Data Protection Policy
Thank you for your interest in our company. Data protection is of particular importance to the management of Glenair GmbH. You can generally use the websites of Glenair GmbH without indicating any personal data. If a data subject wants to use any special services of our company via our website, however, processing of personal data may become necessary. If processing of personal data is required and if there is no legal basis for such processing, we will generally collect consent of the data subject.
Glenair GmbH has implemented many technical and organisational measures as the controller for processing in order to ensure the most seamless protection possible concerning the personal data processed via this website. Nevertheless, internet-based data transmissions may generally be subject to safety gaps, so that absolute protection cannot be ensured. For this reason, every data subject is free to transmit personal data to us in alternative ways as well, e.g. by phone.
The data protection statement of Glenair GmbH is based on the terms used by the European directive and regulation provider when issuing the General Data Protection Regulation (GDPR). Our data protection statement is to be easily legible and comprehensible, both for the public and for our customers and business partners. In order to ensure this, we would like to explain the terms used in advance.
In this data protection statement, we use, among others, the following terms:
a) Personal data
Personal data are any data that refer to an identified or identifiable natural person (hereinafter: "Data Subject"). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
b) Data subject
Data subjects are all identified or identifiable natural persons whose personal data are processed by the controller responsible for processing.
Processing means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
d) Restriction of processing
Restriction of processing means the marking of stored personal data with the objective of limiting their processing in the future.
Profiling means any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects concerning that natural person's performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements.
Pseudonymisation means the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures to ensure that the personal data are not attributed to an identified or identifiable natural person.
g) Controller or controller responsible for processing
The controller or controller responsible for processing is the natural or legal person, public authority, institution or other office who decides about the purpose and means of processing of personal data alone or with others. If the purposes and means of this processing are specified by Union or the Member State law, the controller, or the specific criteria of its designation, may be specified according to Union law or the law of the Member States.
The processor is a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.
The recipient is a natural or legal person, public authority, agency or another body, to which the personal data are disclosed, whether a third party or not. Public authorities that may receive personal data within the context of a specific inquiry under Union or Member State law are, however, not deemed recipients.
j) Third party
Third parties are any natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorised to process personal data.
Consent is any freely given, specific, informed and unambiguous indication of the data subject's wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data concerning him or her.
2. Name and address of the controller for processing
The controller within the meaning of the General Data Protection Regulation, other data protection laws applicable in the Member States of the European Union and other provisions with a data-protection character is: Glenair GmbH Schaberweg 28 D-61348 Bad Homburg Germany Phone: +49-(0)6172-6816-0 Email: firstname.lastname@example.org Website: https://www.glenair.de
3. Name and address of the data protection officer
The data protection officer of the controller for processing is: Mr Kai Hartwig ITS-Konzept Beratungsbüro Hartwig Wiesenstr. 2a D-78269 Volkertshausen Germany Phone: +49 (0)178 181 6651 | +49 (0) 777 492 329 42 Email: email@example.com Website: https://www.its-konzept.de
Every data subject may directly contact our data protection officer at any time and for any questions and suggestions regarding data protection.
The data subject may prevent setting of cookies by our website at any time by making the corresponding setting in the web browser used and thereby permanently object to setting of cookies. Furthermore, cookies already set may be erased at any time via a web browser or other software programme. This is possible in all common web browsers. If the data subject deactivates setting of cookies in the web browser used, not all functions of our website may be fully usable.
5. Recording of general data and information
The website of Glenair GmbH records a number of general data and information every time the website is called up by a data subject or an automated system. These general data and information are stored in the log files of the server. The recording may include the (1) browser types and versions used, (2) the operating system used by the accessing system, (3) the website from which an accessing system reaches our website (referrer), (4) the subwebsites that are targeted by an accessing system on our website, (5) the date and time of an access to the website, (6) the internet protocol address (IP address), (7) the internet service provider of the accessing system and (8) other similar data and information that serve to defend against danger in case of attacks to our information-technical systems.
When using these general data and information, Glenair GmbH will not draw any conclusions as to the data subject. This information will, instead, be needed in order to (1) correctly deliver the contents of our website, (2) optimise the contents of our website and advertisements for them, (3) ensure permanent function of our information-technical systems and technology of our website and (4) provide criminal prosecution authorities with the information they need for criminal prosecution in case of a cyberattack. These anonymously collected data and information are therefore evaluated by Glenair GmbH statistically, and with the target of increasing data protection and data security in our company, in order to finally ensure an optimal protection level for the personal data processed by us. The anonymous data of the server log files are stored separately from any other personal data the data subject indicates.
6. Subscription to our newsletter
Users can subscribe to our company's newsletter on the website of Glenair GmbH. Which personal data are transmitted to the controller responsible for processing when you order a newsletter results from the input screen used for this.
Glenair GmbH will inform its customers and business partners at regular intervals about the company's offers by way of a newsletter. Our company's newsletter generally can only be received by the data subject if (1) the data subject has a valid email address and (2) the data subject registers for newsletter dispatch. For legal reasons, a confirmation email for the double-opt-in procedure is sent to an email address entered for the first time for newsletter dispatch. This confirmation mail serves to check whether the owner of the email address has authorised receipt of the newsletter as a data subject.
When you subscribe to the newsletter, we will also store the internet protocol address assigned by your internet service provider (ISP) at the time of your registration, and the date and time of your registration. Collection of such data is required to track the (possible) abuse of the email address of a data subject at a later time, and therefore serves legal protection of the controller responsible for processing.
The personal data collected within the context of registration for the newsletter will only be used to send out our newsletter. Furthermore, subscribers to the newsletter can be informed by email if this is required for operation of the newsletter service or registration for it. This may be the case if there are any changes to the newsletter offer or the technical situation. The personal data collected in the scope of the newsletter service will not be passed on to any third parties. The subscription to our newsletter can be terminated at any time by the data subject. Consent to storage of personal data once given to us by the data subject for newsletter dispatch may be withdrawn at any time. Every newsletter has a link for the purpose of withdrawing consent. Furthermore, it is also possible to unsubscribe from the newsletter at any time on the website of the controller responsible for processing or to inform the controller of this otherwise.
7. Newsletter tracking
The newsletters of Glenair GmbH contain counting pixels. A counting pixel is a miniature icon that is embedded in emails sent in HTML format, in order to permit log file recording and log file analysis. This permits statistical evaluation of success or failure of online marketing campaigns. Based on the embedded counting pixel. Glenair GmbH will be able to see whether and when an email was opened by a data subject and which links in the email the data subject called up.
Such personal data collected in the counting pixels contained in the newsletters are stored by the controller for processing and evaluated in order to optimise newsletter dispatch and to adjust the contents of future newsletters to the interests of the data subject even better in future. These personal data will not be passed on to any third parties. Data subjects have the right, at any time, to withdraw the consent given separately in this respect via the double-optin procedure. After withdrawal, such personal data will be determined by the controller.
Glenair GmbH will automatically consider unsubscription from the newsletter to be a revocation.
8. Contact options via the website
The website of Glenair GmbH contains information based on statutory provisions to permit quick electronic contact with our company and direct communication with us, also including a general address for electronic mail (email address). If a data subject contacts the controller for processing by email or through a contact form, the personal data transmitted by this data subject will be stored automatically. Such personal data that the data subject feely transmits to the controller for processing voluntarily are stored for the purpose of processing or for contacting the data subject. The personal data are not passed on to any third parties.
9. Routine erasure and blocking of personal data
The controller for processing processes and stores personal data of the data subject only for the period that is required to achieve the purpose of storage or if this was stipulated in laws or provisions that the controller is subject to by the European directive and regulation provider or any other legislator.
If the storage purpose no longer applies or if any storage period stipulated by the European directive and regulation provider or any other relevant legislator expires, the personal data will be routinely blocked or deleted according to the statutory provisions.
10. Rights of the data subject
a) Right to confirmation
The European directive and regulation provider grants every data subject the right to demand confirmation from the controller of whether any personal data concerning him or her are being processed. If a data subject uses this confirmation right, he or she may contact an employee of the controller at any time.
b) Right to information
The European directive and regulation provider grants every data subject affected by processing of personal data the right to receive information from the controller free of charge regarding the personal data stored on his or her person and to receive a copy of this information. Furthermore, the European directive and regulation provider grants the data subject the right to be informed about the following:
the purposes of the processing
the categories of personal data concerned;
the recipients or categories of recipient to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organisations;
where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period;
the existence of the right to request from the controller rectification or erasure of personal data or restriction of processing of personal data concerning the data subject, or to object to such processing; the right to lodge a complaint with a supervisory authority information to be provided where personal data are not obtained from the data subject directly: all available information concerning the origin of the data, the existence of automated decision-making, including profiling, referred to in Article 22(1) and (4) GDPR and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.
Furthermore, the data subject has the right to be informed on whether personal data have been transmitted to any third country or any international organisation. If this is the case, the data subject further has the right to demand information on the appropriate safeguards in connection with transmission.
If a data subject uses this information right, he or she may contact an employee of the controller at any time.
c) Right to rectification
The European directive and regulation provider grants every data subject affected by the processing of personal data the right to demand rectification of incorrect personal data concerning him or her without undue delay. Furthermore, the data subject has the right to demand completion of incomplete personal data, under consideration of the purpose of processing — also by way of a supplementary statement.
If a data subject uses this confirmation right, he or she may contact an employee of the controller at any time.
d) Right to erasure (right to be forgotten)
The European directive and regulation provider grants every data subject affected by processing of personal data the right to demand that the controller erase the personal data concerning him or her without undue delay, provided that one of the following reasons applies and provided that processing is not required:
The personal data were collected for such purposes or processed in any other manner for which they are no longer required. The data subject withdraws consent on which the processing is based according to point (a) of Article 6(1) GDPR or point (a) of Article 9(2) GDPR, and where there is no other legal ground for the processing. The data subject objects to the processing pursuant to Article 21(1) GDPR and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing pursuant to Article 21(2) GDPR. The personal data have been unlawfully processed. The personal data have to be erased for compliance with a legal obligation in Union or Member State law to which the controller is subject.
The personal data have been collected in relation to the offer of information society services referred to in Article 8(1) GDPR.
If one of the above reasons applies and a data subject wants to initiate erasure of personal data stored by Glenair GmbH, he or she may contact an employee of the controller for this at any time. The employee of Glenair GmbH will have the erasure request processed without undue delay.
If the personal data were published by Glenair GmbH and if our company is required to erase the personal data as controller in accordance with Article 17(1) GDPR, Glenair GmbH will take appropriate measures, under consideration of the available technology and implementation costs, including measures of technical nature, in order to inform any other controllers of processing activities that process the published personal data of the fact that the data subject has demanded erasure of all links to such personal data or copies or replications of these personal data from other controllers for processing activities as far as processing is no longer required. The employee of Glenair GmbH will initiate anything necessary for this from case to case.
e) Right to restriction of processing
The European directive and regulation provider grants every data subject affected by processing of personal data the right to demand that the controller restrict processing if one of the following conditions is met:
The accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal data. The processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of their use instead. The controller no longer needs the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise or defence of legal claims. The data subject has objected to processing pursuant to Article 21(1) GDPR pending the verification whether the legitimate grounds of the controller override those of the data subject.
If one of the above conditions applies and a data subject wants to demand restriction of personal data stored by Glenair GmbH, he or she may contact an employee of the controller for this at any time. The employee of Glenair GmbH will initiate restriction of processing.
f) Right to data portability
The European directive and regulation provider grants every data subject affected by processing of personal data the right to receive the personal data concerning him or her that have been provided to a controller by the data subject in a structured, common and machinereadable format. He or she shall further have the right to transmit the data to another controller without impairment by the controller by whom the personal data have been processed, provided that processing was based on consent in accordance with point (a) of Article 6(1) GDPR or point (a) of Article 9(2) GDPR or a contract in accordance with point (b) of Article 6(1) GDPR and processing takes place using automated procedures, provided that processing is not required to perform a task that is in the public interest or to exercise public power that has been assigned to the controller.
Furthermore, the data subject has the right, in the scope of his or her right to data portability in accordance with Article 20(1) GDPR, to demand that the personal data be directly transmitted to another controller as far as this is technically feasible and does not impair the rights and freedoms of another person.
In order to assert the right to data portability, the data subject may contact an employee of Glenair GmbH at any time.
g) Right to object
The European directive and regulation provider grants every data subject affected by processing of personal data the right to object to processing of the personal data concerning him or her that takes place based on point (e) or (f) of Article 6(1) GDPR at any time based on reasons resulting from his or her special situation. This shall also apply to profiling based on this provision.
Glenair GmbH shall no longer process the personal data in case of objection, unless we demonstrate compelling legitimate grounds for processing that override the interests, rights and freedoms of the data subject or if processing serves the establishment, exercise or defence of legal claims.
If Glenair GmbH processes personal data for direct marketing purposes, the data subject shall have the right to object to processing of the personal data for the purpose of such marketing at any time. This shall also apply to profiling as far as this is connected to such direct marketing. If the data subject objects to processing for direct marketing purposes towards Glenair GmbH, Glenair GmbH shall no longer process the personal data for such purposes.
Where personal data are processed by Glenair GmbH for scientific or historical research purposes or statistical purposes in accordance with Article 89(1) GDPR, the data subject shall also have the right, on grounds relating to his or her particular situation, to object to processing of personal data concerning him or her, unless such processing is necessary for performance of a task carried out for reasons of public interest.
In order to exercise the right to objection, the data subject may directly contact any employee of Glenair GmbH or another employee. The data subject shall further be free to exercise the right to object in connection with use of services of the information society, no matter directive 2002/58/EC, where technical specifications are used.
h) Automated individual decision-making, including profiling
The European directive and regulation provider grants every data subject affected by processing of personal data the right to not be subject to a decision based on automated processing - including profiling - that has any legal effect towards him or her or that similarly considerably impairs him or her, provided that the decision (1) is not required for conclusion or performance of a contract between the data subject and the controller or (2) is permitted based on the legal provisions of the Union or Member States the controller is subject to and these legal provisions contain appropriate measures to preserve the rights and freedoms and the legitimate interests of the data subject or (3) takes place with the express consent of the data subject.
If the decision (1) is required to conclude or perform a contract between the data subject and the controller or (2) if it takes place with the explicit consent of the data subject, Glenair GmbH shall implement appropriate measures to safeguard the data subject's rights and freedoms and legitimate interests, at least the right to obtain human intervention on the part of the controller, to express his or her point of view and to contest the decision.
If the data subject wants to assert rights with a reference to automated decisions, he or she may contact an employee of the controller at any time.
i) Right to revocation of the declaration of consent under data protection law
The European directive and regulation provider grants every data subject affected by processing of personal data the right to withdraw consent given to processing of personal data at any time.
If the data subject wants to assert his or her right to withdrawal of consent, he or she may contact an employee of the controller at any time.
11. Provisions on data protection for the purpose and use of Xing
The controller for processing has integrated components of Xing on this website. Xing is an internet-based social network that permits connection of the users to existing business contacts, and establishing of new business contacts. The individual users can set up a personal profile of themselves at Xing. Companies may, e.g., create corporate profiles or publish job offers at Xing.
The operating company of Xing is XING SE, Dammtorstraße 30, D-20354 Hamburg, Germany.
Every time one of the individual pages of this website that is operated by the controller on which a Xing component (Xing plug-in) has been integrated is called up, the web browser on the information-technology system of the data subject will be automatically caused to download a presentation of the corresponding Xing component from Xing by the respective Xing component. For more information on the Xing plugin, see https://dev.xing.com/plugins. Within the context of this technical process, Xing will be informed of which specific sub-page of our website the data subject visits.
If the data subject is logged in with Xing at the same time, Xing will recognise the specific sub-page of our website the data subject visits every time the data subject calls up our website and throughout the duration of the respective stay on our website. This information will be collected by the Xing component and associated with the respective Xing account of the data subject by Xing. If the data subject activates one of the Xing buttons integrated on our website, e.g. the "Share" button, Xing will associate this information with the personal Xing user account of the data subject and store these personal data.
Xing will be informed via the Xing component that the data subject has visited our website if the data subject is logged in with Xing at the same time at which he or she calls up our website; this is done independently of whether the data subject clicks the Xing component or not. If this kind of transmission of such information to Xing is not desired by the data subject, he or she may prevent transmission by logging out of his or her Xing account before calling up our website.
The provisions on data protection published by Xing that can be called up at https://www.xing.com/privacy provide information on the collection, processing and use of personal data by Xing. Furthermore, Xing has published data protection notes for the XING share button at https://www.xing.com/app/share?op=data_protection.
12. Legal basis of processing
Point (a) of sect. 6(1) GDPR serves as the legal basis for processing activities in our company for which we collect consent for a specific processing purpose. If processing of personal data is required for compliance with a contract the contracting party of which the data subject is, as is the case, e.g., during processing activities that are required for delivery of goods or rendering of any other service or compensation, processing shall be based on point (b) of Article 6(1) GDPR. The same shall apply to such processing activities that are required to perform pre-contractual measures, e.g. in cases of queries concerning our products and services. If our company is subject to any legal obligation through which processing of personal data is required, e.g. for compliance with tax obligations, processing is based on point (c) of Article 6(1) GDPR. In rare cases, processing of personal data may be necessary in order to protect the vital interests of the data subject or of another natural person. This would be the case, for example, if a visitor was injured in our operation and the name, age, health insurance data or other vital information would have to be passed on to a doctor, hospital or other third parties. In this case, processing would be based on point (d) of Article 6(1) GDPR. Finally, processing activities may be based on point (f) of Article 6(1) GDPR. This is the legal basis of processing activities that are not covered by any of the above legal basis if processing is required to preserve a legitimate interest of our company or of a third party, provided that the interests, fundamental rights and fundamental freedoms of the data subjects do not take priority. Such processing activities are permitted to us in particular because they are specially named by the European legislator. It believed in this respect that a legitimate interest could be assumed if the data subject was a customer of the controller (consideration 47 sentence 2 GDPR).
13. Legitimate interests in processing that are pursued by the controller or by a third party
If processing of personal data is based on point (f) of Article 6(1) GDPR, our legitimate interest shall be execution of our business activities to the benefits of all of our employees and shareholders.
14. Duration for which the personal data are stored
The criteria for the duration of storage of personal data are the respective statutory archiving periods. After the end of the time limit, the corresponding data will be routinely deleted if they are no longer required for performing the c15. Statutory or contractual rules on processing of the personal data; requirement for conclusion of the contract; obligation of the data subject to provide the personal data; possible consequences of not providing data
We inform you that the provision of personal data is partially required by law (e.g. tax rules) or may result from contractual provisions (e.g. information on the contracting partner). It may be necessary for conclusion of a contract that a data subject will provide us with personal data that must be processed by us subsequently. The data subject is obligated, e.g., to provide us with personal data if our company enters into a contract with him or her. Not providing any personal data would have the consequence that the contract with the data subject could not be concluded. Before provision of personal data by a data subject, the data subject must contact one of our employees. Our employee will inform the data subject from case to case on whether provision of the personal data is required by law or contract, whether there is any obligation to provide the personal data and what consequences not providing the personal data would have.
16. Use of automated decision-making
As a responsible company, we do not use automated decision-making or profiling.
This data protection statement was compiled by the data protection statement generator of DGD Deutsche Gesellschaft für Datenschutz GmbH, working as external data protection officer of Bavaria, in cooperation with the lawyer for data protection law Christian Solmecke.