Rolf Schmidt Industriplast A/S, Privacy statement
Rolf Schmidt Industriplast A/S (‘hereinafter also referred to as “we”, “us” or “our”) values clarity on how we process your personal data. This Privacy Statement informs you about this. This privacy statement applies to all persons whose personal data are processed by us, including customers, visitors to our website and newsletter recipients, with the exception of persons working at our company.
1) What are my personal data used for?
We may ask you to share your personal data with us for the following purposes:
- to execute an agreement such as delivering products and services
If you request a quotation or enter into an agreement with us, your contact details will be requested. Other personal data may also be necessary for the execution of the agreement, depending on the nature of the agreement. Furthermore, data can be used for invoicing the products or services provided.
- to maintain contact with you (customer management)
Your contact details are kept in our customer system, and can be used for sending newsletters, updates, invitations to events, seminars and information that you have requested from us.
- to answer questions or resolve complaints about products or services, and to provide information about their status
- to improve our product and service information and to conduct targeted marketing campaigns
We wish to provide you with information that is relevant for you. To make this possible, we combine and analyse the personal data available to us. On that basis, we determine which information and channels are relevant and which times are most suitable for providing information or contacting you. We do not process special categories of personal data for marketing campaigns. If we wish to create a personal, individual customer profile for you, we will ask for your consent in advance. You may always withdraw that consent later if you wish to do so.
- to improve and secure our website and IT-systems
- to produce user statistics
We collect user statistics for our website to establish a picture of, for example, the number of visitors, the length of the visit, which parts of the website are viewed and ‘click behaviour’. These are generic reports that do not contain information about individuals. We use the information obtained to improve our website.
- access control and company security
If you visit our business premises, we will note your name. Camera images are also recorded inside and outside our business premises. This is necessary in order to know who is in the building when there are emergencies, and to ensure that unauthorised persons do not have access to the building.
- Use of our wifi network
If you visit our business premises you may use our wifi network. When you log into our wifi network we automatically collect connection data, such as the device´s identification number (MAC-address). This information is generally deleted after one year and we solely use this to prevent abuse. In the event that illegal activities are being conducted from our wifi network, we may deny access to the network for the device.
- To fulfil legal obligations that apply to us
In general, we process your personal data only for the purposes about which you have been informed. When we use your data for other (closely-related) purposes, additional data protection measures will be built in where they are required by law.
2) On which legal grounds do we process your data?
We process your data:
- because we need it to enter into or execute an agreement with you
- because we are legally obliged to do so
- with your consent
- or because we (or a third party) have a legitimate interest in doing so.
If we have requested your consent to process your personal data and you have given that consent. You are always entitled to withdraw it.
If we process personal data on the basis of a legitimate interest, we may not infringe your privacy disproportionately.
For example, we use your contact information to send newsletters and information material and to invite you to promotional activities and events. We do not process any special personal data from you in the course of these marketing campaigns.
If we want to create a personal, individual customer profile, we will ask for your consent in advance.
3) What personal data do we collect?
We process personal data that you have provided, personal data that are collected during your visit to our websites or business premises and personal data that are collected from other sources such as public corporate websites.
The personal data you have provided are:
- information that is necessary for the execution of an agreement concluded with you, such as a purchase/sales agreement
- data entered on contact forms, both on paper and digitally
- information provided during introductory meetings (business cards), events, seminars, etc.
When you visit our website, our servers store a number of things.
This is information such as:
- your IP address
- your cookie ID
- your web browser
- your location
- the web pages you visit on our website
- the ads you view
In addition, we can also obtain your personal data from other sources such as:
- personal data that are available if you are a customer of one of our group companies or partners
- personal data obtained from the Trade Register of the Chamber of Commerce or other public registers
- personal data available on public corporate websites or corporate social media platforms.
When the personal data are obtained from one of the sources above, these will only be processed if this is permitted by law and corresponds to the purpose for which this information was provided.
4) How long do we store your personal data?
We do not store your personal data longer than is strictly necessary for the purposes for which we have collected your data or in order to comply with legislation and regulations.
After the expiry of the storage period, the data that we no longer need will be deleted, unless we are required to keep these data longer for the purposes of legal procedures.
5) To what extent do we share your personal information with others?
We may share your personal data with service providers, business partners and other third parties. We always do this in accordance with the prevailing legislation.
We supply third parties with your personal data only if this is necessary for the execution of an agreement with you, or to comply with a legal obligation. We conclude a processor contract with organisations that process your data on our behalf in order to ensure the same level of security and confidentiality for your data. We remain responsible for these processing operations.
6) Transfer outside the EEA (European Economic Area)
It is sometimes necessary to transfer your personal data to parties located outside the European Economic Area (EEA), for example in connection with the execution of an agreement by our group companies established outside the EEA.
Under the General Data Protection Regulation (GDPR), personal data may be transmitted to parties outside the EEA only if an appropriate level of data protection is guaranteed or if a specific derogation applies.
7) Automated decisions
Automated decisions are decisions about you that are made by computers, and not by people. Will a decision of this kind have legal consequences for you? Or may it affect you adversely? In that case, we may not make any automated decision about you.
We may make automated decisions only if we have entered into an agreement with you in that respect, if the law permits it, or if you give your consent. In these situations, you may always consult someone from our company, and you also have the right to submit an objection. This can be done by sending an email to firstname.lastname@example.org
We do not make fully automated decisions that can have consequences for you or affect you adversely.
8) Your rights
The GDPR gives you, among other things, the possibility to view the personal data we hold about you, to ask whether we want to delete it or to indicate that you want to correct or supplement this information. You also have the right to request a limitation of the processing or to object to it. Finally, you have the right to request the personal data held by us in connection with data portability.
9) Access other websites via a link
When you visit our website, you will find links to other websites for your convenience and for information purposes. These websites may not be managed by us and may have their own privacy statement. We advise you to read this privacy statement so that you understand how your personal data are used with respect to these websites. We are not responsible for the content, use and data protection policies of the websites that are not owned by us and that we therefore do not manage.
10) How we protect your personal data
We acknowledge our responsibility for protecting the personal data that you entrust to us from loss, misuse or unauthorised access. We use various security technologies and organisational procedures to protect your personal data. For example, we have access management systems, and we use firewalls and secure servers. In addition, we encode certain types of data such as financial information and other sensitive data.
11) Who is responsible for the protection of your data?
Rolf Schmidt Industriplast A/S, Jernet 4H, 6000 Kolding, Denmark, is responsible for the processing of data as described in this privacy statement.
If you have any questions about this privacy statement, please feel free to contact us. Send an email to email@example.com and we will be happy to help you further.
In addition, if you have any complaints about the processing of your personal data, we will be happy to help you and find a solution together. If we are unable to reach agreement, you have the right to submit a complaint to www.datatilsynet.dk pursuant to data protection legislation.
12) Data protection officer
The responsible data protection officer is:
Projekt 29 GmbH & Co. KG
Mr. Christian Volkmer
Tel. +49 941-2986930
Fax + 49 941-29869316
Due to the rapid developments we are seeing, there may be changes in the personal data that we ask you for and in how we use your personal data. Regulations can also change. In that case, we will amend this privacy statement accordingly. We therefore invite you to check the privacy statement regularly so that you are kept informed. We will also use our website to inform you about any major changes.
This privacy statement came into effect on 25 May 2018.