Privacy Policy
Welcome to our website alku-gmbh.de. We appreciate your interest in our company.
The protection of your personal data, such as date of birth, name, phone number, address, etc., is important to us.
The purpose of this Privacy Policy is to inform you about processing of your personal data, which we collect when you visit our website. Our Privacy Policy is in line with legal provisions of the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Law (BDSG). The following Privacy Policy is used to comply with our duty to inform resulting from the GDPR. Please refer to Art. 13 and 14 et seqq. of the GDPR.
Controller in the sense of Art. 4 para. 7 GDPR means the person, which, alone or jointly with others, determines the purposes and means of the processing of personal data.
With regard to our website, the controller is:
ALKU GmbH
Hans-Böckler-Straße 6
93142 Maxhütte-Haidhof
Germany
E-Mail: info@
alku-gmbh.de
Tel.: +49 9471 60194 0
Fax: +49 9471 60194 20
Contact details of the data protection officer
We have appointed a data protection officer pursuant to Art. 37 of the GDPR. You may contact our data protection officer using the following contact details:
MKM Datenschutz GmbH
Äußere Sulzbacher Str. 118
90491 Nuremberg
Germany
E-Mail: datenschutz@alku-gmbh.de
Tel.: +49 911 990860 0
Website: https://www.mkm-datenschutz.de/
Provision of our website and creation of log files
Every time our website is called up, our system automatically records data and information of the access device (e.g. computer, mobile phone, tablet, etc.).
What personal data are collected and to which extent will they be processed?
(1) Information about the browser type and the version used;
(2) Operating system of the access device;
(3) Name of the accessing host;
(4) IP address of the access device;
(5) Date and time of access;
(6) Websites and resources (images, files, other site contents) accessed on our website;
(7) Websites from which the user's system accessed our website (referrer tracking);
(8) Confirmation whether retrieval was successful;
(9) Transferred data volume
These data are stored in our system's log files. These data are not stored together with the personal data of a specific user so that it is not possible to identify individual users of the website.
The legal basis for the processing of personal data
Art. 6 para. 1 lit. f of the GDPR (legitimate interest). Our legitimate interest is to guarantee that the purpose described below is achieved.
Purpose of data processing
The temporary (automated) storage of data is only required during the website visit so that the website can be provided. Storage and processing of personal data is also required to maintain compatibility of our website for all visitors, as far as possible, and to combat misuse and eliminate faults. It is necessary to log technical data of the accessing computer to be able to react promptly to incorrect visualisation, attacks to our IT systems and/or lack of functionality of our website. Furthermore, this data is used to optimise the website and to generally safeguard the security of our IT systems.
Length of time in storage
The above-mentioned technical data are erased as soon as they are no longer needed to guarantee compatibility of the website for all visitors but at the latest 3 months after you have visited our website.
Right to object and to erasure
You may object to processing any time under Art. 21 of the GDPR and request erasure of data pursuant to Art. 17 of the GDPR. The rights you are entitled to and how to enforce them is described further below in this Privacy Policy.
Special functions of the website
Our website offers you various functions, during the use of which personal data is collected, processed and stored by us. Below we explain what happens with this data:
Contact form(s)
- What personal data are collected and to which extent will they be processed?
The data you entered in our contact forms, which you entered in the input mask of the contact form.
- The legal basis for the processing of personal data
Art. 6 para. 1 lit. a GDPR (consent through clear confirming action or behaviour)
- Purpose of data processing
We will use the data collected via our contact form or contact forms only for processing the specific contact request received through the contact form.
- Length of time in storage
After processing your request, the collected data will be deleted immediately, unless there are legal retention periods.
- Right to object and to erasure
The objection and deletion options are based on the general regulations on the right of objection and deletion under data protection law described below in this privacy policy.
- The need to provide personal data
The use of the contact forms is on a voluntary basis and is neither contractually nor legally required. You are not obliged to contact us via the contact form, but can also use the other contact options provided on our site. If you wish to use our contact form, you have to fill in the fields marked as mandatory. If you do not fill out the required information of the contact form, you can either not send the request or we can unfortunately not process your request.
Automated credit assessment / scoring
If you wish to conclude a contract with us, we reserve the right to carry out exclusively automated processing of your personal data in order to check your creditworthiness. We are also entitled to make such an automated decision pursuant to Art. 22 para. 2 lit. a GDPR. Whether the contract can be concluded or not depends on the result of the automated credit check. In a credit check, statistical probabilities of a payment default are calculated. The creditworthiness information may contain probability values (score values) which are calculated on the basis of scientifically recognised mathematical-statistical procedures. In this process, the customer's future risk of non-payment is inferred by means of a large number of characteristics, such as income, address data, occupation, marital status and previous payment behaviour. The result is expressed in the form of a payment value (so-called score). The information obtained in this way forms the basis of our decision on the establishment, implementation or termination of a contractual relationship. If you are of the opinion that you have been wrongly excluded from the conclusion of a contract due to the credit assessment, you are welcome to explain your point of view to us by e-mail. We will then review the automated decision in accordance with Article 22 para. 3 of the GDPR in the specific individual case. In order to be able to carry out the credit check, we may store and process your personal data according to Art. 6 para. 1 lit. b GDPR.
Due to the forthcoming contract, we will transmit your data to the following provider(s) in the cases listed below:
· Euler Hermes Germany Branch of Euler Hermes SA:
Euler Hermes Germany Branch of Euler Hermes SA, Friedensallee 254, 22763 Hamburg, Germany (http://www.eulerhermes.de): Our company regularly checks your creditworthiness when concluding contracts and, in certain cases where there is a legitimate interest, also for existing customers. For this purpose, we work together with Euler Hermes Germany Branch of Euler Hermes SA, Friedensallee 254, 22763 Hamburg, Germany, from whom we receive the data required for this purpose. For this purpose, we transmit your name and contact details to Euler Hermes Germany Branch of Euler Hermes SA.
· Creditreform Regensburg Aumüller KG:
Our company regularly checks your creditworthiness when concluding contracts and, in certain cases where there is a legitimate interest, also for existing customers. For this purpose, we work together with Creditreform Regensburg Aumüller KG, Villastraße 4, 93055 Regensburg, Germany (https://www.creditreform.de/regensburg), from whom we receive the data required for this purpose. On behalf of Creditreform Regensburg Aumüller KG, we hereby provide you with the following information in advance in accordance with Art. 14 GDPR:
Creditreform Regensburg Aumüller KG is a consumer credit agency. It operates a database in which creditworthiness information about private individuals is stored.
On this basis, Creditreform Regensburg Aumüller KG provides creditworthiness information to its clients. Clients include, for example, credit institutions, leasing companies, insurance companies, telecommunication companies, receivables management companies, mail order, wholesale and retail companies as well as other companies that supply goods or services. Within the framework of the legal provisions, some of the data available in the information database is also used to supply other company databases, including for use for address trading purposes.
In the database of Creditreform Regensburg Aumüller KG, information is stored in particular on the name, address, date of birth, e-mail address (if applicable), payment history and shareholdings of persons. The purpose of processing the stored data is to provide information on the creditworthiness of the person inquired about. The legal basis for the processing is Art. 6 para. 1 lit. f GDPR. Accordingly, information about this data may only be provided if a customer credibly demonstrates a legitimate interest in knowing this information. If data is transferred to countries outside the EU, this is done on the basis of the so-called "standard contractual clauses", which you can find under the following link:
http://eur-lex.europa.eu/legal-content/DE/TXT/PDF/?uri=CELEX:32001D0497&from=DE
The data is stored as long as necessary for the fulfilment of the purpose of the storage. As a rule, this is necessary for an initial storage period of three years. After expiry, it is checked whether storage is still necessary, otherwise the data is deleted on the exact day. If a case is settled, the data will be deleted on a daily basis three years after settlement. Pursuant to section 882e of the Code of Civil Procedure (ZPO), entries in the debtors' register are deleted on a daily basis after three years have passed since the date of the entry order.
Legitimate interests within the meaning of Art. 6 para. 1 lit. f GDPR may be: credit decision, business initiation, shareholding relationships, claims, credit assessment, insurance contract, enforcement information. You have the right to obtain information from Creditreform Regensburg Aumüller KG about the personal data stored about you. If the data stored about you is incorrect, you have the right to have it corrected or deleted. If it cannot be determined immediately whether the data is incorrect or correct, you have a right to block the respective data until clarification. If your data is incomplete, you may request that it be completed.
If you have given your consent to the processing of data stored by Creditreform Regensburg Aumüller KG, you have the right to withdraw this consent at any time. The withdrawal does not affect the lawfulness of the processing of your data on the basis of your consent up to any withdrawal.
If you have any objections, requests or complaints about data protection, you can contact the data protection officer at Creditreform Regensburg Aumüller KG at any time. He or she will help you quickly and confidentially with all data protection issues. You can also complain about the processing of data by Creditreform Regensburg Aumüller KG to the data protection authority responsible for your federal state.
The data that Creditreform Regensburg Aumüller KG has stored on you comes from publicly accessible sources, from debt collection companies and from their customers.
In order to describe your creditworthiness, Creditreform Regensburg Aumüller KG calculates a score value for your data. The score value includes data on age and gender, address data and, in some cases, payment experience data. These data are included in the score calculation with different weighting. Creditreform Regensburg Aumüller KG clients use the score values as an aid in making their own credit decisions.
Right to object:
The processing of data stored by Creditreform Regensburg Aumüller KG is carried out for compelling reasons worthy of protection for creditors and credit protection which regularly override your interests, rights and freedoms, or serves the assertion, exercise or defence of legal claims. You can only object to the processing of your data for reasons that arise from a special situation you are in and that must be proven. If such special reasons can be proven, the data will no longer be processed. If you object to the processing of your data for advertising and marketing purposes, the data will no longer be processed for these purposes.
The controller within the meaning of Art. 4 para. 7 GDPR is Creditreform Regensburg Aumüller KG, Villastraße 4, 93055 Regensburg, Germany (https://www.creditreform.de/regensburg). You can reach Creditreform Regensburg Aumüller KG in relation to all matters under the following contact details Tel.: +49 2131109 0, Fax: +49 2131109 8000, E-Mail: kontakt@creditreform.de
You can reach the responsible data protection officer under the following contact details: Creditreform Regensburg Aumüller KG, Data Protection Officer, Villastraße 4, 93055 Regensburg, Germany, www.creditreform.de/regensburg.
· Bürgel Süd GmbH & Co. KG:
Bürgel Süd GmbH & Co. KG, Karolinenstraße 21, 86150 Augsburg, Germany (https://www.crifbuergel.de/): Our company regularly checks your creditworthiness when concluding contracts and, in certain cases where there is a legitimate interest, also for existing customers. For this purpose, we work with Bürgel Süd GmbH & Co. KG, Karolinenstraße 21, 86150 Augsburg, Germany, from whom we receive the data required for this purpose. For this purpose, we transmit your name and contact details to Bürgel Süd GmbH & Co. KG.
Statistical analysis of visits to this website - Web tracker
We collect, process and store the following data when this website or individual files on the website are accessed: IP address, website from which the file was accessed, name of the file, date and time of access, amount of data transferred and report on the success of the access (so-called web log). We use this access data exclusively in non-personalized form for the continuous improvement of our Internet offering and for statistical purposes. We also use the following web trackers to evaluate visits to this website:
We use the Google Tag Manager service of the company Google Ireland Ltd., Gordon House, Barrow Street, 4 Dublin, Ireland, e-mail: support-deutschland@google.com, website: www.google.com on our site. The processing also takes place in a third country for which there is no Commission adequacy decision. Therefore, the usual level of protection for the GDPR cannot be guaranteed for the transfer, as it cannot be ruled out that in the third country, e.g. authorities can access the collected data.
The legal basis for the transmission of personal data is your consent according to Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR, which you have provided on our website.
Google Tag Manager provides a technical platform for executing and bundling other web tools and web tracking programmes by means of so-called "tags". In this context, Google Tag Manager stores cookies on your computer and analyses your surfing behaviour (so-called "tracking"), insofar as web tracking tools are executed using Google Tag Manager. The data generated by the "tags" are compiled, stored and processed by Google Tag Manager under a uniform user interface. All integrated "tags" are listed separately again in this data protection declaration. When you use our website with the integration of Google Tag Manager "tags" activated, data such as your IP address and your user activities in particular are transmitted to Google servers. The tracking tools used in Google Tag Manager ensure that the IP address is anonymised by Google Tag Manager before transmission by means of IP anonymisation of the source code. With Tag Manager, measured values from different service providers (Google and third-party providers) can be linked and evaluated on the basis of the so-called tag management. Google Tag Manager helps us to compile reports on website activity and to control the web tools of our website.
For processing itself, the service or we collect the following data: cookies, web tracking data, outgoing or incoming links, information arising from the integration and activation of JavaScript code on the website from Google Tag Manager and the web tools triggered by Google Tag Manager.
You can withdraw your consent at any time. You will find more information on withdrawing your consent either with the consent itself or at the end of this privacy policy.
For further information on the handling of transmitted data, please refer to the provider's privacy policy at https://policies.google.com/privacy.
The provider also offers an opt-out option at policies.google.com/privacy.
· Ktio Precious Metals Charts
We use the service Ktio Precious Metals Charts of the company Ktio Precious Metals Charts, website: www.kitconet.com on our website.
The legal basis for the transmission of personal data is your consent according to Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR, which you have provided on our website.
The service is a plugin that we need to be able to display all the content on our website. The plugin makes our website more appealing and it creates a better experience for our visitors.
You can withdraw your consent at any time. You will find more information on withdrawing your consent either with the consent itself or at the end of this privacy policy.
Integration of external web services and processing of data outside the EU
On our website, we use active content from external providers, so-called web services. When you visit our website, these external providers may receive personal information about your visit to our website. This may involve the processing of data outside the EU. You can prevent this by installing an appropriate browser plug-in or disabling the execution of scripts in your browser. This may result in some functional restrictions on the websites that you visit.
We use the following external web services:
We use the service Oekokosmos of the company overwien.com, Johannes-Albers-Straße 31, 50767 Köln, Germany, e-mail: info@overwien.com, website: www.overwien.com on our site. The transmission and processing of personal data takes place exclusively on servers in the European Union.
The legal basis for the transmission of personal data is your consent according to Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR, which you have provided on our website.
The service is a plugin that we need to be able to display all the content on our website. The plugin makes our website more appealing and it creates a better experience for our visitors.
You can withdraw your consent at any time. You will find more information on withdrawing your consent either with the consent itself or at the end of this privacy policy.
For further information on the handling of transmitted data, please refer to the provider's privacy policy at www.oekosmos.de/kontakt/datenschutz/.
Information about the use of cookies
- What personal data are collected and to which extent will they be processed?
We integrate and use cookies on various pages to enable certain functions of our website and to integrate external web services. The so-called "cookies" are small text files that your browser can store on your device. These text files contain a characteristic string that uniquely identifies the browser when you return to our website. The process of saving a cookie file is also referred to as "setting a cookie". Cookies can be set both by the website itself and by external web services. Cookies are set by our website or external web services in order to maintain the full functionality of our website, to improve the user experience or to pursue the purpose stated with your consent. Cookie technology also allows us to recognise individual visitors by pseudonyms, e.g. a unique or random ID, so that we can provide more personalised services. Details are shown in the table below.
- Legal basis for the processing of personal data
Insofar as the cookies are processed on the basis of consent pursuant to Art. 6 para. 1 lit. a GDPR, this consent is also deemed to be consent within the meaning of § 25 para. 1 TTDSG (New German Telecommunications-Telemedia Data Protection Act) for the setting of the cookie on the user's terminal device. Insofar as another legal basis is mentioned according to the GDPR (e.g. for the fulfilment of a contract or for the fulfilment of legal obligations), the storage or setting takes place on the basis of an exception according to § 25 para. 2 TTDSG. This is the case "if the sole purpose of storing information in the end user's terminal equipment or the sole purpose of accessing information already stored in the end user's terminal equipment is to carry out the transmission of a message via a public telecommunications network" or "if the storage of information in the end user's terminal equipment or the access to information already stored in the end user's terminal equipment is absolutely necessary so that the provider of a telemedia service can provide a telemedia service expressly requested by the user". Which legal basis is relevant can be seen from the cookie table listed below.
- Purpose of the data processing
The cookies are set by our website or the external web services in order to maintain the full functionality of our website, to improve the user-friendliness or to pursue the purpose stated with your consent. Cookie technology also allows us to recognise individual visitors by pseudonyms, e.g. an individual or random IDs, so that we can offer more personalised services. Details are provided in the table below.
- Length of storage
Our cookies are stored until they are deleted in your browser or, if they are session cookies, until the session has expired. Details are listed in the following table.
- Possibility of objection and removal
You can set your browser according to your wishes so that the setting of cookies is generally prevented. You can then decide on a case-by-case basis whether to accept cookies or accept cookies in principle. Cookies can be used for various purposes, e.g. to recognise that your device is already connected to our website (permanent cookies) or to save recently viewed offers (session cookies). If you have expressly given us permission to process your personal data, you can withdraw this consent at any time. Please note that the lawfulness of the processing carried out on the basis of the consent until the withdrawal is not affected by this.
Cookie-Name | Server | Provider | Purpose | Legal basis | Storage duration | Type |
fe_typo_user | alku-gmbh.de, www.alku-gmbh.de | Website operator | Cookie required by the Typo3 Web Content System. The cookie is stored during the session. It is needed to save certain website settings during the website visit (session). | Art. 6 para. 1 lit. f GDPR (legitimate interests) | Session | Session |
Data safety and data protection, communication by e-mail
Your personal data will be protected by technical and organisational measures during collection, storage and processing so that third parties cannot access them. In case of unencrypted communication by e-mail, data security during transfer to our IT systems cannot be guaranteed in full by us so that we recommend to send information with a high need for confidentiality in encrypted form or by post.
Automatic e-mail archiving
· Scope for processing personal data
We explicitly inform you that our mailing system uses an automated archiving process. All incoming and outgoing e-mails are digitally archived in tamper-proof form.
· The legal basis for the processing of personal data
Art. 6 para. 1 lit. c of the GDPR (for compliance with a legal obligation). Our legal obligation is to comply with tax and commercial law (e.g. §§ 146 and 147 of the German Tax Code, §§ 238 and 257 of the German Commercial Code).
· Purpose of data processing
The purpose of archiving is to comply with tax law (e.g. §§ 146 and 147 of the German Tax Code – duty to archive e-mails of relevance under tax law) and commercial law (e.g. §§ 238 and 257 of the German Commercial Code – duty to archive commercial correspondence).
· Length of time in storage
Our e-mail communication is stored until retention periods under tax and commercial law have expired. The retention period can be up to 10 years.
· Right to object and to erasure
You may object to processing any time under Art. 21 of the GDPR and request erasure of data pursuant to Art. 17 of the GDPR. The rights you are entitled to and how to enforce them is described further below in this Privacy Policy.
· Handling application documents
If you have questions regarding our e-mail archiving system, please do not hesitate to contact our data protection officer. We also inform you that we only accept applications in PDF format. Zipped files (WinZip, WinRAR, 7Zip, etc.) are filtered out by our security systems and not delivered. We do not consider applications in Word format and other formats and delete them unread. Please note that applications sent by e-mail in unencrypted form may be opened by third parties before they are received by our IT systems. We assume that we may answer unencrypted application e-mails also in unencrypted form. If you do not wish this, please inform us accordingly in your application e-mail.
Right to access
You are entitled to request a confirmation of whether we process your personal data. If this is the case, you have the right to access the information mentioned in Art. 15 para. 1 of the GDPR as long as the rights and freedoms of others are not adversely affected (see Art. 15 para. 4 of the GDPR). We are glad to provide you a copy of this data.
Under Art. 16 of the GDPR, you are entitled to obtain the rectification of inaccurate personal data (such as address, name, etc.) any time. You may also request any time to have incomplete personal data completed. A corresponding adjustment is made immediately.
Right to erasure
Based on Art. 17 para. 1 of the GDPR, you are entitled to request from us the erasure of your personal data if
- data are no longer required;
- there is no longer any legal ground for processing because you withdraw your consent;
- you object to the processing and there are not any legitimate grounds for the processing;
- your data have been unlawfully processed;
- this is required for compliance with a legal obligation or a collection was based on Art. 8 para. 1 of the GDPR.
According to Art. 17 para. 3 of the GDPR, you do not have this right if
- processing is necessary for exercising the right of freedom of expression and information;
- your data have been collected on the grounds of a legal duty;
- processing is required for reasons in the public interest;
- data are required for the enforcement, exercise or defence of legal claims.
Right to restriction of processing
Under Art. 18 para. 1 of the GDPR, you have the right to restrict the processing of your personal data in certain cases.
This applies if
- the accuracy of the personal data is contested by you;
- processing is unlawful and you oppose the erasure;
- data are no longer required for the purpose of processing, but the collected data are used for enforcement, exercise or defence of legal claims;
- an objection to processing pursuant to Art. 21 para. 1 of the GDPR has been made and the verification whether the legitimate grounds of whom override is still pending.
Right to withdraw your consent
If you have given us your explicit consent to the processing of your personal data [Art. 6 para. 1 lit. f or Art. 9 para. 2 lit. a of the GDPR], you may withdraw it any time. Please note that this does not affect the lawfulness of the processing carried out on the basis of your consent until you withdraw your consent.
Right to object
Pursuant to Art. 21 of the GDPR, you have the right to object at any time to processing of your personal data, which were collected based on Art. 6 para. 1 lit. f GDPR (on the grounds of a legitimate interest). You only have this right if particular circumstances speak against storage and processing.
How do you exercise your rights?
You may exercise your rights any time by contacting us as follows:
ALKU GmbH
Hans-Böckler-Straße 6
93142 Maxhütte-Haidhof
Germany
E-Mail: info@alku-gmbh.de
Tel.: +49 9471 60194 0
Fax: +49 9471 60194 20
Under Art. 20 of the GDPR, you have the right to have your personal data transferred to you. We provide your personal data in a structured, commonly used and machine-readable format. The data can either be transferred to you or a controller you specify.
On request, we provide you the following data acc. to Art. 20 para. 1 of the GDPR:
- data collected based on an explicit consent pursuant to Art. 6 para. 1 lit. a or Art. 9 para. 2 lit. a GDPR;
- data we have received from you for the performance of a contract acc. to Art. 6 para. 1 lit. b GDPR;
- data having been processed in automated procedures.
We will transfer the personal data directly to a controller specified by you insofar as this is technically feasible. Please note that according to Art. 20 para. 4 GDPR we may not transfer data which adversely affect the rights and freedoms of others.
Right to complain to supervisory authority pursuant to Art. 77 para. 1 of the GDPR
Insofar as you suspect that your data are being processed unlawfully on our website, you may, of course, bring about a judicial clarification of the issue at any time. In addition, any other legal option is open to you. Irrespective of that, you may contact a supervisory authority based on Art. 77 para. 1 of the GDPR. You have a right to lodge a complaint pursuant to Art. 77 of the GDPR in the Member State of your habitual residence, place of work or place of the alleged infringement, i.e. you can choose the supervisory authority of one of the above-mentioned places. The supervisory authority with whom the complaint is lodged shall notify you of the status and outcomes of your complaint, including your right to an effective judicial remedy based on Art. 78 of the GDPR.
„Information acc. to Art. 13 GDPR on the collection of personal data from customers_suppliers“