Data processing agreement

Taking seriously the protection of all information you provide whenever you contact us or request information, we treat your personal data as confidential and in compliance with all relevant provisions of data protection law. In consequence, we handle your personal information in accordance with all applicable statutory regulations on privacy protection. In www.er-secure.de we have appointed an expert and reliable external data protection officer, whose services will ensure our data protection policy remains in compliance with the EU GDPR.

Whenever you use this website, a variety of personal information will be collected. Personal data comprises data that can be used to personally identify you. This data processing agreement explains which data we collect as well as the purposes for which we use this data. It also explains how and why we collect this information. We hereby advise you that the transmission of data via the Internet (i.e. through email communications) may be prone to security gaps. It is not possible to completely protect data against third party access.

The party responsible for processing the data collected on this website is:

2W Technische Informations GmbH & Co. KG
Lindberghstraße 40
80939 Munich

Tel.: +49 89 520 35 0
Email: info@2wgmbh.de

Transfer of data

We will disclose your personal data to third parties only to the extent permissible and/or necessary by law [e.g. within the scope of Article 6 of the GDPR]. For some of the order data processing mandated by law we use the services of third-party providers. However, the final responsibility for data processing remains with us. On some pages of our website we also use plug-ins provided by third parties.

Liability for contents of our own

The contents provided on our web pages have been prepared with utmost care. However, we do not assume any liability for the correctness, integrity or currentness of the contents. As a service provider, we are responsible for our own contents presented on these pages in accordance with the provisions of the applicable laws.

Questions

Please submit by email any requests for information or disclosure or any objections to the processing of your data to our data protection coordinator at: datenschutz@2wgmbh.de

Processing data (customer-related and contract-related data)

The data on this website is processed by the operator of the website. Their contact information is provided in our legal notice. A portion of the information is generated to guarantee the error-free provision of the website. Other data may be used to analyse your user patterns.

You have the right to receive information about the source, recipients and purposes of your archived personal data at any time without having to pay a fee for such disclosures. You also have the right to demand that your data be rectified, blocked or eradicated. If you have any questions relating to this or any other questions relating to the topic of data protection, you can contact us at any time using the address provided in our legal notice. You also have the right to lodge a complaint with the competent supervisory authority.

Moreover, under certain circumstances, you have the right to demand the restriction of the processing of your personal data. For details, please consult the data processing agreement under section “Right to restriction of data processing”.

Analysis tools and tools provided by third parties

There is a possibility that your browsing patterns will be statistically analysed when you visit our website. Such analyses are performed primarily with the help of cookies and so-called analysis programmes. As a rule, the analysis of your browsing patterns is conducted anonymously; which means that the browsing patterns cannot be traced back to you.

You have the option to object to such analysis or prevent its performance by not using certain tools. For detailed information about these tools and your options to object, consult our data processing agreement below.

The data will be deleted immediately if it is no longer required, but no later than after six months.

External hosting

This website is hosted by an external service provider (host). The personal data collected on this website is stored on the servers operated by the host. This may include, but is not limited to, IP addresses, contact requests, meta data and communications, contract information, contact information, names, web page access, and other data generated through a website.

The host is used for the purpose of fulfilling the contract with our potential and existing customers (Article 6, paragraph 1, letter b of the GDPR) and in the interest of secure, fast and efficient provision of our online services by a professional provider (Article 6, paragraph 1, letter f of the GDPR).

Our host will only process your data to the extent necessary to fulfil their performance obligations and to follow our instructions with respect to such data. In order to guarantee processing in compliance with data protection regulations, we have concluded an order processing contract with our host.

Revocation of your consent to the processing of data

A wide range of data processing transactions are possible only subject to your express consent. You can also revoke at any time any consent you have already given us. Doing so merely requires that you send us an informal notification via email. This shall be without prejudice to the lawfulness of any data collection that occurred prior to your revocation.

Right to object to the collection of data in special cases; right to object to direct advertising (Art. 21 GDPR)

In the event that data is processed on the basis of Article 6, paragraph 1, letters e or f of the GDPR, you have the right at any time to object to the processing of your personal data based on grounds arising from your unique situation; this also applies to any profiling based on these provisions. To determine the legal basis on which any processing of data is based, consult this data processing agreement. If you log an objection, we will no longer process your affected personal data, unless we are in a position to present compelling protection-worthy grounds for the processing of your data that outweigh your interests, rights and freedoms or if the processing serves the purpose of claiming, exercising or defending legal entitlements (objection pursuant to Article 21, paragraph 1 of the GDPR).

If your personal data is being processed in order to engage in direct advertising, you have the right at any time to object to the processing of your affected personal data for the purposes of such advertising; this also applies to profiling to the extent that it is affiliated with such direct advertising. If you object, your personal data will subsequently no longer be used for direct advertising purposes (objection pursuant to Article 21, paragraph 2 of the GDPR).

Rights of the data subjects

We hereby inform you that - pursuant to Article 15 et seq. of the GDPR - you have the right to obtain information on the personal data concerned and demand rectification or deletion of the data concerned or limit or object to its processing. You are, furthermore, entitled to exercise your right to data portability. Likewise, under Article 77 of the GDPR, you have the right to complain to a data protection supervisory authority if you consider the processing of your personal data to be in violation of the provisions set forth in the GDPR. If the processing is based on Article 6, paragraph 1, letter a of the GDPR or Article 9, paragraph 2, letter a of the GDPR (Consent), you also have the right to revoke your consent at any time without affecting the legality of the processing carried out on the basis of the consent granted previously until its revocation.

Right to information, Art. 15 GDPR

You have the right at any time to request information free of charge about any of your personal data that is stored as well as its origin, the recipient and the purpose for which it has been processed (especially about the processing purpose, the recipients of the data, the storage period, etc.)

Right to rectification, Art. 16 GDPR

You have the right to demand the rectification of the data stored about you if the data proves to be incorrect or incomplete. This includes the right to complete incomplete personal data by providing supplementary statements or notifications.

Right to erasure, Art. 17 GDPR

You have the right to demand the erasure of your personal data.

This is possible, for instance, if the data is no longer needed for the purpose for which it was originally collected or if the data has to be eradicated on the basis of legal requirements. However, this right can be excluded in individual cases.

Right to data portability, Art. 20 GDPR

You have the right to demand that the data concerning you be returned to you or a specified controller in a conventional, electronic, machine-readable data format if you provided this data yourself.

Changes to our data protection regulations

We reserve the right to amend this data processing agreement from time to time to ensure its compliance with the current legal requirements or to reflect a change of services in the data processing agreement, e.g. the introduction of new services. The new data processing agreement will then be in effect for your next visit.

Right to lodge a complaint with a supervisory authority, Art. 77 GDPR

You have the right to lodge a complaint with a supervisory authority of the Union or member states at any time in case of any violations of data protection regulations.

You may also at any time turn to the data protection officer at the Data Protection Authority of Bavaria to report any violations of data protection regulations:
Email: poststelle@lda.bayern.de
Homepage: https://www.lda.bayern.de

SSL / TLS encryption

For security reasons and to protect the transmission of confidential content, such as purchase orders or inquiries you submit to us as the website operator, this website uses either SSL or TLS encryption. You can recognise an encrypted connection by the address line of the browser switching from “http://” to “https://” and also by the appearance of the lock icon in the browser line.

When SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Right to restriction of data processing, Art. 18 DSGVO

You also have the right to request that processing of your personal data be restricted. To make this request, you can contact us at any time using the address provided in our legal notice. The right to demand restriction of processing applies in the following cases:

  • In the event that you dispute the correctness of your data archived by us, we will usually need some time to verify this claim. During the time that this investigation is ongoing, you have the right to demand that we restrict the processing of your personal data.
  • If the processing of your personal data was/is conducted in an unlawful manner, you have the option to demand the restriction of the processing of your data in lieu of demanding the erasure of this data.
  • If we no longer require your personal data and you need your personal data to exercise, defend or claim legal entitlements, you have the right to demand the restriction of the processing of your personal data instead of its erasure.
  • If you have raised an objection pursuant to Article 21, paragraph 1 of the GDPR, your rights and our rights will have to be weighed against each other. As long as it has not been determined whose interests prevail, you have the right to demand a restriction of the processing of your personal data.

If you have restricted the processing of your personal data, this data – with the exception of its archiving – may be processed only subject to your consent or to claim, exercise or defend legal entitlements or to protect the rights of other natural persons or legal entities or for important public interest reasons cited by the European Union or a member state of the EU.

Cookies

Some of our web pages use so-called cookies. Cookies do not harm your computer and do not contain any viruses. Cookies help make our website more user-friendly, efficient and secure. Cookies are small text files that are stored on your computer and are saved by your browser.

The majority of the cookies we use are what are known as ‘session cookies’. These are automatically deleted after your visit. Other cookies remain stored on your device until you delete them. These cookies enable us to recognise your browser when you next visit.

You can configure your browser to inform you about the use of cookies so that you can decide on a case-by-case-basis whether to accept them. Alternatively, you can configure your browser to enable/disable cookies either permanently or only under certain conditions, or to delete cookies automatically as soon as you close your browser. Disabling cookies may limit the functionality of this website.

Cookies that are required for the performance of the electronic communications transaction or to provide certain functions you want to use (e.g. the shopping cart function) are stored on the basis of Article 6, paragraph 1, letter f of the GDPR. The website operator has a legitimate interest in storing cookies to ensure the technically error-free and optimised provision of the operator’s services. If a corresponding agreement has been requested (e.g. an agreement to the storage of cookies), the processing takes place exclusively on the basis of Article 6, paragraph 1, letter a of the GDPR; the agreement can be revoked at any time.

If other cookies (e.g. cookies for the analysis of your browsing patterns) should be stored, they are addressed separately in this data processing agreement.

Server log files

The provider of this website and its pages automatically collects and stores information in so-called server log files, which your browser communicates to us automatically. The information comprises:

  • The type and version of browser used
  • The operating system used
  • Referrer URL
  • The host name of the accessing computer
  • The time of the server inquiry
  • The IP address

This data is not merged with other data sources.

This data is recorded on the basis of Article 6, paragraph 1, letter f of the GDPR. The operator of the website has a legitimate interest in the technically error-free depiction and the optimization of the operator’s website - which requires that server log files be recorded.

Contact form

Whenever you send us inquiries using the contact form, we save your details from the form, including the contact details you provide there, so that we can process the request and in the event that we have any further questions. We do not pass on this information without your consent.

This data will be processed in accordance with Article 6, paragraph 1, letter b of the GDPR if your request is related to the execution of a contract or if it is necessary to carry out pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of the requests addressed to us (Article 6, paragraph 1, letter f of the GDPR) or on your consent (Article 6, paragraph 1, letter a of the GDPR) if your consent has been requested.

The information you have entered into the contact form shall remain with us until you ask us to erase the data, revoke your consent to the archiving of data or if the purpose for which the information is being archived no longer exists (e.g. after we have concluded our response to your inquiry). This shall be without prejudice to any mandatory legal provisions – in particular, retention periods.

You can revoke your consent - given, for example, to receive advertising or information about our company that may interest you - at any time with effect for the future and without the need to provide reasons. You can use the aforementioned contact form for this purpose. We do not pass on this information without your consent. Contact occurs via email: info@2wgmbh.de

Request by email, telephone or fax

If you contact us by email, telephone or fax, your request, including all resulting personal data (name, request) will be stored and processed by us for the purpose of processing your request. We do not pass on this information without your consent.

This data will be processed in accordance with Article 6, paragraph 1, letter b of the GDPR if your request is related to the execution of a contract or if it is necessary to carry out pre-contractual measures. In all other cases, processing is based on your consent (Article 6, paragraph 1, letter a of the GDPR) and/or on our legitimate interests (Article 6, paragraph 1, letter f of the GDPR), since we have a legitimate interest in the effective processing of requests addressed to us.

The data sent by you to us remains with us until you request us to erase it, you revoke your consent to the storage of your data or the purpose for the data storage lapses (e.g. after completion of your request). This shall be without prejudice to any mandatory legal provisions – in particular, retention periods.

Analysis tools and advertising

Matomo (formerly Piwik)

This website uses the open source web analysis service Matomo. Matomo uses so-called “cookies”. Cookies are text files that are stored on your computer and that make it possible to analyse your use of this website. In conjunction with this, the information about the use of this website generated by the cookie will be archived on our server. Prior to archiving, the IP address will first be anonymised.

Matomo cookies will remain on your device until you delete them.

The storage of Matomo cookies and the use of this analysis tool are based on Article 6, paragraph 1, letter f of the GDPR. The website operator has a legitimate interest in the analysis of user patterns, as they make it possible to optimise the operator’s web offerings and advertising. If a corresponding agreement has been requested (e.g. an agreement to the storage of cookies), the processing takes place exclusively on the basis of Article 6, paragraph 1, letter a of the GDPR; the agreement can be revoked at any time.

The information generated by cookies concerning the use of this website shall not be shared with any third parties. You may prevent the storage of cookies at any time by making pertinent changes to your browser software settings; however, we have to point out that in this case you may not be able to use all of the functions of this website to their full extent.

If you do not consent to the storage and use of your data, you have the option to deactivate the storage and use of such data here. In this case, an opt-out cookie will be placed in our browser, preventing the storage of usage data by Matomo. Deleting your cookies will also result in the deletion of the Matomo opt-out cookie. You will therefore have to reactivate the opt-out when you return to visit this website.

Plug-ins and tools

Google Maps

This website uses the Google Maps map service via an API. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.

To use Google Maps, it is necessary to save your IP address. This information is generally transmitted to a Google server in the United States and stored there. The provider of this website has no influence on this data transfer.

The use of Google Maps is in the interest of making our website appealing and to facilitate the location of places specified by us on the website. This constitutes a justified interest pursuant to Article 6, paragraph 1, letter f of the GDPR.

For more information on how user data is handled, refer to the Google Privacy Policy: https://policies.google.com/privacy?hl=en.

Google reCAPTCHA

We use “Google reCAPTCHA” (hereinafter, “reCAPTCHA”) on this website. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.

With reCAPTCHA we want to check if the data entry on this website (for example in a contact form) is done by a human or by an automated program. To this end, reCAPTCHA analyses the behaviour of the website visitor based on various characteristics. This analysis begins automatically as soon as the website visitor enters the website. For analysis, reCAPTCHA evaluates various information (for example, the IP address, the website visitor’s visit time on the website, or user mouse movements). The data collected during the analysis will be forwarded to Google.

The reCAPTCHA analyses are performed entirely in the background. Website visitors are not advised that an analysis is taking place.

The data is processed on the basis of Article 6, paragraph 1, letter f of the GDPR. The website operator has a legitimate interest in protecting their web offerings from abusive automated spying and SPAM.

For more information about Google reCAPTCHA and the Google Privacy Policy, visit the following links: https://policies.google.com/privacy?hl=en and https://policies.google.com/terms?hl=en

Processing data (customer-related and contract-related data)

We collect, process and use personal data only to the extent required for establishing, structuring or modifying legal relationships (master data). These actions are taken on the basis of Article 6, paragraph 1, letter b of the GDPR, which permits the processing of data for the fulfilment of a contract or pre-contractual actions. We collect, process and use personal data concerning the use of our website (usage data) only to the extent necessary for the user to use the services and for us to invoice our services.

The collected customer data will be erased upon the completion of the order or the termination of the business relationship. This shall be without prejudice to any statutory retention mandates.

Handling of applicant data

We offer website visitors the opportunity to submit job applications to us (e.g. via email, via postal services on by submitting the online job application form). Below, we will brief you on the scope, purpose and use of the personal data collected from you in conjunction with the application process. We assure you that the collection, processing and use of your data will occur in compliance with the applicable data privacy rights and all other statutory provisions and that your data will always be treated as strictly confidential.

Scope and purpose of the collection of data

If you submit a job application to us, we will process any affiliated personal data (e.g. contact and communications data, application documents, notes taken during job interviews, etc.) to the extent necessary for us to make a decision concerning the establishment of an employment relationship. The legal grounds for the aforementioned are § 26 of the New GDPR according to German Law (Negotiation of an Employment Relationship), Article 6, paragraph 1, letter b of the GDPR (General Contract Negotiations) and – provided you have given us your consent – Article 6, paragraph 1, letter a of the GDPR. You may revoke any consent given at any time. Within our company, your personal data will only be shared with individuals who are involved in the processing of your job application.

If your job application should result in your recruitment, the data you have submitted will be archived on the grounds of § 26 of the New GDPR and Article 6, paragraph 1, letter b of the GDPR for the purpose of implementing the employment relationship in our data processing system.

Data archiving period

If we are unable to make you a job offer or if you reject a job offer or withdraw your application, we reserve the right to retain the data you have submitted on the basis of our legitimate interests (Article 6, paragraph 1, letter f of the GDPR) for up to 6 months from the end of the application procedure (rejection or withdrawal of the application). Afterwards, the data will be deleted, and the physical application documents will be destroyed. Storage of the data serves, in particular, as evidence in the event of a legal dispute. If it is evident that the data will be required after the expiry of the 6-month period (e.g. due to an impending or pending legal dispute), deletion will only take place when the purpose for further storage no longer applies.

Longer storage may also take place if you have given your consent (Article 6, paragraph 1, letter a of the GDPR) or if statutory data retention requirements preclude the deletion.

Admission to the applicant pool

If we do not make you a job offer, you may be able to join our applicant pool. In case of admission, all documents and information from the application will be transferred to the applicant pool in order to contact you in case of suitable vacancies.

Admission to the applicant pool is based exclusively on your express consent (Article 6, paragraph 1, letter a of the GDPR). The submission agreement is voluntary and has no relation to the ongoing application procedure. The affected person can revoke their agreement at any time. In this case, the data from the applicant pool will be irrevocably deleted, provided there are no legal reasons for storage.

The data from the applicant pool will be irrevocably deleted no later than two years after consent was granted.

Google Tag Manager

This website uses Google Tag Manager. This service makes it possible to manage website tags via a user interface. Google Tag Manager merely implements tags. This means: No cookies and no personal data are used and entered, respectively. Google Tag Manager does, however, trigger other tags, which may record data if applicable. However, Google Tag Manager will not access this data. If carried out on the domain or the cookie level, a deactivation will remain in place for all tracking tags if these are implemented with Google Tag Manager.

 

Close