Data Privacy Statement

1 – DATA PRIVACY STATEMENT

1.1 General information

The following notes will give you a simple overview on what happens with your personal data when you visit our website. Personal data are all data by which you be personally identified. For detailed information on the subject of data protection please refer to our data privacy statement specified under this text.

1.2 Data collection at our website
1.3 How can I reach you if I have questions regarding data privacy? Is there perhaps a concrete person to contact?
1.3.1 Responsible for data processing is:

Data processing at this website is undertaken by the website operator. For the operator’s contact data please refer to the legal notice of this website.

1.3.2 You can reach our data protection officer at:

If you have any questions regarding the processing of your personal data you can call on our group data protection officer who will, together with his team, be available to you also in cases of request for information, suggestions, or complaints.

Contact address: datenschutz@iso-gruppe.com

1.4 Are any of my personal data processed, and if so, how?

ISO is distinctly aware of the importance of your personal data. We take this responsibility seriously and consider it one of our most important tasks to  ensure the confidentiality of your data.

With this document we would like to meet our duties to inform in accordance with the General Data Protection Regulation and inform you about what kind of information we are collecting, how we are processing it, and how we are treating it.

Your data are collected at the one hand by you disclosing the same to us. This for example can be data that you enter into a contact form.

Other date are collected by our IT systems automatically during your visit at our website. These are first of all technical data (e.g. Internet browser, operating system, or time of the day of your page view). Collection of such data happens automatically as soon as you enter our website.

1.5 Why are you processing my data?

ISO utilizes your data for the following purposes: Some data are gathered to guarantee a correct provision of the website. Other data may be used to analyze your user behavior.

1.6 Do I have rights, and if so, what are they?

You are basically entitled to the rights to information by ISO about the personal data relating to you as well as to correction and deletion of data, or limitation of their processing and to revocation against processing as well as to data transferability.

Is the processing of your data based upon article 6 I, lit. a) of the GDPR, we would like to point out to the fundamental existence of your right to revoke your consent at any time without affecting the rightfulness of processing performed until revocation based on such consent.

Regarding this as well as any other questions on the subject of data protection you may at any time refer to datenschutz@iso-gruppe.com.

When you believe that processing of your data is violating data protection law, or your claims under data protection law have been infringed in any other way, you can appeal to supervisory authority.

1.7 Analytics tools and tools of third-party suppliers

During visiting our website your surf behavior can be statistically evaluated. This happens primarily by  cookies and so-called analytics programs. Analyzing of your surf behavior normally takes place in anonymized form; the surf behavior cannot be traced back to your person. You can object against such evaluation, or prevent it by not using certain tools. For details regarding this please refer to our data privacy statement under the headline “Third-party modules and analytics tools”.

You can object against such evaluation. In this data privacy statement we inform you about your  ways of revocation.

2 – GENERAL AND MANDATORY INFORMATION

2.1 Data protection

ISO as the operator of this website is attaching great importance to the protection of your personal data. We treat your personal data as confidential and in accordance with the applicable data protection legislation and this data privacy statement.

When you use this website various personal data are collected. Personal data are data by which you can be personally identified. The present data privacy statement explains what data we are gathering, and for what we are using them. It also explains how and for what purpose this happens.

Please note that data transmission via the Internet (e.g. communication by e-mail) may exhibit security gaps. Therefore a gapless protection of data against access by third parties is not possible.

2.2 Reference to responsible entity

Contact data you can find under the legal notice to this website.

2.3 Revocation of your consent to data processing

Many data processing operations are only possible with your express consent. You can revoke a consent granted at any time. For this purpose an informal note per e-mail to us will be sufficient. The rightfulness of processing performed until revocation remains unaffected by the revocation.

2.4 Right of appeal to the competent supervisory authority

In the event of violations of data protection law the person affected has a right to appeal to the competent supervisory authority. Competent supervisory authority for issues concerning data protection law is the state data protection officer of the federal state in which our company has its registered office. A list of data protection officers along with their contact data is available at the following link:

https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.

Right to data transferability

You have the right to have data we are processing automated on the basis of your consent or in performance of a contract delivered to you or to a third party in an established machine-readable format. Insofar as you require direct transmission of data to another responsible entity it will happen only as far as it is technically feasible.

2.6 Information, correction, deletion, limitation, revocation

Within the scope of the applicable statutory regulations you have at any time the right to information free of charge about your stored personal data, their origin and recipient, and the purpose of data processing etc. and – as the case may be – a right to correction, deletion, limitation of such data as well as to revocation.

Regarding this as well as any other questions on the subject of data protection you may at any time refer to datenschutz@iso-gruppe.com.

2.7 Objection against advertisement e-mails

The utilization of contact data published within the scope of the general information requirements of the e-commerce regulations for sending of not expressly requested advertisement and information materials is herewith opted out. ISO expressly reserves the right to take legal action in case of advertisement information, perhaps by spam e-mails received.

3 – DATA COLLECTION AT OUR WEBSITE

3.1 Cookies

Some of the Internet pages use so-called cookies. Cookies do not cause any damage to your computer and do not contain any viruses. Cookies serve the purpose of making our offer more user-friendly, effective, and safer. Cookies are small text files that are stored on your computer and memorized by your browser.

Most of the cookies used by us are so-called “session cookies”. They are automatically deleted after your visit has ended. Other cookies remain stored on your terminal device until you delete them. These cookies enable us to re-recognize your browser at your next visit.

You can set your browser so that you are getting informed about the setting of cookies and so that cookies will be allowed only in the individual case, so that the acceptance of cookies is excluded in certain cases or in general, and so that automated deletion of cookies is activated when the browser is closed. When cookies are deactivated the functionality of this website may be restricted.

Cookies that are required for the performance of the electronic communication process, or for the provision of certain functions wanted by you, are stored on the legal basis of article. 6, section 1, lit. f, GDPR. The website operator has a rightful interest in the storage of cookies for the technically faultless and optimized provision of its services. As far as other cookies (e.g. cookies for analyzing your surf behavior) are stored, they will be treated separately in this data privacy statement.

3.2 Server log files

The provider of the pages collects and stores information automatically in so-called server log files, which your browser transmits to us automatically. These are:

  • Browser type and browser version
  • Applied operating system
  • Referrer URL
  • Hostname of the accessing computer
  • Time of the server request
  • IP address

Any merging of these data with other data does not take place..

Legal basis for data processing is article 6, section 1, lit. b, GDPR that allows the processing of data for the performance of a contract or pre-contractual measures.

3.3 Contact form

When you send us inquiries per contact form your information provided via the contact form including your contact data you stated there are stored by us for the purpose of processing your inquiry and for the event of follow-up questions. We will not disclose such date without your consent.

Therefore processing of data entered into the contact form takes place exclusively on the basis of your consent (article 6, section 1, lit. a, GDPR). You can revoke such consent at any time. For this purpose an informal note per e-mail to us will be sufficient. The rightfulness of data processing operations performed until revocation remains unaffected by the revocation.

The data you entered into the contact form remain with us until you request us to delete the same, revoke your consent to the storage, or the purpose of data storage is no longer required (e.g. after completion of processing your inquiry). Statutory legal requirements – particularly retention periods – remain unaffected.

3.4 Registration at this website

You can register yourself at our website in order to use additional functions at the page. We will use the data so entered only for the purpose of utilizing the respective offer or service, for which you have registered. The mandatory information prompted during registration must be entered completely. Otherwise we will reject the registration.

In case of important changes, perhaps concerning the scope of offer, or in case of technically necessary changes we will use the e-mail address you stated during registration to inform you in this way.

Processing of data entered at registration takes place based on your consent (article. 6, section 1, lit. a, GDPR). At any time you can revoke a consent you have given. For this purpose an informal note per e-mail to us will be sufficient. The rightfulness of processing performed until revocation remains unaffected by the revocation.

The data collected at registration remain stored by us as long as you are registered at our website, and will be deleted thereafter. Legal retention periods remain unaffected.

3.5 Processing of customer and contract data

We collect, process, and use personal data only insofar as they are required for the creation, arrangement of contents, or change of the legal relationship (inventory data). This happens on the basis of article 6, section 1, lit. b, GDPR, that allows the processing of data for the performance of a contract or pre-contractual measures. We collect, process, and use personal data about the utilization of our Internet pages (usage data) only as far as it is necessary to enable the user to utilize the service and to invoice the user.

Collected customer data will be deleted after completion of the order, or upon termination of the business relationship. Legal retention periods remain unaffected.

3.6 Logon and SupportDB

User logon: Enter your e-mail address and your password to log on.

SupportDB: The system for collection and pursuit of change requests.

4 – ANALYTICS TOOLS AND ADVERTISEMENT

4.1         Google Analytics

This website uses functions of the web analyzer service Google Analytics. Provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Google Analytics uses so-called “cookies”. These are text files that are stored on your computer that enable to analyze the utilization of the website by you. Information about the use of this website generated by the cookie are normally transferred to a server at Google in the USA and stored there.

Storage of Google Analytics cookies takes place on the basis of article 6, section 1, lit. f, GDPR. The website operator has a rightful interest in analyzing the user behavior in order to optimize its web offer as well as its advertisement.

Browser plugin:

You can prevent the storage of cookies by corresponding settings of your browser software. However we would like to point out that in that case you will possibly not be able to use all functions of our website to the full extent. In addition you can prevent the collection of data relating to your usage of the website (including your IP address) generated by the cookie and the processing of such data by Google by downloading and installing the browser plugin available at the following link:

https://tools.google.com/dlpage/gaoptout?hl=de.

Objection against data collection:

You can prevent the collection of your data by Google Analytics by clicking at the following link. An opt-out cookie is set that prevents the collection of your data during future visits of this website: Deactivate Google Analytics.

More information on the handling of user data at Google Analytics you will find in the data privacy statement of Google: https://support.google.com/analytics/answer/6004245?hl=de.

Demographic characteristics at Google Analytics:

This website uses the function “demographic characteristics” of Google Analytics. Thereby reports can be generated that include statements on age, sex, and interests of the page visitors. Such data arise from interest-related advertisement of Google as well as from visitors’ data of third-party providers. The data cannot be allocated to a particular person. You can deactivate this function at any time via the  advertisement settings in your Google account, or prohibit the collection of your data by Google Analytics in general as described under the point “Objection against data collection”.

4.2         Other cookies

At our website we also use our own cookies (the functionality corresponds to the one described under 3.1 and 4.1), which are also serving the purpose of analyzing your user behavior at the website. A data transmission to  third countries or international organizations however does not take place.

That process starts at first with the anonymous capture of your user behavior and serves for the later allocatibility to your person and prepares the later collection and use of such data. As soon as you have filled in a contact form with us and declared your consent to “being contacted by staff members of the-Group regarding IT products and services per e-mail”, the system interlinks the data collected in the cookie with the personal data you have manually transmitted.

Once you have registered at our website the movement profiles will be stored and the respective sales organization receives a message telling that you are currently informing yourself at our website.

Storage of our cookies takes place on the basis of article 6, section 1, lit. f, GDPR. The website operator has a rightful interest in analyzing the user behavior in order to optimize its customer advice.

Browser plugin:

You can prevent the storage of cookies by corresponding settings of your browser software. However we would like to point out that in this way an optimum customer advise cannot be provided.

5 – NEWSLETTER

If you wish to subscribe to the newsletter offered at the website, we will need an e-mail address as well as some information from you that allows us to verify you as the owner of the specified e-mail address, and that you agree to receiving the newsletters. Other data will not be collected, respectively on voluntary basis only. We use such data solely for the transmission of the requested information and will not disclose the same to any third parties.

Processing of the data entered into the newsletter application form happens exclusively on the basis of your consent (article 6, section 1, lit. a, GDPR). You can revoke your consent to the storage of data and e-mail address as well as their usage for sending the newsletter at any time, perhaps via the “Sign-out” link on the newsletter. The rightfulness of data processing operations already performed remains unaffected by the revocation.

The data stored by us for the purpose of obtaining the newsletter are stored by us until you sign out from the newsletter and will be deleted after your cancellation of the newsletter. Data that have been stored by us for other purposes (e.g. e-mail addresses for the member area) remain thereof unaffected.

6 – PLUGINS AND TOOLS

6.1 Google Web Fonts

This page uses so-called web fonts provided by Google for the uniform presentation of character fonts. Upon selecting a page your browser is loading the required web fonts into your browser cache to enable the correct display of type fonts.
For that purpose the browser you are using must connect to the servers of Google. Hereby Google obtains knowledge of the fact that our website was recalled via your IP address. The usage of Google Web Fonts takes place for the benefit of a uniform and appealing presentation of our online offers. This represents a rightful interest in terms of article 6, section. 1, lit. f, GDPR.
If your browser does not support web fonts, a standard type font will be used by your computer.
Further information on Google Web Fonts you will find at https://developers.google.com/fonts/faq and in data privacy statement of Google: https://www.google.com/policies/privacy/.

6.2 Google Maps

This page uses the map service Google Maps via an AIP. Provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
For using the functions of Google Maps it is necessary to store your IP address. That information is normally transmitted to a server of Google in the USA and stored there. The provider of this page has no influence on that data transmission.
The usage of Google Maps takes place for the benefit of an appealing presentation of our online offers and for facilitated findability of places mentioned by us at the website. This represents a rightful interest in terms of article 6, section. 1, lit. f, GDPR.
Further information on the handling of user data you will find in data privacy statement of Google at:
https://www.google.de/intl/de/policies/privacy/.

7 – IS ISO AT ALL ALLOWED TO DO THAT, AND WHAT ARE THE CONSEQUENCES?

Data processing takes place on the basis of the statutory regulations, primarily of article 6, section 1, lit. a) (= consent) and/or of article 6 I, lit. b) (= performance of a contract concluded with you, or performance of pre-contractual measures at request), article 6, section 1, lit. c) (= compliance with a legal obligation), or lit. f) (= prevailing rightful interest of ISO) of the GDPR. The legal basis for the respective processing of your data  is mainly determined as follows:

  • Consent on your part to the processing of the relevant data for the purposes mentioned under 1.5.

As far as no consent by you is on hand:

  • Necessity of processing for the performance of legal obligations (in particular legal minimum retention periods)
  • Necessity of data processing for the performance of contract conclusions described under item 3.5 and/or for the performance of pre-contractual measures taking place in consequence of your inquiry, as well as
  • After termination of the contractual relationships: Necessity of processing for the protection of the rightful interests of ISO
    • For the supervision of post-contractual rights and duties resulting from the terminated contractual relationship, and
    • For the maintenance of the contract history for possible future business relationships with the respective entities. In that case personal data will only be processed restricted to your official functions at the respective entity.

In both of these cases the interests of ISO are prevailing over your interests or fundamental rights and fundamental freedoms requiring the protection of personal data.

7.1 What types of my personal data are you processing?
Affected groups of persons Categories of personal data
Contractual partners, persons to contact, and other persons required for the initiation and processing of contracts, particularly at

 

·         Customers, typically contact persons
·         Interested parties
·         Suppliers
·         Partners
·         Subcontractors

Regarding user logon:

 

·         E-mail
·         Password

Regarding registering for ISO-News (newsletter), additionally:

·         Sex (salutation)
·         First name and surname
·         Phone number
·         Interests for product segments

Regarding contact, additionally:

·         Company name
·         Country
·         Rights and duties resulting from the existence and termination of contractual relationships (as far as contractual partner is a natural person)
·         Other personal data, which you are providing to us (e.g. via the window “messages”)

Regarding SupportDB:

·         Company abbreviations
·         Employee abbreviations
·         Password
·         Language

Other data categories processed in analytics tools and third-party modules are directly disclosed in the context of the respective headlines of this data privacy statement.

7.2 Do you pass on such data to others?

Your data will be forwarded to the sales department for the purpose of sales (internally), and can be passed on to other member companies of the ISO Group for the purpose of centralized administration, as long as they have their registered office within the European Union and therefore, are subject to the same provisions under data protection law as our corporation.

Such groups of recipients are bound to treat those data in accordance with the pertinent data protection laws.

7.3 For how long will you be processing my data?

As far as legal minimum periods for the retention of certain data categories exist, deletion will not take place until the respective periods have elapsed at the earliest.

As far as the processing takes place within the scope of a contractual relationship, deletion will take place upon expiration of the limitation period regulated under § 199, German Civil Code (BGB), calculated from the day of termination of the respective contractual relationship. Notwithstanding the aforesaid deletion will take place upon expiration of the limitation period regulated under § 197, calculated from the day of termination of the respective contractual relationship as far as personal data are processed limited to official functions only at an entity mentioned under chapter 7.1.

As far as data processing takes place exclusively on the basis of your consent, data will be deleted insofar as you revoke your consent towards us.