This data privacy statement is intended to inform you about how we process your personal data (hereinafter "data").
1. Data processing controller
The controller responsible for data processing as defined by the General Data Protection Regulation (GDPR) is:
CCA GmbH
Werkstraße 10
D-32584 Löhne
Phone: +49 (0) 5731 30381-0
E-mail: info@ccagmbh.de
2. General information on data processing
In the course of our business and website operations we process data.
This also includes disclosure by transfer to third parties and, where applicable, to so-called third countries outside the European Union ("EU") and the European Economic Area ("EEA"). Where we transfer data outside the EU or EEA, we have marked this accordingly below.
3. Data processing
The specific data, processing purposes, legal foundations, recipients and types of transfer to third countries affected are listed below:
a) Log file when visiting the website
We log your website visit. In doing so we process:
· name(s) of our accessed website(s),
· date and time of access,
· volume of transferred data,
· browser type and version,
· the operating system used by you,
· the referrer URL (the previously visited website),
· your IP address,
· the requesting provider.
The legal basis for data processing is our overriding legitimate interest in the ongoing provision and security of our website in accordance with Art. 6 section 1 f) GDPR.
The log file is deleted after seven days, unless it is required to investigate or prove specific legal infringements which were detected within the retention period.
b) Hosting
To provide our online presence, we use the services of web hosting providers who process the above-mentioned data and all data to be processed in connection with the operation of this website (log file when visiting the website) on our behalf.
The legal basis for data processing is our overriding legitimate interest in the provision of our website in accordance with Art. 6 section 1 f) GDPR.
c) Contact
If you contact us, we process the following data from you for the purpose of processing and handling your enquiry: name, contact details - if provided by you - and your message.
The legal basis for data processing is our obligation to fulfil the contract and/or to fulfil our pre-contractual obligations pursuant to Art. 6 section 1 b) GDPR and/or our overriding legitimate interest in processing your enquiry pursuant to Art. 6 section 1 f) GDPR.
d) Use of cookies
We use so-called cookies on our website. Cookies are small text files that are stored on your respective end device (PC, smartphone, tablet, etc.) and saved by your browser.
Information about the specific cookies we use, their providers and purposes can be found in our Consent Banner. There you give your consent to the respective services, can revoke it or subsequently adjust your settings.
Our Consent Banner
In order to document your choice on certain data processing procedures and to comply with our obligations under data protection law, we use a Consent Banner. When you access our website, your cookie preferences are requested via a banner. We then set a cookie in which data on consent given or revoked is stored. The data processing is carried out for the fulfilment of our legal obligations according to Art. 6 section 1 c) GDPR.
e) Analysis / Marketing
aa) Google services
We use various services of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter "Google") on our website. It is possible that this may also result in data being transferred to Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 in the USA.
There is no EU Commission adequacy decision for data transfers to the USA. Google ensures an adequate level of data protection via the EU standard contractual clauses. A copy of the relevant EU standard contractual clauses will be provided upon request. For this, please contact info@ccagmbh.de.
Google Analytics
We use the Google Analytics tracking tool from Google on our website. We use Google Analytics to evaluate your use of the website, to compile reports on the activities within this website and to provide other services associated with the use of the website in order to improve the user experience.
When Google Analytics is used, the interactions of website visitors are primarily recorded and systematically evaluated with the help of cookies.
We use Google Analytics with the extension "anonymizeIp()". This truncates IP addresses within the member states of the EU or EEA. If a transmission to Google's servers in the USA takes place, the full IP address will only be transmitted in exceptional cases and truncated there. A direct reference to a person is therefore generally excluded. In particular, an assignment to the called computer or terminal of the website visitor is no longer possible.
In this context, the following data is processed through the use of Google Analytics:
· 3 bytes of the IP address of the visited system of the website visitor (anonymised IP address),
· the visited website,
· the website from which the user accessed the page on our website (referrer),
· the sub-pages that are accessed from the website,
· the length of time spent on the website,
· the frequency with which the website is accessed.
Google states that it will not associate your IP address with any other data held by Google.
Legal basis and revocation
The legal basis for data processing within the scope of the aforementioned Google services is your prior consent pursuant to Art. 6 section 1 a) GDPR.
You can revoke your consent at any time with effect for the future by adjusting your preferences in our Consent Banner.
4. Duration of data storage
We only store personal data as long as it is required for the purposes for which it is being processed or until you withdraw the respective declaration of consent. If legally mandated retention periods apply, the storage period may be up to 10 years for specific data, irrespective of the purpose of processing.
5. Your rights as data subject
a) Right of access
You have the right to be informed of all personal data that we have stored about you at any point on request and free of charge.
b) Correction, erasure, restriction of processing (blocking), objection
Should you no longer consent to the storing of your personal data or should the data have become incorrect, we will initiate erasure or blocking of this data or make the necessary corrections at your request (provided this is possible based on the applicable laws). The same applies if you have requested that we restrict processing of the data in the future. You have the right to object in particular in cases where your data is required for the performance of a task which is in the public interest or in our legitimate interest, as well as profiling based on this. Likewise, you have such a right of objection in the event of data processing for the purpose of direct advertising.
c) Right of revocation of consents with future effect
You can revoke any consent you have given at any time with effect for the future. Your revocation of consent does not affect the legitimacy of data processing performed up to the point at which your revocation of consent is received.
d) Data portability
If data processing is based on a contract, pre-contractual negotiations, consent or automated procedures, you have the right to data portability. If requested, we will provide your data in a common, structured and machine-readable format, so that you can transmit the data to a different controller, if desired.
e) Restriction of processing
Data for which we cannot identify the data subject or which has been anonymised for analysis purposes is not included in the above-mentioned rights. Access, erasure, blocking, correction or transfer to a different company is possible with regard to this data, if you provide us with additional information, permitting identification.
f) Exercising your rights as a data subject and right to lodge a complaint
For questions regarding processing of your personal data, to request access, correction, blocking, objection or erasure of data or to have data transferred to a different company, please contact info@ccagmbh.de.
You also have the possibility to complain to a supervisory authority about your data protection rights.