Data Protection Declaration
Status 05/2018
We only process personal data (hereinafter called ‘data’) insofar as this ensures a functioning and convenient website as well as it is necessary for our content and services.
The term ‘processing’ refers to the elicitation, use, disclosure and/or storage of data. ‘Personal data’, refering to the data protection regulation (hereinafter DSGVO), basically appies to all data which can be identified with a natural person. The precise definitions of the different notions are defined in Article 4 DSGVO.
The following remarks contain information on the nature, extent, purpose, duration and the legal basis of the processing of personal data where the purposes and means of the processing are determined and decided by us alone or with others, as well as the components of third parties (who process data on their own responsibility) that we possibly use for optimization and quality of use:
A) Information on the persons responsible
B) Rights of the user
C) Information relating to the data processing
A) Information on the persons responsible
The persons responsible (hereinafter referred to as ‘provider’) within the terms of the DSGVO and other national laws on data protection of member states as well as as any other legal data protection regulations is:
SPL electronics GmbH
Sohlweg 80
41372 Niederkrüchten
Germany
Phone: +49 (0) 2163 98340
Fax: +49 (0) 2163 983420
E-mail: info@spl.audio
The data protection officer of the persons responsible is:
Killian Hedrich
c/o DatCQ GbR
Alexander F. Bräuer, Killian Hedrich und Frank Weiß
Katharinenstraße 16
73728 Esslingen
Tel. +49 (0)711/ 93277955
Fax: +49 (0)711/ 93277956
E-Mail: dsb@datcq.de
B) Rights of the user
The user has the right, in relation to the processing reproduced below of his or her personal data,
1) to obtain a confirmation if data concerning him or her are processed and to receice precise information on this data as well as further information and copies of the data in accordance with Article 15 DSGVO;
2) the right to obtain the correction of incorrect data concerning him or her or the completion of this data in accordance with Article 16 DSGVO;
3) the right to demand that data concerning him or her is immediately deleted in accordance with Article 17 DSGVO. Alternatively, if for example another processing in accordance with Article 17(3) DSGVO is required, the user got the right to demand a restriction of the processing of the data according to Article 18 DSGVO;
4) that he or she receives the provided data concerning him or her according to Article 20 DSGVO and to demand the communication to other persons responsible;
5) to file a complaint to the supervisory authority according to Article 77 DSGVO, if the user is of the view that the processing by the provider of his or her data infringes the DSGVO.
6) The user has the right to object the future processing of the data concerning him or her by a responsible person in accordance with Article 6 (1 lit. f DSGVO), at any point in time in accordance with Article 21 DSGVO. The objection can particularly be entered against the processing for the purpose of direct advertising.
7) The provider is further obliged to inform all the receivers of the disclosed data about any kind of correction or deletion of the personal data or a restriction of the distribution, which is made on the basis of Article 16 DSGVO, Article 17(1) DSGVO and Article 18 DSGVO. The obligation cannot be imposed in case that this communication is impossible or involves a disproportionate effort.
The customer has the right to be informed concerning these recipients.
C) Information relating to the data processing
If the individual data processing is not subsequently specified otherwise, the processed data of the user will be deleted or blocked by the provider, as soon as the purpose of the storage is served and
no statutory storage obligations is necessary.
Server Data
For technical reasons relating to communications and security, when you visit our website, the following data (amongst others) will be provided to us/our web space provider by your Internet browser. (server log files):
- Browser type and version
- Operating system used
- The websites from which you visit us (referrer URL)
- Websites that you visit
- Date and time you accessed the site
- Your Internet protocol (IP) address
Furthermore the data will be temporarily stored. Storage of this data in connection with other personal data of this user does not take place. The legal basis of the temporary storage is Article 6 (1 lit. f DSGVO) based on the legitimate interest of the improvement in the stability, functionality and security of the website.
After seven days at the latest, the data is anonymised by shortening the IP address at the domain level, so that it is no longer possible, or only with a disproportionately large effort, to draw conclusions about a particular or identifiable natural person. The anonymised data will be solely processed for ‘statistical purposes’ to enable us to optimise our Internet site and our offers.
Data which is neccesary to store for evidentiary purposes is exempted from deletion or anonymisation until final clarification of the respective issue.
Cookies
a) “Session”-Cookies/ “Persistente”-Cookies
On the website the provider uses so-called cookies. Cookies are small text files or other storage technologies which the internet browser, used by the user, stores on the end user’s computer.
These Cookies process certain information of the user in an individual extent, like web browser and site data and IP address values.
The processing allows the provider to make the website more user-friendly, more effective ans safer. The processing of “Session”-Cookies for example potentially allows the use of a shopping cart function.
“Persistente”-Cookies allow the website to recognize a user which visits the website on a regular basis through his or her browser.
If, through these Cookies, personal data is processed for purposes of initiating or fulfilling a contract, the legal basis of this processing is Article 6 (1 lit. b DSGVO).
If the processing is not implemented for purposes of initiating or fulfilling a contract, the processing is based on the providers legitimate interest of the improvement in functionality of the website and is based on the legal basis of Article 6 (1 lit. b DSGVO).
The “Session”-Cookies are deleted, when the user closes his or her browser. The “Persistente”-Cookies will be deleted after an automated time period determined by the provider.
This time period differs depending on the Cookie, but does not last longer than a year.
b) Cookies of third-party providers
It is possible that Cookies of third-party providers are also used on the website. These hird-party providers are partner companies, with whom the provider collaborates for the purpose of advertising, analysis or functionalities of the website. If this is the case, the purposes and legal basis of the respective processings are reproduced in the following explanations.
c) Deletion
The user has the possibility to prevent or restrict Cookies by appropriately adjusting the browser. Stored Cookies can also be deleted at any time. The settings for this depend on the respective browser. If the user prevents or restricts the installation of Cookies, he or she may not be able to use all functions of our website to their full extent.
Processing of contracts
a) Processing
The personal data of the user, communicated for the purpose of the acquisition of goods or services is processed by the provider for the purpose of the processing of contracts.
The transfer of data is necessary for the conclusion of a contract; without data provision the conclusion of a contract is not possible. The legal basis of the processing is Article 6 (1 lit. b DSGVO). After the settlement of the contract, the data of the user is deleted in accordance with fiscal and commercial retention periods.
b) Transfer
During the implementation of a contract, the personal data of the user is transferred to the supplier or the financial service provider, insofar as this is necessary for the payment or delivery of goods. Legal basis for this tranfer of data in this case is Article 6 (1 lit. b DSGVO).
Notice: If the customer chooses PayPal as payment service provider, it is possible, depending on the customer’s choice concerning the type of payment, that a credit verification is demanded by PayPal.
Find more information concerning the processing of personal data by PayPal at
https://www.paypal.com/de/webapps/mpp/ua/privacy-full.
Contacting
In case a user contacts the provider via contact form or e-mail, the personal data of the user which he or she enters on this occasion will be used to process his or her request. The personal data informations are necessary for the purposes of replying the user’s request. Without the data provision, it is impossible or only possible to a limited extent to answer the user’s request.
If the contact request serves to negotiate or perform a contract, for example a reservation request, the legal basis is Article 6 (1 lit. b DSGVO).
The personal data of the user will be deleted as soon as the request of the user is conclusively answered and no statutory storage obligations are are necessary, for example at an following contract processing.
The legal basis can also be the consent of a user in accordance with Article 6 (1 lit. b DSGVO).
In the context of the contact form, the consent of the user will possibly be gathered for processing and referenced to this data protection declaration.
The user has the possibility to revoke his or her given consent for the customer account by sending a message to the provider in accordance with Article 7 (3 DSGVO). The personal data of the user in this context will be deleted as soon as it is no longer necessary for the processing.
Customer account
If the user registers for a customer account of the provider, entered data (for example names, addresses, e-mail addresses) which is used within this registration will exclusively be used and stored for the fulfillment of a contract or the implementation of contractual measures as well as for the general management of the customer relationship (for example retrieval of previous orders or notepad function). With the registration, the IP address and the date as well as the time of the registration are stored. None of this data will be transferred to third-parties in this case.
The legal basis is (if a consent of the user exists) Article 6 (1 lit. a DSGVO).
Within the context of the registration, the user’s consent is gathered for the following processing referring to this data protection declaration.
The data which is processed within this context will exclusively only be used for the abovementioned purpose. None of this data will be transferred to third-parties in this case.
If the the opening of a customer account serves to negotiate or perform a contract, the legal basis is Article 6 (1 lit. b DSGVO).
The user has the possibility to revoke his or her customer account by sending a message to the provider in accordance with Article 7 (3 DSGVO). The personal data of the user in this context will be deleted as soon as it is no longer necessary for the processing. If the data is necessary for the fulfillment of a contract or the implementation of pre-contractual measures, the data of the user will be deleted in accordance with fiscal and commercial retention periods.
