Privacy Policy

Data Protection Notice

AQUATO (hereinafter: “We”) respects your privacy. Therefore, We take the protection of your personal data, such as name, date of birth, address, e-mail address, telephone number etc. very seriously.

This privacy notice informs about the collection, processing and use (hereinafter collectively also referred to as “Processing”) of your personal data if and to the extent it is incurred when using our website. In addition, all data subjects are informed of their rights.

In dealing with this data, We act in strict compliance with the relevant statutory data protection regulations and the following principles. We have implemented numerous technical and organisational measures to ensure extensive protection of personal data processed through our website.

  1. Controller

The following company is the controller for processing your personal data as described in this privacy notice:

AQUATO Umwelttechnologien GmbH
Ernstmeierstraße 24
32052 Herford
Germany

Tel.: +49 (0) 05221 1021920
E-Mail: info@aquato.de

  1. Definitions

The privacy notice contains the following terms set forth in the EU General Data Protection Regulation 2016/679 (“GDPR”).

a) Personal data
Personal data means any information relating to an identified or identifiable natural person (hereinafter: “You”). A natural person is considered to be identifiable who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

  1. b) Processing
    Processing means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
  2. c) Pseudonymisation
    Pseudonymisation means the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures to ensure that the personal data is not attributed to an identified or identifiable natural person.
  3. d) Controller
    The controller is the natural or legal person, public authority, agency or any other body which alone or jointly with others decides on the purposes and means of processing personal data. Where the purposes and means of processing are determined by Union or Member State law, the controller or the specific criteria for his nomination may be designated by Union or Member State law.
  4. e) Processor
    The processor is a natural or legal person, public authority, agency or any other body which processes personal data on behalf of the controller.
  5. f) Consent
    Consent of the data subject means any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.g) Supervisory Authority
    Supervisory authority means an independent public authority which is established by a Member State pursuant to Article 51 GDPR.
  6. Data processing and consent

In all cases of data processing, We observe the principle of data avoidance and data economy. This means that We process as little personal data as possible.

  1. a) We process Your personal data if and insofar as this is necessary for the establishment, implementation or termination of a contractual or quasi-contractual relationship.

The legal basis for the processing of personal data relating to a contractual or quasi-contractual relationship is Art. 6 (1) sentence 1 b GDPR. This also applies to processing operations that are necessary to carry out pre-contractual measures.

The personal data will be erased after the termination of the contractual or quasi-contractual relationships in compliance with the statutory storage requirements.

Within the framework of the contractual relationships, Your personal data may be transmitted to third parties, which process this data solely for the purpose of performance of the contractual purpose. This applies in particular to postal delivery services for the purpose of delivering goods and payment services in order to fulfil Your payment obligations.

  1. b) In other respects, We process Your personal data if and insofar as You have given Your consent. In doing so, this data is used only for the purpose and scope stated in the declaration of consent; for instance, We will inform You about Our products and services only in accordance with Your consent.

The legal basis for the processing of data on the basis of Your consent is Art. 6 (1) sentence 1 a GDPR, whereby in this case You have the right to revocation for the future. You may address the revocation by letter or e-mail to the contact details of the controller mentioned under section 1. above. The legality of the data processing carried out until the assertion of Your rights remains unaffected.

The personal data is erased in compliance with the legal preservation obligations after completion of the purpose pursued with the consent.

Within the scope of consent given, Your personal data may be transferred to third parties who process this data solely for the purpose of obtaining Your consent.

  1. c) In other respects, We process Your personal data in a pseudonymised form.

If the Processing is necessary for the protection of a legitimate interest of Us or a third party and the interests, fundamental rights and freedoms of the data subject do not outweigh the former interest, Art. 6 (1) sentence 1 f GDPR serves as the legal basis, whereby in principle the possibility of objecting to this data processing exists for the future. You may address the objection by letter or e-mail to the contact details of the controller mentioned under section 1. above. The legality of data processing carried out until the assertion of Your rights remains unaffected.

The personal data will be erased in compliance with the statutory preservation requirements after reaching the legitimate interests or after an objection has been raised.

In the context of legitimate interests, Your personal data may be transmitted to third parties who process this data solely for the purpose of fulfilling Your interests.

  1. Registration and signing up and establishment of contact

Our website may provide the option of registering or signing up (e.g. for the newsletter) by providing personal information. The type of personal data transmitted to the controller results from the respective registration mask. The data You enter will be processed solely for the purposes stated in connection with the registration.

If You contact us by e-mail, through a contact form or in a similar form (for example, inquiries about our products or services), the personal data provided by You will also be processed. However, this data processing is limited to the purpose of processing the inquiries or contacting You.

As part of the registration and sign-up process, the IP address assigned to You at the date of registration, signing up or establishing contact will be processed as well as the date and time. This data processing is necessary in order to prevent the misuse of Our services, as this data could be used to solve any crime committed. This results in the legitimate interests in data processing.

The legal basis for this processing is the presence of consent in accordance with Art. 6 (1) sentence 1 a GDPR, in which case You have the right to revocation for the future. You may address the revocation by letter or e-mail to the contact details of the controller mentioned under section 1. above. The legality of the data processing carried out until the assertion of Your rights remains unaffected.

In the context of contractual or quasi-contractual relationships, the legal basis results from Art. 6 (1) sentence 1 b GDPR. This applies, for instance, to contact established for the purpose of concluding a contract.

Otherwise, the legal basis ensues from Article 6 (1) sentence 1 f GDPR. The legitimate interests result from the reasons described above. There is the possibility to object to this data processing in future. You may address the objection by letter or e-mail to the contact details of the controller mentioned under section 1. above. The legality of the data processing carried out until the assertion of Your rights remains unaffected.

The personal data will be erased in compliance with the statutory preservation requirements after reaching the legitimate interests or after an objection has been raised. If contact is established, Your data will be erased as soon as the respective request is completed or You object to the data processing; in the latter case, correspondence is discontinued.

  1. Automatically generated data

Every time You visit our website, log files automatically process data that originates from Your terminal and may also include personal data. This applies to the following data:

– The operation system running on Your terminal
– The browser type used by You
– Name of Your Provider
– Your IP address
– Date and time of the visit
– The websites visited including any search words
– The websites from which You have reached Our website

We do not process this data together with other personal data about You, i.e. We do not assign the aforementioned data to Your person.

The legal basis for the Processing of the automatically generated data is Art. 6 (1) sentence 1 f GDPR. The Processing is required to ensure the functionality of the website, to optimise the content of Our websites and to display them correctly and to provide prosecuting authorities with the information necessary for prosecution in the event of a cyberattack. This is also the legitimate interest in data processing.

The automatically generated data will be erased as soon as it is no longer required for the achievement of the aforementioned purposes, i.e. when the respective website visit is finished. If Your IP address is processed, the data is erased after 7 days at the latest.

Processing the aforementioned data for the provision of the website and any storage in log files is essential for the operation of the website. As a result, there is no possibility of making an objection.

  1. Cookies
    1. Right to revocation and objection
    2. a)  Right to revoke a data protection consent
      You have the right to revoke Your consent to the processing of personal data at any time.
      The legality of data processing carried out until the revocation remains unaffected by the revocation.
    3. b)  Right to objection
      You have the right to object at any time to the processing of personal data concerning You pursuant to Article 6 (1) sentence 1 e or f GDPR (Article 21 (1) GDPR). The legality of data processing carried out until the revocation remains unaffected by the revocation.In the event of an objection, We will no longer process the personal data unless We can prove compelling legitimate reasons for the processing that outweigh Your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.If Your personal data is used to operate direct advertising, You have the right to object hereto at any time (Article 21 (2) GDPR).
      If You raise an objection, We will no longer process your personal data. The legality of data processing carried out until the revocation remains unaffected by the revocation.

    The revocation and the objection may be addressed to the contact details of the controller mentioned under section 1. above at any time by letter or by e-mail.

    10. Inclusion of Google Maps

    1. a) On this website we use the offerings of Google Maps. This allows us to show you interactive maps directly on the website and allow you to conveniently use the map feature.
    2. b) By visiting the website, Google receives the information that you have accessed the corresponding subpage of our website. In addition, the data mentioned under Sec. 3 of this Statement will be transmitted. This happens regardless of whether Google provides a user account that you are logged in to, or if there is no user account. When you are logged in to Google, your data will be assigned directly to your account. If you do not wish to associate with your profile on Google, you must log out before activating the button. Google stores your data as usage profiles and uses them for purposes of advertising, market research and/or needs-based design of its website. Such an analysis is carried out in particular (even for non-logged-in users) for the provision of needs-based advertising and to inform other users of the social network about your activities on our website. You have a right to object to the creation of these user profiles. To exercise such right, you must contact Google.
    3. c) For more information on the purpose and scope of the data collection and its processing by the plug-in provider, please refer to the data protection statements of these providers. There you will also find further information about your relevant rights and settings options for the protection of your privacy: https://www.google.de/intl/de/policies/privacy. Google also processes your personal data in the USA and is subject to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

     

    1. Plugins and tools Google Web Fonts

      For uniform representation of fonts, this page uses web fonts provided by Google. When you open a page, your browser loads the required web fonts into your browser cache to display texts and fonts correctly.For this purpose your browser has to establish a direct connection to Google servers. Google thus becomes aware that our web page was accessed via your IP address. The use of Google Web fonts is done in the interest of a uniform and attractive presentation of our website. This constitutes a justified interest pursuant to Sec. 6 (1) (f) GDPR.If your browser does not support web fonts, a standard font is used by your computer. Further information about handling user data, can be found at developers.google.com/fonts/faq and in Google’s privacy policy at www.google.com/policies/privacy/.

     

    1. Further rights
    2. a) Right to confirmation
      You have the right to request information from Us as to whether We process personal data of You.
    3. b) Right to information
      You have the right to obtain information on Your personal data processed and a copy hereof at any time free of charge.
      You also have the right to receive information on whether personal data has been transmitted to a third country or to an international organisation. If this is the case, You are otherwise entitled to receive information about the appropriate guarantees in connection with the transmission.
    4. c) Right to correction
      You have the right to demand the immediate correction of incorrect personal data concerning You. You also have the right, under consideration of the purposes of processing, to request the completion of incomplete personal data, including by means of a supplementary statement.
    5. d) Right of deletion (right to be forgotten)
      The GDPR provides for a right of deletion. Accordingly, You may request that the personal data concerning You be erased immediately if any of the following reasons apply and to the extent Processing is not required:
    • The personal data has been collected for such purposes or otherwise processed for which it is no longer necessary.
      • You revoke Your consent, on which the Processing was based in accordance with Art. 6 (1) a GDPR or Art. 9 (2) (a) GDPR, and there is no other legal basis for the Processing.
      • You object to the Processing within the meaning of Art. 21 (1) GDPR and there are no superior legitimate reasons for the Processing.
      • You object to the Processing within the meaning of Art. 21 (2) GDPR.
      • The personal data was processed illegally.
      • The erasure of personal data is required to fulfil a legal obligation under Union or Member State law.
      • The personal data was collected in relation to information society services offered pursuant to Art. 8 (1) GDPR.
    1. e) Right to restriction of Processing
      You have the right to demand that We restrict Processing if any of the following conditions is met:
    • The accuracy of Your personal data is contested by You for a period of time that enables the controller to verify the accuracy of the personal data.
      • The processing is illegal, You refuse the erasure of personal data and instead require the restriction of use of personal data.
      • We no longer need Your personal data for Processing purposes, but You need it to assert, exercise or defend any legal claims.
      • You have objected to the Processing pursuant to Art. 21 (1) GDPR and it is not yet clear whether the legitimate reasons prevail over those stated by You.
    1. f) Right to data portability
      You have the right to receive the personal information You provide Us in a structured, commonly used and machine-readable format. You also have the right to transmit this data to another controller without hindrance by Us, provided that the Processing is based on the consent to be given pursuant to Art. 6 (1) sentence 1 a GDPR or on a contract pursuant to Art. 6 (1) sentence 1 b GDPR and data is processed using automated means, provided that the Processing is not necessary for the performance of a task of public interest or it is effected in the exercise of public authority delegated to the controller.
      In addition, when exercising Your right to data portability, You have the right to effect that personal data be transmitted directly from one controller to another, as far as technically feasible and provided that this does not affect the rights and freedoms of others.
    2. g) Right to complain to a supervisory authority
      In addition to these rights, You have a right to file complaints with the supervisory authority in charge of data protection (North Rhine-Westphalia: North Rhine-Westphalia Commissioner for Data Protection and Freedom of Information, Düsseldorf).
    3. Third-party access to Your personal data

    The data is processed by Ourselves and, as far as We have not expressly excluded, by service providers commissioned by Us and in case of Your respective consent or for the fulfilment of agreed contractual duties by third parties and in the case of pseudonymised data also by third parties subject to legitimate interests.

    In other respects, third parties do not have access to Your personal data. In particular, We will not sell or otherwise use it. We will process the data only on official or legal requests as well as in the event of legal disclosure requirements, in particular transmit it to state authorities.

    1. Information on third-country transfers

    In the event that Your personal data is transferred to third-country non-EU/EEA sites, this will only be done if the EU Commission has decided that the third country, territory or multiple specific sectors in that third country provide an adequate level of protection or adequate or appropriate data protection guarantees have been provided within the meaning of Art. 46 or Art. 47 or Art. 49 GDPR.

    1. Children

    We do not process personal data of persons who have not reached the age of 16 years. If We become aware that such information has been transmitted to Us without the consent of the parents or other guardians, We will promptly delete it. In doing so, We are dependent on relevant information from You as parents or legal guardians.

    1. Storage period as well as erasure and restriction/blocking

    We process Your personal data only for the period required to achieve the purpose of the storage or if this is provided for by the relevant statutory regulations. If the purpose of storage does not apply or if a storage period prescribed by the relevant statutory regulations expires, the personal data will be erased or restricted/blocked routinely and in accordance with the statutory provisions. In case of contractual relationships, these principles apply accordingly until the expiry of statutory limitation periods.

    1. Duty to provide data

    The provision of Your personal data is partly required by law (such as tax regulations) or is also the result of contractual arrangements (such as details of the contracting party).

    Also for a contract conclusion it may be necessary that You provide us with personal data, which must be subsequently processed by Us. Failure to provide Your personal data would mean that the contract could not be concluded with You. If You do not wish to provide personal data in these cases, You may contact the controller mentioned in section 1. above by mail or e-mail. We clarify on a case-by-case basis whether the provision of the personal data is required by law or contract or is required for the conclusion of the contract, whether there is an obligation to provide the personal data and what would be the consequence of non-provision of the personal data.

    1. Amendments of this privacy notice

    We always keep this privacy policy up to date. Therefore, it may be necessary to adapt the privacy notice to changing outline conditions of actual or statutory nature. These adaptations are accepted by using our website.

    1. Data protection officer

    If You have any questions regarding the processing of Your personal data, please contact Our data protection officer:

    Biehn & Professionals GmbH

    IT-Sicherheit und Risikomanagement
    Freiberger Straße 14,
    59558 Lippstadt

    Tel. +49 (0) 2944 / 97971-0

    datenschutz@aquato.de