Privacy

5. Data Privacy Statement

Thank you for visiting our website red-deer.de and for your interest in our company. The protection of your personal data is important to us. Personal data means information about the personal or objective circumstances of an identified or identifiable natural person. This includes, for instance, the person’s real name, address, telephone number and birth date, but also any other information relating to an identifiable person.

Given that personal data enjoys special legal protection, we collect it only insofar as it is necessary to help us make our website available and provide our services. Hereinafter we shall clarify which personal data we collect during your visit to our website and how we use this data.

Our data privacy practices are in line with the statutory provisions, particularly those of the Federal Data Protection Act (BDSG), the Telemedia Act (TMG) and the European Union's General Data Protection Regulation (GDPR). We collect, process and store your personal data only insofar as this is necessary to make available and ensure the functionality of our website and our contents and services, as well as for the processing of your inquiries and, as appropriate, for the processing of orders/contracts, but only if a justified interest as defined by Art. 6, par. 1, subpar. 1, point (f) of the GDPR or other permissions exist. If and only if you have granted us a separate permission, your data will also be used for further purposes clearly specified in your consent form, for instance for the transmission of advertising information via a newsletter.

5.1. Controller as Defined by Art. 4, No. 7 of the GDPR

Controller as defined by the GDPR and other national data protection laws of the Member States as well as other data privacy provisions is:

EXONDA SALON TOOLS GmbH

Friedländer Weg 39

36132 Eiterfeld

E-mail: service[@]red-deer.de

Telephone: +49 (0) 6672 86 789 - 30

5.2. Name and Address of the Data Protection Officer

EXONDA SALON TOOLS GmbH, Data Protection Officer

Friedländer Weg 39

36132 Eiterfeld

E-mail: datenschutz[@]exonda.de

5.3. Provision of the Website and Creation of Log Files

Every time you access our website, our system automatically collects data and information relating to the computer system of the accessing computer. The following data is being collected:

Scope of data processing

(1) Information about the browser type and the version used

(2) The operating system of the accessing device

(3) The IP address of the accessing device

(4) Time and date of access

(5) Websites and resources (images, files, other page contents) accessed on our web page.

(6) The websites via which the user's system reached our web page (referrer tracking)

This data is stored in our system's log files. The data is not stored together with the personal data of a particular user, so that individual visitors are not identified.

Legal basis for the processing of personal data

Art. 6, par. 1, point (f) of the GDPR (justified interest). Our justified interest consists of ensuring the attainment of the purposes described below.

Purpose of data processing

We log your data for the purpose of maintaining the compatibility of our web page for all visitors, preventing misuse and remedying malfunctions. For this purpose it is necessary to log the technical data of the accessing computer, in order to ensure the fastest possible reaction to possible display errors, attacks on our IT systems and/or malfunctions of our web page. In addition to this, we use the data to optimize the website and to safeguard the general security of our IT systems.

Duration of data retention

The above-mentioned technical data will be deleted as soon as it is no longer necessary to ensure the compatibility of the web page for all users, but at the very latest after 3 months from the time you accessed our web page.

Possibility to object and have your data removed

The possibilities to object and have your data removed follow the general provisions of the data protection legislation with respect to the right to object and to have your data deleted laid out in this Data Privacy Statement.

5.4. Special Functions of the Web Page

Our page offers you different functions which, when used, will lead to the collection, processing and storage of personal data by our company. What happens with this data will be clarified below:

Order form

Scope of personal data processing

The data you entered in the form fields.

Legal basis for the processing of personal data

Art. 6, par. 1, point (b) of the GDPR (performance of (pre)contractual steps)

Purpose of data processing

Your data is being processed for the purpose of processing of your order and therefore making the performance of the contract possible.

Duration of data retention

Your data will be deleted as soon as it is no longer necessary for the processing of your order and any legal retention requirements cease to exist. This is usually the case after 10 years (see § 147 par. 2 in conjunction with par. 1 no. 1, 4 and 4a of the German Tax Code (AO), § 14b par. 1 of the Sales Tax Law (UStG)).

Possibility to object and have your data removed

Review function

Scope of personal data processing

The data you entered in the form fields.

Legal basis for the processing of personal data

Art. 6, par. 1, point (a) of the GDPR (consent through clear confirmatory action or behaviour)

Purpose of data processing

To accept and publish your review on our web page and - as long as you give your explicit consent - also on the Internet platforms of our evaluation service providers.

Duration of data retention

Your review will be saved and published for an indefinite amount of time. We reserve the right to delete your data without stating reasons and without prior or subsequent notice.

Possibility to object and have your data removed

You can delete your review at any time. The possibilities to object and have your data removed follow the general provisions of the data protection legislation with respect to the right to object and to have your data deleted laid out in this Data Privacy Statement.

Contact form(s)

Scope of personal data processing

The data you entered in the form fields.

Legal basis for the processing of personal data

Art. 6, par. 1, point (a) of the GDPR (consent through clear confirmatory action or behaviour)

Purpose of data processing

The data collected through our contact form(s) is used solely for the processing of the concrete inquiry received via the contact form.

Duration of data retention

After processing your inquiry, the collected data is deleted without delay, unless they are subject to legal retention requirements.

Possibility to object and have your data removed

Login area

Scope of personal data processing

The registration and login data you entered on our website.

Legal basis for the processing of personal data

Art. 6, par. 1, point (a) of the GDPR (consent through clear confirmatory action or behaviour)

Purpose of data processing

On our web page you have the option of using a separate login area. If you have forgotten your password or user name for this area, you can have it resent to you after entering your contact data (e-mail address). We collect, store and process the user data related to the use of our login area solely to prevent abuse and to remedy errors, or to maintain the functionality of our site. We do not use it for any other purpose nor do we transfer it to third parties.

Duration of data retention

We store the collected data for as long as you keep a user account with our company.

We use the data collected as part of the ‘Forgotten user name and password’ function solely for resending forgotten login data.

Possibility to object and have your data removed

Newsletter subscription form

Scope of personal data processing

The data you entered when you subscribed to our newsletter.

Legal basis for the processing of personal data

Art. 6, par. 1, point (a) of the GDPR (consent through clear confirmatory action or behaviour)

Purpose of data processing

We use the data collected in our newsletter subscription screen solely for the purpose of sending you our newsletter, which contains information about all our services and news. After you have subscribed, we will send you a confirmation e-mail containing a link that you must click in order to finalize your subscription to our newsletter (double opt-in).

Duration of data retention

You can unsubscribe from our newsletter at any time by clicking on the unsubscribe link included in each newsletter. We will delete your data immediately after you have unsubscribed. Your data will also be immediately deleted if you do not finalize the subscription. We reserve the right to delete your data without stating reasons and without prior or subsequent notice.

Possibility to object and have your data removed

Online cancellation form

Scope of personal data processing

The data you entered in the fields of the cancellation form.

Legal basis for the processing of personal data

Art. 6, par. 1, point (b) of the GDPR (performance of (pre)contractual steps)

Purpose of data processing

Processing the cancellation notices you send us via the cancellation form.

Duration of data retention

We will delete the data collected via our online cancellation form immediately after we have finished processing your cancellation, unless they are subject to legal retention requirements.

Possibility to object and have your data removed

5.5. Automatic Credit Check / Scoring

In those cases in which we make delivery before payment, we reserve the right to obtain an automatic credit rating based on mathematical and statistical methods, for the purpose of safeguarding our justified interest, from the following company(s). We shall receive from the service provider mentioned below information regarding the statistical probability of non-payment. The credit rating may include probability values (score values) calculated on the basis of recognised mathematical-statistical methods. Based on a variety of characteristics such as, for instance, income, address details, occupation, civil status and payment history, we derive the customer's future risk of non-payment. The result will be expressed as a payment value (so-called score). The information obtained in this way forms the basis for our decision regarding the establishment, performance and termination of a contractual agreement. The possibility of selecting one of the offered methods of payment does not, however, depend on such information. The possibilities to object and have your data removed follow the general provisions of the data protection legislation with respect to the right to object and to have your data deleted laid out in this Data Privacy Statement. Particularly:

Automatic identity and credit checks if you select the payment methods “PayPal via PayPal Plus”, “Direct Debit via PayPal Plus”, “Credit Card via PayPal Plus” or “PayPal Plus Invoice”

Scope of personal data processing

If you have selected one of the following payment methods: "PayPal via PayPal Plus", "Direct Debit via PayPal Plus", "Credit Card via PayPal Plus" or "PayPal Plus Invoice", we shall forward the personal customer data collected as part of the ordering process to the company PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal Plus") for the purpose of processing your payment. Provided that you give us consent, the following data will be transferred: name and surname, street, street number, postal code, town, birth date, telephone number, as well as the data relating to your order.

Legal basis for the processing of personal data

Art. 6, par. 1, point (b) of the GDPR (performance of (pre)contractual steps)

Purpose of data processing

If you select one of the following payment methods: “PayPal via PayPal Plus”, “Credit Card via PayPal Plus”, “Direct Debit via PayPal Plus” or “PayPal Plus Invoice”, PayPal Plus will carry out a credit check. This uses mathematical and statistical methods to calculate a rating regarding the probability of non-payment (so-called score value calculation). PayPal Plus uses the calculated score value to decide whether or not to provide that particular payment method. The score value is calculated using recognised scientific methods. For more information, please also refer to PayPal’s Data Privacy Statement:

https://www.paypal.com/de/webapps/mpp/ua/privacy-full

Duration of data retention

We will store the data relevant to the processing of your payment for as long as it is necessary for the carrying-out of the transaction. If the data is subject to legal retention requirements, we will delete it only after expiry of the legal retention period. PayPal’s data retention duration is specified in PayPal’s Data Privacy Statement:

https://www.paypal.com/de/webapps/mpp/ua/privacy-full

Possibility to object and have your data removed

Automatic identity and credit check upon selecting the “PayPal” method of payment

Scope of personal data processing

If you have selected the payment method "PayPal", we shall forward the personal customer data collected as part of the ordering process to the company PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal") for the purpose of processing your payment. Provided that you give us consent, the following data will be transferred: name and surname, street, street number, postal code, town, birth date, telephone number, as well as the data relating to your order.

Legal basis for the processing of personal data

Art. 6, par. 1, point (b) of the GDPR (performance of (pre)contractual steps)

Purpose of data processing

If you select the payment method “PayPal”, PayPal will carry out a credit check. This uses mathematical and statistical methods to calculate a rating regarding the probability of non-payment (so-called score value calculation). PayPal uses the calculated score value to decide whether or not to provide that particular payment method. The score value is calculated using recognised scientific methods. For more information, please also refer to PayPal’s Data Privacy Statement:

https://www.paypal.com/de/webapps/mpp/ua/privacy-full

Duration of data retention

https://www.paypal.com/de/webapps/mpp/ua/privacy-full

Possibility to object and have your data removed

5.6. Statistical Analysis of the Visits on This Web Page - Web Trackers

When you access this web page or its individual files, we collect, process and store the following data: IP address, the website from which you accessed the file, the file name, the time and date of access, the amount of transferred data, and a notification about the successful access (so-called web log). We use this access data solely in pseudonymised form to constantly improve our Internet offering and for statistical purposes. To analyse the visits on this web page, we also use the following web trackers:

Google Tag Manager

Scope of personal data processing

On our site, we use the services of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter Google Tag Manager). Google Tag Manager provides a technical platform which enables us to execute, pool and manage other web services and web tracking programmes with the help of so-called “tags”. For this purpose, Google Tag Manager stores cookies on your computer and analyses your web surfing habits (so-called “tracking”), provided that web tracking tools are implemented via Google Tag Manager. This data transmitted by individual tags embedded in Google Tag Manager is aggregated, stored and processed by Google Tag Manager in a unified user interface. All embedded “tags” will be listed again separately in this Data Privacy Statement. You can find more information about the data protection of the tools embedded in Google Tag Manager in the relevant section of this Data Privacy Statement. If you use our website with activated embedded tags from Google Tag Manager, your data, especially your IP address and your user activities, will be transferred to the servers of Google Ireland Limited and processed and stored outside the European Union, for instance in the U.S.A. The E.U. Commission has determined that there can be an adequate level of data protection in the U.S.A. if the data processing company complies with the U.S.-E.U. Privacy Shield Agreement and in doing so the data export to the U.S. was organised in an admissible manner. This is the case for Google Ireland Limited. With regard to the web services embedded via Google Tag Manager, the provisions stipulated in the relevant section of this Data Privacy Statement shall apply. The tracking tools used in Google Tag Manager use IP anonymisation of the source code to ensure that the IP address is anonymised before transferring the data. As such, Google Tag Manager can only collect anonymised IP addresses (so-called IP masking).

Legal basis for the processing of personal data

Art. 6, par. 1, point (a) of the GDPR (consent), either while signing up with Google (setting up a Google account and accepting the data privacy notices implemented there) or, if you have not signed up with Google, by giving your explicit consent upon navigating to our website.

Purpose of data processing

On our behalf, Google will use this information to analyse your use of this website, to compile reports on website activities and to provide other services related to website and Internet usage to us. The IP address provided by your browser as part of Google Tag Manager will not be merged with other Google Ireland Limited data.

Duration of data retention

Google will save the data relevant to the web tracking for as long as it is necessary to perform the booked service. The data is collected and stored in anonymised form. Should the data still contain some personalised details, it will be deleted without delay, provided that it is not subject to legal retention requirements. In any case, the data will be deleted after the legal retention period has expired.

Possibility to object and have your data removed

You can prevent Google from collecting and transferring your personal data (especially your IP address) as well as from processing this data by disabling the execution of script code in your browser, by installing a script blocker in your browser (you can find it, for example, at www.noscript.net or www.ghostery.com) or by enabling your browser's “Do Not Track“ setting. In addition, you can prevent Google from collecting data generated by the Google cookie and related to your use of the website (including your IP address) and the processing of this data by Google by downloading and installing the browser plug-in available at the following link (http://tools.google.com/dlpage/gaoptout?hl=en). You can find Google’s Data Privacy Policies at https://policies.google.com/privacy?hl=en.

Google AdSense

Scope of personal data processing

On our website, we use a web tracking service of Google Ireland Limited, Gordon House, Barrow Street, 4 Dublin, Ireland (hereinafter Google AdSense). As part of the web tracking, Google AdSense uses cookies, which are saved on your computer and allow us to analyse your use of our website and your surfing habits (so-called tracking). We perform this analysis using the tracking services of Google AdSense, in order to continually improve our Internet offering and its availability. When you use our website, your data, especially your IP address and your user activities, will be transferred to the servers of Google Ireland Limited and processed and stored outside the European Union, for instance in the U.S.A.

Google Ireland Limited is self-certified as being in compliance with the E.U.-U.S. Privacy Shield Agreement (see https://www.privacyshield.gov/list). The data will be deleted as soon as the purpose for which it was collected has been fulfilled. You can find more information about the handling of transferred data in the Data Privacy Statement of Google AdSense: https://policies.google.com/privacy

Legal basis for the processing of personal data

Art. 6, par. 1, point (a) of the GDPR (consent).

Possibility to object and have your data removed

You can prevent the collection and transfer of your personal data (especially your IP address) as well as the processing of this data by disabling the execution of script code in your browser, by installing a script blocker in your browser (you can find it, for example, at www.noscript.net or www.ghostery.com) or by enabling your browser's “Do Not Track“ setting. You can access an opt-out option at the following link:

https://policies.google.com/privacy.

Google Analytics

Scope of personal data processing

On our site, we use the web tracking service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter Google Analytics). As part of the web tracking, Google Analytics uses cookies, which are saved on your computer and allow us to analyse your use of our website and your surfing habits (so-called tracking). We perform this analysis using the tracking services of Google Analytics, in order to continually improve our Internet offering and its availability. When you use our website, your data, especially your IP address and your user activities, will be transferred to the servers of Google Ireland Limited and processed and stored outside the European Union, for instance in the U.S.A. The E.U. Commission has determined that there can be an adequate level of data protection in the U.S.A. if the data processing company complies with the U.S.-E.U. Privacy Shield Agreement and in doing so the data export to the U.S. was organised in an admissible manner. By enabling IP anonymisation within the Google Analytics tracking code of this web page, your IP address will be anonymised by Google Analytics before being transferred. This website uses a Google Analytics tracking code which includes the operator gat._anonymizeIp(); in order to allow only the anonymised collection of IP addresses (so-called IP masking).

Legal basis for the processing of personal data

Purpose of data processing

On our behalf, Google will use this information to analyse your use of this website, to compile reports on website activities and to provide other services related to website and Internet usage to us. The IP address provided by your browser as part of Google Analytics will not be merged with other Google Ireland Limited data.

Duration of data retention

Possibility to object and have your data removed

https://policies.google.com/privacy?hl=en.

5.7. Embedding External Web Services and Data Processing Outside the European Union

Our website uses active Java Script content from external providers, so-called web services. By accessing our web page, these external providers may obtain personalised information about your visit on our web page. In this case, the data may be processed outside the E.U. You can prevent this from happening by installing a Java Script blocker such as the browser plug-in 'NoScript’ (www.noscript.net) or by disabling Java Script in your browser. This may restrict the functionality of the visited web pages. We use the following external web services:

Doubleclick

On our web page, we deploy a web service of Google Ireland Limited, Gordon House, Barrow Street, 4 Dublin, Ireland (hereinafter Doubleclick). We use this data to ensure the full functionality of our website. In this context, your browser may transfer personal data to Doubleclick. The legal basis for the data processing is Art. 6, par.1, point (f) of the GDPR. The justified interest consists of the error-free operation of our web page. Google Ireland Limited is self-certified as being in compliance with the E.U.-U.S. Privacy Shield Agreement (see https://www.privacyshield.gov/list). The data will be deleted as soon as the purpose for which it was collected has been fulfilled. You can find more information about the handling of transferred data in the Data Privacy Statement of Doubleclick: https://policies.google.com/privacy. You can prevent Doubleclick from collecting and processing your personal data by disabling the execution of script code in your browser or by installing a script blocker in your browser (you can find it, for example, at www.noscript.net or www.ghostery.com).

Google

On our web page, we deploy a web service of Google Ireland Limited, Gordon House, Barrow Street, 4 Dublin, Ireland (hereinafter Google). We use this data to ensure the full functionality of our website. In this context, your browser may transfer personal data to Google. The legal basis for the data processing is Art. 6, par.1, point (f) of the GDPR. The justified interest consists of the error-free operation of our web page. Google Ireland Limited is self-certified as being in compliance with the E.U.-U.S. Privacy Shield Agreement (see https://www.privacyshield.gov/list). The data will be deleted as soon as the purpose for which it was collected has been fulfilled. You can find more information about the handling of transferred data in Google's Data Privacy Statement: https://policies.google.com/privacy

You can prevent Google from collecting and processing your personal data by disabling the execution of script code in your browser or by installing a script blocker in your browser (you can find it, for example, at www.noscript.net or www.ghostery.com).

Gstatic

On our web page, we deploy a web service of Google Ireland Limited, Gordon House, Barrow Street, 4 Dublin, Ireland (hereinafter Gstatic). We use this data to ensure the full functionality of our website. In this context, your browser may transfer personal data to Gstatic. The legal basis for the data processing is Art. 6, par.1, point (f) of the GDPR. The justified interest consists of the error-free operation of our web page. Google Ireland Limited is self-certified as being in compliance with the E.U.-U.S. Privacy Shield Agreement (see https://www.privacyshield.gov/list). The data will be deleted as soon as the purpose for which it was collected has been fulfilled. You can find more information about the handling of transferred data in the Data Privacy Statement of Gstatic: https://policies.google.com/privacy

You can prevent Gstatic from collecting and processing your personal data by disabling the execution of script code in your browser or by installing a script blocker in your browser (you can find it, for example, at www.noscript.net or www.ghostery.com).

YouTube

On our web page, we deploy a web service of Google Ireland Limited, Gordon House, Barrow Street, 4 Dublin, Ireland (hereinafter YouTube). We use this data to ensure the full functionality of our website. In this context, your browser may transfer personal data to YouTube. The legal basis for the data processing is Art. 6, par.1, point (f) of the GDPR. The justified interest consists of the error-free operation of our web page. Google Ireland Limited is self-certified as being in compliance with the E.U.-U.S. Privacy Shield Agreement (see https://www.privacyshield.gov/list). The data will be deleted as soon as the purpose for which it was collected has been fulfilled. You can find more information about the handling of transferred data in the Data Privacy Statement of YouTube: https://policies.google.com/privacy. You can prevent YouTube from collecting and processing your personal data by disabling the execution of script code in your browser or by installing a script blocker in your browser (you can find it, for example, at www.noscript.net or www.ghostery.com).

Bootstrapcdn.com

On our website, we deploy a web service of StackPath LLC, 2021 McKinney Avenue, Suite 1100, 75201 Texas, United States of America (hereinafter Bootstrapcdn.com). We use this data to ensure the full functionality of our website. In this context, your browser may transfer personal data to Bootstrapcdn.com. The legal basis for the data processing is Art. 6, par.1, point (f) of the GDPR. The justified interest consists of the error-free operation of our web page. StackPath LLC is self-certified as being in compliance with the E.U.-U.S. Privacy Shield Agreement (see https://www.privacyshield.gov/list). The data will be deleted as soon as the purpose for which it was collected has been fulfilled. You can find more information about the handling of transferred data in the Data Privacy Statement of Bootstrapcdn.com: https://www.bootstrapcdn.com/privacy-policy/

You can prevent Bootstrapcdn.com from collecting and processing your personal data by disabling the execution of script code in your browser or by installing a script blocker in your browser (you can find it, for example, at www.noscript.net or www.ghostery.com).

Google APIs

On our web page, we deploy a web service of Google Ireland Limited, Gordon House, Barrow Street, 4 Dublin, Ireland (hereinafter Google APIs). We use this data to ensure the full functionality of our website. In this context, your browser may transfer personal data to Google APIs. The legal basis for the data processing is Art. 6, par.1, point (f) of the GDPR. The justified interest consists of the error-free operation of our web page. Google Ireland Limited is self-certified as being in compliance with the E.U.-U.S. Privacy Shield Agreement (see https://www.privacyshield.gov/list). The data will be deleted as soon as the purpose for which it was collected has been fulfilled. You can find more information about the handling of transferred data in the Data Privacy Statement of Google APIS: https://policies.google.com/privacy

You can prevent Google APIs from collecting and processing your personal data by disabling the execution of script code in your browser or by installing a script blocker in your browser (you can find it, for example, at www.noscript.net or www.ghostery.com).

JQuery

On our website we deploy a web service of The Linux Foundation, 1 Letterman Drive, Building D, Suite D4700, CA 94129 San Francisco, United States of America (hereinafter JQuery). If you have activated Java Script in your browser and you have not installed any Java Script blocker, your browser may transfer personal data to JQuery. You can find more information about the handling of transferred data in the Data Privacy Statement of JQuery: https://js.foundation/wp-content/uploads/sites/33/2017/03/JS-Foundation-IP-Policy.pdf

You can prevent JQuery from collecting and processing your personal data by disabling the execution of script code in your browser or by installing a script blocker in your browser (you can find it, for example, at www.noscript.net or www.ghostery.com).

5.8. Notification Regarding the Use of Cookies

Scope of personal data processing

On various pages we use cookies, in order to enable the use of certain functions of our website. The so-called ‘cookies’ are small text files that your browser can store on your computer. These text files contain a typical sequence of characters which allows for the unequivocal identification of your browser the next time you access our website. The process of creating and storing a cookie file is also called ‘setting a cookie’.

Legal basis for the processing of personal data

Art. 6, par. 1, point (f) of the GDPR (justified interest). Our justified interest consists of maintaining the full functionality of our web page, improving its usability and allowing for a more individualised customer approach. The identification of individual page visitors with the use of cookie technology is only possible if the page visitor has provided us with the corresponding personal data, on the basis of a separate consent, prior to the visit.

Purpose of data processing

Out website sets cookies to maintain the full functionality of our web page and to improve its usability. In addition, the cookie technology allows us to recognise individual visitors with the help of pseudonyms (e.g. any arbitrary individual ID), which allows us to offer more individualised services.

Duration of data retention

Our cookies are stored on your computer until you delete them from your browser or, in the case of session cookies, until the session has expired.

Possibility to object and have your data removed

You can choose to configure your browser in such a way as to generally prevent the setting of cookies. You can then decide whether you accept cookies on a case-by-case basis, or allow the use of cookies in general. Cookies can be set for various purposes, e.g. to detect if your PC had previously connected to our web content (permanent cookies) or to save the most recently viewed offerings (session cookies). We set cookies in order to offer you more convenience and an improved user experience. To make use of our convenience functions, we recommend that you allow the use of cookies for our web content. Apart from this, the possibilities to object and have your data removed follow the general provisions of the data protection legislation with respect to the right to object and to have your data deleted laid out in this Data Privacy Statement.

5.9. Data Security and Data Protection, Communicating by E-mail

During collection, storage and processing, your personal data is protected using technical and organisational measures in such a way as to prevent the access of third parties to your data. In the case of unencrypted communication by e-mail, the security of your data during its transfer to our IT systems cannot be fully guaranteed, which is why we recommend sending highly sensitive and confidential information either encrypted or by post.

5.10. Automatic E-mail Archiving

Scope of personal data processing

Please be advised that our mail system employs an automated archiving procedure. We use audit-compliant digital archiving for all incoming and outgoing e-mails.

Legal basis for the processing of personal data

Art. 6, par. 1, point (f) of the GDPR (justified interest), as well as Art. 6, par. 1 point (c) of the GDPR (fulfilment of a legal obligation). Our justified interest and our legal obligation consist, respectively, of complying with the provisions of the fiscal and trade legislation (e.g. §§ 146, 147 of the German Tax Code (AO)).

Purpose of data processing

The purpose of archiving is to comply with the provisions of the fiscal and trade legislation (e.g. §§ 146, 147 of the German Tax Code (AO)).

Duration of data retention

We store our e-mail communications until the expiry of our legal retention period under the German fiscal and trade legislation. The retention period can last up to 10 years.

Possibility to object and have your data removed

E-mails sent to datenschutz[@]exonda.de are exempt from archiving. If you have any questions regarding our e-mail archiving system, please contact our Data Protection Officer. Please also note that we only take into consideration job applications in PDF format. Zipped files (WinZip, WinRAR, 7Zip etc.) are filtered out by our security system and will not be delivered. Job applications in Word format and other file formats will not be taken into consideration and will be deleted without being read. Please note that application documents sent by unencrypted e-mail may be opened by third parties before they even reach our IT systems. We operate under the assumption that unencrypted application e-mails may also be replied to via unencrypted e-mail. Should you disagree, please mention this in your application e-mail.

5.11. Revocation of Consent; Information Regarding Your Data, Modification Requests; Deleting and Blocking Data

At appropriate intervals of time you are entitled to free information about your stored data; you also have the right to have your data corrected, blocked or deleted at any time. We shall delete your data upon your first request, unless prevented to do so by law. You may therefore at any time revoke the permission you may have given us to use your personal data. Please send your requests for information, deletion or correction of your data, as well as any suggestions you might have for us to:

EXONDA SALON TOOLS GmbH

Friedländer Weg 39

36132 Eiterfeld

E-mail: service[@]red-deer.de

Telephone: +49 (0) 6672 86 789 - 30

5.12. Right to Data Portability

You have the right to receive the personal data you communicated to us in a structured, current and machine-readable format. You may also request that we immediately transfer this data to a third party on your first demand, provided that the processing is based on a consent in accordance with Art. 6, par.1, point (a) of the GDPR or Art. 9, par. 2, point (a) of the GDPR or on a contract in accordance with Art. 6, par. 1, point (b) of the GDPR, and the processing by us occurs as part of an automated data processing. If you choose to exercise this right to data portability, you also have the right to obtain the transfer of the personal data concerned directly to another controller, provided that this is technically feasible. This must not prejudice the rights and freedoms of others.

The right to data portability does not apply to the personal data processing necessary for the performance of a task that is in the public interest or that occurs in the exercise of official authority delegated to the controller.

5.13. Right To Lodge a Complaint with the Supervisory Authority in Accordance with Art. 77, Par. 1 of the GDPR

If you suspect that your data is being processed illegally on our web page, you can set in motion a judicial clarification of the situation at any time. Independent of this, you have the possibility to bring your issue before a supervisory authority. You have the right to lodge a complaint in the E.U. Member State of your residence, your office and/or of the place of the alleged violation, i.e. you can choose to contact the supervisory authority in the above-mentioned locations. The supervisory authority with which you lodged the complaint will notify you of the status and the results of your submission, including the possibility of legal remedy in accordance with Art. 78 of the GDPR.