Privacy Policy

A. Summary

• When you visit our website, your IP address is processed only to deliver the website to your device.
• Our web-hosting provider, STRATO, stores IP addresses and other technical information in a log file for seven days for IT security purposes.
• We do not use cookies.
• Our website does not load elements from third-party web servers.
• Data transmitted to your browser is encrypted using SSL/TLS.

B. Detailed Information

General information on data processing

As the operator of this website, we take the protection of your personal data seriously. We process personal data collected when you visit our website in accordance with applicable data-protection law. We do not publish your data or disclose it to unauthorised third parties. Where personal data is processed, this policy explains the legal basis for that processing.

I. Scope of this Privacy Policy

This Privacy Policy concerns personal data, meaning information relating to an identified or identifiable natural person. Unless the information in this document or other circumstances indicate otherwise, we are not able to identify you.

Where processing is necessary to perform a contract with the data subject, or to take steps at their request before entering into a contract, the legal basis is Article 6(1)(b) GDPR. Where processing is necessary to comply with a legal obligation, Article 6(1)(c) GDPR applies. Where processing is necessary to protect vital interests, Article 6(1)(d) GDPR applies. Where processing is necessary for the legitimate interests pursued by us or a third party, and those interests are not overridden by the interests or fundamental rights and freedoms of the data subject, the legal basis is Article 6(1)(f) GDPR.

Personal data is erased or restricted once the purpose for storing it no longer applies. Data may be retained where required by European or national law. Data is also erased or restricted when a statutory retention period expires, unless further storage is necessary to conclude or perform a contract.

II. Collection, use and storage of data when visiting our website

We use STRATO AG, Pascalstraße 10, 10587 Berlin, Germany, as our web-hosting provider. STRATO processes data on our behalf to deliver the website technically. BECKER-SYSTEMS remains responsible for the processing described below.

When you visit our website, your device transmits its IP address to us. This is necessary to send the website data to your browser and display the requested pages (Article 6(1)(b) and (f) GDPR). The system may need to store the IP address temporarily for the duration of the session in order to deliver the website. This processing is also based on our legitimate interest in providing the website you requested.

Your IP address is used by internet providers to transmit the website data to you. Beyond this technical transmission, our hosting provider stores the full IP address for seven days to help defend against attacks on our IT systems—for example by blocking IP addresses—and, where necessary, support law enforcement. It is also used to create anonymous statistics that help us improve the website. Our legitimate interest is to maintain the website’s security and functionality and improve our online service.

After seven days, the final digits of the IP address are truncated so that identification is no longer possible. Where identification is required in a specific case, it is carried out by law-enforcement authorities to whom the relevant data may be provided.

We log the referrer, date and time of the request, the requested access method or function, input values sent by the requesting computer (such as a file name), the web server’s response status, the requested file name, and your browser and operating-system versions. We do not store additional personal data merely because you view a page, and these log data are not combined with other personal data about the user.

These technical processes are necessary to operate the website. If you do not want this processing to take place, please do not use the website. We use personal data only for the purposes stated and only to the extent necessary to achieve them. Personal data is disclosed to public authorities only where required by law or where disclosure is necessary for legal action or law enforcement in response to attacks on our network infrastructure. We do not disclose data to third parties for other purposes.

III. Your rights to access, rectification, erasure, completion, restriction and data portability

The following is an overview of the rights that may apply in connection with our website. You may have additional rights in relation to other processing activities. You have the right to:

• to request access under Article 15 GDPR to the personal data we process about you. In particular, you may request information about the purposes of processing, categories of personal data, recipients, planned retention periods, your rights to rectification, erasure, restriction or objection, your right to lodge a complaint, the source of data not collected directly from you, and any automated decision-making, including profiling, together with meaningful information about it;
• to request prompt rectification of inaccurate personal data or completion of incomplete data under Article 16 GDPR;
• to request erasure of your personal data under Article 17 GDPR, subject to the statutory exceptions;, unless processing is necessary to exercise freedom of expression and information, comply with a legal obligation, perform a task in the public interest, or establish, exercise or defend legal claims;
• to request restriction of processing under Article 18 GDPR;, where you contest the accuracy of the data, processing is unlawful but you oppose erasure, we no longer need the data but you require it for legal claims, or you have objected to processing under Article 21 GDPR;
• to receive the personal data you have provided to us in a structured, commonly used and machine-readable format under Article 20 GDPR or request transmission of the data to another controller, where legally applicable;
• to lodge a complaint with a supervisory authority under Article 77 GDPR. You can generally contact the authority in your usual place of residence, place of work or the place of the alleged infringement.
• Where we process your personal data on the basis of legitimate interests under Article 6(1)(f) GDPR, you may object under Article 21 GDPR on grounds relating to your particular situation. You may also object where personal data is processed for direct marketing.

To exercise your right to withdraw consent or object to processing, please contact us using the details in our Legal Notice.

1. Right of access

You may request confirmation as to whether we process personal data concerning you. If we do, you may request access to that data and information about the purposes of processing, the categories of data, recipients, retention periods, your rights, the right to lodge a complaint, the source of data not collected from you, and any relevant automated decision-making.

You have the right to know whether personal data concerning you is transferred to a third country or international organisation. Where applicable, you may also request information about the safeguards under Article 46 GDPR.

2. Right to rectification

You have the right to request rectification or completion of inaccurate or incomplete personal data without undue delay.

3. Right to restriction of processing

You may request restriction of processing where you contest the accuracy of the data, the processing is unlawful and you oppose erasure, we no longer need the data but you require it for legal claims, or you have objected to processing pending verification of the relevant grounds.

Where processing has been restricted, the data may generally be stored but processed only with your consent, for legal claims, to protect another person’s rights, or for important reasons of public interest, subject to the GDPR.

4. Right to erasure

Obligation to Erase Data

You may request erasure of personal data without undue delay where, for example, the data is no longer necessary, you withdraw consent and no other legal basis applies, you successfully object to processing, the data has been unlawfully processed, or erasure is required by law.

Notification to Third Parties

Where personal data has been made public and must be erased, the controller must take reasonable steps, taking account of available technology and implementation costs, to inform other controllers processing the data that you have requested erasure of links, copies or replications.

Exceptions

The right to erasure does not apply where processing is necessary for freedom of expression and information, compliance with a legal obligation, a task carried out in the public interest, public-health reasons, archiving or research purposes under the GDPR, or the establishment, exercise or defence of legal claims.

5. Right to notification

If you have obtained rectification, erasure or restriction of processing, we will notify recipients to whom the data was disclosed unless this proves impossible or involves disproportionate effort. You may request information about those recipients.

6. Right to data portability

You have the right to receive personal data you provided in a structured, commonly used and machine-readable format and, where technically feasible and legally applicable, to transmit it to another controller.

7. General Information About Your Right to Object

You may object at any time, on grounds relating to your particular situation, to processing based on Article 6(1)(e) or (f) GDPR, including profiling based on those provisions.

If personal data is processed for direct marketing, you may object at any time to that processing, including profiling insofar as it relates to direct marketing.

IV. Links to Third-Party Websites

Our website may contain links to other providers’ websites. This Privacy Policy applies only to our own website. We have no control over, and do not monitor, whether other providers comply with applicable data-protection requirements.

V. Privacy Policybeauftragter, Beschwerden, Verantwortliche Stelle

If you have a complaint about this Privacy Policy, you may contact the competent supervisory authority. In Rhineland-Palatinate, where we are based, this is the State Commissioner for Data Protection and Freedom of Information of Rhineland-Palatinate, Hintere Bleiche 34, 55116 Mainz, Germany. Please verify the authority’s current contact details before publication.

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the EU Member State where you live, work or where the alleged infringement occurred, if you consider that processing of your personal data infringes the GDPR.

VI. Questions and updates

Please contact us if you have further questions about this Privacy Policy or the processing of your personal data. Data-protection requirements and our practices may change, so please consult the current version published on this website.

This Privacy Policy is dated 25 May 2018. Please review the date and content before publication to ensure they remain current.