The legally obliged entity in accordance with General Data Protection Regulations and other national data protection laws of EU member states as well as other data protection regulations is:
SAR
Electronic GmbH
Gobener Weg 31
84130
Dingolfing
Germany
Phone: 08731/704-0
E-mail:
info@sar.biz
Website: www.sar.biz
The data protection officer for the entity legally responsible is:
SAR
Electronic GmbH
-Datenschutzbeauftragter-
Gobener Weg
31
84130 Dingolfing
Germany
Phone: 08731/704-0
E-mail:
dsb@sar.biz
In principle, we collect and use personal data of our users only to the extent necessary to provide a functional website, our content and services. The collection and use of personal data of our users take place regularly only with the user’s consent. An exception applies to cases in which prior consent cannot be obtained for reasons of fact and the processing of the data is permitted by law.
Insofar as we obtain the consent for processing
personal data from the party in question, Art. 6 (1) lit. a EU
General Data Protection Regulation (GDPR) serves as the legal
basis.
In the processing of personal data necessary for
complying with a contract for the contracting party in question, Art.
6 (1) lit. b GDPR serves as the legal basis. This also applies to
processing operations required to carry out pre-contractual
actions.
Insofar as any processing of personal data is required
to fulfill a legal obligation that underlies our company, Art. 6 (1)
lit. c GDPR serves as the legal basis.
In the event that vital
interests of the party in question or another natural person require
the processing of personal data, Art. 6 (1) lit. d GDPR serves as the
legal basis.
If processing is necessary to safeguard the
legitimate interests of our company or a third party, and if the
interests, fundamental rights and freedoms of the party in question
do not prevail over the first interests, Art. 6 (1) lit. f GDPR
serves as the legal basis for this course of action.
Personal data of the party in question will be deleted or blocked as soon as the purpose of the storage is no longer needed. In addition, data storage may take place if provided for by the European or national legislator in EU regulations, laws or other regulations to which the entity legally responsible for data protection is subject to. Blocking or deletion of data also takes place when a storage period prescribed by the previously mentioned standards expires, unless there is a need for further storage of data for the conclusion of a contract or the fulfillment of the contract.
Each time our website is accessed, our system automatically collects data and information from the computer system of the calling computer.
The following data is hereby collected:
Information about the type of browser and the version used
The user’s operating system
The user’s internet service provider and country of origin
The user’s IP address
Date and time of access
The amount of data transferred
Websites from which the user's system accesses our website
Websites accessed by the user's system through our website
The data is also stored in our system’s log files. Storage of this data does not take place jointly with other personal data of the user.
The legal basis for the temporary storage of data and log files is Art. 6 (1) lit. f GDPR.
The temporary storage of the user’s IP
address by the website’s system is necessary to allow delivery
of the website to the user’s computer. To do this, the user's
IP address must be kept for the duration of the session.
Storage
in log files is done to ensure the functionality of the website. In
addition, the data is used to optimize the website and to ensure the
security of our information technology systems. An evaluation of the
data for marketing purposes does not take place.
For these
purposes, we have legitimate interests in the processing of data in
accordance with Art. 6 (1) lit. f GDPR.
Data will be deleted as soon as the reason for its
collection is no longer given. In the case of any data collected to
allow website service, this provision is met when the respective
online session is completed.
Data for log files are stored for
no longer than thirty days. An additional storage time is possible.
In this case, the IP addresses of the users are deleted or alienated,
so that an identification of the calling client is no longer
possible.
The collection of data and its storage in log files is essential for providing website service. Consequently, there is no right to refuse a collecting of a user’s data or a way to remove such data.
We do not use cookies.
However, if you want
to open embedded videos or maps, the provider of that service
(YouTube or Google) will store cookies on your system. Further
information can be found in point VII.
A contact form is made available on our website
which can be used to contact us electronically. If a user perceives
this possibility, an e-mail with the completed fields and uploaded
attachments is triggered to an internal contact person. In addition,
no data is stored.
For the processing of the data, your consent
is obtained within the framework of the submit operation and referred
to this data protection declaration.
Alternatively,
the user may opt to contact us via our e-mail address. In this case,
the user's personal data transmitted by the e-mail will be stored.
In
this context, no personal data will be passed on to third parties.
The data is used exclusively for processing the channel of
communication.
Contacts from personal conversations at trade
fairs or similar events will be handed over to the relevant sales
representative, if desired.
Personal data in the contact form serves only to
administer the contact process. A legitimate interest in the
processing of data may also be included when contact is via
e-mail.
Other personal data processed during the sending process
serve to prevent misuse of the contact form and to ensure the
security of our information technology systems.
Data will be deleted as soon as the reason for its
collection is no longer given. In the case of any data collected to
allow website service, this provision is met when the respective
online session is completed. Personal data contained in the contact
form and those sent via e-mail are deleted when the respective
communication with the user has ended. The communication is ended
when it can be inferred from the circumstances that the relevant
facts have been finally clarified.
Any additional personal data
collected during the sending process will be deleted after a period
of no longer than thirty days.
The user has the possibility to revoke his consent
for the processing of personal data at any time. If the user contacts
us by e-mail, he or she may object to the storage of his or her
personal data at any time. In such a case, communication cannot
continue.
Otherwise, the user may revoke his consent for the
processing of personal data at any time via post or telephone. You
will find the contact details of the data protection officer in the
header of this legal declaration.
In this case, all personal
data stored in the course of communication will be deleted.
The data controller shall collect and process the personal data of applicants for the purpose of the processing of the application procedure. The processing may also be carried out electronically. This is the case, in particular, if an applicant submits corresponding application documents by e-mail or by means of a web form on the website to the controller. If the data controller concludes an employment contract with an applicant, the submitted data will be stored for the purpose of processing the employment relationship in compliance with legal requirements. If no employment contract is concluded with the applicant by the controller, the application documents shall be deleted two months after notification of the refusal decision, provided that no other legitimate interests of the controller are opposed to the deletion.
This website uses Google Maps API to visually
represent geographic information. The provider of the corresponding
plugins is:
Google Ireland Limited, Gordon
House, Barrow Street, Dublin 4, Irland (for
the EU and Switzerland) and Google Inc., 1600 Amphitheatre Parkway,
Mountain View, CA 94043, USA (for other locations).
When using
Google Maps, Google will also collect, process and use data about the
use of the card functions by visitors. For more information on
"Google Maps" privacy policy, see the provider's privacy
policy at: https://www.google.de/intl/de/policies/privacy/.
You can also change your personal data protection
settings in the Privacy Center.
On some
parts of our website use embedded YouTube videos. The provider of the
corresponding plugins is:
Google Ireland Limited, Gordon
House, Barrow Street, Dublin 4, Irland (for
the EU and Switzerland) and Google Inc., 1600 Amphitheatre Parkway,
Mountain View, CA 94043, USA (for other locations).
When you
visit a page with the YouTube plug-in, you connect to YouTube
servers. YouTube will tell you which pages you are visiting. If you
are logged in to your YouTube account, YouTube can assign your
browsing behavior to you personally. You can prevent this by logging
out of your YouTube account beforehand.
When a YouTube video is
launched, the provider sets cookies to collect information about user
behavior.
In case you have disabled the saving of cookies for
the Google ad program, you will also not have to expect such cookies
when watching YouTube videos. However, YouTube also makes
non-personally identifiable usage information available in other
cookies. If you want to prevent this, you must block the browser from
storing cookies.
For more information on "YouTube"
privacy policy, please see the provider's privacy policy at:
https://www.google.de/intl/de/policies/privacy/
Video surveillance takes place on parts of our premises. The purpose of surveillance is the protection of domiciliary rights and, if necessary, to investigate criminal offences or accidents. An automated recognition of persons or vehicle registration plates does not take place. The records are usually overwritten after 7 days, the deletion period can be extended to investigate crimes or accidents, in that case, the data will be deleted as soon as they are no longer needed.
If your personal data is processed, you are the party concerned within the meaning of GDPR and have the following rights with respect to the responsible party:
You may ask the responsible party for confirmation if your personal data is being processed by us.
If such processing is being conducted, you can request information from the responsible party about the following information:
the purposes for which the personal data are being processed;
the categories of personal data that are being processed;
the recipients or categories of recipients to whom your personal data have been disclosed or are still being disclosed;
the planned duration of the storage of your personal data or, if specific information is not available, the criteria for determining the duration of storage;
the right to have your personal data amended or deleted, a right to a restriction of processing by the responsible party or a right to object to such processing;
the right of appeal to a supervisory authority;
all available information on the source of the data if the personal data are not collected from the party in question;
the existence of automated decision-making including profiling under Article 22 (1) and (4) GDPR and, at least in these cases, meaningful information about the logic involved, and the scope and intended impact of such processing on the data subject.
You have the right to request information about whether your personal data is or will be transferred to a third country or to an international organization. In this case, regarding the transfer, you can request the appropriate guarantees in accordance with Art. 46 GDPR.
You have the right to have the responsible party amend and/or complete your personal data if they are incorrect or incomplete. The responsible party must make the correction without delay.
You may request a restriction of the processing of your personal data under the following conditions:
if you contest the accuracy of your personal information for a period of time that enables the responsible party to verify the accuracy of your personal information;
the processing is unlawful and you refuse to have your personal data deleted and instead request the restriction of use of the such data;
the responsible party no longer requires your personal data for the purposes of processing, but you need them to assert, exercise or defend legal claims, or
if you objected to the processing in accordance with Art. 21 (1) GDPR and it is not yet certain whether the legitimate reasons of the responsible party prevail over your reasons.
If the processing of your personal data has been
restricted, this data may only be used with your consent or for the
purposes of asserting, exercising or defending legal claims or
protecting the rights of another natural or legal person or for
reasons of important public interest of the European Union or an EU
member state.
If in accordance with the reasons mentioned above
the processing has been restricted, you will be informed by the
responsible party before the restriction is lifted.
You may request the responsible party to delete your personal information without delay, and the responsible party is required to delete that information immediately if one of the following reasons is valid:
Your personal data is no longer necessary for the purposes for which they were collected or otherwise processed.
You revoke your consent to the processing according to Art. 6 (1) lit. a or Art. 9 (2) lit. GDPR and there exist no other the legal basis for processing.
You object to the processing in accordance with Art. 21 (1) GDPR and there are no overriding justifiable reasons for the processing, or you oppose processing in accordance with Art. 21 (2) GDPR.
Your personal data has been processed unlawfully.
The deletion of your personal data is required to fulfill a legal obligation under European Union law or the law of the member states to which the responsible party is subject.
Your personal data was collected from offers by information services in accordance with Art. 8 (1) GDPR.
If the responsible party has made your personal data public and is obligated to delete them, in accordance with Article 17 (1) of the GDPR, the responsible party shall take appropriate measures, taking into account the available technology and the implementation costs, to inform data controllers who process the personal data that you have been identified as being affected, requesting deletion of any links to such personal data or of copies or replications of such personal data.
The right of deletion of personal data does not exist if the processing is necessary
to exercise the right of freedom of expression and information;
to fulfill a legal obligation required by laws of the European Union or of its member states to which the responsible party is subject, or to carry out a task of public interest or in the exercise of official authority conferred on the responsible party;
for reasons of public interest on the grounds of public health in accordance with Art. 9 (2) lit. h and i and Art. 9 (3) GDPR;
for archival purposes of public interest, scientific or historical research purposes or for statistical purposes in accordance with Article 89 (1) GDPR, to the extent that the law referred to in subparagraph (a) is likely to render impossible or seriously affect the achievement of the objectives of that processing, or
to assert, exercise or defend legal claims.
If you have exercised your right of amendment, deletion or restriction of processing to the responsible party, he/she is obliged to notify all recipients to whom your personal data have been disclosed to of this correction or deletion of the data or restriction of processing, unless: this proves to be impossible or involves a disproportionate effort.
You have a right to be informed by the responsible party over these recipients.
You have the right to receive personally identifiable information you provide to the responsible party in a structured, established and machine-readable format. You also have the right to transfer this data to another responsible person without hindrance by the current responsible party, who is processing your personal data, providing that
the processing of a consent in accordance with Art. 6 (1) lit. a GDPR or Art. 9 (2) lit. a GDPR or on a contract in accordance with Art. 6 (1) lit. b GDPR is based and
the processing is done using automated procedures.
In exercising this right, you also have the right
to have your personal data be transmitted directly from one
responsible party to another responsible party, as far as technically
feasible. Freedoms and rights of other persons may not be thus
affected.
The right of data transferability does not apply to
the processing of personal data necessary for the performance of a
task in the public interest or in the exercise of official authority
delegated to the responsible party.
You have the right at any time, for reasons that
arise from your particular situation, to object to the processing of
your personal data, which ensued in accordance with Art. 6 (1) lit. e
or f GDPR; this also applies to profiling based on these
provisions.
The responsible party will no longer process your
personal data unless he/she can demonstrate compelling legitimate
grounds for processing that outweigh your interests, rights and
freedoms, or the processing is intended to assert, exercise or defend
legal claims.
If your personal data is processed for direct
marketing purposes, you have the right to object at any time to the
processing of your personal data for the purpose of such advertising;
this also applies to profiling insofar as it is associated with such
direct advertising.
If you object to processing for direct
marketing purposes, your personal data will no longer be processed
for these purposes.
Notwithstanding of Directive 2002/58/EC, you
have the option, in the context of the use of information services,
of exercising your right to object through automated procedures that
use technical specifications.
You have the right to revoke your consent to data protection declaration at any time. The revocation of consent does not affect the legality of the processing carried out on the basis of the consent until the revocation.
You have the right not to be subjected to an exclusively automated processing--including profiling--that will have legal effect or likewise affect you in a similar manner. This does not apply if the decision
if it is required for the conclusion or performance of a contract between you and the responsible party,
is permissible on the basis of legislation of the European Union or its member states to which the responsible party is subject, and that legislation contains appropriate measures to safeguard your rights and freedoms and your legitimate interests, or
with your expressed consent.
However, these decisions may not be based on
special categories of personal data under Art. 9 (1) GDPR, unless
Art. 9 (2) lit. a or g applies and reasonable measures have been
taken to protect the rights and freedoms and your legitimate
interests.
In reference to the cases referred to in (1) and (3),
the responsible party shall take reasonable steps to uphold the
rights and freedoms and your legitimate interests, including at least
the right to obtain the intervention of a person by the responsible
party, to express his/her own position and bear on challenge of the
decision.
Without prejudice to any other administrative or
legal redress, you shall have the right to appeal to a supervisory
authority, in particular in the EU member state of your residence,
place of work or place of alleged infringement, if you believe that
the processing of your personal data violates GDPR.
The
regulatory authority to which the appeal has been submitted shall
inform the complainant of the status and results of the complaint,
including the possibility of a judicial remedy in accordance with
Article 78 of the GDPR.
Updated 08.Feb.2021