Data protection made ISY
We aim to ensure that you feel safe on our website, so your privacy and the protection of your personal rights are important to us. Therefore, we would ask you to carefully read the summary below about how our website works. You can trust that your data will be processed transparently and fairly, and we will make every effort to handle your data carefully and responsibly.
Controller and data protection officer contact details
The controller for the purposes of the GDPR, other data protection legislation in EU member states and other regulations pertaining to data protection is:
Imtron GmbH, Wankelstraße 5, 85046 Ingolstadt, Deutschland Tel.: +49(0)841/ 634-4660
The data protection officer of the controller can be contacted at:
Scope of processing of personal data
We collect and use your personal data only insofar as it is necessary to provide a functioning website, our content and services, for instance when you register on our website, log in to an existing customer account or order products. Your personal data is only collected and used with your consent. An exception to this rule is where prior consent is not possible due to given circumstances and the processing of the data is permitted by statute.
The security of your personal data is of high priority to us. We therefore take technical and organisational measures to protect your data stored by us in order to effectively prevent its loss and its misuse by third parties. Our employees tasked with processing personal data in particular are bound by confidentiality obligations and are required to comply with these. Your personal data is secured by ensuring that it is transmitted in encrypted form; for instance, we use SSL (Secure Sockets Layer) to communicate with your web browser. A padlock symbol will be displayed by your browser so that you can see when an SSL connection has been established. To ensure that your data is protected at all times, the technical security measures undergo regular review and are adapted to new technological standards where necessary. These principles also apply to companies that we commission to process and use data in accordance with our instructions.
Purposes of processing and the legal principles governing how your personal data is processed
We collect, process and use your personal data for the following purposes:
- The establishment and performance of contracts
- Marketing activities, such as prize draws
- Customer service and customer support
Your personal data may be processed on the basis of the following legal principles:
- Art. 6, para. 1, letter a of the GDPR serves as the legal basis for processing activities for which we acquire your consent for a certain processing purpose.
- Art. 6, para. 1, letter b of the GDPR states that personal data may be processed for the performance of a contract, e.g. when purchasing a product. The same applies to any processing activities that are necessary for the performance of pre-contractual activities such as handling enquiries regarding products or services.
- Art. 6, para. 1, letter c of the GDPR applies in cases where we are bound by a legal obligation that requires personal data to be processed, for instance for compliance with tax obligations.
- Art. 6, para. 1, letter d of the GDPR states that personal data may be processed in order to protect the vital interests of yourself or other natural person.
- Art. 6, para. 1, letter f of the GDPR applies in relation to our legitimate interests, for instance when employing service providers for the purpose of performing orders (e.g. delivery services), when performing statistical surveys and analyses or when logging login attempts. Our interest lies in providing a user-friendly, appealing and secure website and optimising the same in order to both serve our business interests and meet your expectations.
Duration of storage and routine erasure of personal data
We only process and store your personal data for as long as it is necessary to fulfil the purpose for which it is stored or while we are required to do so according to law or regulation. Once the purpose ceases to apply or is fulfilled, your personal data will be erased or restricted. Where data is restricted, the data will be erased as soon as retention periods imposed by law, articles of association or contract no longer prevent this erasure from being performed, as long as there is no reason to assume that erasure would jeopardise your legitimate interests, and provided that this erasure would not involve a disproportionately high amount of effort due to the specific nature of the storage.
Collection of general data and information (log files)
In keeping with Art. 6, para. 1, letter f of the GDPR, our website collects a range of general data and information upon each access that is temporarily stored in a server’s log files. A log file is created as part of the automatic logging performed by the processing computer system. The following data may be collected:
- Access to the website (date, time and frequency)
- How you arrived at the website (referring page, hyperlink, etc.)
- Volume of data sent
- The browser and browser version that you are using
- The operating system that you are using
- The internet service provider that you are using
- The IP address that your internet service provider assigns to your computer when connecting to the internet
The collection and storage of this data is required for the operation of the website in order to provide the website functionality and correctly deliver the content of our website. We also use the data to optimise our website and ensure the security of our IT systems. For this reason, the data is stored for a maximum of seven days as a technical precaution.
We also use this data for the purposes of marketing, market research and structuring our services to meet demand by creating and analysing usage profiles under pseudonyms, albeit only if you have not asserted your right to refuse or withdraw consent for the usage of your data in this fashion (see notes regarding your right to object under “Your rights”). This includes the “Remember me” function that you can also disable in your customer account under “Personal data”.
Cookies and web analysis services
For this purpose, we use various cookies and services to ensure full functionality of our website and to make it as informative and as user-friendly as possible for you. It is important to us that you are able to surf our website with ease, and therefore we place great value on making continuous improvements to it. This includes saving your settings and pre-filled forms so that you do not need to keep entering the same data. It is also important to us that you only see content that you are really interested in and that would make your online experience easier.
1. Functional cookies
Cookies are small text files that are placed on your computer by sites you visit, which allow any settings or other changes you have made to be reconstructed on your next visit.
These functional cookies ensure that our website works correctly. These cookies are stored for a maximum of two years – they are then automatically deleted. The following functions are possible with these cookies:
- saving products that you have placed in the basket or saved to your wish list,
- saving data that you have entered during checkout or while placing an order so that you do not need to enter it again,
- saving settings such as language, location, number of search results, etc.,
- saving settings for optimum video display, e.g. the desired buffer size and your screen’s
- recording your browser settings to allow our website to be displayed optimally,
- recognising misuse of our websites and services, e.g. by recording numerous consecutive or failed attempts to register,
- loading the website in full so that the website remains accessible or
- saving your login data so that you do not need to enter it again each time.
You can prevent these cookies from being stored or delete cookies already stored. You can gain more detailed information from the manufacturer or from the help section of your internet browser. We must remind you that some functions on our website will either no longer be available or only to a limited extent if you do not allow these functional cookies.
2. Analysis services for statistical purposes
In order to determine what content on our website is the most attractive to you, we continually monitor the number of visitors and the most commonly viewed content. We use the data we collect for statistical purposes, such as:
- recording the number of visitors to our websites,
- recording the amount of time visitors spend on our site,
- recording the order of the visits to the different websites,
- determining which parts of our website need changing or
- optimising the website.
We use the following services for statistical purposes; you can deactivate these by installing an opt-out cookie or following a link:
To deactivate Google analytics, click on the following link to download and install a browser plugin: https://tools.google.com/dlpage/gaoptout?hl=en
On our website, we use the web analytics service "Google Signals" from Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA , to obtain reports on cross-device user numbers, as well as on different user groups based on different device combinations (so-called cross-device tracking). In the process, user data is collected if the user has activated the "personalized advertising" option in his Google account settings. A defined limit for the reporting data ensures that, in principle, no conclusions can be drawn about the identity of an individual user.
To turn off Google Signals, please deactivate the "personalized advertising" paragraph in your Google account here. (https://support.google.com/ads/answer/2662922?hl=de)
Google Tag Manager
We use the service "Google Tag Manager", a product of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"), to display services of partners on our website. Through this service, we ensure that the Consent for you as a consumer is respected and can therefore not be disabled. The service itself does not independently collect any data other than that which is technically necessary for delivery (including your IP address) to be transferred to a Google server in the USA and stored there.
Processing of personal data when making contact, upon registration and when submitting guest orders
1. Making contact
The data that is collected in connection with this will be deleted by us when the conversation in question is concluded and the matter at hand has been conclusively resolved.
Based on Art. 6, para. 1, letters c and f of the GDPR, we use and store your personal data and technical information where necessary to prevent or investigate misuse or other illegal behaviour on our website, e.g. to maintain data security in the event of attacks on our IT systems. This may also be done on the basis of orders by public authorities or courts of law, insofar as we are required to do so by law, and also to preserve our rights and interests and to enable a legal defence on our part.
Transmission of personal data to third parties
When transmitting your personal data, we ensure that the level of security is always as high as possible, which is why your data is only transmitted to service providers and partner companies that are carefully selected beforehand and bound by contractual obligations. We also only transmit your data to bodies which are located within the European Economic Area and are thus subject to strict EU data protection legislation or which are bound by a corresponding security standard. Transmission of data to third countries is not currently performed or planned.
Of course, you have rights in connection with the collection of your data, which we are pleased to inform you about here. If you wish to make use of any of the following rights free of charge, simply send us a message. You can use the following contact details without incurring any costs other than those charged by your communications provider for transmitting the message:
By post:Imtron GmbH, Wankelstraße 5, 85046 Ingolstadt, Deutschland
For your own security, we reserve the right to acquire further information needed to confirm your identity when responding to an existing enquiry. If identification is not possible, we also reserve the right to refuse to respond to your enquiry.
1. Right to information
You have the right to demand information from us on the personal data stored about you.
2. Right to rectification
You have the right to demand immediate rectification and/or completion of the personal data stored about you.
3. Right to restrict processing
You have the right to demand that processing of your personal data be restricted if you dispute the accuracy of the data stored about you, if processing is unlawful and we no longer require the data, but you do not wish the data to be deleted and require it to assert, exercise or defend legal entitlements, or if you have disclosed your objection to its processing.
4. Right to erasure
You have the right to demand erasure of your personal data stored by us, unless the retention of the data is necessary for freedom of expression, for freedom of information, for compliance with a legal obligation, for reasons in the public interest, for asserting or defending against legal claims or for exercising legal rights.
5. Right to information
If you have asserted your right to rectification, to erasure or to place restrictions on processing, we will notify all recipients of the your personal data of how this data has been rectified, erased or is now subject to restrictions on processing, unless it is impossible to do so or involves disproportionate effort.
6. Right to data portability
You have the right to have a copy of the data that you have provided us with sent to you or a third party in a structured, standardised and machine-readable format. If you demand that the data be sent directly to another data controller, this will only be done if it is technically feasible.
7. Right to object
If your personal data is being processed on the basis of legitimate interests in accordance with Art. 6, para. 1, letter f of the GDPR, you have the right to object to processing at any time in accordance with Art. 21 of the GDPR.
8. Right to withdraw consent
You have the right to withdraw your consent for the collection of data at any time with future effect. The data collected until the withdrawal takes legal effect remains unaffected by this. We hope that you understand that it may take some time to process your withdrawal for technical reasons and that you may continue to receive messages from us during this time.
9. Right to submit a complaint to a regulatory authority
If the processing of your personal data violates data protection legislation or if your data protection rights have been violated in any other way, you may submit a complaint to the regulatory authority.
The quickest, easiest and most convenient way to exercise your rectification and erasure rights is to log into your customer account and edit or delete the data stored therein directly. Please note that once your data is erased, you will no longer have access to the services of our product partners through our website. This may also include re-downloading services.
Therefore, please backup your data before asserting your right to erasure. Data that we are required to store in accordance with statutory obligations, articles of association or contractual retention requirements will be restricted instead of being erased in order to prevent its usage for other purposes.
Links to the websites of other companies
Our website contains links to the websites of other companies. We are not responsible for the data security precautions of other websites accessible via these links. Please enquire through these external websites about their respective privacy policies.
Version: July 2018, Version 2.0