Data protection

Data protection policy (mobile app) of KNIPEX-Werk C. Gustav Putsch KG in accordance with the requirements of the GDPR

1. Name and address of the controller

The controller within the meaning of the General Data Protection Regulation and other national data protection laws of the member states as well as other data protection regulations is:  
 
KNIPEX-Werk 
C. Gustav Putsch KG 
42337 Wuppertal
Oberkamper Str. 13 
42349 Wuppertal 
Tel.:     02 02 / 47 94 - 0 
Fax:     02 02 / 47 50 58 
E-Mail:  [email protected] 
Web:   https://www.knipex.de

2. Name and address of the data protection officer

The data protection officer of the controller is as follows:
 
Arndt Halbach
GINDAT GmbH
Wetterauer Str. 6
42897 Remscheid
Telefon: (02191) 909 430
Telefax: (02191) 909 50 430
E-Mail: [email protected]

3. General remarks on data processing

1.   Scope of processing of personal data

We process the personal data of our users in principle only to the extent necessary to provide a fully functioning application and our content and services. The personal data of our users is processed regularly only after having obtained their consent. An exception to this is cases in which it is not possible to obtain consent for real reasons beforehand or processing of the data is permitted by law. 

2.   Legal basis for the processing of personal data 

Where we obtain consent of the data subject for the processing of personal data, Article 6 (1) (a) of the General Data Protection Regulation (GDPR) serves as the legal basis. Art. 6 (1) lit. b GDPR serves as the legal foundation for the processing of personal data which is necessary for the performance of a contract to which the data subject is party. This also applies to processing which is necessary prior to entering into a contract. Where the processing of personal data is necessary for compliance with a legal obligation to which our company is subject, Art. 6 (1) lit. c GDPR serves as legal foundation. Art. 6 (1) lit. b GDPR serves as the legal foundation for the processing of personal data which is necessary for the performance of a contract to which the data subject is party. If processing is necessary to safeguard a legitimate interest of our company or of a third party and if the interests, fundamental rights and freedoms of the data subject do not override the first mentioned interest, Article 6 (1) (f) GDPR serves as legal basis for the processing. 

 

3.  Data erasure and period of storage

The personal data of the data subject are erased or blocked as soon as the purpose for storage no longer exists. The personal data may also be stored if this has been provided for by European or national legislators in regulations under Union law, acts or other provisions to which the controller is subject. Data are also blocked or erased if one of the storage periods prescribed in the above mentioned laws expires unless it is necessary to continue to store the data for a contractual arrangement or performance of contract. 

4. Registration

1. Description and scope of data processing

Our registration service enables users of our application to learn more about our products company, to save selected products in wishlists and to provide their contact information and other demographic information. The content viewed by you and the products saved to the respective wishlist are assigned to your user account.
The following data are collected in the event of registration:

• •    Email address
  •    First and last name 
  •    User name
  •    Company
  •    Industry

This information is first stored in the application's content management system and then processed on the servers of our software partner HubSpot. The service provider is HubSpot European Headquarters, Ground Floor, Two Dockland Central, Guild Street, Dublin 1, Ireland, Telephone: +353 1 5187500 (hereinafter called "Hubspot"). Your data will also be processed within the Hubspot Group outside of the European Union. An order processing contract has been concluded with the service provider in accordance with the requirements of Article 28 GDPR. This also includes the standard contractual clauses previously approved by the European Commission for safeguarding the level of data protection in the third country.

2. Legal basis for data processing

The legal basis is your consent in accordance with Article 6 (1) (a) GDPR. If you no longer wish to use this service, you are free to delete your user account at any time in your user profile or by simply notifying us.

3. Period of storage

Your user account will remain until you delete it.

6. Analysis by Google Analytics and Google Firebase

1.    Scope of processing of personal data

This application uses Google Analytics, a web analysis service provided by Google Ireland Ltd. ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics uses cookies. These are text files that are saved on your device and that make it possible to analyse how you use the application. The information generated by the cookie about your use of this application is usually transmitted to a Google server in the USA and stored there.
If IP anonymisation is activated, Google will truncate your IP address in advance within the member states of the European Union or any other states party to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to Google's servers in the USA and truncated there. We would like to point out that as part of this application, Google Analytics has been expanded to include the code "anonymizelp" in order to ensure that the IP address is anonymised.
On behalf of the operator of this application, Google will use this information to analyse your use of the application, to compile reports on application activity as well as provide further services associated with the use of the application and internet to the operator of the website. The IP address transferred by your device as part of Google Analytics will not be merged with other Google data.
You can find more detailed information on the terms of use and data protection for Google services at https://policies.google.com/privacy?hl=en&gl=en

 

2.    Legal basis for processing of personal data

The legal basis for the processing of your personal data using cookies is your consent in accordance with Article 6 (1) (1) (a) GDPR.

 

3.    Purpose of data processing

Google uses the information to determine how you have used the application, to send us a summary of the application activities and to offer other services associated with the use of the application.
If necessary, Google will transmit the information collected to third parties if this is required by law or if Google commissions third parties to process this data.

 

4.    Period of storage

The cookies used by Google Analytics to analyse the use of the application have a preset storage period. For more information, please refer to our Consent Tool.

5.    Possibility to object and remove

You can prevent cookies being stored using the corresponding settings on your browser software. However, we would like to inform you that if you do this, you may not be able to take full advantage of the functions of this application.
The analysis measure is carried out on the basis of your consent. If you have given us this, you can withdraw it at any time by making changes to your settings. 

7.    YouTube

YouTube

Our website uses plug-ins from Google's YouTube site. The site operator is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, tel.: +353 1 543 1000, fax: +353 1 686 5660, email: [email protected] ("Google" or synonymously "Youtube"). We integrated the service with a so-called two-click solution. A connection to the Google servers is only established when you click on the corresponding placeholder. To call up a video via YouTube, a connection to the YouTube servers is established. The YouTube server is informed which of our pages you have visited. If you are logged into your YouTube account, you enable YouTube to assign your surfing behaviour directly to your personal profile. You can prevent this by logging out of your YouTube account. For more information on how user data are handled, see Google's privacy policy at:
https://policies.google.com/privacy?hl=en&gl=en
As a registered user of the YouTube platform, you can also control to what extent your user behaviour may be recorded and used by Google via comprehensive settings for Google advertising on the YouTube platform. YouTube is used in the interest of an attractive presentation of our online offers. The legal basis is your consent, which you express by clicking on a corresponding placeholder, within the meaning of Article 6 (1) (a) GDPR.

 

 

8. Rights of data subjects

If personal data of yours are processed, you are a data subject under GDPR and you have the following rights with respect to the controller: 

1.      Right to information 

You can request a confirmation from the controller on whether your personal data are processed by us. 
If this is the case, you may request the following information from the controller:

• 
  •    The purposes for which the personal data is to be processed;
  •    The categories of personal data that are processed;
  •    The recipients or categories of recipients to whom your personal data has been or will be disclosed;
  •    The planned period of storage of your personal data or, if it is not possible to provide specific information here, the criteria used to determine the period of storage;
  •    The existence of a right to rectify or erase your personal data, a right to restrict processing by the controller or a right to object to this processing;
  •    The existence of a right to complain to a supervisory authority;
  •    All available information on the origin of the data if the personal data are not collected from the data subject;
  •    The existence of automated decision-making including profiling in accordance with Article 22 (1) and (4) GDPR and – at least in these cases – meaningful information on the logic involved and the reach and the aspired-to impacts of any such processing for the data subject. (Not currently used.)

You have the right to request information on whether your personal data are transferred to a third country or an international organisation. In this connection you can request that you are notified about suitable guarantees under Article 46 GDPR in connection with the transfer. 

2.   Right to rectification 

You have a right to obtain from the controller rectification and/or completion if your personal data are incorrect or incomplete. The controller must make the rectification without undue delay. 

3.    Right to restriction of processing

You have a right to the restriction of processing of your personal data under the following circumstances:

• •    If you contest the accuracy of your personal data for a period that enables the controller to verify the accuracy of the personal data;
  •    If the processing is unlawful and you oppose the erasure of the personal data and request the restriction of their use instead;
  •    If the controller no longer needs the personal data for the purposes of the processing, but they are required by you for the establishment, exercise or defence of legal claims; or
  •    If you have objected to processing pursuant to Article 21 (1) GDPR pending the verification of whether the legitimate grounds of the controller outweigh your grounds.

Where processing of your personal data has been restricted, such personal data shall, with the exception of storage, only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a member state. 
If processing has been restricted in accordance with the above mentioned requirements, you will be notified by the controller before the restriction is lifted.

4.    Right to erasure 

a)     Duty to erase 

You can request the controller to erase your personal data without undue delay, and the controller is obliged to erase these data without due delay where one of the following grounds applies:

• •    Your personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed.
  •    You withdraw your consent on which data processing is based according to Article 6 (1) (a) or Article 9 (2) (a) GDPR, and where there are no other legal bases for data processing.
  •    You object to the processing pursuant to Article 21 (1) GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Article 21 (2) GDPR.
  •    Your personal data have been unlawfully processed.
  •    Your personal data have to be erased for compliance with a legal obligation in Union or member state law to which the controller is subject.
  •    Your personal data have been collected in relation to the offer of information society services referred to in Article 8 (1) GDPR.
  •    Information to third parties

Where the controller has made your personal data public and is obliged pursuant to Article 17 (1) to erase them, the controller, taking account of available technology and the cost of implementation, shall take reasonable steps, including technical measures, to inform controllers which are processing the personal data that you as data subject have requested the erasure by them of any links to, or copy or replication of, those personal data. 

b)     Exceptions

The right to erasure shall not apply to the extent that processing is necessary

• •    for exercising the right of freedom of expression and information;
• •    for compliance with a legal obligation which requires processing by Union or member state law to which the controller is subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
  •    for reasons of public interest in the area of public health in accordance with Article 9 (2) (h) and (i) as well as Article 9 (3) GDPR;
  •    for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Article 89 (1) GDPR in so far as the right referred to in paragraph a) is likely to render impossible or seriously impair the achievement of the objectives of that processing; or
  •    for the establishment, exercise or defence of legal claims.

5.    Right to notification 

If you have asserted to the right to obtain rectification, erasure or restriction of processing from the controller, the controller is obliged to communicate any rectification or erasure of personal data or restriction of processing to each recipient to whom the personal data have been disclosed, unless this proves impossible or involves disproportionate effort. 
You have the right to be informed about these recipients by the controller.

6.   Right to data portability 

You have the right to receive your personal data which you have provided to the controller in a structured, commonly used and machine-readable format. You also have the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided, where

• •    the processing is based on consent pursuant to Article 6 (1) (a) GDPR or Article 9 (2) (a) GDPR or on a contract pursuant to Article 6 (1) (b) GDPR; and
  •    processing is carried out by automated means.

In exercising this right, you furthermore have the right to have the personal data transmitted directly from one controller to another, where technically feasible. This may not affect the rights and freedoms of others. 
The right to data portability shall not apply to processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of an official authority vested in the controller. 

7.   Right of objection 

You have the right to object, on grounds relating to your particular situation, at any time to processing of your personal data which is based on Article 6 (1) (e) or (f) GDPR, including profiling based on those provisions. 
The controller shall no longer process your personal data unless the controller demonstrates compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims. 
Where personal data are processed for direct marketing purposes, you have the right to object at any time to processing of your personal data for such marketing, which includes profiling to the extent that it is related to such direct marketing. 
Where you object to processing for direct marketing purposes, your personal data shall no longer be processed for such purposes. 
In the context of the use of information society services, and notwithstanding Directive 2002/58/EC, you may exercise your right to object by automated means using technical specifications. 

 

8.    Right to withdraw consent under data protection law 

You have the right to withdraw your consent under data protection law at any time. The withdrawal of consent shall not affect the lawfulness of the processing which has taken place up to that time. 

9.   Automated individual decision-making including profiling

You have the right not to be subjected to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly affecting you. This shall not apply if the decision

• •    is necessary for entering into, or performance of, a contract between you and the controller.
  •    is authorised by Union or member state law to which the controller is subject and which also lays down suitable measures to safeguard your rights and freedoms and legitimate interests, or
  •    is based on your explicit consent.

However, these decisions may not be based on special categories of personal data referred to in Article 9 (1) GDPR unless Article 9 (2) (a) or (g) GDPR applies and suitable measures to safeguard your rights and freedoms and legitimate interests are in place. 
In the cases referred to points (1) and (3), the controller shall implement suitable measures to safeguard your rights and freedoms and legitimate interests, at least the right to obtain human intervention on the part of the controller, to express your point of view and to contest the decision.

10.  Right to lodge a complaint with a supervisory authority 

Every data subject has the right pursuant to Article 77 GDPR to lodge a complaint with a supervisory authority if they believe the processing of the personal data concerning them violates the GDPR. The competent supervisory authority for data protection issues is the State Data Protection Commissioner of the Federal State in which our company has its registered office.
Die Landesbeauftragte für Datenschutz und Informationsfreiheit [The State Commissioner for Data Protection and Freedom of Information]
North Rhine-Westphalia
Postfach 20 04 44
40102 Düsseldorf
Tel.: +49 (0) 211/38424-0
Fax: +49 (0) 211/38424-999
Email: [email protected]