Information according to the General Data Protection Regulation (GDPR)
I. Person in charge
98528 Suhl, Germany
Represented by: Hannes Langenhan, Oliver Niedhöfer
Register Court: Amtsgericht Jena
Register number: HRB 516715
Phone: +49 (0)3681 42 89 360
II. Provision of the website
Each time our website is accessed, our system automatically collects data and information from the computer system of the calling computer.
Thereby, the following data is collected:
- Information about the browser type and version used
- The operating system of the user
- The Internet service provider of the user
- The IP address of the user
- Date and time of access
- Websites from which the system of the user reaches our website
- Websites that are accessed by the user’s system through our website
The collection and temporary storage solely serves the technical function of the website. The data will never be linked to your personal data.
1. Legal basis for data processing
The legal basis for the temporary storage of data is Art. 6 para. 1 lit. f GDPR.
2. Purpose of data processing
The temporary storage of the IP address by the system is necessary to allow delivery of the website to the computer of the user. For this, the IP address of the user must be stored for the duration of the session.
This named purposes reflect our legitimate interest in the processing of data in the sense of Art. 6 para. 1 lit. f GDPR.
3. Duration of storage
The data will be deleted as soon as it is no longer necessary for the achievement of the purpose it was collected for. In the case of acquisition of the data to provide the website, this is the case when the respective session ends.
4. Right of objection
The collection of data for the provision of the website and the storage of the data in log files is essential for the operation of the website. The user has consequently no right to object this processing.
III. General information about personal data
1. Processing of personal data
Generally, we process personal data of our users only to the extent necessary to provide a functioning website and our content and services. The processing of personal data of our users takes place regularly only with the consent of the user. An exception applies in cases where prior obtaining of consent for factual reasons is not possible and the processing of the data is permitted by applicable law.
To protect the security of your data during transmission, we use state-of-the-art encryption techniques (such as SSL) over HTTPS.
2. Legal basis for the processing of personal data
The legal basis for the processing of your personal data are the following:
- Insofar as we obtain the consent of the data subject for processing of personal data, Art. 6 para. 1 lit. a EU General Data Protection Regulation (GDPR) works as legal basis.
- In case of processing of personal data necessary for the performance of a contract to which the data subject is a party, Art. 6 para. 1 lit. b GDPR is the legal basis. This also applies to processing operations required to carry out pre-contractual actions.
- Insofar as processing of personal data is required to fulfill a legal obligation that is subject to our company, Art. 6 para. 1 lit. c GDPR as legal basis.
- In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 para. 1 lit. d GDPR is the legal basis.
- If processing is necessary to safeguard the legitimate interests of our company or a third party, and if the interests, fundamental rights and freedoms of the data subject do not prevail over the first interest, Art. 6 para. 1 lit. f GDPR works as legal basis for processing.
3. Data erasure and storage duration
We adhere to the principles of data avoidance and data economy. Therefore, we only store your personal data for as long as is necessary to achieve the purposes stated here or according to the various periods of storage stipulated by the European or national legislature. After discontinuation of the respective purpose or expiration of these periods, the corresponding data are routinely and in accordance with the statutory provisions blocked or deleted, unless there is a need for further storage of data for closure of a contract or fulfillment of a contract.
IV. Specific reasons for the processing of personal data
Inter alia, we collect and process personal data in the following cases:
- If you apply for a job with us via the website, the data processing is covered by Art. 6 para. 1 lit. a GDPR.
- If you contact us via the contact form published on the website.
- If you contact us directly in other cases, especially if you send us an email to the email addresses listed on the website.
You can contact us via the e-mail address provided on our website.
In this case, the user’s personal data transmitted with the e-mail will be stored.
In this context, there is no disclosure of the data to third parties. The data is used exclusively for processing the conversation.
The legal basis for the processing of the data transmitted in the course of sending an e-mail is Article 6 (1) lit. f GDPR. If the e-mail contact aims to conclude a contract, then additional legal basis for the processing is Art. 6 para. 1 lit. b DSGVO.
V. Google Analytics
This website uses functions of the web analytics service Google Analytics. Provider is the Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA (“Google”).
Google Analytics uses so-called “cookies”. These are text files that are stored on your computer and that allow an analysis of the use of the website by you. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there.
Google Analytics cookies are stored on the basis of Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in analyzing user behavior in order to optimize both its website and its advertising.
Google LLC, based in the United States, is certified to the US Privacy Shield, which ensures compliance with the level of data protection in the EU.
We have activated the function IP anonymization on this website. As a result, your IP address will be truncated by Google within member states of the European Union or other parties to the Agreement on the European Economic Area prior to transmission to the United States. Only in exceptional cases will the full IP address be sent to a Google server in the US and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services related to website activity and internet usage to the website operator. The IP address provided by Google Analytics as part of Google Analytics will not be merged with other Google data.
You can prevent the storage of cookies by a corresponding setting of your browser software; however, please note that if you do this, you may not be able to use all the features of this website to the fullest extent possible. In addition, you may prevent the collection by Google of the data generated by the cookie and related to your use of the website (including your IP address) as well as the processing of this data by Google by downloading and installing the browser plug-in available under the following link: https://tools.google.com/dlpage/gaoptout?hl=en
Opposition to data collection
You can prevent the collection of your data by Google Analytics by clicking on the following link. An opt-out cookie will be set which prevents the collection of your data on future visits to this website: Disable Google Analytics.
VI. Your rights of information, rectification, data transmission, blocking, termination and opposition as well as for complaints
You have the right to receive information about your personal data stored by us at any time. You also have the right to rectification, data transfer, blocking or, apart from the prescribed data storage for business transactions, deletion of your personal data. To exercise your rights, please address the contact listed at the end of the data protection policy.
For a data lock to be taken into account at all times, these data must be stored in a lock file for control purposes. You can also request the deletion of the data, as long as there is no legal archiving obligation. As far as such an obligation exists, we lock your data on request.
You can make changes to or revoke your consent with effect for the future by notifying us.
Insofar as the storage and processing of personal data is absolutely necessary for the execution of a contractual relationship, the deletion of your data may depend on the fact that the contractual relationship is also dissolved.
If you believe that we are infringing the GDPR in the processing of personal data concerning you, you have the right to complain to the competent supervisory authority. You can assert this right with a supervisory authority in the Member State of your place of residence, your place of work or the place of the alleged breach.
In Thuringia the competent supervisory authority is:
Thüringer Landesbeauftragter für den Datenschutz und die Informationssicherheit
VII. Change of our data protection policy
We reserve the right to change this data protection policy from time to time to ensure that it complies with current legal requirements or to implement changes to our services, e.g. when introducing new services. Your new visit will be subject to the new data protection policy.
VIII. Questions about privacy / contact
If you have any questions about data protection or if you would like to contact us about any other privacy issue, please email us at: hello[at]aracari-energy.com