Data protection website

Information obligations according to Art. 12, 13 et seqq. EU GDPR

1. Name and address of the data controller

Your contact as data controller within the meaning of the European German Data Protection Regulation ("EU GDPR") and other national data protection laws of the member states as well as other provisions under data protection law is:

Vauth Aviation Components GmbH & Co.KG
Hembser Str. 1
D-33034 Brakel
Email: info@vauth-aviation.de
Phone: +49-5272-3713-0

(hereinafter referred to as "we", "us" or "our")

2. Name and address of the data protection officer

The protection of your personal data is of high importance for Vauth Aviation Components GmbH & Co.KG. In order to express this importance we have commissioned a consulting company, which is specialised in data protection and data security, to take over these central topics. Our data protection officer also stems from this very experienced group of experts. We are advised by:

ProIT Service GmbH
Urbanstraße 1
81371 Munich

With regard to all questions relating to the topic of data protection and data security in our company please contact our data protection officer of ProIT Service GmbH directly:

Email: datenschutz_vauth@proit-service.de
Phone: +49 (89) 41 41 41 31 –0

3. General information relating to data processing

a. Scope of the processing of personal data

We shall principally only process your personal data insofar as this is necessary in order to carry out our services. As a rule, the processing of your personal data is only carried out on the basis of your consent. One exception shall apply in those cases, in which obtaining a consent in advance is not possible for actual reasons or the processing of your personal data is permitted by a statutory permit.

b. Legal bases for the processing of personal data

Insofar as we obtain a consent from you for the processing of personal data, Art. 6 Para. 1 lit. a EU GDPR shall serve us as a legal basis.
With the processing of personal data, which is necessary in order to fulfil a contract between you and us, Art. 6 Para. 1 lit. b EU GDPR shall serve us as a legal basis. This shall also apply to processing activities, which are necessary in order to carry out pre-contractual measures.
Insofar as a processing of personal data is necessary in order to fulfil a legal obligation, which we have to comply with, Art. 6 Para. 1 lit. c EU GDPR shall serve us as a legal basis.
In the event that vital interests of you or another natural person render a processing of personal data necessary, Art. 6 Para. 1 lit. d EU GDPR shall serve us as a legal basis.
If the processing is necessary in order to safeguard a legitimate interest of us or of a third party and if your interests, fundamental rights and freedoms do not outweigh the first named interest, then Art. 6 Para. 1 lit. f EU GDPR shall serve us as a legal basis for the processing.

c. Data erasure and storage duration

Your personal data will be erased or blocked as soon as the purpose of the storage ceases to apply. A storage can additionally be carried out if this was envisaged by the European or national legislator in regulations under Union law, laws or other regulations, which we have to comply with. A blocking or erasure of the data will also be carried out if a storage deadline stipulated by the stated standards expires, unless a further storage of the data is necessary for the conclusion of a contract or a fulfilment of a contract.

4. Provision of the website and creation of log files

a. Legal basis for the data processing

The legal basis for the processing of your personal data within the scope of the provision of the website and the creation of log files is Art. 6 Para. 1 lit. f EU GDPR.

d. Purpose of the data processing

The temporary storage of your personal data by us is necessary in order to enable the website to be delivered to your computer. Your personal data must be stored for the duration of the session for this purpose. 
The storage of your personal data in log files is carried out in order to ensure the functionality of the website. The log files contain the following data:

  • Referrer (previously visited website)
  • Requested website or file
  • Browser type and browser version
  • Used operating system
  • Used device type
  • Time of the access
  • IP address in an anonymised form (is only used to determine the location of the access)

Moreover, your personal data serve us to optimise the website and to ensure the security of our IT systems. An evaluation of your personal data for marketing purposes will not take place in this context. 
These purposes also constitute our legitimate interest in the data processing according to Art. 6 Para. 1 lit. f EU GDPR.

e. Duration of the storage

Your personal data will be erased as soon as they are no longer required in order to achieve the purpose of their collection. In the event of the entry of your personal data in order to provide the website this is the case as soon as the respective session is ended. 
In the event of the storage of your personal data in log files these will be erased after seven days at the latest. A storage beyond this is possible. In this case your personal data will be erased or alienated so that an allocation of the calling client is no longer possible.

f. Possibility for objection and remedy

The entry of your personal data for the provision of the website and the storage of your personal data in log files is absolutely essential for the operation of the website. There is consequently no possibility for objection for you.

5. Contact by email

a. Legal basis for the data processing

The legal basis for the processing of your personal data, which are transmitted in the event of a contact by email, is Art. 6 Para. 1 lit. f EU GDPR. If the contact by email is aimed at the conclusion of a contract then Art. 6 Para. 1 lit. b EU GDPR is an additional legal basis for the processing.

g. Purpose of the data processing

The processing of your personal data in the event of a contact by email solely serves us to process the establishment of a contact.

h. Duration of the storage

Your personal data will be erased as soon as they are no longer required in order to achieve the purpose of their collection.

i. Possibility for objection and remedy

You always have the possibility to object to the processing of your personal data within the scope of the contact by email at all times for the future. In such a case the conversation between you and us cannot be continued. All personal data, which were stored over the course of the contact, will be erased in this case.

6. Direct marketing

a. Legal basis for the data processing

The legal basis for the processing of your personal data within the scope of direct marketing by post is Art. 6 Para. 1 lit. f EU GDPR.

j. Purpose of the data processing

The purpose of the processing of your personal data within the scope of the direct marketing by post is the promotion of the sales of goods or services. This purpose constitutes our legitimate interest in the data processing according to Art. 6 Para. 1 lit. f EU GDPR.

k. Duration of the storage

Your personal data will be erased as soon as they are no longer required for achieving the purpose of their collection; this is in particular the case with the receipt of the objection.

l. Possibility for objection and remedy

You can object to the processing of your personal data within the scope of the direct marketing by post at all times for the future.

7. Categories of recipients

Within our company those bodies and departments will receive personal data, which need these in order to fulfil the previously mentioned purposes. In addition we partly use various service providers and transmit your personal data to further trustworthy recipients. These can e.g. be:

  • Banks
  • Printing shops
  • IT service providers
  • Lawyers and courts

If necessary, valid and current data processing contracts exist with all service providers and trustworthy recipients.

8. Job applications

A separate email address (karriere@vauth-aviation.de) is exclusively available for job applications. This is not subject to the automatic archiving. After conclusion of the application procedure the application will be stored for a maximum of 6 months and will then be erased.

9. Forwarding of data to third parties, no data transfer into non-EU overseas countries

We shall principally only use your personal data within our company. A data transfer to bodies or persons outside of the EU will not take place and is not planned.
If and as far as we involve third parties within the scope of the fulfilment of contracts (for example logistics service providers), these shall only receive personal data in the scope, in which the transmission is necessary for the corresponding service.
In the event that we outsource certain parts of the data processing ("contract data processing"), we shall obligate data processors as per contract to only use personal data in line with the requirements of the data protection laws and to guarantee the protection of the rights of the data subject.

10. Rights of the data subject

If your personal data are processed by us you are a data subject within the meaning of the EU GDPR and you are entitled to the following rights towards us:

a. Right to information

You can request from us a confirmation regarding whether personal data, which relate to you, are processed by us. 
If such processing exists you can request details from us about the following information:
(1)     the purposes, for which the personal data are processed;
(2)     the categories of personal data, which are processed;
(3)     the recipients or the categories of recipients, towards which the personal data relating to you were disclosed or will be disclosed still;
(4)     the planned duration of the storage of the personal data relating to you or, if concrete details are not possible in this respect, criteria for the stipulation of the storage duration;
(5)     the existence of a right to rectification or erasure of the personal data relating to you, a right to limitation of the processing by us or a right to object to this processing; 
(6)     the existence of a right to lodge a complaint at a supervisory authority;
(7)     all available information about the origin of the data if the personal data are not collected from you;
(8)     the existence of automated decision-making including profiling pursuant to Art. 22 Para. 1 and 4 EU GDPR and – at least in these cases – feasible information about the involved logics as well as the scope and the intended implications of such processing for you.
You are entitled to the right to request information regarding whether the personal data relating to you will be transmitted to a third country or to an international organisation. In this context you can request to be notified about the suitable guarantees pursuant to Art. 46 EU GDPR in connection with the transmission.

m. Right to rectification

You have a right to rectification and/or completion towards us, insofar as the processed personal data, which relate to you, are incorrect or incomplete. We have to carry out the rectification without delay.

n. Right to limitation of the processing

Under the following prerequisites you can request the limitation of the processing of the personal data relating to you:
(1)     if you dispute the accuracy of the personal data relating to you for a duration, which enables us to check the accuracy of the personal data;
(2)     the processing is unlawful and you refuse the erasure of the personal data and instead request the limitation of the use of the personal data;
(3)     we no longer require the personal data for the purposes of the processing, however you require these for the assertion, exercising or defence of legal claims, or
(4)     if you have filed an objection to the processing pursuant to Art. 21 Para. 1 EU GDPR and it has not yet been determined whether our justified reasons outweigh compared to your reasons.
If the processing of the personal data relating to you was limited, these data – apart from their storage – may only be processed with your consent or for the assertion, exercising or defence of legal claims or for the protection of the rights of another natural person or legal entity or for reasons of an important public interest of the Union or a member state.
If the limitation of the processing was limited according to the aforementioned prerequisites, you will be notified by us before the limitation is revoked.

o. Right to erasure

i. erasure obligation

You can request that we erase the personal data relating to you without delay and we are obligated to erase these personal data without delay if one of the following reasons applies:
(1)     The personal data relating to you are no longer required for the purposes, for which they were collected or were processed in any other manner.
(2)     You revoke your consent, on which the processing was supported pursuant to Art. 6 Para. 1 lit. a or Art. 9 Para. 2 lit. a EU GDPR, and there is a lack of a legal basis for the processing otherwise. 
(3)     You file an objection to the processing pursuant to Art. 21 Para. 1 EU GDPR and there are no prior justified reasons for the processing, or you file an objection to the processing pursuant to Art. 21 Para. 2 EU GDPR. 
(4)     The personal data relating to you were processed unlawfully. 
(5)     The erasure of the personal data relating to you is necessary in order to fulfil a legal obligation according to Union law or the law of the member states, which we have to comply with. 
(6)     The personal data relating to you were collected with reference to offered services of the information society pursuant to Art. 8 Para. 1 EU GDPR.
 

ii. Information to third parties

If we have published the personal data relating to you and if we are obligated to erase these pursuant to Art. 17 Para. 1 EU GDPR, then we will take reasonable measures, also of a technical kind, by taking the available technology and the implementation costs into consideration, in order to inform parties responsible for the data processing, which process the personal data, that you as a data subject, have requested from said parties the erasure of all links to these personal data or of copies or replications of these personal data. 
 

iii. Exceptions

The right to erasure shall not exist insofar as the processing is necessary
(1)     to exercise the right to expression of a free opinion and free information;
(2)     to fulfil a legal obligation, which requires the processing according to the law of the Union or the member states, which we have to comply with, or to perform a task, which is in the public interest or is carried out while exercising public force, which was assigned to us;
(3)     for reasons of public interest in the field of public health pursuant to Art. 9 Para. 2 lit. h and i as well as Art. 9 Para. 3 EU GDPR;
(4)     for archiving purposes in the public interest, scientific or historical research purposes or for statistical purposes pursuant to Art. 89 Para. 1 EU GDPR, insofar as the right stated under Section a) is expected to render the realisation of the aims of this processing impossible or seriously impairs this, or
(5)     is for the assertion, exercising or defence of legal claims.

p. Right to notification

If you have asserted the right to rectification, erasure or limitation of the processing against us, we are obligated to notify all recipients, to which the personal data relating to you were disclosed, of this rectification or erasure of the data or limitation of the processing, unless this proves to be impossible or is associated with a disproportionate amount of work.
You are entitled to the right towards us to be notified about these recipients.

q. Right to data portability

You have the right to receive the personal data relating to you, which you provided to us, in a structured, common and machine-readable format. In addition you have the right to transmit these personal data, which were provided to us, to another data controller without impediment by us, if
(1) the processing is based on a consent pursuant to Art. 6 Para. 1 lit. a EU GDPR or Art. 9 Para. 2 lit. a EU GDPR or on a contract pursuant to Art. 6 Para. 1 lit. b EU GDPR and
(2) the processing is carried out using automated processes.
When exercising this right you furthermore have the right to achieve that the personal data relating to you are transmitted directly from us to another data controller, insofar as this is technically feasible. Freedoms and rights of other persons may not be impaired hereby.
The right to data portability shall not apply to a processing of personal data, which is necessary in order to perform a task, which is in the public interest or which is carried out while exercising public force, which was assigned to us.

r. Right to object

You have the right, for reasons, which arise from your particular situation, to file an objection at all times to the processing of the personal data relating to you, which is carried out owing to Art. 6 Para. 1 lit. e or f EU GDPR; this shall also apply to profiling supported on these provisions. 
We will no longer process the personal data relating to you, unless, we can prove essential reasons worthy of protection for the processing, which outweigh your interests, rights and freedoms, or the processing serves the assertion, exercising or defence of legal claims.
If the personal data relating to you are processed in order to conduct direct marketing, you have the right to file an objection at all times to the processing of the personal data relating to you for the purpose of such marketing; this shall also apply to the profiling, insofar as there is a connection with such direct marketing.
If you object to the processing for purposes of direct marketing then the personal data relating to you will no longer be processed for these purposes.
You have the possibility, in connection with the use of services of the information society – irrespective of the Directive 2002/58/EC – to exercise your right to object by means of automated processes, with which technical specifications are used.

s. Right to revocation of the declaration of consent under data protection law

You have the right to revoke your declaration of consent under data protection law at all times. The lawfulness of the processing, which is carried out owing to the consent until the revocation, will not be affected by the revocation of the consent.

t. Automated decision-making in an individual case including profiling

You have the right to be subjected to a decision that is not exclusively based on automated processing – including profiling –, which shall have a legal effect towards you or which substantially impairs you in a similar manner. This shall not apply if the decision
(1) is necessary for the conclusion or the fulfilment of a contract between you and us,
(2) is permitted owing to legal regulations of the Union or the member states, which we have to comply with, and these legal regulations include adequate measures for safeguarding your rights and freedoms as well as your legitimate interests or
(3) is carried out with your explicit consent.
However, these decisions may not be based on special categories of personal data according to Art. 9 Para. 1 EU GDPR, insofar as Art. 9 Para. 2 lit. a or g EU GDPR does not apply and adequate measures were taken for the protection of the rights and freedoms as well as your legitimate interests.
With regard to the cases stated in (1) and (3) we take adequate measures in order to safeguard the rights and freedoms as well as your legitimate interests, which shall at least include the right to achieve the intervention of a person on our part, to present the own point of view and to contestation of the decision.

u. Right to lodge a complaint at a supervisory authority

Irrespective of a legal remedy under administrative law or court legal remedy otherwise you are entitled to the right to lodge a complaint at a supervisory authority, in particular in the member state of your place of abode, your workplace or the place of the presumed breach, if you are of the opinion that the processing of the personal data relating to you breaches the EU GDPR.

The responsible supervisory authority for us is:
State officer for data protection and freedom of information of North Rhine-Westphalia
Kavalleriestraße 2-44
40213 Düsseldorf
Phone: +49 (0)2 11 . 384 24 – 0
Fax: +49 (0)2 11 . 384 24 – 10
Email: poststelle@ldi.nrw.de
The supervisory authority, at which you have lodged a complaint, will notify you about the status and the results of the complaint including the possibility of a court legal remedy according to Art. 78 EU GDPR.

Our data protection officer will be pleased to be of assistance to you at all times if you have any further questions.

RÖTHE Werbeagentur Herford