DATA PROTECTION STATEMENT
General Explanation on the Protection of Personal Data on our Website
SSL or TLS encryption
This page uses SSL or TLS encryption for reasons of security and to protect the transmission of confidential contents, such as orders or queries that you send to us as the page operator. An encrypted connection can be recognised by the address line of the browser switching from “https://” to “https://” and the lock icon being shown in your browser line.
If SSL or TLS encryption is activated, the data you transmit to us cannot be read by any third parties.
The controller for data protection
The controller within the meaning of the General Data Protection Regulation and other national data protection laws of the Member States and other provisions under data protection law is:
ARIS Stellantriebe GmbH
Rotter Viehtrift 5a – 9
D-53842 Troisdorf
Germany
Phone: +49 2241 25186 — 0
Fax: +49 2241 25186 — 99
Email: aris{ad}stellantriebe.de
Responsible person: Rolf Schneider / managing director
Scale of processing of personal data
We generally only process personal data of our users only as far as this is necessary to provide a functional website or our contents and services. Processing of personal data of our users shall usually only take with the user’s consent. A derogation shall apply in such cases where prior consent cannot be obtained for factual reasons and where processing of the data is permitted by the law.
Legal basis relating to processing of personal data
As far as we collect the consent of the data subject for processing of personal data, point (a) of Article 6(1) of the EU General Data Protection Regulation (GDPR) serves as the legal basis.
For legal processing of personal data that is necessary to perform a contract of which the data subject is a party, point (b) of Article 6(1) GDPR serves as the legal basis. This also applies to processing operations that are necessary to perform pre-contractual measures.
As far as processing of personal data is necessary to perform a legal obligation that our company is subject to, point (c) of Article 6(1) GDPR serves as the legal basis.
If any vital interests of the data subject or any other natural person require processing of personal data, point (d) of Article 6(1) GDPR serves as the legal basis.
If processing is necessary to maintain a legitimate interest of our company or a third party and if the interests, fundamental rights and fundamental freedoms of the data subject do not override the former interest, point (f) of Article 6(1) GDPR serves as the legal basis for processing.
Data erasure and duration of storage
The personal data of the data subject will be deleted or blocked as soon as the purpose of storage no longer applies. Storage may further take place when this is stipulated by the European or national legislator in regulations under Union law, laws or other rules that the controller is subject to. Blocking or erasure of the data shall also take pace if a storage period required by the standards named expires, except if further storage of the data is required for conclusion of a contract or performance of a contract.
Your rights as data subject
You have a right of access and a right to be actively informed by us at the time of collection of your personal data; in connection with this, the General Data Protection Regulation stipulates which data we may collect concerning you under certain conditions and what information we must provide to you in the two cases named above, and how this must take place. All in all, this is the information we present to you here, combined for the sake of simplicity, at least under consideration of Articles 12 to 22 of the GDPR and explain as far as possible:
- Name and contact details of the controller and the data protection officer, as far as present are included in the directive on privacy initially.
- The purpose of the processing and the legal basis and whether the collection/processing of the data must take place for legal reasons. On this, there is a general note at the beginning of this data protection statement, as well as specific information from case to case. The information and any consent of the data subject is necessary if the original purpose changes or is to be changed. If we collect and process your personal data for a specific purpose, we will inform you about any planned changes to this purpose beforehand.
- If data are collected based on legitimate interest, you will be informed about the type of this legitimate interest at the time of collection.
- We will gladly inform you of the type or category of the personal data if this does not result automatically from the collection.
- The recipients or categories of recipients to whom the personal data will be disclosed or have been disclosed shall only by employees of our company, and possibly processors with whom we have concluded agreements in compliance with the law.
- If possible, the planned storage duration or the criteria for determination of this duration. We generally store business documents according to the applicable law or for 10 years / 6 years or only for as long as we need the data to perform your request or for as long as the legitimate interest or legal bases permit or require this.
- You shall have a right to object to collection of the data at any time; please inform us about this accordingly.
- You also have the right to rectification, erasure and restriction of processing of the personal data concerning you, and this shall be implemented upon request or if we recognise this on our own.
- You have the right to lodge a complaint with a supervisory authority.
- You have the right to be informed of the source from which your data originate if the personal data have not been collected directly from you. If this is the case, we shall provide this information to you according to Art. 14 of the GDPR.
- If available, you will receive information concerning automated decision-making, including profiling in accordance with Article 22(1) and (4) GDPR, and indicative information concerning the type of collection and processing, as well as the scope and intended effects of such processing for the data subject.
- You have the right to be informed on whether personal data have been transmitted to any third country or any international organisation. If this is the case, you will be informed in parallel with the actual information about the appropriate guarantees in connection with transfer of the data
- In addition to the rights already named, you also have the following rights: the right to data portability and the revocation of a consent given before.
You can exercise your right of access at any time; please contact us through the contacts named at any time on demand.
Special note on use of various applications on the website
Provision of the website and compilation of log files
Description and scale of processing activities
Every time our website is called up, our system will automatically record data and information from the computer system of the calling computer in the form of server log files that your browser transmits to us automatically.
These are:
- browser type and browser version
- operating system used
- referrer URL
- host name of the accessing computer
- time of the server query
- internet protocol address
These data will not be stored together with any other personal data concerning the user. The legal basis for temporary storage of the data is point (f) of Article 6 (1) GDPR.
Purpose of processing activities
The temporary storage of the internet protocol address by the system was necessary in order to make it possible to send the website to the user’s computer. For this, the user’s internet protocol address must remain stored for the duration of the session.
Storage in log files shall take place in order to ensure the function of the website. We also use the data for optimisation of the website and to ensure the security of our information-technical systems. The data are not evaluated for marketing purposes in this context.
These purposes also reflect our legitimate interest in the processing activities in accordance with point (f) of Article 6(1) GDPR.
Duration of storage
The data are deleted as soon as they are no longer necessary to achieve the purpose of their collection. If data are recorded for provision of the website, this is the case when the respective session is ended.
Right to object and removal option
Collection of the data for provision of the website and recording of the data in log files is mandatory for operation of the website. Accordingly, the user cannot object to this.
Use of cookies
Description and scale of processing activities
The websites partially use cookies. Cookies do not cause any damage to your computer and do not contain any viruses. Cookies serve to make our offer user-friendly, more effective and safe. Cookies are small text files that are stored on your computer and that your browser stores.
Most of the cookies we use are “session cookies”. They are deleted automatically after the end of your visit. Other cookies remain stored on your end device until you delete them. These cookies enable us to recognise your browser again on your next visit.
Cookies that are necessary to perform electronic communication or to provide certain functions desired by you (e.g. shopping cart functions) are stored based on point (f) of Article 6(1) GDPR. The website operator has as legitimate interest in storage of cookies for technically correct and optimised provision of its services. As far as any other cookies (e.g. cookies for analysis of your surfing behaviour) are stored, these are treated separately in the data protection statement.
Legal basis for processing activities
The legal basis for processing of personal data using technically necessary cookies is point (f) of Article 6(1) GDPR.
The legal basis for processing of personal data using cookies for analysis purposes is point (a) of Article 6(1) GDPR if the user has consented to this.
Purpose of processing activities
The purpose of using technically necessary cookies is simplifying use of websites for the users. Some functions of our website cannot be offered without using cookies. For this, the browser must be recognised after a page change as well. The user data collected by the technically necessary cookies are not used to compile user profiles.
Duration of storage, objection and removal option
Cookies are stored on the user’s computer and transmitted to our page by it. Therefore, you as the user also have the full control of use of cookies. By changing the settings in your web browser, you can deactivate or restrict transmission of cookies. Already-stored cookies can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may not be possible to use all functions of the website in full.
Contact form and email contact
Description and scale of processing activities
Our websites have a contact form that can be used for electronic contact. If a user uses this option, the data entered in the input mask will be transmitted to our service provider of the website, stored and passed on to a general email mailbox of Aris Stellantriebe GmbH. All employees of Aris Stellantriebe GmbH have access to this mailbox. The order centre department will process your contact request or forward it to the competent processor for final processing. These data will not be passed on to any third parties. These data are: Name, email address and your request.
At the time of dispatch of the message, the following data will be stored as well:
- The internet protocol address of the user
- Date and time of the registration
Your consent to processing of the data is collected within the context of sending and this data protection statement is referred to. There will be a corresponding verification to ensure that you are the owner of the email address entered, using a link that we will email to you.
Alternatively, contact via the provided email address is possible. In such a case, the user’s personal data transmitted in the email will be stored.
No data will be passed on to any third parties in this context. The data are only used for processing of the conversation.
Legal basis for processing activities
The legal basis for processing of the data is the presence of the user’s consent in accordance with point (a) of Article 6(1) GDPR. The legal basis for processing of the data transmitted in the scope of transmission of an email is point (f) of Article 6(1) GDPR. If the email contact is targeted at conclusion of a contract, point (b) of Article 6(1) GDPR shall be an additional legal basis for processing.
Purpose of processing activities
Processing of the personal data from the input screen serves only to process your contact. In case of contact by email, this is also the necessary legitimate interest in processing of the data. The legitimate interest of the controllers is mostly in offering you the service via the website and thus performing and supporting the business purpose of trading in products.
The other personal data processed while sending serves to prevent misuse of the contact form and to ensure the security of our information-technical system.
Duration of storage
The data are deleted as soon as they are no longer necessary to achieve the purpose of their collection. This is the case for the personal data from the input screen of the contact form and those transmitted by email when the respective conversation with the user has ended. The conversation is ended when the circumstances show that the corresponding matter has been finally completed. Further storage is possible if there is a contract relationship or order and we must store you in our system as customer or potential customer. Mandatory legal provisions – in particular archiving periods – shall not be affected by this.
Right to object and removal option
The user has the option at any time to withdraw his or her consent to processing of the personal data. If the user contacts us by email, he or she may object to storage of his or her personal data at any time. In this case, the conversation cannot be continued.
Drive configurator
Description and scale of processing activities
Our websites have a contact form for a drive configurator that can be used for electronic contact. If a user uses this option, the data entered in the input mask will be transmitted to our service provider of the website, stored and passed on to a general email mailbox of Aris Stellantriebe GmbH. All employees of Aris Stellantriebe GmbH have access to this mailbox. The order centre department will process your contact request or forward it to the competent processor for final processing. These data will not be passed on to any third parties. These data are: Company name, contact person, complete address of the company, phone, email address and your request.
At the time of dispatch of the message, the following data will be stored as well:
- The internet protocol address of the user
- Date and time of the registration
Your consent to processing of the data is collected within the context of sending and this data protection statement is referred to. There will be a corresponding verification to ensure that you are the owner of the email address entered, using a link that we will email to you.
The data will not be passed on to any third parties. The data are only used for processing of the conversation.
Legal basis for processing activities
The legal basis for processing of the data is the presence of the user’s consent in accordance with point (a) of Article 6(1) GDPR. The legal basis for processing of the data transmitted in the scope of transmission of an email is point (f) of Article 6(1) GDPR. If the email contact is targeted at conclusion of a contract, point (b) of Article 6(1) GDPR shall be an additional legal basis for processing.
Purpose of processing activities
Processing of the personal data from the input screen serves only to process your contact. In case of contact by email, this is also the necessary legitimate interest in processing of the data. The legitimate interest of the controllers is mostly in offering you the service via the website and thus performing and supporting the business purpose of trading in products.
The other personal data processed while sending serves to prevent misuse of the contact form and to ensure the security of our information-technical system.
Duration of storage
The data are deleted as soon as they are no longer necessary to achieve the purpose of their collection. This is the case for the personal data from the input screen of the contact form and those transmitted by email when the respective conversation with the user has ended. The conversation is ended when the circumstances show that the corresponding matter has been finally completed. Further storage is possible if there is a contract relationship or order and we must store you in our system as customer or potential customer.
Right to object and removal option
The user has the option at any time to withdraw his or her consent to processing of the personal data. If the user contacts us by email, he or she may object to storage of his or her personal data at any time. In this case, the conversation cannot be continued.