PASCHAL PRIVACY POLICY

Personal data as a matter of confidentiality

We appreciate your interest in our company. The protection of your privacy is paramount to us. We therefore wish to inform you in the following sections about the collection and handling of your personal data.

Personal data

Data are always considered personal if they can be used to identify a person, either directly and explicitly, such as information on first name or surname, or indirectly due to the total amount of information or, e.g., by transmitting the IP address. It is not always legally clear or easy to determine when data include a personal reference. If in doubt, it must be assumed that the data are personal.

Controller:
PASCHAL-Werk G. Maier GmbH, Kreuzbühlstr. 5, 77790 Steinach, Germany
Management: Dipl.-Bauing. (FH) Peter Fischer, Barbara R. Vetter
Tel.: +49 7832 / 71-0
Fax: +49 7832 / 71 -209
E-mail: service@paschal.com

Data protection officer for the company:
Marianne Lehmann, Lawyer
Anwaltskanzlei Ribstein & Ribstein
Reserveweg 4
76646 Bruchsal, Germany

Tel.: +49 7251 / 71 41 0
Fax: +49 7251 / 71 41 41
E-mail: dsb@paschal.de

Processing of data

When you visit our website, we will record the data that your browser transmits to us. During this process, it may not always be possible to exclude a personal reference. The IP address must be recorded and stored (in a truncated form) so that the pages can be displayed in your browser. Usually, an IP address is dynamically assigned by your provider at that time. This address usually changes regularly, meaning we are unable to establish a personal reference based on the IP address. However, it would be theoretically possible to establish a personal reference in individual cases with static IP addresses.

The following data are collected:

• IP address of the visiting computer (stored in a truncated form)

• Visiting computer’s operating system and its interface

• Visiting computer’s browser version

• Name of the retrieved file

• Date and time of the retrieval

• Amount of transmitted data

• Website that you visit

• Website from which you visited us (referrer URL)

The purpose of collecting and storing these data in anonymous form is to improve the user-friendliness of this website and to protect our IT systems. These data are not used to personally identify visitors. The legal basis for processing the data when using our website is our legitimate interest in the presentation of our company to the outside world in accordance with point f) of Art. 6 (1) GDPR.

The data are erased once they are no longer required for these purposes. If the IP address is stored, it is erased or anonymised within no later than 30 days. The collection of these data as well as the storage of the data in log files is essential for operating the website. Therefore, the user does not have the right to object.

If personal data (for example name, address or e-mail addresses) are collected on our website, this occurs on a voluntary basis, for example if you send us a contact request or would like to contact us using the video chat function. Information on this can be found under “Contact request” as well as when using “Video contact”. The legal bases for this are point a) of Art. 6 (1) in cases in which you expressly give your consent and point b) of Art. 6 (1) GDPR in the event of initiating or performing a contract.

We would like to point out that data transmission via the internet (e.g. communication by email) may involve security gaps and cannot be completely protected against access by third parties.

To provide our website, we cooperate with various service providers who are bound by our right to issue instructions and whom we have contractually committed to comply with data protection regulations (order data processing). As such, this data processing does not require any specific consent on your behalf.

Cookies are also used when using our website.

Cookies are small files that are stored on your desktop, notebook or mobile device during your visit to a website. This allows us, for example, to identify whether there has already been a connection between the device and the websites, take your preferred language or other settings into account, offer you certain services or identify your interests based on your use. Cookies can also contain personal data.

Personalisation and performance cookies can be managed by enabling or disabling your consent on this website.
​​​​​​​You can manage cookies in general in your browser settings. All browsers usually allow users to enable, disable, block, allow or remove cookies by opening the tools or settings tab which can be found in the browser. If you have any other questions about a certain browser, please contact your browser support. You can manually remove “permanent” cookies (refer to the Use of Google Analytics section below). The lifetime of the cookies used here is stated in the table below.

You will generally be informed about our use of cookies upon accessing our website. You can also configure the use of cookies that are not technically necessary.

We differentiate between the following types of cookies:

Strictly necessary cookies:

These cookies are necessary for the functionality of the website.

These cookies are processed to make using our website easier for you and to provide you with our services as requested. Some functions of our website do not work without the use of these cookies and could therefore not be offered. Our legitimate interest in the processing of cookies is based on the purposes mentioned above. We are permitted to use these cookies without your consent. The legal basis for data processing is Sec. 25 (2) of the Act on the Regulation of Data Protection and Privacy in Telecommunications and Telemedia (TTDSG) in conjunction with point b) and f) of Art. 6 (1) GDPR.

Functional cookies

These cookies enable us to analyse the use of the website in order to measure and improve its performance. The cookies provide information about how a visitor navigates the website, e.g. which pages are accessed, but do not store any information that would allow us to identify the user. The information collected is aggregated and analysed in such a way that it cannot be assigned to a specific person. These cookies are used solely for the purpose of improving the website and user experience.

Further information on the storage duration is available in the table below.

Cookies for marketing purposes/targeting cookies

These cookies are used by advertising companies in order to display interest-based advertising. They can be used to share pages on social networks and to write comments. They are also used to show you interest-based advertising.

The following cookies are used on the website paschal-digital.com:

Strictly necessary cookies

Cookies for marketing purposes/targeting cookies:

Google Analytics 4, a web analytics service offered by Google LLC, is used on this website, provided you have given your consent. The controller for users in the EU/EEA and Switzerland is Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”).

Google Analytics uses cookies that enable your use of our websites to be analysed. The information collected by the cookies about your use of this website is generally transmitted to a Google server in the USA and stored there.

The anonymisation of IP addresses is activated as standard with Google Analytics 4. Due to IP anonymisation, your IP address will be truncated by Google within member states of the European Union or other parties to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. According to Google, the IP address transmitted by your browser as part of Google Analytics is not merged with other Google data.
During your visit to our website, your user behaviour is recorded in the form of “events”. Events include:

• Accessing pages

• First time visiting the website

• Starting the session

• Your “click path”, interaction with the website

• Scrolls (whenever a user scrolls to the end of the page (90%))

• Clicks on external links 

• Internal searches

• Interaction with videos

• File downloads

• Adverts that have been viewed/clicked on

• Language settings

Other recorded information includes:

• Your approximate location (region)

• Your IP address (in truncated form)

• Technical information on your browser and the end devices you use (e.g. language settings, monitor resolution)

• Your internet provider

• The referrer URL (which website/advert you used to reach this website)

The purpose of the processing is the pseudonymous analysis of the use of the website. The reports provided by Google Analytics are used to analyse the performance of our website.

Data recipients are/may be

• Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (as the processor in accordance with Art. 28 GDPR)

• Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA

• Alphabet Inc., 1600 Amphitheatre Parkway Mountain View, CA 94043, USA

If data are processed outside the EU/EEA and there is no level of data protection in place that is equal to the European standard, we have agreed EU standard contractual clauses with the service provider in order to provide an adequate level of data protection. The parent company of Google Ireland, Google LLC, is based in California, USA. The transmission of data to the USA and access to the data stored at Google by US authorities cannot be excluded. Under data protection law, the USA is currently considered a third country. You do not have the same rights there as within the EU/EEA. You may not be entitled to legal remedies against access by authorities.

The storage duration of the cookies we send can be found in the table above.

The legal basis for the processing of data during the use of Google Analytics is your consent in accordance with point a) of Art. 6 (1) Sentence 1 GDPR; Art. 49a GDPR.

You can withdraw your consent at any time with future effect by accessing your cookie settings [https://www.paschal-digital.com/en/cookies] and changing your selection. The withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal.

You can also prevent cookies from being stored beforehand by adjusting the settings in your browser software. If you configure your browser to reject all cookies, this may limit the functionality on this and other websites. You can also prevent the collection of the data generated by the cookies and related to your use of the website (incl. your IP address) by Google as well as the processing of these data by Google by

a. not consenting to the placement of the cookie or
b. downloading and installing the browser add-on HERE to disable Google Analytics.

More information on the terms of use of Google Analytics and data protection at Google can be found at https://marketingplatform.google.com/about/analytics/terms/de/ and at https://policies.google.com/?hl=de.

If you contact us using the contact form, we store the information you provide in order to answer your contact request. This includes your surname, first name, e-mail address and company.

The legal basis for this is point b) of Art. 6 (1) GDPR or point f) of Art. 6 (1) GDPR if the data are not necessary for answering the contact request.

If you give us your consent, we will note this in your request. We record who contacts us, the channel of communication used and, in some cases, the topic. The purpose of processing these data is to monitor success and measure the effectiveness of marketing measures. The legal basis for this is point a) of Art. 6 (1) GDPR. You can withdraw your consent to the storage of your personal data at any time. Details on this can be found under “Right to object”.

We usually store contact requests for a period of 5 years unless circumstances require a different storage duration.

If you have any enquiries about the software products offered by our corporate group, we may forward your data to our IT sister company planitec GmbH, Schwimmbadstr. 2, 77790 Steinach for support and assistance. In the event of enquiries from areas which are managed by our trading partners, we forward your data to our trading partners for the purposes of further processing the enquiry and support.

We integrate the “reCaptcha” function of the provider Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. We use it to protect ourselves and therefore our IT infrastructure from computer-generated spam. To this end, data, such as the IP address, information about the operating system, mouse movements and keystrokes as well as the time spent on the website are forwarded to Google.

The legal basis for this processing of your personal data is our legitimate interest in a functioning IT infrastructure and its security, point f) of Art. 6 (1) GDPR.

You can contact us on our website by video call in order to facilitate the exchange of information about your interests and questions about our products and services.

For this purpose, we use JITSI. During the video call, various data are processed:

User name, display name, e-mail address, profile picture (optional), preferred language as well as meeting metadata (meeting ID, participant IP addresses, location).

In order to display the video and play audio, the data from the microphone on your end device as well as from a video camera on your end device will be processed for the duration of the meeting. You can switch off the camera or mute the microphone at any time using the Jitsi applications.

We do not use the chat function, nor do we record the video calls, which means no data are processed in this regard.

The legal basis for processing the data during video calls is point b) of Art. 6 (1) GDPR provided the meetings are held as part of conducting or potentially initiating contractual relationships. If contractual or pre-contractual relationships do not apply, the legal basis is point f) of Art. 6 (1) GDPR. Our legitimate interest is offering interested parties an easy and straightforward way to contact us.

Personal data that are processed when participating in “video calls” are not passed on to third parties unless they are specifically intended for this purpose.

We receive support from the company Planitec GmbH, Schwimmbadstraße 2, 77709 Steinach as part of providing the video calls service. We have entered into a order data processing contract with Planitec in accordance with Art. 28 GDPR.

The sharing of personal data

In principle, we do not share any personal data with third parties, unless this is carried out with the consent of the data subject, or if it is necessary as a result of a contractual or legal obligation, or if it concerns the commissioning of service providers by us. In this case, the service providers will only receive access to the data to the extent that they require the data to carry out their tasks. The service providers used are contractually obliged not to alter the data and in particular to not use the data for their own purposes and they must comply with the relevant data protection laws.

Erasure of data and storage period

We will process the data for as long as the data are required for the corresponding purpose. The personal data of the data subject will be erased or blocked when the reason for the data’s storage has expired. We adhere to the standard limitation period of 3 years, as per Sec. 195 BGB [German Civil Code], unless the purpose entails a shorter or longer storage period. Data may be stored for longer if this is required by law.

If we receive your data based on your consent, then you have the right to withdraw the consent you have granted to us at any time with future effect (see Rights of the data subject).
If our data processing is based on the weighing of interests (point f) of Art. 6 (1) GDPR), then you as the data subject have the right to object to the processing of your personal data, taking into account the provisions of Article 21 GDPR (see Rights of the data subject).

Rights of the data subject

Every data subject has the following rights:

1. Right of access by the data subject (Art. 15 GDPR)
   The data subject has the right to obtain from us information about the personal data that we have processed. In particular, you have the right to obtain information about the purposes of the processing, the categories of the processed data, the categories of recipients of the data, the envisaged storage period, the existence of the right to correction, erasure, the restriction of processing or to object, the existence of the right to lodge a complaint, the source of your data if they were not collected from us, and the existence of automated decision-making including profiling and any meaningful information about its particular details.

Right to rectification (Art. 16 GDPR)
The data subject has the right to request that inaccurate personal data relating to them be rectified or completed without delay.

Right to erasure (Art. 17 GDPR)

This involves the right to obtain the erasure of personal data unless the processing is necessary in order to exercise the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defence of legal claims.

Right to restriction of processing (Art. 18 GDPR)

The restriction of processing can be obtained where the cases described in Art. 18 GDPR apply.

Right to data portability (Art. 20 GDPR)

The data subject has the right to receive the personal data which you have provided to us in a structured, commonly used and machine-readable format or to have these data transmitted to another controller.

Right to withdraw consent (Art. 7 (3) GDPR)

The data subject has the right to withdraw any consent that has previously been granted to us at any time with future effect. This means that we will no longer be able to continue processing the data that is based on this consent in the future.

You have the right to object, on grounds relating to your particular situation, at any time to the processing of your personal data which is based on point e) or f) of Art. 6 (1) GDPR. Please communicate your issue to the following address:

PASCHAL-Werk G. Maier GmbH
Kreuzbühlstraße 5
77790 Steinach, Germany

E-mail: digitalmarketing@paschal.de
Tel.: +49 7832 / 71-0
Fax: +49 7832 / 71-209 

If you have any complaints, then we would be very happy to discuss your issue with you directly. Please do not hesitate to contact us in this case. You also have the right to lodge a complaint with any (data protection) supervisory authority. The address of the supervisory authority responsible for us is:

The State Commissioner for Data Protection and Freedom of Information in Baden-Württemberg
Lautenschlagerstraße 20

70173 Stuttgart, Germany

Tel.: +49 711 / 615541-0
Fax: +49 711 / 615541-15
E-mail: poststelle@lfdi.bwl.de
Website: baden-wuerttemberg.datenschutz.de

This Privacy Policy is currently valid as of October 2022.
It may be necessary to alter this Privacy Policy due to the further development of our website and our product range, or as a result of altered legal or official guidelines.