Data protection declaration
Dated: 22 May 2018

Declaration
We are delighted that you have decided to visit our website and we would like to thank you for your interest.
Spinner Werkzeugmaschinenfabrik GmbH takes the protection of your personal data very seriously.
The protection of your data is of great importance to us, which is why compliance with the data protection regulations is a matter of course for us.
The information below tells you about the use of personal data on our website.

Personal data
Personal data is defined as personal or factual information about an identified or identifiable natural person. This includes information such as your correct name, your company affiliation and address, your telephone and email address.

Responsibility
The responsibility for the data processing on this website in the sense of the General Data Protection Regulation (GDPR) lies with Spinner Werkzeugmaschinenfabrik GmbH, Rudolf-Diesel-Ring 24, 82054 Sauerlach, Germany.
The party responsible for the processing of personal data is the natural or legal entity that decides, autonomously or with others, on the purposes and means of processing personal data.

Data protection officer
The party responsible has appointed a data protection officer for this website.
You can contact them at datenschutz[at]spinner.eu.com.

Encryption
For security reasons and to protect the personal data transferred and other confidential content (e.g. orders or enquiries with the responsible party) this website uses SSL or TLS encryption. You can see that the connection is encrypted by the "https://" prefix and the padlock symbol in your browser's address line.

Data acquisition when visiting our website
In the event of our website being used simply for information, so if you do not register or transfer information to us by another means, we will collect only the data that your browser transmits to our server (so-called "server log files"). If you call up our website we will collect the following data which is technically required by us in order to show you the website:

- Our website visited
- Date and time of access
- Quantity of data sent in Bytes
- Source/reference from where you reached our website
- Browser used
- Operating system used
- IP address used (if necessary, in anonymised form)

The processing is implemented in compliance with article 6 section 1 point f of the GDPR on the basis of our legitimate interests in improving the stability and functionality of our website. The data is not passed on to others or used for any other purpose. We reserve the right to retrospectively check the server log files if there are specific indications of illegal usage.

Cookies
In order to make the design of our website attractive to visit and to enable to use of certain functions, we use so-called cookies on certain pages. These are small text files that are stored on your end device. Some of the cookies used by us will be deleted again at the end of your browser session, i.e. after you close your browser (so-called session cookies). Other cookies remain on your end device and enable us or our partner companies (cookies from third party providers) to recognise your browser again when you visit next (persistent cookies).
If cookies are set, these are used to collect and process certain user information such as browser data and location data as well as IP address value, in individual scope. Persistent cookies are automatically deleted after a stipulated period of time, which can vary from cookie to cookie.

Insofar as personal data is also processed though cookies implemented by us, the processing is carried out in accordance with article 6 section 1 point b of the GDPR either for executing the contract or per article 6 section 1 point f of the GDPR for safeguarding our legitimate interest in the best possible functionality of the website as well as a customer-friendly and effective design of the site visit.

Please note that you can set your browser such that you are informed when cookies are set and that you can decide on their individual acceptance or such that cookies are only permitted in particular cases or that they are generally excluded.

Please note that the functionality of our website can be restricted through the deactivation of cookies.

Contact / contact form
Personal data will be collected within the scope of contact with us (e.g. via contact form or via email). The data collected in the event of the contact form being used can be seen on the respective contact form. This data will be saved and used exclusively for the purposes of answering your issue or for contacting you and the associated technical administration.
The legal basis for the processing of the data is our legitimate interest in answering your issue per article 6 section 1 point f of the GDPR. If your contact is aimed at concluding a contract, the additional legal basis for processing per article 6 section 1 point b of the GDPR also applies.

Sending the email newsletter to existing customers
If you have provided your email address when purchasing goods or services, we reserve the right to send you offers for similar goods or services to those that you have already purchased, from our range, at regular intervals via email. According to § 7 section 3 UWG [German unfair competition legislation], we do not need to obtain separate permission from you for this. The data processing is implemented exclusively on the basis of our legitimate interest in personalised direct advertising per article 6 section 1 point f of the GDPR. If you have expressly forbidden the use of your email address for this purpose at the start, we will not send such emails. You are entitled to veto the use of your email address for the aforementioned advertising purposes at any time with immediate effect for the future by sending a message to the responsible party named at the top.
After receiving your veto, the use of your email address for advertising purposes will cease immediately.

Advertising by post
On the basis of our legitimate interest in personalised direct advertising, we reserve the right to save your forename and surname, your postal address and - insofar as we have received this information from you within the course of the contractual relationship - your title, academic qualifications, your year of birth and your profession, industry or business name per article 6 section 1 point f of the GDPR, and to use this to send interesting offers and information on our products by post.

You can veto the saving and use of your data for this purpose at any time through a corresponding message to the responsible party.

Use of YouTube videos

This website uses the YouTube embedding function to display and play videos of the operator "YouTube", which belongs to Google LLC., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google").

The enhanced data protection mode is used here as the user information is only saved once the respective video has started to play, according to the providers information. If the playing of the embedded YouTube video is started, the provider sets "YouTube" cookies in order to collect information about the user behaviour. According to information from "YouTube", these serve to collect video statistics to improve the user-friendliness and to prevent improper activities amongst other things. If you are logged in with Google, your data is directly assigned to your account if you click on a video. If you do not wish this assignment with your YouTube profile, you must log out before activating the button. Google saves your data (even for users that are not logged in) as usage profiles and assesses these. One such assessment in particular is carried out in accordance with article 6 section 1 point f of the GDPR on the basis of the legitimate interests of Google in the incorporation of personalised advertising, market research and/or the demand-oriented design of their website. You are entitled to veto the formation of these user profiles, whereby you must contact YouTube to exercise this right.

Independent of any playing of the embedded videos, with every call-up of this website a "double-click" connection to the Google network is recorded, which could trigger further data processing activities without our influence.

Google LLC is based in the USA and is certified for the US-European data protection convention "Privacy Shield", which guarantees compliance with the data protection level applicable in the EU.

For more information on data protection at "YouTube", please refer to the data protection declaration of the provider.

Google reCAPTCHA
This website also uses the Google reCAPTCHA function from Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). This function serves primarily to differentiate between an entry being made by a natural person or improper use through machine-generated or automated processing. The service includes the sending of the IP address and potentially other data required by Google for the reCAPTCHA service, to Google and is carried out in accordance with article 6 section 1 point f of the GDPR on the basis of our legitimate interest in determining the individual intentions of interactions in the Internet and the prevention of misuse and spam.
Google LLC is based in the USA and is certified for the US-European data protection convention "Privacy Shield", which guarantees compliance with the data protection level applicable in the EU.
For more information on Google reCAPTCHA, please refer to the data protection declaration of Google.

Rights of the parties concerned
The applicable data protection law assigns comprehensive rights (right to information and right to intervene) to you as detailed hereafter, with respect to the responsible party and their processing of your personal data:

Right to information per article 15 of the GDPR
You have in particular, the right to information about the personal data processed by us, the purpose of the processing, the categories of personal data processed, the recipients or categories of recipients to whom your data has been or will be disclosed, the planned duration of storage or the criteria for determining the storage duration, the existence of a right to the data being corrected, deleted, restricted in use or its processing being refused altogether, the right of appeal to a regulatory authority, the origin of your data, if this has not been collected from you by us, the existence of automated decision-making including profiling and in some cases meaningful information pertaining to the logic involved and the importance assigned to you and the desired effects of such processing, as well as your right to information, which guarantees exist per article 46 of the GDPR with the forwarding on of your data to third countries.

Right to correction per article 16 of the GDPR
You have the right to immediate correction of incorrect data relating to you and/or the completion of incomplete data pertaining to you and stored by us.

Right to deletion per article 17 of the GDPR
You have the right to demand the deletion of your personal data upon presentation of the prerequisites of article 17 section 1 of the GDPR. However, this right does not exist in particular if the processing is required to exercise the right of free speech and freedom to information, to fulfil a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims.

Right to restrict the processing per article 18 of the GDPR
You have the right to demand the restriction of the processing of your personal data so long as the correctness of the data being disputed by you is being checked, if you reject the deletion of your data due to impermissible data processing and instead of this demand the restriction of the processing of your data, if you require your data for asserting, exercising or defending legal claims, after we no longer require this data after having achieved its purpose or if you have registered an objection for reasons of your particular situation, in the absence of information as to whether our legitimate reasons are outweighed.

Right to information per article 19 of the GDPR
If you have asserted your right to correction, deletion or restriction of processing with respect to the responsible party, they are obligated to pass on this correction or deletion of data or restriction of processing to all recipients to whom the personal data in question was disclosed, unless this transpires to be impossible or the effort associated with doing so is unreasonable. You have the right to be informed of these recipients.

Right to data portability per article 20 of the GDPR
You have the right to receive the personal data that you have provided to us, in a structured, current and machine-readable format or to request that it is transferred to another responsible party insofar as this is technically feasible.

Right to revoke your consent per article 7 section 3 of the GDPR
You have the right to revoke your consent for processing data at any time with immediate effect for the future. In the event of revocation, we will delete the data involved immediately insofar as further processing cannot be supported by a legal basis for non-consensual processing. The revocation of consent will have no effect on the legality of the processing already carried out on the basis of the consent prior to revocation.

Right of appeal per article 77 of the GDPR
If you are of the opinion that the processing of the personal data pertaining to yourself infringes the GDPR, you have - without prejudice to any other administrative right or legal remedy - the right of appeal to a regulatory authority, in particular in the member state of your domicile, your workplace or the place of the suspected infringement.

Objection
If we process your personal data within the course of a balancing of interest due to our predominantly legitimate interests, you have the right at all times, for reasons that arise due to your particular situation, to register an objection to this processing with immediate effect for the future.

If you exercise your right to object, we will cease the processing of the data in question. However, we reserve the right to further processing if we can verify compelling legitimate grounds for the processing, that outweigh their interests, basic rights and basic freedoms, or if the processing serves the assertion, exercising or defence of legal claims.

If your personal data is processed by us in order to facilitate direct advertising, you have the right to object to the processing of information pertaining to yourself for this type of advertising, at any time. You can exercise this objection as described above.

Collection and processing of personal data
We process your enquiry data (e.g. services used, name of contact person) in order to fulfil our contractual obligations and services per article 6 section 1 point b of the GDPR. The information marked as mandatory in the online form is essential for the processing of your enquiry.

Use and passing on of personal data
We will use the personal data that you provide exclusively for the purposes of fulfilling your wishes and requirements, generally to fulfil the contract concluded with you or to answer your enquiry.
We will not pass on, sell or transfer your personal data in any way to third parties unless this is essential for the purposes of fulfilling the contract, to provide information or to complete a service.

Time for which personal data is retained
The time for which personal data is retained is determined by the respective legal retention period (e.g. retention periods dictated by commercial law and tax law). After the retention period has expired, the corresponding data will be routinely deleted insofar as it is no longer required for contract fulfilment or contract initiation and/or if there is no longer any legitimate interest in retaining it on our side.

Access to data and de-listing
Insofar as you are interesting in knowing which personal data or data relevant to your business activities we have saved as a result of your visit to our homepage in the Internet, please contact us via datenschutz@spinner.eu.com
We will send you reminders about our instructions and conditions, advertising materials and information about activities at regular intervals via email, unless you have informed us that you do not want this. You can contact us accordingly at datenschutz@spinner.eu.com.

Liability for links
Our internet presence contains links to external websites. We have no influence over the contents of these websites. We are therefore also unable to provide any guarantee for these third-party contents. Responsibility for the contents of the linked sites always lies with the provider or operator in question. The linked sites were checked for possible legal violations when the link was created. No illegal contents were detected at the time of linking. However, it is not reasonable for us to continuously check the contents of the linked sites without concrete information that a breach of law has occurred. Should we become aware of any infringements of the law, we will remove the relevant links immediately.

Security information
Please note that the transfer of data in the Internet (e.g. communication via email) can exhibit security loopholes and so complete data security cannot be guaranteed. The use of the contact details, published within the framework of the legal notice or any other part of this website, for the purpose of sending unsolicited advertising material or other information is hereby expressly prohibited.

Contact
If you have further questions about data protection or requests for information or changes,
we would be delighted to help you via datenschutz[at]spinner.eu.com.