c-trace

Information About Data Protection for visitors to the website

1. Introduction

Responsible body
We, c-trace GmbH, Stieghorster Straße 112, 33605 Bielefeld, Germany, as the responsible body would like to explain to you below which of your data we process and how.

Data protection officer
If you have any questions regarding data protection, please contact our data protection officer Mr. Thomas Werning. He can be reached at.

Below you will find information on which personal data (this is all data that identifies or makes identifiable you as a natural person (hereinafter "data subject"), such as name, address, e-mail address or also user behaviour) we collect during your visit to our site and how this is used. Data subjects are visitors to our website and users of our online services.

2. data subject rights

Pursuant to Art. 15 of the GDPR, you have the right to obtain information about the personal data stored about you, including any recipients and the planned storage period. If incorrect personal data is processed, you have the right to rectification in accordance with Art. 16 of the GDPR. If the legal requirements are met, you may request deletion or restriction of processing as well as object to processing (Art. 17, 18 and 21 DSGVO).

If you wish data to be deleted but we are still legally obliged to retain it, access to your data will be restricted (blocked). The same applies in the event of an objection. You can exercise your right to data portability insofar as the technical possibilities are available to the recipient and to us.

Our data protection officer at teamDatenschutzDYXV@KEJIwerningCZYW.LFKJcom  will be happy to help you with your data protection rights.

If you are of the opinion that the processing of personal data concerning you violates the General Data Protection Regulation, you have the right to lodge a complaint with the data protection supervisory authority responsible for us, the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia, https://www.ldi.nrw.de/, as well as with any other data protection supervisory authority.

3. Here you will find the information about the data processing on our website.

3.1. Legal basis

The legal bases for our data processing are as follows in accordance with Art. 13 DSGVO:

  • Art. 6 para. 1 p. 1 a) GDPR for the processing of personal data with the consent of the data subject.
  • Art. 6 para. 1 p. 1 b) GDPR for the necessary processing of personal data for the performance of a contract with the data subject as well as for the implementation of corresponding pre-contractual measures.
  • Art. 6 (1) c) GDPR for the processing of personal data necessary to comply with a legal obligation to which we are subject under any applicable law of the EU or under any applicable law of a country where the GDPR applies in whole or in part.
  • Article 6(1)(f) of the GDPR for the necessary processing of personal data to protect the legitimate interests of us or of third parties, unless the fundamental freedoms and rights and interests of the data subject override these. 
    Legitimate interests are in particular our business interest in being able to provide our website, information security, the enforcement of our own legal claims and compliance with other legal provisions.

For this purpose, we use service companies that are separately committed to secrecy and data protection in the context of the provision of services. Data is only passed on to authorities in the event of overriding legal provisions. 

3.2. Right of revocation

Consents given can be revoked by you with effect for the future in accordance with Art. 7 GDPR.

3.3. Data security / encryption

This website uses "Hypertext Transfer Protocol Secure" (https). The connection between your browser and our server is encrypted.

3.4. Purposes of processing

General: Presentation of the company, provision of services and/or sale of products as well as communication via the Internet. The purpose of the data processing on this website is to provide information about products and services of our company and to process applications with the possibility for users to contact the contact persons in the company in a targeted manner.

3.4.1. General

Insofar as you have provided us with personal data, we will use this to    

these to answer your enquiries, to advise you and process contracts concluded with you and for technical administration. Your personal data will only be passed on to third parties or otherwise transferred if this is necessary for the purpose of processing the contract or for billing purposes or if you have given your prior consent. You have the right to revoke your consent at any time with effect for the future (see right of revocation).

The legal basis for the collection, processing and forwarding of the data is Art. 6 para. 1 p. 1 b) GDPR in the context of contract processing.

The deletion of this data takes place after the expiry of the applicable statutory retention obligations. Insofar as we are not subject to any statutory retention obligations, the data will be deleted when the purpose ceases to apply.

You have the right to information and the right to object to your data stored by us at any time. You can find further information under "Data subject rights" and "Right of revocation".

3.4.2. Server data collection

Purpose of processing

When you visit our site, various server statistics are automatically stored, which your browser transmits to our provider's server: Among other things, the IP address of your device, date and time of access, name and URL of accessed files, website from which access is made or from which you were directed to our site (referrer URL), browser used and, if applicable, the operating system of your device as well as the name of your provider are logged.

The above data is processed by us for the purposes of smooth connection establishment and system security. This data is not merged with other data sources. The IP address is anonymised. The accruing connection data is automatically deleted; as a rule after a maximum of seven days. If the website is misused, log data whose further storage is necessary for evidentiary purposes will be retained until the incident has been clarified.

The legal basis is Art. 6 para. 1 p. 1 f) GDPR. Our legitimate interest arises from the fact that we want to ensure secure operation of the website and detect any attacks.

3.4.3. Contact form and request by e-mail

Purpose of the processing

When using our contact form, we collect and store the name and e-mail address for the purpose of answering your enquiry. The specification of the telephone number for a callback is optional. If you send us a contact request by e-mail, we collect and store the e-mail address and the data contained in the e-mail.

The legal basis is Art. 6 para. 1 p. 1 a) GDPR, as you consent to the above-mentioned processing of your data when using the form as well as sending an e-mail. In addition, the legal basis also results from Art. 6 para. 1 p. 1 b), as the storage of the data is necessary for the fulfilment of a pre-contractual or possibly later contractual relationship.

The deletion of the data takes place when the purpose of the storage has ceased to exist, i.e. after answering your e-mail/contact form enquiry or when the matter connected with the enquiry has been conclusively clarified.

You have the right to revoke your consent at any time without affecting the lawfulness of the processing based on your consent.

You can find information on the right to deletion and information under "Data subject rights".

 

3.5. Data transfer to third countries:

None.

3.6. Up-to-dateness and amendment of this privacy policy

We reserve the right to adapt the content of this data protection declaration at any time. This usually takes place in the event of further development or adaptation of the services used. You can view the current data protection declaration on our website. Status of this declaration: 01.08.2021

Further information on the handling of personal data can be found  here

3.7. Cookie information

 

 

4. Here you will find information about the processing of data of our customers and business partners.

Customer data/interested parties

Purpose of processing
We process data that we receive in the course of handling our business relationship with you. We receive this data directly from you. Either in the case of enquiries from interested parties and contacts, the placing of orders or order processing (see point "Information on data collection and processing").

Legal basis: The collection and processing of data is necessary for the performance of the contract and is based on Art. 6 (1) (b) G. The use for direct advertising is based on Art. 6 para. 1 (f) GDPR. It is our legitimate interest to draw your attention to special offers by means of direct advertising. The data will not be passed on to third parties unless required by law, e.g. to the tax office within the framework of tax laws. The data will be deleted as soon as they are no longer required for the purpose of their processing or after expiry of the statutory retention periods (such as accounting records relevant under tax and commercial law: 10 years; commercial and business letters: 6 years; records of suppliers, type, quantity, purchase, delivery: 3 years).

You have the right to object to the use of your data for the purpose of direct marketing at any time. In addition, you are entitled to request information about the data we have stored about you, as well as to request that the data be corrected if it is incorrect or deleted if it has been stored inappropriately. You also have the right to lodge a complaint with a supervisory authority (see "Right to lodge a complaint").

Duration of data storage
After the contractually owed service has been provided, your personal data will be stored for 2 years for the purpose of the legal warranty, for 5 years for the purpose of fulfilling the warranty conditions, for 5 years for the purpose of carrying out follow-up orders (requested at the time of the conclusion of the contract or at a later date) and for 10 years for tax law purposes. 

Deletion of data
Your personal data will be deleted at the latest after the expiry of the aforementioned periods.

 

Suppliers

Purpose of processing
We process data that we receive in the course of processing our business relationship with you. We receive the data directly from you when placing an order or processing an order (see item "Information on data collection and processing").

Legal basis: The collection and processing of data is necessary for the performance of the contract and is based on Art. 6 para. 1 (b) GDPR. The data is not passed on to third parties unless required by law, such as to the tax office within the framework of tax laws. The data will be deleted as soon as they are no longer required for the purpose of their processing or after expiry of the statutory retention periods (such as accounting records relevant under tax and commercial law: 10 years; commercial and business letters: 6 years; records of suppliers, type, quantity, purchase, delivery: 3 years).

You are entitled to request information about the data we have stored about you, as well as to request correction of the data if it is incorrect or deletion of the data if it has been stored inappropriately. You also have the right to lodge a complaint with a supervisory authority (see point "Right of complaint").

 

Applications

Purpose of the processing
If you apply to us on the basis of a job advertisement, we will collect your personal data such as first name, surname, address, telephone number, e-mail address, attachments (covering letter, CV, certificates, photo) and store them for the duration of the selection procedure.

Your data will only be used by authorised persons of the personnel department or the management for processing within the scope of the selection procedure. Your personal data will not be passed on to third parties.

If the specific position for which you are applying has already been filled by someone else, but your profile makes you eligible for a later position or for a position in a partner or subsidiary company, we will obtain your express consent before further storing or forwarding your application, unless you have already consented to such storage or forwarding in your application.

If you send us a speculative application using our general contact e-mail address, the content of your application e-mail may be viewed by unauthorised personnel. There is a requirement that the application documents - unopened - are forwarded immediately to the personnel department and the incoming e-mail is deleted. If you would like to exclude this, please contact us by telephone before submitting your unsolicited application so that we can provide you with the contact details of the correct contact person.

The legal basis is Art. 6 para. 1 (b) GDPR, for the processing of pre-contractual measures.

Unless you inform us otherwise, the data will be deleted 6 months after completion of the application process, or destroyed in the case of postal applications. Due to the long application and selection periods for trainees, we store their data in Germany for up to 18 months.

You have the following rights if the respective legal requirements are met: the right to information about your data stored by us; correction, deletion, restriction of the processing of your data or objection to the processing, as well as the right to data portability. Furthermore, you can of course request the deletion or destruction of all your application documents at any time by sending us an e-mail to info@werning.com.

 

Events and workshops (on-site, in-house and virtual)

Purpose of the processing
Registration for events and workshops can be made via a registration form. When using our registration form, we collect and store the first and last name, the company and the e-mail address. If registration is made by e-mail, we collect and store the e-mail address and the data contained in the e-mail.

We use this personal data exclusively for event and workshop purposes. This enables us to confirm participation, to exchange information in advance, to answer questions, if necessary to create name tags and lists of participants or to subsequently send documentation.

When using video conferencing systems in the context of online workshops or video consultations, we use service providers in the context of commissioned data processing.

To join an online workshop or video consultation, you must provide a name. You can also enter a pseudonym. It is not necessary to enter an e-mail address. Your details will be stored in our administration area. 

If you activate access to your microphone or video camera, sound and video data will be processed and played back. You can deactivate access at any time using the buttons with the respective symbols. Participation is also possible if you deactivate access. It is also possible to exchange text messages in a group chat. These messages may be visible to all participants.

If you select the function "Transfer screen", your displayed screen content will be shown to all other participants. You should therefore ensure that no sensitive data is displayed on your screen before using the function. You can deactivate the function at any time using the corresponding button.

If the online workshop or video counselling is being recorded, you will recognise this by a red symbol in the screen area and will be informed of this beforehand. In this case, all video and audio data will be stored by us.

Note: If you visit the websites of the respective provider or install the provider's application on your device, the processing of personal data is governed exclusively by the provider's data protection provisions. 

The legal basis for the processing is Art. 6 para. 1 (f) GDPR. Our legitimate interest is the effective implementation of online workshop and video consultations. In the context of an existing or prospective contractual relationship, Art. 6 (1) (b) GDPR is also the legal basis for the processing. A recording is only made if we have informed you of this in advance and you have consented to the recording. In this case, the legal basis is Art. 6 para. 1 (a) GDPR.

The deletion of the data takes place after expiry of the applicable statutory retention obligations. If this is not the case, the data will be deleted when the purpose of the storage no longer applies.

Information on the right to deletion and information can be found under "Data subject rights".