PRIVACY POLICY

1. Collection of Personal Data

This Privacy Policy will inform you about the collection of personal data when using our website. Per-sonal data is any data that can be used to identify you, e.g. your name, address, email address or user behaviour.

a) The controller pursuant to Art. 4(7) of the EU General Data Protection Regulation (GDPR) is the KEUCO GmbH & Co. KG, Oesestr. 36, 58675 Hemer, Germany, info@keuco.de (see our imprint). You may contact our data protection officer at datenschutz@keuco.de or by mail with the addition "der Datenschutzbeauftragte ."

b) When contacting us by email or through our contact form, we will save the data you provide (your email address and, if applicable, your name and telephone number) to answer your inquiry. We will delete this data once its storage is no longer required or will restrict its processing in case of legal storage obligations.

c) If we commission service providers for certain functions of our offer or if we would like to use your data for marketing purposes, we will notify you about the respective processes and the storage duration criteria in detail and without delay.

2. Collection and Storage of Personal Data and Type and Purpose of Its Use

a) When opening our website, your device's browser will automatically transmit information to our website server. This information will be saved temporarily in a so-called log file. The following data will then be collected without any action on your part and saved until its automatic deletion: Your IP address; time and date of request; time zone difference to Greenwich Mean Time (GMT); re-quested contents (specific page); access status/HTTP status code; volume of data transferred; re-questing website; browser; operating system and its surface and you browser's language and ver-sion.

We will process this data for the following purposes: ensuring website connectivity; ensuring comfortable use of our website; system security and stability assessments and for other administrative purposes.

The legal basis for this data processing is Art. 6(1) Sentence 1 Letter f of the General Data Protection Regulation. Our legitimate interest results from the above-stated purposes. Under no circumstances will we use the collected data to identify you personally.

Furthermore, we use cookies and analysis services when our website is visited. For more infor-mation, please see Sections 4 and 6 of this Privacy Policy.

b) You may contact us through our contact form for questions of any kind. This will require a valid email address for us to know who submitted the inquiry and to allow us to respond. Additional information may be provided voluntarily.

Data for contacting purposes is processed on the basis of your consent under Art. 6(1) Sentence 1 Letter a of the General Data Protection Regulation.

The personal data we collect through our contact form will be deleted automatically after the processing of your inquiry is complete.

3. Data Transfers

Your personal data will not be transmitted to third parties for reasons other than the following. We will only provide your data to third parties if:

• You granted your express consent under Art. 6(1) Sentence 1 Letter a of the General Data Protec-tion Regulation,

• The transfer is required under Art. 6(1) Sentence 1 Letter f of the General Data Protection Regula-tion to assert, exercise or defend legal claims and if there is no reason to believe that you have an overriding interest in the non-disclosure of your data,

• Legal obligations for the transfer apply under Art. 6(1) Sentence 1 Letter c of the General Data Protection Regulation, and if

• Permitted by law and required under Art. 6(1) Sentence 1 Letter b of the General Data Protection Regulation for the performance of a contract with you.

4. Cookies

Our website uses cookies. Cookies are small text files created automatically by your browser and saved on your device (laptop, tablet, smartphone, etc.) when you visit our website. Cookies will not damage your device and do not contain viruses, Trojans or other malware.

Information on your specific device will be saved on the cookie. However, this does not mean that we will learn your identity.

Cookies are used to make use of our offer more comfortable. For this, we use so-called session cook-ies to recognise that you visited individual pages of our website. Session cookies will be deleted auto-matically when you leave our website.

In addition, to optimise user friendliness, we use other cookies that will be saved on your device for a set period. When you visit our website again to use our services, your entries and settings from your previous visit will be recognised automatically so they do not have to be re-entered.

We also use cookies for statistical assessments of our website and to optimise our offer for you (see Section 6). Such cookies enable us to automatically recognise that you visited us before during your next visit. These cookies will be deleted automatically after a set period.

The data processed by cookies is necessary for the stated purposes and for safeguarding our and third parties' legitimate interests under Art. 6(1) Sentence 1 Letter f of the General Data Protection Regulation.

Most browsers accept cookies automatically. However, you may configure your browser to disable cookies or to display notifications before installing new cookies. Please note that completely disabling cookies may prevent you from using every function of our website.

5. Analysis Tools

The tracking measures stated hereafter are performed on the basis of Art. 6(1) Sentence 1 Letter f of the General Data Protection Regulation. These tracking measures are used for need-based design and continuous optimisation of our website. We also use these tracking measures for statistical assess-ments of our website and to optimise our offer for you. These interests are regarded as legitimate in the sense of the above-stated regulation.

For the need-based design and continuous optimisation of our website, we also use Google Analytics, a web analysis service of Google Ireland Ltd. (https://www.google.com/about/) (Gordon House, Barrow Street, Dublin 4, Ireland; hereafter: "Google"). Google Analytics uses so-called "cookies," text files saved onto your computer, that allow your use of the website to be analysed. The information on your website use generated by the cookie is generally transmitted to a Google server in the USA where it is saved. If IP-anonymisation is activated on this website, your IP address will be shortened by Google within a Member state of the European Union or in another state party to the European Economic Area Agreement. Only in exceptions will your full IP address be transferred to a Google server in the US and shortened there. On behalf of the operators of this website, Google will use this information to assess your use of this website, to compile reports about website activity and to perform additional services related to use of the website and the Internet for the website operators.

a) The IP address transmitted by your browser through Google Analytics will not be merged with other Google data.

b) You can prevent cookie storage through your browser settings at any time. However, please note that you may not be able to use every function of this website. Furthermore, you can prevent the collection of cookie-generated data (including your IP address) on your use of the website and the processing of this data by Google by downloading and installing the browser plug-in provided under the following link: http://tools.google.com/dlpage/gaoptout?hl=en.

c) Our website uses Google Analytics with the extension "_anonymizeIp()" so that IP addresses will be processed further in shortened form to prevent personal inferences. Any personal references in the collected data will be excluded and the personal data will be deleted without delay.

d) We use Google Analytics to analyse and regularly improve use of our website. The statistics we obtain thereby allow us to improve and make our offer more interesting to you as a user. For the exceptions in which personal data is transferred to the US, Google subjects itself to the EU-US Pri-vacy Shield agreement: https://www.privacyshield.gov/EU-US-Framework. The legal basis for use of Google Analytics is Art. 6(1) Sentence 1 Letter f of the General Data Protection Regulation.

e) Third-party provider information: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland; fax: +353 (1) 436 1001. Terms of Service: http://www.google.com/analytics/terms/us.html, data protection overview: https://support.google.com/analytics/answer/6004245?hl=en, and Google's Privacy Policy: https://policies.google.com/privacy.

6. Social Media Plugins

We maintain publicly accessible profiles on social networks. Please see below for the specific social networks used by us.

Social networks are normally able to extensively analyze your user behavior if you visit their websites or websites that integrated social media contents (e.g., Like buttons or ad banners). Visiting our social media presences will launch a number of processing processes relevant to data protection. Specifically:

If you are logged in to your social media account and visit our social media presence, the provider of the social media portal may assign your visit to your user account. Your personal data may also be collected if you are not logged in or have no account on the respective social media portal. In such cases, your data may be collected through cookies saved on your device or by recording your IP address.

Data collected this way enables the social media portal providers to create user profiles that save your preferences and interests. This allows interest-based advertisements to be displayed to you on and outside of the respective social media presence. If you have an account on the respective social network, interest-based advertisements may be displayed on every device on which you are or were logged in to your social media account.

Please also note that we do not learn of every processing process on social media portals. Depending on the provider, other processing processes may be performed by the social media portal provider. For more details, please see the usage conditions and privacy policies of the respective social media portals.

Legal Basis

Our social media presence intends to provide an extensive Internet presence. This represents a legitimate interest in the sense of Art. 6(1) Letter f of the General Data Protection Regulation. The analysis processes initiated by the social networks may be based on other legal bases which must be stated by the social network providers (e.g., consent in the sense of Art. 6(1) Letter a of the General Data Protection Regulation).

Controller and Exercise of Rights

When visiting our social media presence, we will be jointly responsible with the social media platform provider for any data processing processes launched during your visit. You may exercise your rights (access, rectification, erasure, restriction of processing, data portability and to lodge a complaint) both towards us and towards the social media portal provider.

Please note that, despite joint responsibility with the social media portal provider, we cannot fully influence the data processing processes on the social media portals. Our possibilities are dependent on the corporate policy of the respective provider.

Storage Duration

The data collected by us directly through our social media presence will be erased by our systems when the purpose for the storage of the data no longer applies or you request the erasure of the data, withdraw your consent to the storage or if the purpose for the storage of the data no longer applies. Saved cookies will remain on your device until you erase them. Applicable legal regulations—especially storage periods—will remain unaffected.

We have no influence on the storage duration of your data saved by social network providers for own purposes. For more details, please contact the social network providers directly (e.g., through their privacy policies, see below).

Instagram

We have an Instagram profile. The provider is Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA. For more details on the treatment of your personal data, please see Instagram’s Data Policy: https://help.instagram.com/519522125107875.

Pinterest

We have a Pinterest profile. The operator is Pinterest Inc., 808 Brannan Street San Francisco, CA 94103-490, USA (“Pinterest”). For more details on the treatment of your personal data, please see Pinterest’s privacy policy: https://policy.pinterest.com/privacy-policy.

7. YouTube [with extended data protection]

Our website uses plugins of the website YouTube. The provider of these pages is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

We use YouTube with extended data protection mode. According to YouTube, this mode prevents YouTube from saving information on visitors to this website before they view a video. However, extended data protection mode does not necessarily exclude the transfer of data to YouTube‘s partners. Irrespective of whether you watch a video, YouTube will establish a connection to Google’s DoubleClick network.

Activating a YouTube video on our website will establish a connection to YouTube’s servers. The YouTube server will be notified about which of our pages you visited. If you are logged in to your YouTube account, you will enable YouTube to assign your surf behavior directly to your personal profile. You may prevent this by logging out of your YouTube account.

Furthermore, after you activate a video, YouTube may save several cookies on your device. These cookies allow YouTube to obtain information about your visit to our website. This information may be used, among other things, to compile video statistics, improve user-friendliness and prevent attempted fraud. These cookies will remain saved on your device until you erase them.

Activating YouTube videos may launch other data processing processes which we cannot influence.

We use YouTube in the interest of providing appealing online offers. This represents a legitimate interest in the sense of Art. 6(1) Letter f of the General Data Protection Regulation.

For more information about data protection by YouTube, please see Google’s Privacy Policy at: https://policies.google.com/privacy.

8. Inclusion of Google Maps

a) This website features Google Maps. This allows us to display interactive maps and enables you to comfortably use the map function directly on our website.

b) By visiting our website, Google will be notified that you accessed the respective sub-page of our website. The data specified in Section 2 of this Privacy Policy will also be transmitted. This will done irrespective of whether Google provides user accounts to which you may be logged in. If you are logged in to Google, your data will be assigned directly to your account. If you do not want your data to be assigned to your Google profile, please log out before activating the button. Google will save your data as usage profiles which it uses for advertising, market research and/or need-based design purposes for its website. Such assessments are performed especially (even for users not logged in) to offer need-based advertisements and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these usage profiles. However, such objections must be submitted to Google.

c) For more information about the purpose and scope of data collected and processed by the plugin provider, please see the Google's Privacy Policy which will also include additional information about your according rights and settings options for the protection of your privacy: https://policies.google.com/privacy. Google also processes your personal data in the US and sub-ject itself to the EU-US Privacy Shield agreement, https://www.privacyshield.gov/EU-US-Framework.

9. Data Subject Rights

a) You have the following rights against us regarding your personal data:

• Right to information,

• Right to rectification or erasure,

• Right to processing restriction,

• Right to object to processing,

• Right to data portability.

b) You also have the right to submit complaints about our processing of your personal data to competent data protection authorities.

10. Right to Object

If your personal data is processed on the basis of our legitimate interests under Art. 6(1) Sentence 1 Letter f of the General Data Protection Regulation, you have the right to, under Art. 21 of the General Data Protection Regulation, submit an objection to this processing of your personal data for reasons relating to your particular situation or where personal data is processed for direct marketing purposes. Where personal data is processed for direct marketing purposes, you have a general right to object which we will implement without disclosing your particular situation.

If you would like to exercise your revocation or objection rights, please send us an email at info@keuco.de

11. Data Security

We use the common SSL procedure (Secure Sockets Layer) with the highest encryption level support-ed by your browser when visiting our website. This is usually a 256-bit encryption. If your browser does not support 256-bit encryption, we will use 128-bit v3 technology. Whether a page of our web-site is transmitted in encrypted is recognised by the key or lock symbol on your browser's lower status bar.

Apart from that, we implement suitable technical and organisational measures to protect your data against random or intentional manipulation, partial or total loss, destruction or unauthorised third-party access. Our security measures are improved regularly in accordance with technological devel-opments.

12. Privacy Policy Validity and Changes

This Privacy Policy is currently valid as of May 2019.

Due to the further development of our website and its offers above as well as changes in legal or official requirements, it may become necessary to amend this Privacy Policy. The respectively current Privacy Policy may be retrieved and printed out at any time at https://edition-lignatur.de/en_GB/privacy-protection .