Name and Address of the Controller
The controller within the meaning of the General Data Protection Regulation and other national data protection laws of the member states as well as other data protection provisions is:
production.net AC GmbH
Nerscheider Weg 170
52076 Aachen
Germany
Tel.: 0241/99 030 871
Email: info@production.ac
Website: https://www.production.ac
General Information on Data Processing
- Scope of Processing of Personal Data
We process personal data of our users only insofar as this is necessary to provide a functional website and our content and services. The processing of personal data of our users is generally carried out only with the consent of the user. An exception applies in cases where obtaining prior consent is not possible for factual reasons and the processing of the data is permitted by legal provisions. - Legal Basis for the Processing of Personal Data
Insofar as we obtain consent from the data subject for processing operations involving personal data, Art. 6 para. 1 lit. a GDPR serves as the legal basis.
For the processing of personal data necessary for the performance of a contract to which the data subject is a party, Art. 6 para. 1 lit. b GDPR serves as the legal basis. This also applies to processing operations necessary for the implementation of pre-contractual measures.
Insofar as the processing of personal data is required for compliance with a legal obligation to which our company is subject, Art. 6 para. 1 lit. c GDPR serves as the legal basis.
In the event that the vital interests of the data subject or another natural person require the processing of personal data, Art. 6 para. 1 lit. d GDPR serves as the legal basis.
Where processing is necessary for the purposes of the legitimate interests pursued by our company or a third party and the interests, fundamental rights and freedoms of the data subject do not override those interests, Art. 6 para. 1 lit. f GDPR serves as the legal basis. - Erasure and Storage Duration
The personal data of the data subject will be erased or blocked as soon as the purpose of storage ceases to apply. Storage may also take place if provided for by European or national legislators in EU regulations, laws, or other provisions to which the controller is subject. Blocking or erasure of data also takes place when a storage period prescribed by the aforementioned legislation expires unless further storage of the data is required for contract conclusion or performance.
Provision of the Website and Creation of Log Files
- Description and Scope of Data Processing
We use the servers of Webflow. Each time our website is accessed, our system automatically collects data and information from the computer system of the accessing device.
The following data are collected:
- Information about the browser type and version used
- The operating system of the user
- The internet service provider of the user
- The IP address of the user
- Date and time of access
The data are also stored in the log files of our system. Storage of these data together with other personal data of the user does not take place.
The use of the hosting provider is carried out for the purpose of contract performance with our potential and existing customers (Art. 6 para. 1 lit. b GDPR) and in the interest of secure, fast and efficient provision of our online offering by a professional provider (Art. 6 para. 1 lit. f GDPR).
Our hosting provider will only process your data insofar as this is necessary for the fulfillment of its service obligations and will follow our instructions regarding these data.
We use the following hosting provider:
Webflow, Inc.
398, 11th Street, 2nd Floor
San Francisco, CA 94193
USA
Further information on the Webflow privacy policy: https://webflow.com/privacy
Conclusion of a Data Processing Agreement
To ensure compliant processing, we have concluded a data processing agreement with our hosting provider.
- Legal Basis for Data Processing
The legal basis for the temporary storage of data and log files is Art. 6 para. 1 lit. f GDPR. - Purpose of Data Processing
Temporary storage of the IP address by the system is necessary to enable delivery of the website to the user’s device. For this purpose, the user’s IP address must remain stored for the duration of the session.
Storage in log files is carried out to ensure the functionality of the website. The data also serve to optimize the website and ensure the security of our IT systems. No evaluation of the data for marketing purposes takes place. Our legitimate interest in data processing pursuant to Art. 6 para. 1 lit. f GDPR lies in these purposes.
- Storage Duration
The data are erased as soon as they are no longer necessary for the purpose for which they were collected. In the case of data collection for provision of the website, this is the case when the respective session ends.
In the case of log file storage, this is the case after a maximum of seven days. Longer storage is possible. In this case, the IP addresses of the users are erased or anonymized so that allocation to the accessing device is no longer possible.
- Possibility of Objection and Removal
Collection of data for provision of the website and storage in log files is absolutely necessary for operation of the website. The user therefore has no possibility to object.
Contact Form and Email Contact
- Description and Scope of Data Processing
A contact form is available on our website for electronic communication. If a user makes use of this option, the data entered in the input form are transmitted to us and stored. These data are: - Last name, first name
- Email address
- Information within the message, such as appointment requests
At the time of sending the message, the following data are also stored:
- The IP address of the user
- Date and time of registration
For the processing of the data, your consent is obtained during the sending process and reference is made to this privacy policy.
Alternatively, contact may be made via the email address provided. In this case, the personal data transmitted with the email are stored.
No disclosure of the data to third parties takes place. The data are used exclusively for processing the communication.
- Legal Basis for Data Processing
The legal basis for processing data is Art. 6 para. 1 lit. a GDPR if consent is present.
The legal basis for processing data transmitted in the course of sending an email is Art. 6 para. 1 lit. f GDPR. Where the email contact aims at contract conclusion, Art. 6 para. 1 lit. b GDPR serves as an additional legal basis. - Purpose of Data Processing
Processing of personal data from the input form serves solely to process the contact request. In the case of contact by email, the necessary legitimate interest in data processing lies therein. Other personal data processed during the sending procedure serve to prevent misuse of the contact form and ensure security of our IT systems. - Storage Duration
The data are erased as soon as they are no longer necessary for the purpose for which they were collected. For personal data from the contact form and those transmitted by email, this is the case when the respective communication with the user has ended. Communication is deemed to have ended when circumstances indicate that the matter in question has been conclusively resolved.
Personal data collected during the sending procedure are erased after a maximum of seven days.
- Objection and Removal Possibility
The user may withdraw consent to the processing of personal data at any time. If the user contacts us by email, they may object to storage of their personal data at any time. In such a case, communication cannot be continued.
The objection may be exercised personally, by telephone or by email.
All personal data stored in the course of communication are erased in this case.
Rights of the Data Subject
If personal data concerning you are processed, you are a data subject within the meaning of the GDPR and you have the following rights against the controller:
- Right of Access
You may request confirmation from the controller as to whether personal data concerning you are being processed.
If such processing takes place, you may request access to the following information:
- the purposes for which the personal data are processed
- the categories of personal data being processed
- the recipients or categories of recipients to whom the personal data have been or will be disclosed
- the planned duration of storage of the personal data or, if specific information is not possible, criteria for determining storage duration
- the existence of a right to rectification or erasure of personal data, a right to restriction of processing by the controller or a right to object to such processing
- the existence of a right to lodge a complaint with a supervisory authority
- any available information on the origin of the data if the personal data were not collected from the data subject
- the existence of automated decision-making including profiling pursuant to Art. 22 para. 1 and 4 GDPR and at least meaningful information on the logic involved as well as the scope and intended effects of such processing for the data subject
You have the right to request information as to whether personal data concerning you are transferred to a third country or an international organization. In this context, you may request to be informed about appropriate safeguards pursuant to Art. 46 GDPR relating to the transfer.
- Right to Rectification
You have the right to rectification and/or completion by the controller if the personal data concerning you are inaccurate or incomplete. The controller must carry out rectification without undue delay. - Right to Restriction of Processing
You may request restriction of processing of personal data concerning you under the following conditions: - if you contest the accuracy of the personal data concerning you for a period enabling the controller to verify the accuracy of the personal data
- where processing is unlawful and you oppose erasure of the personal data and instead request restriction of their use
- where the controller no longer needs the personal data for the purposes of processing but you require them for the establishment, exercise or defense of legal claims
- where you have objected to processing pursuant to Art. 21 para. 1 GDPR and it has not yet been determined whether the legitimate grounds of the controller override your grounds
Where processing of personal data concerning you has been restricted, such data shall, with the exception of storage, only be processed with your consent or for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or a member state.
If restriction is lifted, you will be informed by the controller in advance.
- Right to Erasure
a) Obligation to Erase
You may request the controller to erase personal data concerning you without undue delay and the controller is obliged to erase such data without undue delay if one of the following grounds applies:
- the personal data concerning you are no longer necessary for the purposes for which they were collected or otherwise processed
- you withdraw your consent on which processing pursuant to Art. 6 para. 1 lit. a or Art. 9 para. 2 lit. a GDPR is based and there is no other legal basis for the processing
- you object to processing pursuant to Art. 21 para. 1 GDPR and there are no overriding legitimate grounds for the processing or you object to processing pursuant to Art. 21 para. 2 GDPR
- the personal data concerning you have been unlawfully processed
- erasure of the personal data concerning you is required for compliance with a legal obligation under Union or member state law to which the controller is subject
- the personal data concerning you were collected in relation to information society services offered under Art. 8 para. 1 GDPR
b) Information to Third Parties
Where the controller has made personal data concerning you public and is obliged to erase such data pursuant to Art. 17 para. 1 GDPR, he shall, taking account of available technology and implementation costs, take reasonable steps, including technical measures, to inform controllers processing the personal data that you, as the data subject, have requested erasure of any links to such personal data or of copies or replications of such personal data.
c) Exceptions
The right to erasure does not exist to the extent that processing is necessary:
- for exercising the right of freedom of expression and information
- for compliance with a legal obligation that requires processing under Union or member state law to which the controller is subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller
- for reasons of public interest in the area of public health pursuant to Art. 9 para. 2 lit. h and i and Art. 9 para. 3 GDPR
- for archiving purposes in the public interest, scientific or historical research purposes or for statistical purposes pursuant to Art. 89 para. 1 GDPR insofar as the right referred to under a) is likely to render impossible or seriously impair the achievement of the objectives of such processing
- for the establishment, exercise or defense of legal claims
Right to Notification
If you have exercised the right to rectification, erasure or restriction of processing, the controller is obliged to notify all recipients to whom the personal data concerning you have been disclosed of such rectification, erasure or restriction, unless this proves impossible or involves disproportionate effort. You have the right to be informed by the controller about such recipients.
Right to Data Portability
You have the right to receive the personal data concerning you that you have provided to the controller in a structured, commonly used and machine-readable format. You also have the right to transmit these data to another controller without hindrance from the controller to whom the personal data were provided, provided that:
- the processing is based on consent pursuant to Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR or on a contract pursuant to Art. 6 para. 1 lit. b GDPR and
- the processing is carried out by automated means
In exercising this right, you also have the right to have the personal data transmitted directly from one controller to another controller where technically feasible. Rights and freedoms of other persons must not be adversely affected.
The right to data portability does not apply to processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
Right to Object
You have the right, for reasons arising from your particular situation, to object at any time to the processing of personal data concerning you carried out on the basis of Art. 6 para. 1 lit. e or f GDPR, including profiling based on these provisions.
The controller will no longer process the personal data concerning you unless he demonstrates compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defense of legal claims.
You have the option to exercise your right to object in connection with the use of information society services, using automated procedures based on technical specifications, notwithstanding Directive 2002/58/EC.
Right to Withdraw Consent
You have the right to withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent before withdrawal.
Right to Lodge a Complaint with a Supervisory Authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the member state of your place of residence, place of work or place of the alleged infringement, if you believe that the processing of personal data concerning you violates the GDPR.
The supervisory authority with which the complaint was lodged shall inform the complainant of the status and outcome of the complaint including the possibility of judicial remedy pursuant to Art. 78 GDPR.
production.net AC GmbH
Nerscheider Weg 170
52076 Aachen
+49 2408 9377736
info@production.ac