Privacy information
In accordance with the provisions of Articles 13, 14 and 21 of the General Data Protection Regulation (GDPR), we are hereby informing you about the processing of the personal data collected about you and your rights under data protection law in this regard. Which data is processed in detail and how it is used depends largely on the requested or agreed services.
Comprehensive information on the processing of your personal data in the context of the establishment, execution or fulfillment of a contract or the implementation of pre-contractual measures can be found in this document.
1. Controller as defined by the GDPR
FS/CS GmbH
represented by the managing director Falk Schmidt
Registered office: Mühlstr. 13-15, 63667 Nidda, Germany
Postal address: P.O. Box 1147, 63658 Nidda, Germany
E-Mail: office@falkschmidt.com
Tel.: +49 6043 57590-50
2. general information on data processing
(1) The collection and processing of your personal data is carried out in compliance with the applicable data protection regulations, in particular the EU General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG), the German Telecommunications Digital Services Data Protection Act (TDDDG) and other associated legal norms. We collect and process personal data only to the absolutely necessary minimum extent in order to operate the above-mentioned web offers. This statement describes how and for what purpose your data is collected and used when you use our website and what options you have in relation to personal data.
(2) In order to process inquiries, it is usually necessary to provide a valid e-mail address and possibly other personal data (e.g. your name or telephone number). If you provide us with personal data in the context of an inquiry or other communication, the information you provide will only be stored for this purpose and for the processing of possible follow-up activities that may result from it. After the request has been processed and any follow-up activities have been completed, your personal data will be deleted or processing will be restricted if legal obligations to retain data prevent deletion.
3. Purposes and legal bases of the processing
(1) We process your personal data exclusively in accordance with the provisions of the European General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG) and only if this processing is necessary for the establishment, execution or fulfillment of a contract or for the implementation of pre-contractual measures. The legal basis for this processing is Art. 6 (1) point b GDPR.
(2) If you give us your express consent to process personal data for specific purposes (e.g. disclosure to third parties, evaluation for marketing purposes or advertising), this processing is carried out lawfully on the basis of Art. 6 (1) point a GDPR. Consent given can be withdrawn at any time with effect for the future (see also Section 9 of this document).
(3) If necessary and to the extent permitted by law, we process your data beyond the actual contractual purposes to fulfill legal obligations in accordance with Art. 6 (1) point c GDPR. In addition, processing may be carried out to protect our legitimate interests or the legitimate interests of third parties in accordance with Art. 6 (1) point f GDPR. If necessary and required by law, we will actively inform you, stating the specific legitimate interest.
4. categories of personal data
(1) We only process personal data of general categories that are necessary for the purposes of processing mentioned in section 2. This may include general data about you or persons in your company (name, address or contact details). In the case of sole traders or partnerships, bank details may also be included in the personal data. In addition, we may process other data that you provide to us in the context of establishing the contract.
(2) The processing of special categories of personal data in accordance with Art. 9 GDPR is generally not required and, if necessary, will only be carried out on the basis of your express consent.
5. origin of the data
(1) We process personal data that you provide to us when contacting us or when establishing, executing or fulfilling a contractual relationship or when taking pre-contractual measures.
(2) Should personal data be collected from third parties, we will actively inform you about the collection of this data.
6. recipient of the data
(1) Within our company, we only disclose your personal data to the departments and individuals who require this data to fulfil contractual and legal obligations or to pursue our legitimate interests in accordance with Article 6 (1) (f) of the GDPR. All individuals entrusted with processing are trained in data protection at regular intervals.
(2) Insofar as this is permissible for the purposes and legal bases described in section 2 of this document, we may transfer your personal data to our affiliated companies.
(3) For the purpose of establishing, executing and fulfilling contracts and for the purpose of implementing pre-contractual measures, your personal data will also be processed by processors in accordance with the attached list. The processing of personal data by processors is generally carried out on the basis of data processing agreements in accordance with Article 28 of the GDPR or EU standard contractual clauses. In this case, the categories of recipients are providers of IT services and software products, e-mail services and online platforms for data processing, as well as messenger services.
(4) In addition, personal data will only be passed on to recipients outside our company to the extent that this is permitted or required by law, that the transfer is necessary for the processing and thus for the fulfillment of the contract or for the implementation of pre-contractual measures, that we have your express consent in other cases or that we are authorized to provide information. Under these conditions, personal data may, for example, be transferred to the following recipients:
- Public bodies and institutions (e.g. public prosecutor’s office, police, supervisory authorities, tax office) if there is a legal or official obligation to do so,
- Other data recipients for whom you have given us your consent to transfer your data.
7. transfer to third countries
(1) A transfer of personal data to countries outside the EEA (European Economic Area) or to an international organization will only take place if this is necessary for the execution and thus for the fulfillment of the contract or, at your request, for the implementation of pre-contractual measures, if the transfer is required by law or if you have given us your consent. In such cases, recipients may include software companies or IT platform operators with whom we have concluded a contract based on the EU standard contract clauses and taken appropriate measures to ensure the security of the processing.
8. Duration of data storage
(1) Where necessary, we process and store your personal data for the duration of our business relationship or for the fulfillment of contractual purposes. This includes, among other things, the initiation and execution of a contract.
(2) In addition, we are subject to various storage and documentation requirements, which arise, among other things, from the German Commercial Code (HGB), the German Fiscal Code (AO) or other legal norms.
(3) Finally, the storage period is also governed by the statutory limitation periods, which, for example, according to §§ 195 et seq. of the German Civil Code (BGB), are generally three years, but in certain cases can be up to thirty years.
9. Your rights as a data subject
(1) Every data subject has the right of access under Article 15 of the GDPR, the right to rectification under Article 16 of the GDPR, the right to erasure under Article 17 of the GDPR, the right to restriction of processing under Article 18 of the GDPR, the right to notification under Article 19 of the GDPR and the right to data portability under Article 20 of the GDPR.
(2) If you believe that the processing of your personal data by us is unlawful, you also have the right to lodge a complaint with a data protection supervisory authority in accordance with Art. 77 GDPR. The right to lodge a complaint is without prejudice to any other administrative or judicial remedy.
(3) If data is processed on the basis of your consent, you have the right at any time to revoke this consent to the processing of your personal data with effect for the future in accordance with Art. 7 GDPR. This does not affect processing that took place before the revocation. Please note that we may be obliged to store certain data for a certain period of time for the purpose of complying with legal requirements (see section 8 of this document).
(4) If as the processing of your personal data is carried out in accordance with Art. 6 (1) point f GDPR for the purposes of the legitimate interests pursued by us, you have the right to object to the processing of this data at any time on grounds relating to your particular situation, in accordance with Art. 21 GDPR. We will then refrain from processing this personal data, except in cases where there are compelling legitimate grounds for processing that are to be demonstrated on our part. These must outweigh your interests, rights and freedoms, or the processing must serve to assert, exercise or defend legal claims.
(5) In individual cases, we process your personal data for direct marketing purposes. You have the right to object at any time to processing for the purposes of such advertising. This also applies to profiling, insofar as it is associated with this direct advertising. If you object to processing for the purposes of direct advertising, we will no longer process your personal data for these purposes.
(6) You can use our request form to submit requests to exercise your rights.
10. Necessity of the provision of personal data
(1) As a rule, there is no legal requirement to provide your personal data for the establishment, execution or fulfillment of contracts or for the implementation of pre-contractual measures. You are therefore not legally obliged to provide personal data. However, this information is usually required for decisions regarding the conclusion of a contract, the fulfillment of a contract or for pre-contractual measures. If you do not provide us with the necessary personal data, we may not be able to make a decision regarding contractual measures, conclude a contract or execute your order and will therefore regularly have to refuse to enter into a business relationship or terminate an existing contract.
(2) However, we only request personal data that is absolutely necessary for the conclusion of the contract, the fulfillment of the contract or pre-contractual measures. Any further personal data will neither be requested nor processed by us in any other way.
11. no automated decision-making
(1) We do not use any fully automated decision-making pursuant to Art. 22 GDPR for the establishment, fulfillment or performance of business relations and contracts or for the implementation of pre-contractual measures.
12. Processing of personal data when visiting our website
(1) If you only access our websites in read-only mode (i.e. if you do not register or otherwise provide us with information), we only collect the personal data that your browser transmits to our server in accordance with the settings you have made and that are technically necessary to display the website in your web browser and to ensure the stability and security of our infrastructure in accordance with Art. 6 (1) sentence 1 point f GDPR. This includes
– the domain of the website accessed
– your IP address
– request (content of the request)
– date and time of the request (time stamp)
– browser (user agent)
– access status/HTTP status code
(2) These data are stored for the purpose of investigating illegal access attempts (“hacking”) and preventing misuse. The storage period depends on the technical and administrative necessity to ensure the smooth operation of our website. Any further logging of website usage by us, in particular to analyze user behavior, does not take place.
(3) In addition to the collection of the aforementioned data, cookies may be stored on your device when you use our website. Cookies are text files that are stored by your browser and evaluated by the web server and serve to enable certain functions of the website or to analyze user interactions with the website. Such an analysis is not used on our pages.
(4) We only use cookies in accordance with the legal requirements. Unless the cookies are technically necessary to provide the telemedia service (our website), cookies will only be used on the basis of your explicit and informed consent. You can revoke this consent at any time.
(5) If cookies requiring consent are used, we use the BorlabsCookie consent management system to take into account your individual preferences regarding your consent. Your user ID, language, the type of consent you have given and the time of consent are stored on our web server and in a cookie on your end device.
You have given the following consent:
You can change your preferences here: