Privacy policy

Introduction

With this statement we inform you about the nature and extent, as well as the purpose and legal basis of the processing of personal data on this website and on any online presence in social networks. In addition, we communicate here our information and notification obligations for the use of personal data in our house.

Name and address of the responsible person

The person responsible within the meaning of the General Data Protection Regulation (GDPR) and other national data protection laws of the member states as well as other data protection regulations is the company named in the imprint.

Contact the data protection officer

We are not obligated to order a data protection officer. If you have any questions about privacy, please contact us at: info@pk-improvements.com

Understanding the processing of personal data

We only collect and process the personal data of our users to the extent necessary for the provision of a functional website or the provision of services by our company. The processing takes place only with their consent, or if it permits or commits a legal regulation.

The security of your personal data is a high priority for us. We therefore protect your data through technical and organizational measures to prevent misuse of the use. We regularly review the measures taken and adapt these to current technical conditions. In addition, we commit all employees to confidentiality in accordance with §28 GDPR.

Purposes and legal basis of processing, transfer to third parties and abroad

We process your data for the following purposes:

  • Fulfillment of new or existing contractual relationships or for the implementation of pre-contractual measures, e.g. the creation of offers
  • Sending marketing information
  • Editing requests, e.g. as part of our core activity or for letters of application
  • Provision of telemedia, e.g. our website or e-mail

In doing so, we process the data on the basis of the legal basis of Art. 6 para. 1 GDPR:

  • 6 para. 1 lit. a GDPR: processing operations based on their consent
  • 6 para. 1 lit. b GDPR: processing operations to fulfill a contract or precontractual measures, e.g. a purchase or service contract or the solicitation of an offer
  • 6 para. 1 lit. c GDPR: processing operations to which we are legally obliged, e.g. the storage for tax reasons
  • 6 para. 1 lit. GDPR: processing operations that we carry out based on our legitimate interests, e.g. the disclosure of their data to postal service providers for the purpose of sending mail or to a tax consultant. This includes the storage of website usage information for the purpose of optimizing our website.

The disclosure of their data to third parties is based on the above permits and occurs only in the context of a contract processing contract or if other confidentiality obligations exist, this includes professional secret carriers or shipping service providers. If a transfer to third countries outside the European Economic Area takes place, there is a corresponding adequacy decision in accordance with Article 45 GDPR of the respective third country (for example for Switzerland) or corresponding guarantees of the recipients under Art. 46 GDPR, e.g. a certification under the Privacy Shield for companies in the US.

Duration of storage, deletion of personal data

Personal data will only be processed and stored for the period required to fulfill the processing purposes. After fulfillment of the purpose, your data will be deleted or blocked by us, as long as we are no longer subject to a statutory storage obligation.

Collection of access data and log files

We collect access data (log files) on every server access on the basis of our legitimate interests in accordance with Art. 6 para. 1 lit. f. GDPR. This includes the name of the retrieved web page, the date and time of the retrieval, transferred file and data volume, message about the success or failure of the retrieval, browser type and browser version, the operating system, referrer URL (the previously visited page) and their IP address.

Log files are collected for security purposes (for example, to investigate crimes) and stored for a period of 7 days and then deleted. If data are still required for evidence, they will be exempted from the cancellation until the final clarification of the incident.

To ensure a fast and stable connection, we have outsourced the hosting to an external service provider (netcup GmbH, Daimlerstraße 25, 76185 Karlsruhe, Germany). This process the above-mentioned log data according to our specifications. The disclosure is based on our legitimate interest in accordance with Art. 6 para. 1 lit. f GDPR i.V.m. Art. 28 GDPR.

Use of cookies and tracking information

We do not use cookies.

Contacting

When making contact (eg via contact form, e-mail, telephone or via social networks), the personal data of the user for processing the contact request according to. Art. 6 para. 1 lit. b GDPR, i. to fulfill a contract or precontractual measures. If necessary, your data will be transferred to a customer management program (CRM system). Please note that we are committed to e-mail archiving according to the GoBD; a complete deletion of e-mails sent to us (from our archive system) is therefore not possible.

Updating the privacy policy

We update this privacy policy from time to time with respect to new legal or jurisprudence laws or changed processing in our company. We therefore reserve the right to make changes.

Reference to the persons concerned

If we process personal data of you, then you are concerned in terms of the GDPR and they have the following rights to the responsible body:

Right to information and data portability

You have the right to request information about the personal data stored about you. You have the right to receive the requested data in a common, machine-readable format.

Right to rectification

You have the right to ask the person responsible for the correction of incorrect personal data concerning you. Taking into account the purposes of processing, they have the right to ask for the completion of incomplete personal data.

Right to restriction

Under the following conditions they may request the restriction of the processing of personal data concerning them:

  1. The accuracy of the personal data is contested by the data subject for a period of time which enables the person responsible to check the accuracy of the personal data.
  2. The processing is unlawful and the data subject refuses to delete the personal data and instead requests the restriction of the use of the personal data.
  3. The controller no longer needs the personal data for the purposes of processing, but the data subject requires them to assert, exercise or defend legal claims, or if
  4. the data subject objects to the processing, as long as it is not certain that the legitimate reasons of the person responsible outweigh those of the data subject.

If the processing has been restricted, these personal data may be stored only with the consent of the data subject or for the purpose of asserting, exercising or defending legal claims or protecting the rights of another natural or legal person or for reasons of significant public interest Union or a Member State. We will inform you before the restriction is lifted.

Right to delete

They may request the deletion of the processing of personal data concerning them under the following conditions:

  1. The personal data are no longer necessary for the purposes for which they were collected or otherwise processed.
  2. The data subject revokes their consent and there is no other legal basis for the processing.
  3. The data subject objects to the processing and there are no legitimate reasons for the processing.
  4. The personal data were processed unlawfully.
  5. The deletion of personal data is required to fulfill a legal obligation under Union or national law to which the controller is subject.
  6. The personal data has been collected in relation to the use of web services.

Right to revoke a declaration of consent

You have the right to revoke your consent to the processing of personal data at any time. The revocation of consent does not affect the legality of the processing carried out on the basis of the consent until the revocation.

Right to information

If you have the right to correct, delete or restrict the processing, we are obliged to notify all recipients to whom this information has been transmitted about the correction, deletion or restriction of the data, unless this is a disproportionate effort or impossible.

Right of revocation

You have the right, at any time, to object to the processing of your personal data for reasons arising from your particular situation; this also applies to profiling based on these provisions. The controller no longer processes the personal data unless he can demonstrate compelling legitimate grounds for processing that outweigh the interests, rights and freedoms of the data subject, or the processing is for the purpose of enforcing, pursuing or defending legal claims.

If personal data are processed in order to operate direct mail, they have the right to object at any time to the processing of personal data concerning them for the purpose of such advertising; this also applies to profiling insofar as it is associated with such direct mail.

Automated decision on an individual basis including profiling

You have the right not to be subjected to a decision based solely on automated processing - including profiling - that will have legal effect or similarly affect you in a similar manner. This does not apply if the decision

  1. is required for the conclusion or performance of a contract between you and the controller,
  2. is permitted by Union or Member State legislation to which the controller is subject and where such legislation contains appropriate measures to safeguard your rights and freedoms and legitimate interests, or
  3. with your express consent.

Decisions pursuant to paragraph 2 may not be based on special categories of personal data pursuant to Art. 9 (1) GDPR Paragraph 1, unless Art. 9 (2) lit. a or g GDPR applies and appropriate measures have been taken to protect the rights and freedoms as well as the legitimate interests of the data subject.

With regard to the cases referred to in (1) and (3), the person responsible shall take appropriate measures to uphold the rights and freedoms and their legitimate interests, including at least the right to obtain the intervention of a person by the controller, to express his / her own position and heard on challenge of the decision.

Right to complain to a supervisory authority

You have the right to lodge a complaint with a supervisory authority, without prejudice to any other administrative or judicial remedy, in particular in the Member State of its habitual residence, employment or the place of alleged infringement, if you consider that the processing of the personal data concerning you is against the GDPR violates.

The supervisory authority to which the complaint has been submitted shall inform the complainant of the status and results of the complaint, including the possibility of a judicial remedy pursuant to Article 78 of the GDPR.

Non-provision of personal data

If you do not provide us with personal data that we need for contractual purposes, this non-provisioning generally means that the contract can not be closed. In individual cases, we can inform you whether a provision is legally binding or contractually required and what would be the consequences of non-provision in individual cases.


Attention: This Privacy Policy has been translated by the service of Google Translate and is believed to contain minimal incorrect translations. The German version of the privacy policy is valid.