We value your trust. Thus, we make every effort and use the highest security standards to ensure that we protect your personal data from unauthorized use. We process personal data in accordance with the European General Data Protection Regulation (GDPR).

Under I) you will find information on who is responsible for the data processing performed, whom you can contact and what rights your are entitled to.

Under II) you will find information on how personal data will be processed on this website.

Under III) you will find information on how personal data will be processed on this website for initiating, establishing and implementing business relationships.

I.    Who is responsible for the data processing performed, whom can I contact and what rights am I entitled to?

Responsibility for data processing

Responsible for data processing - in accordance with GDPR - is:

WAFIOS AG
Silberburgstraße 5
72764 Reutlingen, Germany
Phone: +49 (0)7121 146-0
Fax: +49 (0) 7121 491209
E-mail: sales@wafios.de

Data controller

For questions concerning collection, processing or use of your personal data or for questions concerning accessing of information, amendments, blocking or deletion of data, please contact our data controller:

datenschutz@wafios.de

Rights of the data subject:

You enjoy the following legal rights as a data subject, provided that the applicable requirements are met:

·       The data subject shall have the right to withdraw his or her consent - given in accordance with Article 6, Paragraph (1), Sentence 1, Letter a) of the GDPR - at any time in accordance with Article 7, Paragraph (3) of the GDPR. The withdrawal of consent means that we have to discontinue the processing of the data subject's personal data in the future.

·       Right of access to the data we have stored about you in accordance with Article 15 of the GDPR

·       Right to rectification of inaccurate data in accordance with Article 16 of the GDPR

·       Right to erasure of the data we have stored in accordance with Article 17 of the GDPR

·       Right to restriction of processing of the data we have stored in accordance with Article 18 of the GDPR

·       Right to data portability in accordance with Article 20 of the GDPR

·       Right to object in accordance with Article 21 of the GDPR

·       Right to lodge a complaint with a relevant supervisory authority in accordance with Article 77 of the GDPR if you consider that the processing of personal data relating to you infringes the GDPR.

Right to object in individual cases

If personal data is processed due to legitimate interests of the data controller in accordance with Article 4, Paragraph (1), Sentence 1, Letter f) of the GDPR, you have the right to object to the processing of your personal data in accordance with Article 21 of the GDPR, on grounds relating to his or her particular situation.

If you wish to make use of your right to object, just send an e-mail to sales@wafios.de or any other formless notification to the data controller.

If you use your right to object, the data controller shall no longer process your personal data unless the data controller demonstrates compelling legitimate grounds for the processing which override your interests, rights and freedoms.

Right to object to the processing of personal data for marketing purposes

For initiating, establishing and implementing business relationships (see III)), we might process personal data for direct marketing purposes. In accordance with Article 21 of the GDPR, you have the right to object at any time to the processing of your personal data for the purposes of direct marketing.

If you wish to make use of your right to object, just send an e-mail to sales@wafios.de or any other formless notification to the data controller.

If you object to the processing of your personal data for the purposes of direct marketing, we will no longer process your personal data for these purposes.

II.   How will personal data be processed on this website?

Data processing on our website

When you visit our website, our web server temporarily stores every access in a log file. The following data will be stored until it is automatically deleted:

-        IP address of the accessing computer

-        Date and time of the access

-        Name and URL of the downloaded file

-        Data volume transferred

-        Message whether download has been successful

-        Identification data of the browser and operating system used.

This data is processed for the purpose of granting access to our website (establishing a connection), ensuring the stability of our systems and the technical administration of the network infrastructure as well as for optimizing our website. We are not able to assign these data to a particular person. The data will not be merged with any other sources. Furthermore, the data will be deleted after a statistical analysis.

Data processing takes place in line with the legal basis of Article 6, Paragraph (1), Sentence 1, Letter f) of the GDPR.

Collecting, processing and using personal data

During data processing, your concerns with regard to data protection are taken into account at all times in accordance with the legal provisions. Personal data will only be saved, if you choose to make this information available to us (for example, your name or your (e-mail) address). We use the data provided by you without your express permission exclusively for responding to your questions.

Data processing takes place in line with the legal basis of Article 6, Paragraph (1), Sentence 1, Letter b) of the GDPR.

Cookies used by our webshop

We use so-called session cookies for the log-in area on our website in order to make our webshop more attractive to visitors and to enable the use of certain functions (e.g. a virtual shopping cart).  Session cookies are small text files that are used as identifiers. We transfer these cookies via your web browser to your computer's hard drive and are able to read these during your current visit to our website. Please note that these cookies are created as soon as you register or log on to the webshop. You are able to switch off the use of cookies in the settings of your browser. However, this may limit the range of functions available for our webshop.

Data processing takes place in line with the legal basis of Article 6, Paragraph (1), Sentence 1, Letter f) of the GDPR.

Google Analytics

This website makes use of Google Analytics, a website analysis service provided by Google Inc. („Google“). Google Analytics uses cookies, which are text files that are saved to your computer and which enable an analysis of your use of the website to be performed.  Cookies are saved by Google for up to two years on your computer. The data generated by the cookie concerning your use of this website is usually transmitted and saved to a Google server in the USA. In the event an IP anonymizer is activated on this website, Google will abbreviate the IP address for Member States of the European Union as well as for other parties to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and abbreviated there. Google will use this information, on behalf of the operator of this website, to evaluate your use of this website, compile reports on the activities on the website and to perform further services for the operator of this website that are associated with the use of this website and the Internet.  The IP address transmitted from your browser in connection with Google Analytics will not be integrated with any other of Google’s information. You may refuse the use of cookies by selecting the appropriate settings on your browser. However, please note that you may not be able to use all functions provided by this website.

Moreover, by downloading and installing the available browser plug-in from the following link, http://tools.google.com/dlpage/gaoptout?hl=de, you can prevent Google’s collection and use of data (cookies and IP address).

We would like to point out that this website uses the extension "gat._anonymizeIp()" with Google Analytics in order to ensure the anonymous collection of IP addresses (also called IP masking).

Data processing takes place in line with the legal basis of Article 6, Paragraph (1), Sentence 1, Letter a) of the GDPR.

Using the online contact form

When using our online contact form, personal data (like e.g. your name and e-mail address) will only be collected as provided by you. All fields marked with an * are mandatory. Your e-mail address will only be used for processing your inquiry. We store your data for as long as this is necessary to process your inquiry and/or if legal data retention obligations mean we are not permitted to delete your data.

Data processing takes place in line with the legal basis of Article 6, Paragraph (1), Sentence 1, Letter b) of the GDPR.

User account for our webshop

We have established a webshop for our entrepreneur customers. When registering for this webshop, you will get direct, password-protected access to our webshop. Your data required for using this webshop will be saved here,  i.e. your customer data (name, address, e-mail address, phone number, etc.), your user data (e-mail address, password) as well as data concering the orders placed by you that are still open, completed or that have been dispatched recently. We store your data until you delete your user account and/or if legal data retention obligations mean we are not permitted to delete your data.

Data processing takes place in line with the legal basis of Article 6, Paragraph (1), Sentence 1, Letter b) of the GDPR.

III.  How will personal data be processed on this website for initiating, establishing and implementing business relationships?

Purpose and legal basis for processing personal data

We collect and process your personal data to establish and conduct the actual contractual relationship. In such cases, data processing takes place in line with the legal basis of Article 6, Paragraph (1), Sentence 1, Letter b) of the GDPR.

Furthermore, we have a legitimate interest to process your personal data for the purposes of direct marketing sent by mail. In such cases, data processing takes place in line with the legal basis of Article 6, Paragraph (1), Sentence 1, Letter f) of the GDPR.

Recipients

Your personal data may be processed by IT service providers that work on our behalf.

Transfer

Your personal data is not transferred to a country outside of the EU.

Data categories

The following data categories are affected: Name, role, address, e-mail address, and other business-related contact details.

How long is your personal data stored for?

We store your data for as long as this is necessary to process the order (including invoicing) and/or if legal data retention obligations mean we are not permitted to delete your data.