I. Name and address of the person responsible
The person
responsible within the meaning of the General Data Protection
Regulation and other national data protection laws of the member
states and additional data protection regulations is:
Druckerei C.H.Beck
Bergerstraße 3
86720
Nördlingen
Germany
Tel.: +49 9081
85-0
Email:
info@becksche.de
Website:
www.becksche.de
II. Name and address of the data protection officer
The data protection officer of the person responsible is:
Harald Gehring
Druckerei C.H.Beck
Bergerstraße 3
86720 Nördlingen
Germany
Tel.: +49 9081 85-214
Email: datenschutz@becksche.de
Website:
www.becksche.de
III.
General information about data processing
1.
Scope of
processing of personal data
In principle, we
collect and use the personal data of our users only to the extent
necessary for the provision of a functional website and our content
and services. The collection and use of our users’ personal data
only occurs with the consent of the user. An exception applies to
cases in which prior consent cannot be obtained for factual reasons
and the processing of the data is permitted by law.
2.
Legal basis for
the processing of personal data
Insofar as we obtain
the consent of the data subject to process personal data, Art. 6
para 1 letter a EU General Data Protection Regulation (GDPR) serves
as the legal basis for the processing of such data.
Art. 6 para 1 letter
b GDPR serves as the legal basis for the processing of personal
data required to transact a contract to which the data subject is a
party. This also applies to processing operations required to carry
out pre-contractual transactions.
Art. 6 para 1 letter
c GDPR serves as the legal basis insofar as it is necessary to
process personal data to fulfil a legal obligation to which our
company is bound
.
Art. 6 para 1 letter
d GDPR serves as the legal basis should vital interests of the data
subject or any other natural person require the processing of
personal data.
Art. 6 para 1 letter
f GDPR serves as the legal basis
for the
processing of personal data if such processing is
necessary to safeguard the legitimate
interests of our company or a third party, and the interests,
fundamental rights and freedoms of the data subject shall not
prevail over the former interest.
3.
Deletion of data
and data storage
The personal data of
the data subject will be deleted or blocked once the purpose of the
storage expires. Such storage may also occur where stipulated by
the European or national legislators, EU regulations, laws or other
regulations to which the person responsible is subject. Blocking or
deletion of the data also arises if a storage period prescribed by
the above standards expires, unless there is a requirement for
further storage of data to conclude or perform a contract.
IV.
Provision of the
website and the creation of log files
1.
Description and
scope of data processing
Every time our
website is accessed, our system automatically collects data and
information from the computer system of the requesting computer.
The following data is therefore collected
:
(1)
Information on
the browser type and version used
(2)
The user’s
operating system
(3)
The user’s
Internet service provider
(4)
The user’s IP
address
(5)
Date and time of
access
(6)
Websites from
which the user’s system arrived on our website
(7)
Websites
accessed by the user’s system through our website
The data is also
stored in our system log files. We do not store this data with
other personal data belonging to users
.
2.
Legal basis for
data processing
Art. 6
para 1 letter f GDPR is the legal basis for the above
storage of data and log files.
3.
Purpose of data
processing
The temporary
storage of the IP address by the system is necessary to enable
delivery of the website to the user’s computer. To do this, the
user's IP address must be retained for the duration of the
session.
Storage in log files
is carried out to ensure the functionality of the website. Data is
also used to optimise the website and to ensure the security of our
information technology systems. An evaluation of the data for
marketing purposes does not take place in this context.
Our legitimate
interest in the processing of data for these purposes is pursuant
to Art. 6 para 1 letter f GDPR
.
4.
Duration of
storage
The data will be
deleted immediately when it is no longer necessary for the purposes
for which it was collected. When collecting the data to enable us
to provide the website, data will be deleted when the respective
session is ended.
If data is stored in
log files, storage will be no longer than seven days. An additional
period of storage may occur. In this case, the IP addresses of the
users will be deleted or removed to prevent an assignment of the
requesting client
.
5.
Right to
objection and removal
The collection of
data for the provision of the website and the storage of the data
in log files is essential for the operation of the website. The
user therefore has right of appeal.
V.
Use of
cookies
a) Description
and scope of data processing
Our website uses
cookies. Cookies are text files that are stored on the Internet
browser or the Internet browser on the user's computer system. When
a user visits a website, a cookie may be stored on the user's
operating system. This cookie contains a character string that
allows the browser to be uniquely identified when the website is
reopened.
We use cookies to
make our website more user-friendly. Some elements of our website
require the requesting browser to be identified even after a page
change.
The following
data is therefore stored and transmitted by cookies:
(1)
Login
information
b) Legal basis
for data processing
The legal basis
for the processing of personal data using cookies is Art. 6
para 1 letter f GDPR.
c) Purpose of
data processing
The purpose of using
technical, essential cookies is to facilitate the use of websites
for users. Some features of our website cannot be provided without
the use of cookies, and for this the browser must be recognised
even after a page change.
We require
cookies for the following applications:
(1)
Shopping
cart
(2)
Definition of
language settings
The user data
collected by technically necessary cookies are not used to create
user profiles.
Our legitimate
interest for processing personal data for these purposes is in
accordance with Art. 6 para 1 letter f GDPR.
e) Period of
storage, right to objection and removal
Cookies are stored
on the user’s computer and transmitted by the computer to our site.
As a user, therefore, you have full control over the use of
cookies. You can change the settings in your Internet browser to
disable or restrict the transmission of cookies. Cookies that are
already saved on your computer may be deleted at any time. This can
also be carried out automatically. If cookies are disabled for our
website you may not be able to use all the functions of the website
to the full extent.
VI.
Registration
1.
Description and
scope of data processing
On our website we
offer users the opportunity to register by providing personal
information. The data is entered into an input mask, transmitted to
us and stored. Data is not transmitted to third parties. The
following data is collected during the registration process:
First name, last name, postal address, email address, telephone
number
Additional info required for business customers: company and, where
appropriate, tax ID reference (depending on the country)
The following
data is also stored at the time of registration:
(1)
User’s IP
address
(2)
Date and time of
registration
The user’s
consent to process this data is obtained as part of the
registration process.
2.
Legal basis for
data processing
Registration
serves to fulfil a contract of which the user is a party or to
implement pre-contractual measures, so additional legal basis
exists for the processing of the data under Art. 6 para 1
letter b GDPR.
3.
Purpose of data
processing
The registration
of the user is necessary to fulfil a contract with the user or to
carry out pre-contractual measures.
Manuals and other printed products relating to Ford automobiles are
sold on the website. The data collected serves to process the
payment and to despatch the goods.
4.
Period of
storage
The data will be
deleted once it ceases to be required for the purpose of its
collection.
This will apply
during the registration process to fulfil a contract or to perform
pre-contractual measures if the data is no longer required to
perform the contract. We may also be required to store the
contracting party’s personal data to comply with contractual or
legal obligations after the conclusion of the contract.
5.
Right to
objection and removal
As a user, you
can cancel the registration at any time. You can amend the data
stored about you at any time.
To do this, please use the email address:
z-order-support@becksche.de
If the data is
required to fulfil a contract or to carry out pre-contractual
measures, premature deletion of the data is only possible insofar
as contractual or legal obligations would prevent deletion.
VII.
Email
contact
1.
Description and
scope of data processing
You can contact us
via the email address provided. In this case, the user's personal
data transmitted by email will be stored.
Your data will not
be disclosed to third parties in this event and will be used
exclusively for processing the email exchange.
2.
Legal basis for
data processing
The legal basis for
processing the data is the user’s consent pursuant to Art. 6 para 1
letter a GDPR.
The legal basis for
the processing of the data transmitted when sending an email is
Art. 6 para 1 letter f GDPR. If the purpose of the email contact is
to conclude a contract, then an additional legal basis to process
such is Art. 6 para 1 letter b GDPR.
3.
Purpose of data
processing
The processing of
personal data arising from a contact via email serves exclusively
to process the contact procedure. This also includes the legitimate
interest required to process the data.
4.
Period of
storage
The data will be
deleted insofar as it is no longer required for the purpose for
which is was collected. This will apply to personal data sent by
email when the respective conversation with the user has ended. The
conversation is ended when it can be inferred from the
circumstances that the relevant facts have been definitively
clarified.
5.
Right of
objection and removal
Users may withdraw
their consent to the processing of their personal data. If the user
contacts us by email, they may object to the storage of their
personal data at any time, in which case the email exchange cannot
continue.
To do this, please use the email address:
z-order-support@becksche.de
In this event,
all the personal data stored during the contact procedure will be
deleted.
VIII.
Rights of the
data subject
If your personal
data is processed, then you are the data subject pursuant to the
GDPR, and you have the following rights with respect to the person
responsible:
1.
Right to
information
You may ask the
person responsible to confirm if your personal data is processed by
us.
If such processing occurs, you can request information from
the person responsible regarding the following:
(1)
the purposes for which the personal data is processed;
(2)
the categories of personal data that
are processed;
(3)
the recipients or categories of
recipients to whom the personal data relating to you has been, or
is still being, disclosed;
(4)
the anticipated period of storage of
your personal data or, if specific information is not available,
criteria for determining the period of storage;
(5)
the existence of a right to
rectification or deletion of personal data concerning you, a right
to restriction of processing by the person responsible or a right
to object to such processing;
(6)
the existence of a right of appeal to a
supervisory authority;
(7)
all available information on the source
of the data if the personal data has not been collected from the
data subject;
(8)
the existence of automated
decision-making, including profiling, in accordance with Art. 22
para 1 and 4 GDPR and, at least in these cases, substantial
information regarding the logic, scope and intended effects of such
processing on the data subject.
You have the right
to request information as to whether your personal information is
transmitted to a third country or an international organisation. In
this respect, you can request the appropriate guarantees pursuant
to Art. 46 GDPR relating to the transfer.
2.
Right to
rectification
You are entitled to
rectify and/or complete your data with respect to the person
responsible if the personal data that has been processed is
incorrect or incomplete. The person responsible must apply the
corrections immediately.
3.
Right to
restrict processing
You may impose
restrictions on the processing of your personal data under the
following conditions:
(1)
if you contest the accuracy of your
personal information for a period of time that enables the person
responsible to verify the accuracy of your personal
information;
(2)
the processing is unlawful and you
refuse to delete the personal data and instead request the
restriction of the use of such personal data;
(3)
if
the person responsible no longer
requires your personal data for processing, but you require such
data to assert, exercise or defend legal claims, or
(4)
if you objected to the processing in
accordance with Art. 21 para 1 GDPR and have not yet established
whether the legitimate reasons of the person responsible prevail
over your reasons.
If the processing of
your personal data has been restricted, this data may only be used
with your consent or for to assert, exercise or defend legal claims
or to protect the rights of another natural or legal person or for
reasons of important public interest for the Union or a Member
State.
If a restriction on the processing based on the above
conditions is limited, you will be informed by the person
responsible before the restriction is lifted.
4.
Right to
deletion
a)
Obligation to
delete
You may ask the
person responsible to immediately delete your personal information,
and the person responsible will be required to delete such
information without delay if any of the following apply
:
(1)
Your personal data is no longer
required for the purposes for which they were collected or
otherwise processed;
(2)
You revoke your consent to the
processing pursuant to Art. 6 para 1 letter a or Art. 9 para 2
letter a GDPR and there is no other legal basis for the
processing;
(3)
You object to processing pursuant to
Art. 21 para 1 GDPR, as there are no prior justifiable reasons for
such processing or object to processing in accordance with Art. 21
para 2 GDPR;
(4)
Your personal data has been processed unlawfully;
(5)
The deletion of your personal data is
required to fulfil a legal obligation under Union law or the law of
the Member State to which the person responsible is
subject;
(6)
Your personal data was collected in
relation to services requested from the information society under
Art. 8 para 1 GDPR.
b)
Information to
third parties
If the person
responsible has made your personal data public and is obliged to
delete such information in accordance with Article 17 para 1 GDPR,
the person responsible shall take the appropriate measures, taking
into account the available technology, the implementation costs and
the technical methods, to inform the relevant person responsible
for processing the personal data that you, the data subject, have
requested the deletion of all associations with such personal data
or of copies or duplications of such
.
c)
Exceptions
The right to
deletion shall not exist insofar as processing is required:
(1)
To e
xercise the right to freedom of
expression and information;
(2)
To f
ulfil a legal obligation required by
the law of the Union or the Member State to which the person
responsible is subject, to carry out a task of public interest or
to exercise the official authority conferred on the person
responsible;
(3)
F
or reasons of public interest in the
area of public health pursuant to Art. 9 para 2 letters h and i and
Art. 9 para 3 GDPR;
(4)
F
or archival purposes of public
interest, scientific or historical research purposes or for
statistical purposes under Art. 89 para 1 GDPR, insofar as the law
referred to in section a) is likely to render impossible or
seriously affect the achievement of the objectives of such
processing, or
(5)
T
o assert, exercise or defend legal
claims.
5.
Right to
information
If you asserted the
right to rectify, delete or restrict the processing with respect to
the person responsible, such person must notify all the recipients
to whom your personal data has been sent of such data correction or
deletion or of the restriction imposed on the processing of such,
unless such action proves to be impossible or involves a
disproportionate effort.
You have a right to request the person responsible to inform
you of such recipients.
6.
Right to data
portability
You have a right to
receive any information you provide to the person responsible and
which identifies you as a person, in a structured, standard and
machine-readable format. You also have the right to transfer this
data to another person responsible with no objection from the
person responsible to whom the personal data was submitted,
provided:
(1)
Processing is based on consent granted in accordance with
Art. 6 para 1 letter a GDPR or Art. 9
para 2 letter a GDPR or in a contract pursuant to
Art. 6 para 1 letter b GDPR, and
(2)
Processing is carried out using an automated process.
In exercising this
right, you also have the right to allow your personal data to be
transmitted directly from one person responsible to another insofar
as this is technically feasible. Freedoms and rights of other
persons must not be affected hereby.
The right to data portability does not apply to the
processing of personal data necessary for the performance of a task
in the public interest or to exercise the official authority
delegated to the person responsible.
7.
Right to
object
You have the right
at any time to object to the processing of personal data relating
to you which arises based on your particular situation pursuant to
Art. 6 para 1 letters e or f GDPR; this also applies to profiling
based on these provisions
.
The person
responsible will cease processing your personal data unless they
can demonstrate compelling legitimate grounds for such processing
that prevail over your interests, rights and freedoms, or if such
processing is designed to enforce, exercise or defend legal
claims.
If your personal
data is processed for direct marketing purposes, you have the right
to object at any time to the processing of your personal data for
such advertising; this also applies to profiling insofar as it is
associated with direct marketing.
If you object to
processing for direct marketing purposes, your personal data will
cease to be processed for such purposes
.
Regardless of
Directive 2002/58/EC, you have the option to exercise your right to
object through automated procedures that use technical
specifications as part of the use of the services of the
information society
.
8.
Right to revoke
the declaration of consent under data protection law
You may withdraw
your declaration of consent under data protection law at any time.
The revocation of consent does not
affect the legality of the processing that was carried out based
the consent provided until such revocation.
9.
Automated
decision-making in individual cases, including
profiling
You have the right
not to be subjected to a decision based solely on automated
processing, including profiling, that will have legal effect or
which will affect you in a significant and comparable way.
This shall not
apply if the decision:
(1)
is required to conclude or perform a
contract between you and the person responsible,
(2)
is
permissible based on Union or Member
State legislation to which the person responsible is subject, and
such legislation contains adequate measures to safeguard your
rights, freedoms and legitimate interests, or
(3)
takes place with your explicit consent.
However, these
decisions must not be based on specific categories of personal data
under Art. 9 para 1 GDPR, unless Art. 9 para 2 letters a or g apply
and the appropriate measures have been taken to protect rights,
freedoms and your legitimate interests
.
With regard to
the cases referred to in (1) and (3), the person responsible shall
take the appropriate measures to uphold rights, freedoms and your
legitimate interests, including as a minimum the right to obtain
the intervention of a person by the person responsible to express
their own position and to contest the decision.
10.
Right to appeal
to a supervisory authority
Without prejudice to
any other administrative or judicial remedy, you have the right to
appeal to a supervisory authority, in particular in the Member
State in which you reside, of your place of work or place of
alleged infringement, if you believe that the processing of your
personal data violates the provisions of the GDPR.
The supervisory authority to which the appeal has been
submitted shall inform the plaintiff of the status and outcome of
such appeal, including the potential of a judicial remedy pursuant
to Art. 78 GDPR.