Welcome to our website. Below is our declaration of data protection
Table of contents
I. General information
Contact details of the responsible person
II. Information about the collection of personal data
1. Visit of the website
a) Purpose of data processing
b) Duration of storage
c) legal basis
d) objection and opposition and removal option
2. Cookies
a) purpose of data processing
b) Duration of storage
c) legal basis
d) objection and opposition and removal option
3. Execution of the contract
a) purpose of data processing
b) Duration of storage
c) legal basis
d) objection and opposition and removal option
4. Contact form, e-mail, or telephone contact
a) purpose of data processing
b) Duration of storage
c) legal basis
d) objection and opposition and removal option
III. Rights of the data subject
1. Right of access according to Art. 15 GDPR
2. Right to rectification according to Art. 16 GDPR
3. Right to erasure according to Art. 17 GDPR
4. Right to restriction of processing according to Art. 18 GDPR
5. Right to instruction according to Art. 19 GDPR
6. Right to data portability according to Art. 20 GDPR
7. Right to objection according to Art. 21 GDPR
8. Automated decision in in individual cases incl. profiling by Art. 22 GDPR
9. Right to lodge a complaint with a supervisory authority according to Art. 77 GDPR
10. Right to an effective judicial remedy according to Art. 79 GDPR
I: General information
CONTACT DATA OF THE RESPONSIBLE PERSON
Name: kadapro GmbH
Str.: Lerchenweg 3
Place of residence, postal code: Monheim am Rhein, 40789
Tel.: +49 2173 9930310
E-Mail: info(at)kedapro.com
II. Information about the collection of personal data
1. VISIT OF THE WEBSITE
A) PURPOSE OF DATA PROCESSING
Every time a user accesses a page of our offer and every time a file is stored on the website, access data about this process is stored in a log file. Each record consists of:
(1) the page from which the file was requested,
(2) the name of the file,
(3) the date and time of the request,
(4) the amount of data transferred,
(5) the access status (file transfer, file not found etc.),
(6) a description of the type of operating system and web browser used,
(7) Referrer URL,
(8) host name of the accessing computer,
(9) the client IP address.
We use this data to operate our website, in particular to track website utilization, website malfunction and to make adjustments or improvements. The client IP address is used for the purpose of transmitting the requested data; it will be anonymised after deletion of the technical requirement by deleting the last number pad (Ipv4) or the last octet (Ipv6).
The personal data will be passed on to processors to the extent necessary for the purposes of operating the website.
B) DURATION OF STORAGE
The data is stored with each access of a user on one side of our offer and with each call of our Internet presence and is deleted, as soon as it is no longer necessary for the purpose of the survey, which is the case when the visitor leaves our website.
C) LEGAL BASIS
The temporary storage of the aforementioned data is based on the legal basis of Art. 6 para. 1 lit. f EU General Data Protection Regulation ("GDPR"). The legitimate interest lies in the provision of our website.
2. COOKIES
A) PURPOSE OF DATA PROCESSING
In order to make it technically possible to visit our website, we transfer so-called cookies to the end device of the data subject. Cookies are small text files that can be used to identify the person's device, usually by collecting the name of the domain from which the cookie data was sent, information about the age of the cookie and an alphanumeric identifier can be recorded. By storing the cookie on the device used without any intervention in the operating system, it is recognized again and allows us to make any preadjustment immediately available. We use this information to tailor our website and services to your needs and to speed up the visit to our website.
B) DURATION OF STORAGE
The storage duration of the various cookies varies, but is at most two years. They are stored on your local device, not on our server, so the actual erase time depends on how your browser software is configured. Please refer to the operating instructions of your browser software for information on how to delete cookies that have been set by us or whether they can be deleted automatically.
C) LEGAL BASIS
The storage of the aforementioned data is based on the legal basis Art. 6 para. 1 lit. f GDPR. The legitimate interest in setting cookies is, on the one hand, to be able to optimize the quality of our website by means of an analysis and, on the other hand, to make it possible to visit our website; In particular, some features on our website are not usable without cookies, otherwise the user and his settings would not be recognized when switching pages, language settings were lost and searches could not be performed
D) PREVENTION OPTION
The data subject may block the use of cookies in the terminal or delete them after use. Under certain circumstances, however, individual functions of our offer can not be used. How cookies can be blocked and cookies that have already been saved can be deleted can be found in the instructions of the browser software.
3. EXECUTION OF THE CONTRACT
A) PURPOSE OF DATA PROCESSING
Name, address, bank details, e-mail address, telephone number, client IP address at the time of placing a customer order are collected, stored and processed solely for the purpose of establishing or executing the contract, which in particular includes invoicing and processing the contract.
Personal data will only be passed on to third parties if this is necessary for the purpose of executing the contract, e.g. when using a payment service company.
B) DURATION OF STORAGE
The data shall be deleted as soon as they are no longer necessary for the purposes for which they were collected or otherwise processed. This period is five years for personal data subject to § 147 Tax Code (AO) and ten years for personal data subject to § 257 Commercial Code (HGB). The periods begin at the end of the calendar year in which the data was collected.
C) LEGAL BASIS
The aforementioned data is stored on the legal basis of Art. 6 para. 1 lit. b GDPR in order to fulfil the obligations arising from the contract and to provide the services required for the execution of the contract.
4. CONTACT FORM, E-MAIL, OR TELEPHONE CONTACT
A) PURPOSE OF DATA PROCESSING
On the website we provide a contact form. The data subject can contact us electronically and we can process the request. The following data will be collected and stored: name, address, IP address, e-mail address, telephone number, date and time of the request and the description of the request, possibly contract data, if the request is made in the context of contracting or processing.
A user can contact us via email or phone. We store the data transmitted to us and provided by the data subject for processing the request. This data is the name, e-mail address, telephone number, date and time of the request and the description of the request, if applicable, contract data if the request is made in the context of contracting or processing. The data will not be passed on to third parties. They are used to process the contact request of the data subject.
B) DURATION OF STORAGE
Once the data is no longer necessary to achieve its purpose, it will be deleted, which is the case when the conversation is finalized and the facts clarified and there are no contractual or tax retention periods. This period is five years for personal data subject to § 147 Tax Code (AO) and ten years for personal data subject to § 257 Commercial Code (HGB). The deadlines start at the end of the calendar year in which the data was collected.
C) LEGAL BASIS
The storage of the aforementioned data is based on the legal basis Art. 6 para. 1 lit. b GDPR in the context of contract initiation or fulfillment or according to Art. 6 para. 1 lit. f GDPR. The legitimate interest of the responsible person is to be able to process the contact request and to be able to prevent abuse of the contact request.
III. Rights of the data subject
If "personal data" are processed by the user on our website, then the data subject has the following rights towards the person responsible in accordance with the GDPR.
1. RIGHT OF ACCESS BY THE DATA SUBJECT ACCORDING TO ART:15 GDPR
The data subject has the right to the following information:
a) the processing purposes;
b) the categories of personal data being processed;
(c) the recipients or categories of recipients to whom the personal data have been or are being disclosed, in particular in the case of beneficiaries in third countries or international organizations;(d) if possible, the planned duration for which the personal data will be stored or, if that is not possible, the criteria for determining that duration;
(e) the existence of a right to rectification or erasure of personal data concerning them, or of limitation of processing by the controller or of a right to object to such processing;
f) the existence of a right of appeal to a supervisory authority;
g) if the personal data are not collected from the data subject, all available information on the source of the data;
(h) the existence of automated decision-making including profiling under Article 22 (1) and (4) GDPR and, at least in those cases, meaningful information about the logic involved and the scope and intended impact of such processing on the data subject.
(i) where personal data are transmitted to a third country or to an international organization, the data subject shall have the right to be informed of the appropriate safeguards in accordance with Article 46 of the GDPR in connection with the transfer.
We provide the data subject with a copy of the personal data that is the subject of the processing. For all other copies requested by the data subject, the responsible person may request an appropriate fee based on the administrative costs.
2. RIGHT TO RECTIFICATION ACCORDING TO ART. 16 GDPR
The data subject has the right to demand from the responsible person without delay the correction of incorrect personal data concerning him. In consideration of the purposes of the processing, the data subject has the right to request the completion of incomplete personal data, including by means of a supplementary statement.
3. RIGHT TO ERASURE (RIGHT TO BE FORGOTTEN) PURSUANT TO ART. 17 GDPR
The data subject has the right to demand that the data subject's personal data be deleted immediately and the data controller is obliged to delete personal data immediately if one of the following reasons applies:
(a) the personal data are no longer necessary for the purposes for which they were collected or otherwise processed;
b) the data subject revokes their consent, to which the processing pursuant to Art. 6 para. 1 lit. a or Art. 9 para. 2 lit. a GDPR and there is no other legal basis for the processing;
c) the data subject submits an objection to the processing in accordance with Art. 21 (1) GDPR and there are no legitimate reasons for the processing, or the data subject objects to the processing pursuant to Art. 21 (2) GDPR;
d) the personal data were processed unlawfully;
(e) the deletion of personal data is necessary to fulfill a legal obligation under Union or national law to which the controller is subject;
f) the personal data were collected in relation to information society services offered pursuant to Art. 8 (1) GDPR.
4. RIGHT TO RESTRICTION OF PROCESSING UNDER ART. 18 GDPR
The data subject has the right to require the controller to restrict the processing if one of the following conditions is met:
(a) the accuracy of the personal data is disputed by the data subject for a period allowing the controller to verify the accuracy of the personal data;
b) the processing is unlawful and the data subject refuses to delete the personal data and instead requests the restriction of the use of personal data;
(c) the controller no longer needs personal data for processing purposes, but the data subject requires them to assert, pursue or defend legal claims; or
d) the data subject has lodged an objection to the processing pursuant to Art. 21 (1) GDPR, as long as it is not certain that the responsible reasons of the responsible person prevail over those of the data subject.
5. RIGHT TO INSTRUCTION ART. 19 GDPR
If the data subject has asserted a correction pursuant to Art. 16 DSGVO, a deletion of Art. 17 (1) GDPR or a restriction of processing pursuant to Art. 18 GDPR with respect to the responsible person, and the person in charge has all the recipients against whom the personal data of the data subject, about the request of the data subject informed (as far as this was not impossible or associated with disproportionate effort), the data subject has the right to be informed by the responsible person about the recipient.
6. RIGHT TO DATA PORTABILITY ART. 20 GDPR
The data subject has the right to receive personal data relating to him, provided to a responsible person, in a structured, common and machine-readable format, and has the right to transfer this data to another person without hindrance, provided that
a) processing on consent in accordance with Art. 6 para. 1 lit. a or Art. 9 para. 2 lit. a or on a contract pursuant to Art. 6 para. 1 lit. b GDPR is based and
b) the processing is done by automated means.
Rights and freedoms of other persons must not be affected. When exercising the right to data portability in accordance with paragraph 1, the data subject has the right to obtain that the personal data are transmitted directly by us to another responsible person, as far as this is technically feasible
The exercise of the right to data portability is without prejudice to the right of cancellation under Art. 17 GDPR. The right to data portability does not apply to any processing necessary for the performance of a task in the public interest or in the exercise of official authority delegated to the controller.
7. RIGHT TO OBJECTION ART. 21 GDPR
The data subject has the right, at any time for reasons arising from his particular situation, against the processing of personal data pertaining to him which, on the basis of Article 6 (1) lit. e or f GDPR takes an objection; this also applies to profiling based on these provisions.
We no longer process the personal data unless we can demonstrate compelling legitimate grounds for processing that outweigh the interests, rights and freedoms of the data subject, or the processing is for the purpose of asserting, exercising or
Defense of legal claims.
If personal data are processed in order to operate direct mail, the data subject has the right at any time to object to the processing of personal data concerning him for the purpose of such advertising; this also applies to profiling insofar as it is associated with such direct mail. If the data subject objects to processing for direct marketing purposes, the personal data will no longer be processed for these purposes. A consent given by the data subject can be revoked at any time. However, the collection and processing up to that date remains legal.
8. AUTOMATED DECISIONS IN INDIVIDUAL CASES INCL. PROFILING BY ART. 22GDPR
The data subject has the right not to be subjected to a decision based solely on automated processing, including profiling, which has a legal effect on him or similarly significantly adversely affects him.
This does not apply if the decision
a) is required for the conclusion or performance of a contract between the data subject and us,
(b) is permitted by Union or Member State legislation to which we are subject, and where such legislation contains appropriate measures to safeguard the rights and freedoms and legitimate interests of the data subject, or
c) with the express consent of the data subject.
These decisions may not be based on special categories of personal data pursuant to Art. 9 (1) GDPR, unless Article 9 (2) lit. a or g GDPR applies and appropriate measures have been taken to protect the rights and freedoms as well as the legitimate interests of the data subject.
In the cases referred to in paragraphs (a) and (c), we shall take reasonable steps to safeguard the rights and freedoms and legitimate interests of the data subject, including at least the right to obtain the intervention of a person on our side, the statement of one's own position and on contestation of the decision.
8. RIGHT TO REVOKE CONSENT
If a processing is based on the consent of the data subject, he or she may revoke this consent at any time. The revocation of consent shall not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.
9. RIGHT TO LODGE A COMPLAINT WITH A SUPERVISORY AUTHORITY UNDER ART. 77 GDPR
Each data subject is without prejudice to any other administrative or judicial
Appeal the right to complain to a supervisory authority, in particular in the Member State of its residence, place of work or place of alleged infringement, if the person concerned considers that the processing of personal data concerning him / her violates this Regulation.
The supervisory authority to which the complaint has been submitted shall inform the complainant of the status and results of the complaint, including the possibility of a judicial remedy pursuant to Article 78 of the GDPR.
10. RIGHT TO AN EFFECTIVE JUDICIAL REMEDY UNDER ART. 79 GDPR
Without prejudice to any available administrative or extrajudicial remedy, including the right to complain to a supervisory authority under Article 77 GDPR, any data subject shall have the right to an effective judicial remedy, if he considers that the rights conferred on him by that regulation are not in conformity infringement of the processing of his personal data.
Claims against us against a processor are brought before the courts of the Member State in which we or the processor have a place of business. Alternatively, such actions may be brought before the courts of the Member State in which the data subject is resident unless we or the processor is an authority of a Member State acting in the exercise of its sovereign powers.