Privacy policy
Data privacy on https://key4c.com
and its Subdomains
(Status March 13, 2021)
Data protection regulations
You are interested in data protection on our website – and that is your right. We want you to feel informed and secure about data protection when you visit our website.
The following data protection information informs you about the nature and extent of the processing of your personal data by key!4c – namely: Frank Schöfisch and Dr. Uta B. Nachbaur (also referred to as “key!4c”, “we” or “us” in the context of this data protection declaration).
Personal data is information that can be directly or indirectly attributed to you or can be attributed to you. The legal basis for data protection is in particular the General Data Protection Regulation (GDPR).
Table of contents
- Overview
- Calling the key!4c website
- Processing of sales contracts
- Contact form/ e‑mail contact/ telephone calls/ comment function
- Data processing for advertising purposes
- Newsletter dispatch
- Online presence and website optimization
- Your rights as a data subject
- Person to contact
- Name and contact details of the data controller/data protection officer
1. Overview
The data processed on the website of key!4c can be roughly divided into two application areas:
When calling up the website of key!4c, various information is exchanged between your end device (PC, smartphone, tablet, etc.) and our server platform. This can also be personal data. The information obtained during access is used, among other things, to optimize our website or to prevent unlawful access.
In the context of contract processing (e.g. orders in the store, newsletter registration), key!4c processes the necessary data. If external service providers are also involved in the processing of the contract, e.g. logistics companies, credit agencies or payment service providers, your data will be passed on to them to the extent necessary in each case and processed by them for the intended purpose.
2. Calling the key!4c website
Purposes of data processing/legal bases:
The (Internet) browser of your end device sends various data when you call up our website. This happens automatically and without your intervention. These are usually:
- the IP address of the requesting device
- Date and time of access
- Name and URL of the retrieved data
- the website/application from which the access was made (referrer URL)
- the browser you are using and, if applicable, the operating system of your
- Internet-capable end device as well as the name of your access provider
This data is sent to the server of our website and stored temporarily. The information serves
- to ensure a smooth connection
- to ensure comfortable use of our website/application
- the evaluation for system security and stability.
The legal basis for the processing of the IP address arises from Article 6(1)(f) of the GDPR. Our legitimate interest lies in the purposes of data processing listed above. If the data serves the preparation of a contract, the legal basis for data processing is Article 6(1)(b) of the GDPR.
Storage period/ criteria for determining the storage period:
The data is stored for a period of up to 14 days and then automatically deleted.
3. Processing of sales contracts
Purposes of data processing/legal bases:
Within the scope of its activities, key!4c offers on its website the possibility to book seminars/ trainings/ workshops and coaching and to purchase specific technical literature. In this context, we process the data required for the conclusion, execution or termination of a contract. This includes in particular:
First name, last name,
Invoice and delivery address,
email address,
billing and payment data,
birth data, if applicable,
telephone number (optional).
The legal basis is Article 6(1)(b) GDPR, i.e., the data is provided by you, based on the contractual relationship between you and us.
Recipients/Categories of Recipients:
In the case of shipping items, we pass on the necessary data on your delivery address in the form of a shipping label on the goods to a logistics company commissioned by us for the purpose of processing the purchase contract.
If you have selected the payment method credit card or an online payment method (eg PayPal), we will forward you after completion of the order to the appropriate payment service provider. There, after entering your access data, you can order the payment via the service provider.
Storage period/ criteria for determining the storage period:
Your data collected for the processing of the contract will be stored until the expiry of the statutory or possible contractual warranty and guarantee rights. After expiration of this period, we retain the information of the contractual relationship required by commercial and tax law for the periods determined by law. For this period (regularly ten years from the conclusion of the contract), the data is processed again solely in the event of an audit by the tax authorities and in the event of customer inquiries.
4. Contact form/ e‑mail contact/ telephone calls/ comment function
Purposes of data processing/legal bases:
All personal data that you provide when using contact forms, telephone or e‑mail, we will of course treat confidentially. We use your data exclusively for the purpose of processing your request. The legal basis for data processing is Article 6(1)(f) or Article 6(1)(b) GDPR. Our and your interest in this data processing results here from the goal of answering your inquiries, solving any problems that may exist, and thus maintaining and promoting your satisfaction as a customer or user of our website.
If you use our comment function, this is done on a purely voluntary basis. This also applies if you name names or similar in the comment field that allow conclusions to be drawn about you or other persons.
Recipients/Categories of Recipients:
We will not pass on your data from the above-mentioned areas to third parties. For data that you yourself provide in public comments on our website, the responsibility lies with you.
Storage period/ criteria for determining the storage period:
All personal information that you provide to us via this website or by e‑mail will be deleted or anonymized by us no later than 90 days after the final response is provided.
5. Data processing for advertising purposes
Purposes of data processing/legal bases:
If you are/were a customer of ours, we list you as an existing customer. In this case, we process your contact data outside of the existence of a specific consent in order to send you information about new products and services in this way.
The legal basis for the aforementioned processing is Article 6(1)(f) GDPR or, if consent has been given, Article 6(1)(a) GDPR. The processing of existing customer data for our own advertising purposes is to be regarded as a legitimate interest within the meaning of the former standard.
Storage period/ criteria for determining the storage period:
If you revoke your consent to individual advertising measures or object to certain advertising measures, your data will be deleted from the corresponding (e‑mail) distribution lists.
If you object, the contact address concerned will be blocked for further advertising data processing.
6. Newsletter dispatch
Purposes of data processing/legal bases:
On our website we offer you the possibility to subscribe to our newsletter. Also in the context of one of our events, you can sign up for a newsletter subscription list. If you have consented to receive our newsletter, we will use your e‑mail address and, if applicable, your name to send you (if possible individual) information about products, promotions and news from our range. We store and process this data for the purpose of sending the newsletter.
To ensure that the registration for the newsletter is actually carried out with the correct e‑mail address and by the subsequent recipient, we use the so-called double opt-in procedure: After you have entered your e‑mail address in the registration field, we send you a confirmation link. Only when you click on this confirmation link will your e‑mail address be added to our distribution list.
You can revoke your consent to receive the newsletter at any time with future effect, e.g. by unsubscribing from the newsletter on our website. You will find the link to the unsubscribe page here or at the end of each newsletter. With your unsubscription, we consider your consent to receive the newsletter as revoked.
Storage period/ criteria for determining the storage period:
If you revoke your consent to receive the key!4c newsletter, your e‑mail address will be blocked from receiving the key!4c newsletter. Your data will then be deleted from the corresponding e‑mail distribution lists after six months.
7. Online presence and website optimization
Cookies – General information
We use so-called cookies on our website on the basis of Article 6 (1) (f) DSGVO. Our interest in optimizing our website is to be regarded as legitimate in the sense of the aforementioned provision. Cookies are small files that are stored on your end device (PC, tablet, smartphone or similar) when you visit our website. Cookies do not cause any damage to your end device, do not contain viruses, Trojans or other malware. In the cookie, information is stored that arises in each case in connection with the specific end device used. This does not mean, however, that we gain direct knowledge of your identity. The use of cookies serves on the one hand to make the use of our offer more pleasant for you. For example, we use so-called session cookies to recognize that you have already visited individual pages of our website. These are automatically deleted after you leave our website. In addition, we also use temporary cookies for the purpose of user-friendliness, which are stored on your end device for a certain fixed period of time. If you visit our site again to use our services, it is automatically recognized that you have already been with us.
Most browsers accept cookies automatically. However, you can configure your browser so that no cookies are stored on your computer or a message always appears before a new cookie is created. However, the complete deactivation of cookies may mean that you cannot use all the functions of our website.
Overview of the cookies used with further information
(* = Wildcard for strings)
Name | Provider/Plugin | Purpose | Expire |
PHPSESSID | WordPress (CMS) | User identification for the session | Session |
wordpress_* | WordPress (CMS) | User identification for the session | Session |
cmplz*, complianz* | Complianz Cookie Consent Plugin | Cookie usage | Session |
wf* | Wordfence WP Plugin | Website security monitoring | 1 and 2 days |
key4c* | Popup Maker WP Plugin | PopUp control | max 1 month |
_pk_id.* | Matomo WP Plugin | Visitor statistics | 13 month |
_pk_ses.* | Matomo WP Plugin | Visitor statistics | 30 minutes |
Tracker
No external trackers are used on our website. Internal tracking is performed with the Matomo plugin. Links or buttons to social media platforms (e.g. Facebook, LinkedIn, Twitter, etc.) are only activated by active use (click) by the website visitor.
To ensure system security, the data mentioned under point 2 of this privacy policy is temporarily collected. The deletion takes place after 13 months at the latest.
Analysis tools
No external analysis tools are used on our website. In order to optimize the website, statistical data is collected using internal tools (see point 2 of this privacy policy) – currently this is “Matomo”. The statistical data is anonymized in compliance with DSGVO/GDPR.
[matomo_opt_out]
8. Your rights as a data subject
Overview
In addition to the right to revoke your consent given to us, you are entitled to the following further rights if the respective legal requirements are met:
- Right to information about your personal data stored by us in accordance with Article 15 GDPR and Section 34 of the German Federal Data Protection Act (BDSG),
- Right to correct incorrect data or to complete incomplete data in accordance with Article 16 GDPR,
- Right to have your data stored by us deleted in accordance with Article 17 GDPR and § 35 German Federal Data Protection Act (BDSG),
- Right to restriction of the processing of your data in accordance with Article 18 GDPR,
- Right to data portability in accordance with Article 20 GDPR,
- Right of objection according to Article 21 GDPR
Right of access according to Article 15 GDPR
In accordance with Article 15 (1) GDPR, you have the right, upon request and free of charge, to receive information about the personal data we have stored about you. This includes in particular:
- the purposes for which the personal data are processed;
- the categories of personal data which are processed;
- the recipients or categories of recipients to whom the personal data concerning you have been or will be disclosed;
- the planned duration of the storage of the personal data concerning you or, if concrete information on this is not possible, criteria for determining the storage period;
- the existence of a right to rectification or erasure of the personal data concerning you, a right to restriction of processing by the controller or a right to object to such processing;
- the existence of a right of appeal to a supervisory authority;
- any available information about the origin of the data, if the personal data are not collected from the data subject;
- the existence of automated decision-making, including profiling, pursuant to Article 22(1) and (4) of the GDPR and, at least in these cases, meaningful information about the logic involved and the scope and intended effects of such processing for the data subject.
If personal data are transferred to a third country or to an international organization, you have the right to be informed about the appropriate safeguards pursuant to Article 46 of the GDPR in connection with the transfer.
Right of rectification pursuant to Article 16 GDPR
You have the right to request that we correct any inaccurate personal data concerning you without undue delay. Taking into account the purposes of the processing, you have the right to request the completion of incomplete personal data – also by means of a supplementary declaration.
Right to erasure pursuant to Article 17 GDPR
You have the right to request that we delete personal data concerning you without delay, provided that one of the following reasons applies:
the personal data are no longer necessary for the purposes for which they were collected or otherwise processed;
You withdraw your consent on which the processing was based pursuant to Article 6(1)(a) or Article 9(2)(a) of the GDPR and there is no other legal basis for the processing;
you object to the processing pursuant to Article 21(1) or (2) of the GDPR and there are no overriding legitimate grounds for the processing in the case of Article 21(1) of the GDPR;
the personal data have been processed unlawfully;
erasure of the personal data is necessary for compliance with a legal obligation;
the personal data has been collected in relation to information society services offered pursuant to Article 8(1) GDPR.
Where we have made the personal data public and are obliged to erase it, we will take reasonable steps, taking into account the available technology and the costs of implementation, to inform the third parties processing your data that you also require them to erase all links to, or copies or replications of, that personal data.
Right to restriction of processing pursuant to Article 18 GDPR.
You have the right to request us to restrict processing if one of the following conditions is met:
- the accuracy of the personal data is disputed by you;
- the processing is unlawful and you request the restriction of the use of the personal data instead of erasure;
- the controller no longer needs the personal data for the purposes of processing, but the data subject needs them for the establishment, exercise or defense of legal claims; or
- you have objected to the processing pursuant to Article 21(1) of the GDPR, as long as it has not yet been determined whether the legitimate grounds of the controller override those of the data subject.
Right to data portability pursuant to Article 20 GDPR
You have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format, and you have the right to transfer this data to another controller without hindrance from us, provided that the processing is based on consent pursuant to Article 6(1)(a) or Article 9(2)(a) or on a contract pursuant to Article 6(1)(b) GDPR and the processing is carried out with the aid of automated procedures.
When exercising your right to data portability, you have the right to obtain that the personal data be transferred directly from us to another controller, where technically feasible.
Right of objection according to Article 21 GDPR
Under the conditions of Article 21(1) GDPR, you may object to data processing on grounds relating to your particular situation.
The above general right to object applies to all processing purposes described in this Privacy Policy that are processed on the basis of Article 6(1)(f) GDPR. Unlike the specific right of objection directed at data processing for advertising purposes (compare in particular sections 9 and 11.6 above), we are only obliged under the GDPR to implement such a general objection if you provide us with reasons of overriding importance for doing so, e.g. a possible risk to life or health.
9. Person to contact
Contact for questions or to assert your data protection rights
If you have any questions about the website or about exercising your rights in relation to the processing of your data (data protection rights), you can contact us directly:
Contact for questions regarding data protection
If you have any further questions about the processing of your data, you can contact Frank Schöfisch –
Right of appeal to the data protection supervisory authority
In addition, you have the right to complain to the competent data protection supervisory authority at any time. For this purpose, you can contact the data protection supervisory authority of the federal state in which you reside or the authority in Baden-Württemberg as the federal state in which the partners at key!4c (Frank Schöfisch and Dr. Uta B. Nachbaur) are based.
10. Name and contact details of the data controller/data protection officer
This privacy policy applies to data processing by key!4c
Responsible for the content:
Dipl.Ing. Frank Schöfisch and Dr. Uta Barbara Nachbaur
Haldenbrunnenweg 9
70771 Leinfelden-Echterdingen
Region Stuttgart, Baden-Württemberg
Germany
Phone +49 . (0)711 . 933 00 635
Fax +49 . (0)711 . 7 50 51 25