted four months after notification of the rejection decision, provided that no other legitimate interests of the data controller preclude such deletion. An example of such a legitimate interest is the burden of proof in proceedings under the General Equal Treatment Act (AGG). We wish to evaluate all applicants solely on the basis of their qualifications and therefore ask that you refrain, as far as possible, from including information in your application regarding racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data for the unique identification of a natural person, health data, or data concerning sex life or sexual orientation.

13. Rights of the Data Subject

If your personal data is processed, you are a data subject within the meaning of the GDPR, and you have the following rights vis-à-vis the controller:

13.1 Right to Information

You may request confirmation from the data controller as to whether we are processing personal data concerning you.

If such processing is taking place, you may request the following information from the data controller:

• the purposes for which the personal data is processed;
• the categories of personal data that are processed;
• the recipients or categories of recipients to whom your personal data has been or will be disclosed;
• the planned duration of the storage of your personal data or, if specific details cannot be provided, the criteria used to determine the storage period;
• the existence of a right to have personal data concerning you rectified or erased, a right to restrict processing by the controller, or a right to object to such processing;
• the existence of a right to file a complaint with a supervisory authority;
• all available information regarding the origin of the data, if the personal data is not collected directly from the data subject.

13.2 Right to Rectification

You have the right to request that the controller correct and/or complete your personal data if the processed personal data concerning you is inaccurate or incomplete. The controller must correct the data without delay.

13.3 Right to Restriction of Processing

Under the following conditions, you may request that the processing of your personal data be restricted:

• if you contest the accuracy of the personal data concerning you for a period that allows the controller to verify the accuracy of the personal data;
• the processing is unlawful, and you object to the erasure of the personal data and instead request that the use of the personal data be restricted;
• the controller no longer needs the personal data for the purposes of processing, but you need it to assert, exercise, or defend legal claims, or
• if you have objected to the processing pursuant to Article 21(1) of the GDPR and it has not yet been determined whether the controller’s legitimate grounds override your grounds.

If the processing of your personal data has been restricted, such data—with the exception of its storage—may be processed only with your consent, or for the purpose of asserting, exercising, or defending legal claims, or to protect the rights of another natural or legal person, or for reasons of an important public interest of the Union or a Member State.

If the restriction on processing has been imposed in accordance with the above conditions, the controller will notify you before the restriction is lifted.

13.4 Right to Erasure

Obligation to Delete

You may request that the controller delete your personal data without delay, and the controller is obligated to delete such data without delay if any of the following grounds apply:

• The personal data concerning you is no longer necessary for the purposes for which it was collected or otherwise processed.
• You withdraw your consent on which the processing was based pursuant to Article 6(1)(a) or Article 9(2)(a) of the GDPR, and there is no other legal basis for the processing.
• You object to the processing pursuant to Article 21(1) of the GDPR, and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Article 21(2) of the GDPR.
• The personal data concerning you has been processed unlawfully.
• The erasure of your personal data is necessary to comply with a legal obligation under Union law or the law of the Member States to which the controller is subject.
• The personal data concerning you was collected in connection with the information society services offered, in accordance with Article 8(1) of the GDPR.

Disclosure to Third Parties

If the controller has made your personal data public and is obligated to erase it pursuant to Article 17(1) of the GDPR, the controller shall take appropriate measures, including technical measures, taking into account available technology and the cost of implementation, to inform controllers who process the personal data that you, as the data subject, have requested that they erase all links to such personal data or any copies or replicas of such personal data.

Exceptions

The right to erasure does not apply if the processing is necessary

• to exercise the right to freedom of expression and information;
• to comply with a legal obligation that requires processing under Union or Member State law to which the controller is subject, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
• for reasons of public interest in the area of public health pursuant to Article 9(2)(h) and (i) and Article 9(3) of the GDPR;
• to assert, exercise, or defend legal claims.

13.5 Right to Information

If you have exercised your right to rectification, erasure, or restriction of processing with the controller, the controller is obligated to notify all recipients to whom your personal data has been disclosed of such rectification, erasure, or restriction of processing, unless this proves impossible or involves disproportionate effort. You have the right to request information from the data controller regarding these recipients.

13.6 Right to Data Portability

You have the right to receive the personal data concerning you that you have provided to the controller in a structured, commonly used, and machine-readable format. You also have the right to transmit this data to another controller without hindrance from the controller to whom the personal data was provided, provided that

– the processing is based on consent pursuant to Article 6(1)(a) of the GDPR or Article 9(2)(a) of the GDPR, or on a contract pursuant to Article 6(1)(b) of the GDPR, and

– the processing is carried out using automated means.

In exercising this right, you also have the right to have your personal data transferred directly from one controller to another, provided that this is technically feasible. This must not infringe upon the freedoms and rights of others.

13.7 Right to Object

You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data carried out pursuant to Article 6(1)(e) or (f) of the GDPR; this also applies to profiling based on these provisions.

The controller will no longer process your personal data unless it can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing is necessary for the establishment, exercise, or defense of legal claims.

If your personal data is processed for the purpose of direct marketing, you have the right to object at any time to the processing of your personal data for such marketing purposes; this also applies to profiling to the extent that it is related to such direct marketing.

If you object to the processing of your personal data for direct marketing purposes, your personal data will no longer be processed for those purposes.

You have the option, in connection with the use of information society services—notwithstanding Directive 2002/58/EC—to exercise your right to object through automated procedures that use technical specifications.

13.8 Right to Withdraw Consent Under Data Protection Law

You have the right to withdraw your consent under data protection law at any time. Withdrawing your consent does not affect the lawfulness of the processing carried out on the basis of your consent prior to its withdrawal.

13.9 Automated Decision-Making in Individual Cases including profiling

You have the right not to be subject to a decision based solely on automated processing—including profiling—that produces legal effects concerning you or similarly significantly affects you. This does not apply if the decision

• is necessary for the conclusion or performance of a contract between you and the data controller,
• is permitted under Union or Member State law to which the controller is subject, and such law provides for appropriate safeguards to protect your rights, freedoms, and legitimate interests; or
• with your express consent.

However, these decisions may not be based on special categories of personal data as defined in Article 9(1) of the GDPR, unless Article 9(2)(a) or (g) of the GDPR applies and appropriate measures have been taken to protect your rights and freedoms as well as your legitimate interests.

13.10 Right to File a Complaint with a Supervisory Authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority—in particular, in the Member State of your residence, your workplace, or the location of the alleged infringement—if you believe that the processing of your personal data violates the GDPR.

The supervisory authority to which the complaint was submitted shall inform the complainant of the status and outcome of the complaint, including the possibility of seeking judicial remedy under Article 78 of the GDPR.

14. Use of Automated Decision-Making

As a responsible company, we do not use automated decision-making or profiling.

15. Links to Third-Party Websites

Our website may contain links to websites operated by third parties. We have no influence over these websites and do not verify that third parties comply with applicable privacy regulations.

16. Scope, Validity, and Timeliness of Our Privacy Policy

By using the websites, the user consents to the processing and use of their data as described in this Privacy Policy. We reserve the right to amend this Privacy Policy at any time, with future effect, as necessary—in particular to adapt it to further developments of the websites or the implementation of new technologies.

Contact

If you have any questions, please contactdatenschutz@cramer-arbeitsbuehnen.de

Privacy Policy | IPAF