 

Privacy Policy

I. Name and address of the party responsible for this website

The party responsible for this website in accordance with the General Data Protection Regulation and other national data protection legislation of member states of the European Union as well as other data protection regulations is:

SLG Prüf- und Zertifizierungs GmbH
Burgstädter Straße 20
09232 Hartmannsdorf
Germany
Tel.: +49 3722 73 23 0
E-Mail:
Website:
www.slg.de.com

We have appointed a data protection officer for our company who can be contacted via the following email address:

 

II. General information about data processing

1. Scope of processing personal data

We will only process personal data of our users in order ensure providing a functional website for our users as well as our contents and services. We will only process your personal data as far as this is necessary to provide a functional website as well as our contents and services. As a basic rule, we will only process your personal data with your consent. An exception applies in cases where prior consent cannot be obtained for practical reasons and legal provisions allow the processing of personal data.

2. Legal grounds for processing personal data

In cases where we ask you for your consent for processing your personal data, Article 6 paragraph 1 lit. a GDPR is the legal ground.

When we process personal data necessary to fulfill a contract of which the person is one party, Article 6 paragraph 1 lit. b GDPR applies as the legal ground. This shall also apply for processing data necessary for precontractual measures.

In cases where data processing is necessary to fulfill a legal obligation to which our company is subject, Article 6 paragraph 1 lit. c GDPR applies as the legal ground.

In cases where your vital interests or those of another person need to be protected by processing personal data, Article 6 paragraph 1 lit. d GDPR is the legal ground.

When we process personal data for purposes of the legitimate interests of our company or a third party except where such interests are overridden by your interests or fundamental rights and freedoms, Article 6 paragraph 1 lit. f GDPR applies as the legal ground.

3. Data erasure and storage period

We will erase or lock your personal data as soon as they are no longer necessary in relation to the purposes for which they were processed. Holding your data beyond this point may be necessary when we are obliged to do so due to European or national laws and legal regulations. We will also lock or erase your personal data when a retention period defined in afore mentioned laws and regulations expires unless we are obliged to hold those data for the conclusion or fulfilling of a contract.

 

III. Providing the website and creation of logfiles

1. Description and scope of processing personal data

Each time you visit our website the hosting system automatically collects data and information from the device calling. The following data are collected:

(1) type and version of your browser
(2) the operating system you use
(3)  Referrer URLs
(4) Host name of the calling device
(5) your IP address
(6) Time of server query

Data are also stored in the logfiles of the hosting system, however this does not apply to your IP address or other data which may be used for identification purposes. These data will not be stored in combination with any other of your personal data.

2. Legal grounds for processing personal data

Legal ground of temporary storage of logfiles is Article 6 paragraph 1 lit. f GDPR.

3. Purpose of processing personal data

The temporary storage of your IP address by the hosting system is necessary to supply our website to your device. The system will store your IP address until you leave our website.

Storing data in logfiles ensures the functionality and optimisation of our website as well as the safety and security of our IT systems. We will not use these data in relation with any marketing communications purposes.

Those purposes justify our legitimate interest of processing data according to Article 6 paragraph 1 lit. f GDPR.

4. Storage period

Data are erased as soon as they are no longer necessary in relation to the purposes for which they were processed. In case of collecting data for providing our website these are erased when you leave the website.

Data which are stored in logfiles are erased after ten days. However, data may be kept beyond this point. In those cases your IP address is erased or masked so that assigning it to the calling device not possible.

5. Option to object

Collection of data in order to provide our website and storing data in logfiles in order to ensure its functionality is mandatory. In this instance you may not use the option to object.

 

IV. Use of cookies

1. Description and scope of processing personal data

Our website uses cookies. These are small text files which are stored by the internet browser on your device. A cookie may be stored on your system when you visit a website. It contains a characteristic string of characters which will recognise your browser when you visit the same website again.

We use cookies to make our website more user-friendly. Some parts of our website need to recognise your browser after switching pages. Those cookies store and submit settings such as your preferred language.

Other cookies may be used to analyse your surfing behaviour submitting for instance the frequency of page impressions or keywords users search for.

Data collected in this way are pseudonymised using technical precautions. Thus, data cannot be assigned to the user visiting our website and will not be stored in combination with any other of your personal data.

2. Legal grounds for processing personal data

Legal ground for processing personal data by using cookies is Article 6 paragraph 1 lit. f GDPR.

3. Purpose of processing personal data

The purpose of using so-called technically necessary cookies is to make the usage of websites easier for the user. Some functionalities of our website cannot be provided without the use of cookies which recognise the browser after you switch pages. We may need cookies for settings such as your preferred language or to remember search strings.

We do not use the personal data collected by technically necessary cookies for creating a user profile.

We use cookies for analysing purposes in order to improve the quality of our website and its contents. We learn how our website is used and are able to optimise our website continuously (see also chapter VII Web analysis using Google Analytics).

Those purposes justify our legitimate interest of processing data according to Article 6 paragraph 1 lit. f GDPR.

4. Storage period and option to object

Cookies are stored on your device and submitted to our website. Therefore you have complete control of how the cookies are used. By changing your browser settings you can deactivate or restrict the submitting of cookies on a case-to-case-basis. Those cookies already stored on your device can be deleted at any time. You can configure your browser to automatically accept cookies under certain conditions or always reject them or delete them when closing your browser. Disabling cookies may limit the functionality of our website.

 

V. Newsletter

1. Description and scope of processing personal data

On our website, you can subscribe to our newsletter which is free of charge. If you register, data from filling in our entry form are submitted. On our website this is your email address. Additionally, the follwing data are collected at registration:

(1) IP address of the calling device
(2) Date and time of registration

In order to process your personal data we ask for your consent during the registration process and refer to this privacy policy.

We will not disclose any information to third parties in relation with processing the data for sending the newsletter to our subscribers. Data will exclusively be held for dispatching the newsletter.

2. Legal grounds for processing personal data

Legal ground for processing personal data after subscribing to our newsletter and your consent has been obtained is Article 6 paragraph 1 lit. a GDPR.

3. Purpose of processing personal data

We use your email address to deliver our newsletter to you. We collect other personal data during the registration process in order to prevent misuse of services or the email address used.

4. Storage period

Data are erased as soon as they are no longer necessary in relation to the purposes for which they were processed. Therefore, we hold your email address as long as you are a subscriber to our newsletter.

5. Option to object

You can cancel the subscription to our newsletter at any time. Every time we send you a newsletter it contains a link to unsubscribe. By cancelling your subscription you revoke your consent to processing your personal data collection during the registration process.

 

VI. Contact via email

1. Description and scope of processing personal data

On our website, we offer the possibility to contact us using the email addresses provided. In this case your personal data submitted in your email to us are being processed.

We will not disclose any information to third parties. Data submitted will be exclusively used for processing the communication.

2. Legal grounds for processing personal data

Legal ground for processing personal data submitted by sending an email is Article 6 paragraph 1 lit. f GDPR. In case the email contact is aimed at completion of a contract, the additional legal ground for processing data is Article 6 paragraph 1 lit. b GDPR.

3. Purpose of processing personal data

We process your personal data collected from your email in order to deal with your enquiry as well as a justified interest in processing your data in order to initiate or complete a business contract.

4. Storage period

Data are erased as soon as they are no longer necessary in relation to the purposes for which they were processed.

5. Option to object

If you contact us via email you can object to the storage of your personal data at any time. In this case we cannot continue any communication. All personal data collected from your email are erased.

 

VII. Web analysis using Google Analytics

This website uses functionalities of Google Analytics, a web analysis service. It is operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Google Analytics uses cookies (for cookies see chapter IV Use of cookies). The information generated by the cookie about your use of our website is usually transmitted to a Google server in the United States of America and stored there.

1. Legal grounds for processing personal data

Google Analytics cookies are stored based on Article 6 paragraph 1 lit. f GDPR.

2. Purpose of processing personal data

Processing personal data of users enables us to analyse the surfing behaviour of our users. Evaluating those data helps us to optimise our website and make it more user-friendly. Those purposes justify our legitimate interest of processing data according to Article 6 paragraph 1 lit. f GDPR.

We have activated the IP anonymisation feature on our website. Your IP address will be shortened by Google within the European Union or other parties to the agreement on the European Economic Area prior to transmission to the United States. Only in exceptional cases the full IP address is sent to a Google server in the United States and shortened there. Google will use this information on behalf of the operator of this website to evaluate your use of the website, to compile reports on website activity and to provide other services regarding website and internet usage for the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with any other data held by Google.

3. Option to object

You can prevent these cookies being stored by selecting the appropriate settings in your browser. However, we wish to point out that doing so may mean you will not be able to enjoy the full functionality of this website. You can also prevent the data generated by cookies about your use of the website (incl. your IP address) from being passed to Google, and the processing of these data by Google, by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en.

You can prevent the collection of your data by Google Analytics by clicking on the following link. An opt-out cookie will be set to prevent your data from being collected on future visits to this site: Disable Google Analytics.

For more information about how Google Analytics handles user data, see Google's privacy policy: https://support.google.com/analytics/answer/6004245?hl=en.

Outsourced data processing

We have entered into an agreement with Google for the outsourcing of our data processing and fully implement the strict requirements of the German data protection authorities when using Google Analytics.

 

VIII. Use of plugins and tools

1. YouTube

Our website uses plugins from YouTube, which is operated by Google. The operator of the pages is YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA.

If you visit one of our pages featuring a YouTube plugin, a connection to the YouTube servers is established. Information about which of our pages you have visited is submitted to the server. In case you are logged in to your YouTube account, you allow YouTube to associate your browsing behaviour directly with your personal profile. You can prevent this by logging out of your YouTube account.

Legal grounds for and purpose of processing personal data

The purpose of using is to present appealing content to the user. This justifies our legitimate interest of processing data according to Article 6 paragraph 1 lit. f GDPR.

Further information about handling user data, can be found in the data protection declaration of YouTube at https://www.google.de/intl/de/policies/privacy.

2. Google Web Fonts

For a consistent appearance, our website uses web fonts provided by Google. When you open a page, your browser will upload the required web fonts into your browser cache in order to correctly display texts and fonts.

Legal grounds for and purpose of processing personal data

For correctly displaying texts and fonts your browser need to connect to Google servers. Thus, Google becomes aware that our website was accessed via your IP address. The purpose of using Google Web fonts is providing you with a consistent and appealing appearance of our website. This justifies our legitimate interest of processing data according to Article  6 paragraph 1 lit. f GDPR. In case your browser does not support web fonts a standard font is used by your device.

Further information about handling user data, can be found at https://developers.google.com/fonts/faq and in Google's privacy policy at https://www.google.com/policies/privacy/.

3. Google Maps

This site uses the map service Google Maps via an API. It is operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Legal grounds for and purpose of processing personal data

The purpose of using Google Maps is to provide you with an appealing appearance and to easily find us at one of the locations specified on our website. This justifies our legitimate interest of processing data according to Article 6 paragraph 1 lit. f GDPR.

In order to use the functionalities of Google Maps your IP address needs to be stored. This information is generally submitted to a Google server in the United States and stored there. The operator of this website does not have any influence on this data transfer.

Further information about handling user data, can be found in the data protection declaration of Google at https://www.google.de/intl/de/policies/privacy/.

 

IX. Your rights with regard to your personal data

In case we process personal data about you, you are a person affected according to GDPR. You are entitled to the following rights towards the party responsible:

1. Right of access

You may demand a confirmation from us whether we process any personal data about you and request a machine-readable copy of your personal data.

You are entitled to request information about whether any of your personal data are transferred to a third country or an international organisation. You have the right to be informed of the appropiate safeguards according to Article 46 GDPR in relation to the transfer.

2. Right to rectification

You are entitled to correction and/or completion towards the party responsible as long as your personal data are incorrect or incomplete. The party responsibly shall correct your personal data without undue delay.

3. Right to restriction of processing

You are entitled to restrict the processing of your personal data. In case the processing of these data was restricted, they shall only be processed, with the exception of storage, with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State. If you have obtained restriction of processing, you shall be informed by the party responsible before the restriction of processing is lifted.

4. Right to erasure

You may request of the party responsible to delete your personal data without undue delay. The right to erasure does not apply for compliance with a legal obligation which requires processing by Union or Member State law to which the party responsible is subject to.

5. Right to data portability

You are entitled to obtain personal data which we process based on your consent or in fulfillment of a contract automatically delivered to yourself or to a third party in a standard, machine-readable format. If you require the direct transfer of data to another responsible party, this will only be done to the extent technically feasible.

6. Right to object

You are entitled to object on grounds relating to your particular situation at any time to processing of your personal data based on Article 6 paragraph 1 lit. e or f GDPR.

The party responsible shall no longer process your personal data unless the party responsible can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims.

7. Right to withdraw your declaration of consent

You are entitled to withdraw your declaration of consent at any time. The legitimacy of processing data on the basis of your consent prior to withdrawing it shall not be affected.

8. Right to file a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you are entitled to file a complaint with a supervisory authority, in particular in the Member State of your residence, your place of work or place of the alleged infringement if you consider that the processing of your personal data infringes this Regulation.

The supervisory authority with which the complaint has been filed shall inform the complainant on the progress and the outcome of the complaint including the possibility of a judicial remedy according to Article 78 GDPR.

Privacy Information for customers

Privacy Information acc. to Article 13 GDPR