Data Protection
Our Data Protection Statement
We are delighted at your interest in our company. The protection of your data is of particular importance to us.
1) General information
Your personal data is processed in compliance with the EU General Data Protection Regulation as well as with the country-specific data protection regulations applicable to us. This data protection statement is intended to inform you about – among other things – the collection and storage of personal data, the nature and purpose of its use, the relevant legal basis as well as about your rights.
2) Name and contact details of the data controller
This data protection statement shall apply to the processing of data by:
Controller(s):
CLA – Coburger Lehrmittelanstalt
P.O. Box 14 30, D-96404 Coburg
Friedrich-Rückert-Str. 54, D-96450 Coburg
Owner: Hans Sommer, registered businessman
Commercial Register Commercial Register of Coburg HRA 2220
Phone: 09561 85 74 12
Fax: 09561 85 74 11
e-mail: info@cla.de
https://www.cla.de
3) Terms and Terminology
The terms and terminology used in our data protection statement shall have the following meaning:
Personal data
Personal data means any information relating to an identified or identifiable natural person (‘data subject’). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
Data subject
A data subject is any identified or identifiable individual whose personal data is being processed by the data controller.
Processing
Processing means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
Controller
Controller means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data. Where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law.
Consent
Consent of the data subject means any freely given, specific, informed and unambiguous indication of the data subject's wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.
4) Collection and storage of personal data as well as type and purpose of its use
a) When you visit our website
Whenever you visit our website http://www.cla.de, the web browser used on your terminal device automatically sends information to the server of our website. This information is temporarily stored in a so-called log file. In the course of this procedure, the following data is collected and stored, without any action on your part, until the time of automatic deletion once you have left our website:
- IP address of the requesting computer
- Date and time of access
- Name and URL of the file accessed
- The website from which accessed (referrer URL)
- Browser used and computer operating system, if necessary, as well as name of the Internet access provider
The above data are processed by us for the following purposes:
- Establishing a smooth connection with the website;
- Ensuring comfortable use of our website;
- Analysis of system security and stability; as well as
- For further administrative purposes
The legal basis for the processing of data is Article 6 (1) f of the GDPR. Our legitimate interest results from the purposes of data collection listed above. In no case are we going to use the collected data for the purposes of drawing conclusions regarding you.
b) When you contact us by e-mail or via our contact form
We collect personal data when you provide us with your data voluntarily, such as when you contact us by e-mail to info@cla.de or via our contact form. The input form makes it clear, which data are collected. We use the data provided by you for processing your enquiries and for contract processing. After we have completed processing your enquiry or following comprehensive processing of the contract, as the case may be, or after your user account has been deleted, your data are going to be blocked from further processing and are going to be deleted, once the obligation to preserve business records in compliance with commercial and fiscal law has expired, unless you have expressly agreed to further use of your data or we reserve the right to further use of your data, to the extent permitted by law, and about which we inform you as follows.
Processing of data for the purpose of contacting us or for creating a customer account with us will be in compliance with Article 6 (1) a of the GDPR, on the basis of your consent, which was given voluntarily.
Data processing upon the conclusion of a contract with us will be in compliance with Article 6 (1) a of the GDPR, on the basis of your consent, which was given voluntarily, or in compliance with Article 6 (1) b of the DPA for conclusion of a contract.
You can object to the storage and use of your data for these purposes at any time by sending a message to the contact stated under fig. 1.
c) Other transfer of data
Your personal data will not be transferred to any third parties other than for the purposes stated below.
We will only transfer your personal data to third parties if:
You have given your express consent to do so, in compliance with Article 6 (1) a of the GDPR;
The transfer in compliance with Article 6 (1) f of the GDPR is necessary for the establishment, exercise or defence of legal claims and there is no reason to assume that you have got an overriding legitimate interest in the non-transfer of your data;
In case that there is a statutory obligation regarding the transfer in compliance with Article 6 (1) c of the GDPR; as well as
This is permitted by law and necessary for the processing of contractual relationships with you in compliance with Article 6 (1) b of the GDPR.
5) Cookies
Like many other websites, we also use “cookies”, small text files with which specific, device-related information can be stored on the user’s access device (PC, tablet, smartphone). On the one hand, they enable the user-friendliness of our website and are of an advantage to our user; on the other hand, they allow for the collection of statistical data regarding the use of the website and therefore enable us to improve our website. Some of the cookies we use, so-called session cookies, will be deleted at the end of the browser session, i.e. once you have closed down your browser. Other cookies – persistent cookies – remain on your terminal device and enable us to recognise your browser next time you visit our website.
As a user, you can influence the use of cookies. Most browsers have got an option allowing you to reduce or completely block cookies. However, we would like to point out that the use and comfort of use of our website can be restricted if cookies are excluded.
You can find detailed information about cookies, e.g. how you can find out which cookies have been set, how you can handle them, and how you can delete them on the following website: http://www.allaboutcookies.org/ge/
The legal basis for the processing of data, i.e. for the use of so-called cookies, is Article 6 (1) f of the GDPR. Our legitimate interest results from our interest in the user-friendliness of our website and the improvement of our website content.
6) Use of Google Analytics for web analysis
Our website uses functions of the web analysis service Google Analytics of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Google Analytics uses so-called “cookies”. These are text files that are stored on your computer and that allow an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and is stored there.
The storage of Google Analytics cookies is based on Article 6 (1) f of the GDPR. We have got a legitimate interest in the analysis of the behaviour of the users of our website in order to optimise both our web content as well as our advertising.
IP anonymisation
On this website, we have activated the function IP anonymisation. That way, Google will shorten your IP address within the member states of the European Union or in other States that are party to the Agreement on the European Economic Area before it is transferred into the USA. Only in exceptional cases will the full IP address be sent to a Google server in the USA and truncated there. On our behalf, Google will use this information to analyse your use of our website, to compile reports on the website activity, and to provide further services to us connected with website and Internet use. The IP address that your Browser sends within the scope of Google Analytics will not be associated with any other data held by Google.
Prevention of data collection by installing a browser add-on to deactivate Google Analytics
By using the browser add-on to deactivate Google Analytics-JavaScript, you can prevent Google Analytics from using your data.
If you want to deactivate Google Analytics, download the add-on for your web browser and install it. The add-on to deactivate Google Analytics is compatible with Chrome, Internet Explorer 11, Safari, Firefox, and Opera. For the add-on to work, it has to be correctly loaded in your browser and executed. For Internet Explorer, third-party cookies must be activated.
Further information on the deactivation and correct installation of the browser add-on can be found under the following link: https://support.google.com/analytics/answer/181881?hl=de
You can also prevent the storage of cookies via a corresponding setting of your browser software. However, we would like to point out that in this case, it might be possible that you cannot use all functions of our website to the full extent.
Google privacy policy
More information on how Google deals with user data can be found in the Google privacy policy: https://policies.google.com/privacy?hl=de
Contract data processing
We have concluded a contract data processing agreement with Google and fully implement the stringent requirements of the German data protection authorities when using Google Analytics.
7) Electronic Mail (e-mail)
Data transmission over the Internet (e.g. when communicating by e-mail) may involve gaps in security. Information you send via unencrypted e-mails to us can be read, stored and diverted from their intended use by third parties on the way. We therefore ask you to not send any confidential information without using an encoder.
YouTube with expanded data protection integration
Our website uses plug-ins of the YouTube platform, which is being operated by YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA.
We use YouTube in the expanded data protection mode. According to YouTube, this mode ensures that YouTube does not store any information about visitors to this website before they watch the video. Nevertheless, this does not necessarily mean that the sharing of data with YouTube partners can be ruled out as a result of the expanded data protection mode. For instance, regardless of whether you are watching a video, YouTube will always establish a connection with the Google DoubleClick network.
As soon as you start to play a YouTube video on our website, a connection to YouTube’s servers will be established. As a result, the YouTube server will be notified, which of our pages you have visited. If you are logged into your YouTube account while you visit our site, you enable YouTube to directly allocate your browsing patterns to your personal profile. You have the option to prevent this by logging out of your YouTube account.
Furthermore, after you have started to play a video, YouTube will be able to place various cookies on your device. With the assistance of these cookies, YouTube will be able to obtain information about our website visitor. Among other things, this information will be used to generate video statistics with the aim of improving the user friendliness of the site and to prevent attempts to commit fraud. These cookies will stay on your device until you delete them.
Under certain circumstances, additional data processing transactions may be triggered after you have started to play a YouTube video, which are beyond our control.
The use of YouTube is based on our interest in presenting our online content in an appealing manner. Pursuant to Art. 6 Sect. 1 lit. f GDPR, this is a legitimate interest.
For more information on how YouTube handles user data, please consult the YouTube Data Privacy Policy under: https://policies.google.com/privacy?hl=en.
8) Rights of the Data Subject
You shall have the right:
To obtain from us information about the personal data that we process, in compliance with Article 15 of the GDPR. In particular, you can request to obtain information about the purposes of the processing; the categories of personal data concerned; the categories of recipient to whom the personal data have been or will be disclosed; the envisaged period for which the personal data will be stored; the existence of the right to request rectification or erasure of personal data or restriction of processing of personal data or to object to such processing; the right to lodge a complaint; where the personal data are not collected by us, any available information as to their source; the existence of automated decision-making, including profiling, and, where applicable, meaningful information about the details;
To rectification without undue delay of inaccurate personal data concerning you that is stored by us as well as to have incomplete personal data completed, in compliance with Article 16 of the GDPR;
To obtain from us the erasure of personal data concerning you stored by us unless the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for the performance of a task carried out in the public interest or for the establishment, exercise or defence of legal claims, in compliance with Article 17 of the GDPR;
To restriction of processing of personal data concerning you where the accuracy of the personal data is contested by you, the processing is unlawful but you oppose the erasure of your personal data, where we no longer need the personal data, but they are required by you for the establishment, exercise or defence of legal claims, or where you have objected to processing pursuant to Article 21 of the GDPR, in compliance with Article 18 of the GDPR;
To receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format or to have those data transmitted to another controller, in compliance with Article 20 of the GDPR;
To withdraw your consent given to us at any time, in compliance with Article 7 (3) of the GDPR. This results in us no longer being permitted to continue the processing of data in future, which was based on this consent; and
Without prejudice to any other administrative or judicial remedy to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement, in compliance with Article 77 of the GDPR. A list of the supervisory authorities with the respective contact details can be found under the following link: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.
9) Right to Object
If the processing of personal data concerning you is based on legitimate interest in compliance with point (f) of Article 6 (1) of the GDPR, you shall have the right pursuant to Article 21 of the GDPR to object, on grounds relating to your particular situation or if the objection is on grounds of direct marketing, to the processing of personal data concerning you. In the latter case, you shall have a general right to object that is going to be implemented by us without specification of a particular situation.
If you want to exercise your right of revocation or your right to object, you can send an e-mail to info@cla.de.
10) Data Security
For the purposes of security, our website uses SSL encryption (Secure Socket Layer). The change from “http://” to “https://” in the browser address bar as well as the locked key or padlock icon in the browser status bar indicate that an individual page of our website is transferred encoded.
We furthermore use suitable technical and organisational security measures in order to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or against unauthorised access by third parties. Our security measures are continuously improved, in line with technological development.
11) Up-to-datedness of and Changes to the Data Protection Statement
The contents of our data protection statement are reviewed at regular intervals.
Due to the further development of our website or our products offered as well as because of changed legal or official requirements, it may be necessary to change or amend this data protection statement. Therefore, we reserve the right to change this data protection statement at any time, with or without prior notice. You are advised to inform yourself frequently about any possible changes.
The latest data protection statement can be downloaded at any time from our website under https://cla.de/de/datenschutz and printed.