Privacy policy

Data privacy on https://key4c.com
and its Subdo­mains
(Status March 13, 2021)

Data protec­tion regulations

You are interested in data protec­tion on our website – and that is your right. We want you to feel informed and secure about data protec­tion when you visit our website.

The follo­wing data protec­tion infor­ma­tion informs you about the nature and extent of the proces­sing of your personal data by key!4c – namely: Frank Schöfisch and Dr. Uta B. Nachbaur (also referred to as “key!4c”, “we” or “us” in the context of this data protec­tion decla­ra­tion).
Personal data is infor­ma­tion that can be directly or indirectly attri­buted to you or can be attri­buted to you. The legal basis for data protec­tion is in parti­cular the General Data Protec­tion Regula­tion (GDPR).

Table of contents

  1. Overview
  2. Calling the key!4c website
  3. Proces­sing of sales contracts
  4. Contact form/ e‑mail contact/ telephone calls/ comment function
  5. Data proces­sing for adver­ti­sing purposes
  6. Newsletter dispatch
  7. Online presence and website optimization
  8. Your rights as a data subject
  9. Person to contact
  10. Name and contact details of the data controller/data protec­tion officer

1. Overview

The data processed on the website of key!4c can be roughly divided into two appli­ca­tion areas:

When calling up the website of key!4c, various infor­ma­tion is exchanged between your end device (PC, smart­phone, tablet, etc.) and our server platform. This can also be personal data. The infor­ma­tion obtained during access is used, among other things, to optimize our website or to prevent unlawful access.

In the context of contract proces­sing (e.g. orders in the store, newsletter regis­tra­tion), key!4c processes the neces­sary data. If external service provi­ders are also involved in the proces­sing of the contract, e.g. logistics compa­nies, credit agencies or payment service provi­ders, your data will be passed on to them to the extent neces­sary in each case and processed by them for the intended purpose.

2. Calling the key!4c website

Purposes of data processing/legal bases:

The (Internet) browser of your end device sends various data when you call up our website. This happens automa­ti­cally and without your inter­ven­tion. These are usually:

  • the IP address of the reques­ting device
  • Date and time of access
  • Name and URL of the retrieved data
  • the website/application from which the access was made (referrer URL)
  • the browser you are using and, if appli­cable, the opera­ting system of your
  • Internet-capable end device as well as the name of your access provider

This data is sent to the server of our website and stored tempo­r­a­rily. The infor­ma­tion serves

  • to ensure a smooth connection
  • to ensure comfor­table use of our website/application
  • the evalua­tion for system security and stability.

The legal basis for the proces­sing of the IP address arises from Article 6(1)(f) of the GDPR. Our legiti­mate interest lies in the purposes of data proces­sing listed above. If the data serves the prepa­ra­tion of a contract, the legal basis for data proces­sing is Article 6(1)(b) of the GDPR.

Storage period/ criteria for deter­mi­ning the storage period:

The data is stored for a period of up to 14 days and then automa­ti­cally deleted.

3. Proces­sing of sales contracts

Purposes of data processing/legal bases:

Within the scope of its activi­ties, key!4c offers on its website the possi­bi­lity to book seminars/ trainings/ workshops and coaching and to purchase specific technical litera­ture. In this context, we process the data required for the conclu­sion, execu­tion or termi­na­tion of a contract. This includes in particular:

First name, last name,
Invoice and delivery address,
email address,
billing and payment data,
birth data, if appli­cable,
telephone number (optional).

The legal basis is Article 6(1)(b) GDPR, i.e., the data is provided by you, based on the contrac­tual relati­onship between you and us.

Recipients/Categories of Recipients:

In the case of shipping items, we pass on the neces­sary data on your delivery address in the form of a shipping label on the goods to a logistics company commis­sioned by us for the purpose of proces­sing the purchase contract.

If you have selected the payment method credit card or an online payment method (eg PayPal), we will forward you after comple­tion of the order to the appro­priate payment service provider. There, after entering your access data, you can order the payment via the service provider.

Storage period/ criteria for deter­mi­ning the storage period:

Your data collected for the proces­sing of the contract will be stored until the expiry of the statu­tory or possible contrac­tual warranty and guarantee rights. After expira­tion of this period, we retain the infor­ma­tion of the contrac­tual relati­onship required by commer­cial and tax law for the periods deter­mined by law. For this period (regularly ten years from the conclu­sion of the contract), the data is processed again solely in the event of an audit by the tax autho­ri­ties and in the event of customer inquiries.

4. Contact form/ e‑mail contact/ telephone calls/ comment function

Purposes of data processing/legal bases:

All personal data that you provide when using contact forms, telephone or e‑mail, we will of course treat confi­den­ti­ally. We use your data exclu­si­vely for the purpose of proces­sing your request. The legal basis for data proces­sing is Article 6(1)(f) or Article 6(1)(b) GDPR. Our and your interest in this data proces­sing results here from the goal of answe­ring your inqui­ries, solving any problems that may exist, and thus maintai­ning and promo­ting your satis­fac­tion as a customer or user of our website.

If you use our comment function, this is done on a purely volun­tary basis. This also applies if you name names or similar in the comment field that allow conclu­sions to be drawn about you or other persons.

Recipients/Categories of Recipients:

We will not pass on your data from the above-mentioned areas to third parties. For data that you yourself provide in public comments on our website, the respon­si­bi­lity lies with you.

Storage period/ criteria for deter­mi­ning the storage period:

All personal infor­ma­tion that you provide to us via this website or by e‑mail will be deleted or anony­mized by us no later than 90 days after the final response is provided.

5. Data proces­sing for adver­ti­sing purposes

Purposes of data processing/legal bases:

If you are/were a customer of ours, we list you as an existing customer. In this case, we process your contact data outside of the existence of a specific consent in order to send you infor­ma­tion about new products and services in this way.

The legal basis for the afore­men­tioned proces­sing is Article 6(1)(f) GDPR or, if consent has been given, Article 6(1)(a) GDPR. The proces­sing of existing customer data for our own adver­ti­sing purposes is to be regarded as a legiti­mate interest within the meaning of the former standard.

Storage period/ criteria for deter­mi­ning the storage period:

If you revoke your consent to indivi­dual adver­ti­sing measures or object to certain adver­ti­sing measures, your data will be deleted from the corre­spon­ding (e‑mail) distri­bu­tion lists.

If you object, the contact address concerned will be blocked for further adver­ti­sing data processing.

6. Newsletter dispatch

Purposes of data processing/legal bases:

On our website we offer you the possi­bi­lity to subscribe to our newsletter. Also in the context of one of our events, you can sign up for a newsletter subscrip­tion list. If you have consented to receive our newsletter, we will use your e‑mail address and, if appli­cable, your name to send you (if possible indivi­dual) infor­ma­tion about products, promo­tions and news from our range. We store and process this data for the purpose of sending the newsletter.

To ensure that the regis­tra­tion for the newsletter is actually carried out with the correct e‑mail address and by the subse­quent recipient, we use the so-called double opt-in proce­dure: After you have entered your e‑mail address in the regis­tra­tion field, we send you a confir­ma­tion link. Only when you click on this confir­ma­tion link will your e‑mail address be added to our distri­bu­tion list.

You can revoke your consent to receive the newsletter at any time with future effect, e.g. by unsub­scribing from the newsletter on our website. You will find the link to the unsub­scribe page here or at the end of each newsletter. With your unsub­scrip­tion, we consider your consent to receive the newsletter as revoked.

Storage period/ criteria for deter­mi­ning the storage period:

If you revoke your consent to receive the key!4c newsletter, your e‑mail address will be blocked from recei­ving the key!4c newsletter. Your data will then be deleted from the corre­spon­ding e‑mail distri­bu­tion lists after six months.

7. Online presence and website optimization

Cookies – General information

We use so-called cookies on our website on the basis of Article 6 (1) (f) DSGVO. Our interest in optimi­zing our website is to be regarded as legiti­mate in the sense of the afore­men­tioned provi­sion. Cookies are small files that are stored on your end device (PC, tablet, smart­phone or similar) when you visit our website. Cookies do not cause any damage to your end device, do not contain viruses, Trojans or other malware. In the cookie, infor­ma­tion is stored that arises in each case in connec­tion with the specific end device used. This does not mean, however, that we gain direct knowledge of your identity. The use of cookies serves on the one hand to make the use of our offer more pleasant for you. For example, we use so-called session cookies to recognize that you have already visited indivi­dual pages of our website. These are automa­ti­cally deleted after you leave our website. In addition, we also use tempo­rary cookies for the purpose of user-friend­li­ness, which are stored on your end device for a certain fixed period of time. If you visit our site again to use our services, it is automa­ti­cally recognized that you have already been with us.

Most browsers accept cookies automa­ti­cally. However, you can confi­gure your browser so that no cookies are stored on your computer or a message always appears before a new cookie is created. However, the complete deacti­va­tion of cookies may mean that you cannot use all the functions of our website.

Overview of the cookies used with further infor­ma­tion
(* = Wildcard for strings)

Name Provider/Plugin Purpose Expire
PHPSESSID WordPress (CMS) User identi­fi­ca­tion for the session Session
wordpress_* WordPress (CMS) User identi­fi­ca­tion for the session Session
cmplz*, complianz* Complianz Cookie Consent Plugin Cookie usage Session
wf* Wordfence WP Plugin Website security monitoring 1 and 2 days
key4c* Popup Maker WP Plugin PopUp control max 1 month
_pk_id.* Matomo WP Plugin Visitor statis­tics 13 month
_pk_ses.* Matomo WP Plugin Visitor statis­tics 30 minutes

Tracker

No external trackers are used on our website. Internal tracking is performed with the Matomo plugin. Links or buttons to social media platforms (e.g. Facebook, LinkedIn, Twitter, etc.) are only activated by active use (click) by the website visitor.
To ensure system security, the data mentioned under point 2 of this privacy policy is tempo­r­a­rily collected. The deletion takes place after 13 months at the latest.

Analysis tools

No external analysis tools are used on our website. In order to optimize the website, statis­tical data is collected using internal tools (see point 2 of this privacy policy) – currently this is “Matomo”. The statis­tical data is anony­mized in compli­ance with DSGVO/GDPR.

[matomo_opt_out]

8. Your rights as a data subject

Overview

In addition to the right to revoke your consent given to us, you are entitled to the follo­wing further rights if the respec­tive legal requi­re­ments are met:

  • Right to infor­ma­tion about your personal data stored by us in accordance with Article 15 GDPR and Section 34 of the German Federal Data Protec­tion Act (BDSG),
  • Right to correct incor­rect data or to complete incom­plete data in accordance with Article 16 GDPR,
  • Right to have your data stored by us deleted in accordance with Article 17 GDPR and § 35 German Federal Data Protec­tion Act (BDSG),
  • Right to restric­tion of the proces­sing of your data in accordance with Article 18 GDPR,
  • Right to data porta­bi­lity in accordance with Article 20 GDPR,
  • Right of objec­tion accor­ding to Article 21 GDPR

Right of access accor­ding to Article 15 GDPR

In accordance with Article 15 (1) GDPR, you have the right, upon request and free of charge, to receive infor­ma­tion about the personal data we have stored about you. This includes in particular:

  • the purposes for which the personal data are processed;
  • the catego­ries of personal data which are processed;
  • the recipi­ents or catego­ries of recipi­ents to whom the personal data concer­ning you have been or will be disclosed;
  • the planned duration of the storage of the personal data concer­ning you or, if concrete infor­ma­tion on this is not possible, criteria for deter­mi­ning the storage period;
  • the existence of a right to recti­fi­ca­tion or erasure of the personal data concer­ning you, a right to restric­tion of proces­sing by the controller or a right to object to such processing;
  • the existence of a right of appeal to a super­vi­sory authority;
  • any available infor­ma­tion about the origin of the data, if the personal data are not collected from the data subject;
  • the existence of automated decision-making, inclu­ding profiling, pursuant to Article 22(1) and (4) of the GDPR and, at least in these cases, meaningful infor­ma­tion about the logic involved and the scope and intended effects of such proces­sing for the data subject.

If personal data are trans­ferred to a third country or to an inter­na­tional organiza­tion, you have the right to be informed about the appro­priate safeguards pursuant to Article 46 of the GDPR in connec­tion with the transfer.

Right of recti­fi­ca­tion pursuant to Article 16 GDPR

You have the right to request that we correct any inaccu­rate personal data concer­ning you without undue delay. Taking into account the purposes of the proces­sing, you have the right to request the comple­tion of incom­plete personal data – also by means of a supple­men­tary declaration.

Right to erasure pursuant to Article 17 GDPR

You have the right to request that we delete personal data concer­ning you without delay, provided that one of the follo­wing reasons applies:

the personal data are no longer neces­sary for the purposes for which they were collected or other­wise processed;
You withdraw your consent on which the proces­sing was based pursuant to Article 6(1)(a) or Article 9(2)(a) of the GDPR and there is no other legal basis for the proces­sing;
you object to the proces­sing pursuant to Article 21(1) or (2) of the GDPR and there are no overri­ding legiti­mate grounds for the proces­sing in the case of Article 21(1) of the GDPR;
the personal data have been processed unlawfully;
erasure of the personal data is neces­sary for compli­ance with a legal obliga­tion;
the personal data has been collected in relation to infor­ma­tion society services offered pursuant to Article 8(1) GDPR.

Where we have made the personal data public and are obliged to erase it, we will take reasonable steps, taking into account the available techno­logy and the costs of imple­men­ta­tion, to inform the third parties proces­sing your data that you also require them to erase all links to, or copies or repli­ca­tions of, that personal data.

Right to restric­tion of proces­sing pursuant to Article 18 GDPR.

You have the right to request us to restrict proces­sing if one of the follo­wing condi­tions is met:

  • the accuracy of the personal data is disputed by you;
  • the proces­sing is unlawful and you request the restric­tion of the use of the personal data instead of erasure;
  • the controller no longer needs the personal data for the purposes of proces­sing, but the data subject needs them for the estab­lish­ment, exercise or defense of legal claims; or
  • you have objected to the proces­sing pursuant to Article 21(1) of the GDPR, as long as it has not yet been deter­mined whether the legiti­mate grounds of the controller override those of the data subject.

Right to data porta­bi­lity pursuant to Article 20 GDPR

You have the right to receive the personal data concer­ning you that you have provided to us in a struc­tured, commonly used and machine-readable format, and you have the right to transfer this data to another controller without hindrance from us, provided that the proces­sing is based on consent pursuant to Article 6(1)(a) or Article 9(2)(a) or on a contract pursuant to Article 6(1)(b) GDPR and the proces­sing is carried out with the aid of automated procedures.

When exercising your right to data porta­bi­lity, you have the right to obtain that the personal data be trans­ferred directly from us to another controller, where techni­cally feasible.

Right of objec­tion accor­ding to Article 21 GDPR

Under the condi­tions of Article 21(1) GDPR, you may object to data proces­sing on grounds relating to your parti­cular situation.

The above general right to object applies to all proces­sing purposes described in this Privacy Policy that are processed on the basis of Article 6(1)(f) GDPR. Unlike the specific right of objec­tion directed at data proces­sing for adver­ti­sing purposes (compare in parti­cular sections 9 and 11.6 above), we are only obliged under the GDPR to imple­ment such a general objec­tion if you provide us with reasons of overri­ding importance for doing so, e.g. a possible risk to life or health.

9. Person to contact

Contact for questions or to assert your data protec­tion rights

If you have any questions about the website or about exercising your rights in relation to the proces­sing of your data (data protec­tion rights), you can contact us directly:

Contact for questions regar­ding data protection

If you have any further questions about the proces­sing of your data, you can contact Frank Schöfisch –

Right of appeal to the data protec­tion super­vi­sory authority

In addition, you have the right to complain to the compe­tent data protec­tion super­vi­sory autho­rity at any time. For this purpose, you can contact the data protec­tion super­vi­sory autho­rity of the federal state in which you reside or the autho­rity in Baden-Württem­berg as the federal state in which the partners at key!4c (Frank Schöfisch and Dr. Uta B. Nachbaur) are based.

10. Name and contact details of the data controller/data protec­tion officer

This privacy policy applies to data proces­sing by key!4c

Respon­sible for the content:

Dipl.Ing. Frank Schöfisch and Dr. Uta Barbara Nachbaur
Halden­brun­nenweg 9
70771 Leinfelden-Echter­dingen
Region Stutt­gart, Baden-Württem­berg
Germany


Phone +49 . (0)711 . 933 00 635
Fax +49 . (0)711 . 7 50 51 25

 

Copyright

Infor­ma­tion on this in the Legal Notice and Copyrights