10.05.2022 ACTIA IME GmbH [IR15086C]
With regard to the terms used, such as "personal data" or their "processing", we refer to the definitions in Art. 4 of the General Data Protection Regulations (GDPR).
Name / Company: ACTIA IME GmbH
Address: Dresdenstr. 17-18
Postcode / city: D-38124, Braunschweig
Commercial Register No.: HRB 4640
Managing Directors: Maik Luschtinetz
Phone number: + 49 (0) 531 38 701 0
Data Protection Officer:
Name / Company: Kämmer Consulting GmbH
Phone number: +49 (0)531 702249-0
Types of data processed:
☒ Inventory data (e.g., names, addresses).
☒ Contact information (e.g., e-mail, phone numbers).
☒ Usage data (e.g., websites visited, interest in content, access times).
☒ Meta/communication data (e.g., device information, IP addresses).
Processing of special categories of data (Art. 9 para. 1 GDPR):
☒ No special categories of data are processed.
Categories of data subjects:
☒ Customers / interested parties / suppliers.
☒ Visitors and users of the online offer.
Purpose of the Processing:
☒ Provision of the online offer, its contents and functions.
☒ Response to contact requests and communication with users.
☒ Marketing, advertising and market research.
☒ Response to applicant enquiries.
1. Applicable legal bases
3. Security measures
3.1 We shall take appropriate technical and organisational measures to ensure a level of protection appropriate to the risk, in accordance with Article 32 GDPR, taking into account the state of the art, implementation costs and the nature, scope, circumstances and purposes of processing and the different likelihood and severity of the risk to the rights and freedoms of natural persons; the measures shall include in particular safeguarding the confidentiality, integrity and availability of data by controlling physical access to the data, as well as the access, input, transmission, security of availability and its separation. Furthermore, we have established procedures that guarantee the exercise of data subject rights, deletion of data and reaction to data risks. Furthermore, we already consider the protection of personal data during the development or selection of hardware, software and procedures, in accordance with the principle of data protection through technology design and data protection-friendly presettings (Art. 25 GDPR).
3.2 The security measures include in particular the encrypted transmission of data between your browser and our server.
4. Cooperation with contract processors and third parties
4.1 If we disclose data to other persons and companies (contract processors or third parties) as part of our processing, transmit them to them or otherwise grant them access to the data, this is only done on the basis of legal permission (e.g. if the data is transmitted to third parties, such as to payment service providers, according to Art. 6 Para. 1 lit. b GDPR is required to fulfill the contract), you have consented, a legal obligation provides for this or on the basis of our legitimate interests (e.g. when using agents, web hosts, etc.).
4.2 If we commission third parties with the processing of data on the basis of a so-called "order processing contract", this is done on the basis of Art. 28 GDPR.
5. Transfers to third countries
A data transfer to third countries does not take place and is also not planned.
6. Rights of the data subjects
6.1 You have the right to request confirmation as to whether the data concerned are being processed and to request information about these data as well as further information and a copy of the data in accordance with Art. 15 GDPR.
6.2 According to Art. 16 GDPR, you have the right to request the completion of data concerning you or the correction of inaccurate data concerning you.
6.3 In accordance with Art. 17 GDPR, you have the right to demand that relevant data be deleted immediately or, alternatively, to demand a restriction on the processing of the data in accordance with Art. 18 GDPR.
6.4 You have the right to request that the data concerning you that you have provided to us be received in accordance with Art. 20 GDPR and to request their transmission to other persons responsible.
6.5 According to Art. 77 GDPR you have the further right to lodge a complaint with the competent supervisory authority.
7. Cancellation right
You have the right to revoke your consent according to Art. 7 para. 3 GDPR with effect for the future.
8. Objection right
You can object to the future processing of the data concerning you in accordance with Art. 21 GDPR at any time. The objection may be lodged in particular against processing for direct marketing purposes.
9. Cookies and right of objection for direct advertising
10. Deletion of data
10.2 In accordance with legal requirements, the storage is carried out in particular for 6 years in accordance with § 257 Para. 1 HGB [German Commercial Code] (trading books, inventories, opening balance sheets, annual financial statements, commercial letters, accounting documents, etc.) as well as for 10 years according to § 147 para. 1 AO [Tax Code] (books, records, management reports, accounting documents, commercial and business letters, documents relevant for taxation, etc.).
11. Answering inquiries and customer portal
11.1 We process inventory data (e.g., names and addresses as well as contact data of users), for the purpose of answering inquiries of customers, prospective customers and applicants, as well as provision of product documents in the customer portal in accordance with. Art. 6 Para. 1 lit. b, GDPR). Entries marked as mandatory in online forms are required to respond to requests or access the Customer Portal.
11.2 Users can optionally obtain a user account, in particular by viewing their specific product documentation. During the registration process, the required information will be communicated to the users. The user accounts are not public and cannot be indexed by search engines. If users have terminated their user account, their data with regard to the user account will be deleted, subject to their retention being required for commercial or tax reasons, according to Art. 6 Para. 1 lit. c GDPR. It is up to the users to save their data before the end of the contract if they have given notice of termination. We are entitled to irretrievably delete all user data stored during the term of the contract.
11.3 When registering, re-registering and using our online services, we store the IP address and the time of the respective user action. The data are stored on the basis of our legitimate interests as well as the user's protection against misuse and other unauthorised use. A passing on of this data to third parties does not take place in principle, unless it is necessary for the pursuit of our claims or there is a legal obligation in accordance with. Art. 6 Para. 1 lit. c, GDPR.
11.4 We process usage data (e.g., the visited websites of our online offer, interest in our products) and content data (e.g., entries in the contact form or user profile) for advertising purposes in a user profile in order to show the user e.g. product information based on their previously used services.
11.5 The deletion takes place after the expiration of statutory warranty and comparable obligations, the necessity of the storage of the data is checked every three years; in the case of statutory archiving obligations the deletion takes place after their expiration (end of commercial law (6 years) and tax law (10 years) storage obligation); details in the customer account remain up to its deletion.
12. Contacting us
12.1 When contacting us (via contact form or e-mail), the user's details for the processing of the contact enquiry and its handling according to the terms and conditions of this agreement are stored. Art. 6 Para. 1 lit. b) GDPR.
12.2 User information can be stored in our Customer Relationship Management System ("CRM System") or comparable request organisation.
12.3 We delete the requests if they are no longer necessary. We review the requirement every two years; requests from customers who have a customer account are stored permanently and are linked to the customer account details for deletion. In the case of statutory archiving obligations, the deletion takes place after their expiry (end of commercial law (6 years) and tax law (10 years) storage obligation).
13. Collection of access data and log files
13.1 We collect on the basis of our legitimate interests as defined in Art. 6 para. 1 lit. f. GDPR data on each access to the server on which this service is located (so-called server log files). Access data includes the name of the requested website, file, date and time of access, amount of data transferred, notification of successful retrieval, browser type along with version, the operating system of the user, referrer URL (previously visited), IP address, and the requesting provider.
13.2 Log file information is stored for a maximum of seven days for security reasons (e.g. to investigate misuse or fraud) and then deleted. Data whose further storage is required for evidentiary purposes are excluded from deletion until the respective incident has been finally clarified.
14. Cookies & range measurement
14.1 Cookies are information that is transferred from our web server or third party web servers to the user's web browser and stored there for later retrieval. Cookies can be small files or other types of information storage.
14.2 We use "session cookies", which are only stored on our website for the duration of your current visit (e.g. to store your login status). A randomly generated unique identification number, a so-called session ID, is stored in a session cookie. A cookie also contains information about its origin and the storage period. These cookies cannot store any other data. Session cookies are deleted when you have finished using our online offer and log out or close your browser, for example.
14.4 If users do not want cookies to be stored on their computer, they are asked to deactivate the corresponding option in the system settings of their browser. Cookies already saved can be deleted in the system settings of the browser at any time. The exclusion of cookies can lead to functional restrictions of this online offer.
15. Google Analytics
15.2 On our behalf, Google will use this information to evaluate the use of our online offering by the user, to compile reports on the activities within this online offering and to provide us with other services related to the use of this online offering and the internet. Pseudonymous usage profiles of users may be created from the processed data in this respect.
15.3 We use Google Analytics only with activated IP anonymisation. This means that the IP address of the user is shortened by Google within the member states of the European Union or in other countries that are party to the Agreement on the European Economic Area. Only in exceptional cases is the full IP address sent to a Google server in the US and shortened there.
15.5 For further information on data usage by Google, setting and objection options, please see the Google website: https://www.google.com/intl/de/policies/privacy/partners ("Data usage by Google when using websites or apps of our partners"), https://policies.google.com/technologies/ads ("Use of data for advertising purposes"), https://adssettings.google.com/authenticated ("Manage information Google uses to show you advertisements").