Data privacy statement (Data protection information according to Art. 13 GDPR)

1. Name and contact details of the controller
 
The person in charge in terms of Art. 4 Para. 7 EU General Data Protection Regulation (GDPR) is:

WITEG Labortechnik GmbH
Am Bildacker 16, D-97877 Wertheim a. Main

 Phone:+49 (0)9342 93010, Fax:+49 (0)9342 930177
 E-Mail: info(at)witeg.de


2. Contact details of the data privacy officer

We appointed a data privacy officer for the data protection and he will be contactable under the following contact details:

Mprotect365 GmbH
Nordstraße 17-21
04105 Leipzig

E-Mail: datenschutz(at)witeg.de

3. Rights of the person concerned

3.1 You have the following rights regarding your personal data:
–     Right to information,
–     Right to rectification or erasure,
–     Right to restriction of processing,
–     Right to object to processing,
–     Right to data portability.

You are entitled to complain about the processing of your personal data though us at a data protection controlling authority.

3.2 Right to object
a. The data subject shall have the right to object, on grounds relating to his or her particular situation, at any time to processing of personal data concerning him or her which is based on point (e) or (f) of Article 6(1), including profiling based on those provisions. The controller shall no longer process the personal data unless the controller demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defense of legal claims.
b. Where personal data are processed for direct marketing purposes, the data subject shall have the right to object at any time to processing of personal data concerning him or her for such marketing, which includes profiling to the extent that it is related to such direct marketing.
c. Where the data subject objects to processing for direct marketing purposes, the personal data shall no longer be processed for such purposes.


4. Individual data acquisition

4.1 Data acquisition during the visit of our website

During the solely informational usage of our website, thus if you do not transfer any other information to us, we will only collect the personal data your browser transfers to our server.
If you view our website we collect the following data which are technically required to display our website and to ensure stability and security:

- Browser type/ version
- used operating system
- Referrer URL (the before viewed website)

- host name of the accessing computer (IP address)

- time of the server request.
 
a.) Purposes:
Purposes, for which the personal data should be processed:
- Display of the website.

b.) Legal basis:
Legitimate interests according to Art. 6 Para. 1 f) GDPR.
Legitimate interests are:
- Operability, display, stability and security of the website.

c.) Categories of receivers of personal data:
The website is operated technically by a service provider (processor).

d.) Duration of storage:
- 3 months.    


4.1.1 Transient cookies / session cookie (technical necessary cookies)
 
The necessary data storage includes cookies, which are mandatory for the functions of a website. These are for example cookies used for the storage of login data, shopping cart or language selection. They are deleted with the closure of the browser.

a.) Purposes:
Purposes, for which the personal data should be processed:
- Display of the website.

b.) Legal basis:
Legitimate interests according to Art. 6 Para. 1 f) GDPR.
Legitimate interests are:
- Operability, display, stability and security of the website.

c.) Categories of receivers of personal data:
The website is operated technically by a service provider (processor).

d.) Duration of storage:
- Until the browser is closed.


4.2 Data acquisition contact form

In our „contact form”, we collect the following data: type of contact*, title, first name, last name, company*, street/no.*, postcode*, city*, country*, VAT no, phone, e-mail address, message*. This data are used to record and respond to your inquiry and to make contact with you.

a.) Purposes:
Purposes, for which the personal data should be processed:
- Contacting.

b.) Legal basis:
- consent to the processing for one or more specific purposes (Art. 6 Para. 1 a) GDPR).

c.) Categories of receivers of personal data:
The web server is technically operated by a service provider (processor).

d.) Duration of storage:
- Until the revocation of consent or until the accomplishment of purpose (Contacting).

e.) Possibility of revocation:
You have the right to revoke your consent at any time. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.


4.3 Data acquisition inquiry form

In our „inquiry form”, we collect the following data: type of contact*, title, first name, last name, company*, street/no.*, postcode*, city*, country*, VAT no, phone, e-mail address, message*. This data are used to record and respond to your inquiry and to make contact with you.

a.) Purposes:
Purposes, for which the personal data should be processed:
- Article inquiry.

b.) Legal basis:
- consent to the processing for one or more specific purposes (Art. 6 Para. 1 a) GDPR).

c.) Categories of receivers of personal data:
The web server is technically operated by a service provider (processor).

d.) Duration of storage:
- Until the revocation of consent or until the accomplishment of purpose (Contacting).

e.) Possibility of revocation:
You have the right to revoke your consent at any time. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.


4.4 Newsletter subscription

In our form „Newsletter subscription”, we collect the following data: e-mail address*. This data are used to send you our newsletter. Mandatory information for sending our newsletter is only the e-mail address. The specification of further data is voluntary and is used to address to you personally.

With your consent, you can subscribe to our newsletter which informs you about our current interesting offers. The advertised goods and services are named in the declaration of consent.

For the registration to our newsletter, we use the so called Double-Opt-In procedure. This means that after your subscription we send you an e-mail to the stated e-mail address, where we ask you to confirm that you wish to receive a newsletter. If you do not confirm your subscription within 24 hours, the data will be deleted automatically.

Beyond that, we save each of your used IP addresses and the times of subscription and confirmation. Purpose of this procedure is to prove your subscription and, if necessary, to be able to solve a possible abuse of your personal data.

a.) Purposes:
- Sending the newsletter.

b.) Legal basis:
Consent to the processing for one or more specific purposes (Art. 6 Para. 1 a) GDPR).
- IP addresses and the times of subscription:
Legitimate interests according to art. 6 para. 1 f) GDPR.
Legitimate interests are:
- Prevention of abuse.

c.) Categories of receivers of personal data:
- Processor: The website is operated technically by a service provider (processor).

d.) Duration of storage:
- Until revocation of consent.

e.) Possibility of revocation:
You have the right to revoke your consent at any time. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.

If you no longer wish to receive the newsletter you can unsubscribe as follows: "unsubscribe newsletter".


4.5 Webshop (Register form)

In our “register form” we collect the following data: salutation*, first name*, last name*, e-mail address*, your password*, company art, company*, VAT-ID, street and number*, zip code*, city*, country. These data serve to conclude and fulfill the contract.

a.) Purposes:
Purposes, for which the personal data should be processed:
- Conclusion and fulfillment of the contract.

b.) Legal basis:
- Contract initiation, fulfillment of the contract (Art. 6 Para. 1 b) GDPR).

c.) Categories of receivers of personal data:
The web server is technically operated by a service provider (processor).
- Payment service providers, shipping providers.

d.) Duration of storage:
- Until the expiry of legal retention periods.