Data Privacy Statement

1. Name and address of the party responsible

a) The responsible party

The responsible party within the meaning of the General Data Protection Regulation and other national data protection laws of the member states of the European Union as well as other data protection regulations is:

STEIN INJECTION TECHNOLOGY GmbH

Managing Director: Sebastian Stein / Willi Stein

Hagener Str. 20 - 24

58285 Gevelsberg

Germany

Phone: +49 / (0) 2332 / 75742-0

Fax: +49 / (0) 2332 / 75742-40

E-mail: stein@sit-gmbh.net

Website: www.sit-gmbh.net

2. Explanations of terms

We have designed our data protection declaration according to the principles of clarity and transparency. However, if there are any ambiguities regarding the use of various terms, the relevant definitions can be found here

[https://dsgvo-gesetz.de/art-4-dsgvo/].

3. Legal basis for the processing of personal data

We only process your personal data, such as your surname and first name, your e-mail address and IP address, etc., if there is a legal basis for doing so.  Here, according to the General Data Protection Regulation, the following regulations in particular come into consideration:

- Art. 6 para. 1 sentence 1 lit. a DSGVO: The data subject has given consent to the processing of personal data relating to him or her for one or more specific purposes.

- Art. 6 para. 1 sentence 1 lit. b DSGVO: Processing is necessary for the performance of a contract to which the data subject is party or for the implementation of pre-contractual measures taken at the request of the data subject.

- Art. 6 para. 1 sentence 1 lit. c DSGVO: Processing is necessary for compliance with a legal obligation to which the controller is subject.

- Art. 6 para. 1 p. 1 lit. d DSGVO: Processing is necessary in order to protect the vital interests of the data subject or another natural person

- Art. 6 (1) p. 1 lit. e DSGVO: processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller

- Article 6(1)(1)(f) DSGVO: processing is necessary for the purposes of the legitimate interests of the controller or a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require the protection of personal data, in particular where the data subject is a child.

However, at the relevant points in this data protection declaration, we will always point out once again the legal basis on which the processing of your personal data takes place.

4. Passing on personal data

The passing on of personal data is also processing in the sense of the previous point 3. However, we would like to inform you again separately at this point about the subject of passing on to third parties. The protection of your personal data is very important to us. For this reason, we are particularly careful when it comes to passing on your data to third parties.

We therefore only pass on data to third parties if there is a legal basis for the processing. For example, we share personal data with persons or companies that act as processors for us in accordance with Article 28 of the GDPR. A processor is anyone who processes personal data on our behalf - i.e. in particular in an instruction and control relationship with us.

In accordance with the requirements of the GDPR, we conclude a contract with each of our processors to oblige them to comply with data protection regulations and thus provide comprehensive protection for your data.

5. Storage period and deletion

Your personal data will be deleted by us if it is no longer necessary for the purposes for which it was collected or otherwise processed, the processing is not necessary to exercise the right to freedom of expression and information, to comply with a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims.

6. SSL encryption

This site uses SSL encryption for reasons of security and to protect the transmission of confidential content, such as enquiries that you send to us as site operator. You can recognise an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line.

If SSL encryption is activated, the data you transmit to us cannot be read by third parties.

7. collection and storage of personal data as well as their type and purpose of use

a) When visiting the website

When you visit our website, information is automatically sent to our website server by the browser used on your terminal device. This information is temporarily stored in a so-called log file. The following information is collected without your intervention and stored until it is automatically deleted:

- IP address of the requesting computer,

- Date and time of access,

- name and URL of the file accessed,

- website from which access was made (referrer URL),

- the browser used and, if applicable, the operating system of your computer as well as the name of your access provider.

The aforementioned data is processed by us for the following purposes:

- Ensuring a smooth connection of the website

- Ensuring a comfortable use of our website

- Evaluation of system security and stability

- error analysis

- for further administrative purposes.

Data that allow a conclusion to your person, such as the IP address, will be deleted after 7 days at the latest. If we store the data beyond this period, the data is pseudonymised so that it can no longer be assigned to you.

The legal basis for data processing is Art. 6 para. 1 p. 1 lit. f DSGVO. Our legitimate interest follows from the purposes for data collection listed above. In no case do we use the collected data for the purpose of drawing conclusions about your person.

b) Contact form / e-mail contact

We provide a form on our website so that you can contact us at any time. When using the contact form, it is necessary to provide a name for a personal salutation and a valid e-mail address for contacting us, so that we know who the enquiry is from and can process it.

You are also welcome to send us an email using the email address provided on our website.

If you send us enquiries via the contact form, your details from the enquiry form, including the contact details you provide there, as well as your IP address, will be processed in accordance with Art. 6 (1) lit. b and f DSGVO for the purpose of carrying out pre-contractual measures in response to your enquiry or for the exercise of our legitimate interest, namely to carry out our business activities.

You are also welcome to send us an email using the email address provided on our website. In this case, we store and process your e-mail address and the information you provide in the e-mail pursuant to Art. Art. 6 para. 1 lit. b and f DSGVO to process your message.

The enquiries as well as the associated data will be deleted 3 months after receipt at the latest, unless they are required for a further contractual relationship.

c) Fax / Postal

If you send us a letter or send us a fax, your personal data stated therein as well as the facts communicated will be processed.

The data processing is necessary in order to be able to answer your enquiry appropriately or to initiate measures requested by you or to fulfil other legal obligations towards you which are the subject of the enquiry. Only the data required for the above purposes will be processed.

The legal basis for data processing is Art. 6 para. 1 p. 1 lit. f DSGVO.

If contact is made by post or fax in order to enter into a contractual relationship with us or so that pre-contractual measures can be carried out by us, the legal basis for processing is also Art. 6 (1) lit. b DSGVO.

Enquiries by fax / post and the associated data will be deleted no later than

deleted 3 months after receipt at the latest, unless they are required for a further contractual relationship.

8. Cookies

We use cookies on our website. Cookies are small data packets that are automatically created by your browser and stored on your terminal device when you visit our website. These cookies serve to store information in connection with the respective end device used.

When cookies are used, a distinction is made between technically necessary cookies and "other" cookies. Technically necessary cookies are those that are absolutely necessary in order to provide an information society service that you have expressly requested.

a) Session cookies

In order to make the use of our offer more pleasant for you, we use so-called session cookies (e.g. language and font selection, shopping cart, etc.) These session cookies fall under the category of technically necessary cookies and are automatically deleted after you leave our site. The legal basis for the cookies results from Art. 6 para. 1 p. 1 lit. c) DSGVO, a legal permission.

9. Rights of the data subject

You have the following rights:

a) Information

In accordance with Art. 15 DSGVO, you have the right to request information about your personal data processed by us. This right to information includes information about

- the purposes of processing

- the categories of personal data

- the recipients or categories of recipients to whom your data have been or will be disclosed

- the planned storage period or at least the criteria for determining the storage period

- the existence of a right to rectification, erasure, restriction of processing or objection

- the existence of a right of appeal to a supervisory authority

- the origin of your personal data, if it was not collected by us

- the existence of automated decision-making, including profiling, and, if applicable, meaningful information on the details of such.

b) Correction

In accordance with Art. 16 DSGVO, you have the right to have any incorrect or incomplete data stored by us corrected without delay.

c) Deletion

In accordance with Art. 17 DSGVO, you have the right to demand that we delete your personal data without delay, insofar as further processing is not necessary for one of the following reasons:

- the personal data are still necessary for the purposes for which they were collected or otherwise processed

- to exercise the right to freedom of expression and information

- for compliance with a legal obligation which requires processing under the law of the European Union or the Member States to which the controller is subject, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller

- for reasons of public interest in the area of public health pursuant to Art. 9(2)(h) and (i) and Art. 9(3) DSGVO

- for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes pursuant to Art. 89(1) DSGVO, insofar as the right referred to in section a) is likely to render impossible or seriously prejudice the achievement of the purposes of such processing

- for the assertion, exercise or defence of legal claims

d) Restriction of processing

In accordance with Art. 18 DSGVO, you may request the restriction of the processing of your personal data for one of the following reasons.

- You dispute the accuracy of your personal data.

- The processing is unlawful and you object to the erasure of the personal data.

- We no longer need the personal data for the purposes of processing, but you need them to assert, exercise or defend legal claims.

- You object to the processing pursuant to Art. 21(1) DSGVO.

e) Information

If you have requested the rectification or erasure of your personal data or a restriction of processing under Article 16, Article 17(1) and Article 18, we will inform all recipients to whom your personal data has been disclosed, unless this proves impossible or involves a disproportionate effort. You may request that we inform you of these recipients.

f) Transfer

You have the right to receive the personal data you have provided to us in a structured, commonly used and machine-readable format.

You also have the right to request the transfer of this data to a third party, provided that the processing has been carried out using automated procedures and is based on consent pursuant to Article 6(1)(a) or Article 9(2)(a) or on a contract pursuant to Article 6(1)(b).

g) Revocation

Pursuant to Article 7 (3) DSGVO, you have the right to revoke your consent at any time. The revocation of the consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation. In the future, we may no longer continue the data processing that was based on your revoked consent.

h) Complaint

Pursuant to Art. 77 of the GDPR, you have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data violates the GDPR.

i) Objection

If your personal data is processed on the basis of legitimate interests pursuant to Article 6 (1) sentence 1 lit. f DSGVO, you have the right to object to the processing of your personal data pursuant to Article 21 DSGVO, provided that there are grounds for doing so which arise from your particular situation or the objection is directed against direct advertising. In the latter case, you have a general right of objection, which is implemented by us without specifying a particular situation. If you wish to make use of your right of revocation or objection, it is sufficient to send an e-mail to stein@sit-gmbh.net.

j) Automated decision-making in individual cases, including profiling

You have the right not to be subject to a decision based solely on automated processing - including profiling - which produces legal effects concerning you or similarly significantly affects you. This does not apply if the decision

1. is necessary for the conclusion or performance of a contract between you and us

2. is permissible on the basis of legal provisions of the European Union or the Member States to which we are subject and these legal provisions contain appropriate measures to protect your rights and freedoms as well as your legitimate interests

3. Is made with your express consent.

However, these decisions must not be based on special categories of personal data as defined in Article 9(1) of the GDPR, unless Article 9(2)(a) or (g) of the GDPR applies and appropriate measures have been taken to protect your rights and freedoms and your legitimate interests.

With regard to the cases mentioned in 1. and 3. above, we take appropriate measures to safeguard the rights and freedoms as well as your legitimate interests, which include at least the right to obtain the intervention of a person from our side, to express your point of view and to contest the decision.

10. Change of the privacy policy

If we change the data protection declaration, this will be indicated on the homepage.

Status, 24.11.2022