Privacy Policy
We are very pleased about your interest in our company. The protection of your data is very important to us. Below we inform you in detail about the handling of your data.
The use of the website of www.ad-case.de is possible without any indication of personal data. If there is no legal basis for the processing of your personal data, we generally always obtain your consent. However, when using special services on our company’s website, the processing of personal data may become necessary.
Personal data, such as the name, address, e-mail address, or telephone number of a data subject, will always be processed in line with the General Data Protection Regulation and in accordance with the data protection regulations of ADcase. By means of this data protection declaration, data subjects are informed of their rights and the public is informed of the purpose, nature and scope of the personal data we collect, use and process.
As the controller, we have implemented numerous technical and organizational measures to ensure the most complete protection of personal data transmitted via our website and processed. However, Internet-based data transmissions can always have security gaps. Absolute protection cannot be guaranteed. For this reason, every data subject is free to transmit personal data to and from us by alternative means. Alternative ways can be the telephone or postal data transmission.
We expressly point out that minors should not transmit personal data to us without the consent of their legal guardians.
Definitions
Our data protection declaration is based on the terms used by the European Directive and Regulation Maker when enacting the General Data Protection Regulation (DSGVO). In order to provide our customers, business partners and the public with a comprehensible and easy-to-read privacy statement, we define the terms used in advance. The following terms are used in our privacy policy:
1) Personal data:
Personal data means any information relating to an identifiable natural person (“data subject”). An identifiable person is a natural person who can be identified directly or indirectly by association with an identifier (e.g. name, identification number, location data, online identifier or special characteristics). Special characteristics are characteristics which are expressions of the physical, physiological, genetic, psychological economic, cultural and/or social identity of the data subject.
2) Data Subject:
Data subjects are all identifiable and identified natural persons whose personal data, are processed by the controller.
3) Processing:
Processing means any operation carried out on personal data, whether or not by means of automated procedures. Operations include collecting, recording, organizing, arranging, storing, adapting, modifying, reading out, querying, using, disclosing, transmitting, matching, linking, restricting, erasing and destroying personal data.
4.) Restriction of Processing:
Restriction of processing involves marking stored personal data with the aim of restricting its future processing.
5) Profiling:
Profiling is any type of automated processing of personal data that consists in using such personal data to evaluate certain personal aspects relating to a natural person, in particular to analyze or predict aspects relating to the job performance, economic situation, health, personal preferences, interests, reliability, behavior, location or change of location of such natural person.
6) Pseudonymization:
In pseudonymization, personal data are processed in such a way that a specific data subject can no longer be identified without the addition of additional information.
7th) Controller or person responsible for processing:
The controller of personal data is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.
8) Processor:
Processors are all legal or natural persons who process personal data on behalf of the Controller.
9) Recipients:
Recipients are all natural or legal persons to whom personal data is disclosed, regardless of whether it is a third party or not. However, public authorities that may receive personal data in the context of a specific investigation mandate under Union or Member State law shall not be considered as recipients.
10.)Third Party:
A third party is any natural or legal person who, in addition to the Controller, Processors are authorized to process Personal Data. The authorization is made by the controller or by processors.
11) Consent:
Consent is any freely given indication by the data subject that he or she agrees to the processing of his or her personal data. Consent includes all voluntarily given expressions of will in the form of declarations or other unambiguous actions.
Name and address of the controller
The responsible party within the meaning of the DSGVO and other applicable legal provisions with data protection character is:
mechatronic factory GmbH
Anton Huber Street 20
73430 Aalen
Germany
Tel: +49 (0) 7361 9978760
Mail: info@ad-case.de
Homepage: www.ad-case.de
Represented by Philip Frenzel
Cookies
Cookies are small data files that are transferred to your computer when you surf our site and have agreed to their use. Cookies only contain information that we send to your computer, personal data is not included. It is not possible to read out private data with cookies. Only pseudonymous information is stored in the cookies. With the help of cookies we can identify your computer. The most common browsers accept cookies by default. This setting can be adjusted in the respective security settings. We only store cookies on your computer after you have consented to this. If you refuse the storage of cookies, certain functions on our website may not be available or content may not be displayed correctly. Cookies are used by us for the following purposes:
For the use of your personal shopping cart
Data for recognition when you visit again, so that we can load your settings in the shopping cart (delivery type, country, payment method)
Data in connection with our social plugins
Data subjects can also revoke the setting of cookies and subsequently object to this permanently. For this purpose, the corresponding settings in the Internet browser used must be changed. Cookies that have already been set can be deleted by the Internet browser and other software. When deleting cookies that have already been set, certain functions on our website may no longer be available or content may no longer be displayed correctly. Affected persons can use this link to revoke their consent to the use of cookies.
Data security
All data transmitted to us is encrypted using SSL (Secure Sockets Layer) encryption technology. The data is sent to us as securely as possible and protected from access by third parties. In addition, we operate other security measures to protect your data and our website from unauthorized third parties, damage or destruction.
Collection of general data
Each time a data subject or another system calls up our website, our homepage collects a series of general data and information that is stored in the server’s log files. The following general data may be collected:
Internet browser used including version
Operating system used
The website from which the data subject accessed our homepage
Date and time of access
The IP address
The Internet service provider
Other information that serves to avert danger to our IT systems.
No data subjects are identified when using this general data. This data is used for
The correct provision of the contents of our website;
the optimization of our website;
the guarantee of our permanent operability of the website and IT systems;
providing information to law enforcement authorities in case of cyber attacks;
required. This anonymized For the use of the servers and services of our web hoster (webgo GmbH, Wandsbeker Zollstr. 95, 22041 Hamburg, Germany), we have concluded a contract for commissioned data processing and implement it strictly in accordance with the requirements of the DSGVO and the German data protection authorities.
Newsletter
We offer our users the opportunity to subscribe to our newsletter on our website. The personal data that are sent to the controller when ordering the newsletter result from the input mask, in the case of a customer account from the personal data stored in the customer account.
Customers and interested parties are informed at irregular intervals about innovations to the ADcase services via the newsletter. The newsletter is only sent to data subjects with a valid e-mail address and with the consent of the data subject.
The personal data collected in the context of ordering the newsletter will be used exclusively for the purpose of sending our newsletter, as well as for the notification of changes affecting the newsletter. No personal data collected as part of the newsletter service will be passed on to third parties. The subscription to our newsletter can be cancelled by the data subject at any time and without giving reasons. The consent to the storage of personal data for the newsletter dispatch can be revoked by the data subject at any time and without giving reasons. For the revocation, a link can be found in each newsletter.
The newsletter service is carried out by ourselves, so that no commissioned data processing takes place at this point.
Legal basis of processing
Art. 6 I lit. a DS-GVO serves our company as the legal basis for processing operations in which we obtain consent for a specific processing purpose. If the processing of personal data is necessary for the performance of a contract to which the data subject is a party, as is the case, for example, with processing operations that are necessary for a delivery of goods or the provision of another service or consideration, the processing is based on Art. 6 I lit. b DS-GVO. The same applies to such processing operations that are necessary for the implementation of pre-contractual measures, for example in cases of inquiries about our products or services. If our company is subject to a legal obligation by which the processing of personal data becomes necessary, such as for the fulfillment of tax obligations, the processing is based on Art. 6 I lit. c DS-GVO. In rare cases, the processing of personal data might become necessary to protect vital interests of the data subject or another natural person. This would be the case, for example, if a visitor were to be injured on our premises and as a result his or her name, age, health insurance data or other vital information had to be passed on to a doctor, hospital or other third party. Then the processing would be based on Art. 6 I lit. d DS-GVO. Finally, processing operations could be based on Art. 6 I lit. f DS-GVO. Processing operations that are not covered by any of the aforementioned legal bases are based on this legal basis if the processing is necessary to protect a legitimate interest of our company or a third party, provided that the interests, fundamental rights and freedoms of the data subject are not overridden. Such processing operations are permitted to us in particular because they were specifically mentioned by the European legislator. In this respect, it took the view that a legitimate interest could be assumed if the data subject is a customer of the controller (recital 47 sentence 2 DS-GVO).
Legal or contractual requirements to provide the personal data; necessity for the conclusion of the contract; obligation of the data subjects to provide the personal data; possible consequences of not providing the personal data.
At this point, we inform you that the provision of personal data is required for certain activities. These requirements are based in part on legal foundations (e.g. tax regulations) or on contractual regulations (e.g. information on the contractual partner). For a contract to be concluded, it is therefore necessary for data subjects to provide us with personal data. This personal data must be processed by us in the course of fulfilling the contract. In order to conclude a contract with our company, the data subject is consequently obliged to provide us with personal data. Failure to provide personal data would result in no contract being concluded. For further information on the provision of personal data, and whether provision is necessary in individual cases, the data subject may inquire with the controller. Please send inquiries in this regard by e-mail to info@ad-case.de or by post.
Storage period of personal data
We store personal data in accordance with the statutory retention periods. After expiry of the periods, corresponding data is routinely deleted. Exceptions to routine deletion are personal data that are still required for contract fulfillment or contract initiation.
Routine deletion and blocking of personal data
The data is stored within the legal time limits, or only for the period necessary to achieve the purpose of storage. Personal data that you provide to us for the processing of purchase and/or order transactions may be stored for up to ten years for reasons of commercial and tax law. After expiry of the periods, the personal data will be routinely blocked or deleted in accordance with the statutory provisions.
Disclosure of information to third parties
We share data only for required business activities, such as shipping and payment processing. Trading with personal data of data subjects is explicitly not part of our business. When passing on data, we take extreme care to ensure that the data transmitted is protected and not misused. Data is only passed on to third parties in the following cases:
Partner companies: We interact in business processes with some other companies. These business processes include, but are not limited to, shipping and processing payments. These companies need customer information to perform our services, or the services they provide. These companies are required to handle the information in accordance with German data protection laws.
Transfer of business shares: If ADcase is acquired in whole or in part by a third party, customer information may be transferred to the third party. However, the information must still be treated in accordance with this Privacy Policy unless otherwise expressly agreed to by you.
For Protective Reasons: If we are required by law, it is to enforce our Terms and Conditions, or we are required to protect the rights of third parties, we will share information with government agencies, companies, or the like. This is done only to protect rights and to protect against abuse and violations of the law, but not for commercial reasons.
Existence of automatic decision making
We do not use automatic decision-making or profiling.
Rights of the data subjects
1.) Right to confirmation
As a data subject, you have the right under the GDPR to request confirmation from the controller at any time as to whether personal data are being processed. If you as a data subject would like to exercise this right, an employee of the controller is available to you for this purpose at any time. Inform us about your request by mail to info@ad-case.de or by post.
2) Right to information
As a data subject, you have the right under the GDPR to receive at any time from the controller free information about the personal data stored about you and a copy of this information. This information contains information about
The purposes of processing
The categories of personal data that are processed
The recipients to whom the personal data have been disclosed
The planned duration for which personal data will be stored, if this is possible
The available data on the origin of the personal data
In addition, you as a data subject have the right to be informed whether personal data have been transferred to a third country or to an international organization, as well as which data have been transferred. If you as a data subject would like to exercise this right, an employee of the company responsible for processing is available to you for this purpose at any time. Inform us of your wish by mail to info@ad-case.de or by post.
3rd) Right to rectification
As a data subject, you have the right under the GDPR to request the immediate correction and/or completion of incorrect and/or incomplete personal data relating to you. If you as a data subject would like to exercise this right, an employee of the company responsible for the processing is available to you at any time. Inform us about your request by mail to info@ad-case.de or by post.
4) Right to erasure (right to be forgotten).
As a data subject, you have the right under the GDPR to request from the controller that the personal data concerning you be erased without undue delay, provided that one of the following reasons applies and thus processing is not necessary:
The data is no longer needed for the purpose for which it was collected
The data subject revokes his or her consent and there is no other legal basis for the processing
The data subject objects pursuant to Article 21(1) DSGVO and there are no overriding legitimate grounds for the processing.
The data subject objects pursuant to Art. 21 (2) DSGVO
The personal data are processed unlawfully
The erasure of the personal data is necessary for compliance with a legal obligation under EU or Member State law to which the controller is subject
The personal data was collected in relation to information society services offered pursuant to Article 8(1) of the GDPR.
If one of the aforementioned points applies and you would like to exercise this right as a data subject, an employee of the controller is available to you at any time. Inform us about your request by mail to info@ad-case.de or by post.
5) Right to restriction of processing
As a data subject, you have the right under the GDPR to request the controller to restrict the processing of your personal data if one of the following conditions is met:
The accuracy of the personal data is contested by the data subject. Restrict the processing for a period enabling the controller to verify the accuracy of the personal data.
The processing is unlawful, the data subject objects to the erasure of the personal data.
The controller no longer needs the personal data for processing, but the data subject needs them for the assertion, defense or exercise of legal claims.
The data subject has objected to the processing pursuant to Article 21(1) of the GDPR and it is not yet clear whether the legitimate grounds of the controller override those of the data subject.
If one of the aforementioned points applies and you would like to exercise this right as a data subject, an employee of the controller is available to you at any time. Inform us about your request by mail to info@ad-case.de or by post.
6) Right to data portability
As a data subject, you have the right under the GDPR to receive personal data concerning you, which has been provided by the data subject to a controller, in a structured, commonly used and machine-readable format. He or she also has the right to transmit this data to another controller without hindrance from the controller to whom the personal data was provided, provided that the processing is based on consent pursuant to Article 6(1)(a) DSGVO or Article 9(2)(a) DSGVO or on a contract pursuant to Article 6(1)(b) DSGVO and the processing is carried out with the aid of automated procedures, unless the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller. Furthermore, when exercising his or her right to data portability pursuant to Article 20(1) of the GDPR, the data subject has the right to obtain that the personal data be transferred directly from one controller to another controller, where technically feasible and provided that this does not adversely affect the rights and freedoms of other individuals. If you, as the data subject, would like to exercise this right, an employee of the controller is available to you at any time. Inform us about your request by mail to info@ad-case.de or by post.
7) Right of objection
As a data subject, you have the right under the GDPR to object to the processing of personal data collected under Article 6(1)(e) or (f) of the GDPR. This also concerns profiling based on these points. The processing of this data will be terminated immediately in the event of an objection, unless there are compelling legitimate grounds for processing which override the interests, rights and freedoms of the data subject, or the processing is for the purpose of asserting, exercising or defending legal claims. Furthermore, you as the data subject have the right to object on grounds relating to the processing of personal data concerning you, for scientific or historical research purposes, or for statistical purposes pursuant to Article 89(1) of the GDPR, unless such processing is necessary for the performance of a task carried out in the public interest. If you, as the data subject, wish to exercise this right, an employee of the controller is available to you at any time. Inform us of your wish by e-mail to info@ad-case.de or by post. The data subject is also free, in connection with the use of information society services, notwithstanding Directive 2002/58/EC, to exercise his or her right to object by means of automated procedures using technical specifications.
8) Automated decision in individual cases including profiling.
As a data subject, you have the right under the GDPR not to be subject to a decision based solely on automated processing (including profiling) which produces legal effects concerning him or her or similarly significantly affects him or her, unless the decision (1) is necessary for entering into, or the performance of, a contract between the data subject and the controller, or (2) is permitted by Union or Member State law to which the data controller is subject, and that law contains suitable measures to safeguard the data subject’s rights and freedoms and legitimate interests, or (3) is made with the data subject’s explicit consent. If the decision (1) is necessary for entering into, or the performance of, a contract between the data subject and the controller, or (2) it is made with the data subject’s explicit consent, the controller shall implement suitable measures to safeguard the data subject’s rights and freedoms and legitimate interests, which include at least the right to obtain the intervention of a data subject on the part of the controller, to express his or her point of view and contest the decision. If you, as a data subject, wish to exercise rights concerning automated decisions, an employee of the controller is available to you at any time. Inform us about your request by mail to info@ad-case.de or by post.
9) Right to revoke consent under data protection law.
As a data subject, you have the right under the GDPR to withdraw consent to the processing of personal data at any time. If you as a data subject would like to exercise this right, an employee of the company responsible for processing is available to you for this purpose at any time. Inform us of your wish by mail to info@ad-case.de or by post.
We use plugins of the social network Facebook (Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304 USA) on the website. The controller of personal data, if a data subject lives outside the USA or Canada, is Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. If you visit pages of our website with such a plugin, a connection to the Facebook servers is established. Through this connection, your browser can display the plugin on our website. In the course of this connection, the Facebook servers are informed which of our pages you are visiting. If you are logged in as a Facebook member, Facebook assigns this information to your personal Facebook user account. When interacting with the plugin (clicking the “Like” button, logging in using the Facebook account), this information is also assigned to your Facebook account. You can only avoid these assignments by logging out of your Facebook account before using the plugin. For more information on data protection and privacy, please refer to Facebook’s privacy policy, which can be found at https://de-de.facebook.com/about/privacy/.
We use plugins of the audiovisual platform Instagram (Instagram LLC, 1 Hacker Way, Building 14 First Floor, Menlo Park, CA, USA) on the website. If you visit pages of our website with such a plugin, a connection to the Instagram servers is established. Through this connection, your browser can display the plugin on our website. In the course of this connection, the Instagram servers are informed which of our pages you are visiting. If you are logged in as an Instagram member, Instagram assigns this information to your personal Instagram user account. When you interact with the plugin, this information is also assigned to your Instagram account. You can only avoid these assignments by logging out of your Instagram account before using the plugin. For more information on data protection and privacy, please refer to Instagram’s privacy policy which can be found at https://help.instagram.com/155833707900388zu.
We use plugins of the social network Twitter (Twitter Inc., 1355 Market Street, San Francisco, CA 94103 USA) on the website. If you visit pages of our website with such a plugin, a connection to the Twitter servers is established. Through this connection, your browser can display the plugin on our website. In the course of this connection, the Twitter servers are informed which of our pages you are visiting. If you are logged in as a Twitter member, Twitter assigns this information to your personal Twitter user account. When interacting with the plugin (logging in using the Twitter account), this information is also assigned to your Twitter account. You can only avoid these assignments by logging out of your Twitter account before using the plugin. For more information on data protection and privacy, please refer to Twitter’s privacy policy, which you can find at the following link: https://twitter.com/privacy?lang=de
Tracking tools (Google Analytics)
We use Google Analytics, a web analytics service provided by Google Inc, 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA, on our website for marketing and analysis purposes. The collected data is stored under pseudonymized usage profiles. The functionality of Google Analytics is explained below. We expressly do not use the tracking tools to collect personal data, pass it on to third parties or link it to your personal contact data. Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of this website (including your IP address, which is, however, anonymized using the _anonymizeIp() method so that it can no longer be assigned to a connection) is transmitted to a Google server in the USA and stored there. Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage.