Privacy

I. Name and address of the Controller

The controller in the meaning of the General Data Protection Regulation, the Federal Data Protection Act (BDSG) and the service provider in the meaning of section 13 Telemedia Act (TMG) is:

LTT Liesen-Tooling-Technology GmbH Obermarkt 24, 04720 Döbeln info@ltt-liesen.com

II. General information on data processing

1. Scope of processing for personal data 

As a rule, we collect and use personal data from our users only where it is necessary to provide a functional website, our contents and especially our services. The collection and use of personal data from our users ordinarily take place only with their consent. An exception applies in cases in which it is impossible to obtain prior consent and the processing of personal data is permitted by law.

2. Legal grounds for the processing of personal data

Where we obtain consent from the data subject for the processing of personal data, the legal grounds are set out in Art. 6 paragraph 1 point (a) EU General Data Protection Regulation. Where personal data is processed for the performance of a contract in which the data subject is a contractual partner, the legal grounds are set out in Art. 6 paragraph 1 point (b) GDPR. This applies also to processing that is necessary for the performance of measures prior to entering into a contract. Where personal data is processed for compliance with a legal obligation to which our research centre is subject, the legal grounds are set out in Art. 6 paragraph 1 point (c) GDPR. Where processing of personal data is necessary for the protection of vital interests of the data subject or another natural person, the legal grounds are set out in Art. 6 paragraph 1 point (d) GDPR. Where processing is necessary for protection of the legitimate interests of our company or a third party, and where the fundamental rights and freedoms of the data subject do not override the first interests, the legal grounds are set out in Art. 6 paragraph 1 point (f) GDPR.

3. Data erasure and duration of storage

Die personenbezogenen Daten der betroffenen Person werden gelöscht oder gesperrt, sobald der Zweck der Verarbeitung entfällt. Eine Speicherung kann darüber hinaus erfolgen, wenn dies durch den europäischen oder nationalen Gesetzgeber in unionsrechtlichen Verordnungen, Gesetzen oder sonstigen Vorschriften, denen der Verantwortliche unterliegt, vorgesehen wurde. Eine Sperrung oder Löschung der Daten erfolgt auch dann, wenn eine durch die genannten Normen vorgeschriebene Speicherfrist abläuft, es sei denn, dass eine Erforderlichkeit zur weiteren Speicherung der Daten für einen Vertragsabschluss oder eine Vertragserfüllung besteht.

III. Provision of the website and generation of log files

1. Description and scope of data processing

Our system automatically collects data and information from the accessing computer system each time our website is visited.  The following data is collected in this context

- The user's operating system
- The user's IP address (anonymised)
- Date and time of access
- Websites from which the user's system accessed our Internet presence 

The data will also be stored in the log files on our system. This data is not stored together with other personal data concerning the user.

2. Legal grounds for data processing

The legal grounds for temporary storage of the data and log files are set out in Art. 6 paragraph 1 point (f) GDPR. Where processing of personal data is necessary for compliance with a legal obligation, especially with a law to which we are subject, Art. 6 paragraph 1 point (c) GDPR shall be the legal basis. Where processing is necessary for protection of a legitimate interest of our company or a third party, and where the fundamental rights and freedoms of the data subject do not override the first interests, the legal grounds for processing shall be Art. 6 paragraph 1 point (f) GDPR (e.g. defence in cases of legal disputes, the exercise of claims etc.).

3. Purpose of data processing

Temporary storage of the IP address by our system is necessary to deliver the website to the computer of the user. For this purpose, the user’s IP address must be stored for the duration of the session. Storage in log files takes place to ensure functionality of the website. In addition, the data is used to optimise the website and to ensure security of our information technology systems. Data analysis for marketing purposes does not take place in this context. These purposes constitute our legitimate interests in data processing according to Art. 6 paragraph 1 point (f) GDPR.

4. Duration of storage

The data is erased as soon as it is no longer necessary for the purpose of its collection. In the case of data collection for the provision of this website, this applies at the end of each session. This is the case after no longer than seven days after storage of the data in log files. Additional storage is possible takes place exclusively in an anonymised form for the duration of the contractual relationship with the server provider.

5. Objection and rectification

The collection of data for the provision of our website and the storage of data in log files is crucial to operation of the website. Hence, users are not granted a right to object.

IV. Use of cookies

1. Description and scope of data processing

Our website uses cookies. Cookies are text files that are placed on the computer system by a browser on in the browser itself and stored there. When a user accesses a website, a cookie may be stored on the operating system of the user. It contains a unique sequence of characters to enable direct identification of the browser if the user returns to the website.  Our cookies are intended to make our website easier to use. Some elements on our website make it necessary to recognise the accessing browser when moving from page to page.

2. Legal grounds for data processing

The legal grounds for the processing of personal data by means of cookies are set out in Art. 6 paragraph 1 point (f) GDPR. We have a legitimate interest in the use of cookies in order to increase the attractiveness of our website and to measure their reach.

3. Zweck der Datenverarbeitung

Technically necessary cookies are used to simplify use of our website for visitors and to increase its attractiveness. Some functions on our website cannot be provided without the use of cookies, as they require that the browser is recognised when moving from page to page. The usage data collected with technically necessary cookies does not serve to create user profiles These purposes constitute our legitimate interests in data processing according to Art. 6 paragraph 1 point (f) GDPR.

4. Duration of storage, right of objection and deletion option

Cookies are stored on the user's computer, which transmits them to our website. As the user, you can therefore control the use of cookies. You can disable or restrict the use of cookies by making appropriate adjustments to the settings of your browser. Cookies that have already been stored can be deleted at any time. This can also be managed automatically. Where the use of cookies is disabled for our website, some of its functions may no longer be available in full.

V. Use of WP Statistics

1. Description and scope of data processing

We use the plug-in WP Statistics on our website. This purpose of this plug-in is to compile statistical analyses on access to our website by visitors. The IP address collected when accessing our website (see above under III. 1.) is anonymised during statistical analysis, prior to storage as a local copy on the server of the website. No user profiles are created. 

2. Legal grounds for data processing

The legal grounds for the processing of this data are set out in Art. 6 paragraph 1 point (f) GDPR.

3. Purpose of data processing

We process this data to compile statistics on the use of our website and to adapt it to the requirements of our users where necessary.

4. Duration of storage, right of objection and deletion optiont

The data no longer constitutes personal data as it is anonymised upon collection and is exclusively available in this form, so it is stored permanently until further notice. A right of objection or a deletion option do not exist either, as the stored data is exclusively available in an anonymised form.

5. Recipients of your data

Employees at our company shall only be granted access to your data where this is necessary for compliance with contractual and/or legal obligations, so if they are entrusted with contractual fulfilment. This may include the service providers or vicarious agents contracted by us, especially the external data protection officer who is personally assigned to you immediately upon placing an order. In addition, we cooperate with service providers who may receive personal data from us, depending on the type of processing, and who shall process this data according to our instructions. These service providers are: -  web hoster: Alphahosting GmbH, Ankerstraße 3b, 06108 Halle (Saale)

6. Duration of storage, right of objection and deletion option

Processing and storage of this data shall only continue for as long as is necessary for performance of our contractual obligations. Additional processing may be necessary where legal requirements apply, e.g. statutory retention periods, or where continued storage is in our legitimate interests, e.g. for the safekeeping of evidence within statutory limitation periods.

VI. Your rights

Where your personal data is processed, you are the data subject in the meaning of the GDPR and you are entitled to assert the following rights toward the controller:

1. Right to information

You have the right to obtain from the controller confirmation as to whether or not personal data concerning you is being processed.

2. Right to rectification

You have the right to obtain the rectification/completion of your data by the controller where inaccurate or incomplete personal data concerning you is processed. The controller must perform rectification without undue delay.

3. Right to the restriction of processing

You have the right to obtain restriction of processing of personal data concerning you. Where processing of personal data concerning you has been restricted, such personal data shall, with the exception of storage, only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.

4. Right to erasure

You have the right to obtain from the controller the erasure of personal data concerning you without undue delay and the controller shall have the obligation to erase personal data without undue delay. Where the controller has made the personal data concerning you public and is obliged pursuant to Art. 17 paragraph 1 GDPR to erase the personal data, the controller, taking account of available technology and the cost of implementation, shall take reasonable steps, including technical measures, to inform controllers which are processing the personal data that you as the data subject have requested the erasure by such controllers of any links to, or copy or replication of, those personal data.

5. Right to notification

Where you have exercised the right to obtain from the controller the rectification or erasure of personal data or restriction of processing, the controller shall be obliged to inform each recipient to whom the personal data have been disclosed of this notification of rectification or erasure of personal data or restriction of processing, unless this proves impossible or involves disproportionate effort. You have the right to receive information from the controller concerning the recipients of your personal data.

6. Right to data portability

You have the right to receive the personal data concerning you, which you have provided to a controller, in a structured, commonly used and machine-readable format.

7. Right to object

You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (e) or (f) of Article 6 paragraph 1 GDPR, including profiling based on those provisions.  The controller shall no longer process the personal data unless the controller demonstrates compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims  Where personal data is processed for direct marketing purposes, you shall have the right to object at any time to processing of personal data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing.  Where you object to processing for direct marketing purposes, the personal data shall no longer be processed for such purposes.  In the context of the use of information society services, and notwithstanding Directive 2002/58/EC, you may exercise your right to object by automated means using technical specifications.

8. Right to withdraw your declaration of consent under data protection laws

You have the right to withdraw at any time your declaration of consent under data protection laws. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

9. Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with a supervisory authority where you believe that the processing of personal data concerning you is in violation of applicable law. The supervisory authority for data protection at your habitual place of residence shall be competent.