Data Protection Declaration

Thank you for your interest in our company. Data protection has a particularly high priority for the management of TLG-NEFF GmbH (hereinafter “TLG-NEFF”). The use of our website and its sub-pages is therefore possible without providing personal data. However, if special services of our company are used via our website, the processing of personal data of the user may become necessary. If the processing of personal data is necessary but not permitted by law, we generally obtain the prior consent of the data subject.

The processing of personal data, such as the name, address, email address or telephone number of a data subject, is always carried out in accordance with the requirements of the General Data Protection Regulation (hereinafter “GDPR”) and in accordance with the applicable country-specific data protection regulations applicable to TLG-NEFF.

By means of this data protection declaration, TLG-NEFF would like to inform you about the type, scope and purpose of the processing of personal data in connection with this website and about the rights to which you, as the data subject, are entitled.

TLG-NEFF has implemented numerous technical and organizational measures to ensure the most complete protection possible for personal data processed via this website. Nevertheless, Internet-based data transmissions can generally have holes in their security, so that absolute protection cannot be guaranteed. For this reason, every user is free to transmit personal data to TLG-NEFF in alternative ways as well, for example by telephone.

1. Name and address of the Controller:

The responsible person within the meaning of the GDPR, other data protection laws in the member states of the European Union and other regulations with data protection character is:

TLG-NEFF GmbH, Wormser Str. 14, 67583 Guntersblum, Germany
Tel.: 0 62 49 / 80 50 72,
E-Mail: [javascript protected email address]

2. Creation of Log Files

Each time this website is accessed, TLG-NEFF uses an automated system to collect data and information from the accessing computer. These are stored in the log files of the server delivering the website.

The following data can be collected:

IP address of the accessing computer
Date and time of access
Date, URL and data volume of the accessed data
Identification data of the internet browser and the operating system of the accessing computer
the sub-websites, which are accessed via an accessing system on our website,
Website from which access or forwarding to this website took place (referrer)
Name of the user’s internet provider and
Other similar data and information used in the event of attacks on our information technology systems

The so-called IP address is transmitted for protocol reasons with each server request, so that the server can transmit the website to the requesting computer. Every internet user is assigned an IP address by his Internet Service Provider (ISP) as soon as he connects to the Internet. The ISP can typically trace which IP address was assigned to which of its customers at what time. As long as the IP address is stored by TLG-NEFF, the identity of the subscriber can theoretically be determined by the detour of a request to the ISP.

Art 6 (1) (f) GDPR is the legal basis for the temporary storage of data and log files.

The processing of the data serves to deliver the contents of the website, to guarantee the functionality of our information technology systems and to optimise the website. The data of the log files is always stored separately from other personal data. An evaluation of personal data for marketing purposes does not take place in this context.

In pursuing the aforementioned objectives TLG-NEFF’s legitimate interest in data processing also lies in pursuant to art 6 (1) (f) GDPR.

The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended.

If the data is stored in log files, this is the case after seven days at the latest.

3. Google Maps

This website uses the map display Google Maps API, a map service of Google Inc., 1600 Amphitheatre Parkway Mountain View, CA 94043, USA (“Google”), to display an interactive map. Google Inc. is certified under the terms known as Privacy Shield. The Certificate can be seen here https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI .

By using Google Maps, information about your use of this website (including your IP address) may be transmitted to and stored by Google on servers in the United States. Google may transfer the information obtained through Analytics & Maps to third parties, if required by law or as far as third parties process this data on behalf of Google. Google will never associate your IP address with other Google data. Nevertheless, it would be technically possible that Google could use the data received to identify at least one user. You can easily deactivate the service of Google Maps and thus prevent the data transfer to Google: Disable JavaScript in your browser. We point out, however, that you cannot use the map display in this case.

Further information: https://policies.google.com/privacy/update?hl=de.

The legal basis for the processing of the data in the context of geolocalisation services is Art 6 (1) (f) GDPR.

4. Newsletter

On TLG-NEFF's website, users are given the opportunity to subscribe to the company's newsletter. The e-mail address, as the only personal data, will be sent to TLG-NEFF when ordering the newsletter. TLG-NEFF informs its customers and business partners at regular intervals by means of a newsletter about company offers. The newsletter of our company can only be received by users if they have a valid e-mail address and register for the newsletter. For legal reasons, a confirmation e-mail will be sent to the e-mail address registered by a user for the first time for the newsletter dispatch in a double-opt-in procedure. This confirmation email serves to check whether the owner of the e-mail address as a user has authorised the receipt of the newsletter.

When subscribing to the newsletter, TLG-NEFF also stores the IP address of the user assigned by the Internet Service Provider (ISP) when they registered and the date and time of registration. The collection of this data is required in order to understand the (possible) misuse of a user's e-mail address at a later date and therefore serves the legal protection of TLG-NEFF.

The personal data collected as part of a newsletter application will only be used to send the newsletter. In addition, subscribers of the newsletter will be informed by e-mail if this is necessary for the operation of the newsletter service or registration, as in the case of changes to the newsletter offer or in the event of a change in the technical conditions. There will be no transfer of the personal data collected as part of the newsletter service to third parties.

Legal basis for the processing of the data after registration for the newsletter by the user in the presence of consent given by the user, is Art 6 (1) (a) GDPR

The subscription to our newsletter can be terminated by the user at any time. The consent to the storage of the personal data that the user has given us for the newsletter dispatch can be revoked at any time. For the purpose of revoking the consent, there is a corresponding link in each newsletter. It is also possible to unsubscribe from the newsletter at any time directly on the website or to communicate this in another way.

5. Contact via the website

TLG-NEFF's website contains information required by law to allow you to contact our company quickly and to communicate with us directly, which also includes a general address of the so-called electronic mail (e-mail address).

If a user contacts TLG-NEFF via e-mail or via a contact form, the user's submitted personal data will be automatically saved.

This always includes the following data:

Email address
Use
Name
Title
Country

Additional data can be provided voluntarily by the user.

Such personal data transmitted by a user to TLG-NEFF on a voluntary basis are stored for purposes of processing or contacting the user. There is no disclosure of this personal data to third parties.

The legal basis for the processing of the data transmitted in the course of sending an e-mail is Art 6 (1) (f) GDPR.

The data will be deleted as soon as they are no longer necessary for the purpose of its collection. This is the case when the respective conversation with the user has ended. The conversation is ended when it can be inferred from the circumstances that the relevant facts have been finally clarified.

6. Legal basis of processing in general

Unless otherwise stated in this Data Protection Declaration in individual cases, the following applies to the legal basis of data processing:

Art. 6 (1) (a) GDPR serves as the legal basis for TLG-NEFF’s processing operations where TLG-NEFF obtains consent for a particular processing purpose.

If the processing of personal data is necessary to fulfil a contract of which the data subject is a party, as is the case, for example, in processing operations necessary for the supply of goods or the provision of any other service or consideration, processing shall be based on Art. 6 (1) (b) GDPR.

The same applies to processing operations that are necessary to carry out pre-contractual measures, such as in cases of inquiries about products or services. If TLG-NEFF is subject to a legal obligation which requires the processing of personal data, such as the fulfilment of tax obligations, the processing is based on Art. 6 (I) (c) GDPR.

In rare cases, the processing of personal data may be required to protect vital interests of the data subject or another natural person. This would be the case, for example, when a visitor to the premises is injured and then his or her name, age, health insurance or other vital information must be passed on to a doctor, hospital or other third party. In such a case, the processing is based on Art. 6 (1) (d) GDPR.

Finally, processing operations may be based on Art. 6 (1) (f) GDPR. This legal basis is based on processing operations which are not covered by any of the abovementioned legal bases where processing is necessary to safeguard a legitimate interest of TLG-NEFF or a third party, provided the interests, fundamental rights and fundamental freedoms of the person concerned do not prevail.

7. Routine deletion and blocking of personal data

In general, TLG-NEFF will only process and store the personal data of the user for as long as this is necessary to achieve the storage purpose. Furthermore data may be stored insofar as this has been provided for by the European or National legislator in EU regulations, laws or other provisions to which TLG-NEFF is subject.

If the storage purpose is omitted or if a storage period prescribed by the European directives and regulations or any other relevant legislator expires, the personal data will be routinely blocked or deleted in accordance with the statutory provisions.

8. Rights of the affected user

If the user's personal data are processed, the user is affected within the meaning of the GDPR and he has the following rights towards TLG-NEFF:

8.1 Right to confirmation

Each data subject has the right to ask TLG-NEFF for confirmation of the processing of personal data concerning them. If an affected person wishes to make use of this confirmation right, they can contact TLG-NEFF at any time.

8.2 Right to Information

Any person affected by the processing of personal data has the right to obtain free information from TLG-NEFF at any time about the personal data stored about him and a copy of this information. Furthermore, the European legislator and regulator have provided the data subject with the following information:

The processing purposes
The categories of personal data being processed
the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular for recipients in third countries or international organizations,
if possible, the planned duration for which the personal data are stored or, if this is not possible, the criteria for determining that duration,
the existence of a right to rectification or erasure of the personal data relating to him or to a restriction of processing by TLG-NEFF or a right of opposition to such processing;
the existence of a right of appeal to a supervisory authority,
if the personal data are not collected from the data subject: all available information on the source of the data,
the existence of automated decision-making including profiling in accordance with Article 22 (1) and (4) GDPR and, at least in these cases, meaningful information about the logic involved and the scope and intended impact of such processing on the data subject.
In addition, the data subject has a right to the information as to whether personal data has been transmitted to a third country or to an international organization. If that is the case, then the data subject has the right to obtain information about the appropriate guarantees in connection with the transfer.

If an affected person wishes to exercise this right to information, they can contact TLG-NEFF at any time.

8.3 Right to rectification

Any person affected by the processing of personal data has the right to demand the immediate correction of incorrect personal data concerning them. Furthermore, the data subject has the right to request the completion of incomplete personal data, including by means of a supplementary declaration, taking into account the purposes of the processing.

If an affected person wishes to exercise this right of rectification, they can contact TLG-NEFF at any time.

8.4 Right to be erased (right to be forgotten)

Any person affected by the processing of personal data has the right to request TLG to delete personal data concerning him/her immediately, provided that one of the following reasons applies and insofar as the processing is not necessary:

The personal data has been collected for such purposes or otherwise processed for which they are no longer necessary.
The data subject revokes their consent, upon which the processing pursuant to Art. 6 (1) (a) GDPR or Art. 9 (2) GDPR relies and there is no other legal basis for processing.
According to Art. 21 (1) GDPR, the data subject submits an objection to the processing and there are no legitimate reasons for the processing, or the person concerned objects to the processing pursuant to Art. 21 (2) GDPR.
The personal data were processed unlawfully
The erasure of personal data is required to fulfil a legal obligation under Union or national law governing TLG-NEFF.
The personal data were collected in relation to information society services offered pursuant to Art. 8 (1) GDPR.

If one of the above reasons is correct and an affected person wishes to arrange for the deletion of personal data stored at TLG-NEFF, they may contact TLG-NEFF at any time. TLG-NEFF or an employee will arrange for the extinguishing request to be fulfilled immediately.

If TLG-NEFF's personal data have been disclosed to the public and if our company is responsible for deleting personal data as the person responsible pursuant to Art. 17 (1) GDPR, TLG-NEFF shall take appropriate measures, including technical ones, for deleting personal data, taking into account available technology and implementation costs in order to inform the data controller, those who process the published personal data, that the data subject has requested the deletion of all links to such personal data or copies or replications of such personal data from these other data controllers, as far as the processing is not required. T will arrange the necessary in individual cases.

8.5 right to restriction of processing

Any person affected by the processing of personal data has the right to require TLG-NEFF to restrict processing if one of the following conditions is met:

If the accuracy of the personal data is disputed by a data subject, the restriction may be required for a period of time allowing TLG-NEFF to verify the accuracy of the personal data.
The processing is unlawful; the data subject refuses to delete the personal data and instead requests the restriction of the use of personal data.
TLG-NEFF no longer needs personal data for processing purposes, but the data subject requires them to assert, pursue or defend legal claims.
The person concerned has made an objection to the processing in accordance with Art. 21 (1) GDPR and it is not yet clear whether the legitimate reasons of TLG-NEFF outweigh those of the data subject.

If one of the above conditions is met and an affected person wishes to request the restriction of personal data stored at TLG-NEFF, they can contact TLG-NEFF at any time. TLG-NEFF shall restrict the processing.

8.6 Right to data portability

Any person affected by the processing of personal data shall have the right to receive in a structured, common and machine-readable format personal data relating to him /her provided to a controller by the data subject. It also has the right to transfer this data to another person responsible for TLG-NEFF, to whom the personal data have been provided, without hindrance by TLG-NEFF, provided that the processing is based on the consent pursuant to Art. 6 (1) (a) GDPR or Art. 9 (2) (a) GDPR or on a contract pursuant to Art. 6 (1) (b) GDPR and processing by automated means, unless the processing is necessary for the performance of a public-interest or public-authority task TLG-NEFF was transferred.

Furthermore, in exercising their right to data portability under Article 20 (1) of the GDPR, the data subject has the right to obtain the personal data transmitted directly from TLG-NEFF to another person responsible, provided that this is technically feasible and if no rights and freedoms of others are impaired.

8.7 Right to Objection

Any person concerned by the processing of personal data shall have the right, at any time, to object to the processing of personal data concerning him / her pursuant to Article 6 (1) (e) or (f) of the GDPR for reasons arising from his particular situation. This also applies to profiling based on these provisions. TLG-NEFF will no longer process personal data in the event of an objection unless it can demonstrate compelling legitimate grounds for processing that outweigh the interests, rights and freedoms of the data subject, or processing for the purposes of asserting, pursuing or defending legal claims.

If TLG-NEFF processes personal data in order to operate direct advertising, the data subject has the right to object at any time to the processing of personal data for the purpose of such advertising. This also applies to profiling insofar as it is connected with such direct advertising. If the data subject objects to TLG-NEFF for processing for direct marketing purposes, TLG-NEFF will no longer process the personal data for these purposes.

In order to exercise the right of opposition, the data subject may contact TLG-NEFF directly. The data subject is also free, in the context of the use of information society services, notwithstanding Directive 2002/58 / EC, to exercise his right of opposition by means of automated procedures using technical specifications.

8.8 Automated decisions in individual cases including profiling

Any person concerned by the processing of personal data shall have the right not to be subject to a decision based solely on automated processing, including profiling, which has a legal effect on it or, in a similar manner, significantly affects it, provided the decision:

is not required for the conclusion or performance of a contract between the data subject and TLG-NEFF, or
is permissible under Union or Member State law to which TLG-NEFF is subject, and that legislation contains adequate measures to safeguard the rights and freedoms and legitimate interests of the data subject; or
follows the express consent of the data subject.

If the decision (1) is required for the conclusion or performance of a contract between the data subject and TLG NEFF or (2) it takes place with the explicit consent of the data subject. TLG-NEFF GmbH takes measures to protect the rights and freedoms as well as the legitimate interests of the affected parties Person, including at least the right to obtain the intervention of a person by TLG-NEFF, to express his or her own position and to contest the decision.

8.9 Right to revoke data protection consent

Any person affected by the processing of personal data has the right to withdraw consent to the processing of personal data at any time.

8.10 Right to complain to a supervisory authority

Without prejudice to any other administrative or judicial remedy, users shall have the right to complain to a supervisory authority, in particular in the Member State of the place of residence, the place of work or the place of alleged infringement, if users consider that the processing of the personal data concerning the user violates the GDPR.

The supervisory authority to which the complaint has been submitted shall inform the complainant of the status and results of the complaint, including the possibility of a judicial remedy pursuant to Article 78 of the GDPR.