Data protection information according to Art. 13, 14 and 21 DSGVO for the websites and external pages of ACE Handels- und Entwicklungs GmbH.
I. General
1. person responsible
We, ACE Handels- und Entwicklungs GmbH, take the protection of your personal data and the legal obligations serving this protection very seriously. The legal requirements demand comprehensive transparency regarding the processing of personal data. Only if the processing is comprehensible to you as the data subject are you sufficiently informed about the purpose, type and scope of the processing.
Our data protection declaration therefore explains in detail what personal data is processed by us when you use our website, all other sub-pages referring to it and in the other cases explained here where applicable.
The responsible party within the meaning of the General Data Protection Regulation (DSGVO), the Federal Data Protection Act (BDSG) and other data protection requirements is the
ACE Handels- und Entwicklungs GmbH
Sawmill St. 9
83395 Freilassing
Germany
Phone: +49 8654 / 588 38-0
Fax: +49 8654 / 588 38-98
E-mail: info@ace-technik.com
Hereinafter referred to as the "responsible party" or "we".
Data Protection Officer
Contact details of our external data protection officer:
E-mail: ace-technik.com@extdsb.org Phone: +49-89 / 51 30 569-7
Please note that links on our website may take you to other websites that are not operated by us but by third parties. Such links are either clearly marked by us or are recognisable by a change in the address line of your browser. We are not responsible for compliance with data protection regulations and secure handling of your personal data on these websites operated by third parties.
2. definitions
2.1 From the GDPR
This privacy policy uses the terms of the legal text of the GDPR. You can view the definitions (Art. 4 DSGVO), for example, at https://eur-lex.europa.eu/legal- content/DE/TXT/?uri=CELEX:32016R0679.
2.2 Cookies and similar technologies
Cookies are text files that are stored or read by a website on your end device. They contain combinations of letters and numbers in order, for example, to recognise the user and his or her settings when reconnecting to the website that set the cookie, to enable the user to remain logged in to a customer account or to statistically analyse specific usage behaviour.
The WebStorage technique makes it possible to store variables and values locally in the user's browser cache. The technology includes both the so-called "sessionStorage", which remains stored until the browser tab is closed, and the "localStorage", which is stored in the browser cache until the cache is cleared by the user. The localStorage technology makes it possible, among other things, to recognise the user and their settings when they call up our website.
2.3 Data categories
When we specify the categories of data processed, we mean in particular the following data: master data (e.g. names, addresses, dates of birth), contact data (e.g. e-mail addresses, telephone numbers, messenger services), content data (e.g. text entries, photographs, videos, contents of documents/files), contract data (e.g. subject matter of contract, terms, customer category), payment data (e.g. bank details, payment history, use of other payment service providers), usage data (e.g. history on our website, use of certain contents, access times, contact or order history).e.g. bank details, payment history, use of other payment service providers), usage data (e.g. history on our website, use of certain content, access times, contact or order history), connection data (e.g. device information, IP addresses, URL referrers), location data (e.g. GPS data, IP geolocation, access points).
3. information on data processing
We process personal data only to the extent permitted by law. Personal data is only passed on in the cases described below. Personal data is protected by appropriate technical and organisational measures (e.g. pseudonymisation, encryption).
Unless we are required by law to store or disclose personal data to third parties (in particular law enforcement agencies), the decision as to which personal data we process and for how long, and the extent to which we disclose it, depends on which functions of the website you use in each individual case.
4. storage period
The personal data will be deleted as soon as the purpose of the processing no longer applies or a prescribed storage period expires, unless there is a necessity for the continued storage of the personal data for the conclusion or fulfilment of a contract. Insofar as we have to inform you about the storage period of cookies and similar technologies, you will find the details at the end of this data protection notice (see III.).
Personal data that we process as part of an application (see below) will be stored for a period of six months after completion of the application process.
5. automated decisions in individual cases including profiling
Automated decisions in individual cases, including profiling, do not take place.
6. rights of data subjects
As a data subject, you have the right to information under Article 15 of the GDPR, the right to rectification under Article 16 of the GDPR, the right to erasure under Article 17 of the GDPR, the right to restriction of processing under Article 18 of the GDPR and the right to data portability under Article 20 of the GDPR. The restrictions from §§ 34, 35 BDSG apply to the right to information and the right to erasure.
You have the right to complain to a data protection supervisory authority (Art. 77 DSGVO in conjunction with § 19 BDSG). The data protection supervisory authority responsible for us is:
Bavarian State Office for Data Protection Supervision Promenade 18
91522 Ansbach Germany
You are free to complain to another data protection supervisory authority. You can find a list of supervisory authorities at: https://www.bfdi.bund.de/ (under Infothek/Addresses and Links).
7. obligation to provide
Unless otherwise explained below in the information on the legal basis, you are not obliged to provide personal data. However, in the cases of Art. 6 para. 1 letter b DSGVO, the personal data is necessary for the performance of a contract or for the conclusion of a contract. If you do not provide the personal data concerned, the performance or conclusion of the contract is not possible. If you do not provide the data in the cases of Art. 6 para. 1 lit. a, f DSGVO, it is not possible to use the affected parts of our website.
8 Right of objection and revocation of consent
You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Article 6(1)(f) DSGVO. If personal data are processed for the purposes of direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purposes of such marketing.
In accordance with Art. 7 (3) sentence 1 DSGVO, you have the right to revoke any consent you have given to us at any time. The lawfulness of the processing carried out on the basis of the consent until the revocation is not affected by this. Thus, the revocation always applies only to the processing planned after the revocation. The revocation is possible informally by post or e-mail. If you object, we will no longer process your personal data unless another (legal) basis permits this. However, if a revocation is made and there is no other permissible basis, the personal data must be deleted immediately at your request in accordance with Art. 17(1)(b) DSGVO.
Objection and revocation can be made form-free and should be addressed to:
ACE Handels- und Entwicklungs GmbH
Sawmill St. 9
83395 Freilassing
Germany
E-mail : info@ace-technik.com
II. Data processing in connection with the use of our website
The use of the website and its functions regularly requires the processing of personal data.
Provision of the website
Purpose of the processing: Functionality and optimisation of the website, ensuring the security of our information technology systems in the case of purely informational use (without the use of additional functions such as contact forms or social media plugins) of our website; integration and display of functions and content (e.g. graphics) that we do not provide ourselves.
Legal basis: Art. 6 para. 1 lit. f DSGVO Data categories: Usage data, connection data
Recipients of the data: Data is only passed on to third parties if this is necessary for the operation of the website.
of our website is required. For this purpose, the personal data is transferred to the following recipients: IT service provider
Intended third country transfer: None
Storage of data on your terminal device based on consent: No
Applications
Purpose of the processing: Processing of your application and implementation of the
Application procedure; consideration of your application in future application procedures if express consent has been given for this.
Legal basis: Art. 88 para. 1 DSGVO in conjunction with. § Section 26 para. 1 p. 1 BDSG; for storage for future application procedures Art. 6 para. 1 letter a DSGVO in conjunction with Art. 7 DSGVO,
§ 26 para. 2 BDSG
Data categories: Master data, contact data, content data, contract data, if applicable connection data, if applicable usage data and, if applicable, special categories of personal data within the meaning of Art. 9 (1) DSGVO (depending on the specific advertisement; only the data relating to your application that you provide to us and that we are permitted to process in the context of applications are stored).
Recipients of the data: None Intended third country transfer: None
Storage of data on your terminal device based on consent: No
Contact us (contact form & e-mail contact)
Purpose of processing: processing your contact request.
Legal basis: Art. 6 para. 1 letter f DSGVO; Art. 6 para. 1 letter b DSGVO (if the request leads to a (later) conclusion of a contract or concerns an existing contract) Data categories: Master data, contact data, content data, if applicable usage data, connection data, if applicable contract data (depending on the type of request).
Recipients of the data: None Intended third country transfer: None
Storage of data on your terminal device based on consent: No
Online shop
Purpose of processing: Operation of the online shop; processing your orders and enquiries; ensuring the security of our online shop.
Legal basis: Art. 6 para. 1 lit. b, f DSGVO
Data categories: Master data, contact data, contract data, content data, payment data, usage data and connection data. If you already have a customer account with us, it is sufficient to log in to your customer account. We will then use the personal data from your customer account.
Recipients of the data: Shipping company; payment service provider Intended third country transfer: None
Storage of data on your terminal device based on consent: No
Customer account
Purpose of the processing: use of a customer account; fulfilment of the contract or pre-contractual measures; ensuring the security of our information technology systems.
Legal basis: Art. 6 para. 1 lit. b, f DSGVO
Data categories: Master data, contact data, if applicable content data, connection data, if applicable payment data, if applicable contract data and usage data
Recipients of the data: None Intended third country transfer: None
Storage of data on your terminal device based on consent: No
eKomi Holding GmbH
Purpose of processing: evaluating the products we offer; personalising our website; ensuring the security of our information technology systems.
Legal basis: Art. 6 para. 1 letter f DSGVO
Data categories: Master data (optional), contact data, content data (content of your ratings), connection data
Recipient of the data: eKomi Holding GmbH Zimmerstraße 11
10969 Berlin, Germany
Intended third country transfer: None
Storage of data on your terminal device based on consent: No
Chatify
Purpose of the processing: Handling of your contact requests via our live chat Optimisation and demand-oriented design of our website.
Legal basis: Art. 6 para. 1 letter f DSGVO
Data categories: If applicable, master data, if applicable, contact data, content data, if applicable, usage data, connection data, if applicable, contract data (depending on the type of request).
Recipient of the data: ESA (E-Commerce Services Agency) GmbH, Siebenstädterstrasse 15/10, 5020 Salzburg, Austria / Austria Intended third country transfer: None
Storage of data on your terminal device based on consent: No
Google Fonts
Purpose of processing: To personalise our website by using fonts loaded from Google servers.
Legal basis: Art. 6 para. 1 lit. f DSGVO Data categories: Connection data
Recipient of the data: Google Ireland Ltd, Gordon House, Barrow Street Dublin 4 Ireland Intended third country transfer: In individual cases, USA (in accordance with standard data protection clauses of the EU Commission, Art. 46 para. 2 lit. c DSGVO)
Storage of data on your terminal device based on consent: No
Google Firebase
Purpose of processing: To personalise our website through databases loaded from Google servers.
Legal basis: Art. 6 para. 1 lit. f DSGVO Data categories: Connection data
Recipient of the data: Google Ireland Ltd, Gordon House, Barrow Street Dublin 4 Ireland Intended third country transfer: In individual cases, USA (in accordance with standard data protection clauses of the EU Commission, Art. 46 para. 2 lit. c DSGVO)
Storage of data on your terminal device based on consent: No
YouTube
Purpose of the processing: Integration of videos via the YouTube video plugin to personalise our website.
Legal basis: Art. 6 para. 1 lit. f DSGVO Data categories: Connection data
Recipients of the data: Google Ireland Ltd, Gordon House, Barrow Street Dublin 4 Ireland Intended third country transfer: In individual cases, USA (in accordance with standard data protection clauses of the EU Commission, Art. 46 para. 2 lit. c DSGVO)
Storage of data on your terminal device based on consent: No
Amazon Pay
Purpose of processing: Processing of payments via the Amazon Pay payment service; direct ordering via your Amazon account.
Legal basis: Art. 6 para. 1 letter b DSGVO
Data categories: Master data, contact data, contract data if applicable, payment data, usage data, connection data
Recipient of the data: Amazon Payments Europe S.C.A. 38 avenue J.F. Kennedy, L-1855 Luxembourg
Intended third country transfer: None
Storage of data on your terminal device based on consent: No
PayPal
Purpose of processing: Processing of payments via the PayPal payment service; direct ordering via your PayPal account (PayPal Express Checkout).
Legal basis: Art. 6 para. 1 letter b DSGVO.
Data categories: Master data, contact data, contract data if applicable, payment data, usage data, connection data
Recipient of the data: PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg ("PayPal")
Intended third country transfer: None
Storage of data on your terminal device based on consent: No
III. Information on the storage period of consent-based cookies and similar technologies
We only use absolutely necessary coookies to operate our website.
IV. Notes on external pages of ACE Handels- und Entwicklungs GmbH
Purpose of the processing: We have set up a page about our company ("Facebook page") on the "Facebook" platform. When you access this page, Facebook processes personal data about you. We receive statistics about the use of this page derived from this data.
Legal basis: Art. 6 para. 1 letter f DSGVO.
Data categories: Master data, contact data, content data, usage data, connection data Recipient of the data: Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Facebook") (as joint controller, Art. 26 DSGVO - the essence of the agreement can be found at https://www.facebook.com/legal/terms/page_controller_addendum)
Intended third country transfer: In individual cases, USA (in accordance with standard data protection clauses of the EU Commission, Art. 46 para. 2 lit. c DSGVO)
Storage of data on your terminal device based on consent: No Data subject rights: Facebook is responsible for implementing your data subject rights. Facebook will inform you about your data subject rights at https://www.facebook.com/legal/terms/information_about_page_insights_data. You can also assert your rights against us, we will then forward your request to Facebook immediately.
Purpose of the processing: We have set up a page about our company ("Instagram page") on the "Instagram" platform of Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Facebook"). When you access this page, Facebook processes personal data about you.
Legal basis: Art. 6 para. 1 letter f DSGVO
Data categories: Master data, contact data, content data, usage data, connection data Recipient of the data: Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Facebook") (as joint controller, Art. 26 DSGVO - the essence of the agreement can be found at https://www.facebook.com/legal/terms/page_controller_addendum)
Intended third country transfer: In individual cases, USA (in accordance with standard data protection clauses of the EU Commission, Art. 46 para. 2 lit. c DSGVO)
Storage of data on your terminal device based on consent: No Data subject rights: Facebook is responsible for implementing your data subject rights. Facebook will inform you about your data subject rights at https://www.facebook.com/legal/terms/information_about_page_insights_data. You can also assert your rights against us, we will then forward your request to Facebook immediately.
YouTube Channel
Purpose of the processing: We have set up a video channel on the "YouTube" platform of Google Ireland Ltd, Gordon House, Barrow Street Dublin 4 Ireland ("Google"). When you access this page, Google processes personal data about you. We receive statistics about the use of this page, which are derived from these data
Legal basis: Art. 6 para. 1 lit. f DSGVO.
Data categories: Master data, contact data, content data, usage data, connection data Recipient of the data: Google Ireland Ltd, Gordon House, Barrow Street Dublin 4 Ireland Intended third country transfer: In individual cases, USA (in accordance with standard data protection clauses of the EU Commission, Art. 46 para. 2 lit. c DSGVO)
Storage of data on your terminal device based on consent: No