Data Privacy Policy

Important Notice

This is a translated version of our German Data Privacy Policy and is provided for your convenience. The original German version of this document is the official version and will govern our relationship.

Data Privacy Policy pursuant to EU General Data Protection Regulation (GDPR)

We appreciate your interest in our website and our company. Kabeltechnik Mathuse GmbH takes the privacy of your personal data very seriously. Data Privacy is a matter of trust, and your trust is important to us. The protection and lawful collection, processing and use of your personal data is very important to us. We want you to know when we collect what data and how we use it.

1. Name and address of the responsible controller

The responsible controller as defined in the EU General Data Protection Regulation (GDPR) pursuant to Art. 4 (7) GDPR and within the meaning of the Federal Data Protetection Act is:

Kabeltechnik Mathuse GmbH
Bachstraße 4
23909 Ratzeburg, Germany

Tel.: +49 (0) 4541 / 85 93 120
Internet: www.kabeltechnik-mathuse.com
e-mail: info[at]kabeltechnik-mathuse.com

For further information please see our imprint.

2. General information on data processing

2.1. Processing of personal data and its scope

We collect and use the personal data of our users insofar as necessary for operating a functional website and delivering our content and services, and to the extent to which the law permits.

The processing of personal data of our users takes place regularly only after consent of the user. An exception applies in those cases where prior consent cannot be obtained for real reasons and the processing of the data is permitted by law.

2.2. Legal basis for processing personal data

Whenever we obtain the consent from a data subject to process personal data, Art. 6 (1 a) GDPR serves as the legal basis for processing this personal data.

In the event that processing of personal data is required for contract compliance involving the data subject as the contractual partner, the processing of data is based on art. 6 (I) lit. b GDPR. The same legal basis also covers processing procedures needed to carry out pre-contractual measures, e.g. upon queries concerning our products and/or services.

Whenever processing such data is necessary for compliance with a legal regulation, to which the Kabeltechnik Mathuse GmbH is subject, Art. 6 (1 c) GDPR serves as the legal basis.

In cases for which processing is necessary to protect the vital interests of the data subject or of another natural person, Art. 6 (1 d) GDPR serves as the legal basis.

If processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Kabeltechnik Mathuse GmbH, Art. 6 (1 e) GDPR serves as the legal basis for processing this data.

If processing is necessary for safeguarding the legitimate interests of the Kabeltechnik Mathuse GmbH or of a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject, Art. 6 (1 f) GDPR serves as the legal basis for processing this data. This does not apply to processing tasks which the Kabeltechnik Mathuse GmbH is obliged to perform as a public authority.

A legitimate interest could be assumed, if the data subject is a customer of the person responsible (Recital 47 sentence 2 GDPR).
If the processing of any personal data takes place on the basis of art. 6 (1) lit. f GDPR, our legitimate interest will be the performance of our business activity.

2.3. Duration of storage and deletion of personal data

We reserve the right to retain the data subject’s personal data for as long as the purpose of such storage exists. If processing is permitted on the basis of the subject’s consent, his/her personal data is only stored until the data subject withdraws his/her consent, except in cases where processing is governed by a different legal basis.

3. Provision of the website and creation of log files

3.1. Hosting and operation of the website

The hosting services we use serve to provide the following services: infrastructure and platform services, computing capacity, storage and database services, security services and technical maintenance services that we use to operate the website.

In doing so, we or our hosting provider process inventory data, contact data, content data, contract data, usage data, meta- and communication data of customers, interested parties and visitors to this website on the basis of our legitimate interests in an efficient and secure provision of our website in accordance with Art. 6 Para. 1 S. 1 f) GDPR in conjunction with Art. 28 GDPR.

In the context of contract processing, the data is stored on the servers of the Kabeltechnik Mathuse GmbH and of the hosting providers: Host Europe GmbH, Hansestrasse 111, 51149 Köln, Germany ( for domain www.kabeltechnik-mathue.com) and STRATO AG, Pascalstraße 10, 10587 Berlin, Germany (for domain www.kamaflex.com).

An order processing contract has been signed with the hosting providers.

3.2. Scope of data processing

For every access query to our website, our server automatically collects data and information from the querying computer system.

The following data is collected in this process:

  • information on the browser type and version
  • the user’s operating system
  • the user’s Internet service provider
  • the user’s IP address
  • the date and time of the query
  • websites from which the user’s system was directed to our website
  • websites which the user’s system accesses via our website

This data is compiled in log files and saved on our server. No further personal data is stored together with the log file data.

3.3. Legal basis for processing

The legal basis for temporarily processing data and log files is provided in Art. 6 (1 f) GDPR.

3.4 Purpose of processing

The temporary storage of the IP address on our server is necessary for granting the user’s system access to our website. For this purpose, the user’s IP address must remain stored on our server for the duration of the session.

Data storage in log files is required to ensure the functionality of the website. Furthermore, the data enables us to optimize the website and guarantee the security of our IT systems. Data analysis for marketing-related purposes is not performed in this context.

These purposes correspond to the legitimate interests of data processing as indicated in Art. 6 (1 f) GDPR.

3.5. Duration of storage of personal data

The data is erased at the conclusion of the respective session.

All data stored in log files is erased within seven days. A longer period of data storage is possible. In such cases, the user’s IP address is erased or anonymized in such a way that renders it impossible to identify the querying client.

3.6. Possibility of objection and elimination

The collection of data for the provision of the website and the storage of data in log files is absolutely necessary for the operation of the website. Consequently, there is no possibility of objection on the part of the user.

4. Contact form and contact via email

4.1. Processing of personal data and its scope

There is a contact form on our website which can be used for electronic contact. If a user takes advantage of this possibility, the data entered in the input mask will be transmitted to us and stored. This data is:

  • first name,
  • last name,
  • company,
  • department,
  • address (street, house number, postcode, city, country),
  • e-mail address, fax, telephone,
  • subject,
  • message.

At the time the message is sent, the user’s IP address and the date and time of transmission are also stored.

User´s consent is obtained for the processing of the data within the scope of the sending process and reference is made to this data protection policy.

Alternatively, you can contact us via the e-mail address provided. In this case, the user’s personal data transmitted by e-mail will be stored.

The user’s personal data is not shared with third parties in this context . The data is used exclusively for processing the query/conversation/maintaining contact with the user.

4.2. Legal basis for processing

The legal basis for the processing of the data is Art. 6 (1 a) GDPR if the user has given his/her consent.

The legal basis for processing the user’s personal data, acquired as a result of the user sending an email, is provided in accordance with Art. 6 (1 f) GDPR.

If the e-mail contact aims at the conclusion of a contract, then additional legal basis for the processing is Art. 6 (1 b) GDPR. User data may be stored in a Customer-Relationship-Management System (“CRM System”) or comparable contact request system.

4.3. Purpose of processing

The processing of the personal data from the input mask serves us only for the treatment of the establishment of contact. In the event of contact by e-mail, this also constitutes the necessary legitimate interest in the processing of the data.

The other personal data processed during the sending process serve to prevent misuse of the contact form and to ensure the security of our information technology systems.

4.4. Duration of storage of personal data

The data will be deleted as soon as they are no longer necessary to achieve the purpose for which they were collected. For the personal data from the input mask of the contact form and those sent by e-mail, this is the case when the conversation with the user is finished. The conversation is terminated when it can be inferred from the circumstances that the facts in question have been finally clarified. We delete the requests if they are no longer necessary. Furthermore, the statutory archiving obligations shall apply.

The additional personal data collected during the sending process will be deleted after a period of seven days at the latest.

4.5. Possibility of objection and elimination

The user has the possibility to revoke his consent to the processing of personal data at any time. If the user contacts us by e-mail, he can object to the storage of his personal data at any time. In such a case, the conversation cannot be continued.

The revocation of the consent and the objection of the storage can be submitted by simple text message by letter or e-mail to us.

All personal data stored in the course of contacting us will be deleted in this case.

5. Postal advertising and your right to object

Furthermore, we reserve the right to use your first and last name as well as your postal address for our own advertising purposes, i.e. to send interesting offers and information about our products via mail. This serves to safeguard our legitimate interests in an advertising approach to our customers in accordance with Article 6 (1 f) GDPR, which dominate in the context of conflicting interests.

You can object to the storage and use of your data for these purposes at any time by sending a message to the contact above-mentioned with reference to data protection.

6. Credit assessment by service providers

In case of justified interest (e.g. purchase on account) and for the purpose of our own credit check, creditworthiness information is collected and stored by us.

Information can be obtained from the following credit agency : Creditreform Lübeck von der Decken KG, Zeißstraße 6, D-23560 Lübeck, Germany.

The legal basis for the credit assessment is Art. 6 ( 1 f) GDPR.

The following data is transmitted to the credit agency:

  • First name
  • Surname
  • Address.

7. Forwarding to services of third parties

This data protection statement applies only to our websites and their subpages. Our websites may contain links to other providers to whom this declaration does not apply.

When you leave our website via a link, we recommend that you read carefully the data privacy policy of each website that collects personal data.

Our web pages contain links to internet offers of external providers. The content of the internet offers of external providers were checked by us when setting the link as to whether they violate applicable laws under civil or criminal law. However, it cannot be ruled out that these contents may be subsequently changed by the respective providers. If you believe that linked external sites violate applicable law or have other inappropriate content, please let us know. We will check your reference and remove the external link if necessary. Kabeltechnik Mathuse GmbH is not responsible for the content and availability of linked external web pages.

8. Rights of the data subject

If Kabeltechnik Mathuse GmbH processes your personal data, you are a data subject according to Article 4 (1) GDPR with the following rights against Kabeltechnik Mathuse GmbH:

8.1. Right to disclosure

According to Article 15 GDPR the data subject has the right to obtain confirmation from the Kabeltechnik Mathuse GmbH whether it is processing any personal data concerning him or her. If such is the case, the data subject has a right to information regarding the type of personal data and the purpose for which it is being processed. You can request the following information from us:

  • the processing purposes;
  • the categories of personal data we process;
  • the recipients or categories of recipients to whom we have disclosed or will disclose your personal data;
  • the planned duration (where applicable) for which we store your personal data or, if this is not possible, the criteria for determining the storage period;
  • the existence of a right to have your personal data corrected or deleted, a right to have processing restricted by us or a right to object to such processing;
  • the existence of a right of appeal to a supervisory authority;
  • any available information about the origin of the data, unless the personal data has been collected from you;
  • the existence of automated decision-making, including profiling (Article 22 (1) and Article 22 (4) GDPR) and – at least in these cases – meaningful information on the logic involved and the scope and intended effects of such processing for you.

You have the right to request information as to whether the personal data concerning you is transferred to a third country or to an international organization. In this context, you may request to be informed about the appropriate guarantees according to Article 46 GDPR with regards to the transmission.

8.2. Right to correction

In accordance with Article 16 of GDPR, you have a right of rectification and/or completion vis-à-vis the data controller if the personal data processed concerning you are incorrect or incomplete. The person responsible shall make the correction without delay.

8.3. Right to limitation of processing

Under the following conditions, you can request the restriction of the processing of your personal data in according to Article 18 GDPR:

  • if you dispute the accuracy of your personal data for a set period of time that enables us to verify the accuracy of your personal data;
  • if the processing is unlawful and you refuse to delete the personal data and instead request that the use of the personal data be restricted;
  • if we no longer need your personal data for the purposes of processing, but you need it to assert, exercise or defend legal claims, or
  • if you have filed an objection to the processing according to Article 21 (1) GDPR and it is not yet clear whether our justified reasons outweigh your reasons.

If the processing of your personal data has been restricted, your data may only be processed – apart from being stored – with your consent or for the purpose of asserting, exercising or defending legal claims or protecting the rights of another natural or legal person or on grounds of an important public interest of the Union or a Member State.

If the restriction of processing has been restricted in accordance with the above conditions, you will be informed by us before the restriction is lifted.

8.4. Right to cancellation

8.4.1. Cancellation duty

In accordance with Article 17 of the GDPR, you may request us to delete personal data concerning you without delay and we are obliged to delete such data without delay if one of the following reasons applies:

  • Your personal data is no longer necessary for the purposes for which they were collected or otherwise processed it.
  • You revoke your consent, on which we base the processing according to Article 6 (1 a) GDPR or Article 9 (2 a) GDPR and there is no other legal basis for the processing.
  • You file an objection to processing according to Article 21 (1) GDPR and there are no overriding legitimate grounds for processing or you file an objection to processing according to Article 21(2) GDPR.
  • Your personal data has been processed unlawfully.
  • The deletion of your personal data is necessary to fulfil a legal obligation under union law or the law of the member states to which we are subject.
  • Your personal data has been collected in relation to information society services offered according to Article 8 (1) GDPR.

8.4.2. Information to third parties

If we have made your personal data public and we are obliged to delete it according to Article 17 (1) GDPR, we will take appropriate measures to inform the concerned data controllers who are responsible for the personal data that you as the data subject have requested the deletion of. This includes technical measures, taking into account which technical solutions are available and implementation costs.

8.4.3. Exceptions

The right to cancellation does not exist insofar as the processing is necessary

  • to exercise freedom of expression and information;
  • for the performance of a legal obligation required for processing under the law of the Union or of the Member States to which the controller is subject or for the performance of a task in the public interest or in the exercise of official authority conferred on the controller;
  • for reasons of public interest in the field of public health according to Art.9 (2 h and i ) and Art.9 (3) GDPR;
  • for archiving purposes in the public interest, scientific or historical research purposes or for statistical purposes pursuant to Art. 89 (1) GDPR, insofar as the right referred to in Section 8.4.1. is likely to make it impossible or seriously impair the attainment of the objectives of such processing, or
  • to assert, exercise or defend legal claims.

8.5. Right to information

If you have exercised your right to have the Kabeltechnik Mathuse GmbH correct, delete or limit the processing, the Kabeltechnik Mathuse GmbH is obliged under Article 19 GDPR to inform all recipients to whom the personal data concerning you have been disclosed of this correction or deletion of the data or restriction on processing, unless this proves impossible or involves a disproportionate effort.

We have the right to be informed of these recipients.

8.6. Right to data transferability

In accordance with Article 20 of the GDPR, you have the right to receive the personal data that you have provided to the Kabeltechnik Mathuse GmbH in a structured, current and machine-readable format. In addition, you have the right transmit this data to another person responsible without any hindrance by us, provided that

  • processing is based on consent pursuant to Art. 6 (1 a) GDPR or Art. 9 (2 a) GDPR or on a contract pursuant to Art. 6 ( 1 b) GDPR and
  • processing is carried out using automated methods.

In exercising this right, you also have the right to have your personal data transferred directly by us to another person responsible, insofar as this is technically feasible. The freedoms and rights of other persons must not be affected by this.

The right to data transferability shall not apply to the processing of personal data necessary for the performance of a task in the public interest or in the exercise of official authority conferred on us.

8.7. Right of objection

According to Article 21 GDPR, you have the right to object at any time to the processing of your personal data on the basis of Article 6 (1) (e) or (f) GDPR for reasons arising from your particular situation; this also applies to profiling based on these provisions. We no longer process the personal data concerning you, unlesswe can prove compelling reasons worthy of protection for the processing, which outweigh your interests, rights and freedoms, or the processing serves the assertion, exercise or defense of legal claims.

If the personal data concerning you are processed for direct marketing purposes, you have the right to object at any time to the processing of the personal data concerning you for the purpose of such advertising; this also applies to profiling, insofar as it is associated with such direct marketing.

If you object to the processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes. You have the possibility to exercise your right of objection in connection with the use of Information Society services, notwithstanding Directive 2002/58/EC, by means of automated procedures using technical specifications.

8.8. Right to withdrawal

If permission to process personal data was granted by the consent of the data subject, he or she may withdraw his/her consent at any time. Revoking your consent does not affect the legality of the processing based on your consent until revocation.

8.9. Automated decision in individual cases including profiling

According to Article 22 GDPR, you have the right not to be subject to a decision based exclusively on automated processing – including profiling – which has legal effect against you or significantly affects you in a similar manner. This does not apply if the decision

  • is necessary for the conclusion or performance of a contract between you and the person responsible,
  • the legislation of the Union or of the Member States to which the person responsible is subject is admissible and that legislation contains appropriate measures to safeguard your rights, freedoms and legitimate interests or
  • with your express consent.

However, these decisions may not be based on special categories of personal data pursuant to Art. 9 para. 1 GDPR, unless Art. 9 para. 2 lit. a or g GDPR applies and appropriate measures have been taken to protect your rights and freedoms and your legitimate interests.

In the cases referred to in (1) and (3), the person responsible shall take reasonable measures to safeguard your rights, freedoms and legitimate interests, including at least the right to obtain the intervention of a person by the person responsible, to state his own position and to challenge the decision.

8.10. Right of appeal to a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right of appeal to a supervisory authority, in particular in the Member State where you reside, work or suspect of infringement, if you believe that the processing of personal data concerning you is contrary to the GDPR.

The supervisory authority to which the complaint has been lodged shall inform the complainant of the status and results of the complaint, including the possibility of a judicial remedy under Article 78 GDPR.

The supervisory authority responsible for the Kabeltechnik Mathuse GmbH is the:

ULD – Unabhängiges Landeszentrum für Datenschutz Schleswig Holstein

Marit Hansen

Postfach 71 16
24171 Kiel, Germany

or:

Holstenstraße 98
24103 Kiel, Germany

Telefon:0431988-1200
Fax:0431 988-1223

E-Mail: mail@datenschutzzentrum.de

https://www.datenschutzzentrum.de

9. Data security

Kabeltechnik Mathuse GmbH conscientiously takes all technical and organisational precautions to protect personal data from loss, manipulation and unauthorised access. These precautions are in line with the current level of technical development.

Safety instructions: Please note that data transmitted via the internet (for example communication via e-mail) may be subject to security breaches. E-mails may be read or changed by unauthorised persons unnoticed during transmission. Complete data security can therefore not be guaranteed during communication by e-mail. We recommend that you send confidential information by post.

10. Updating and amending this Data Privacy Policy

This Data Privacy Policy is currently valid and was updated on May 2018.

Through the further development of our website or because of changes to the statutory regulations, it may be necessary to amend this Data Privacy Policy. We therefore recommend that you occasionally read it through again.

Data Privacy Policy – as at May 2018