Data protection

Via the website, www.lorch.eu, Lorch Schweißtechnik GmbH offers extensive information to contract partners, customers and interested parties. In this regard we place particular value on the trustworthy and secure handling of your personal data and the data of your company. The following Privacy Policy is the basis of our conduct and it is a component of the business relationship with customers, interested parties and third-parties. We amend the privacy policy as needed due to legal and technical changes. The most up-to-date version of the Privacy Policy that is published on the website is valid.

1. Name and address of the party responsible for the processing (relevant controller)
   The responsible party (relevant controller), as defined in the General Data Protection Regulation (GDPR) and other applicable data protection laws and other regulations with data protection implications in the Member States of the European Union, is:
   Lorch Schweißtechnik GmbH
   Im Anwänder 24-26
   71549 Auenwald
   Germany 
   Tel.: +49 7191 503-0
   Email: info(at)lorch.eu
   Website: www.lorch.eu
   
   
2. Name and address of the data protection officer
   The data protection officer of the relevant controller is:
   Dirk Janthur
   Datenschutzberatung Janthur GmbH
   Hedelfinger Straße 12
   73734 Esslingen
   Tel.: +49 711 71530104
   dirk.janthur(at)janthur.net
   
   
3. Use of cookies 
   The websites of Lorch Schweißtechnik GmbH use cookies. Cookies are files that are stored on the computer system of the user by the Internet browser. When accessing a website the cookies can be transmitted to the website and thus enable an identification of the user. In this regard, cookies help to facilitate use of websites for the users.
   It is possible to disable the setting of cookies by appropriately changing the settings in the Internet browser. Cookies that have been set can be deleted. We expressly state that if cookies are deactivated it is possible that not all the functions of our website can be used in full scope.
   
   
4. Creation of log files
   At each access of the website Lorch Schweißtechnik GmbH collects data and information through an automated system. This information and data is stored in the log files of the server.
   In this regard the following data can be collected:
   
   (1) Information concerning the browser type and the version used
   (2) The user's operating system
   (3) The user's Internet service provider
   (4) The user's IP address
   (5) Date and time of the access
   (6) Websites from which the user's system reaches our website (referrers)
   (7) Websites that are accessed by the user's system via our website
   
   Data is processed for the purpose of delivering the content of our website, ensuring the functionality of our IT systems and for optimisation of our website. In this regard the log file data is stored separately from other personal data of the user.
   
   
5.  Analysis tools
   "Lorch Schweißtechnik GmbH uses Google Analytics, a web analysis service of Google Inc. (""Google""). Google Analytics uses so-called ""cookies"", text files that are stored on your computer and that allow an analysis of your use of the website. The information generated by the cookie about your use of this website (including your IP address) is transmitted to a Google server in the USA and stored there. Google will use this information to evaluate your use of the website, to produce reports on website activities and to provide other services related to the use of the website and of the Internet to the operator of the website. Google will also transmit this information to third parties if necessary, if this is legally prescribed or if third parties process this data on Google's behalf. Under no circumstances will Google link your IP address with other data of Google.
   For more information about Google's terms of service and privacy, please visit www.google.com/analytics/terms/us.html. We refer here to the privacy policy of Google, which can be found under policies.google.com/privacy.
   You can prevent the capture of your data by Google Analytics by clicking on the deactivation-link at the bottom of the page. An opt-out cookie will be set that prevents the collection of your data at future visits to this website. Note that when deleting the your browser cache you may have to execute the deactivation again.
   Google offers a tool for various browsers that suppresses the collection of data through the Google Analytics code. You can activate the code by following the instructions of the link below: tools.google.com/dlpage/gaoptout
   You can prevent the installation of cookies through an appropriate setting of your browser software; however we expressly state that in this case it is possible that you will not be able to use all the functions of this website to their full extent. By using this website you declare that you consent to the processing of data collected by Google about you in the manner described above and for the aforementioned purposes."
   
   
6. Links and content on third-party websites 
   On our websites you will find links to the offerings of third parties. Lorch Schweißtechnik GmbH cannot accept any liability for these third party websites and the handling of personal data on these websites.
   Notice of liability: With the judgement of 12 May 1998, the Hamburg District Court ruled that a party, through provision of a link, can, if necessary be made co-responsible for the content of the linked site. According to the District Court, this liability can only be prevented if the party expressly distances itself from this content. Lorch Schweißtechnik GmbH has set links to other Internet sites on this website. For all of these links the following applies: Lorch Schweißtechnik GmbH expressly declares that Lorch Schweißtechnik GmbH has no influence whatsoever on the design and content of the linked websites. Consequently, Lorch Schweißtechnik GmbH hereby expressly distances itself from all content of all websites linked on our homepage and dissociates itself from this content. This declaration is valid for all links displayed on the homepage and for all content of the websites that can be accessed via the banners, buttons and links on the Lorch Schweißtechnik GmbH website.
   
   
7. SSL encryption
   For security reasons, and to protect the transmission of confidential content, such as inquiries that you send to us as the website operator, this website uses an SSL encryption. You can identify an encrypted connection by the fact that the address of the line of browser changes from "http://" to "https://" and by the lock icon in your browser line.
   When SSL encryption is activated the data that you transmit to us cannot be read by third parties.
   
   
8. Registration on our website
   If the person concerned (data subject) avails himself of the possibility of registering on the website of the relevant controller by providing personal data, then the data in the respective input mask will be transferred to the relevant controller. The data will be stored at the facilities of the relevant controller exclusively for the purpose of internal use.
   At registration the IP address of the user, as well as the date and time of registration are stored. This prevents misuse of the services. Forwarding of the data to third parties does not occur. There is an exception if a statutory obligation to forward the data exists.
   Registration of the data is required for the provision of content or services. Registered persons have the possibility to have the stored data deleted or modified at any time. The data subject receives information at any time concerning the stored personal data relating to him.
   
   
9. Newsletter
   If the data subject subscribes to our newsletter, then the data in the respective input mask will be transferred to the relevant controller.
   When subscribing to the newsletter the IP address of the user, as well as the date and time of registration, are stored. This is done to prevent a misuse of the services or of the email address of the data subject. Forwarding of the data to third parties does not occur. There is an exception if a statutory obligation to forward the data exists.
   The data is used exclusively for the sending of the newsletter. The subscription to the newsletter can be cancelled by the data subject at any time. Likewise the consent to store the personal data can be revoked at any time. An appropriate link is provided in every newsletter for this purpose.
   
   
10. Contacting possibilities
    There is a contact form on the Lorch Schweißtechnik GmbH website that can be used to contact us electronically. Alternatively, contacting via the provided email address is possible. If the data subject makes contact with the relevant controller via one of these channels, then the personal data of the data subject will be stored automatically. This storage occurs solely for the purposes of processing the data of or contacting the data subject. A forwarding of the data to third parties does not take place.
    This is considered to be a voluntary provision of personal data. Lorch Schweißtechnik GmbH has categorically implemented all technical and organisational measures to ensure that this data is also secure.
    Nevertheless, be very careful with the information and do not transmit any sensitive data, such as your bank account information, via the contact form.
    
    
11.  Routine deletion and blocking of personal data.
    The relevant collector processes and stores personal data of the data subject only as long as this is required to achieve the purpose for which the data was stored. Moreover, storage can also occur if such storage has been provided for by European or national legislation in Union ordinances, laws or other regulations, to which the relevant collector is subject.
    As soon as the purpose of the storage no longer applies, or the storage period prescribed in the regulations cited above expires, the personal data will be routinely blocked or deleted.
    
    
12. Use of social plugins
    
    Facebook plugins
    Plugins of the social network Facebook, provider Facebook Inc., 1 Hacker Way, Menlo Park, California 94025, USA, are integrated on our website. You can identify the Facebook plugins by the Facebook logo or by the "Like button" on our website. An overview of the Facebook plugins is provided here (https://developers.facebook.com/docs/plugins/. When you visit our websites, via the plugin a direct connection between your browser and the Facebook server will be established. Through this means Facebook obtains the information that you with your IP address have visited our website. If you click the Facebook "Like button" while you are logged into your Facebook account, you can link the content of our pages to your Facebook profile. Through this means Facebook can allocate the visit to our website to your user account. We expressly state that as provider of the website we obtain no knowledge of the content of the transmitted data or of its use by Facebook. Additional information in this regard is provided in Facebook's Privacy Policy (https://facebook.com/policy.php.
    If you do not want to give Facebook the ability to allocate your visit to our website to your Facebook user account, then please log out from your Facebook user account.
    
    YouTube plugins
    We have integrated a plugin from YouTube – YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA – on our website.
    When you visit our website, via the plugin a direct connection between your browser and the YouTube server will be established. Through this means YouTube obtains the information that you with your IP address have visited our website. If you click the YouTube button while you are logged into your YouTube account, you can link the content of our websites to your YouTube profile. Through this means YouTube can allocate the visit to our website to your user account.
    We expressly state that as provider of the website we obtain no knowledge of the content of the transmitted data or of its use by YouTube. Additional information in this regard is provided in YouTube's Privacy Policy www.google.de/intl/de/policies/privacy/.
    If you do not want to give YouTube the ability to allocate your visit to our website to your YouTube user account, then please log out from your YouTube user account.
    
    
13. Rights of the person concerned (data subject)
    If your personal data is processed, then as set forth in the General Data Protection Regulation (GDPR), you as the person concerned (data subject) are entitled to the following rights vis-à-vis the collector:
    You can assert all rights vis-à-vis the company pursuant to the contact data in point 1 or vis-à-vis our data protection officer pursuant to the contact data in point 2.
    
    13.1.  Right to information
    You can demand a confirmation from the collector as to whether the personal data relating to you is processed by us.
    If such processing exists, you can demand that the collector disclose the following information:
    
    a. the purposes for which the personal data is processed;
    b. the categories of personal data that are processed;
    c. the recipients or the categories of recipients to whom the applicable personal data has been disclosed or will yet be disclosed;
    d. the planned duration of storage of the personal data relating to you, or if specific information in this regard is not possible, the criteria for determination of the duration of storage;
    e. the existence of a right to correct or delete the personal data relating to you, a right of restriction of the processing through the controller or a right to object to this processing;
    f. the existence of a right to appeal to a supervisory authority;
    g. all available information concerning the origin of the data if the personal data is not collected from the data subject;
    h. the existence of automated decision-making, including profiling pursuant to art. 22 para. 1 and 4 of the GDPR and – at least in these cases – meaningful information concerning the logic involved, as well as the scope and the intended effects of this type of processing for the data subject.
    
    You are entitled to the right to demand information as to whether the personal data relating to you has been transferred to a third country or to an international organisation. In this context you can demand to be informed of the suitable guarantees pursuant to art. 46 of the GDPR in conjunction with the transfer.
    In the case of data processing for the purposes of scientific or historical research or for statistical research purposes:
    This right to information can be limited, if it presumably renders the realisation of the research or statistical purposes impossible or seriously impairs said realisation, and the restriction is necessary for the fulfillment of the research or statistical purposes.
    
    13.2. Right of correction
    You have a right of correction and/or completion vis-à-vis the controller, if the processed personal data relating to you is incorrect or incomplete. The controller must undertake the correction without delay.
    In the case of data processing for the purposes of scientific or historical research or for statistical research purposes:
    This right of correction can be restricted insofar as it presumably renders the realisation of the research or statistical purposes impossible or seriously impairs said realisation and the restriction is necessary for the fulfillment of the research or statistical purposes.
    
    13.3. Right to restriction of the processing
    Under the following prerequisites you can demand restriction of the processing of the personal data relating to you:
    
    a. if you dispute the correctness of the personal data relating to your for a duration that enables the controller to review the correctness of the personal data;
    b. if the processing is unlawful and you refuse deletion of the personal data and instead demand restriction of the use of the personal data;
    c. if the controller no longer requires the personal data for the purposes of processing, and you however require this data for establishment, exercise or defense of legal claims, or
    d.
    if you have lodged an objection to the processing pursuant to art. 21 para. 1 of the GDPR and it has not yet been determined whether the legitimate reasons of the controller override your reasons.
    If the processing of the personal data relating to you has been restricted, this data – apart from its storage – may only be precessed with your consent or for establishment, exercise or defence of legal claims or for protection of the rights of another natural or legal person or for reasons of an important public interest on the part of the Union or of a Member State.If the restriction of the processing has been limited pursuant to the prerequisites cited above, you will be informed by the collector before the restriction is removed.In the case of data processing for the purposes of scientific or historical research or for statistical research purposes:
    Your right of restriction can be limited insofar as it presumably renders the realisation of the research or statistical purposes impossible or seriously impairs said realisation and the limitation is necessary for the fulfillment of the research or statistical purposes.
    
    13.4. Right to deletion
    13.4.1. You can demand that the controller delete the personal data relating to your without delay, and the controller is obligated to delete this data without delay, if one of the following reasons applies:
    
    a. The personal data relating to you is no longer required for the purposes for which it was collected or it has been processed in some other manner.
    b. You revoke your consent to the processing pursuant to art. 6 para. 1 lit. a or art. 9 para. 2 lit. a of the GRDP, on which the processing is based, and in the absence of another legal basis for the processing.
    c. You lodge an objection pursuant to art. 21 para. 1 of the GRDP to the processing and there are no overriding legitimate reasons for the processing, or you object to the processing pursuant to art. 21 para. 2 of the GRDP.
    d. The personal data relating to yourself has been unlawfully processed.
    e. The deletion of the personal data relating to yourself is required for fulfillment of a legal obligation pursuant to union law or the law of the member states, to which the controller is subject.
    f. The personal data relating to yourself was collected in reference to offered information society services pursuant to art. 8 para. 1 of the GDPR.
    
    13.4.2. If the controller has made the data relating to you public and he is obligated to delete it pursuant to art. 17 para. 1 of the GRDP, then he takes appropriate measures with due consideration of the available technology and implementation costs, also of a technical nature, to inform the relevant controllers that process the personal data, that you as data subject have demanded from them the deletion of all links to this personal data or to copies or replications of this personal data.
    
    13.4.3. The right to deletion does not exist if the processing is required
    
    a. for exercise of the right to freedom of expression and information;
    b. for fulfillment of a legal obligation that requires the processing pursuant to the law of the Union or of the Member States to which the controller is subject, or for performance of a task that is in the public interest or in the exercise of official authority that has been vested in the controller;
    c. for reasons of public interest in the area of public health pursuant to art. 9 para. 2 lit. h and i, as well as art. 9 para. 3 of the GRDP;
    d. For archiving purposes in the public interest, purposes of scientific or historic research or for statistical purposes pursuant to. art. 89 para. 1 of the GRDP if the right cited in para. 1 presumably does not render impossible or seriously impair the realisation of these objectives of this processing, or
    e. for establishment, exercise or defense of legal claims.
    
    13.5. Right to be informed
    If you have asserted the right to correction, deletion or restriction of the processing vis-à-vis the controller, the controller is obligated to inform all recipients to whom the personal data relating to you has been disclosed, to correct the data or delete the data or restrict the processing, unless this proves to be impossible or it involves disproportionate effort.
    You have the right to be informed of these recipients by the controller.
    
    13.6. Right to data portability 
    You have the right to receive the personal data relating to that you have provided to the controller in a structured, commonly used and machine-readable format. Moreover you have the right to transmit this data to a different controller without hindrance from the controller to which the personal data was provided, if the
    
    a. processing is based on consent pursuant to art. 6 para. 1 lit. a of the GDPR or art. 9 para. 2 lit. a of the GDPR or on a contract pursuant to art. 6 para. 1 lit. b of the GDPR and
    b. the processing occurs by automated means.
    
    Moreover, in exercising this right you have the right to have the  personal data relating to your transmitted from one controller to another where technically feasible. Freedoms and rights of other persons must not be hereby impaired.
    The right to data portability does not apply to processing of personal data that is required for processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority that has been vested in the controller. 
    
    13.7. Right to object 
    You have the right, at any time, to object to the processing of your personal data, for reasons arising from your particular situation, which is based on article 6 paragraph 1 lit. e or f of the GDPR including profiling based on these provisions.
    The collector no longer processes the personal data relating to you, unless he can provide compelling legitimate reasons for the processing that override your interests, rights and freedoms, or if the processing is used for establishment, exercise or defence of legal claims.
    If the personal data relating to you is used for direct marketing, you have the right to object to the processing of your personal data for the purpose of this type of marketing; this also applies for profiling, to the extent that profiling is related to such direct marketing.
    If you object to the processing of your personal data for direct marketing purposes, then the personal data will no longer be processed for these purposes.
    You have the possibility, in the context of use of information society services – notwithstanding Directive 2002/58/EU – to exercise your right to object via automated means using technical specifications.
    In the case of data processing for the purposes of scientific or historical research or for statistical research purposes:
    You also have the right, for reasons arising from your particular situation, to object to the processing of the personal data relating to you that occurs for scientific or historical research purpose or for statistical purposes pursuant to art. 89 para. 1 of the GDPR.
    This right to object can be limited, if it presumably renders the realisation of the research or statistical purposes impossible or seriously impairs said realisation and the restriction is necessary for the fulfillment of the research or statistical purposes.
    
    13.8. Right to revoke the declaration of consent under data protection law.
    You have the right to revoke your declaration of consent under data protection law at any time. Through revocation the lawfulness of the processing due to the consent that occurred until revocation remains unaffected. 
    
    13.9. Automated decision-making in the specific case, including profiling
    You have the right to not be subjected to a decision based exclusively on automated processing – including profiling – that develops its legal effect relative to yourself you or that considerably affects you in a similar manner. This does not apply if the decision
    a. is required for entering into a contract or for fulfillment of a contract between yourself and the controller,
    b. is permissible due to statutory regulations of the Union or of the Member States, to which the controller is subject, and these statutory regulations contain appropriate measures for protecting your rights and freedoms and your legitimate interests or
    c. occurs with your express consent.
    However, these decisions must not be based on special categories of personal data pursuant to art. 9 para. 1 of the GDPR, if art. 9 para. 2 lit a or g does not apply and appropriate measures have been taken for protection of rights and freedoms, as well as your legitimate interests.
    With regard to the cases cited in a. and c. the data controller shall implement suitable measures to safeguard your rights and freedoms and legitimate interests, at least the right to obtain human intervention on the part of the controller, to express his or your own point of view and to contest the decision.
    
    13.10. Right to appeal to a supervisory authority
    Without prejudice to administrative or judicial remedy, you also have the right to appeal to a supervisory authority, in particular a supervisory authority in the Member State in which you reside, in which your place of work is located, or in which the presumed infringement occurs, if you are of the opinion that the processing of the personal data relating to you is in violation of the GRDP.
    The supervisory authority to whom the appeal has been submitted informs the appellant of the status and of the results of the appeal, including the possibility of judicial remedy pursuant to art. 78 of the GDPR.
     
    
    
14. Forwarding of the data to third parties
    Forwarding of the data does not take place, possible exceptions are regulated in the points above. Above all, forwarding does not occur for commercial purposes (address trading).
    
    
15. Legal basis of the processing 
    If we obtain the consent of the data subject for the processing of personal data, then art. 6 para. 1 lit. a of the General Data Protection Regulation (GDPR) serves as the legal basis.For the processing of personal data that is required for fulfillment of a contract, with the data subject as contracting party, article 6 para. 1 lit. b of the DSGVO serves as the legal basis. This also applies for processing procedures that are necessary for pre-contractual measures.
    If a processing of personal data is required for fulfillment of a legal obligation, to which our company is subject, then article 6 para. 1 lit. c of the GDPR serves as the legal basis.In the event that vital interests of the data subject or of a different natural person necessitate processing of personal data, then article 6 para.1 lit. d of the GDPR serves as the legal basis.If the processing is required for protection of a legitimate interest of our company or of a third person and the interests, fundamental rights and freedoms of the data subject do not override the first interest cited, then article 6 para. 1 lit. of the GDPR serves as the legal basis for the processing. The legitimate interest of our company is the execution of our business activity.
    
    
16. Duration of the storage of personal data 
    Personal data is stored for the duration of the respective statutory retention period. After this period expires a routine deletion of the data occurs, if a need for a contract initiation or contract fulfillment does not exist.
    
    16.1. Questions & suggestions
    If you have questions or suggestions please send an email to info@lorch.eu
    
    26.04.18

Archief