Privacy Policy

I. Who is responsible and how can I contact them?

Responsible
for the processing of personal data within the meaning of the EU General Data Protection Regulation (GDPR)
Siempelkamp Logistics & Service GmbH Sandweg 2-6
55543 Bad Kreuznach

Data protection officer
The data protection officer
Siempelkamp Logistics & Service GmbH
Sandweg 2–6
55543 Bad Kreuznach
Email: datenschutz@sls.siempelkamp.com

II. What is this about?
This privacy policy meets the legal requirements for transparency in the processing of personal data. This includes all information relating to an identified or identifiable natural person. This includes, for example, information such as your name, age, address, telephone number, date of birth, email address, IP address, or user behavior when visiting a website. Information that we cannot link to your person (or only with disproportionate effort), e.g. through anonymization, is not personal data. The processing of personal data (e.g. collection, retrieval, use, storage, or transmission) always requires a legal basis and a defined purpose.
Stored personal data is deleted as soon as the purpose of processing has been achieved and there are no legitimate reasons for further storage of the data. We will inform you of the specific storage periods or criteria for storage in the individual processing operations. Irrespective of this, we store your personal data in individual cases for the assertion, exercise, or defense of legal claims and in the event of statutory retention obligations.

III. Who receives my data?
We only disclose your personal data that we process on our platform to third parties if this is necessary for the fulfillment of the purposes and is covered by the legal basis (e.g., consent or protection of legitimate interests) in individual cases. In addition, we may disclose personal data to third parties in individual cases if this serves to assert, exercise, or defend legal claims. Possible recipients may then include, for example, law enforcement authorities, lawyers, auditors, courts, etc.
If we use service providers to operate our website who process personal data on our behalf within the scope of order processing in accordance with Art. 28 GDPR, these may be recipients of your personal data. You can find more detailed information on the use of order processors and web services in the overview of the individual processing operations.
The use of the catalogue makes the collection, processing, and use of personal data by the operator unavoidable. The operator assures that all stored data will be treated with care and processed exclusively within the framework agreed in the terms of use. Any further use of personal data by the operator and the affiliated companies of the Siempelkamp Group will only take place if this is legally permissible or if the user has given their prior consent.

IV. What rights do I have?
Under the conditions of the legal provisions of the General Data Protection Regulation (GDPR), you as the data subject have the following rights:

Information pursuant to Art. 15 GDPR about the data stored about you in the form of meaningful information about the details of the processing and a copy of your data;
Rectification pursuant to Art. 16 GDPR of inaccurate or incomplete data stored by us;
Deletion pursuant to Art. 17 GDPR of the data stored by us, unless the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise, or defense of legal claims;
Restriction of processing pursuant to Art. 18 GDPR, insofar as the accuracy of the data is disputed, the processing is unlawful, we no longer need the data, and you refuse to have it deleted because you need it to assert, exercise, or defend legal claims, or you have objected to the processing pursuant to Art. 21 GDPR.
Data portability pursuant to Art. 20 GDPR, insofar as you have provided us with personal data within the scope of consent pursuant to Art. 6 (1) (a) GDPR or on the basis of a contract pursuant to Art. 6 (1) (b) GDPR and this data has been processed by us using automated procedures. You will receive your data in a structured, commonly used, and machine-readable format, or we will transmit the data directly to another controller, if this is technically feasible.
Objection pursuant to Art. 21 GDPR to the processing of your personal data, insofar as this is based on Art. 6 (1) (e), (f) GDPR and there are reasons for this arising from your particular situation or the objection is directed against direct marketing. The right to object does not apply if there are compelling legitimate grounds for the processing or if the processing is for the establishment, exercise, or defense of legal claims. If the right to object does not exist for individual processing operations, this is indicated there.
Revocation pursuant to Art. 7 (3) GDPR of your consent with effect for the future.
Complaint pursuant to Art. 77 GDPR to a supervisory authority if you believe that the processing of your personal data violates the GDPR. As a rule, you can contact the supervisory authority of your usual place of residence, your place of work, or our company headquarters.

V. How exactly is my data processed?

Below, we provide information about the individual processing operations, the scope and purpose of data processing, the legal basis, the obligation to provide your data, and the respective storage period. Automated decision-making in individual cases, including profiling, does not take place.

1. Provision of the catalogue

Type and scope of processing
When using our Sales Innovation Lab, we collect the following personal data:

• Company-affiliated user login
• Usage data (e.g., access times, URLs accessed)
• Technical data (e.g., IP address, browser and device information)

Purpose and legal basis
This data is processed for the following purposes:

1. Provision and administration of the Sales Innovation Lab
2. Improvement and further development of the platform
3. Analysis of usage to optimize our offerings

The legal bases for processing are:

• Art. 6 (1) (b) GDPR (performance of a contract): For the provision and administration of the lab and communication with users.
• Art. 6 (1) (f) GDPR (legitimate interest): For the improvement and further development of the platform and the analysis of usage. Our legitimate interest lies in optimizing our offering and ensuring the best possible user experience.

Storage period
The data will be stored for the duration of use of the Sales Innovation Lab. After termination of use, the data will be retained for a further 6 months. After that, the data will be deleted unless there are legal retention obligations or a legitimate interest in longer retention.

2. User account management

You have the option of having user accounts created by the operator in our Innovation Lab. We collect the following personal data in order to manage these accounts:

• Company-affiliated user login
• Usage data (e.g., access times, URLs accessed)
• Technical data (e.g., IP address, browser and device information) [JH3.1]

Purpose and legal basis
This data is processed for the following purposes: Provision and administration of user accounts.

The legal bases for processing are:

• Art. 6 (1) (b) GDPR (performance of a contract): For the provision and administration of the lab and communication with users.
• Art. 6 (1) (f) GDPR (legitimate interest): For the improvement and further development of the platform and the analysis of its use. Our legitimate interest lies in optimizing our offering and ensuring the best possible user experience.

Storage period
The data will be stored for the duration of use of the Sales Innovation Lab. After termination of use, the data will be retained for a further 3 months. After that, the data will be deleted unless there are legal retention obligations or a legitimate interest in longer retention.

3. Videos – no third-party providers

Type, scope, and purpose of processing
In order to make the Innovation Lab's online offering as user-friendly as possible, we also provide some of our content via videos. The videos are also provided via our own web server. This means that we do not use third-party providers such as YouTube etc. for the videos and do not pass on your data to third parties.

Legal basis
• Furthermore, we base the collection of our users' personal data in connection with the provision of videos on a legitimate interest in ensuring the best possible user experience and optimizing our online offering, Art. 6 (1) lit. f GDPR (legitimate interest).

Storage period
The data will only be stored to the extent necessary for the above-mentioned purpose. After that, the data will be deleted unless there are legal retention obligations or a legitimate interest in longer storage.

4. Data processing for advertising purposes

Type, scope, and purpose of processing

As described in our Terms of Use, the Innovation Lab is a “service in exchange for data” model. This means that we also process your data for advertising purposes so that we can continue to provide you with the Innovation Lab at no additional cost. We may use your contact details for advertising purposes by email and post. If you wish to access the Innovation Lab, you must therefore agree to the use of your data for the purpose of contacting you by email and post. This procedure is permissible and compatible with Art. 7 (4) GDPR (see OLG Frankfurt, judgment of June 27, 2019, ref.: 6 U 6/19).

Legal basis
Your contact details are processed on the basis of our legitimate interest pursuant to Art. 6 (1) (f) GDPR. This consists of being able to make the Innovation Lab available to you on a permanent basis at no additional cost. Based on the express agreement in our Terms of Use, this is a permissible “service in exchange for data” model in which the legitimate interests of users do not outweigh our interests. Consent within the meaning of Section 7 (2) UWG (German Unfair Competition Act) can also be assumed.