Data privacy statement

A. Data processing controller

The controller responsible for processing of personal data in the context of this website as defined by the General Data Protection Regulation (GDPR) is:
CCA GmbH
Werkstraße 10
D-32584 Löhne
Phone: +49 (0) 5731 30381-0
Web: ccagmbh.de
e-mail: info@ccagmbh.de

This data privacy statement is intended to inform you about how we process your personal data (hereinafter referred to only as “data”).

B. Data processing

We process data in conjunction with the operation of our website. Data processing also includes disclosure through transfer.

For data transfer to the USA, an adequacy decision has been made by the European Commission, the EU-US Privacy Shield. With this decision, the Commission has certified that the safeguards for transferring data to the USA based on the EU-US Privacy Shield comply with the data protection standards valid in the EU. Insofar as we transfer data to the USA, we have indicated the participation of our service providers in the EU-US Privacy Shield.

The specific data, processing purposes, legal foundations, recipients and types of transfer to third countries affected are listed below:

a) Log file
We log your visit to our websites. In this context, the following data is processed: Name of the accessed website, data and time of access, transferred data volume, browser type and version, the operating system used by you, the referrer URL (the previously visited website), your IP address and the requesting provider. This is necessary to ensure website security. We process this data based on our legitimate interest in accordance with Art. 6 section 1 f) GDPR. The log file is deleted after seven days, unless it is required to investigate or prove specific legal infringements which were detected within the retention period.

b) Hosting
In the context of hosting this website, all data associated with the operation of this website is also stored. This is necessary to permit operation of the website. We process this data based on our legitimate interest in accordance with Art. 6 section 1 f) GDPR. To provide our web presence, we use the services of web hosting providers, to whom we transmit the above-mentioned data.
Comment [RES1]: Please add, if necessary. If you have not appointed a data privacy officer, you can delete this paragraph. A business is legally obligated to appoint a data privacy officer if more than 10 employees are regularly tasked with work related to automated data processing.

c) Contact
If you contact us, your data (name, contact details, if specified by you)
and your message are processed exclusively for the purpose of processing and
settling your enquiry. We process this data based on
Art. 6 section 1 b) GDPR or Art. 6 section 1 f) GDPR to process your
enquiry.

d) Website analytics and marketing
We use “cookies” to permit the utilisation of specific functions.
These are small data packages saved on your device and exchanged
with other providers. Some of the cookies used by us
are deleted immediately when you close your browser (“session cookies”). Other
cookies will remain on your end device and make it possible to recognise your browser
when you visit our websites next (“persistent cookies”).
You can delete any cookies saved on your device and change the settings in all common browsers,
so that the storing of cookies is prevented.
In this case you may, however, have to make some settings again every time you visit
this website and may find that some functions are impaired.

We use cookies in conjunction with the following functions:

Google Analytics


We use Google Analytics, a service of Google LLC 1600 Amphitheatre Parkway
Mountain View, CA 94043 USA. Google uses specific cookies for this function. The information generated by the
cookie about your use of this website (including your IP address)
will be transmitted to Google servers in the USA and stored there.
We use the stored information for the purpose of evaluating your use of the website,
compiling reports on website activity for website operators and
providing other services relating to website activity. We process the
data obtained in this manner based on our overriding interest in the ideal
marketing of our online presence in accordance with Art. 6 section 1 f) GDPR. Google will not associate your
IP address with any other data held by Google.

We would like to note that this website uses Google Analytics with the extension
“anonymizeIp()”. This means that IP addresses are truncated before
being transmitted to a server in the USA. In general, this reliably prevents any direct associations
between a specific person and the stored data. Only in exceptional cases will the full IP address
be transmitted to a server in the USA and truncated there.

You can object to data collection at any time with future effect, by using the deactivation add-on for browsers provided for Google Analytics at
tools.google.com/dlpage/gaoptout or visiting the following opt-out link:

Please also note the information on the use of data by Google in the Google partner network at: http://www.google.com/intl/de/policies/privacy/partners/
Google is certified by:
https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active

For further information on data privacy, visit:
https://policies.google.com/privacy?hl=de&gl=de

e) Integration of external contents
We use external dynamic contents to optimise the presentation and offers of our
website.
When a user visits our website and after the user has given consent through API, a request is
transmitted to the server of the respective content provider, in which specific log data is transmitted (e.g. the user’s IP address). The dynamic content is then
transmitted to our website and presented there.
We use external cookies in conjunction with the following functions:

Google Maps

Our website uses the map service “Google Maps” provided by Google to show you
an interactive map. To provide the map,
we use a “two-click solution”. This means data is only
transferred to third-party providers, if the user activates the map by clicking
the [OK] button. When the map is displayed, the data, including your IP address
and your location, is then transferred to the Google server in the USA and
stored there. This data is processed based on your consent according to Art. 6 section 1
a) GDPR.

Google is certified by:
https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active
For further information on data privacy, visit:
https://policies.google.com/privacy?hl=de&gl=de
C. Duration of data storage
We only store personal data as long as it is required for the purposes for which
it is being processed or until you withdraw the respective declaration of
consent. If legally mandated retention periods apply, the storage
period may be up to 10 years for specific data, irrespective of the
purpose of processing.

D. Your rights as data subject

a) Right of access

You have the right to be informed of all personal data that we have stored about you
at any point on request and free of charge.

b) Correction, erasure, restriction of processing (blocking), objection
Should you no longer consent to the storing of your personal data or should
the data have become incorrect, we will initiate erasure or blocking of this data
or make the necessary corrections at your request
(provided this is possible based on the applicable laws). The same applies
if you have requested that we restrict processing of the data in the future.

c) Data portability

If requested, we will provide your data in a common, structured and
machine-readable format, so that you can transmit the data to a different
controller, if desired.

d) Right to file a complaint
You have the right to file a complaint with a supervisory authority:

https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html

e) Right to withdraw consent with future effect
You can withdraw any consent you may have given with future effect at any point. Your
withdrawal of consent does not affect the legitimacy of data processing performed up to the point
at which your withdrawal of consent is received.

f) Restrictions

Data for which we cannot identify the data subject or which has been
anonymised for analysis purposes is not included in the above-mentioned
rights. Information, deletion, blocking, correction or transfer to a
different company is possible with regard to this data, if you provide us with
additional information, permitting identification.

g) Exercising your rights as a data subject

For questions regarding processing of your personal data, to request access, correction,
blocking, objection or erasure of data or to have data transferred to a
different company, please contact info@ccagmbh.de.