Protection des données

Protection des données

General introduction:

We take the protection of your personal data very seriously and want you to be safe when visiting our website. Our data protection practices comply in particular with the provisions of the EU General Data Protection Regulation (GDPR), the Federal Data Protection Act (BDSG) and the Act on the Regulation of Data Protection and the Protection of Privacy in Telecommunications and Telemedia (TDDDG). At this point, we would like to inform you about the type, scope and purpose of the processing of your personal data. We would like to point out in advance that this data protection declaration only refers to our websites and does not apply to third-party websites to which we refer in the form of links. 

Subject of protection:

The object of protection is personal data. This is all information that relates to an identified or identifiable natural person (hereinafter "data subject"). This includes, in particular, information that allows conclusions to be drawn about your identity (e.g. details such as name, postal address, email address and telephone number).

Technical requirements:

To enable you to establish a connection to our website, your browser transmits certain data to the web server of our website. This is a technical necessity so that the information you request from the website can be made available. To make this possible, your IP address, the date and time of your request and the type of operating system you are using are stored and used for a maximum of 7 days. We reserve the right to store this data for a limited period of time to safeguard our legitimate interests in order to initiate a derivation of personal data in the event of unauthorized access or an attempt to deliberately harm us in this way (Art. 6 para. 1 f GDPR). The data will only be stored or forwarded by us for these and no other purposes without us informing you in advance and asking for your permission. 

Cookies:

Cookies are small text files that are stored on your computer or mobile device via your browser, e.g. to recognize whether you visit websites repeatedly from the same device or browser. In general, we use cookies to analyze interest in our website and to improve the user-friendliness of our website. In principle, however, you can also visit our website without cookies. 

As a rule, cookies can be deactivated or removed with the help of tools that are available in most commercial browsers. The settings must be defined separately for each browser you use and set individually. The various browsers offer different functions and options for this purpose.

In order to be able to use our website fully and comfortably, you should accept those cookies that enable the use of certain functions or make the use more comfortable. You can see the purpose for which the cookies we use are used and for how long they are stored in the following overview:

Cookie list:

You can consent to the use of cookies that are not necessary for us as the provider to make our website available to you via our Cookie Consent Manager (pursuant to Section 25 (1) TDDDG) and revoke your consent at any time with effect for the future.

Users of our contact form:

There are contact forms on our website that can be used to contact us electronically. To ensure secure transmission of your data, we use a state-of-the-art encrypted connection with an SSL certificate during transmission. By clicking the "Send request" button, you consent to the transmission of the data entered in the input mask to us. We store your name and e-mail address and any other information you provide so that we can contact you and respond to your request in the best possible way. On the one hand, this enables us to offer you the service you expect from us and, on the other hand, it gives us the opportunity to continuously improve (Art. 6 para. 1 f GDPR). You can object to the processing of your data at any time. All information on the right to object in accordance with Art. 21 GDPR can be found at the end of this privacy policy.

Google Maps:

Our website uses the Google Maps map service via an API (application programming interface). The provider of the map service is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA - represented in the EU by Google Ireland Limited Gordon House, Barrow Street, Dublin 4 (hereinafter "Google"). As soon as the plugin is loaded via the API, Google processes various data (including your IP address) using cookies and similar technologies. It cannot be ruled out that this information will also be transferred to a server in the USA and stored there. In order to ensure an adequate level of data protection in this case, Google is certified in accordance with the EU-US Data Privacy Framework (https://www.dataprivacyframework.gov/list). We as the website operator have no influence on this data transfer. The processing of your information only begins once you have consented to the data processing on our Cookie Consent Manager or have activated the map by clicking on it. By doing so, you give your consent to the processing of your data in accordance with Art. 6 para. 1 a GDPR. You can revoke your consent at any time via our Cookie Consent Manager with effect for the future. If you are signed in to your Google Account, Google may add the processed information to your account depending on your account settings. You can find all information about the processing of your data by Google at: https://policies.google.com/privacy?hl=en

Google reCaptcha:

Our company uses the reCAPTCHA service from Google Inc (Google) to protect your orders via the Internet form. The query serves to differentiate whether the input is made by a human or abusively by automated, machine processing. The query includes sending the IP address and any other data required by Google for the reCAPTCHA service to Google. For this purpose, your input is transmitted to Google and used there.

By using Google reCAPTCHA, you consent to the transmission of your data to Google. However, if IP anonymization is activated on this website, your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there.

On behalf of the operator of this website, Google will use this information to evaluate your use of this service. The IP address transmitted by your browser as part of reCAPTCHA will not be merged with other Google data. The deviating data protection provisions of Google apply to this data.

Further information on Google's privacy policy can be found at https://policies.google.com/privacy?hl=en.

You Tube:

We use YouTube, a service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland, to embed videos. The embedded videos only work if you have previously consented to the processing of your data by YouTube on our Cookie Consent Manager, in accordance with Art. 6 para. 1 a GDPR.

As soon as the YouTube video plugin is loaded on our website, Google processes various data (including your IP address) using cookies and similar technologies. It cannot be ruled out that this information will also be transferred to a server in the USA and stored there. In order to ensure an adequate level of data protection in this case, Google is certified in accordance with the EU-US Data Privacy Framework (https://www.dataprivacyframework.gov/list). As the website operator, we have no influence on this data transfer.

You can revoke your consent at any time with effect for the future via our Cookie Consent Manager. If you are signed in to your Google Account, Google may add the processed information to your account depending on your account settings. You can find all information on the processing of your data by Google at: https://policies.google.com/privacy?hl=en

Mobile Funnel:

We use Mobile Funnel (hereinafter: Funnel), operated by Perspective Software GmbH (hereinafter: Perspective), a company based in Germany, which offers software for the creation and operation of Mobile Funnel (https://smex-ctp.trendmicro.com:443/wis/clicktime/v1/query?url=https%3a%2f%2fperspective.co%2fimpressum&umid=45ce8a19-e874-4f5b-81a1-84257fa13510&auth=6dda7ee16f8f1c732e60be068eff4e2c22bf710b-0af118fb73dfe3f7a1900fd20b0bd154c6c2de1c). The data entered when using the mobile funnel is transmitted via SSL encryption and stored in a database. The funnel is used, for example, to design a job advertisement or a quiz, in which a contact form can also be stored. The funnel is then linked to the CES social media channels, for example. CES is solely responsible for the design of the funnel and thus also for the personal data entered here within the meaning of Art. 24 GDPR. Perspective, on the other hand, is only the operator of the software and, in this context, a processor in accordance with Art. 28 GDPR. The basis for the processing by Perspective is an order processing contract between CES and Perspective. In addition, Perspective Software GmbH processes further data, some of which may also be personal data, in order to provide its services, in particular for the operation of the Mobile Funnel. You can find all information on this in Perspective's privacy policy at https://perspective.co/datenschutzerklaerung/ 

Tracking tools: 

Use of Matomo

Our website uses Matomo, an open source web analysis service. Matomo uses your device fingerprint to analyze your usage behavior on our website. Information is stored in the device fingerprint, which Matomo recognizes as a unique "fingerprint" the next time you visit our website. Your data is immediately anonymized during this process and randomly changed every 24 hours so that you as a user remain anonymous to us. The information used for the purpose of website optimization is stored on our server. We carry out this type of reach measurement and analysis as part of our legitimate interest in accordance with Art. 6 para. 1 f GDPR. The server on which the data is stored is hosted by a service provider. The legal basis for forwarding the data for this purpose is a data processing agreement in accordance with Art. 28 GDPR. 

The following information is stored in the device fingerprint

• Information on locations (continent, country, city, browser language) 
• Device (type, model, screen resolution) 
• Software (operating system, browser, browser plug-ins) 
• (anonymized) IP address 
• Server request times 
• Links from other websites (referrers)

If you do not agree to the storage and analysis of this data from your visit, you can object to the storage and use by clicking on the mouse. In this case, a so-called opt-out cookie is stored in your browser, which means that Matomo does not collect any session data. Please note: If you delete your cookies, the opt-out cookie will also be deleted and may have to be reactivated by you. You can deactivate data collection by Matomo at the end of this privacy policy. If your browser supports "do-not-track" technology and you have activated it, your visit will be automatically ignored.

Use of LinkedIn Analytics / Ads

We use LinkedIn Analytics / Ads on our website. These are services provided by LinkedIn Ireland Unlimited Company, Gardner House 2, Wilton PI, Dublin 2, Ireland (hereinafter "LinkedIn").
We use the services to track conversions, retarget our website visitors and gain additional information about the people who view our advertisements. Among other things, this helps us to better target advertising outside our website and thus improve the relevance of our ads.
The referrer URL, IP address, device and browser properties as well as the timestamp are recorded and processed by LinkedIn as part of the analysis. The IP addresses are shortened or hashed and direct identifiers of LinkedIn members are removed within seven days in order to pseudonymize the data. The remaining pseudonymized data is deleted within 90 days. LinkedIn itself does not share any personal data with us, but merely evaluates your data and sends us statistical reports and messages (in which you can no longer be identified by us). 

It cannot be ruled out that this information will also be transferred to a server in the USA and stored there. To ensure an adequate level of data protection in this case, LinkedIn is certified in accordance with the EU-US Data Privacy Framework (https://www.dataprivacyframework.gov/list). As the website operator, we have no influence on this data transfer.

The personal data of our website visitors is processed on the basis of Art. 6 para. 1 a GDPR and within the scope of your voluntarily given consent. You can revoke your consent at any time free of charge via our Cookie Consent Manager. 
LinkedIn members can also control the use of their personal data for advertising purposes in their account settings at https://www.linkedin.com/psettings/advertising/actions-that-showed-interest. 
Further information on the processing of personal data by LinkedIn can be found in LinkedIn's data protection information at https://de.linkedin.com/legal/privacy-policy. 

Social media plugins:

Our website does not use any social media plugins. However, we do use links to social media platforms on which we are represented. You can use the links to go directly to our presence on Facebook, Twitter or Google+, for example. The respective provider is responsible for data protection on these social media platforms.

Further general information:

Changes to this privacy policy

We review the privacy policy at regular intervals for conformity with statutory provisions, case law, the statements of the supervisory authorities and for alignment with emerging trends and the development of technical standards. In this respect, we reserve the right to make changes to the privacy policy in order to adapt it to new legal provisions on data protection and other changes in the factual or legal situation. Therefore, please always inform yourself about the data protection declaration applicable at that time when you start using our website.

Who is responsible for data processing? (Art. 13 para. 1 a, b GDPR0)

C.Ed. Schulte GmbH Zylinderschlossfabrik is responsible for data processing on our website. You can find the contact details in the legal notice: https://www.ces.eu/de_us/impressum.html

You can reach our data protection officer at the following address

C.Ed. Schulte GmbH Zylinderschlossfabrik 
To the Data Protection Officer 
Friedrichstr. 243 
D-42551 Velbert 
Postfach 10 11 80, D-42547 
E-Mail: datenschutz@ces.eu 
Phone: +49 (0) 2051 204-0

Who receives your personal data? (Art. 13 para. 1 e, f GDPR)

We treat your personal data confidentially and do not pass it on to third parties unless you have given your consent or the provision is based on a legal or contractual obligation. In individual cases, we commission processors to process your personal data.  This is done in accordance with Art. 28 GDPR and on the basis of a data processing agreement.

How long will the data be stored? (Art. 13 para. 2 a GDPR)

The legislator has issued various retention obligations and periods.

In principle, we only store your data for as long as required by law. 

After these periods have expired, the corresponding data is routinely deleted if it is no longer required to fulfill the contract. We store data that we process on the basis of your consent until you withdraw your consent or for as long as the data is required. We store data that we process on the basis of a legitimate interest for as long as the legitimate interest exists.

Commercial or financial data from a completed financial year will be deleted after a further ten years in accordance with legal regulations, unless longer retention periods are prescribed or required for legitimate reasons. If data is not subject to specific retention periods, it will be deleted when the purposes for which it was processed cease to apply.

For what purposes and on what legal basis do we process your personal data? (Art. 13 para. 1 c, d GDPR)

We have already explained the purposes and legal bases of data processing. In addition, the following generally applies: If necessary, we process your data to protect our legitimate interests or those of third parties in accordance with Art. 6 para. 1f GDPR, for example for the assertion of legal claims and defense in legal disputes or to ensure IT operations and security. 

If we have a legitimate interest or have received written consent from you to process your personal data, we process your data for the purposes of external communication and marketing on the basis of Art. 6 para. 1 a or f GDPR. You have the right to withdraw your consent at any time.

To fulfill legal requirements, we may or must, if necessary, process your data and pass it on to third parties (in accordance with Art. 6 para. 1c). 

We do not use your data in any way for automated decision-making or profiling.

What rights and obligations do you have? (Art. 13 para. 2 b, c, d, e GDPR)

Every data subject has the following rights:

In accordance with Art. 15 GDPR, you have the right to information. This means that you can request confirmation from us as to whether personal data concerning you is being processed by us.

In accordance with Art. 16 GDPR, you have the right to rectification. This means that you can demand that we correct incorrect personal data concerning you.

In accordance with Art. 17 GDPR, you have the right to erasure ("right to be forgotten"). This means that you can demand that we delete personal data concerning you immediately - unless we are unable to delete your data because, for example, we have to comply with statutory retention obligations.

According to Art. 18 GDPR, you have the right to restriction of processing. This means that we are practically no longer allowed to process your personal data - apart from storing it.

In accordance with Art. 20 GDPR, you have the right to data portability. This means that you have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and to transmit those data to another controller.

In accordance with Art. 7 para. 3 GDPR, you have the right to withdraw your consent at any time for the future.

Pursuant to Art. 77 GDPR, you have the right to lodge a complaint with the competent supervisory authority.

In addition, you have the right to object, which we explain in more detail at the end of this data protection information.

If you wish to exercise your rights, please contact the data protection officer (see above for contact details).

Competent supervisory authority

State Commissioner for Data Protection and Freedom of Information 
North Rhine-Westphalia 
House address: Kavalleriestr. 2 - 4, 40312 Düsseldorf 
Postal address: Postfach 20 04 44, 40102 Düsseldorf 
Phone: +49 (0) 211/38424-0 
E-mail address: poststelle@ldi.nrw.de