The operator of this site takes the protection of your personal data very seriously. We treat your personal data in confidence and in compliance with legal data protection provisions and this privacy statement.
When you use this website, various personal data are collected. Personal data are any data that can be used to identify you as a specific individual. This privacy statement explains what data we collect and what we use them for. It also explains how and for what purpose this is done.
The controller of the data processing on this website is the entity designated in the legal information.
2. Data capture on our website
Server log files
The provider of the sites collects and automatically saves information automatically transferred to us by your browser in so-called server log files. This information includes:
- Browser type and browser release
- Operating system used
- Referrer URL
- Host name of the accessing computer
- Time of the server query
- IP address
These data are not associated with other data sources. Basis for the data processing is point (f) of Art. 6 (1) GDPR.
The internet sites use so-called cookies in some situations. Cookies are small text files that are placed on your computer and saved by your browser. They serve to make our service more user friendly, more effective and safer.
Most of the cookies we use are so-called “session cookies.” They are automatically erased at the end of your visit. Other cookies (so-called “permanent cookies”) remain on your device until you erase them. These cookies enable us to recognise your browser when you return to our site for another visit.
If you make the appropriate settings in your browser, you will be notified whenever cookies are placed on your computer; you can allow them to be used only in a single case; you can allow cookies to be accepted in certain cases; you can generally prevent their use; or you can enable the automatic erasure of cookies when you close your browser. If cookies are blocked, the functionality of this website may be restricted.
Cookies that are required for the electronic communication process itself or for the provision of certain functions you wish to have (e.g. shopping cart function) are stored on the basis of point (b) or point (f) of Art. 6 (1) GDPR. Moreover, the website operator has a legitimate interest in the storage of cookies to ensure technically error-free and optimised provision of its services. In so far as other cookies (e.g. cookies for the analysis of your surfing activities) are stored, this will be discussed separately in this privacy statement.
If you use the contact form to send queries to us, we will store your material information, including the contact data you have entered, for the purpose of processing the query and so that we can answer any subsequent questions. We keep the data you enter in the contact form until you ask us to erase them or the purpose of the data storage ceases to exist (e.g. once your query has been finally processed). This is without prejudice to mandatory statutory provisions, especially legal retention periods.
The processing of the data entered in the contact form is based on point (b) of Art. 6 (1) GDPR in so far as it concerns a concrete query about an engagement or an order transaction or on point (f) of Art. 6 (1) GDPR for all other general queries.
3. Data protection officer
Legally mandated data protection officer
We have appointed a data protection officer for our company.
Kesseböhmer Holding KG
Mindener Strasse 208
49152 Bad Essen
Phone: +49 (5742) 46-0
4. Transfer of data to third parties
We transfer your data to third parties who support us in the operation of our website. In so far as this takes place within the scope of contact processing pursuant to Art. 28 GDPR, our service provider processes your data in accordance with our instructions and the pertinent contractual obligations. We are currently using CleverReach as our service provider for the issue of our newsletter (more about this in part 5).
Transfer of data to third countries
In some cases, we transfer personal data to third countries outside of the EU. In each of these cases, we have taken steps to ensure there is an adequate level of data protection.
In the case of YouTube and Google (USA), an adequate level of data protection is provided by participation in the Privacy Shield Framework (Art. 45 (1) GDPR). Additional information can be found in part 6.
If you would like to subscribe to the newsletter we offer on the website, we need from you an email address along with information that will enable us to verify that you are the owner of the entered email address and are in agreement with the receipt of the newsletter. No other data are collected, or they are collected solely on a voluntary basis. We use these data exclusively to send the requested information and do not transfer them to any third parties other than our service provider (see below).
The processing of the data entered in the newsletter registration form is based exclusively on your consent (point (a) of Art. 6 (1) GDPR). You may at any time withdraw your consent to storage of the data, the E-mail address and their use for the transmission of the newsletter by clicking on the “Unsubscribe” link in the newsletter (for instance). The withdrawal of your consent is without prejudice to the lawfulness of the previous data processing.
6. Additional plugins and tools
Our website uses plugins from the YouTube site, which is operated by Google. The operator of the sites is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA.
When you visit one of our pages that has been equipped with a YouTube plugin, a connection to the YouTube servers is established. At this time, information about which of our pages you have visited is transmitted to the YouTube server.
If you are logged in to your YouTube account at this time, you enable YouTube to attribute your surfing activities directly to your personal profile. You can prevent this by first logging out of your YouTube account.
YouTube is used in the interest of providing an appealing presentation of our online services. This represents a legitimate interest within the sense of point (f) of Art. 6 (1) GDPR.
You will find more information about the handling of user information in YouTube’s privacy statement: https://www.google.de/intl/de/policies/privacy.
Google web fonts
This site uses so-called web fonts provided by Google so that the appearance of the typefaces is consistent. When a page is accessed, your browser loads the required web fonts into the browser cache so that texts and typefaces are displayed correctly.
To do this, the browser you are using must establish a connection to the Google servers. As a consequence, Google becomes aware that our website has been accessed via your IP address. Google web fonts are used in the interest of providing an appealing and consistent presentation of our online services. This represents a legitimate interest within the sense of point (f) of Art. 6 (1) GDPR.
If your browser does not support web fonts, a standard font from your computer will be used.
You will find additional information about Google web fonts at https://developers.google.com/fonts/faq and in Google’s privacy statement: https://www.google.com/policies/privacy/.
This site utilises an API to provide the map service from Google Maps. The provider is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
The Google Maps functions cannot be used without storage of your IP address. As a rule, this information is transferred to a Google server in the USA and stored there. The provider of this site does not have any control over this data transmission.
We use Google Maps in the interest of an attractive display of our online services and to enable users to find the locations shown on this website easily. This represents a legitimate interest within the sense of point (f) of Art. 6 (1) GDPR.
You will find more information about the handling of user information in Google’s privacy statement: https://www.google.de/intl/de/policies/privacy/.
However, as we have activated IP anonymisation on this website, your IP address will be truncated by Google beforehand within member states of the European Union or other parties to the agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the US and shortened there.
Google will use this information on our behalf for the purpose of evaluating your use of our websites, compiling reports on activity on the websites, and providing us with other services relating to website activity and internet usage. The IP address of your browser provided by Google Analytics as part of the service will not be merged with other Google data.
You can prevent the storage of cookies by adjusting your browser software; however, please note that if you do this, you may not be able to use all the features of this website to the fullest extent. Furthermore, you can prevent Google collecting the data generated by the cookie and related to your use of the website (including your IP address) as well as the processing of this data by Google by downloading and installing a browser plug from the following link (http://tools.google.com/dlpage/gaoptout?hl=en).
7. Your rights as a user
Withdrawal of your consent to data processing
Certain data processing activities are possible solely with your express consent. You may withdraw any consent previously given at any time by sending us an informal message by email. The withdrawal of your consent is without prejudice to the lawfulness of the previous data processing.
Right to complain to the competent supervisory authority
In the event of infringements on data protection law, the data subject has the right to lodge a complaint with the competent supervisory authority. The competent supervisory authority for data law protection issues is the state data protection officer of the German state in which our company has its headquarters. A list of data protection officers and their contact data is available at the following link https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.
Right to data portability
You have the right to obtain for yourself data that we automatically process on the basis of your consent or during the performance of a contract or to transmit them to a third party in a commonly used, machine-readable format. In so far as you request the direct transmission to another controller, this will be done only to the extent that it is technically feasible.
SSL and TLS encryption
We caution you that the transmission of data via the internet (e.g. in unencrypted email communications) can be vulnerable to security breaches. Seamless protection of the data from third-party access is not possible.
For this reason, this site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential information such as orders or queries that you send to us as the site operator. You can recognise an encrypted connection by a change from “http://” to “https://” in the browser’s address bar and the lock icon in your browser navigation bar.
Whenever the SSL or TLS encryption has been activated, third parties cannot read the data you have transmitted to us.
Access, restriction, erasure
In accordance with applicable legal provisions, you have at any time the right to obtain free of charge information about your personal data that have been stored, their origin and recipients, the purpose of the data processing and, as applicable, a right to rectification, restriction or erasure of these data. If you have any further questions on the subject of personal data, you may contact us at any time by writing to the address shown in the legal information.