Privacy Statement of schnaitt Internationale Messe- und Ladenbau GmbH

Thank you for your interest in our website www.schnaitt.de and in our company as well as in our products and services. We at schnaitt are conscious about the fact that the protection of your privacy while you are using our website is very important. Therefore it is obvious for us to follow the legal requirements for data protection. Further it is important for us that you as a customer always know what kind of data we record and store and how we do it, but also what we use it for.

Following we will inform you on the collection and other processing (e.g. storage, query, change, disclosure) of personal data when using our website. Personal data is all data that can be related to your person, e.g. name, address, e-mail addresses and user behaviour.

If we process personalized data or if we use contracted service providers for specific functions, offers or services of our website related to data processing or in case we intend to use your data for promotional purposes please see below where we specify the procedure and especially which kind of data is processed here. You will also learn about the intended storage period or at least the criteria for the storage period as well as the legal basis for the individual processing.

Name and address of the responsible entity
The responsible entity body in the sense of the basic data protection regulation and other national data protection laws of the member states as well as other data protection rules, is:

Schnaitt Internationale Messe- und Ladenbau GmbH,
August-Borsig-Straße 7,
50126 Bergheim,
info@schnaitt.de, 
www.schnaitt.de

For further information please follow the link below to our imprint.

II. Contact data of our data protection officer
You can contact our data protection officer at  datenschutz@schnaitt.de or at our postal address with the supplement „data protection officer“.

III. Collection and storage of personal data as well as type, purpose, legal basis and duration of its usage

§ 1 Beim Besuch der Webseite

If you use our website solely for information purposes, if you do not register or send us information otherwise, we only collect the personal access data in so-called server log files, that your browser transmits to our server. In the frame of the server log files the following data is being collected:

  • IP-address
  • Date and time of the request
  • Time zone difference to Greenwich Mean Time (GMT)
  • Content of the request (specific page)
  • Access status / HTTP-Status code
  • Respective data volume transmitted
  • Website sending the request
  • Browser
  • Operating system and interface
  • Language and version of the browser software

This data will only be evaluated to grant a smooth operation of the site regarding stability and security and to improve our offer and will be discarded afterwards. The legal basis for the data processing is Art. 6 (1) S.1 lit. f GDPR. Our justified interest results from the before mentioned purposes for data collection.

The data will also be stored in the log files of our system. A storage of this data together with other personal data of the user does not take place.

The collection of the data for the provision of the website and the storage of the data in log files is urgently necessary for the operation of the website. Therefore there is no option of appeal for the user.

The data will be deleted as soon as it is no longer necessary for achieving the purpose of the collection. In case of collection of the data for the provision of the website this is the case when the respective session is finished.

In addition, we use cookies and analysis services when your visit our website. You can find more specific explanation in paragraph V and VI of this data protection regulation.

§ 2 By using further services, functions and offers of our website
Aside from the pure informational usage of our website we offer various services, offers and functions that you are free to use. In order to do so you will have to supply more personal data that we will use to provide the respective service and for which the before mentioned data protection regulation rules. The services, offers and functions will be further described below:

(1) Contacting by email
When you contact us by email with a general request we will store the data that you have given us voluntarily (your email address, your surname as well as perhaps your first name, residence and postal code) in order to answer your question. The supply of email address and surname is necessary, all other information is voluntary. The answer will be send by email or if an number is indicated by phone.

Legal basis for the processing is article 6 (1) lit. a and b of GDPR (General Data Protection Regulation) based on your voluntary approval or to answer your request.

The data collected in this context will be deleted after your request has been dealt with or if there is a statutory storage obligation the processing of the data will be limited.

(2) Application for a job
If you apply for a job at schnaitt International Trade Fair and Exhibition Services through the email address provided on this website, the personal data you supply voluntarily will solely be used for the purpose of the occupation of the advertised position and the assessment and execution of your application supplied in this context. After the termination of the application procedure regarding the exact advertised job this data will be blocked for further usage and will be deleted after expiry of the legal obligation to retain. Legal basis for the processing is article 88 GDPR in conjunction with § 26 (1) BDSG.

IV. Disclosure of data
There will be no disclosure of your personal data to a third party other than for the following purposes:

We will only disclose your personal data to a third party if:

  • You have given your explicit approval according to article 6 (1). p. 1 lit. a GDPR
  • The disclosure according to article 6 (1) p. 1 lit. f GDPR is necessary for the enforcement, exercise or defence of legal claims and if there is no reason to believe that you have a legitimate and overriding interest in a non-disclosure of your data.
  • There is a legal obligation to disclose your data according to article 6 (1) p. 1 lit. c GDPR
  • It is legally permissible and necessary according to article 6 (1) p. 1 lit. B GDPR for the settlement of contractual relations with you.

V. Use of cookies
Extent of data processing
To make the visit to our website user friendly and effective and to enable the usage of certain functions we use so-called. These are small text files that will be stored locally on your terminal device and save the specific settings and data exchange with our system via your browser. These cookies provide us certain information. Cookies cannot run programs or transmit viruses on your computer.

Cookies do not contain personal data and therefore cannot be allocated to any user. Please note that certain cookies are already set as soon as you enter our website. This website uses the following types of cookies:

  • Necessary / functional cookies: these cookies are necessary to enable the operation of our website. This includes cookies that enable you to log in into the client area or to add something to the shopping basket.
  • Transient cookies: these will be automatically deleted when you close the browser. They include in particular session cookies. These store a so-called session ID, which assigns various queries of your browser to the common session. This will allow your computer to be recognized when you return to our website. The session cookies will be deleted when you log out or close the browser.
  • Persistent Cookies: These will be automatically deleted after a given period of time that may vary depending on the cookie. You can also delete cookies in the security settings of your browser any time
  • Third-Party-Cookies: These cookies of some of our advertisement and analysis partners help to make the Internet offer and our website more interesting for you. Therefore, when you visit our website cookies from affiliates will also be stored on your hard drive. These are only temporary cookies that will automatically be deleted after the given time. Generally cookies from affiliates will be deleted after a few days up to 24 months, in specific cases also after a few years. Cookies from our affiliates do not contain personal data. Data is only collected using a pseudonym user ID. These pseudonym data will not be connected to your personal data at any time.

You can configure your browser settings according to your wishes and reject, for example, the acceptance of third-party cookies or all cookies. Your browser can also be configured in such a way that you will always be informed when a cookie is installed. Please consult the respective provider of your browser. Please note that if you refuse cookies, you may not be able to use all features of this website. Legal basis for the use of the cookies is article 6 (1) p. 1 lit. f DSGVO. Our legitimate interest results from the above-mentioned purposes to make the offer of our website more user friendly and more effective.

For more information on analytic cookies please see paragraph VI of our data protection regulation.

VI. Use of analytical tools

Our website uses web analytics services for tailor-made design and advertising.

Google Analytics
This website uses Google Analytics, a web analytics service of Google Inc. (“Google”). Google Analytics uses so-called „cookies“, text files that are stored on your computer and allow an analysis of your use of the website. The information on your use of this website created by the cookie will are usually transmitted to a Google server in the US and will be stored there.

IP- Anonymization
On this website we have activated the function of IP- anonymisation. As a result your IP address will be truncated by Google within member states of the European Union or other parties to the Agreement on the European Economic Area prior to transmission to the United States. Only in exceptional circumstances your full IP-address will be transmitted to a Google server in the USA and then be truncated there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to create reports on the website activities and to provide other services related to website activity and internet usage to the website operator. The IP address provided by your browser as part of Google Analytics will not be merged with any other data provided by Google.
You can prevent the storage of cookies by changing the settings in your browser software; however, please not that in this case you will not be able to use all functions of this website entirely. Furthermore you can prevent the collection of the data by Google (to include your IP address) generated by the cookie and related to your use of the website by downloading and installing the browser plugin available under the following link (http://tools.google.com/dlpage/gaoptout?hl=de).

As an alternative to the browser plugin, especially for browsers on mobile devices, your can prevent the collection of your data by Google Analytics by clicking the following link. It will install an opt-out-cookie, that prevents the collection of your data for future visits on this website.

Deactivate Google Analytics
The opt-out-cookie is only valid for this browser and our website and will be stored on your device. If you delete the cookies in this browser you have to reinstall the opt-out-cookie.

Order data processing
We have entered into an agreement with Google for order data processing and apply the strict regulations of the German Data Protection Authorities for the use of Google Analytics.
We use Google Analytics to analyse the usage of our website and to improve it regularly. We can improve our offer through the generated statistics and can therefore make it more interesting for you as a user. For the exceptional cases in which personal data is being transferred to the USA, Google has subjected to EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework Legal basis for the usage of Google Analytics is article 6 (1) p.1 lit. f DSGVO. Our legitimate interest results from the above-mentioned purposes.
Information of the third-party-provider: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001.
User conditions: http://www.google.com/analytics/terms/de.html, Overview on the data protection: http://www.google.com/intl/de/analytics/learn/privacy.html, as well as the Data Protection Declaration:  http://www.google.de/intl/de/policies/privacy .
This website also uses Google Analytics for a cross-device analysis of visitor volumes, which will be carried out through a user-ID.

VII. Google Maps
On this website we use the services of Google Maps in order to show you interactive maps directly on our website. Through this we enable you to comfortably use the map function.
By visiting this website Google receives the information that you have accessed the respective sub page of our website. Further the data mentioned under §3 of this declaration will be submitted. This will be done if Google provides a user account, through which you are logged in or even if you don’t have a user account. If you are logged into Google, your data will be directly assigned to your account. If you do not wish an assignment with your Google profile, please log out before the activation of the button. Google stores your data as user profiles and uses it for advertising purposes, market research and the personalized design of its website. Such an evaluation is done in particular (even for users who are not logged in) to provide personalized advertising and to inform other users of the social network about your activities on our website. You have the right to object to the formation of these user profiles, however, you have to contact Google to exercise it.

Further information on purpose and scope of the data collection and its processing by the plug-in provider is given in the privacy policy of the provider. You can also find further information on your related rights and settings for the protection of your privacy: http://www.google.de/intl/de/policies/privacy. Google also processes your personal data in the USA and has submitted to the EU-US Privacy-Shield. https://www.privacyshield.gov/EU-US-Framework.

Information on the third party: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA;

VIII. Your rights

Should your personal data be processed you have the following rights regarding your personal data:

– Right to information, Art. 15 GDPR:
You may ask the responsible officer for confirmation if your personal data have been processed.
Should your data have been processed you may ask the responsible officer for information on the following:

  • The purposes that your personal data have been processed for;
  • The categories of personal data which have been processed
  • The recipients or the categories of recipients to whom your personal data have been or will be disclosed, in particular to recipients in third countries or to international organizations; in the latter cases, you may ask to be informed on suitable guarantees according to Art. 46 GDPR in connection with the transfer
  • The planned storage duration of your personal data or, if specific information on this is not possible, criteria for the determination of the storage duration.
  • The existence of a right of correction or deletion of your personal data, a right on restriction of processing by the responsible entity or a right to object to this processing.
    The existence of a right to appeal with a supervisory authority
  • All available information on the origin of the data, if the personal data are not collected from the person concerned.
  • The existence of an automated decision making to include profiling according to Art. 22 (1) and 4 GDPR and – at least in these cases – meaningful information about the involved logic and the intended impact of such processing on the data subject

– Right to request correction, Art. 16 GDPR:
You have a right of correction and/or completion towards the responsible entity, if the processed personal data referring to you are incorrect or incomplete. The responsible entity has to make the correction immediately.

– Right to request deletion, Art. 17 GDPR:
a) Obligation of deletion
You may ask the responsible entity to delete your personal data immediately and the responsible entity is obliged to delete this data immediately if one of the following reasons applies:

  • Your personal data are no longer necessary for the purposes they have been collected or otherwise processed for.
  • You withdraw your consent to the processing according to art. 6 (1) lit. a or art. 9 (2) lit. a GDPR and there is no other legal basis for the processing.
  • You object to the processing in accordance with art. 21 (1) GDPR (compare below) and there are no legitimate reasons for the processing or you object to the processing in accordance with art. 21 (2) GDPR.
  • Your personal data have been illegally processed.
  • The deletion of your personal data is required to fulfil a legal obligation under the Union Law or the law of the Member States that the responsible entity is subject to.
  • Your personal data have been collected with regards to provided information society services in accordance to art. 8 (1) GDPR.

b) Information to third parties
If the responsible entity has published your personal data and if he has the obligation to delete them according to art. 17 (1) GDPR, it will take appropriate action taking into account available technology and implementation costs, to include technical ones, to inform data controllers who process the personal data that you as the person concerned have required the deletion of links to these personal data or of copies or replications of these personal data.

c) Exceptions
The right to request deletion does not exist if the processing is necessary:

  • To exercise the right to freedom expression and information;
  • To fulfil a legal obligation, which requires processing under the law of the Union or of the Member States that the responsible data officer is subject to or to perform a task in the public interest or in the exercise of public authority delegated to the responsible data officer.
  • For reasons of public interest in the field of public health in accordance with art. 9 (2) lit. h and i as well as art. 9 (3) GDPR;
  • For archiving purposes that are in the public interest, scientific or historical research purposes or for statistical purposes in accordance with art. 89 (1) GDPR, if the law referred to in paragraph a) will likely make the goals of this processing impossible or disturb it seriously or to assert, exercise or defend legal claims.

Right to restriction of processing, art. 18 GDPR:


You may require the restriction of the procession of your personal data under the following conditions:

  • If you contest the accuracy of your personal data for a period of time that enables the responsible entity to verify the accuracy of your personal data;
  • The processing is illegal and you refuse the deletion of your personal data and require the restriction of the usage of your personal data instead;
  • The responsible entity no longer needs your personal data for processing purposes but you need them for asserting, exercising or defending legal claims, or
  • If you have objected to the processing in accordance with art. 21 (1) GDPR (compare below) and if it is not clear yet whether the legitimate reasons of the responsible entity outweigh your reasons.

If the processing of your personal data has been restricted such data may only be processed, except for storage, with your consent or to assert, exercise or defend legal claims or to protect the rights of another natural or legal person or for reasons of significant public interest of the Union or of a Member State.
If you have obtained a restriction of the processing according to the above-mentioned conditions, the responsible entity will inform you before the restriction will be released.

– Right to information, art. 19 GDPR:

If you have exercised your right to correction, deletion or restriction of the processing towards the responsible entity, the namely is obliged to inform all recipients to whom the data have been disclosed about this correction, deletion od the data or restriction of the processing, except if this is impossible or linked with a disproportionate effort.
You have the right towards the responsible entity to be informed about these recipients.

– Right to Data Portability, art. 20 GDPR:

You have the right to receive your personal data that you have made available to the responsible entity, in a structured, common and machine-readable format. Further you have the right to submit these data to another responsible entity without any disturbance by the responsible entity, to which the personal data had been provided to, if

  • The processing is based on an approval in accordance with art. 6. (1) lit. a GDPR or art. 9 (2) lit. a GDPR or on a contract in accordance with art. 6 (1) lit. b GDPR and
  • The processing takes place with the aid of automated procedures.

With the exercise of this right you further have the right to obtain that your personal data are transmitted directly from one person responsible to another person in charge if this is technically possible. This may not affect freedom and rights of other persons.
Your rights to request deletions remain unchanged.
The right to Data Portability is not applicable to the processing of personal data necessary for the performance of a task of public interest or in the exercise of official authority delegated to the responsible entity

– Right of objection, art. 21 GDPR

You are entitled to a case-related right of objection in accordance with art. 21 (1) p.1 GDPR against the processing of your personal data based on art. 6 (1) lit. e GDPR (data processing in the public interest) or art. 6 (1) p. 1 lit. f GDPR (data processing to safeguard legitimate interests of the responsible entity or a third party) as well as according to art. 21 (2) GDPR to a right of objection against the processing of personal data for advertising purposes.

– Right of cancellation of the data protection declaration of consent:
Any given consent to the processing of your personal data can be revoked at any time from the person responsible. Please note that the revocation is only effective for the future. The lawfulness of the processing based on the issued consent until the time of the revocation is not affected.

– Automated decision in particular cases including profiling, art. 22 GDPR:

You have the right not to be subject to a decision based on a solely automated processing – to include profiling – which has a legal effect on you or significantly affects you in a similar way. This does not apply if the decision

  • Is necessary for the conclusion or the fulfilment of a contract between you and the responsible party,
  • Is legal, based on the regulation of the Union or the Member States which the responsible party is subject to and if these regulation contain appropriate measures to protect your rights and freedom as well as legitimate interests or
  • Is made with your explicit consent.

In case (1) and (3) the responsible party takes appropriate action to protect your right and freedom as well as your legitimate interest, which includes at least the right for one responsible person to intervene, to state his/her point of view and to appeal the decision.
Furthermore decisions exclusively based on automated processing must not be based on special categories of personal data pursuant to Art. 9 (1) GDPR unless Art. 9 (2) lit. a or g DSGVO applies and reasonable measures have been taken to protect the rights and freedoms as well as your legitimate interests.

– Right to complain to a supervisory authority, Art. 77 GDPR:

You also have the right to complain to a data protection supervisory authority about the processing of your personal data. Your complaint can be addressed to the supervisory authority in the Member State of your residence, your place of work or the place of the alleged infringement. The supervisory authority to which the complaint has been submitted will inform you as the complainant of the status and results of the complaint, including the possibility of a judicial remedy under Article 78 GDPR. You can exercise your aforementioned rights by sending us an informal message – if possible with the subject “Objection”.

This message can also be sent by mail to:

Schnaitt Internationale Messe- und Ladenbau GmbH, August-Borsig-Straße 7, 50126
Bergheim
oder per E-Mail an:
1. info@schnaitt.de or
2. datenschutz@schnaitt.de.

IX. Data Security
By seizing all technical and organizational possibilities we are striving to store your personal data in such a way that they are not accessible to any third party. We cannot guarantee the complete data security for communication by email, therefore we recommend to you to send confidential information by mail only.
This site uses SSL / TLS encryption for security purposes and to protect the transmission of sensitive content, such as requests you send to us as a site operator. You can recognize an encrypted connection by the changing address line of the browser from “http: //” to “https: //” and by the lock symbol in your browser line. If SSL / TLS encryption is enabled, the data you submit to us cannot be read by third parties.