Data protection
I. General information
1. contact details of the responsible person
Name: Belec Spektrometrie Opto-Elektronik GmbH
Str.: Hamburger Straße 12
Place, postal code: 49124 Georgsmarienhütte
Phone.: 05401 / 8709-0
Fax.: 05401 / 8709-28
E-Mail: info@belec.de
Website: www.belec.de
Contact data protection officer of the person responsible:
E-Mail: datenschutz@i-like-no-spam.belec.de
Tel.: 05401 / 8709-0
II. concrete information on the collection of personal data
1. visit of the website
a) Purpose of data processing
Every time a user accesses a page of our offer and every time a file stored on the website is called up, access data about this process is stored in a log file. Each data record consists of:
(1) the page from which the file was requested,
(2) the name of the file
(3) the date and time of the request,
(4) the amount of data transferred,
(5) the access status (file transferred, file not found, etc.),
(6) a description of the type of operating system and web browser used,
(7) referrer URL,
(8) host name of the accessing computer,
(9) the client IP address.
We use this data to operate our website, in particular to determine the utilization of the website as well as malfunctions of the website and to make adjustments or improvements. The client IP address is used for the purpose of transmitting the requested data; it is anonymized after the technical requirement no longer applies by deleting the last block of digits (Ipv4) or the last octet (Ipv6).
b) Duration of storage
The data is stored each time a user accesses a page of our offer and each time our website is called up and is deleted as soon as it is no longer required for the purpose of collection, which is the case no later than three months after the website visit.
c) Legal basis
The temporary storage of the aforementioned data is based on the legal basis of Art. 6 (1) f of the EU General Data Protection Regulation (hereinafter "DSGVO"). The legitimate interest lies in the provision of our website.
d) Possibility of objection and elimination
The data subject can object to the processing.
2. cookies
a) Purpose of data processing
In order to technically enable the visit to our website and the download process, we transfer so-called cookies to the end device of the data subject. Cookies are small text files that can be used to identify the end device of the person concerned by usually recording the name of the domain from which the cookie data was sent, information about the age of the cookie and an alphanumeric identifier. By storing the cookie on the terminal device used - without interfering with the operating system - it is recognized again and allows us to make any preferences immediately available. We use this information to adapt our website and offered services to your requirements and to accelerate the call of our website.
b) Duration of storage
The storage period of the various cookies varies, but is no longer than two years. They are stored on your local terminal device, not on our server, which is why the actual deletion period depends on how your browser software is configured. Please refer to the operating instructions of your browser software to find out how you can delete cookies set by us on an occasion-related or automatic basis.
c) Legal basis
The storage of the aforementioned data takes place on the legal basis of Art. 6 para. 1 lit. f DSGVO. The legitimate interest for setting cookies is, on the one hand, to be able to optimize the quality of our website through an analysis and, on the other hand, to enable the visit of our website; in particular, some functions on our website cannot be used without cookies, as the user and his already made settings would otherwise not be recognized when changing pages, language settings would be lost and searches could not be executed. Furthermore, the storage takes place on the legal basis of Art. 6 para. 1 lit. b DSGVO for the implementation of the contract.
d) Possibility of objection and elimination
The data subject can block the use of cookies in the end device used or delete them after use. However, individual functions of our offer may then not be usable. How to block cookies and delete already stored cookies can be found in the instructions of the browser software.
3. contact form, e-mail, telephone contact, personal and trade fair contacts.
a) Purpose of data processing
We provide a contact form on the website. The data subject can use it to contact us electronically and we can process the request. The following data is collected and stored: Name, company, postal code and city, e-mail. Optionally also street and telephone. A user can contact us by e-mail or telephone. Furthermore, also during personal contacts, e.g. by handing over business cards at a trade fair. We store the data thus transmitted to us and provided by the person concerned in order to process the request. These data are name, company, postal code and city, e-mail, telephone number if applicable, date and time of the inquiry and the description of the request, contract data if applicable, if the inquiry is made in the context of a contract initiation or processing. The data will not be passed on to third parties. They are used for processing the contact request of the person concerned.
b) Duration of storage
As soon as the data is no longer necessary to achieve the purpose, it is deleted, which is the case when the conversation has been conclusively settled and the facts have been clarified and there are no contractual or tax retention periods to the contrary. This period is five years for personal data subject to § 147 AO and ten years for personal data subject to § 257 HGB. The periods begin with the end of the calendar year in which the data was collected.
c) Legal basis
The storage of the aforementioned data takes place on the legal basis of Art. 6 para. 1 lit. b DSGVO in the context of a contract initiation or fulfillment or according to Art. 6 para. 1 lit. f DSGVO. The legitimate interest of the responsible party is to be able to process the contact request and to prevent misuse of the contact request. As a rule, provided that your own interests and fundamental rights, and in particular our legitimate interest in the use of supplier, customer and website user data to carry out and develop our business activities with you and other persons are not affected.
d) Possibility of objection and elimination
The data subject has the option to object to the storage at any time. The data stored for the transaction will then be deleted. If a contract has been concluded, the above statements on the keyword "Conclusion of contract" apply.
4. newsletter/product information
a) Purpose of data processing
It is possible to register for a newsletter. If the data subject registers for the newsletter, the data stored there by the data subject during registration from the input mask are transmitted to us. These are the specified e-mail address, name, IP address, time and date of registration. The collected data is necessary in order to be able to send the newsletter.
b) Duration of storage
The data is deleted as soon as the data is no longer required to achieve the purpose and the person concerned has unsubscribed from the newsletter. Hereafter, the data is stored for ten years from the last newsletter dispatch for purposes of proof in the event of queries regarding existing consents, taking into account the statute of limitations.
c) Legal basis
The storage of the aforementioned data takes place on the legal basis of Art. 6 para. 1 lit. a DSGVO after prior consent in the context of registration or according to Art. 6 para. 1 lit. f DSGVO. The legitimate interest of the responsible party is to inform you about our products, services and news in the field of spectral analysis. A revocation of consent, which is possible at any time, does not affect the lawfulness of the processing of the personal data carried out on the basis of the consent until the revocation.
d) Possibility of objection and removal
The use of the data to receive the newsletter can be objected to at any time with effect for the future by unsubscribing from the newsletter, without incurring any costs other than the transmission costs according to the basic rates. This can be done by declaration to us. If the data subject wishes to unsubscribe from the newsletter, for example, he or she will find a correspondingly marked link in each newsletter, which he or she only has to click on.
III. Rights of the data subject
If personal data is processed by the user on our website, the data subject (data subject) has the following rights against the controller according to the GDPR.
1. right to information according to art. 15 DSGVO
The data subject has the right to the following information:
(a) the purposes of processing;
b) the categories of personal data processed;
c) the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular in the case of recipients in third countries or international organizations;
d) if possible, the planned duration for which the personal data will be stored or, if this is not possible, the criteria for determining this duration;
(e) the existence of a right to obtain the rectification or erasure of personal data concerning him or her, or the restriction of processing by the controller, or a right to object to such processing;
(f) the existence of a right of appeal to a supervisory authority;
g) if the personal data are not collected from the data subject, any available information on the origin of the data;
(h) the existence of automated decision-making, including profiling, pursuant to Article 22(1) and (4) of the GDPR and, at least in such cases, meaningful information about the logic involved and the scope and intended effects of such processing for the data subject.
i) if personal data are transferred to a third country or to an international organization, the data subject shall have the right to be informed about the appropriate safeguards pursuant to Art. 46 GDPR in connection with the transfer.
We will provide the data subject with a copy of the personal data that is the subject of the processing. For any further copies requested by the data subject, the controller may charge a reasonable fee based on the administrative costs.
2. right to rectification according to Art. 16 GDPR.
The data subject has the right to obtain from the controller the rectification without undue delay of inaccurate personal data concerning him or her. Taking into account the purposes of the processing, the data subject has the right to request the completion of incomplete personal data, including by means of a supplementary declaration.
3. right to erasure according to Art. 17 DSGVO.
The data subject has the right to obtain from the controller the erasure without delay of personal data concerning him, and the controller is obliged to erase personal data without delay, if one of the following reasons applies:
(a) the personal data are no longer necessary for the purposes for which they were collected or otherwise processed;
(b) the data subject revokes the consent on which the processing was based pursuant to Article 6(1)(a) or Article 9(2)(a) of the GDPR and there is no other legal basis for the processing;
c) the data subject objects to the processing pursuant to Art. 21 (1) DSGVO and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing pursuant to Art. 21 (2) DSGVO;
d) the personal data have been processed unlawfully;
e) erasure of the personal data is necessary for compliance with a legal obligation under Union or Member State law to which the controller is subject;
(f) the personal data have been collected in relation to information society services offered pursuant to Article 8(1) of the GDPR.
4. right to restriction of processing according to Art. 18 DSGVO
The data subject has the right to obtain from the controller the restriction of processing where one of the following conditions is met:
(a) the accuracy of the personal data is contested by the data subject for a period enabling the controller to verify the accuracy of the personal data,
b) the processing is unlawful and the data subject objects to the erasure of the personal data and instead requests the restriction of the use of the personal data;
(c) the controller no longer needs the personal data for the purposes of the processing, but the data subject needs it for the establishment, exercise or defense of legal claims; or
d) the data subject has objected to the processing pursuant to Article 21(1) of the GDPR, as long as it has not yet been determined whether the legitimate grounds of the controller override those of the data subject.
5. right to information pursuant to Art. 19 DSGVO.
If the data subject has asserted a rectification pursuant to Art. 16 GDPR, an erasure Art. 17(1) GDPR or a restriction of processing pursuant to Art. 18 GDPR against the controller with regard to his or her personal data, and if the controller has informed all recipients to whom the data subject's personal data have been disclosed about the data subject's request (unless this was impossible or involved disproportionate effort), the data subject has the right to be informed by the controller about the recipients.
6. right to data portability Art. 20 DSGVO
The data subject has the right to receive personal data concerning him or her that he or she has provided to a controller in a structured, commonly used and machine-readable format, and he or she has the right to transfer this data to another controller without hindrance from us, provided that
a) the processing is based on consent pursuant to Art. 6(1)(a) or Art. 9(2)(a) or on a contract pursuant to Art. 6(1)(b) DSGVO and
(b) the processing is carried out with the aid of automated procedures.
The rights and freedoms of other persons must not be impaired thereby.
When exercising the right to data portability pursuant to paragraph 1, the data subject shall have the right to obtain that the personal data be transferred directly from us to another controller, where technically feasible.
The exercise of the right to data portability does not affect the right to erasure pursuant to Art. 17 DSGVO. The right to data portability does not apply to processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
7. right of objection according to Art. 21 DSGVO
The data subject has the right to object at any time, on grounds relating to his or her particular situation, to the processing of personal data concerning him or her which is carried out on the basis of Article 6(1)(e) or (f) DSGVO; this also applies to profiling based on these provisions.
We shall no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or for the establishment, exercise or defence of legal claims.
If personal data are processed for direct marketing purposes, the data subject shall have the right to object at any time to processing of personal data concerning him or her for such marketing; this also applies to profiling insofar as it is related to such direct marketing. If the data subject objects to the processing for direct marketing purposes, the personal data will no longer be processed for these purposes.
Consent given by the data subject may be revoked at any time. However, the collection and processing carried out up to this point shall remain lawful as a result.
8. automated decisions in individual cases incl. profiling according to Art. 22 DSGVO.
The data subject has the right not to be subject to a decision based solely on automated processing - including profiling - which produces legal effects concerning him or her or similarly significantly affects him or her. This shall not apply if the decision
a) is necessary for the conclusion or performance of a contract between the data subject and us,
b) is permissible on the basis of legal provisions of the Union or Member States to which we are subject and these legal provisions contain appropriate measures to safeguard the rights and freedoms as well as the legitimate interests of the data subject, or
(c) is made with the explicit consent of the data subject.
These decisions must not be based on special categories of personal data pursuant to Article 9(1) of the GDPR, unless Article 9(2)(a) or (g) of the GDPR applies and appropriate measures have been taken to protect the rights and freedoms as well as the legitimate interests of the data subject.
In the cases mentioned under (a) and (c), we take reasonable steps to safeguard the rights and freedoms as well as the legitimate interests of the data subject, which include at least the right to obtain the involvement of a person on our part, to express his or her point of view and contest the decision.
9. right to lodge a complaint with a supervisory authority pursuant to Art. 77 GDPR.
Without prejudice to any other administrative or judicial remedy, every data subject shall have the right to lodge a complaint with a supervisory authority, in particular in the Member State of his or her residence, place of work or the place of the alleged infringement, if the data subject considers that the processing of personal data relating to him or her infringes this Regulation.
The supervisory authority to which the complaint has been lodged shall inform the complainant of the status and outcome of the complaint, including the possibility of a judicial remedy under Article 78 GDPR. The competent supervisory authority is the State Commissioner for Data Protection of Lower Saxony, Prinzenstraße 5, 30159 Hannover.
10. right to an effective judicial remedy pursuant to Art. 79 GDPR
Without prejudice to any available administrative or non-judicial remedy, including the right to lodge a complaint with a supervisory authority pursuant to Article 77 GDPR, any data subject shall have the right to an effective judicial remedy if he or she considers that his or her rights under this Regulation have been infringed as a result of the processing of his or her personal data not in compliance with this Regulation.
For actions against us or against a processor, the courts of the Member State in which we or processors have an establishment shall have jurisdiction. Alternatively, such actions may also be brought before the courts of the Member State where the data subject resides, unless we or the processor is an authority of a Member State acting in the exercise of its official powers.
