Data Protection - MA Support

An overview of data protection

I. General information

For Thomas Fruth m&a support GmbH, respecting data protection is not only a legal obligation, but also an important element of trust. The following information gives a simple overview of what happens to your personal data in our company. Personal data is all information that can be used to personally identify you. Detailed information on the topic of data protection can be found in this summary in the privacy policy.

1. Who is responsible for data processing?

Data processing is carried out by Thomas Fruth m&a support GmbH, Geißäcker 1a, 92283 Lauterhofen, Germany. Additional contact details and company information can be found in the Legal Notice of this website or in the following privacy policy.

2. How do we collect your data?

Firstly, we collect the data that you share with us. This includes, for example, data that you submit to us via e-mail.

Other data will be automatically collected by our IT systems when you visit the website. This is primarily technical data (e.g. IP address, operating system or time of visiting the website). The data is collected automatically as soon as you call up and use our website. In addition, your visit to our website may also be analysed statistically.

3. What rights do you have with regard to your data?

You have, at all times, the rights to which you are entitled under data protection laws. This includes, in particular, the right to receive information free of charge about the source, recipient and purpose of your stored personal data and the right to request the correction, removal or deletion of your personal data.

4. Who can I contact?

If you have questions on the topic of data protection or exercising your rights, you can contact us at any time via the address given in the Legal Notice. Furthermore, you are also entitled to lodge a complaint with the competent supervisory authority.

II. Information on data collection on our website

Why do we use your data?

We use your data for the purpose for which the data was collected. Processing for any other purpose shall take place only if this not incompatible with the original purpose.

Some of the data is collected to guarantee smooth provision of the website. Other data may be used to analyse your usage behaviour.

Privacy policy

I. General information and information on obligations

1. Information on the responsible authority

The controller responsible for data processing is:

Thomas Fruth m&a support GmbH
Represented by its managing director Thomas Fruth
Geißäcker 1a
92283 Lauterhofen
Germany
fruth@ma-support.de

Further company information can be found in the Legal Notice of this website.

2. Your rights as a data subject

As a data subject, you have the following rights:

You have

a right of access pursuant to and in accordance with the requirements of Art. 15 GDPR and Section 34 of the German Federal Data Protection Act (BDSG).
a right to rectification pursuant to and in accordance with the requirements of Art. 16 GDPR.
a right to erasure or restriction of processing pursuant to and in accordance with the requirements of Art. 17 and Art. 18 GDPR and Section 35 BDSG.
a right to object to processing, if the processing takes place based on a legitimate interest, pursuant to and in accordance with the requirements of Art. 21 (1) GDPR.
a right to withdraw consent with effect for future processing pursuant to and in accordance with the requirements of Art. 7 (3) GDPR.
a right to data portability pursuant to and in accordance with the requirements of Art. 20 GDPR.
a right to not be subject to a decision that is based solely on automated processing, including profiling, which produces legal effects in relation to you or which has a similarly significant impact on you, pursuant to and in accordance with the requirements of Art. 22 GDPR.
a right to make a complaint to a data protection authority pursuant to and in accordance with the requirements of Art. 77 GDPR.

Process

If you exercise your aforementioned rights against us, we will process the data you have sent to us in order to grant you your rights. We will then store the data you have sent to us and, if applicable, the data sent from us to you for the purpose of documentation until the expiration of the statutory limitation period (currently three years).

The legal basis for this storage is Art. 6 (1) (f) GDPR (legitimate interest in data processing). We have a legitimate interest to avoid legal proceedings by proving that you have been granted your rights in accordance with the law.

You can object to the aforementioned storage of your personal data at any time pursuant to Art. 21 (1) GDPR. However, it should be noted that the stored data is essential as evidence of fulfilling the rights of a data subject, as there are no other opportunities to create evidence or none that are similarly suitable for the defence against legal claims.

3. Data protection measures

We protect our systems, and therefore also your personal data, through technical and organisational measures against loss, access, modification or dissemination by unauthorised persons.

For security reasons and to protect against the transfer of confidential content, such as orders or requests that you send to us as the website operator, this website uses an SSL or TLS encryption. You can recognise an encrypted connection when the address bar in the browser changes from “http://” to “https://” and a lock symbol appears in your browser bar.

If the SSL or TLS encryption is activated, the data that you send to us cannot be read by third parties.

It should be noted that data transfers over the internet (e.g. in e-mail communication) can have gaps in their security. Completely protecting data from access by third parties is therefore not 100% possible.

4. Methods of data processing

a) Categories of personal data, sources

We process your personal data insofar as it is required for the justification, content design or amendment of contractual relationship between you and we (inventory data). Inventory data includes, in particular: name, title, contact details (postal address, phone, e-mail address), data of birth, etc.

We also process your usage data. Usage data is data that is collected through your behaviour when using our website and our services, including, in particular, your IP address, the start and end of your visit to our website and information about which content you have looked at on our website.

We collect the aforementioned data either directly from you (e.g. from visiting the website) or, insofar as this is permitted by data protection laws, from third parties or publicly accessible sources (e.g. trade and association registers, press, media, internet).

b) Data transfer to third countries outside the EU

All information that we receive from you, or about you, will generally be processed on servers within the European Union. Your data will be transferred to or processed in third countries without your express consent only insofar as this is stipulated by law or if a suitable level of data protection is guaranteed in the third country.

c) Disclosure of data

We will never disclose your personal data to third parties without authorisation. However, we can disclose your data to third parties if you have consented to it, if the disclosure is required to fulfil our legal obligations or if we are legally entitled or obligated to disclose data as a result of legal provisions or regulatory or legal decrees. In particular, this can apply to information disclosure for the purposes of criminal prosecution, danger prevention or exercising intellectual property rights.

We will disclose personal data to third parties if this is necessary in the context of contract processing. Further transfer of data will not take place, or will take place only if you have expressly consented to this transfer. The legal basis for the data processing is Art. 6 (1) (b) GDPR, which permits data processing to fulfil a contract or to take precontractual measures.

d) Purpose of data processing

We use the data only for the purpose for which the data was collected from you. We can further process the data for another purpose if this other purpose is not incompatible with the original purpose (Art. 5 (1) (c) GDPR).

e) Storage limitation

Provided that this is not specified otherwise, we will store the data collected from you for only as long as is required for the respective purpose, unless erasure would conflict with the statutory retention period, for example in commercial law or tax law.

II. Individual processing activities

In the following, we want to be as transparent as possible in showing you which of your personal data we process for which reason, on what grounds and for what purpose.

1. Data processing in business transactions

a) Precontractual communication

If you are interested in our services, you can contact us at any time. By contacting us, you agree to the processing and storage of the data you send to us for processing your inquiry (particularly your e-mail address). You can object to this processing at any time, effective for the future. To do this, please use our contact details given in the Legal Notice. Please also be aware that in this case, we can no longer process your inquiry.

We will process the data you send to us until the purpose of your inquiry is served, unless erasure would conflict with statutory retention periods. If the reason you have contacted us is to assert your rights as a data subject, the information in the section “Your rights as a data subject” shall apply.

The legal basis for processing the data you send to us by contacting us is Art. 6 (1) (a) GDPR (consent of the data subject). You can withdraw your consent at any time, effective for the future. To do this, please contact us using the details given in the Legal Notice.

b) Client data

If you want to make use of one of our services, it will be necessary for us to process certain data about you for the purposes of concluding the contract and its processing.

We receive this data directly from you.

The legal basis for processing your data is Art. 6 (1) (b) GDPR (data processing to fulfil a contract). The legal basis for processing the data you voluntarily supply during the contract initiation is Art. 6 (1) (a) GDPR (consent of the data subject). You can withdraw your consent at any time, effective for the future. To do this, please contact us using the details given in the Legal Notice.

We may also process the data you give us in order to provide you with information about further products of interest from our portfolio or to send you technical information.

Due to regulations in commercial and tax law, we are obliged to store your address, payment and transaction details.

2. Data collection on our website

a) Server log files

When calling up a website and retrieving the associated data from a server, general data will automatically be sent to the respective providing server. This data transfer takes place automatically and is a fundamental element of communication between devices on the internet.

The data that is transferred by default includes the following information:

Your IP address
Product and version information about the browser and operating system used (known as a “user agent”)
The website from which you accessed our website (known as the “referrer URL”)
Hostname of the accessing computer
Date and time of access (known as a “timestamp”)

The server will log this information, file it in a table and store it there for a short term (known as server log files). Analysing these log files allows us to detect and then eliminate errors on the website, determine the website’s operating capacity at certain times and carry out constructive modifications or improvements. We can also ensure the security of servers as we are able to trace which IP addresses have carried out attacks on our servers. We will not consolidate this data with other data sources.

The legal basis for the use of server log files is Art. 6 (1) (f) GDPR. The legitimate interest arises from the necessity of operating our website, in particular detecting and eliminating errors on the website, determining the website’s capacity, carrying out modifications or improvements and ensuring the security of the system. You can object to the processing of your data on the basis of our legitimate interest at any time pursuant to Art. 21 GDPR. To do this, please contact us using the details given in the Legal Notice. However, before you do so, we would like to note that processing your data in server log files is essential in accordance with Art. 21 (1) GDPR, as the website cannot actually operate otherwise.

b) Contact

Our website offers methods for contacting us directly. By contacting us, you agree to the processing and storage of the data you send to us for processing your inquiry (particularly your e-mail address). You can object to this processing at any time, effective for the future. To do this, please use our contact details given in the Legal Notice. Please also be aware that in this case, we can no longer process your inquiry.

You can object to the processing of your data on the basis of our legitimate interest at any time pursuant to Art. 21 GDPR. To do this, please contact us using the details given in the Legal Notice.

The details that you submit to us will stay with us until you request that we delete it, you withdraw your consent to storage or the purpose for which the data was stored becomes inapplicable (e.g. after the processing of your request is completed). Mandatory statutory provisions, in particular retention requirements, remain unaffected by this.

III. Validity of the privacy statement

The privacy statement is currently valid and is dated 03/08/2020.