Advice for private customers: +49 2452 962-450

Advice for business customers: +49 2452 962-400

Mon – Fri: 8:00 – 17:00 (CET)

  1. Contact
  2. Overview
  3. The company
  4. Legal notice
  5. Data privacy policy

Data privacy policy

Your privacy is important to us

1. Data privacy policy according to the GDPR

We at Trotec GmbH take the protection of your personal data very seriously and strictly adhere to the stipulations of data protection laws. This website only collects personal data to the extent that is technically necessary. Under no circumstances will the collected data be sold or passed on to third parties for any other reason.

The following statement provides an overview of how we guarantee this protection, as well as what kind of data is collected and for what purpose.

2. Name and address of the controller

Within the meaning of the General Data Protection Regulation and other national data protection laws of Member States as well as other data protection provisions, the controller is:

TROTEC® GmbH

Grebbener Straße 7
52525 Heinsberg
Deutschland

Tel.: +49 2452 962 0
info@trotec.de
www.trotec.de

Responsible business manager: Joachim Ludwig

3. Name and address of the data protection officer

The data protection officer of TROTEC GmbH is provided by

exkulpa gmbh

Waldfeuchter Straße 266
52525 Heinsberg

Phone: +49 2452 993311
E-mail: dsm@trotec.com
www.exkulpa.de

4. General information on data processing

4.1 Scope of the processing of personal data

As a principle, we only process our users’ personal data to the degree that is necessary in order to provide a functional website as well as our contents and services. The processing of our users’ personal data regularly takes place only after the consent of the user. An exception applies in cases where obtaining prior consent is not possible for factual reasons and the data processing is permitted by legal regulations.

4.2 Legal basis for processing personal data

Insofar as we obtain the data subject’s consent for processing operations involving personal data, Article 6 (1) point (a) of the EU General Data Protection Regulation (GDPR) serves as the legal basis.

When processing personal data necessary for fulfilling a contract to which the data subject is a party, Art. 6 (1) point (b) GDPR serves as the legal basis. This also applies to processing necessary for the fulfilment of pre-contractual measures.

With regards to the processing of personal data necessary for the fulfilment of a legal obligation to which our company is subject, Art. 6 (1) point (c) GDPR serves as the legal basis.

In the case that vital interests of the data subject or of another natural person make it necessary to process personal data, Art. 6 (1) point (d) GDPR serves as the legal basis.

If processing is necessary to protect a legitimate interest of our company or of a third party and the interests, fundamental rights and freedoms of the data subject do not outweigh the above-mentioned interest, Art. 6 (1) point (f) GDPR serves as the legal basis for the processing.

4.3 Data deletion and storage period

The personal data of the data subject shall be deleted or locked as soon as the purpose for the storage ceases to apply. Storage may additionally take place if this has been provided for by the European or national legislator in Union regulations, laws or other provisions to which the controller is subject. The data will also be locked or deleted if a storage period regulated by the aforementioned standards expires, unless the continued storage of the data is required for the conclusion or fulfilment of a contract.

5. Website preparation and log file creation

5.1 Description and scope of data processing

Each time our website is accessed, our system automatically collects data and information from the computer system of the computer used for access.

The following data is collected:

  • Information regarding the browser type and version used
  • Operating system
  • Internet service provider
  • IP address
  • Date and time
  • Websites from which the system arrives to our website
  • Websites accessed by the system via our website

The data is also stored in our system’s log files. This data is not stored together with other personal data of the user.

5.2 Legal basis for data processing

The legal basis for the temporary storage of the data and the log files is Art. 6 (1) point (f) GDPR.

5.3 Purposes of the data processing

The temporary storage of IP addresses by the system is necessary to deliver the website to the user's computer. The user's IP address must remain stored for the duration of the session.

The storage in log files is done to ensure the website functionality. In addition, we use the data for website optimisation and the security of our information technology systems. There is no evaluation of the data for marketing purposes in this context.

These purposes are also our legitimate interest in data processing according to Art. 6 (1) point (f) GDPR.

5.4 Storage period

The data is deleted as soon as it is no longer required for the purposes for which it was collected. Regarding data collection for the provision of the website, this is the case when the respective session has ended.

Regarding the storage of data in log files, this is the case after seven days at the latest. Storage beyond this period is possible. In this case, users’ IP addresses are deleted or disconnected so that assigning the calling client is no longer possible.

5.5 Option of objection and removal

The collection of data for website provision and the storage of data in log files is absolutely necessary for the operation of the website. As a result, there is no option for the user to object.

6. Use of cookies

6.1 Description and scope of data processing

Our website uses cookies. Cookies are text files stored in the internet browser or by the internet browser on a user's computer system. When a user accesses a website, a cookie may be stored on the user's operating system. This cookie contains a string of characters enabling the browser to be uniquely identified when the website is accessed again.

We use cookies to make our website more user-friendly. Some elements of our website require that the accessing browser be identified even after switching pages.

The following data is stored and transmitted in the cookies:

  • Protection against cross-site request forgery attacks
  • Cookie Consent for monitoring the setting of cookies

We also use cookies on our website that allow analysis of the user's behaviour while surfing. The following data can be transmitted by these:

Necessary cookies

CookiePurposeProcess

Google Tag Manager

Tag management

14 days

PayPal

Function, payment

The data will be deleted as soon as it is no longer needed for the processing purposes.

Payone

Payment

The data will be deleted as soon as it is no longer needed for the processing purposes.

Usercentrics Consent Management Platform

Compliance with legal requirements, consent storage

The consent data (consent and retraction of consent) is stored for three years. The data will then be deleted immediately.

AmazonPay

Payment

The data will be deleted as soon as it is no longer needed for the processing purposes.

Iyzipay

Payment

The data will be deleted as soon as it is no longer needed for the processing purposes.

Loqate

Address validation

The data will be deleted as soon as it is no longer needed for the processing purposes.

OpenStreetMap

Function

The data will be deleted as soon as it is no longer needed for the processing purposes.

Mondu

Payment

The data will be deleted as soon as it is no longer needed for the processing

Apple Pay

Payment

The data will be deleted as soon as it is no longer needed for the processing

trboOptimisationThe data will be deleted as soon as it is no longer needed for the processing

Functional cookies

CookiePurposeProcess

Facebook social plug-ins

Integration of Facebook functions, advertising, optimisation, personalisation

The data will be deleted as soon as it is no longer needed for the processing purposes.

YouTube Video

Video player

The data will be deleted as soon as it is no longer needed for the processing purposes.

reCAPTCHA

Checking whether information is entered by a human or by an automated program.

The data will be deleted as soon as it is no longer needed for processing.

rapidmail

Analysis, newsletter provision

The data will be deleted as soon as it is no longer needed for the processing purposes.

Trusted Shops Trustbadge

Recommendations, analysis

Log files are deleted no later than 90 days after creation.

Hotjar

Analysis, feedback

The data will be deleted as soon as it is no longer needed for the processing

ausgezeichnet.org

Recommendations

14 days

Marketing

CookiePurposeProcess

AWIN

Affiliate marketing

Data will be deleted as soon as it is no longer needed for processing.

Billiger.de

Analysis, optimisation, advertising

The data will be deleted as soon as it is no longer needed for the processing purposes.

Bing Conversion

Analyse, conversion tracking, remarketing, universal event tracking

The data will be deleted as soon as it is no longer needed for the processing purposes.

Criteo OneTag

Accepting tracking, personalisation, optimisation, marketing, advertising

The data will be deleted as soon as it is no longer needed for the processing purposes.

Econda

Analysis, marketing, optimisation

The data will be deleted as soon as it is no longer needed for the processing purposes.

Facebook Pixel

Analysis, marketing, retargeting, tracking, advertising

The data is deleted after 720 days at the latest.

Feed Dynamix

Website security, functionality, optimisation

The data will be deleted as soon as it is no longer needed for the processing purposes.

Google AdWords Conversion

Advertising, analysis, conversion tracking

The data will be deleted as soon as it is no longer needed for the processing purposes.

Google Ads Conversion Tracking

Advertising, conversion tracking, analysis

The data will be deleted as soon as it is no longer needed for the processing purposes.

Google Ads Remarketing

Remarketing

The data will be deleted as soon as it is no longer needed for the processing purposes.

Google Analytics

Marketing, analysis

The retention period depends on the type of data stored. Each customer can establish how long Google Analytics retains data before it is automatically deleted.

Indeed

Analysis, advertising

The data will be deleted as soon as it is no longer needed for the processing purposes.

Instagram Content

Retargeting, social media

The data will be deleted as soon as it is no longer needed for the processing purposes.

Outbrain

Advertising, conversion tracking

Data will be deleted as soon as it is no longer needed for processing.

Pinterest

Advertising, analysis, marketing, retargeting

The data will be deleted as soon as it is no longer needed for the processing purposes.

Plista

Advertising

The data will be deleted as soon as it is no longer needed for processing.

Ve interactive

Conversion optimisation, digital advertising, remarketing

The data is stored for up to 13 months.

affilinet (Webmasterplan)

Affiliate marketing

The data will be deleted as soon as it is no longer needed for processing.

econda Analytics

Optimisation, analysis

The data will be deleted as soon as it is no longer needed for the processing purposes.

intelliAd

Web analysis, optimisation

Cookies can be deleted by the user. Raw data on the tracking server is automatically deleted after 185 days/hours. Depending on the contractual relationship, anonymous data regarding user journeys is deleted after the end of the service.

SovendusAdvertising, conversion trackingData will be deleted as soon as it is no longer needed for processing.
RecoBounceRemarketingThe data will be deleted as soon as it is no longer needed for the processing purposes.

When accessing our website, the user is informed about the use of cookies for analysis purposes and is asked for their consent for the processing of personal data used in this context. Reference to this data protection declaration is also made in this context.

6.2 Legal basis for data processing

The legal basis for processing personal data using technically necessary cookies is Art. 6 (1) point (f) GDPR.

The legal basis for processing personal data using cookies for analysis purposes is Art. 6 (1) point (a) GDPR if the user has consented to this.

6.3 Purposes of the data processing

The purpose of technically necessary cookies is to simplify the use of websites for users. Some of our website functions cannot be offered without the use of cookies. For these, it is necessary that the browser be recognised even after switching pages. The user data collected by technically necessary cookies is not used to create user profiles.

The use of analysis cookies is for the purpose of improving the quality of our website and its content. With the analysis cookies, we learn how the website is used and so can constantly optimise what we offer.

These purposes are also our legitimate interest in processing personal data according to Art. 6 (1) point (f) GDPR.

6.4 Storage period, option of objection and removal

Cookies are stored on the user's computer and transferred to our site by it. As a user, you therefore also have full control over the use of cookies. By changing your internet browser settings, you can deactivate or restrict the transfer of cookies. Cookies that have already been stored can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all the website functions to their full extent.

7. Advertising and marketing services

7.1 Description and scope of data processing

We use the following advertising and marketing services on our website:

ToolDescription

Google Tag Manager

This is a tag management system. It allows the user to update measurement codes and associated code fragments, collectively known as tags, on the user website or mobile app.

Collected data:

This list contains all of the (personal) data collected by or through the use of this service.

  • Aggregated data on tag triggering

Google Maps

This is a web mapping service.

Collected data:

This list contains all of the (personal) data collected by or through the use of this service.

  • Date and time of the visit

  • Location information

  • IP address

  • URL

  • Use data

Google reCAPTCHA

This is a service that checks whether information entered on a site is input by a human or by an automated program.

Collected data:

This list contains all of the (personal) data collected by or through the use of this service.

  • Browser language

  • Browser plug-ins

  • Click path

  • Date and time of the visit

  • IP address

  • User behaviour

  • Time spent on a site

  • User input

Google Fonts

This is a collection of fonts for commercial and private use.

Collected data:

This list contains all of the (personal) data collected by or through the use of this service.

  • IP addresses

  • CSS request

  • Accumulated use data

  • Font file requirements

  • Referrer URL

Youtube

This is a video player service

Social media sharing links

ToolDescription

Twitter

This is a plug-in from Twitter.

Collected data:

This list contains all of the (personal) data collected by or through the use of this service.

  • Browser type

  • Date and time of the Tweet

  • Internet address of the Tweet button

  • IP address

  • Message content of the Tweet

  • Information about the operating system

7.2 Legal basis for data processing

The legal basis for data processing is Art. 6 (1) point (f) GDPR.

7.3 Purposes of the data processing

ToolDescription

Google Tag Manager

Tag management

Google Maps

Showing maps

Google reCAPTCHA

Tracking, bot protection

Google Fonts

Provision of fonts

Youtube

Video player

7.4 Storage period

The data is deleted as soon as it is no longer required for the purposes for which it was collected.

7.5 Option of objection and removal

You can stop participation in this tracking process in several ways:

  1. a) by adjusting the settings of your browser software, in particular, suppressing third-party cookies will prevent you from receiving any third-party ads;
  2. b) by deactivating cookies for conversion tracking by setting your browser to block cookies from the domain "www.googleadservices.com", www.google.de/settings/ads, this setting is deleted when you delete your cookies;
  3. c) by deactivating the interest-based ads from providers that are part of the self-regulation campaign "About Ads" via the link www.aboutads.info/choices, this setting is deleted when you delete your cookies;
  4. d) by permanently deactivating it in your Firefox, Internet Explorer or Google Chrome browser using the link www.google.com/settings/ads/plugin. We would like to advise you that in this case all functions of this website may not be available to their full extent.

8. Social plug-ins

8.1 Description and scope of data processing

Our websites use “social plug-ins” from social networks, in particular from Twitter, Facebook and Pinterest.

When you visit our websites, no data is automatically sent to social networks such as Twitter, Facebook and Pinterest. Only when you actively click on the respective button does your internet browser establish a connection to the respective social network’s servers, i.e. by clicking on the respective button, you consent to your internet browser establishing a connection to the respective social network’s servers and transmitting usage data to the respective social network operator.

8.2 Legal basis for data processing

Legal basis for processing data after registration for the newsletter by the user is Art. 6 (1) point (f) GDPR if the user has given consent.

8.3 Purposes of the data processing

For the data processing purposes, please refer to the privacy policies of Twitter, Facebook, Pinterest and Youtube and Rapidmail.

Facebook data privacy policy

Twitter
Twitter, Inc.
1355 Market Street, Suite 900
San Francisco
CA 94103
USA

Twitter data privacy guideline

Pinterest
Pinterest Europe Ltd.
Palmerston House, 2nd Floor
Fenian Street
Dublin 2, Ireland

Pinterest data privacy policy

Youtube
YouTube LLC
901 Cherry Avenue
San Bruno
CA 94066
USA

The Google data privacy policy applies here

rapidmail
rapidmail GmbH
Augustinerplatz 2
79098 Freiburg i.Br.
Germany

rapidmail data privacy policy

Emarsys
Emarsys eMarketing Systems GmbH
Lassallestraße 7b
1020 Vienna
Austria

Privacy policy of Emarsys

8.4 Storage period

For the data processing storage period, please refer to the privacy policies of Twitter, Facebook and Pinterest.

8.5 Option of objection and removal

If you do not want Twitter, Facebook and Pinterest to collect your data via our website, you must log out of Twitter, Facebook and Pinterest before visiting our website.

9. Newsletter and newsletter tracking

9.1 Description and scope of data processing

On our website you have the option of subscribing to a free newsletter. When registering for the newsletter, the data from the input screen is transferred to us.

  • Name

  • IP address of the accessing computer

  • E-mail address

  • Date and time of registration

  • Date and time of the opening the e-mail

For processing the data, your consent is obtained during the registration process and reference is made to this data privacy policy.

No data is passed on to third parties in connection with processing data for sending newsletters. The data will only be used for sending the newsletter.

9.2 Legal basis for data processing

Legal basis for processing data after registration for the newsletter by the user is Art. 6 (1) point (a) GDPR if the user has given consent.

9.3 Purposes of the data processing

The user's e-mail address is collected in order to deliver the newsletter.

Other personal data is collected as part of the registration process and serves to prevent misuse of the services or the e-mail address.

9.4 Storage period

The data is deleted as soon as it is no longer required for the purposes for which it was collected. The user's e-mail address is stored for as long as the subscription to the newsletter is active.

The other personal data collected during registration is usually deleted after a period of seven days.

9.5 Option of objection and removal

The newsletter subscription can be cancelled by the user involved at any time. There is a corresponding link for this in every newsletter.

This also enables consent to the storage of personal data collected during registration to be revoked.

10. Blog with commenting function

10.1 Description and scope of data processing

On our website there is the option of using the blog with comment function. When using this function, the data from the input screen is transferred to us.

  • Name

  • E-mail address

  • IP address

  • Comment

For processing the data, your consent is obtained during the commenting process and reference is made to this data privacy policy.

10.2 Legal basis for data processing

Legal basis for processing data for use of the blog comment function by the user is Art. 6 (1) point (a) GDPR if the user has given consent.

10.3 Purposes of the data processing

The personal data named in 10.1 collected as part of the commenting process serves to prevent misuse of the services or the e-mail address.

10.4 Storage period

The data is deleted as soon as it is no longer required for the purposes for which it was collected. The user's e-mail address is stored for as long as the subscription to the newsletter is active.

10.5 Option of objection and removal

You can prevent the storage and transfer of the personal data named in 10.1 by not using the comment function.

11. Contact form

11.1 Description and scope of data processing

A contact form is available on our website which can be used for electronic contact. If a user takes advantage of this, the data entered in the input screen will be transferred to us and stored. This data is:

  • Title

  • First name

  • Name

  • E-mail

  • Address (street, house number, postcode, city, country)

  • Customer number

  • Order number

  • Telephone number

  • Fax number

  • IP address

The following data is also stored at the time the message is sent:

  • User’s IP address

  • Date and time of registration

For processing the data, your consent is obtained during the sending process and reference is made to this data privacy policy.

Alternatively, it is possible to contact us via the e-mail address provided. In this instance, the user's personal data sent with the e-mail will be stored.

In this context, the data will not be passed on to third parties. The data will only be used for processing the conversation.

11.2 Legal basis for data processing

Legal basis for processing data is Art. 6 (1) point (a) GDPR if the user has given consent.

The legal basis for processing data transferred in the course of sending an e-mail is Art. 6 (1) point (f) GDPR. If the e-mail contact is made with the purpose of concluding a contract, the additional legal basis for the processing is Art. 6 (1) point (b) GDPR.

11.3 Purposes of the data processing

Processing the personal data from the input screen is solely to process the contact. For contact made via e-mail, this also constitutes the necessary legitimate interest in processing the data.

The other personal data processed during the sending process serves to prevent misuse of the contact form and to ensure the security of our information technology systems.

11.4 Storage period

The data is deleted as soon as it is no longer required for the purposes for which it was collected. For the personal data from the contact form input screen and that sent via e-mail, this becomes the case when the relevant conversation with the user has ended. The conversation is ended when the circumstances indicate that the matter in question has been conclusively clarified.

The personal data additionally collected during the sending process is deleted after a period of seven days at the latest.

11.5 Option of objection and removal

The user has the option of revoking consent to the processing of personal data at any time. If the user contacts us via e-mail, they can object to the storage of their personal data at any time. In these cases, the conversation cannot be continued.

All personal data stored over the course of contacting us will be deleted in this case.

11.6 CRM Zendesk

Type and scope of processing

We use the CRM system Zendesk to process user enquiries. The provider is Zendesk, Inc, 1019 Market Street in San Francisco, CA 94103 USA.
For this purpose, necessary data such as surname, first name, e-mail address are collected via our website in order to be able to process your enquiries. If you contact us by email or via a form, we will only use the personal data you provide to process your specific enquiry. We also document customer enquiries by telephone in Zendesk.
Further information can be found in Zendesk's privacy policy: https://www.zendesk.de/company/customers-partners/privacy-policy/.

Purpose and legal basis

We use Zendesk on the basis of our legitimate interest in the fast and efficient processing of enquiries in accordance with Art. 6 para. 1 lit. f GDPR. The basis for data transfer to third countries, in particular the USA, are Binding Corporate Rules (BCR). These are binding internal company regulations that legitimise the internal transfer of data to third countries outside the EU and the EEA. Details can be found here: https://www.zendesk.de/blog/update-privacy-shield-invalidation-european-court-justice/.

Storage period

We store the messages until you ask us to delete them or the purpose for data storage no longer applies (e.g. after your enquiry has been processed). Mandatory statutory provisions - in particular retention periods - remain unaffected.

Order processing

In order to ensure that personal data is processed in accordance with our specifications and in compliance with the GDPR, we have concluded an order processing contract with the provider.

11.7 Zenloop

We use the services and functions of zenloop on this website, which are offered by SaaS.group zenloop GmbH, Attilastraße 18, 12529 Schönefeld, Germany.

Type and scope of data processing

We use zenloop, a business-to-business software-as-a-service platform, for customer surveys and product evaluations. We pass on your e-mail address to the provider so that they can send you an invitation to the survey. When you use the feedback tool, zenloop collects data about your location, device and browser, as well as the website you came from. zenloop also uses cookies and similar technologies to collect data about users in general. In addition, zenloop stores your survey responses.

Legal basis

When using zenloop, we rely on Art. 6 para. 1 lit. f GDPR as the legal basis for the collection and storage of your personal data, as we have a legitimate interest in efficiently answering customer enquiries and surveying satisfaction with our products. If you have previously given your consent to data processing, your data will be processed solely on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG; consent can be revoked at any time.

Further information on data processing can be found in zenloop's privacy policy under https://www.zenloop.com/en/legal/privacy.

Order processing

We have concluded an order processing contract (AVV) with zenloop for data processing. The contract guarantees that zenloop only processes the data collected by the analysis in accordance with our instructions and complies with the provisions of the General Data Protection Regulation (GDPR).

12. Web analysis using Google Analytics

12.1 Scope of the processing of personal data

This website uses Google Analytics, a web analytics service provided by Google Inc. ("Google"). Google Analytics uses "cookies", i.e. text files stored on your computer, to help the website analyse how users use the site. The information generated by the cookie regarding your use of this website is usually transmitted to a Google server in the USA and stored there. However, if IP anonymisation is activated on this website, your IP address will be shortened beforehand by Google within Member States of the European Union or in other states party to the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of this website operator, Google will use this information to evaluate your use of the website, compile reports on website activity and provide other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be combined with other Google data. You may refuse the use of cookies by making the appropriate settings on your browser, although please note that if you do this you may not be able to use the full functionality of this website. You can also prevent the data collection generated by the cookie and related to your website use (including your IP address) by Google and the processing of this data by Google by downloading and installing the browser plug-in available at the following link (tools.google.com/dlpage/gaoptout).

12.2 Legal basis for processing personal data

The legal basis for processing users' personal data is Art. 6 (1) point (a) GDPR.

12.3 Purposes of the data processing

Processing users' personal data enables us to analyse our users’ surfing behaviour. By evaluating the data obtained, we are able to compile information on the use of individual website components. This helps us to constantly improve our website and its user-friendliness. These purposes are also our legitimate interest in processing data according to Art. 6 (1) point (f) GDPR. Anonymising the IP address takes the users' interest sufficiently into account in the protection of their personal data.

12.4 Storage period

The data will be deleted as soon as it is no longer needed for our recording purposes.

For us, this is the case after 30 days.

12.5 Option of objection and removal

After the user gives explicit consent (consent banner), cookies are stored on the user's computer and transferred to our site by it. As a user, you therefore also have full control over the use of cookies. By changing your internet browser settings, you can deactivate or restrict the transfer of cookies. Cookies that have already been stored can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all the website functions to their full extent.

We offer our users the option of opting out of analysis on our website. You must follow the corresponding link in order to do this. This sets another cookie in your system which signals to our system not to save the user's data. If the user deletes the corresponding cookie from their own system, they must reset the opt-out cookie.

13. Rights of the persons involved

If your personal data is processed, you are a data subject within the meaning of the GDPR and have the following rights as concerns the controller:

13.1 Right of access

You may request confirmation from the controller as to whether we are processing personal data concerning you.

If such processing is occurring, you can request information from the controller about the following:

  • the purposes for which the personal data is processed;

  • the categories of personal data which is processed;

  • the recipients or categories of recipients to whom the personal data concerning you has been or will be disclosed;

  • the planned storage period of the personal data concerning you or, if this specific information is not available, criteria for determining the storage period;

  • the existence of a right to rectification or right to erasure of personal data concerning you, a right to restriction of processing by the controller or a right to object to such processing;

  • the existence of a right of appeal to a supervisory authority;

  • All available information on the data origin if the personal data is not collected from the data subject;

  • the existence of automated decision-making, including profiling pursuant to Art. 22 (1) and (4) GDPR and, at least in these cases, meaningful information regarding the involved logic and the scope and intended effects of such processing for the data subject.

You have the right to request information regarding whether personal data concerning you is transferred to a third country or to an international organisation. In this context, you may request information regarding the appropriate guarantees pursuant to Art. 46 GDPR in connection with the transfer. For this, please contact us via the e-mail address provided or use our Contact form.

13.2 Right to rectification

You have a right to rectification and/or completion as concerns the controller if the processed personal data concerning you is inaccurate or incomplete. The controller shall make the correction without delay.

13.3 Right to restriction of processing

You may request the restriction of processing of personal data concerning you under the following conditions:

  • if you contest the accuracy of the personal data concerning you for a period which enables the controller to verify the accuracy of the personal data;

  • the processing is unlawful and you refuse the erasure of the personal data and instead request the restriction of use of the personal data;

  • the controller no longer requires the personal data for the purposes of processing, but you require it for the assertion, exercise or defence of legal claims, or

  • if you have objected to the processing pursuant to Art. 21 (1) GDPR and it is yet to be determined whether the legitimate grounds of the controller outweigh your grounds.

If the processing of personal data concerning you has been restricted, that data may only be processed, with the exception of storage, with your consent or for the enforcement, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of substantial public interest of the Union or of a Member State.

If the restriction of processing has been restricted by the above conditions, you will be informed by the controller before the restriction is lifted.

13.4 Right to erasure

13.4.1 Obligation of erasure

You may request that the controller erases the personal data concerning you without delay and the controller is obliged to erase this data without delay if one of the following reasons applies:

  • The personal data concerning you is no longer required for the purposes for which it was collected or otherwise processed.

  • You revoke your consent on which the processing was based pursuant to Art. 6 (1) point a or Art. 9 (2) point (a) GDPR and there is no other legal basis for processing.

  • You object to processing pursuant to Art. 21 (1) GDPR and there are no overriding legitimate grounds for processing, or you object to processing pursuant to Art. 21 (2) GDPR.

  • The personal data concerning you has been processed unlawfully.

  • The erasure of the personal data concerning you is necessary for compliance with a legal obligation under Union or Member State law to which the controller is subject.

  • The personal data concerning you was collected in relation to information society services offered pursuant to Art. 8 (1) GDPR.

13.4.2 Information to third parties

If the controller has made the personal data concerning you public and is obliged to erase it pursuant to Art. 17 (1) GDPR, it shall take suitable steps including those of a technical natures, with regards to the available technology and the cost of implementation, to inform data processing controllers which process the personal data that you, as the data subject, have requested that they erase all links to, or copies or replications of, said personal data.

13.4.3 Exceptions

The right to erasure does not exist insofar as the processing is necessary

  • for the exercise of the right to freedom of expression and information;

  • for compliance with a legal obligation requiring processing under Union or Member State law to which the controller is subject or for the completion of a task carried out in the public interest or in the scope of official authority vested in the controller;

  • for reasons of public interest in the area of public health pursuant to Art. 9 (2) point h and i and Art. 9 (3) GDPR;

  • for purposes of archiving in the public interest, purposes of scientific or historical research or statistical purposes pursuant to Art. 89 (1) GDPR, where the right names in Section a) is likely to render impossible or seriously hinder achieving the purposes of such processing, or

  • for the enforcement, exercise or defence of legal claims.

13.5 Right to be informed

If you have asserted your right to rectification, erasure or restriction of processing by the controller, the controller is required to communicate this data rectification or erasure or restriction of processing to all recipients of the personal data concerning you, unless this proves to be impossible or involves a disproportionate effort.

You have the right to be informed of these recipients by the controller.

13.6 Right to data transferability

You have the right to receive the personal data concerning you that you have provided to the controller, in a structured, commonly used and machine-readable format. You also have the right to transfer this data to another controller without obstruction from the controller to whom the personal data has been provided, provided that

  • the processing is based on consent pursuant to Art. 6 (1) point (a) GDPR or Art. 9 (2) point (a) GDPR or on a contract pursuant to Art. 6 (1) point (b) GDPR and

  • the processing occurs with the help of automated procedures.

In asserting this right, you also have the right that the personal data concerning you be transferred directly from one controller to another controller, as far as this is technically feasible. The freedoms and rights of other persons must not be affected by this.

The right to data transferability shall not apply to the processing of personal data necessary for carrying out a task in the public interest or for exercising official authority vested in the controller.

13.7 Right to object

You have the right to object at any time, on grounds relating to your specific situation, to the processing of personal data concerning you which is carried out on the basis of Art. 6 (1) point (e) or (f) GDPR; this also applies to profiling based on these terms.

The controller shall no longer process the personal data concerning you unless it can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or for the enforcement, exercise or defence of legal claims.

If the personal data concerning you is processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing; this also applies to profiling, insofar as it is related to such direct marketing.

If you object to processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes.

You have the option, in connection with the use of information society services – notwithstanding Directive 2002/58/EC – to assert your right to object via automated procedures using technical specifications.

13.8 Right to revoke the data privacy consent declaration

You have the right to revoke your data privacy declaration of consent at any time. Revoking consent shall not affect the legality of the processing carried out on the basis of the consent prior to revocation.

13.9 Automated individual decision-making, including profiling

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. This shall not apply if the decision

  • is necessary for entering into, or performance of, a contract between you and the controller,

  • is authorised by Union or Member State law to which the controller is subject and which lays down suitable measures to safeguard your rights and freedoms and your legitimate interests, or

  • Is based on your explicit consent.

These decisions must not be based on special categories of personal data referred to in Art. 9 (1) GDPR, unless Art. 9 (2) point (a) or (g) GDPR applies and suitable measures have been taken to safeguard your rights and freedoms and legitimate interests.

Regarding the cases referred to in (1) and (3), the controller shall take suitable steps to safeguard yours rights and freedoms and legitimate interests, including at least the right of intervention of a person on the part of the controller, to express their point of view and to contest the decision.

13.10 Right to complain to a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to register a complaint with a supervisory authority, in particular in your Member State of residence, place of work or the place of the alleged infringement, if you believe that the processing of personal data concerning you is in breach of the GDPR.

The supervisory authority to which the complaint has been lodged shall inform the complainant of the status and result of the complaint, including the possibility of a legal remedy under Art. 78 GDPR. The supervisory authority responsible for Trotec GmbH:

Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (State representative for data privacy and freedom of information, North Rhine-Westphalia)
post box 20 04 44
40102 Düsseldorf, Germany

Tel.: 0211/38424-0
Fax: 0211/38424-999
E-mail: poststelle@ldi.nrw.de

Last updated on: 13/04/2022