The management of msd steeldesign GmbH in Finnentrop-Heggen, Germany, attributes great importance to the protection of the users of its website www.msd-steeldesign.de. Users of this website are therefore, generally speaking, not obliged to provide personal data. If a user – hereinafter: data subject – wishes to make use of particular services of msd steeldesign GmbH that require the processing of personal data, msd steeldesign GmbH will only process this data if it has legal permission to process personal data or if the data subject has explicitly given permission to process their personal data.
Personal data, which includes for instance name, address, contact information such as telephone number or email address, will be processed in accordance with the provisions of Regulation (EU) 2016/679 (General Data Protection Regulation) as well as the corresponding national provisions for the handling of such data. In this statement and with regard to the usage of our website, we intend to inform data subjects on the type, extent and purpose of the collected and communicated data and about their rights regarding the handling of their data.
Die msd steeldesign GmbH has taken certain measures and precautions for the processing of the aforementioned data as a way of preventing this data from being processed without legal basis and inspected by an unauthorized party. However, we also have to inform you that it is technically impossible to guarantee a complete protection of data transmitted via the internet. For this reason, you can also communicate with us via different channels such as post or telephone.
To explain our processing activities, we use the same terms as the ones used in the relevant provisions of the General Data Protection Regulation in order to avoid any misunderstandings and ambiguity.
The party responsible for the processing of the collected and communicated data within the use of www.msd-steeldesign.de is:
msd steeldesign GmbH
Phone: +49 (0) 27 21 60 96-0
We have appointed an external data protection officer for our company:
Reiss Büro & Datentechnik
Westfälische Str. 51
By using cookies, information and services on our website can be optimized for the user. As men-tioned above, cookies enable us to recognize the users of our website. By recognizing our users, we are able to simplify the usage of our website for them. For example, the user of a website that stores cookies will not have to re-enter their login data every time they visit the website. The web-site and the cookie that is stored on the user’s computer system will do this for them.
Using the correct settings in their browser, the data subject is able to prevent cookies from being stored via our website at any time and consequently object to the storage of cookies permanently. Furthermore, all standard browsers and other types of software can delete any cookies previously stored. If the data subject disables the storage of cookies in his or her browser, our website may be limited in its functions.
Every time a data subject retrieves content via our website under the aforementioned internet address, general information and data will be collected as a result of transmission technology. This information and data is stored in so-called server log files. The following information may be collected:
1. the type of internet browser used by the data subject;
2. the installed operating system of the computer that is used by the data subject;
3. the website, from which the data subject has navigated to our website (so-called http referer);
4. the subpages within our website which are visited by the data subject with the used system;
5. date and time of the access of our website by the data subject;
6. the internet protocol (IP) address that was designated to the internet connection used by the data subject to retrieve content from our website;
7. the internet service provider (ISP) of the internet connection, from which content of our website was retrieved.
msd steeldesign GmbH will not draw any conclusions in regard to using this data to identify the data subject. The data is used to:
1. display the content of our website correctly;
2. optimize the content and advertisements on our website;
3. ensure that our IT systems and website always work
4. provide law enforcement authorities with the necessary data in case of a cyber-attack.
In order to achieve these purposes, the aforementioned information will be analyzed in an anonymized fashion, statistically and with the objective to ensure data protection and data security for the data subject and to create an optimal level of protection. If server log files are stored until the end of the evaluation for stated reasons, they will not be merged with the data that is actively transmitted by the data subject. They will be stored separately to this information.
Due to legal obligations, the website of msd steeldesign GmbH provides information that enables users to quickly contact us electronically or communicate with us directly. A contact form enables users to contact us, however, its use is not mandatory. When a data subject contacts us using any of the stated means, any personal data transmitted by the data subject will be processed and stored in order to process the request that prompted them to contact us.
msd steeldesign GmbH will only store personal data for the period of time that is needed to achieve the processing purpose and during which msd steeldesign GmbH is obligated to retain data due to legal provisions. As soon as the storing purpose lapses or the data retention period expires, personal data will be erased routinely and according to legal requirements, and any further processing of the relevant data will be restricted.
Regarding the handling of their personal data, data subjects can contact the person responsible for data protection – hereinafter: controller – and assert the following rights:
1. the right to receive a confirmation from the controller if personal data concerning him or her is processed by the controller;
2. the right to receive information from the controller regarding what kind of personal data concerning him or her is being processed by the controller as well as a copy of this information, both free of charge; the data subject is particularly entitled to receiving the following information:
a. information regarding the processing purposes;
b. information regarding the categories of the processed personal data;
c. information regarding the recipients or categories of the recipients who have already received the relevant personal data or will receive the relevant personal data, especially recipients in so-called third countries and international organizations; also – in such cases and on explicit request – information regarding the existence of adequate data protection guarantees;
d. where possible, information regarding the planned storage period for personal data or the criteria for determining the storage period;
e. information regarding the existence of the right to rectify or erase the data subject’s personal data and the existence of the right to restrict the processing of personal data;
f. information regarding the existence of a revocation right regarding the processing of the data subject’s personal data by the controller;
g. information regarding the existence of the right to appeal in front of a supervisory authority;
h. information regarding the existence of an automated decision-making process including profiling according to art. 22 par. 1 and 4 of the General Data Protection Regulation and – in case such an automated decision-making process is intended – significant information regarding the logic as well as the scope and the aspired effect of this processing on the data subject.
3. the right to request the controller to rectify any inaccurate personal data concerning him or her; this includes the right to request that any possibly incomplete personal data is completed – if necessary with a complementary declaration – in consideration of processing purposes;
4. the right to request the controller to erase any personal data concerning him or her if
a. the data was collected and processed for purposes for which it is (no longer) necessary;
b. permission to process personal data has been revoked or no other legal basis exists (anymore);
c. the data subject has objected to the processing of his or her personal data and no overriding legitimate grounds for processing exist;
d. the data subject’s personal data has been processed in an unlawful fashion;
e. the controller is legally obligated to erase the data subject’s personal data.
If personal data has been made public by msd steeldesign GmbH and we are responsible for erasing the relevant data according to art. 17 par. 1 of the GDPR, we will – in consideration of the available technology and implementation costs – take measures to inform other controllers who are processing the personal data that the data subject has requested that any links to or copies and replications of this personal data are erased provided that the processing is not necessary.
5. the right to request the controller to restrict the processing where one of the following applies:
a. the accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal data;
b. the processing is unlawful and the data subject is opposed to the erasure of the personal data and instead requests that its use is restricted;
c. the controller no longer needs the personal data for the purposes of the processing, but it is still required by the data subject for establishing, exercising or defending legal claims;
d. the data subject has objected to any processing pursuant to art. 21 par. 1 and the verification is still pending as to whether the legitimate grounds of the controller override those of the data subject.
6. the right to receive personal data concerning him or her, which he or she has provided to a controller, in a structured, commonly used and machine-readable format. The data subject also has the right to transmit the data to another controller without being hindered by msd steeldesign GmbH, provided that the processing is based on consent pursuant to point a) of art. 6 par. 1 or point a) of art. 9 par. 2 of the General Data Protection Regulation or on a contract pursuant to point b) of art. 6 par. 1 of the General Data Protection Regulation and the processing is carried out by automated means; this right does not apply if the processing is necessary for executing a task which is being carried out in the public interest or in the exercise of an official authority assigned to the controller.
In this context, the data subject has the right to have his or her personal data transmitted directly from one controller to another, where technically feasible and where no rights and liberties of others are being adversely affected.
7. the right to object, on grounds relating to his or her particular situation, at any time to the processing of personal data concerning him or her which is based on point e) or f) of art. 6 par. 1 of the General Data Protection Regulation. This includes the right to object to a possible profiling.
msd steeldesign GmbH will no longer process the personal data unless compelling legitimate grounds for the processing which override the interests, rights and liberties of the data subject or for the establishment, exercise or defense of legal claims can be established.
If personal data is processed for direct marketing purposes, the data subject has the right to object at any time to the processing of personal data concerning him or her for such marketing, which includes profiling to the extent that it is related to such direct marketing. If the data subject objects to having their personal data processed for direct marketing purposes, the personal data will no longer be processed for such purposes by msd steeldesign GmbH.
Furthermore, if personal data is processed for scientific or historical research purposes or statistical purposes pursuant to art. 89 par. 1, the data subject, on grounds relating to his or her particular situation, has the right to object to having his or her personal data processed, unless the processing is necessary for the performance of a task carried out for reasons of public interest.
8. the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her or similarly significantly affects him or her. The data subject does not have this right if the decision
a. is necessary for entering into or carrying out a contract between the data subject and a data controller;
b. is authorized by Union or Member State law to which the controller is subject and which also lays down suitable measures to safeguard the data subject’s rights and liberties and legitimate interests;
c. is based on the data subject’s explicit consent.
In cases where the processing of personal data is necessary for concluding or carrying out a contract between us and the data subject or on the basis of the permission of the data subject, msd steeldesign GmbH will implement suitable measures to safeguard the data subject’s rights and liberties and legitimate interests. This includes at the least the right to request human intervention on the part of the controller as well as the possibility to express his or her point of view to the controller.
9. the right to revoke permission previously provided to the controller at any time for processing personal data concerning him or her.
Google Analytics is a web analytics service. Web analysis is the collection, storage and processing of data concerning the behavior of website visitors. This kind of service, among other things, collects data concerning the website from which a user has navigated to our website (so-called referrer), which subpages the user has visited and how often and for how long users remain on a subpage. A web analysis is mostly used in order to optimize a website and to provide a cost-benefit analysis of internet marketing.
The operating company of Google-Analytics is Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.
For the web analysis with Google Analytics, the controller adds "_gat._anonymizeIp" to the tracking code. This truncates and anonymizes the IP address of the data subject’s internet connection if our website is being accessed from a Member or Union State.
The purpose of Google Analytics is to analyze the flow of visitors to our website. Google uses the collected data and information to evaluate, for example, the usage of our website in order to provide online reports, which present what activity is being carried out on our website, and to provide further services concerning the usage of our website.
Google Analytics places a cookie on the data subject’s system. We explained cookies at the beginning of the privacy statement. By placing the cookie, Google enables our website’s usage to be analyzed. Every time one of the subpages of our website – for which we are responsible and on which Google Analytics is integrated – is accessed, the internet browser of the data subject’s system automatically transmits data to Google for the purpose of online analysis. In the course of this technical process, Google receives personal data, such as the data subject’s IP address. Google uses this to retrace the origin of the visitors and clicks and subsequently to enable commission settlements.
The cookie enables the storage of personal information, for example access time, the location from which our website was accessed, and the number of times the data subject has been on our website. Each time our website is accessed, this personal data including the IP address of the data subject’s internet connection are transmitted to Google in the USA. This data is stored by Google in the USA. Google may disclose this data to third parties.
As stated above, the data subject can prevent the placing of cookies via our website at any time by using the relevant settings in their browser and consequently object to the storage of cookies permanently. This setting also prevents Google from placing a cookie in the data subject’s system. Furthermore, a cookie that has already been placed by Google can be erased via the internet browser or another software at any time.
You will find further information and the applicable data protection regulations of Google under https://www.google.de/intl/de/policies/privacy/ and under http://www.google.com/analytics/terms/de.html. You will find a detailed explanation of Google Analytics under https://www.google.com/intl/de_de/analytics/.
On this website, the controller has integrated components of DoubleClick by Google. DoubleClick is a trademark of Google, under which predominantly special online marketing solutions are marketed to advertising agencies and publishers.
The operating company of DoubleClick by Google is Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.
DoubleClick by Google transmits data to the DoubleClick server with each impression, clicks, or other activity. Each of these data transfers triggers a cookie request to the data subject's browser. If the browser accepts this request, DoubleClick uses a cookie on the information technology system of the data subject. The definition of cookies is explained above. The purpose of the cookie is the optimization and display of advertising. The cookie is used, inter alia, to display and place user-relevant advertising as well as to create or improve reports on advertising campaigns. Furthermore, the cookie serves to avoid multiple display of the same advertisement.
DoubleClick uses a cookie ID that is required to execute the technical process. For example, the cookie ID is required to display an advertisement in a browser. DoubleClick may also use the Cookie ID to record which advertisements have already been displayed in a browser in order to avoid duplications. It is also possible for DoubleClick to track conversions through the cookie ID. For instance, conversions are captured, when a user has previously been shown a DoubleClick advertising ad, and he or she subsequently makes a purchase on the advertiser's website using the same browser.
A cookie from DoubleClick does not contain any personal data. However, a DoubleClick cookie may contain additional campaign IDs. A campaign ID is used to identify campaigns that the user has already been in contact with.
With each call-up to one of the individual pages of this website, which is operated by the controller and on which a DoubleClick component was integrated, the Internet browser on the information technology system of the data subject is automatically prompted by the respective DoubleClick component to send data for the purpose of online advertising and billing of commissions to Google. During the course of this technical procedure, Google gains knowledge of any data that Google may use to create commission calculations. Among other things, Google may trace that the data subject has clicked on certain links on our website.
The data subject may, as stated above, prevent the setting of cookies through our website at any time by means of a corresponding adjustment of the web browser used and thus permanently deny the setting of cookies. Such an adjustment to the Internet browser used would also prevent Google from setting a cookie on the information technology system of the data subject. In addition, cookies already in use by Google may be deleted at any time via a web browser or other software programs.
Further information and the applicable data protection provisions of DoubleClick may be retrieved under DoubleClick by Google https://www.google.com/intl/de/policies/.
On this website, the controller has integrated “LeadInspector”. The integration of this service enables the statistical evaluation of visitor accesses onto this website.
The operating company of this service is Lead Inspector GmbH, Theodor-Heuss-Anlage 12, 68165 Mannheim, Germany.
The service places a so-called web beacon – also called web bug – onto the pages of this website. It records the IP address of the user and checks if it is a static IP address. Only static IP addresses are compared to publicly available information that enable the allocation of the IP address to a company. If an IP address can be allocated to a company, the use of our website will be evaluated in detail using cookies as described above. Despite the erasure of the last three digits of the IP address, this evaluation may nevertheless contain personal data.
The collection of data by Lead Inspector may be revoked at any time with immediate effect in the future under: www.leadinspector.de/widerspruch.
You will find further information about the functioning and data protection on the website of Lead Inspector GmbH under: www.leadinspector.de.
The legal basis for the processing of personal data is the regulation provided in point a) of art. 6 par. 1 of the General Data Protection insofar as msd steeldesign GmbH requests permission from the data subject.
If the processing of a data subject’s personal data is necessary for the initiation, performance or termination of a contract with the controller, the processing of such data is lawful pursuant to point b) of art. 6 par. 1 of the General Data Protection Regulation.
If the controller is subject to a legal obligation which makes the processing of personal data necessary, such processing is lawful pursuant to point c) of art. 6 par. 1 of the General Data Protection Regulation.
In rare cases, processing personal data is necessary in order to protect the vital interests of the data subject or of another natural person. This applies, for example, if the controller is aware that the data subject is injured and the controller needs to call for medical assistance. In such and similar cases, the processing of personal data is lawful pursuant to point d) of art. 6 par. 1 of the GDPR.
msd steeldesign GmbH is allowed to process personal data pursuant to point f) of art. 6 par. 1 0f the GDPR for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and liberties of the data subject which require protection of personal data. The execution of business activities for the benefit of our employees and our shareholders is a legitimate interest.
msd steeldesign GmbH explains explicitly that we are legally bound to provide personal data to some extent. This applies, for example, in relation to the tax law and contractual provisions. A contract with the controller can only be concluded if the necessary personal data of the person concerned is fully provided. If you have any questions concerning the basis and necessity of processing, you can contact the controller by any of the communication means stated above.
On this website, YouTube videos are incorporated using the interface provided by the operator of the YouTube service. Operator of the "YouTube" service is: YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. The operator is represented by Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA.
To use the functions of the "YouTube" service, it is necessary to transfer the IP address of the Internet connection used by the person concerned to YouTube, otherwise the included YouTube videos can not be delivered. The integration of the videos takes place to the appealing and easily understandable representation of the on-line and off-line offer. It is therefore in the legitimate interest of the service provider i.S. of Art. 6 (1) (f) of the GDPR.
For more information on the handling of personal data by YouTube and its authorized company as well as your rights as a data subject, please visit https://policies.google.com/privacy?hl=en&gl=de.
On this website directions are integrated by means of the interface provided by the operator of the service Google Maps. Operator of the "Google Maps" service is Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA.
In order to use the features of the "Google Maps" service, it is necessary to transfer the IP address of the Internet connection used by the data subject to Google, as otherwise the integrated access plans can not be delivered. The integration of the approach plans is carried out for an appealing presentation of the online and offline offer as well as the easy findability of our business premises. It is therefore in the legitimate interest of the service provider i.S. of Art. 6 (1) (f) of the GDPR.
For more information about how Google handles your personal information and your rights as the data subject, please visit https://policies.google.com/privacy?hl=en.
> Disable Google Analytics <