1) Information about collecting personal data and the contact details of the controller
1.1 We are happy that you are visiting our website and thank you for your interest. Below we inform you of how we process your personal data when you use our website. Personal data means all data based on which you can be personally identified.
1.2 The controller for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Wemefa H. Christopeit GmbH, Steinbrink 3, 42555 Velbert, Germany, Tel.: +49 (0)2052 – 887 01, Email: info [at] wemefa [dot] de. The controller responsible for the processing of personal data is the natural or legal person, public authority, agency or other body which alone or jointly with other controllers decides on the purposes and means of processing personal data.
1.3 This website uses SSL/TLS encryption for reasons of security and to protect the transfer of personal data and other confidential contents (e.g. orders or enquiries to the controller). You can identify an encrypted connection by the sequence of characters "https://" and the padlock symbol in your browser address bar.
2) Data collection when you visit our website
If you visit our website merely for information purposes, i.e. if you do not register or send us information in any other way, we only collect the data which your browser sends to our server (so-called "server log files"). When you access our website, we collect the following data which are technically required for us to display our website to you:
This processing is in line with Art. 6 para. 1 lit. f GDPR based on our legitimate interest in improving the stability and functionality of our website. No data are transferred or used otherwise. However, we reserve the right to check the server log files retrospectively if there is any concrete evidence to suggest illegitimate use.
4) Making contact
When you contact us (e.g. using the contact form or by email), your personal data are collected. Which data are collected in the case of a contact form can be seen from the respective contact form. These data are stored and used exclusively for the purpose of answering your request or for contacting you and the associated technical administration. The legal basis for the processing of the data is our legitimate interest in answering your query in accordance with Art. 6 para. 1 lit. f GDPR. If the aim of making contact is the conclusion of a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b GDPR. The data are deleted after your query has been conclusively processed; this is the case if it is apparent from the circumstances that the given situation has been conclusively resolved and this is not contrary to any legal retention obligations.
5) Using social media: Videos
Use of YouTube videos
This website uses the YouTube embedding function to display and play videos by the provider "YouTube" who is part of Google LLC., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google").
This involves using the extended data protection mode which, according to the provider, only triggers saving of user information when the video is played. If you start the embedded YouTube videos, the provider "YouTube" sets cookies to collect information about user behaviour. According to the information provided by "YouTube", these are used e.g. to record video statistics, improve user friendliness and prevent abuse. If you are logged into Google, your data are allocated directly to your account when you click on a video. If you do not want this information to be allocated to your YouTube profile, you must log out before enabling this button. Google saves your data (including for users who are not logged in) as user profiles and evaluates them. This evaluation is performed especially in accordance with Art. 6 para. 1 lit. f GDPR on the basis of Google's legitimate interest in displayed personalised advertising, market research and/or tailored website design. You have the right to object to the creation of such user profiles, but to exercise this right, you must contact YouTube.
Independently of whether you play the embedded videos, every access to this website establishes a link to the Google network "DoubleClick" which can trigger additional data processing procedures which we cannot influence.
Google LLC with headquarters in the USA is certified under the US-European data protection treaty "Privacy Shield" which ensures compliance with the data security level applicable in the EU.
For more information about data protection at "YouTube", see the provider's data privacy statement at: www.google.de/intl/de/policies/privacy
6) Tools and miscellaneous
6.1 Google reCAPTCHA On this website, we also use the reCAPTCHA function by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). This function particularly serves to distinguish whether an entry is made by a natural person or whether a machine attempts abuse through automated processing. The service includes sending the IP address and, if applicable, additional data required by Google for the reCAPTCHA service to Google, which is done in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in determining the individual intention of actions on the internet and of avoiding abuse and spam. Google LLC with headquarters in the USA is certified under the US-European data protection treaty "Privacy Shield" which ensures compliance with the data security level applicable in the EU. Further information on Google reCAPTCHA and on the Google privacy statement is available here: www.google.com/intl/de/policies/privacy/
6.3 Google Web Fonts This website uses so-called web fonts by Google LLC., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google") to ensure that fonts are displayed consistently. When you visit a site, your browser downloads the required web fonts to your browser cache in order to display texts and fonts correctly. For this purpose, the browser used by you must establish a link to the Google servers. This provides Google with the information that your IP address was used to access our website. The use of Google Web Fonts is in the interest of a consistent, appealing presentation of our online offers. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR. If your browser does not support web fonts, your computer will use a standard font. Google LLC with headquarters in the USA is certified under the US-European data protection treaty "Privacy Shield" which ensures compliance with the data security level applicable in the EU. For more information about Google Web Fonts, see developers.google.com/fonts/faq and the Google Data Privacy Statement: www.google.com/policies/privacy/
7) Rights of the data subject
7.1 Applicable data protection law grants you extensive rights as the data subject towards the controller regarding processing of your personal data (right to information and intervention) of which we inform you below:
Right to information pursuant to Art. 15 GDPR: In particular, you have a right to information about your personal data processed by us, the purposes of the processing, the categories of the processed personal data, the recipients or categories of recipients to whom your data were or are being disclosed, the planned storage duration or the criteria for determining the storage duration, the existence of the rights to correction, erasure, restriction of processing, objection to the processing, to lodge a complaint with a supervisory authority, the origin of your data if they were not collected from you, the existence of an automatic decision-making process including profiling and, if applicable, meaningful information about the logic involved and the affected scope and intended consequences of such processing as well as your right to information about which guarantees apply pursuant to Art. 46 GDPR regarding forwarding of your data to third countries;
Right to correction pursuant to Art. 16 GDPR: You have the right to immediate correction of any incorrect data relating to you and/or to completion of any of your data saved by us which are incomplete;
Right to erasure pursuant to Art. 17 GDPR: You have the right to demand erasure of your personal data if the conditions of Art. 17 para. 1 GDPR are met. However, this right does not apply particularly if the processing is required to exercise the right to freedom of expression and information, to perform a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims;
Right to restriction of processing pursuant to Art. 18 GDPR: You have the right to demand that processing of your personal data be restricted, while the correctness of your data as disputed by you is investigated, if you decline deletion of your data due to illegal processing of the data and instead demand that the processing of your data be restricted, if you require your data in order to assert, exercise or defend legal claims, when we no longer need the data to achieve our purpose or if you have submitted an objection for reasons relating to your specific situation, for as long as it is not yet clear whether this is outweighed by our legitimate reasons;
Right to information pursuant to Art. 19 GDPR: If you have asserted the right to correction, erasure or restriction of processing towards the controller, the latter is obligated to inform all recipients to whom the data relating to you have been disclosed, of this correction or erasure of the data or of the restriction of processing, except where this proves to be impossible or would involve disproportionate efforts. You have the right to be informed of these recipients.
Right to data portability pursuant to Art. 20 GDPR: You have the right to receive your personal data that you have provided to us in a structured, commonly used, machine-readable format or to demand transmission to another controller, where technically feasible;
Right to object to the consent granted pursuant to Art. 7 para. 3 GDPR: You have the right to revoke consent granted for processing of your data at any time effective for the future. In the event of a revocation, we will delete the relevant data immediately, unless further processing can be based on a legal basis for processing without consent. Revoking your consent does not affect the legality of any processing up to the revocation;
Right to complain pursuant to Art. 77 GDPR: If you are of the opinion that the processing of your personal data infringes the GDPR, you – without prejudice to any other administrative or judicial remedy – have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement.
7.2 RIGHT TO OBJECT IF WE PROCESS YOUR PERSONAL DATA AS PART OF A BALANCING OF INTERESTS BASED ON OUR DOMINANT LEGITIMATE INTEREST, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THIS PROCESSING FOR REASONS RESULTING FROM YOUR SPECIFIC SITUATION WITH EFFECT FOR THE FUTURE. IF YOU MAKE USE OF YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING OF THE RESPECTIVE DATA. BUT WE RESERVE THE RIGHT TO FURTHER PROCESSING IF WE CAN PRESENT COMPELLING GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, BASIC RIGHTS AND BASIC FREEDOMS OR IF THE PROCESSING SERVES THE PURPOSE OF ASSERTING, EXERCISING OR DEFENDING LEGAL CLAIMS. IF WE PROCESS YOUR PERSONAL DATA TO DISTRIBUTE DIRECT ADVERTISING, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR RESPECTIVE PERSONAL DATA FOR THE PURPOSE OF SUCH ADVERTISING. YOU CAN EXERCISE YOUR OBJECTION AS DESCRIBED ABOVE. IF YOU MAKE USE OF YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING OF THE RESPECTIVE DATA FOR DIRECT ADVERTISING PURPOSES.
8) Storage duration of your personal data
The storage duration of personal data is determined based on the respective statutory storage period (e.g. the storage periods under commercial or tax law). After the period ends, the corresponding data are routinely deleted, if they are no longer for contract performance or to prepare a contract and/or we no longer have a legitimate interest in longer storage.
Information about the Data Protection Officer
Wemefa GmbH has appointed an external Data Protection Officer, Mr Arndt Halbach from the company GINDAT GmbH (Association for IT Standards and Data Protection) who can be reached via our data protection email address, datenschutz(at)wemefa.de.
If you are dissatisfied with the data protection measures presented here or if you have any questions regarding the collection, processing and/or use of your personal data, we look forward to hearing from you. We will make every effort to answer your questions and implement your suggestions as quickly as possible, simply contact our Data Protection Office (Arndt Halbach) on datenschutz(at)wemefa.de.
Liability for own content
The contents of these pages were compiled with the utmost care. Nevertheless, we cannot accept liability for the correctness, completeness and up-to-dateness of the contents. As a service provider, we are responsible for our own contents on these pages pursuant to § 7 I of the Telemedia Act (TMG) in line with general laws.
The controller within the meaning of § 3 (7) of the German Federal Data Protection Act (BDSG) is:
Last updated: 14/12/2018