Privacy Policy
I. Name and Address of the Controller
Controller in terms of the General Data Protection Regulation and other national data protection laws of the Member States as well as any other provisions under data protection law is:
Ceramany GmbH
Adlerstr. 4-8
58708 Menden
GERMANY
Telephone:+49 2373 9819700
Email: info@ceramany.com
Website: www.ceramany.com
II. General Information on Data Processing
1. Definitions
Our Privacy Policy is intended to be simple and easy to understand for everyone. As a rule, the official terms of the General Data Protection Regulation (GDPR) are used in this Privacy Policy as well. The official definitions are explained in Art. 4 GDPR.
2. Scope of Personal Data Processing
Basically, we collect and use personal data of our users only where this is required to provide a functional website as well as our contents and services. Personal data of our users is collected and used regularly only after the user has given his or her consent. An exception applies in cases where prior consent cannot be obtained for factual reasons and processing of the data is permitted under statutory regulations.
3. Legal Basis for Personal Data Processing
Where we obtain any consent from the data subject for methods of personal data processing, Art. 6(1) Point an EU General Data Protection Regulation (GDPR) serves as a legal basis for the processing of personal data.
If processing personal data is necessary for the performance of a contract to which the data subject is party, point (b) of Art. 6(1) GDPR serves as a legal basis. This also applies to processing methods required to take steps prior to entering into a contract.
Where any processing of personal data is necessary for compliance with a legal obligation to which our company is subject, point (c) of Art. 6(1) GDPR serves as a legal basis.
Where the processing is necessary for the purposes of a legitimate interest pursued by our company or by a third party, except where such interest is overridden by the interests or fundamental rights and freedoms of the data subject, point (f) of Art. 6(1) GDPR serves as legal basis for such processing.
4. Data Erasure and Retention Period
The data subject’s personal data will be erased or blocked once the purpose of retention ceases to be relevant. In addition, data may be retained if this is provided for by the European or national legislator in legal EU regulations, laws or other regulations to which the controller is subject. The data will also be blocked or erased once a retention period prescribed by the aforementioned norms expires, unless further retention of the data is required for the conclusion or performance of a contract.
III. Provision of the Website and Creation of Log Files
1. Description and Scope of Data Processing
Each time our website is accessed, our system automatically collects data and information from the computer system of the accessing computer.
The following data is collected:
(1) the user’s IP address
(2) information on the browser type and the version used
(3) accessed website
(4) access date and time
(5) status of return (successful retrieval, error, ...) and transferred data volume
(6) websites from which the user’s system accesses our website
This data is likewise retained in the log files of our system. This data is not retained together with any other personal data of the user.
2. Legal Basis for Data Processing
Legal basis for temporary data retention is point (f) of Art. 6(1) GDPR.
3. Purpose of Data Processing
The temporary storage of the IP address by the system is necessary to allow for the website to be delivered to the user’s computer. To this end, the user’s IP address must remain stored for the duration of the session.
It is stored in log files to ensure the functionality of the website. Moreover, the data serves us to optimise the website and to ensure the security of our IT systems. The data is not evaluated for any marketing purposes in this context.
Such purposes also constitute our legitimate interest in data processing pursuant to point (f) of Art. 6(1) GDPR.
4. Retention Period
The data will be erased once it is no longer required to achieve the purpose of its collection. Where any data is captured to provide the website, it will be erased once the respective session has been terminated.
5. Objection and Elimination Option
Capturing the data to provide the website and to retain the data in log files is absolutely necessary to ensure the operation of the website. Consequently, the user has no option to object.
IV. Use of Cookies
1. Description, Scope and Purpose of Data Processing
The websites use cookies at several points. These serve to make the website more user-friendly, more effective and safer. Cookies are small text files that are placed on your computer and stored by your browser. Cookies neither harm your computer nor contain any viruses. Where cookies are disabled for our website, it might no longer be possible to use all functions of the website in full.
We use the following cookies:
(1) Session cookies:
These will be automatically deleted after the end of your access to the website.
2. Legal Basis for Data Processing
The legal basis for the processing of personal data using cookies is point (f) of Art. 6 (1) GDPR.
V. Contact Form and E-Mail Contact
1. Description and Scope of Data Processing
The contact form on our website can be used to contact us electronically. If a user makes use of this option, the data entered into the input screen will be transferred to us and retained.
We will obtain your consent to process the data in the course of the sending process while referring to this Privacy Policy.
Alternatively, we can be contacted using the e-mail address provided. In this case, the user’s personal data transmitted with the e-mail will be retained.
The data is not shared with any third parties in this context. The data is exclusively used to process the conversation.
2. Legal Basis for Data Processing
Legal basis for processing the data where the user has given his or her consent is point (a) of Art. 6(1) GDPR.
Legal basis for processing the data transferred in the course of sending an e-mail is point (f) of Art. 6(1) GDPR. If the e-mail contact is aimed at concluding a contract, additional legal basis for the processing is point (b) of Art. 6(1) GDPR.
3. Purpose of Data Processing
Processing of the personal data from the input mask only serves us to handle the contact established. Any contacting by e-mail is also the necessary legitimate interest in processing the data.
The other personal data processed during the sending process serves to prevent any abuse of the contact form and to ensure the security of our IT systems.
4. Retention Period
The data will be erased once it is no longer required to achieve the purpose of its collection. For personal data from the input screen of the contact form and that sent by e-mail, this is the case when the relevant conversation with the user ends. The conversation is deemed terminated once it can be seen from the circumstances that the relevant issue has been resolved conclusively.
5. Objection and Elimination Option
The user may withdraw at any time his or her consent to the personal data being processed. If the user contacts us by e-mail, her or she may object to the retention of his or her personal data at any time. In such a case, the conversation cannot be continued.
The notice of objection needs to be sent by letter mail to the contact data set out above.
All personal data retained in the course of contacting will be erased in this case.
VI. Rights of the Data Subject
Where any personal data concerning you is processed, you are the data subject in terms of the GDPR and you have the following rights towards the controller:
1. Right of Access
You may obtain from the controller confirmation as to whether or not any personal data concerning you is being processed by us.
Where that is the case, you may obtain from the controller access to the following information:
(1) the purposes for which the personal data is processed;
(2) the categories of personal data concerned;
(3) the recipients or categories of recipients to whom the personal data concerning you has been or will be disclosed by you;
(4) the envisaged period for which the personal data concerning you will be stored, or, where it is not possible to provide relevant concrete specifications, the criteria used to determine that period;
(5) the existence of the right to request from the controller rectification or erasure of personal data or restriction of processing of personal data concerning you or to object to such processing;
(6) the right to lodge a complaint with a supervisory authority;
(7) where the personal data is not collected from the data subject, any available information as to its source;
(8) the existence of automated decision-making, including profiling, referred to in Art. 22(1) and (4) GDPR and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.
You have the right to obtain access to information as to whether the personal data concerning you is transferred to a third country or to an international organisation. In this context, you may request to be notified of appropriate safeguards under Art. 46 GDPR in connection with the transfer.
2. Right to Rectification
You have a right to rectification and/or completion towards the controller if the processed personal data concerning you is inaccurate or incomplete. The controller has to perform the rectification without delay.
3. Right to Restriction of Processing
You may request restriction of the processing of the personal data concerning you under the following conditions:
(1) the accuracy of the personal data concerning you is contested by you, for a period enabling the controller to verify the accuracy of the personal data;
(2) the processing is unlawful and you oppose the erasure of the personal data and request the restriction of its use instead;
(3) the controller no longer needs the personal data for the purposes of the processing, but it is required by you for the establishment, exercise or defence of legal claims; or
(4) you have objected to the processing under Art. 21(1) GDPR pending verification whether the legitimate grounds of the controller override those of you.
Where the processing of the personal data concerning you has been restricted, such personal data may, except for its retention, be processed only with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of any other natural or legal person or for reasons of important public interest of the Union or of a Member State.
If its processing has been restricted pursuant to the conditions set out above, you will be informed by the controller before the restriction of processing is lifted.
4. Right to Erasure
a) Duty of Erasure
You may demand the controller to erase your personal data without delay and the controller is obliged to erase such data without delay where one of the following grounds applies:
(1) The personal data concerning you is no longer necessary in relation to the purposes for which it was collected or otherwise processed.
(2) You withdraw consent on which the processing is based according to point (a) of Art. 6(1), or point (a) of Art. 9(2) GDPR and there is no other legal ground for the processing.
(3) You object to the processing pursuant to Art. 21(1) GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Art. 21(2) GDPR.
(4) The personal data concerning you has been unlawfully processed.
(5) The personal data concerning you has to be erased for compliance with a legal obligation in Union or Member State law to which the controller is subject.
(6) The personal data concerning you has been collected in relation to the offer of information society services referred to in Art. 8(1) GDPR.
b) Information to Third Parties
Where the controller has made public the personal data concerning you and is obligated to erase it under Art. 17(1) GDPR, the controller, taking account of available technology and the cost of implementation, will take reasonable steps, including technical measures, to inform any controllers processing the personal data that you, as data subject, have requested these controllers to erase all links to, or copies or replications of, this personal data.
c) Exceptions
The right to erasure does not apply to the extent that the processing is necessary
(1) for exercising the right of freedom of expression and information;
(2) for compliance with a legal obligation which requires processing by Union or Member State law to which the controller is subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
(3) for reasons of public interest in relation to public health under points (h) and (i) of Art. 9(2) as well as Art. 9(3) GDPR;
(4) for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes under Art. 89(1) GDPR to the extent that the right referred to in point (a) is likely to render impossible or seriously impair the achievement of the objectives of that processing; or
(5) for the establishment, exercise or defence of legal claims.
5. Right to Information
If you have asserted the right to rectification, erasure or restriction of processing towards the controller under Article 19 GDPR, the latter is obliged to give notice of such rectification or erasure of the data or restriction of processing to all recipients to whom your personal data has been disclosed, unless this turns out to be impossible or produces unreasonable burdens.
You have the right to obtain from the controller information about these recipients.
6. Right to Object
You have the right to object at any time, on grounds relating to your particular situation, to any processing of personal data concerning you which is based on point (e) or (f) of Article 6(1) GDPR, including profiling based on those provisions.
The controller will no longer process the personal data concerning you, unless the controller can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or serve the establishment, exercise or defence of legal claims.
Where any personal data concerning you is processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing.
Where you object to any processing for direct marketing purposes, the personal data concerning you will no longer be processed for such purposes.
In the context of the use of information society services, and notwithstanding Directive 2002/58/EC, you may exercise your right to object by automated means using technical specifications.
7. Right to Withdraw Consent Given Under Data Protection Law
You have the right to withdraw your declaration of consent under data protection law at any time. The withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal.
8. Right to Lodge a Complaint with a Supervisory Authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement, if you consider that the processing of your personal data infringes the GDPR.
The supervisory authority with which the complaint has been lodged informs the complainant on the progress and the outcome of the complaint including the possibility of a judicial remedy acc. to Art. 78 GDPR.
VII. Automated Decision-Making
Any automated decision-making or any profiling under Art. 22 GDPR is not performed.
VIII. Reservation of Right of Modification
We reserve the right to adapt or update this Privacy Policy at any, taking into account, where necessary, the applicable data protection regulations. In doing so, we can customise it to the current legal requirements and take account of any modifications to our services, including on launching new services. Your access is governed by the respective latest version.
Last update of this Privacy Policy: January 2021