Data protection

Information in accordance with Art. 13 GDPR / Privacy policy

Trust is important, especially when it comes to your data. For this reason, we consider it our obligation to collect only the data that is absolutely necessary and to manage the data with due care and protect it from misuse. KM OptoElektronik strictly adheres to the data protection regulations when collecting and processing your data.
Below you will find information on the processing of your data and the rights to which you are entitled:

1. name and contact details of the controller

The controller for the processing of data within the meaning of the General Data Protection Regulation (GDPR), other data protection laws applicable in the member states of the European Union and other provisions of a data protection nature is

KM OptoElektronik GmbH
Mollenbachstraße 14
71229 Leonberg
Germany

If you have any questions about this privacy policy or wish to assert your rights, you can contact us at any time. You can find the contact details in the legal notice.

2. Categories of personal data collected, purposes and legal bases of processing

KM OptoElektronik GmbH collects the following data:

• Company name
• Title, first name, surname
• Postal address
• E-Mail address
• Telephone number
• Bank details

This data is collected

• to be able to identify you as our customer
• for correspondence with you
• to prepare quotations and/or invoices

The legal basis for processing based on your consent is Art. 6 para. 1 lit. a GDPR.

If the processing of personal data is necessary for the performance of a contract to which you are a party (e.g. in the course of a purchase), the processing is based on Art. 6 para. 1 lit. b GDPR. The same applies to processing operations that are necessary to carry out pre-contractual measures, e.g. in cases of inquiries about our products or services.

If our company is subject to a legal obligation that requires the processing of personal data, for example to fulfill tax obligations, the processing is based on Art. 6 para. 1 lit. c GDPR.

In very rare cases, it may be necessary to process personal data in order to protect the vital interests of the data subject or another natural person. For example, if you were injured during a visit to our company and we then had to pass on your name to a doctor, hospital or other third party, such a case would occur. The processing of the data would then be based on Art. 6 para. 1 lit. d GDPR.

A so-called legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR may also make processing necessary. Processing operations that are not covered by any of the aforementioned legal bases are based on this legal basis if the processing is necessary to safeguard a legitimate interest of our company (e.g. intention to make a profit, presentation of the company, etc.) or a third party, provided that the interests, fundamental rights and freedoms of the data subject do not prevail.

The European legislator is of the opinion that a legitimate interest can be assumed if the data subject is a customer of the controller (Recital 47 Sentence 2 GDPR). The background to this is that a customer must reasonably assume that the data is being processed in the interests of the company if they have a (contractual) relationship with the company.

The same applies to the processing of personal data for the prevention of fraud, etc. (cf. EC 47 sentence 6) and for direct marketing purposes (cf. EC 47 sentence 7).

3. storage period of personal data

In principle, we only store personal data for as long as is necessary. We then delete the data.

The necessity of storage also depends on legally prescribed retention periods. These can be, for example, tax regulations or provisions of commercial law. Retention periods may also result from contractual regulations.

4. rights of data subjects

According to the EU General Data Protection Regulation, you have rights to information and intervention. We will inform you about these rights below:

4.1 Right of access (Art. 15 GDPR)

The “right to confirmation” allows you to request confirmation from the controller as to whether personal data concerning you is being processed by the controller. In addition, you have the right to information about

• the purposes of the processing
• the categories of personal data processed by us
• the planned duration of personal data storage, if possible

4.2 Right to rectification (Art. 16 GDPR)

If the data concerning you is incorrect and/or incomplete, you have the right to rectification without undue delay. The correction or completion must take place immediately.

4.3 Right to erasure (Art. 17 GDPR)

If one of the following reasons applies and the processing is not necessary, you have the right to demand that the personal data concerning you be deleted immediately:

• the personal data have been collected or processed for purposes for which they are no longer necessary
• the personal data has been processed unlawfully.
• the personal data have to be erased for compliance with a legal obligation in Union or Member State law
• the data subject withdraws the consent on which the processing was based (Art. 6 para. 1 lit. A GDPR) and there is no other legal basis for the processing.
• Objections are raised against the processing (Art. 21 para. 2 GDPR) or there are no legitimate grounds for the processing (Art. 21 para. 1 GDPR)

4.4 Right to restriction (Art. 18 GDPR)

You have the right to request the restriction of the processing of your personal data. This is possible if the data is checked due to an accuracy that you dispute or if we no longer need this data after the purpose has been achieved. In addition, the restriction can be requested if you have lodged an objection for reasons relating to your particular situation and it is not yet clear whether our legitimate reasons prevail.

4.5 Right to information (Art. 19 GDPR)

If you have exercised your right to erasure, rectification or restriction of data processing, the controller is obliged to notify all recipients to whom your personal data has been disclosed of the erasure, rectification or restriction of data processing. You also have the right to be informed about these recipients.

4.6 Right to data portability (Art. 20 GDPR)

You have the right to receive the personal data you have provided to us in a structured, commonly used and machine-readable format.

4.7 Right of revocation (Art. 7 para. 3 GDPR)

You can object to the processing of your personal data at any time. To exercise your right to object, you can contact us directly.

4.8 Right to lodge a complaint (Art. 77 GDPR)

You have the right to lodge a complaint with a supervisory authority. You can contact the supervisory authority of your place of residence, your place of work or the place of the alleged infringement if you believe that the processing of your personal data violates data protection regulations.

If you wish to exercise your rights, please inform us by sending an e-mail to info@km-optoelektronik.de or contact us at the address provided.

5. Information about the data processing

Your data processed when using our website will be deleted or blocked as soon as the purpose for its storage ceases to apply, provided the deletion of the same is not in breach of any statutory storage obligations or unless otherwise stipulated below.

Cookies

a) Session cookies

We use cookies on our website. Cookies are small text files or other storage technologies stored on your computer by your browser. These cookies process certain specific information about you, such as your browser, location data, or IP address.

This processing makes our website more user-friendly, efficient, and secure, allowing us, for example, to display our website in different languages or to offer a shopping cart function.

The legal basis for such processing is Art. 6 Para. 1 lit. b) GDPR, insofar as these cookies are used to collect data to initiate or process contractual relationships.

If the processing does not serve to initiate or process a contract, our legitimate interest lies in improving the functionality of our website. The legal basis is then Art. 6 Para. 1 lit. f) GDPR.

When you close your browser, these session cookies are deleted.

b) Third-party cookies

If necessary, our website may also use cookies from companies with whom we cooperate for the purpose of advertising, analyzing, or improving the features of our website.

Please refer to the following information for details, in particular for the legal basis and purpose of such third-party collection and processing of data collected through cookies.

c) Disabling cookies

You can refuse the use of cookies by changing the settings on your browser. Likewise, you can use the browser to delete cookies that have already been stored. However, the steps and measures required vary, depending on the browser you use. If you have any questions, please use the help function or consult the documentation for your browser or contact its maker for support.

If you prevent or restrict the installation of cookies, not all of the functions on our site may be fully usable.

Contact

If you contact us via email or the contact form, the data you provide will be used for the purpose of processing your request. We must have this data in order to process and answer your inquiry; otherwise we will not be able to answer it in full or at all.

The legal basis for this data processing is Art. 6 Para. 1 lit. b) GDPR.

Your data will be deleted once we have fully answered your inquiry and there is no further legal obligation to store your data, such as if an order or contract resulted therefrom.

Server data

For technical reasons, the following data sent by your internet browser to us or to our server provider will be collected, especially to ensure a secure and stable website: These server log files record the type and version of your browser, operating system, the website from which you came (referrer URL), the webpages on our site visited, the date and time of your visit, as well as the IP address from which you visited our site.

The data thus collected will be temporarily stored, but not in association with any other of your data.

The basis for this storage is Art. 6 Para. 1 lit. f) GDPR. Our legitimate interest lies in the improvement, stability, functionality, and security of our website.

The data will be deleted within no more than seven days, unless continued storage is required for evidentiary purposes. In which case, all or part of the data will be excluded from deletion until the investigation of the relevant incident is finally resolved.

YouTube

We use YouTube on our website. This is a video portal operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland, hereinafter referred to as „YouTube“.

We use YouTube in its advanced privacy mode to show you videos. In case you have granted your consent to this processing the legal basis is Article 6 para. 1 lit. a GDPR. The legal basis can also be Article 6 para. 1 lit. f GDPR. Our legitimate interest lies in improving the quality of our website. According to YouTube, the advanced privacy mode means that the data specified below will only be transmitted to the YouTube server if you actually start a video.

Without this mode, a connection to the YouTube server in the USA will be established as soon as you access any of our webpages on which a YouTube video is embedded.

This connection is required in order to be able to display the respective video on our website within your browser. YouTube will record and process at a minimum your IP address, the date and time the video was displayed, as well as the website you visited. In addition, a connection to the DoubleClick advertising network of Google is established.

If you are logged in to YouTube when you access our site, YouTube will assign the connection information to your YouTube account. To prevent this, you must either log out of YouTube before visiting our site or make the appropriate settings in your YouTube account.

For the purpose of functionality and analysis of usage behavior, YouTube permanently stores cookies on your device via your browser. If you do not agree to this processing, you have the option of preventing the installation of cookies by making the appropriate settings in your browser. Further details can be found in the section about cookies above.

Further information about the collection and use of data as well as your rights and protection options in Google’s privacy policy found at https://policies.google.com/privacy.