Privacy Policy

The protection of your personal data is important to us. We therefore process your data exclusively in accordance with statutory regulations. The ways we handle your data are described in this Privacy Policy. Principles such as data minimisation, transparency and security are therefore our highest priority.

1. Why do we store your personal data? (Processing purposes and legal basis)

We collect personal data
• when you request a quotation and to prepare an offer
• when you place an order for the performance of a contract
• when you e-mail us
• when you call us
• when you visit our website
• from whistleblowers if the information is not reported anonymously

We need you to provide this data for the respective purpose, e.g. preparing an offer or concluding a contract with you. If you do not provide the data, we will not be able to process your request.
The personal data of whistleblowers will be protected and not passed on. (see also “9. Exception to the information obligation under Article 14 of GDPR in the case of whistleblowing reports”).

2. Which data do we collect from whistleblowing reports

In the case of an anonymous report, none of the whistleblower’s personal data will be collected.
If the report is not anonymous, we collect the following data from the whistleblower:
Surname, first name, contact details (e.g. address, e-mail address, phone number)
The data that the whistleblower sends to us is collected.

With regard to the reports, the following data is generally collected:
• Date of report
• Input channel
• Type of notification (this description may contain personal data, e.g. if the notification relates to an individual)
• Result
• Date of conclusion

3. On what legal basis do we collect data from you?

Data collection is based on Article 6 of the General Data Protection Regulation (GDPR).
• Consent
• Performance of a contract or to carry out pre-contractual steps
• Legal obligation
• Protection of vital interests
• Public interest or exercise of public authority
• Legitimate interest

4. Do we share your personal data?

Your personal data will not be passed on to third parties unless this is absolutely necessary for order processing (e.g. shipping of goods via transport companies).
In order to comply with legal requirements, it may be necessary to pass on your data to authorities.
We do not transfer personal data to third countries.

5. How do we protect your personal data?

We protect your personal data by implementing various technical and organisational measures.

6. When do we delete your personal data?

Data that is subject to statutory retention periods will be retained and routinely deleted after the statutory retention period has expired if it is no longer required for the performance of the contract.

7. Your rights regarding your personal data

You have the right to be informed as to which of your personal data we process (right to information), to have incorrect data corrected (right to rectification) or to have your data deleted, provided that it does not have to be processed for the performance of the contract or on other legal grounds (right to erasure). In addition, you have the right to restrict the processing of your personal data (restriction of processing), object to the processing of your data and, if necessary, have your data transferred from one IT environment to another (data portability).
You can revoke any written consent you have given at any time in writing (right of withdrawal).
Exception for whistleblowers:
The right to information pursuant to Art. 15 of GDPR pursuant to Section 29 (1) sentence 2 of German Federal Data Protection Act (Bundesdatenschutzgesetz, BDSG) does not exist if the disclosure would reveal information which, according to a legal provision or by its nature, must be kept secret, in particular due to the overriding legitimate interests of a third party.
Please contact us in any of the above cases.

8. Contact

If you have any questions about our Privacy Policy or the processing of your personal data, you can contact our data protection officer directly. He is at your disposal should you have any questions about information, or wish to make a suggestion or complaint.

Hubert Kreis
Fraunhoferstraße 22
D – 82152 Planegg
info@ed-k.de
+49 89 85902819

The controller within the meaning of the General Data Protection Regulation, other data protection laws applicable in the Member States of the European Union and other legal regulations of a data protection nature is:

Hubert Kreis
Fraunhoferstraße 22
D – 82152 Planegg
info@ed-k.de
+49 89 85902819

9. Exception to the information obligation under Article 14 of GDPR in the case of whistleblowing reports

If reports are made about persons, they are recorded in accordance with the Whistleblower Protection Act (Hinweisgeberschutzgesetz, HinSchG).
If the obligation to provide information pursuant to Art. 14 of GDPR is likely to make achieving the objectives of this processing impossible or seriously compromise it (Art. 14 (5) (b) of GDPR) and the information would seriously impair the clarification of the facts and the investigations to be carried out pursuant to Section 18 Nos. 1 and 4 of HinSchG, e.g. due to the threat of cover-up measures by the accused person or persons, in this case no information will be provided to the reported/named person.

10. Website

Our Website can, as a rule, be used without personal data being supplied. Any personal data (such as name, address or e-mail addresses) collected on our pages is done, as far as possible, on a voluntary basis. This data will not be transferred to third parties without your express consent.
We draw your attention to the fact that data transmission over the Internet (e.g. in communication by e-mail) may have security vulnerabilities. Absolute protection of the data against access by third parties is not possible.

a) Cookies

So-called cookies are used on some of the web pages. Cookies do not damage your computer and do not contain any viruses. Cookies are used to make our service more user-friendly, effective and secure. Cookies are small text files that are stored on your computer and saved by your browser.
Most of the cookies we use are “session cookies”. They are automatically deleted at the end of your visit. Other cookies remain stored on your device until you delete them. These cookies enable us to recognise your browser the next time you visit our website.
You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general, and activate the automatic deletion of cookies when you close the browser. Deactivating cookies may limit the functionality of this website.

b) Server log files

The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These include:
• Browser type and browser version
• Operating system used
• Referrer URL
• Hostname of the requesting computer
• Date and time of server request
• Language setting in browser
• IP address

This data cannot be assigned to specific individuals. This data is not combined with other data sources. We reserve the right to subsequently review this data should we become aware of any definite indications of unlawful use.

c) Contact form

If you send us inquiries via the contact form, your data from the contact form, including the contact details you provided in it, will be stored by us for the purpose of processing the inquiry and in the event of further inquiries from you. We will not pass on this data without your consent.

11. Complaints

If you believe that the processing of your data violates data protection law or that your data protection rights have been violated in any other way, you can lodge a complaint with the supervisory authority.