Privacy statement

1. Privacy Policy
Welcome to our website! In the following we will provide you with information on how we handle your personal data acc. to Article 13 of the General Data Protection Regulation (GDPR).

1.1 Controller
The controller for the collection and processing of the data described below is:
Vereinigte Kreidewerke Dammann GmbH & Co. KG
Hildesheimer Straße 3
31185 Söhlde

1.2 Storage of IP addresses
We store the IP address that your web browser transmits exclusively for the intended purpose for the period of seven days and we use this data to detect, limit and remove attacks on our websites. At the end of this period we will delete or anonymize the IP address. The legal basis is Article 6 Section 1 et seq. GDPR.

1.3 Usage data
Whenever you visit our websites, our web server will temporarily store so-called usage data in a data log for statistical purposes to improve the quality of our websites. This data record includes

the page from which the file was requested,
the name of the file,
date and time of the request,
the amount of transferred data,
the access status (file transmitted, file not found),
the description of the type of the web browser used,
the IP address of the computer from which the request was sent which will be shortened in such a way that a personal connection can no longer be established.

The mentioned log data will exclusively be stored in an anonymized form.

2. Data security

2.1 Data security
We use technical and organizational measures in order to ensure that your data is protected from unauthorized access as comprehensively as possible. On our pages we use an encryption process. Your details are transmitted via the internet from your computer to our server and vice versa using TLS encryption. This is indicated by a closed lock icon in your browser’s status bar and by the address line starting with https://.

3. Transfer of data to third parties

3.1 Transfer of data to third parties
Within the scope of processing an order, we will transfer your personal data acc. to Article 28 GDPR to service providers supporting us in the operation of our websites (e. g. hosting ) and related processes. Our service providers are strictly bound by our instruction and accordingly contractually bound.

3.2 Transfer of data to countries outside the European Union
In some cases we transfer personal data to countries outside the European Union. In this context we have ensured an adequate level of data protection:
With regard to [Google Analytics (USA)] an adequate level of data protection results from the participation in the Privacy Shield Framework (Article 45 Section 1 GDPR).

4. Cookies

4.1 Cookies
We use cookies on our websites. Cookies are small text files which are stored on your terminal device and can be read. A distinction is made between session cookies, which will be deleted as soon as you close your browser, and permanent cookies, which will be stored beyond the duration of the individual session. Cookies may contain data which enable the recognition of the used device. However, sometimes cookies contain only information on certain settings which cannot be related to a certain user.
We use [session cookies and permanent cookies] on our websites. The processing is performed on the basis of Article 6 Section 1 et seq. GDPR and for the purpose of [enabling or optimizing user guidance and adapting the presentation of our websites].
You can set your browser to inform you about the placement of cookies in order to make the use of cookies transparent to you. Furthermore, you can delete cookies at any time and prevent the placement of new cookies by changing the corresponding browser settings. Please note that in this case, our website may possibly no longer be displayed optimally and some functions may technically be no longer available.

5. User’s rights

5.0 Your rights as a user
Regarding the processing of personal data, the GDPD grants you - as a website user - certain rights:

5.1 Right of access (Article 15 GDPR):
You shall have the right to obtain a confirmation as to whether or not your personal data is being processed, and, insofar as this is the case, you have the right of access to the personal data and the information provided in detail in Article 15 GDPR.

5.2 Right to request rectification and erasure (Articles 16 and 17 GDPR):
You have the right to demand the immediate rectification of inaccurate personal data and, if required, to have incomplete personal data completed.
Furthermore, you have the right to demand the immediate erasure of personal data in the case that one of the grounds detailed in Article 17 GDPG applies, e. g. if the personal data is no longer necessary for the purposes to which they were collected or processed.

5.3 Right on restriction of processing (Article 18 GDPR):
You have the right to demand the restriction of processing in the case that one of the conditions listed in Article 18 GDPD applies, e. g. if you object to the processing for the duration of a review.

5.4 Right to data portability (Article 20 GDPR):
In certain cases which are detailed in Article 20 GDPR you shall have the right to obtain your personal data in a structured, commonly used and machine-readable format and/or to demand the transmission of your data to a third party.

5.5 Right to object (Article 21 GDPR):
If data is collected on the basis of Article 6 Section 1 et seq. (data processing to safeguard legitimate interests), at any time you have the right to object to processing of your personal data on grounds relating to your particular situation. In this case we shall refrain from processing personal data, unless there are demonstrably important reasons for processing the data which prevail over the interests, rights and freedoms of the concerned data subject, or if the processing is necessary for the establishment, exercise or defense of legal claims.

5.6 Right of complaint with a supervisory authority
According to Article 77 GDPR you have the right to lodge a complaint with a supervisory authority if you are of the opinion that the processing of your data infringes data protection laws. In particular, you may lodge a complaint with a supervisory authority in the member state where you reside, where you work or where the suspected infringement took place.

6. Further contents of the privacy policy

6.1 Contact form
You may use a web form to contact us. If you wish to contact us, please include your name and your email address. If desired, you may provide further details, however, this is not mandatory.
The legal basis for the processing is Article 6 Section 1 et seq. GDPR. Your data shall be processed exclusively for the purpose of answering your request and shall be deleted after a period of 7 days. They will not be transferred to a third party.

6.2 Google Maps
Whenever you retrieve Google Maps map data, permanent cookies are set under "Address" by Google Inc. Your browser can be set to inform you about the placement of cookies in order to make the use of cookies transparent to you.
When retrieving Google Maps map data, usage information (especially the IP address of your computer) may be transferred to a server of Google Inc. in the USA and stored there. We cannot influence the further processing of data by Google Inc. If you disagree with the data processing by Google Inc., please do not retrieve map data, or deactivate the JavaScript function in your Browser to obtain a limited view.

7. Contact details of the data protection officer

7.1 Contact details of the data protection officer
Our company data protection officer will be pleased to provide you with information or receive suggestions on the data protection topic:
Dr. Uwe Schläger
datenschutz nord GmbH
Konsul-Smidt-Straße 88
28217 Bremen
Germany
Web: www.datenschutz-nord-gruppe.de
Email: office(at)datenschutz-nord.de
Phone: +49 421 69 66 32 0