According to the European General Data Protection Regulations (GDPR) and other national Data Protection Acts as well as additional data protection regulations the controller is:
KE Elektronik GmbH
Im Klingenfeld 21
74594 Kressberg Marktlustenau
Phone: +49 (0) 79 57 - 98 86-0
Fax: +49 (0) 79 57 - 98 86-50
KE Elektronik´s Data Protection Officer is:
Mr. Ingo Wolff
tacticx Consulting GmbH
Walbecker Straße 53
For reasons of readability, we deliberately forgo the distinction between female and male personal names.
1. General Information Regarding Data Protection
1.1. Processing of Personal Data and its Purpose
KE Elektronik Ltd (hereinafter “KE“ or “we“) processes personal data of the website users solely insofar it is necessary to provide a fully-functioning website as well as to provide our content and services. When visiting our website the following data is processed:
- User IP address
- Used browser (type, version, language)
- Used operating system
- Internet provider of the user
- Date and time of the access
- The accessed data on our website
- Webpage, from which the user was referred from
- Webpages which the user is referred to from our website.
The processing and temporary storage of the IP address is necessary to make the website suitable for the user´s PC. To accomplish this the IP address of the user has to be stored for the time of the access. Logfiles contain IP addresses or other data, which make an allocation of the user possible. The storage in Logfiles is done to guarantee a fully-functioning website. Furthermore the data are used to optimise our webpages as well as to guarantee the security of our information systems. All processing of personalised data is solely done for the above mentioned reasons and only in a scope to achieve those mentioned reasons. The data are not used for advertisement, market research or customer service.
1.2. Legal Basis for the Processing of Personal Data
The Processing of personal data of our users is executed on a regular basis after the given consent of the user. An exception is made in those cases where a prior consent can´t be given due to practical reasons and where data processing is allowed due to legal regulations. The storage of the data and the Logfiles is done according to article 6, section 1 point f GDPR.
1.3. Data Erasure and Time of Storage
The personal data of data subjects will be erased or blocked, immediately after the reason for storage does no longer exist. Regarding data processing to provide a fully-functioning website the personalised data are deleted when the web session has ended. In case personal data are stored in Logfiles the erasure is executed latest after seven days. An additional storage is only feasible when the user´s IP address is erased or distorted, so that an allocation of the requested client is no longer possible.
Cookies are used on our website multiple times. Accesses an user one of our pages then a Cookie can be stored on the user´s operating system. A Cookie contains a characteristic type of string which enables us to unambiguously identify the browser when it accesses our website again. Inside a Cookie the following data are stored and transmitted:
- Language setting
- Log-In information.
3. Adobe Typekit
Our website uses Adobe Typekit. Typekit is a service provided by Adobe Systems Software Ireland Ltd. (“Adobe”), which allows us the access to Adobe´s fonts library. To ensure that the fonts used by us can be incorporated, your web browser has to establish a connection to the Adobe server (in the USA) and download the particular font. Because of this, Adobe receives the information, that our website has been accessed by the IP address of your computer. The legal basis for the processing of data is Article 6 Section 1 point f GDPR. Further information regarding Adobe Typekit can be found in Adobe´s privacy note, which can be viewed here: https://www.adobe.com/privacy/policies/typekit.html.
4. Contact Form and E-Mail Contact
We provide a contact form on our website which can be used to contact us electronically. If a user chooses this feature his data entered in the input mask are transferred to us and stored:
- E-Mail address
- Company (voluntarily)
- Address (street, house number, postcode, town) (voluntarily)
- Phone number (voluntarily)
- Comment field for the user´s message to us (voluntarily)
- IP address of the user
- Time and date of the transmission
Before commencing with the data processing we get the user´s consent in the course of the sending process. Another possibility to contact us is by using our company´s email address. In this case we store the transmitted personal data sent to us by the user via his email. The legal basis for processing the data, if we have received the user´s consent, is Article 6 Section 1 point a GDPR. Are the data transmitted in the course of an email, the legal basis is Article 6 Section 1 point f GDPR. Is the reason for contacting us the conclusion of a contract then Article 6 Section 1 point b GDPR is the legal basis. The data are exclusively used to handle the contact and for the resulting communication. In this context we do not pass the data on to a third-party. The personal data derived from the input mask and the data which have been received via email, are deleted as soon as the communication with the user is terminated. Terminated means the circumstances leading us to the conclusion that the raised issue(s) have/has been dealt with. The additional personal data which were collected during the sending process are erased latest after seven days.
The user has the right, at all times, to withdraw his consent to process his personal data. Does the user contact us via email, then he can withdraw his consent to store his personal data at all times. In such a case the contact can not be handled, the communication can not be continued, respectively. All data which have been collected and stored regarding the handling of the contact, will be erased.
5. Google Maps
Our webpage uses Google Maps API to visually present geographical information. When using Google Maps, Google will also process data which are transmitted when using the maps feature on third-party websites. Further information regarding data processing by Google can be found in Google´s privacy note, which can be viewed here:
KE uses technical and organisational protection measurements to protect personal data of our users against accidental or deliberate manipulation, loss, destruction or against the unauthorized third-party access. Our protection measurements undergo an ongoing improvement process to guarantee up-to-date protection.
7. Rights of the Data Subject
Processes KE personal data means you are a data subject according to Article 4 No. 1 GDPR with the following rights towards KE:
7.1. Right of Provision of Information
According to Article 15 GDPR you can request a confirmation, if we process personal data regarding your person. In the case we do process your personal data you have the right to request the provision of the following information:
- Purpose(s) of processing;
- The categories of your personal data, which we process;
- The recipients or the categories of recipients, to whom we have disclosed or will disclose your personalised data;
- (When possible) the estimated time we intend to storing your data or in case that this is not possible our criteria in determine the storage time;
- The existence of a right to rectify or to erase your personal data, of a right to limit the processing by KE or the right to object the processing;
- The existence of a right to lodge a complain with the supervisory authority;
- Where the personal data are not collected from the data subject, any available information as to their source;
- The existence of an automated individual decision-making, including profiling (Article 22 (1&4) GDPR) and – at least in these cases – meaningful information about the applied logic as well as the impact and the intended effects of such processing for you.
Your are entitled to request provision of information if your personal data are transferred to a third-country or to an international organisation. In this context you are entitled to request to be briefed regarding the suitable safeguards in the case of transmission, according to Article 46 GDPR.
7.2. Right to Rectification
According to Article 16 GDPR you have the right to obtain from us the completion of personal data or the rectification of inaccurate personal data.
7.3. Right of Erasure
According to Art. 17 GDPR you have the right to obtain from us the erasure of personal data concerning you without undue delay we have the obligation to erase personal data without undue delay where one of the following grounds applies:
- The personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed.
- You withdraw consent on which the processing is based according to point (a) of Article 6(1), or point (a) of Article 9(2) GDPR, and where there is no other legal ground for the processing.
- You object to the processing pursuant to Article 21(1) and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Article 21(2).
- Your personal data have been unlawfully processed.
- Your personal data have to be erased for compliance with a legal obligation in Union or Member State law to which the controller (KE) is subject .
- Your personal data have been collected in relation to the offer of information society services referred to in Article 8(1) GDPR.
In the event that we did publish your personal data and are obligated under Article 17 (1) GDPR to erase them, we take the appropriate measurements (also technical nature), taking into account all the available technology and the implementation costs, to inform the people responsible for data processing, the people who process the personal data, that you, as the data subject, have demanded the erasure of all his personal data or copies or replications of his personal data.
The right of Erasure does not apply to the extent that processing is necessary:
- for exercising the right of freedom of expression and information;
- for compliance with a legal obligation which requires processing by Union or Member State law to which the controller (KE) is subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller (KE);
- for reasons of public interest in the area of public health in accordance with points (h) and (i) of Article 9(2) as well as Article 9(3);
- for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Article 89(1) in so far as the right referred to in paragraph 1 is likely to render impossible or seriously impair the achievement of the objectives of that processing; or
- for the establishment, exercise or defence of legal claims.
7.4. Right to Restriction of Processing
According to Article 18 GDPR you have the right to obtain from us restriction of processing where one of the following applies:
- the accuracy of the personal data is contested by you, for a period enabling us to verify the accuracy of the personal data;
- the processing is unlawful and you oppose the erasure of the personal data and request the restriction of their use instead;
- we no longer need the personal data for the purposes of the processing, but they are required by you for the establishment, exercise or defence of legal claims;
- you have objected to processing pursuant to Article 21(1) GDPR pending the verification whether the legitimate grounds of the controller (KE) override those of the data subject.
Where processing has been restricted, such personal data shall, with the exception of storage, only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State. A data subject who has obtained restriction of processing pursuant to paragraph 1 shall be informed by the controller (KE) before the restriction of processing is lifted.
7.5. Notification Obligation
Have you executed your right to rectification or erasure of personal data or restriction of processing, we are obligated according to Article 19 GDPR to communicate to each recipient to whom the personal data have been disclosed, unless this proves impossible or involves disproportionate effort. We inform you about those recipients if you request it.
7.6. Right to Data Portability
According to Article 20 GDPR you have the right to receive your personal data, which you have provided to us, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller without hindrance from KE to which the personal data have been provided, where:
- the processing is based on consent pursuant to point (a) of Article 6(1) or point (a) of Article 9(2) or on a contract pursuant to point (b) of Article 6(1); and
- the processing is carried out by automated means.
In exercising your right to data portability, you have the right to have the personal data transmitted directly from one controller to another, where technically feasible. The exercise of the right referred to in paragraph 1 of this Article does not apply to processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in KE.
7.7. Right to object
According to Article 21 GDPR you have the right to object, on grounds relating to your particular situation, at any time to processing of his personal data concerning which is based on point (e) or (f) of Article 6(1), including profiling based on those provisions. We shall no longer process the personal data unless we demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims.
7.8. Right to Withdraw your Consent
You have the right to withdraw your declaration of consent under data protection law given to us at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
7.9. Automated decision-making, including profiling
According to Article 22 you have the right not to be subject to a decision based solely on automated processing, including profiling, which produces for you legal effects or similarly significantly affects you. This does not apply if the decision:
- is necessary for entering into, or performance of, a contract between you and KE;
- is authorised by Union or Member State law to which we are subject and which also lays down suitable measures to safeguard your rights and freedoms and legitimate interests; or
- is based on your explicit consent.
7.10. Right to Lodge a Complaint with a Supervisory Authority
Without prejudice to any other administrative or judicial remedy, every data subject shall have the right to lodge a complaint with a supervisory authority, in particular in the Member State of his or her habitual residence, place of work or place of the alleged infringement if the data subject considers that the processing of personal data relating to him or her infringes this Regulation.
8. Responsibility for Contents and Information
Our website contains links to external third party websites. Linked websites were checked for possible legal violation at the time of linking. We can not however exclude the possibility that the checked contents is afterwards changed from the operators of the websites. Are you of the opinion that linked external websites violate current law or depict inappropriate contents please contact us. We will look into this matter and if necessary remove the link from our webpage. KE can not assume any responsibility for the contents and availability of linked external websites.
9. Inclusion and Validity of the Data Protection Declaration
With the usage of our website you give consent to the above described data processing process. This data protection declaration is only valid for the contents of our webpage. For the linked external contents other data protection – data security regulations apply. The person responsible for those online contents can be looked up in the imprint of the external webpage.
By further developing our webpage or by implementing new technologies it might be necessary to alter this current data protection declaration. We reserve the right to alter the current data protection declaration at any time in the future. The valid version at the time of the web session applies.
Status: May, 2018