...always on top of the market
Data Protection Declarationclick here for German version
We, the Atrimex GmbH, respect the privacy of the persons who use our offer and our website. We process data on the basis of data protection regulations at any time with care and sense of responsibility in compliance with the relevant data protection regulations and give below a brief overview how we handling personal information.
Party Responsible as per Article 4 (7) of the EU General Data Protection Regulation (DSGVO) for the processing of personal data is
21465 Wentorf bei Hamburg
E-Mail: datenschutz (at) atrimex.com
Types of processed data- Basic data (e.g., names, addresses).
- Contact details (e.g., e-mail, Phone numbers).
- Content data (e.g. test inputs, photographs, videos).
- User data (e.g., websites visited, interest in content, access times).
- Meta / Communication data (e.g. hardware information, IP addresses).
Categories of affected personInterested parties, customers and visitors of the website www.atrimex.com and users of our offer. (In the following, we refer to the affected persons as "users").
Purpose of processing- Provision of our offer.
- Answering contact requests and communicating with users.
- Order processing
- Safety measures.
- Coverage check / Marketing
Terms used"Personal data" means any information relating to an identified or identifiable natural person (hereinafter the "affected person"); a natural person considered as identifiable, which can be identified directly or indirectly, in particular by means of assignment to an identifier such as a name, to an identification number, to location data, to an online identifier (e.g. Cookie) or to one or more special features, being image of the physical, physiological, genetic, physical, economic, cultural or social identity of this natural person.
"Processing" means any process performed with or without the help of automated procedures, or any such process associated with personal data. The term covers a wide range and comprises practically every handling of data.
"Pseudonymisation" means the processing of personal data in such a way that the personal data can no longer be assigned to a specific affected person without additional information being provided, provided such additional information is kept separate and subject to technical and organizational measures to ensure that the personal data cannot be assigned to an identified or identifiable natural person.
"Profiling" means any kind of automated processing of personal data which involves the use of such personal data to evaluate certain personal aspects relating to a natural person, in particular aspects relating to work performance, economic situation, health, to analyze or predict personal preferences, interests, reliability, behavior, location or change of location of this natural person.
'Party Responsible' means the natural or legal person, public authority, body or other party which, alone or together with others, decides on the purposes and means of processing personal data.
'(Commissioned) Data Processor' means a natural or legal person, public authority, body or party that processes personal data on behalf of the controller.
Relevant legal basesIn accordance with Art. 13 DSGVO, we inform you about the legal basis of our data processing.
As far as the legal basis in the Data Protection Declaration is not mentioned, the following applies: The legal basis for obtaining consent is Article 6 (1) lit. a and Art. 7 DSVGO, the legal basis for the processing for performance of our services and the execution of contractual measures as well as reply to inquiries is Art. 6 (1) lit. b DSGVO, the legal basis for processing in order to fulfill our legal obligations is Art. 6 (1) lit. c DSGVO, and the legal basis for processing in order to safeguard our legitimate interests is Article 6 (1) lit. f DSGVO.
In the event that vital interests of the effected person or another natural person require the processing of personal data, Art. 6 (1) lit. d DSGVO is the legal basis.
Safety measuresWe take appropriate technical measures in accordance with Art. 32 DSGVO, taking into account the state of the art, the implementation costs and the nature, scope, circumstances and purposes of the processing as well as the different likelihood and severity of the risk to the rights and freedoms of natural persons and organizational measures to ensure a level of protection appropriate to the risk.
Collaboration with (Commissioned) Data Processors and third partiesIf, in the context of our processing, we disclose data to other persons and companies ( (Commissioned) Data Processors or third parties), transmit them or otherwise grant access to the data, this is done only on the basis of a legal permission (eg if a data transmission to third parties like payment service providers is required for performance according to Art. 6 (1) (b) DSGVO), your agreement, required by a legal obligation ,or on the basis of our legitimate interests (e.g. the use of agents, webhosts, etc.).
Insofar as we mandate third parties to process data it is on the basis of a so-called "(Commissioned) Processing Contract”, based on Art. 28 DSGVO.
Transfers to third countriesIf we process data in a third country (e g. outside the European Union (EU) or the European Economic Area (EEA)) or in the context of the use of third party services or disclosure resp. transmission of data to third parties, this will only be done if it is to fulfill our (pre) contractual obligations, on the basis of your consent, on the basis of a legal obligation or on the basis of our legitimate interests. Subject to legal or contractual permissions, we process or have the data processed in a third country only in case of the special requirements of Art. 44 et seq. DSGVO. That means the processing is carried out e.g. on the basis of specific guarantees, such as the official recognition of data protection (e.g. for the USA by the “Privacy Shield”) or in compliance with officially recognized special contractual obligations (so-called "standard contractual clauses").
Rights of effected personsYou have the following rights with regard to your personal data:
• Right for information (Article 15 DSGVO).
• Right for correction (Article 16 DSGVO)
• Right for cancellation (Art. 17 DSGVO)
• Right for restriction of processing (Art. 18 DSGVO)
• Right for data transmission (Article 20 DSGVO)
• Right for objection of processing (Article 21 DSGVO)
• Right for a complaint (Art. 77 DSGVO)
Right of RepealYou have the right to repeal your consent according to. Art. 7 (3) DSGVO with effect for the future.
Deletion of dataThe data processed by us are deleted or limited in their processing in accordance with Articles 17 and 18 DSGVO.
Provided not explicitly stated in this Data Protection Declaration, the data stored by us will be deleted as soon as they are no longer necessary for their intended purpose and the deletion does not conflict with any legal record-keeping requirements.
Provided the data is not deleted because it is required for other and legally permitted purposes, its processing will be limited. This applies for example for data that must be kept due to legal commercial or tax reasons.
Business-related processingIn addition, we process
- Contract data (e.g. subject of the contract, duration, customer category).
- Payment data (e.g., bank details, payment history) by our customers, interested parties and business partners for the purpose of providing contractual services, service and customer care, marketing, advertising and market research.
Administration, financial accounting, office organization, contact managementWe process data in the context of administrative tasks and organization of our business, financial accounting and compliance with legal obligations, such as archiving. In doing so, we process the same data that we process in the course of performing our contractual services. The processing principles are Art. 6 (1) lit. c. DSGVO, Art. 6 (1) lit. f. DSGVO. The processing affects customers, interested parties, business partners and website visitors. The purpose and interest in processing lies in administration, financial accounting, office organization, data archiving, thus tasks that serve to maintain our business, perform our duties and provide our services. The deletion of the data, in terms of contractual services and contractual communication, corresponds to the information provided with these processing activities.
We disclose or transmit data to the financial administration, consultants, such as accountants or auditors as well as other billing centers and payment service providers.
Furthermore, based on our business interests, we store information about suppliers, promoters and other business partners, e.g. for later contact. We generally store this mainly company-related data permanently.
ContactingWhen contacting us (for example, by contact form, e-mail, telephone or via social media), the details of the user are processed for handling and processing the contact request in accordance with. Art. 6 (1) lit. b) DSGVO. User information can be stored in a Customer Relationship Management System ('CRM System') or comparable request organization.
We delete the requests, if they are no longer required. Furthermore, the legal archiving obligations apply.
Hosting and e-mailingThe hosting services we use are designed to provide the following services: infrastructure and platform services, computing capacity, storage and database services, e-mailing, security, and technical maintenance services we use to operate.
Collection of access data and log filesBased on our legitimate interest in an efficient and secure provision of our offer ((Commissioned) Data Processor Contract), we or our hosting provider collect data per Art 6 (1) lit. F. DSGVO and Art 28 DSGVO, about every access to the server on which this service is located (so-called server log files). The access data includes the name of the retrieved web page, file, date and time of retrieval, amount of data transferred, notification of successful retrieval, browser type and version, the user's operating system, referrer URL (the previously visited page), IP address and the requesting provider.
Logfile information is stored for security purposes (for example, to investigate abusive or fraudulent activities) for a maximum of 7 days and is then deleted. Data whose further retention is required for evidential purposes are excluded from the deletion until the final clarification of the incident.