Data protection.
Data protection declaration in accordance with GDPR
Below we will inform you about the collection of personal data when using our website. Personal data means all the data, which refers to you personally, e.g. name, address, email addresses, user behavior, IP address.
I. Name and address of the controller
The controller in accordance with Art. 4 Para. 7 EU General Data Protection Regulation (GDPR) and other national data protection laws in Member States as well as other provisions under data protection law is:
GRASS GmbH
Grass Platz 1
6973 Höchst
Österreich
Tel.: +43 5578 701-0
E-Mail: info@grass.eu
Website: www.grass.at
II. Name and address of the data protection officer
The data protection officer of the controller is:
c/o migosens GmbH
Wiesenstr. 35
45473 Mülheim an der Ruhr
Germany
mail: dsb-grass-at@migosens.net
III. General information about data processing
1. Scope of the processing of personal data
In principle we collect and use personal data from our users only insofar as this is required to provide a functional website and our content and services. The collection and use of the personal data of our users takes place on a regular basis only with the consent of the user. An exception applies in such cases where it is not possible to obtain prior consent for effective reasons and processing of the data is permitted by statutory provisions.
2. Legal basis for the processing of personal data
Insofar as we obtain the consent of the data subject for processing procedures regarding personal data, Art. 6 Para. 1 lit. a EU General Data Protection Regulation (GDPR) serves as the legal basis for the processing of personal data.
When processing personal data, which is required to satisfy a contract, whose contracting party is the data subject, Art. 6 Para. 1 lit. b GDPR serves as the legal basis. This also applies to processing procedures required to implement pre-contractual measures. Insofar as the processing of personal data is necessary to satisfy a legal obligation, to which our company is subject, Art. 6 Para. 1 lit. c GDPR serves as the legal basis.
In the event that essential interests of the data subject or another individual make the processing of personal data necessary, Art. 6 Para. 1 lit. d GDPR serves as the legal basis.
If processing is required to maintain a justified interest of our company or a third party and if the interests, basic rights and basic freedoms of the data subject do not outweigh the first-mentioned interest, then Art. 6 Para. 1 lit. f GDPR serves as the legal basis for processing.
3. Data deletion and duration of retention
The personal data of the data subject will be deleted or blocked, as soon as the purpose of retention lapses. Retention can take place beyond this if this was envisaged by the European or national legislator in decrees, laws or other provisions under Union law, to which the controller is subject. Blocking or deletion of the data will also take place if a period of retention prescribed by the standards mentioned expires, unless the necessity for continued retention of the data exists for the conclusion of a contract or satisfaction of a contract.
4. Use of service-providers as part of the website
Sometimes we use external service-providers to process your data on our website. They have been selected and instructed carefully by us. They are bound to follow our instructions and are monitored on a regular basis. Data transmission in countries outside the EU or the EEA (so-called third countries) will not take place.
IV. Provision of the website and compilation of log files
1. Description and scope of data processing
Every time our website is called up, our system collects automated data and information from the computer system of the calling device. When the website is used merely for information purposes, we collect only the personal data that your browser transmits to our server. When this occurs, the following data is collected:
IP address
Information about the browser type and version used
Operating system of the user
Date and time of access
Relevant data volume transmitted
The data is also saved in the log files of our system. The IP addresses of the user or other data, which enable a user’s data to be assigned, are not affected by this. Retention of this data together with other personal data of the user will not take place.
2. Legal basis for data processing
The legal basis for temporary retention of the data is Art. 6 Para. 1 lit. f GDPR.
3. Purpose of data processing
The temporary retention of the IP address by the system is necessary so that the website can be provided to the user’s computer. For this the user’s IP address must be saved for the duration of the session.
Our justified interest in data processing is also based on these purposes in accordance with Art. 6 Para. 1 lit. f GDPR.
4. Duration of retention
The data will be deleted as soon as it is no longer required to achieve the purpose of its collection. In the event of collection of the data for the provision of the website, this is the case if the relevant session has ended.
5. Options for objection and removal
The collection of the data to provide the website and the retention of the data in log files is urgently required for the operation of the website. There is therefore no option for an objection on the part of the user.
V. Use of technically necessary cookies
1. Description and scope of data processing
Our website uses cookies. Cookies are text files, which are saved in the web browser or by the web browser on the user’s computer system. If a user calls up a website, then a cookie can be saved on the operating system of the user. This cookie contains a characteristic sequence of characters, which make it possible to clearly identify the browser when the website is called up again.
We use cookies to make our website more user-friendly. Some elements of our website make it necessary for the browser calling up to also be identified after moving to a different page.
2. Legal basis for data processing
The legal basis for the processing of personal data using cookies is Art. 6 Para. 1 lit. f GDPR.
3. Purpose of data processing
The purpose of using the technically necessary cookies is to simplify the use of websites for the user. Some functions of our website cannot be offered without the use of cookies. For this it is necessary that the browser can also be recognized after moving to a different page. The user data collected through the technically necessary cookies will not be used to compile user profiles.
Our justified interest in processing the personal data is also based on these purposes in accordance with Art. 6 Para. 1 lit. f GDPR.
4. Duration of retention, options for objection and removal
Cookies are saved on the user’s computer and transmitted from the latter to our website. As a user you therefore also have full control over the use of cookies. By changing the settings in your web browser, you can deactivate or limit the transmission of cookies. Cookies that have already been saved can be deleted at any time. This can also take place automatically. If cookies are deactivated for our website, it might be the case that not all the functions of the website can be used in full.
VI. Use of Google Analytics
1. Description and scope of data processing
This website uses Google Analytics, a web analysis service of Google Inc. (“Google”). Google Analytics uses so-called “cookies”, namely text files, that are saved on your computer and make it possible to analyze your use of the website. The information generated by the cookie about your use of this website is generally transmitted to a server of Google in the USA and saved there. If IP anonymization is activated on this website, your IP address will however be abbreviated in advance by Google within Member States of the European Union or in other contracting states to the Treaty on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a server of Google in the USA and abbreviated there. On behalf of the operator of this website, Google will use this information to assess your use of the website, to compile reports about the website activities and to provide additional services associated with the use of the website and the Internet to the website operator.
The IP address transmitted by Google Analytics from your browser will not be merged with other data by Google.
This website uses Google Analytics with the extension “ anonymizeIp()”. This continues to process the IP address in an abbreviated form so that any relationship to the person in question is ruled out. Insofar as a reference to you as an individual is made via the data collected about you, this will therefore be immediately ruled out and the personal data will therefore be deleted immediately.
2. Legal basis for data processing
The legal basis for the processing of personal data using cookies for analysis purposes is Art. 6 Para. 1 lit. f GDPR if there is consent from the user for this.
3. Purpose of data processing
We use Google Analytics to analyze the use of our website and to be able to improve this on a regular basis. The statistics provided enable us to improve our services and to make them more interesting for you as the user. For exceptional cases where personal data is transmitted to the USA, Google is subject to the EU-US Privacy Shield , www.privacyshield.gov/EU-US-Framework. The legal basis for the use of Google Analytics is Art. 6 Para. 1 p. 1 lit. f DS-GVO.
4. Duration of retention, option for objection and removal
You can prevent the cookies being saved by a corresponding setting of your browser software; however, we would like to point out to you that in this case you may not be able to use all the functions of this website in full. In addition, you can prevent the collection of the data generated by the cookie related to your use of the website (including your IP address) by Google and the processing of this data by Google, by downloading and installing the browser plug-in available under the following link: tools.google.com/dlpage/gaoptout.
5. Information about the third-party provider
Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. User conditions: www.google.com/analytics/terms/de.html, overview of data protection: www.google.com/intl/de/analytics/learn/privacy.html, and the data protection declaration: www.google.de/intl/de/policies/privacy.
This website also uses Google Analytics for cross-device analysis of visitor flows, which is carried out via a user ID. You can deactivate cross-device analysis of your use in your customer account under “My data”, “personal data”.
VII. Google Analytics Remarketing
1. Description, purpose and scope of data processing
Our websites use the functions of Google Analytics Remarketing in conjunction with the cross-device functions of Google AdWords and Google DoubleClick. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. This function makes it possible for the advertising target groups compiled with Google Analytics Remarketing to be linked with the cross-device functions of Google AdWords and Google DoubleClick. In this way interest-related, personalized advertising, which has been adjusted to you depending on your previous use and surfing behavior on an end-device (e.g. mobile phone), can also be displayed on another of your end-devices (e.g. tablet or PC).
2. Duration of retention, option for objection and removal
If you have granted the corresponding consent, Google will link your web and app browsing history with your Google account. In this way the same personalized advertising messages can be displayed on any end-device on which you register with your Google account. In order to support this function, Google Analytics compiles Google-authenticated IDs of users, which are temporarily linked with our Google-Analytics data to define and draw up target groups for cross-device display advertising. You can permanently not provide consent to cross-device remarketing/targeting by deactivating personalized advertising in your Google account; to do this, follow this link: www.google.com/settings/ads/onweb/.
3. Legal basis for data processing
The merger of the data collected in your Google account will take place exclusively on the basis of your consent, which you can give to Google or withdraw (Art. 6 Para. 1 lit. a GDPR). With regard to data collection procedures, which are not merged in your Google account (e.g. because you do not have a Google account or have not given consent for the merger), the collection of the data is based on Art. 6 Para. 1 lit. f GDPR. The justified interest arises because the website operator has an interest in the anonymized analysis of website visitors for advertising purposes.
4. Information about the third-party provider
You can find more detailed information and data protection provisions in the data protection declaration of Google at: www.google.com/policies/technologies/ads/
VIII. Google AdWords and Google conversion-tracking
1. Description, purpose and scope of data processing
This website uses Google AdWords. AdWords is an online advertising program of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States (“Google”).
As part of Google AdWords, we use so-called conversion-tracking. If you click on an advert displayed by Google, a cookie will be set for conversion-tracking. Cookies are small text files, which the Internet browser archives on the user’s computer. These cookies lose their validity after 30 days and are not used to identify the user in person. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can identify that the user has clicked on the advert and was directed to this page.
Every Google AdWords customer receives a different cookie. The cookies cannot be followed-up via the websites of customers of AdWords. The information obtained with the help of the conversion cookie is used to compile conversion statistics for customers of AdWords, who have decided on conversion tracking. Customers will discover the total number of users, who have clicked on their advert and were directed to the page with a conversion-tracking tag. However, they do not receive any information with which users can be personally identified. If you do not wish to participate in tracking, you can refuse this use by simply deactivating the cookie of Google conversion-tracking via your Internet browser under user settings. You will then not be included in the conversion-tracking statistics.
2. Duration of retention, option for objection and removal
You can set your browser so that you are informed about the setting of cookies and permit cookies only in an individual case, rule out the acceptance of cookies for certain cases or in general and activate the automatic selection of the cookies when the browser is closed. When cookies are deactivated, the functionality of this website may be restricted.
3. Legal basis for data processing
“Conversion-Cookies” are saved on the basis of Art. 6 Para. 1 lit. f GDPR. The website operator has a justified interest in the analysis of user behavior in order to optimize both his web services and his advertising.
4. Information about the third-party provider
You can find more information about Google AdWords and Google Conversion-Tracking in the data protection provisions of Google: www.google.de/policies/privacy/.
IX. Google Tag Manager
To manage our website and integrate cookie-based technologies, we use the Tag Manager service provided by Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google"). For this purpose, your IP address is transmitted to a Google server, which may also be located in the USA, each time one of our Internet pages is called up. The IP address is not stored by Google as part of the Tag Manager service and is only used to integrate the technologies managed by the Tag Manager. The Tag Manager itself does not set cookies.
X. Integration of YouTube videos
We have integrated YouTube videos in our online range, which are saved at www.YouTube.com and which can be played directly from our website. [They are all integrated in the “extended data protection mode”, i.e. no data about you as the user will be transmitted to YouTube if you do not play the videos. Only when you play the videos will the data mentioned in Paragraph 2 be transmitted. We have no influence on this data transmission.]
As a result of the visit to the website, YouTube receives the information that you have called up the corresponding sub-page of our website. In addition, the data mentioned under IV of this Declaration will be transmitted. This will take place regardless of whether YouTube provides a user account via which you are logged in or whether there is no user account in existence. When you are logged in to Google, your data will be assigned directly to your account. If you do not want your profile at YouTube to be assigned, you must log out before activating the button. YouTube saves your data as a usage profile and uses it for the purposes of advertising, market research and/or the required design of its website. Such use takes place in particular (even for users who are not logged in) to provide appropriate advertising and to inform other users of the social network about your activities on our website. You have a right to object to the creation of these user profiles, whereby you must contact YouTube to exercise this right.
You can find further information about the purpose and scope of data collection and its processing by YouTube in the Data protection declaration. There you will also find further information about your rights and setting options to protect your privacy: www.google.de/intl/de/policies/privacy. Google also processes your personal data in the USA and is subject to the EU-US-Privacy-Shield, www.privacyshield.gov/EU-US-Framework.
XI. Visitors' Book
The legal basis for the storage of your data results from the requirements of fire and evacuation protection on the one hand, and is covered by the DSGVO Art. 6 Lit. c,d,f on the other hand. The duration of storage of your data in our visitor book is 7 days. After this period, this data will be deleted automatically. A further processing of the data does not occur. Access to the electronic visitors' book is restricted to the relevant group of employees (reception, plant manager, security management).
XII. Rights of the data subject
Every data subject has the right to obtain information in accordance with Article 15 GDPR, the right to correction in accordance with Article 16 GDPR, the right to deletion in accordance with Article 17 GDPR, the right to restriction of processing in accordance with Article 18 GDPR, the right to object arising from Article 21 GDPR and the right to data portability arising from Article 20 GDPR. In addition, there is a right to complain to a data protection authority (Article 77 GDPR).
You can withdraw the consent you have granted to us for the processing of personal data at any time. This also applies to the withdrawal of consent declarations, which were issued to us before the validity of the EU General Data Protection Regulation, in other words before 25 May 2018. Please note that withdrawal of consent is effective only for the future. Processing, which took place before the withdrawal of consent, is not affected by this. Withdrawal of consent can take place without completing any forms and should be directed to the controller.