I. General information and legal basis
The following declaration informs you about what kind of personal data is collected for what purpose by us as the responsible party and to what extent this data is made available to third parties.
1. Responsible body
edelsprint UG (haftungsbeschränkt)
Technologiepark 8, 33100 Paderborn
Phone number: +49 5251 2027951
2. Legal basis of processing
The processing of personal data requires a legal basis, which we would like to present to you in the following.
When processing personal data for which we obtain the consent of the data subject, Article 6 paragraph 1 lit. a of the EU Data Protection Regulation (GDPR) serves as the legal basis. In the processing of personal data that is necessary for the performance of a contract to which the data subject is a party, Article 6 paragraph 1 lit. b GDPR serves as the legal basis. This also includes processing operations that are necessary to carry out pre-contractual measures.
Insofar as processing of personal data is necessary to fulfil a legal obligation to which our company is subject, Article 6 paragraph 1 lit. c GDPR serves as the legal basis. If the processing is necessary to safeguard a legitimate interest of our company or of a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the former interest, Article 6 paragraph 1 lit. f GDPR serves as the legal basis. The legitimate interest of our company lies in the performance of our business activities and in the analysis, optimization, and maintenance of the security of our online offer.
II. Log files, hosting
We are using hosting services. These serve to provide infrastructure and platform services, computing capacity, storage space, and database services, security services, and technical maintenance services to maintain the operation of this online offer.
In doing so, we or our hosting provider process inventory data, contact data, content data, contract data, usage data, meta and communication data of customers, interested parties, and visitors of this online offer based on our legitimate interests in an efficient and secure provision of this online offer.
III. Contractual processing
The personal data provided by you for contractual purposes, e.g., for quotation requests, such as name, address, or email address, will only be used internally to answer your inquiries, process your orders, or provide you with access to certain contractual information.
When you contact us by email or via chat, your details will be stored by us to answer your questions. As a matter of principle, we do not pass on your data to third parties, unless applicable data protection regulations justify a transfer or we are legally obliged to do so. You can revoke your given consent at any time with effect for the future. In the event of revocation, your data will be deleted immediately, unless there is a legal exception for further processing. Your data will otherwise be deleted when we have processed your request or the purpose of storage has ceased to exist and there are no other conflicting legal exceptions.
V. Our presence in social media
You can find us under online presences within social networks and platforms. With these presences, we would like to communicate with our customers, interested parties and users, and inform them about our services and our company. The personal data of the users active there is processed on the basis of our legitimate interest in communication and the provision of information to and with the users. If the users have given their consent to data processing within the framework of the respective social platform, the processing is carried out on this basis of consent.
If you visit one of our social media sites, we are responsible, together with the operator of the social platform, for the data processing operations triggered during this visit. You can basically assert your rights (information, correction, deletion, restriction of processing, data transferability and complaint, see the following point “Rights of the data subject”) both against us and against the operator of the respective social platform. We would like to point out that, despite the joint responsibility, we do not have full influence on the data processing procedures of the social platform and, if necessary, for a better processing of the data subject’s rights, we forward the rights request to the respective operator. Our possibilities are based on the corporate policy of the respective provider.
Depending on the following named social platform, the data processing of users may also take place outside the area of the European Union. EU standard contract clauses have been agreed with the US companies, so that we have taken possible measures to ensure European data protection law.
User data is usually processed by the platforms for market research and advertising purposes. For example, user profiles can be created from the user behavior and the resulting interests of the users. The user profiles can in turn be used, for example, to place advertisements inside and outside the platforms that presumably correspond to the interests of the users. For this purpose, cookies are usually stored on the users’ computers, in which the usage behaviour and interests of the users are stored. Data can also be stored in the user profiles independently of the devices used by the users. This is particularly the case if the users are members of the respective platforms and are logged in to them.
For a detailed presentation of the respective processing and the possibilities of objection, we refer to the following linked information of the providers.
Facebook (pages, groups)
(LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Ireland);pPrivacypPolicy: https://www.linkedin.com/legal/privacy-policy; opt-out: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out
VI. Transfer of data to third parties
In some cases, we make use of external service providers within the scope of your consent or our legitimate interests with regard to analysis, optimization, and economic operation of the online offer. This basically presupposes that the third party providers of this content are aware of the IP address of the users, as without the IP address they would not be able to send the content to their browsers. The IP address is therefore necessary for the display of this content. Third party providers may also use so-called pixel tags (invisible graphics, also known as “web beacons”) for statistical or marketing purposes. The “pixel tags” can be used to evaluate information such as visitor traffic on the pages of this website. The pseudonymous information may also be stored in cookies on the user’s device and may contain technical information similar to log files. In the following we list our service providers.
If your data is to be used for other purposes, we will inform you in advance and will only use the data if you have given your express permission to do so.
We use, within the scope of our agreement with you, services for which Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”) is responsible for the analysis, optimization, and economic operation of our online offer. EU standard contract clauses have been agreed with Google, so that we have taken possible measures to ensure compliance with European data protection law.
b. Google Fonts
VII. Rights of the data subject
You have a right to information about the personal data we have stored about you. According to the legal regulations you also have the right to correct incorrect data, block, transfer, and delete your personal data. To do so, please send us an email with the subject “Data protection.” You also have a right to complain to a data protection supervisory authority if you believe that processing of your personal data violates the legal provisions.
If you have given your consent, you have the right to revoke it at any time. This does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.
You can object to the future processing of your personal data in accordance with the legal requirements at any time. The objection can be made in particular against processing for the purposes of direct advertising.
VIII. Storage period of personal data
If we have not provided storage instructions for the specific points, the following applies: We store personal data for the duration of the respective legal retention period or as long as the purpose of the collection exists. After the retention period has expired, the data is routinely deleted, unless it is necessary for the initiation or fulfillment of a contract. If the users’ data is not deleted because it is required for other and legally permissible purposes, its processing is restricted as far as possible. Accordingly, the data will be blocked where possible and not processed for other purposes. This applies, for example, to user data that must be retained for commercial or tax law reasons.
IX. Safety information
We make every effort to process your personal data by taking all technical and organisational measures to ensure that the regulations of the data protection laws are observed and to protect these data. Our website or communication with us via our website is encrypted using HTTPS.
You can find a list of our sub-processors on this page.