Data protection

§ 1 § 1 General

Your personal data (e.g. title, name, address, e-mail address, telephone number, bank details, credit card number) will only be processed by us in accordance with the provisions of German data protection law and the data protection law of the European Union (EU). In addition to the processing purposes, recipients, legal bases and storage periods, the following provisions also inform you about your rights and the person responsible for your data processing. This data protection statement only refers to our website. If you are directed through links on our pages to other pages, please make yourself aware about the handling of your data on those pages.

§ 2 § 2 Data processing for contract fulfilment

(1) Purpose of processing

Your personal data, which you make available to us in the ordering process, is required for the conclusion of a contract with us. However, you are not obliged to provide your personal data. We cannot send you the goods without your address. For some payment methods we require the necessary payment data in order to pass them on to a payment service provider commissioned by us The processing of your data entered in the order process is therefore carried out for the purpose of fulfilling the contract.

If you send us an enquiry by e-mail, via a contact form, etc. before the conclusion of the contract, we process the data received in this way for the purpose of carrying out pre-contractual measures and answering your questions about our products, for example.

If you open a customer account, your data (in particular name, address, payment method, e-mail and password) will be processed for registration and creation of a customer login. With the stored data, you can shop with us more quickly and view your orders at any time. You can remove the account by sending us a message or using the delete function.

(2) Legal basis

The legal basis for this processing is Art. 6 para. 1 b) GDPR.

(3) Recipient categories
Payment service provider, shipping service provider, hosting provider, if applicable merchandise management system,
if applicable suppliers (dropshipping).

(4) Storage period
We store the data required for processing the contract until the expiry of the statutory warranty and, if applicable,
contractual guarantee periods.

We store the data required under commercial and tax law for the legally specified periods, usually ten years (cf. § 257
HGB, § 147 AO).The data processed for the implementation of pre-contractual measures will be deleted as soon as the measures have been carried out and it is evident that no contract is concluded.

§ 3 § 3 Web analysis with Google Analytics

(1) Purpose of processing

This website uses Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google Analytics uses so-called “cookies”, i.e. small text files that are stored to your computer and facilitate an analysis of the way you use the website. The information generated by the cookie about your use of the website will be transmitted to and stored by Google on servers in the United States. In the
event that IP anonymisation is activated on this website, however, your IP address will be truncated beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator.

(2) Legal basis

The legal basis for this processing is Art. 6 (1a) GDPR.

(3) Recipient categories
Google and its partner companies.

(4) Transfer to a third country

Google Ireland Limited is a company affiliated with Google LLC. Google LLC is located in the USA (1600 Amphitheatre Parkway, Mountain View, CA 94043).

(5) Storage period unlimited

(6) RIGHT OF OBJECTION

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) by Google and the processing of this data by Google by downloading and installing the browser plugin available under the following link: optout.

You can also prevent the collection of data by setting an opt-out cookie. If you would like to prevent the future collection of your data when visiting this website, please click here: Google Analytics de-activate

§ 4 § 4 Information about Google Maps

(1) Purpose of processing

This website uses Google Maps to provide important
information about our locations. For example, you can directly see where our company or the different plants are located, plan routes or get directions.

The information collected through the use of Google Maps is generally transferred to a Google server in the USA and stored there. The information collected includes search terms entered, your IP address and, for example, latitude and longitude coordinates.

(2) Legal basis

The legal basis for this processing is Art. 6 (1a) GDPR.

(3) Recipient categories
Google and its partner companies.

(4) Transfer to a third country
Google Ireland Limited is a company affiliated with Google LLC. Google LLC is located in the USA (1600 Amphitheatre Parkway, Mountain View, CA 94043).

(5) RIGHT OF OBJECTION

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also delete collected activity data via your Google account

§ 5 5 Information about YouTube

(1) Purpose of processing

This website uses YouTube, a company of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland, to display and play videos of our company, products and services on the website.

The procedure is optimised in such a way that it helps to save data volume, especially on mobile devices, compared to the integration of videos on the web server. For this purpose, the browser you use must connect to Google’s servers. Google processes, among other things, your data, such as your IP address and, if applicable, your user name, e-mail address and telephone number.

(2) Legal basis

The legal basis for this processing is Art. 6 (1a) GDPR.

(3) Recipient categories
Google and its partner companies.

(4) Transfer to a third country

Google Ireland Limited is a company affiliated with Google LLC. Google LLC is located in the USA (1600 Amphitheatre Parkway, Mountain View, CA 94043).

§ 6 Information about cookies

(1) Purpose of processing

Technically necessary cookies are used on this website. These are small text files that are stored in or by your Internet browser on your computer system. These cookies make it possible, for example, to place several products in a shopping basket.

(2) Legal basis

The legal basis for this processing is Art. 6 (1) f) GDPR.

(3) Legitimate interest

Our legitimate interest is the functionality of our website.
The user data collected through technically necessary cookies are not used to create user profiles. This protects your interest in data protection.

(4) Storage period

Technically necessary cookies are usually deleted when the browser is closed. Permanently stored cookies have a varying lifespan from a few minutes to several years.

(5) RIGHT OF OBJECTION

If you do not wish these cookies to be stored, please deactivate the acceptance of these cookies in your Internet browser. However, this may result in a functional restriction of our website. You can also delete permanently stored cookies at any time via your browser.

§ 7 Information about Google reCAPTCHA

(1) Purpose of processing

Google reCAPTCHA” (hereinafter referred to as “reCAPTCHA”) is used on this website. The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”).

The purpose of reCAPTCHA is to check whether the data input on this website (e.g. in a contact form) is made by a human being or by an automated programme. To do this, reCAPTCHA analyses the behaviour of the website visitor based on various characteristics. This analysis begins automatically as soon as the website visitor enters the website. For the analysis, reCAPTCHA evaluates various information (e.g.
IP address, the length of time the website visitor spends on the website or the
mouse movements made by the user). The data collected during the analysis will be forwarded to Google.

The reCAPTCHA analyses run entirely in the background. Website visitors are not informed that an analysis is taking place.

(2) Legal basis

The legal basis for this processing is Art. 6 (1) f) GDPR. (3) Legitimate interest
The website operator has a legitimate interest in protecting its web offers from abusive automated spying and from SPAM.

(4) Further information

Further information on Google reCAPTCHA and Google’s data protection statement can be found in the following links:  https://www.google.com/intl/de/policies/privacy/ and https://www.google.com/recaptcha/intro/android.html.

§ 8 Your rights as a data subject

If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights vis-à-vis us as the controller:

(1) Right of access

You can request information about your personal data processed by us within the scope of Art. 15 GDPR.

(2) Right to rectification

If the information concerning you is not (or is no longer) correct, you can request a correction in accordance with Art. 16 GDPR. If your data is incomplete, you can request that it be completed.

(3) Right to deletion

You can demand the deletion of your personal data under the conditions of Art. 17 GDPR.

(4) The right to restrict processing

You have the right to request a restriction of the processing of the data concerning you under the conditions of Art. 18 GDPR.

(5) Right to data portability

Pursuant to Art. 20 GDPR, you have the right to receive the personal data relating to you that you have provided to us in a structured, common and machine-readable format or to request that it be transferred to another controller.

(6) Right to revoke the declaration of consent under data protection law

In accordance with Art. 7 (3) GDPR, you have the right to revoke your declaration of consent under data protection law at any time. This does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.

(7) Right to complain to a supervisory authority

If you are of the opinion that the processing of personal data concerning you violates the GDPR, you have the right to lodge a complaint with a supervisory authority pursuant to Art. 77 of the GDPR.
GDPR, you have the right to lodge a complaint with a supervisory authority (in particular in the member state of your place of residence, your place of work or the place of the alleged infringement).

Please also note your right to object under Article 21 of the GDPR: (1) General: reasoned objection required.
If the processing of personal data relating to you is carried out

– to protect our overriding legitimate interest (legal basis according to Art. 6 (1e) of the GDPR) or
– in the public interest (legal basis under Art. 6(1)(e) GDPR), you have the right to object to the processing at any time on grounds
relating to your particular situation; this also applies to profiling based on the provisions of the GDPR.
In the event of an objection, we will no longer process the personal data relating to you unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the assertion, exercise or defence of legal claims.

(2) Special case of direct marketing: simple objection is sufficient

If the personal data concerning you is processed for the purpose of direct marketing, you have the right to object to this processing at any time and without stating reasons; this also applies to profiling, insofar as it is connected with such direct marketing.

If you object to your data being processed for direct marketing purposes, your personal data will no longer be processed for such purposes.

Person responsible for data processing:

Franz Kaminski Waggonbau GmbH Kuhbrückenstraße 25
31785 Hameln, Germany
Phone: +49 5151 / 4008-0 info@kaminski-hameln.de

Our data protection officer’s contact details are:

Kuhbrückenstrasse 25
31785 Hameln, Germany
Grosser.DSB@kaminski-hameln.de