Laser Cut
Data Protection

Privacy
Policy

I. Name and address of the data controller

The data controller within the meaning of the General Data Protection Regulation (Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation)), hereinafter: “GDPR”) and other national data protection laws of the Member States, as well as other data protection provisions, is:

Fitting Team Shopdesign GmbH
Troppauer Straße 14
80937 Munich
Germany
Email: info@fittingteam.de
Website: www.fittingteam.de

The data protection officer of the data controller is:
Mr Christian Bauer
Fitting Team Shopdesign GmbH
Troppauer Straße 14
80937 Munich
Germany
Email: info@fittingteam.de
Website: www.fittingteam.de

II. General Information on Data Processing

1. Scope of the processing of personal data

As the protection of your personal data (e.g. your name, telephone number or email address) is very important to us, such personal data is collected, processed or used exclusively in accordance with applicable laws and regulations.
In principle, it is possible to use and visit our website www.fittingteam.de without entering, providing or disclosing any personal data.

2. Legal basis for the processing of personal data

Where we obtain the data subject’s consent for the processing of personal data, Article 6(1)(a) of the EU General Data Protection Regulation (GDPR) serves as the legal basis.
Where the processing of personal data is necessary for the performance of a contract to which the data subject is a party, Article 6(1)(b) of the GDPR serves as the legal basis. This also applies to processing operations necessary for the implementation of pre-contractual measures.
Where the processing of personal data is necessary for compliance with a legal obligation to which our company is subject, Article 6(1)(c) of the GDPR serves as the legal basis.
Where the processing of personal data is necessary to protect the vital interests of the data subject or of another natural person, Article 6(1)(d) of the GDPR serves as the legal basis.
Where processing is necessary to safeguard a legitimate interest of our company or a third party, and the interests, fundamental rights and freedoms of the data subject do not override the former interest, Article 6(1)(f) of the GDPR serves as the legal basis for the processing.

3. Data erasure and retention period

The data subject’s personal data shall be erased or blocked as soon as the purpose for which it was stored no longer applies. Data may also be retained if this is provided for by European or national legislation in EU regulations, laws or other provisions to which the controller is subject. Data will also be blocked or erased when a retention period prescribed by the aforementioned standards expires, unless there is a need to continue storing the data for the conclusion or performance of a contract.

III. Provision of the website

1. Description and scope of data processing

It is generally possible to use and visit our website without entering, providing or disclosing any personal data. Communication between the website and the user takes place exclusively via SSL-encrypted connections. If a user accesses the website via an unencrypted connection, the browser will be redirected to the encrypted version (https://). We use Adobe Typekit for the visual design of our website. Typekit is a service provided by Adobe Systems Software Ireland Ltd. that grants access to a font library. To integrate the fonts we use, the browser establishes a connection to an Adobe server to download the font required for our website. As a result, Adobe receives the information that our website has been accessed from your IP address. Further information on Adobe Typekit can be found in Adobe’s privacy policy, which you can access here: www.adobe.com/privacy/typekit.html

2. Legal basis for data processing

The legal basis for the temporary storage of data during your visit to the website is Article 6(1)(f) of the GDPR.

IV. Use of Cookies

1. Description and scope of data processing

a) Our website uses a cookie. Cookies are text files that are stored in the web browser or by the web browser on the user’s computer system. When a user visits a website, a cookie may be stored on the user’s operating system. This cookie contains a distinctive string of characters that enables the browser to be uniquely identified when the website is visited again.

b) Legal basis for data processing
The legal basis for the processing of personal data using cookies is Article 6(1)(f) of the GDPR.

c) Purpose of data processing
This cookie is stored only for the duration of your visit to our website and is automatically deleted when you close your browser. It is then no longer possible to link the data to the user who accessed the site. The data is not stored together with any other personal data relating to the user.
These purposes also constitute our legitimate interest in the processing of personal data pursuant to Article 6(1)(f) of the GDPR.

d) Duration of storage, right to object and option to delete
Cookies are stored on the user’s computer and transmitted from there to our website. As a user, you therefore have full control over the use of cookies. By changing the settings in your web browser, you can disable or restrict the transmission of cookies. Cookies that have already been stored can be deleted at any time. This can also be done automatically. If cookies are disabled for our website, it may no longer be possible to make full use of all the website’s functions.

V. Contact via email

1. Description and scope of data processing

It is possible to contact us via the email address provided. In this case, the user’s personal data transmitted with the email will be stored.

In this context, the data will not be disclosed to third parties. The data will be used exclusively for the purpose of handling the correspondence. Naturally, we will use the information contained in any application received by email solely for the purpose of processing the application and will not disclose it to third parties.

2. Legal basis for data processing

The legal basis for processing the data transmitted when sending an email is Article 6(1)(f) of the GDPR. If the purpose of the email contact is to conclude a contract, the additional legal basis for processing is Article 6(1)(b) of the GDPR.

3. Purpose of data processing

When contact is made by email, this in itself constitutes the necessary legitimate interest in the processing of the data.

4. Duration of storage

The data will be deleted as soon as it is no longer required to fulfil the purpose for which it was collected.

VI.  Rights of the data subject

If your personal data is being processed, you are a data subject within the meaning of the GDPR and you are entitled to the following rights vis-à-vis the controller. You may request confirmation as to whether we are processing personal data relating to you.

If such processing is taking place, you may request information from the controller in accordance with the provisions of the GDPR (in particular Article 15 of the GDPR).

  • Under the provisions of the GDPR (in particular Article 16 of the GDPR), you have the right to request that the controller rectify and/or complete your personal data if the personal data processed concerning you is inaccurate or incomplete. The controller must carry out the rectification without delay.
  • Under the provisions of the GDPR (in particular Article 17 of the GDPR), you may request that the controller erases the personal data concerning you without undue delay (right to erasure), and the controller is obliged to erase this data without undue delay subject to the conditions set out in the GDPR.
  • In accordance with the provisions of the GDPR (in particular Article 18 of the GDPR), you may request the restriction of the processing of personal data relating to you.
  • In the event of rectification, erasure or restriction of processing by the controller, we will fulfil the obligation to notify in accordance with the provisions of the GDPR (in particular Article 19 of the GDPR). In accordance with Article 19 of the GDPR, you have the right to be informed of the recipients of this notification (right to be informed).
  • Under the provisions of the GDPR (in particular Article 20 of the GDPR), you have the right to receive the personal data concerning you, which you have provided to the data controller, in a structured, commonly used and machine-readable format (right to data portability). Furthermore, in accordance with the provisions of the GDPR (in particular Article 20 of the GDPR), you have the right to transmit this data to another controller without hindrance from the controller to whom the personal data was provided.
  • Right to object
  • Under the provisions of the GDPR (in particular Article 21 of the GDPR), you have the right, on grounds relating to your particular situation, to object at any time to the processing of personal data concerning you which is carried out on the basis of Article 6(1)(e) or (f) of the GDPR.
  • If you have given a separate declaration of consent under data protection law, you have the right, in accordance with the provisions of the GDPR (in particular Article 7(3) of the GDPR), to withdraw your declaration of consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out on the basis of that consent prior to its withdrawal.
  • Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or the place where the alleged infringement occurred, if you consider that the processing of personal data relating to you infringes the GDPR.
  • The supervisory authority to which the complaint has been lodged shall inform the complainant of the status and outcome of the complaint, including the possibility of a judicial remedy under Article 78 of the GDPR.
  • This supervisory authority is the Bavarian State Office for Data Protection Supervision.

VII. Exceptions, Special Provisions and Miscellaneous

Should there be compelling legitimate grounds for processing which override your interests, rights and freedoms, or should the processing serve to establish, exercise or defend legal claims, data may also be processed and used whilst you are exercising your rights under Section VI.

VIII. Disclosure of Data

Your data will only be disclosed to third parties if:

  • You have given your explicit consent to this in accordance with Article 6(1), first sentence, point (a) of the GDPR,
  • the disclosure is necessary pursuant to Article 6(1), first sentence, point (f) of the GDPR for the establishment, exercise or defence of legal claims, and there is no reason to believe that you have an overriding legitimate interest in the non-disclosure of your data,
  • in the event that there is a legal obligation under Article 6(1)(c) of the GDPR, or
  • this is permitted by law and necessary for the performance of contractual obligations under Article 6(1)(b) of the GDPR.

IX. Governing Language

The German version of this Privacy Policy is the legally authoritative version. The English translation is provided for convenience purposes only. In the event of any discrepancy, inconsistency or difference in interpretation between the German version and the English translation, the German version shall prevail.

This privacy policy is currently in force and is dated April 2018.

It may become necessary to amend this privacy policy as a result of further developments to our website and the services offered through it, or due to changes in legal or regulatory requirements.