Privacy Policy
Data Privacy Statement in Compliance with GDPR
Data Privacy Statement in Compliance with GDPR
I. Name and Address of Controller
For the purpose of the General Data Protection Regulation and other national privacy laws of the member states, and other provisions related to data protection, the controller is:
Responsible for contents / website operator
Urban GmbH & Co. KG Helmut Urban und Joshua Hirneiß
Auf der Striepe 9
27798 Wüsting
Phone +49 44 84 93 80 - 0
Fax +49 44 84 93 80 - 10
E-mail: info(at)urbanonline.de
Local Court of Oldenburg
HRB 3252
VAT ID: DE 1757 02 945
Authorized Representatives:
Managing Directors Helmut Urban, Joshua Hirneiß
Responsible for contents / website operator
II. Name and address of the data protection officer
The controller’s data protection officer is:
Urban GmbH & Co.KG
Datenschutzbeauftragte
Auf der Striepe 9
27798 Hude
Germany
Phone: 04484 93800
E-mail: info(at)urbanonline.de
Website: www.urbanonline.de
III. General information on data processing
1. Scope of processing of personal data
As a rule, we only collect and use the personal data of our users to the extent that this is necessary to provide a fully functional website, and our contents and services. Generally, we only collect and use the personal data of our users after we have obtained the user’s consent. An exception applies in those cases in which the prior consent cannot be obtained for factual reasons and the processing of the data is permitted under statutory provisions.
2. Legal basis for the processing of personal data
Personal data will be processed based on the following legal bases:
- 6 (1) (a) GDPR for the processing of personal data with the consent of the data subject.
- 6 (1) (b) GDPR for the necessary processing of personal data to perform a contract to which the data subject is a party, and to carry out any related activities prior to the entering into the contract.
- 6 (1) (c) GDPR for the necessary processing of personal data to comply with legal obligations to which we are subject under the applicable laws of the EU or of a country in which the GDPR applies in full or in part, as the case may be.
- 6 (1) (f) GDPR for the necessary processing of personal data in order to protect our own legitimate interests and those of third parties, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject. Legitimate interests are, in particular, our interest as a company to make available our website, information security, the enforcement of our own legal claims, and compliance with other laws.
3. Erasure of data and duration of storage
The personal data of the data subjects will be erased or made unavailable as soon as the purpose of their retention is no longer valid. In addition, we can store your data if this is provided for in the European or national legislation, in EU regulations, laws, or other provisions that apply to the controller. Data is also made unavailable or erased if a storage period has lapsed that is prescribed in the mentioned standards, unless it is necessary to continue to store the data for the purpose of entering into or fulfilling a contract.
IV. Provision of website and creation of log files
1. Description and scope of data processing
Every time our website is requested, our system automatically collects data and information from the requesting computer system.
The following data are collected in this context:
- Information about the browser type and used version
- The user’s operating system
- The user’s IP address
- Date and time of the request
- Websites from which the user’s system is referred to our website
- Websites that are requested by the user’s system via our website
Such data is also stored in the log files of our system. Such data is not stored together with other personal data of the user.
2. Legal basis for data processing
The legal basis for the temporary storage of data and log files is Article 6 (1) (f) GDPR. The legal basis for the temporary storage of data is Article 6 (1) (f) GDPR.
3. Purpose of data processing
The temporary storage of the IP address by the system is necessary to allow a web page to be delivered to the user’s computer. For this, the user’s IP address must be stored for the duration of the session.
This data is stored in log files to ensure the functionality of the website. In addition, we use this data to optimize our website and to protect the security of our own information technology systems. The data will not be analyzed for marketing purposes in this connection.
Our legitimate interest in the processing of the data in accordance with Article 6 (1) (f) GDPR is also based on this purpose.
4. Duration of Storage
The data will be erased as soon as they are no longer required for the purpose for which they were collected. In the event that data is collected to make available a website, this is the case when the respective session ends.
Log file data is deleted after a maximum of seven days. In the event of a longer storage, the users’ IP addresses are deleted or modified so that the requesting clients can no longer be identified.
5. Objection and removal
The collection of data to make available a website and the storage of data in log files is absolutely necessary to operate the website. Therefore, there is no option for the user to object to it.
V. Use of cookies
Our website uses cookies. Cookies are text files that are stored in the browser or by the browser on the user’s computer. If a user requests a website, a cookie can be stored in the user’s operating system. This cookie contains a characteristic string that allows the unambiguous identification of the browser when the website is requested again.
We use cookies to improve our website’s user-friendliness. Some elements of our website make it necessary that the requesting browser can be identified after switching to a new page.
In that case, the following data are stored in the cookies and transferred:
- Language settings
- Log-in information
Furthermore, we use cookies on our website that allow an analysis of the user’s browsing behaviour.
For this, the following data can be transferred:
- Entered search terms
- Frequency of page requests
- Use of website features
The data collected in this way are pseudonymized by technical means. This means, the data can no longer be attributed to the requesting user. The data will not be stored together with any other personal data of a user.
When users request our website, they are informed about our use of cookies for analysis via a banner and referred to this data privacy statement. In this context, we also inform them about how they can prevent the storage of cookies by adjusting their browser settings.
When a user requests our website, the user is informed about our use of cookies for analysis and their consent to the processing of their personal data in this regard is obtained. In this context, we also refer to our data privacy statement.
C) Purpose of data processing
The purpose of using technically required cookies is to facilitate the use of our website for the users. Some functions of our website cannot be made available without the use of cookies. For these functions, it is necessary that the browser is able to identify a user after switching to another page.
We need cookies for the following applications:
Below, you will find a list of applications. Examples for this could be:
- Inherit language settings
- Memorize search terms
The user data that is collected by technically required cookies is not used to create user profiles.
These analysis cookies are used to improve the quality of our website and its contents. From analysis cookies, we learn how our website is used and how we can continuously optimize our contents. Our legitimate interest in the processing of personal data in accordance with Art. 6 para 1 letter f GDPR is also based on these purposes.
E) Duration of storage, objection and removal
Cookies are stored on the user’s computer and sent to our website by it. Therefore, you, as the user, have full control over the use of cookies. By changing the settings in your internet browser, you can disable or restrict the transmission of cookies. Cookies that are already stored can be removed at any time. This can also be done automatically. If cookies are disabled for our website, you may not be able to fully use all of the functions of our website.
VI. Newsletter
For our newsletters, we use the so-called double opt-in method. This means that after signing up for the newsletter, it is necessary to confirm (confirmation e-mail, enabling of the included activation link) that you would like to use our newsletter service.
Users can unsubscribe from the newsletter at any time. For this, every newsletter contains an Unsubscribe link. It is also possible to send a message in text form to the competent office (for example, by e-mail, fax, or letter) that allows the identification of the subscriber of the newsletter in order to cancel the subscription.
The data is stored on servers within the EU. For more information on the storage, use, and security of your data, see the service provider’s data privacy policy. In addition, the following data will be collected during registration:
- IP address of requesting computer
- Date and time of registration
To process your data in the course of the registration process, we obtain your consent and refer you to this privacy notice. If you purchase goods or services via our website and leave your e-mail address for this, this e-mail address can be used to send you our newsletter later on.
In that case, the newsletter will only be used for direct marketing purposes, to advertise our own similar goods or services. In connection with the processing of your data to send the newsletter, we do not share any of your data with third parties. The data will exclusively be used to send the newsletter.
6. Legal basis for data processing
The legal basis for the processing of the data after a user registered for the newsletter and after consent was obtained from the user is Art. 6 para 1 letter f GDPR. The legal basis for sending the newsletter as a result of the sale of goods or services is Sec. 7 (3) UWG [Act Against Unfair Competition].
7. Purpose of data processing
The user’s e-mail address is obtained to send the newsletter. The collection of any other personal data in the course of registration is to prevent any misuse of the services and/or the used e-mail address.
8. Duration of Storage
The data will be deleted as soon as they are no longer required for the purpose for which they were collected. Accordingly, the user's e-mail address will be stored as long as the newsletter subscription remains active. All other personal data collected in the course of the registration process is usually deleted within a period of seven days.
9. Objection and removal
The newsletter subscription can be cancelled by the concerned user at any time. For this purpose, a corresponding link is provided in every newsletter.
VII. Registration
1. Description and scope of data processing
On our website, users have the possibility to register by providing their personal data. The data entered into the entry form are transmitted to and stored by us. Such information is not be shared with third parties. The following data are collected as part of the registration process:
- First name
- Surname
- Company name
- Address
- Telephone number
- E-mail address
At the time of registration, the following data are stored as well:
- The user’s IP address
- Date and time of registration
In the course of the registration process, the user’s consent to the processing of such data is obtained.
2. Legal basis for data processing
The legal basis for the processing of the data, if consent was obtained from the user, is Art. 6 para 1 letter a GDPR.
3. Purpose of data processing
The registration of the user is necessary to make available certain contents and services on our website. This concerns the registration in a protected download area of our company. Such data is required to grant the corresponding privileges to view or download protected sensitive documents.
4. Data retention period
The data will be deleted as soon as they are no longer needed for the purpose for which they were collected. This applies to the data that were collected during the registration process, if the registration on our website is cancelled or changed.
5. Objection and removal
As a user, you can cancel the registration at any time. You can request to change your personal data at any time. You can request the deletion of your account by writing an e-mail to info(at)urbanonline.de, indicating your user name and company name. User accounts can also be deleted directly on the website.
VIII. Contact form and e-mail contact
1. Description and scope of data processing
We provide a The purpose of using at our website that can be used to contact us by electronic means. If a user uses this option, the data entered to the screen are sent to us by e-mail and stored. Such data include the following details:
- Company name
- Address
- Country
- Telephone
- Optional fax
Your consent to Urban processing your data is obtained as the e-mail is submitted and reference is made to this data privacy statement. Alternatively, you can contact us using the e-mail address provided. In such case, we will store the personal data submitted by this e-mail. The data is exclusively used to process the correspondence. To process customer requests in the best possible way, we cooperate with distribution and service partners. This involves sharing names and telephone numbers with an official Urban distribution partner to make a one-time contact with the user. Users are informed on such sharing of personal information when the The purpose of using is submitted.
2. Legal basis for data processing
The legal basis for the processing of the data is Art. 6 para 1 letter a GDPR after consent was obtained from the user. The legal basis for processing data that is submitted by sending an e-mail is Article 6 (1) (f) GDPR. If the purpose of the e-mail contact is the entering into a contract, the additional legal basis for the processing is Article 6 (1) (b) GDPR.
3. Purpose of data processing
We use the personal data entered to the screen only to process the contact. If contact was made by e-mail, this shall also be deemed the required justified interest in the processing of the data. Any other personal data that is processed during the sending process is used to prevent the abuse of our The purpose of using and to ensure the security of our information technology systems.
4. Duration of Storage
The data will be archived for 10 years and then deleted. For personal data entered in the The purpose of using and data that was submitted by e-mail, this is the case as soon as the respective conversation with the user has ended. A conversation is deemed to have ended if, under the circumstances, the relevant facts of a case are finally clarified. The data that is additionally collected during the sending process will be deleted no later than after a period of seven days.
Right to access, rectification, erasure, objection, and data portability
Website visitors can exercise their rights to access, rectification, or erasure of their data by contacting the address above. In the event that the request for erasure conflicts with the statutory retention periods, access to such data will be restricted (locked). The same applies in the event of an objection. This shall not affect the right to data portability insofar as the technical means are available on both sides.
Right to lodge a complaint
You may lodge a complaint with a data protection supervisory authority at any time. For example, with the competent data protection officer for the state of Niedersachsen. http//www.lfd.niedersachsen.de
Data Security and Encryption
This website uses „Hypertext Transfer Protocol Secure“ (https). The connection between your browser and our server is encrypted.
Google Analytics
This website uses Google Analytics, a web analytics service provided by Google, Inc. ("Google"). Google Analytics uses so-called "cookies", i.e. text files that are stored on your computer and allow an analysis of your use of the website. The information generated by the cookie about the use of this website is transferred to one of Google’s servers in the USA and stored there. In the event that IP anonymization is enabled on this website, Google first truncates your IP address within the member states of the European Union or other contracting states of the European Economic Area. Only in exceptional cases, the full IP address is transmitted to one of Google’s servers in the USA and truncated there. IP anonymization is enabled on this website. Google will use this information on behalf of the operator of this website to analyze your use of our website, to create reports about website activities, and to perform other services in connection with the use of our website and the internet for the operator of this website. The IP address that is transmitted by your browser through Google Analytics is not combined with any other data from Google. You can prevent the storage of cookies by editing the settings in your browser software; please note, however, that in that case you may be unable to fully benefit from all the functions of our website. Moreover, you can prevent the transfer of the data generated by the cookie with respect to the use of the website (including your IP address) to Google and their processing by Google by following the link below and downloading and installing the browser plug-in that is available there: http://tools.google.com/dlpage/gaoptout?hl=de.
Currentness and changes to this data privacy statement
We reserve the right to adjust the contents of this data privacy statement at any time. Usually this takes place in the course of the development or adjustment of the used services. You can view the current version of the data privacy statement on our website.
Date of this statement: 2018-05-14