Data privacy

Data protection declaration
As operator of the Internet presence under “www.dieruecknahmesysteme.de”, we attach great importance to protecting your private and personal sphere.
We collect and use personal data of the visitors of our website only as long as this is necessary to provide the website as well as our contents and services functionally and make them comfortably usable for the visitors.
Personal data is regularly processed only after obtaining the visitor’s consent. It can also be processed if it is not possible to obtain a prior consent for factual reasons and the data processing is permitted by legal provisions – particularly by the European General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG 2018).
“Personal data”, pursuant to art. 4 no. 1 GDPR, means any information relating to an identified or identifiable natural person (‘data subject’). This includes, for example, the name, address, date of birth, e-mail address and telephone number.
“Processing”, pursuant to art. 4 no. 2 GDPR, means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means (e.g. collection, saving, use or disclosure).
“Controller”, pursuant to art. 4 no. 7 GDPR, means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data.
With this data protection declaration, we shall first inform you as to how you can contact us as the person responsible or our Data Protection Officer (no. 1.).
We shall also present as to which data is processed in case of the visit to or the use of our website, this takes place for which purposes and on which legal grounds, whether there is an obligation for provision and for how long the data is saved (no. 2. and 3.).
We shall also explain as to what extent data transmissions take place, which security measures are maintained and whether there is automated decision making (no. 4. to 7.).
Finally, we shall inform you as to which rights you are entitled to with respect to the processing of your personal data (no. 8.).

1. Names and contact details of the controllers, information about joint controllers

1.1 Controllers for the data processing in case of the visit to and the use of this website are:

Stiftung Gemeinsames Rücknahmesystem Batterien

and

Gemeinsames Rücknahmesystem Servicegesellschaft mbH

The respective contact details are:
Heidenkampsweg 44
20097 Hamburg
Telephone: 040 / 23 77 88
Fax: 040 / 23 77 87
E-mail: info@grs-batterien.de

1.2 Agreement between joint controllers:
This website is provided jointly by the aforementioned authorities; they use joint servers and IT services for this and jointly determine the purposes of the processing of personal data as well as the means for this. Stiftung GRS Batterien and GRS Servicegesellschaft mbH are therefore considered as “joint controllers” within the meaning of art. 4 no. 7 in connection with art. 26 para. 1 clause 1 GDPR.
We have defined in an agreement that “Gemeinsames Rücknahmesystem Servicegesellschaft mbH” shall generally be responsible for fulfilling our duties according to the GDPR, particularly with respect to the rights of the data subjects and the information obligations.
You can obviously direct any matters related to data protection and your rights as data subject to each of the two authorities or your respective contact persons.

2. Data processing in case of the visit to and the use of our website

2.1 Saving of access data in log files
You can basically visit and use our website without giving any personal details. During the visit to our website, the Internet browser used by you automatically transmits certain access data to our server. This includes the following data:
• IP address of the inquiring computer
• browser software used as well as its version and language
• operating system of the inquiring computer
• date and time of the access
• name and URL of the page or file called up
• website, from which the access takes place
• access status/http status code
• data quantity transferred in each case

Type and purposes of the data processing:
This data is temporarily saved in a separate log file. This firstly serves the purpose of continuously ensuring the system security and stability and facilitating the technical administration in order to ensure a trouble-free connection establishment and operation of our website as well as its comfortable use. Moreover, this data is evaluated for internal administrative and statistical purposes in order to improve our online offer. This data is not merged with other data or data sources, which would allow conclusions about your personal details.

Legal basis:
Legal basis for this processing is art. 6 para. 1 clause 1 lit. f) GDPR. With this data processing, we pursue the legitimate interest of maintaining the operating safety of our websites so that we can provide these websites as well as the information contained there in a trouble-free and comfortable manner.

Storage period:
The data is deleted as soon as it is no longer required for achieving the aforementioned purposes of its collection. In case of recording of the data for the provision of our website, the data is deleted once the respective session has ended. For the rest, the data is regularly deleted automatically upon reaching a certain log size.

2.2 Use of cookies
Type and purposes of the data processing as well as storage period:
During the visit to our website, so-called “cookies” are also saved on your end device or data carrier. Cookies are text or information files, which are automatically saved by your Internet browser onto your end device when you call up our website. They contain certain data or settings, which are exchanged between your Internet browser and our system. This mainly deals with information as to which sub-pages of our Internet offer are called up how frequently.
The information generated or forwarded by means of cookies is not personal data. Therefore, you cannot be identified personally with the help of this information. Cookies can also not execute any programmes or damage your end device. Cookies rather serve to create statistics about the use of our website and thus, to optimise it.
On one hand, the use of cookies serves to make the use of our offer more pleasant or easier for you. Some functions of our website cannot be offered without using cookies; for this, it is necessary that the browser is recognised after a page change. We therefore use so-called session cookies in order to recognise that you have already visited individual pages of our Internet presence. These are automatically deleted after you leave our Internet presence.
Moreover, for optimising the user-friendliness, we use temporary cookies, which are saved on your end device for a certain, defined period. When you re-visit our page in order to use our services, it is automatically detected that you have already visited us and which entries and settings you have made, so that you do not have to enter these once again.
The data of the visitors collected in this manner is pseudonymised through technical precautions. The data is not saved together with other personal data of the visitors. Therefore, an assignment of the data to the inquiring visitor is no longer possible.

Legal basis:
Legal basis for this processing is art. 6 para. 1 clause 1 lit. f) GDPR. With this data processing, we pursue the legitimate interest of optimising the user friendliness of our websites.

Possibility to appeal regarding the saving of cookies:
Most of the Internet browsers accept cookies automatically. You can use our website even without cookies; we would however like to point out that you shall then possibly no longer be able to use all services or functionalities of our Internet offer completely.
You can stop the use of cookies and thus, object to their future use by configuring your browser settings such that the saving of certain or all cookies is blocked or takes place only after obtaining explicit consent from you. Which individual steps are required to carry out a corresponding adjustment depends on the Internet browser used and its version; you can use the Help function of your browser to obtain detailed information on this.
If you want to prevent the use of flash cookies, you can install a corresponding add-on for this for the Internet browser used by you, e.g. “Better Privacy” for Mozilla Firefox (https://addons.mozilla.org/de/firefox/addon/betterprivacy).

3. Processing of data in case of contact establishment

Type and purposes of the data processing:
If you make inquiries to us using the contact details provided, we process the data provided by you so that we can process your inquiry and contact you on our part. If more information is required to reply to your inquiry, we shall contact you separately for this.
We shall use the data, which we are entrusted with within the scope of a different form of contact, exclusively for replying to your inquiry. We shall not forward this data to third parties, be it against payment or for free. If you have not consented to extensive saving and use of your personal data, this shall remain saved only as long as this is necessary for fulfilling the purpose pursued with the transmission or this is prescribed by legal regulations (particularly retention periods under tax law and commercial law).

Legal basis:
Legal basis for this processing is art. 6 para. 1 clause 1 lit. f) GDPR. Our legitimate interest lies in processing the data that is required for replying to the inquiries directed at us.

Storage period:
This data is saved as long as this is necessary for completing the inquiry concerned. Saving for a longer period can be necessary due to legal obligations, particularly due to retention periods under commercial law or tax law from the German Commercial Code (HGB) and the Tax Code (AO), which stipulate saving for up to ten years. For the rest, saving of data for longer periods takes place only as long as this is necessary for the fulfilment of a contract.

4. Obligation for or duty of the provision of data, possible consequences of non-provision

If you wish to send us an inquiry using the provided contact details, you must specify your contact details so that we can reply to your inquiry. Without the provision of suitable contact details, we cannot process your inquiry.

5. Data transmissions or recipients of data
Transmission of your personal data to third parties takes place exclusively for the purposes listed below.
We forward your personal data to third parties only
if you have given your consent to this pursuant to art. 6 para. 1 clause 1 lit. a) GDPR or
if the forwarding pursuant to art. 6 para. 1 clause 1 lit. f) GDPR is necessary for asserting, exercising or defending legal claims and there is no reason to assume that you have a predominant interest in preventing the forwarding of your data, which is worthy of protection, or
if there is a legal obligation for the forwarding pursuant to art. 6 para. 1 clause 1 lit. c) GDPR, or
if this is legally permitted and the forwarding pursuant to art. 6 para. 1 clause 1 lit. b) GDPR is necessary for the fulfilment of a contract with you.

6. Data security
We are eager to ensure the security of your data. In order to prevent the loss, misuse and modification of personal data, we have set up corresponding physical, electronic and administrative procedures and adjust these to the state of the art. This includes the training of the staff, who have access to the personal data.

7. No use of automatic decision-making including profiling
We use neither so-called profiling nor other decision-making processes, which are exclusively based on automated data processing and have a legal effect vis-à-vis you or affect you considerably in a similar manner.

8. Your rights as a person concerned
You have the following rights regarding the processing of your personal data:

Right of access by the data subject (art. 15 GDPR)
You have the right to demand information about your personal data that is processed by us. In particular, you can demand information about the processing purposes, the categories of personal data, the categories of recipients, to whom your data was or is disclosed, the planned storage period, the existence of a right to correction, deletion, restriction of the processing or objection, the existence of a right of appeal, the origin of your data, if it was not collected by us, as well as about the existence of automated decision-making including profiling and possibly significant information about its details.

Right to rectification (art. 16 GDPR)
You have the right to immediately demand the correction of your personal data, which is incorrectly saved with us, or its completion if it is incompletely saved with us.

Right to erasure (art. 17 GDPR)
You have the right to demand deletion of your personal data saved with us unless the processing is necessary for exercising the right to freedom of expression and information, for the fulfilment of a legal obligation, for reasons pertaining to the public interest or for asserting, exercising or defending legal claims.

Right to restriction of processing (art. 18 GDPR)
You have the right to demand restriction of the processing of your personal data if the correctness of the data is denied by you, if the processing is illegal, but you refuse the deletion of the data, if we do not require the data any longer, but you require it for asserting, exercising or defending legal claims, or if you have filed an objection against the processing pursuant to art. 21 GDPR.

Right to data portability (art. 20 GDPR)
You have the right to receive your personal data, which you have provided to us, in a structured, common and machine-readable format or to demand its transmission to another person responsible.

Right to withdraw an issued consent any time
(art. 7 para. 3 in connection with art. 6 para. 1 clause 1 lit. a) or art. 9 para. 2 lit. a) GDPR)
You have the right to any time revoke a consent issued to us. As a result of this, we may in future no longer continue the data processing, which was based on this consent, unless this can be based on another legal foundation.

Right to logde a complaint with a supervisory authority
(art. 77 GDPR in connection with § 19 BDSG 2018)
You have the right to appeal to a supervisory authority if you believe that the processing of your personal data violates the GDPR. As a rule, you can contact the supervisory authority of your usual place of residence or work place or our headquarters.

You also have a

Right to object (art. 21 GDPR)
If we process your personal data based on legitimate interests, you can object to this for reasons, which result from your special situation.
You can also object to data processing if we undertake this for the purposes of direct advertisement.

For exercising your rights, you can also use all other contact details according to no. 1.1 to approach us.