Data protection statement

Thank you for your interest in our website. We take the protection of your personal data extremely seriously, and we want you to feel safe when you visit us online. We take steps to protect your privacy and your personal data. In accordance with the contents of this privacy policy, we process your personal data in compliance with the relevant data protection provisions set out in the General Data Protection Regulation (GDPR) and pursuant to the national regulations applicable under Germany’s Federal Data Protection Act (FDPA).

Table of contents

• Name and contact details of the data controller
• Contact with the data protection officer
• What is personal data?
• Purposes of data processing
• Legal basis for data processing
• Use of our website for information purposes
• Use of our website to access further services
• Contacting us
• Newsletter
• Security
• Cookies
• Web analysis
• Social media
• Other functions and contents
• Recipients and transfer of data
• Data transfer to third countries
• Deletion of your data
• Your rights
• General information for customers and suppliers pursuant to Articles 13/14 GDPR

Name and contact details of the data controller
KUNZMANN Maschinenbau GmbH, Tullastraße 29-31, 75196 Remchingen-Nöttingen is the data controller within the meaning of the GDPR in its capacity as operator of the website https://www.kunzmann-fraesmaschinen.de .

Contact with the data protection officer
You may contact our data protection officer at datenschutz@emetz.de or datenschutz@kunzmann-fraesmaschinen.de at any time if you have any concerns regarding privacy.

What is personal data?
Personal data means any information relating to an identified or identifiable natural person. An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

Purposes of data processing
The extent and nature of the collection, processing and use of your data will differ depending on whether you are visiting our Internet presence merely to access information which is generally available or whether you wish to avail yourself of additional services. Within the scope of our business activities, personal data will in all cases only be processed for pre-contractual or contractual purposes. The exercising of a legitimate interest on our part or the need to comply with statutory stipulations may also form the basis for data processing carried out by us. Information on the respective specific purposes of data processing is provided below.

Legal basis for data processing
We process your personal data in accordance with the following legal principles.

• For the performance of a contract or in order to take steps prior to entering into a contract (Article 6, Paragraph 1b) GDPR)
• On the basis of your consent (Article 6, Paragraph 1a) GDPR)
• Within the scope of the pursuit of legitimate interests except in circumstances where such interests are overridden (Article 6, Paragraph 1f) GDPR)
• On the basis of a legal obligation (Article 6, Paragraph 1c) GDPR)

Other legal principles based on country-specific provisions may also be in force depending on the nature and extent of processing. We will notify you of the specific applicable legal principles when processing data in each respective case.

Use of our website for information purposes
You are not required to provide personal data when visiting our website purely for the purpose of obtaining information. In such a case, we will only record the data which is automatically transmitted to us by your Internet browser. Examples of such data include the following.

• Browser type and browser version
• Operating system used
• Referrer URL
• Host name of the computer via which the site is accessed
• Time of server inquiry
• IP address

This normally takes place via the use of log files. The purposes of this processing are to ensure the functionality and compatibility of our website in order to enable use to take place without technical difficulties and to allow rectification of any malfunctions and to provide protection against technical attacks and misuse. The legal basis of this processing is our legitimate interest pursuant to Article 6, Paragraph 1f) GDPR. Proper operation of our website is a justifiable legitimate interest on our part. Log file data will be deleted once no longer necessary for the purpose of processing.

Use of our website to access further services
It may be necessary for you to provide personal data if you are visiting the website in order to access further services offered by our company. The respective input screen or application will show which personal data is required for provision of the service in question. You may enter further information on a voluntary basis. In order to enable you to recognize whether data is being provided on a compulsory or voluntary basis, each item of mandatory information is marked with an asterisk (*) or is else accompanied by the designation “mandatory field”. Processing of data takes place solely for the purpose of providing the performance you have requested. The descriptions of the specific services include information on the legal basis for the processing of your personal data and information regarding when your personal data will be deleted.

Contacting us – Contact form
Our website includes a contact form which you can use to get in touch with us. Personal data which you state on the contact form in order to communicate with us will only be used for the purpose of processing your initiation of communication with us via the contact form. Data will only be passed on to third parties in circumstances where this is necessary in order to process your contact request. The legal basis of this processing is Article 6, Paragraph 1b) GDPR. Your personal data will be deleted once it is no longer needed to fulfill the purpose of your initiation of contact. We wish to point out that any messages communicated by you may need to be stored due to existing statutory duties of retention. Article 6, Paragraph 1c) GDPR constitutes the legal basis in such a case.

Contact by e-mail
Contact by e-mail Our website provides you with the opportunity to contact us by e-mail. Please note that unencrypted e-mail is an insecure means of communication. The possibility that data transmitted in this way may be read, copied, amended or deleted by unauthorized third parties cannot be excluded. Personal data which you state in order to communicate with us in the form of an e-mail inquiry will only be used for the purpose of processing your initiation of communication with us via such an e-mail inquiry. Data will only be passed on to third parties in circumstances where this is necessary in order to process this contact request. The legal basis of this processing is Article 6, Paragraph 1b) GDPR. Your personal data will be deleted once it is no longer needed to fulfill the purpose of your initiation of contact. We wish to point out that any messages communicated by you may need to be stored due to existing statutory duties of retention. Article 6, Paragraph 1c) GDPR constitutes the legal basis in such a case.

Newsletter
If you wish to subscribe to our newsletter, we will need you to provide us with your e-mail address and with confirmation that you are the owner of the e-mail address stated and that you consent to receipt of the newsletter. This data is only collected for the purposes of sending you the newsletter and of documenting our entitlement in this regard. The following data will also be collected upon registration.

• IP address of the computer from which the inquiry is made
• Date and time of the registration

Your consent to processing of the data is obtained during the registration procedure. Reference is made in this regard to the present data protection statement. The legal basis of this processing is Article 6, Paragraph 1a) GDPR. You may cancel your newsletter subscription with future effect at any time. Your personal data will be deleted once it is no longer needed to fulfill the relevant purpose.

Security
We have secured our website and other systems by instigating technical and organizational measures against loss, destruction, access, alteration or dissemination of your data by third parties. Personal data which you impart to us via the contact form is in particular transmitted via encrypted means. We use the TLS 1.3 coding system (Transport Layer Security) in order to achieve this.

Cookies
We do not use cookies.

Web analysis Matomo
Matomo is an open-source web analysis software that works without cookies. In order to recognize recurring users, Matomo uses a “digital fingerprint” that is being saved anonymously and changed every 24 hours. For the “digital fingerprint”, Matomo tracks user activities within our online content using pseudonymized IP addresses (deletes the last octet) in combination with browser settings of the user, thus not revealing the identity of the individual user; service provider: web analysis/ audience management in self-hosting; website: https://matomo.org/.

Social media
We maintain publicly accessible profiles on social media sites. Details of the individual social media outlets we use can be found below.
Social media sites such as Facebook etc. are usually able to carry out extensive analyses of user behavior if you visit such a website or a website including integrated social media contents (such as “Like” buttons or advertising banners). Visiting our social media presences will trigger numerous processing operations that are of relevance under data protection law. Individual details in this regard are as follows. Specifically:
If you are logged into your social media account when you visit our social media presence, the operator of the social media portal will be able to match this visit to your user account. Your personal data may also be recorded under certain circumstances where you are not logged in and even if you do not possess an account with the respective social media portal. In such a case, data collection may, for example, take place via cookies stored on your end device or via the recording of your IP address.
Collection of data in these ways enables the operators of social media portals to create user profiles which contain information on your preferences and interests. This may allow interest-based advertising to be displayed to you both within and outside the respective social media presence. If you have an account with the relevant social network, this type of interest-related advertising can be shown on all devices on which you are logged in or which you have used to log in.
Please also note that we are unable to track all the operating processes that occur on social media platforms. Depending on the provider in question, it may well be the case that operators of social media portals carry out further operating processes. Please consult the terms and conditions of use and the privacy policies of the relevant social media platform in order to obtain more details.

Legal basis
The aim of our social media presences is to ensure that we are able to offer information over the Internet. This a legitimate interest within the meaning of Article 6 Paragraph 1 Clause f) GDPR. Analysis processes initiated by the social networks may have their basis in divergent legal principles. The operators of social networks are required to state what these principles are (e.g. consent within the meaning of Article 6 Paragraph 1 Clause a) GDPR).

Data controller and assertion of rights
When you visit one of our social media presences, we bear joint responsibility for data processing procedures together with the operator of the social media platform in question. You may assert your rights (right to obtain information, right to rectification of data, right to erasure of personal data, right to restriction of processing, right of data portability and right to lodge a complaint) both against us and against the operator of the respective social media platform at any time.

Please note that, despite this joint responsibility which we bear together with the social media portal operators, we are unable to exert a complete influence on the data processing procedures carried out by the latter. Our opportunities in this regard are essentially determined by the corporate policy adopted by the relevant provider.

Duration of storage
Data directly collected via our social media presences is deleted from our systems as soon as the purpose of storage has ceased to apply. It will also be deleted if you request us to do so or if you withdraw your consent for storage. Any cookies stored will remain on your end device until deleted by you. The above is without prejudice to compulsory statutory stipulations, in particular legal retention periods. Retention periods remain unaffected.
We are unable to exert any influence on the length of storage of data which operators of social networks collect for their own purposes. Specific information in this regard should be obtained from the operators of the social networks directly (e.g. as set out in their privacy policies, see below).

Individual social networks

YouTube
We use the YouTube platform to make our own advertising videos publicly available: We include a link to our YouTube channel on our website. YouTube is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. If you follow a link by clicking on it, YouTube will store and use data supplied by you (IP address and other personal data) in order to offer its service and for its own business purposes. Further information regarding data privacy on YouTube (Google) is available at https://www.google.com/policies/privacy/

Other functions and contents
We will notify you accordingly if we deploy any other functions and contents on our website (e.g. map services or downloads) which involve the processing of your data by us or by the providers of such services.

Recipients and transfer of data
Our company has pooled certain data processing procedures. These may be carried out centrally by our individual divisions for purposes such as the handling of inquiries. External contractors and service providers (e.g. logistics and IT service companies) may be used in order to ensure the proper execution of our tasks and the fulfillment of contracts. Data may also be passed on to recipients to whom we are obliged or entitled to transfer information on the basis of contractual or statutory duties or because you have given your consent.

Data transfer to third countries
Data transfer to third countries (states outside the EU and European Economic Area, EEA) only takes place to the extent that this is necessary for the execution of a contract/order/business relationship including for the purpose of the initiation of contracts/orders/business relationships and to the extent that such a data transfer is permissible by dint of our legitimate interest or your consent. Data transfer to third countries only occurs in accordance with the relevant prerequisites under data protection law.

Deletion of your data
We will process your personal data only for the period necessary for fulfillment of the respective purpose or until such time as the legal basis for processing no longer exists (e.g. following withdrawal of consent for data processing). We act in compliance with the existing statutory deadlines for retention and storage.

Your rights
You have the following rights.

• You may receive information from us free of charge regarding the personal data we hold about you (right to obtain information).
• You may seek confirmation as to whether or not personal data concerning you is being processed (right of access by the data subject).
• You may require us to delete your personal data without delay insofar as the processing of such data is no longer necessary and if the further provisions relating to deletion set out in the GDPR have been met (right to erasure of personal data).
• You may demand immediate correction and completion of any data held about you which is not correct (right to rectification of data).
• You may require limitation of processing of your personal data (right to restriction of processing).
• You have the right to receive personal data held on you in a structured, commonly used and machine-readable format (right to data portability).
• You may object to the processing of personal data concerning you (right toobject).
• You have the right not to be subject to a decision based solely on automated processing – including profiling – which produces legal effects concerning you or else similarly significantly affects you (right to individual decision-making).
• You have the right to withdraw your consent for the processing of personal data with future effect at any time.
• You may complain to a relevant data protection supervisory authority if you are of the view that the personal data concerning you is being processed in a way which infringes the GDPR processing (right to lodge a complaint).

Please contact our data protection officer if you require any further information regarding your rights.

The following lead supervisory authority is to be contacted in the case of complaints pursuant to Article 56 GDPR:
The Baden-Württemberg State Representative for Data Protection and Freedom of Information

E-mail: poststelle@lfdi.bwl.de
Website: www.baden-wuerttemberg.datenschutz.de

General information for customers and suppliers pursuant to Articles 13/14 GDPR