Privacy Policy for shop.fev.com
I. Controller for the data processing / Data Protection Officer
Controller is:
FEV Consulting GmbH
Neuenhofstraße 181
52078 Aachen, Germany
Phone: +49 241 5689 0
Contact: Contact us form
If, in addition, individual processing activities are the joint responsibility of other controllers, please refer to the information on the respective processing activity for further information.
If you have any questions regarding the processing of your personal data, this information or the assertion of your data subject rights, please contact our data protection coordinator:
Name: Sabine Drexler
Phone: +49 241 5689-4057
Email: Drexler_s@fev.com
You can reach our data protection officer as follows:
Scheja und Partner Rechtsanwälte mbB
Contact: Herr Jens-Martin Heidemann
Adenauerallee 136, 53113 Bonn
T: +49 228 227226-0
F: +49228 227226-26
Contact: https://www.scheja-partner.de/kontakt/kontakt.html
II. General information on data processing
Scope of processing
As a matter of principle, we collect and use personal data only as far as this is necessary for the provision of a functioning of our website, if you have given your consent or the processing of the data is permitted by a legal regulation.
Legal basis of the processing of personal data
Insofar as we obtain your consent for processing of personal data, Article 6 (1) lit. a of the EU General Data Protection Regulation (GDPR) serves as the legal basis.
When processing personal data that is necessary for the performance of a contract with you, Art. 6 (1) lit. b GDPR serves as the legal basis. This also applies to processing of personal data that is necessary for the implementation of pre-contractual measures.
Insofar as the processing of personal data is necessary for the fulfillment of a legal obligation to which our company is subject, Art. 6 (1) lit. c GDPR serves as the legal basis.
In the event that vital interests of you or another natural person make it necessary to process personal data, Art. 6 (1) lit. d GDPR serves as the legal basis.
If the processing is necessary to protect a legitimate interest of our company or a third party and if your interests, fundamental rights and freedoms do not override the former interest, Art. 6 (1) lit. f GDPR serves as the legal basis for the processing.
Data deletion and storage period
Your personal data shall be deleted or blocked as soon as the purpose of storage ceases to apply. In addition, storage may take place if this has been intended by the European or national legislator in Union regulations, laws or other provisions to which the controller is subject. Data will also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or performance of a contract.
Recipients of the collected data / data transmission
Internal recipients: Only those persons have access to your personal data who need it to achieve the purposes stated in section III.
External recipients: We only disclose your personal data to external recipients if this is necessary for the fulfillment of the purposes mentioned in section III, if another legal permission/obligation exists or if we have your consent for this. External recipients may be:
a) Processors
External service providers that we use to provide services, for example in areas of our technical infrastructure as well as invoicing and service provision with regard to your purchases in our webshop. We carefully select and regularly review these processors to ensure that they also comply with the legal requirements of data protection law. The service providers may only use the data provided by us for the purposes specified by us.
b) Payment services providers
Payment service providers that are used for the processing of payment transactions in case of purchases in our webshop.
c) Public bodies
Authorities and government institutions, such as tax authorities, to which we must transfer personal data for legally compelling reasons.
c) Other bodies
Under certain circumstances, other bodies may also have access to your personal data within the framework of data protection requirements. In this respect, the confidentiality required by law is guaranteed.
Transfer to third countries
Personal data that we process as part of the processes described in this Privacy Policy may also be transferred by us to recipients who process your personal data outside the territory of the European Union. In case that these are countries which do not have a comparable level of data protection according to EU requirements, we ensure the appropriate protection of your personal data with the respective non-EU recipients by means of the suitable guarantees prescribed in the GDPR, e.g., Standard Contractual Clauses (SCCs). You can obtain a copy of the respective safeguards in place from us (see our contact details as data controller above under section I).
III. Data processing when using our website
Provision of the website and creation of log files
Each time our website is accessed, our system automatically collects data and information from the computer system of the accessing computer. The following data is collected:
Information about the browser type and version used
The operating system of the user
The user’s Internet service provider
The IP address of the user
Date and time of access
Websites from which the user’s system accesses our website
Websites that are accessed by the user’s system via our website
The data is also stored in the log files of our system. Not affected by this are your IP addresses or other data that allows the data to be assigned to you. Storage of this data together with other personal data of you does not take place. The legal basis for the temporary storage of the data is Art. 6 (1) lit. f GDPR.
The temporary storage of the IP address by the system is necessary to enable delivery of the website to your computer. For this purpose, your IP address must remain stored for the duration of the session. These purposes are also our legitimate interest in data processing according to Art. 6 (1) lit. f GDPR.
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of the collection of personal data for the provision of the website, this is the case when the respective session has ended.
Use of cookies
Our website uses cookies. Cookies are text files that are stored in the Internet browser or by the Internet browser on your computer system. When you access a website as a user, a cookie may be stored on your operating system. This cookie contains a string of characters that enables the browser to be uniquely identified when the website is called up again.
We use cookies to make our website more user-friendly.
Cookies are stored on your computer and transmitted from it to our site. Therefore, you as a user also have full control over the use of cookies. By changing the settings in your Internet browser, you can disable or restrict the transmission of cookies. Cookies that have already been stored can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all functions of the website in full.
On the one hand, we use so-called „session cookies”. These are automatically deleted after the end of your browser session.
In addition, we also use longer term cookies, which are primarily used to provide you, as a visitor to our website, with permanently recurring settings. The personal data processed when the cookies are used are collect directly from you when you access our website and register/sign to our webshop.
The following cookies are used:
PHPSESSID
With the use of this cookie, the following personal data is stored and transmitted, for the purpose of storing SESSION-variables on the webserver, which is necessary for the website to function properly: cookie ID, … Recipients of the personal data processed for this purpose are: … The personal data are transferred to the following third countries: … The cookie is deleted immediately once the browser session has ended.
PrestaShop
With the use of this cookie, the following personal data is stored and transmitted, for the purpose of allowing essential functions of the webshop to work properly, particularly the virtual shopping cart and the account registration and payment processes for your purchases: … Recipients of the personal data processed for this purpose are: cookie ID, log-in-information, namely …, … The personal data are transferred to the following third countries: … The cookie expires and is deleted after three weeks.
Some functions of our website, especially the webshop, cannot be offered without the use of these cookies because to properly work, those functions require that the browser is recognized even after a page change. The legal basis for the processing is Art. 6 (1) lit. f GDPR, as far as you are only visiting our website/webshop or using it to make purchases on behalf of the company or other organization you represent, our legitimate interests then being our offering of a functioning webshop to our customers and interested parties, or Art. 6 (1) lit. b GDPR in case you are our (prospective) contractual partner because you use or intend to use our webshop for purchases on your own behalf (performance of the respective contract between you and us).
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of the collection of data for the presentation of the website, this is the case when the respective session has ended.
Social Media
We use social media channels as a supplementary service and provide supplementary information there. We have links on our website that refer to these social media channels. We do not use any so-called "social plugins" (e.g. Facebook Like button). The links are only included in the web analysis. We link to the following social media channels on our website:
LinkedIn page: https://www.linkedin.com/company/67907
Facebook page: https://www.facebook.com/pages/FEV-GmbH/171136272897772
Twitter channel: https://twitter.com/FEV_Europe_GmbH
Xing page: http://www.xing.com/companies/fevgmbh
Youtube channel: https://www.youtube.com/user/FEVvideo
The social media platforms are independent information offerings and independent of the FEV website. The privacy statements of the social media platforms provide a detailed overview of the processing of personal data:
LinkedIn Privacy Poilcy : https://www.linkedin.com/legal/privacy-policy
Facebook Privacy Policy: https://www.facebook.com/privacy/
Twitter Privacy Policy: https://twitter.com/de/privacy
Xing Privacy Policy: https://privacy.xing.com/de/datenschutzerklaerung
Youtube Privacy Policy: https://policies.google.com/privacy?hl=de&gl=de
Newsletter
On our website there is the possibility to subscribe to a free newsletter. You can receive this either digitally or as a print version. Depending on which version you choose, the data requested from the input mask when registering for the newsletter will be transmitted to us.
In addition, the following data is collected during registration:
IP address of the calling computer
Date and time of registration
The collection of your e-mail address serves to deliver the newsletter. The collection of other personal data during the registration process serves to prevent misuse of the services or the e-mail address used.
For the processing of the data, your consent pursuant to Art. 6 (1) lit. a GDPR is obtained during the registration process and reference is made to this privacy policy.
No data will be passed on to third parties in connection with the data processing for sending newsletters. The data is used exclusively for sending the newsletter.
The data will be deleted as soon as you unsubscribe from the newsletter or the processing of the data is no longer necessary to achieve the purpose for which it was collected. Accordingly, your e-mail address is stored as long as the subscription to the newsletter is active.
The subscription to the newsletter can be cancelled by you at any time. For this purpose, a corresponding link can be found in each newsletter. This also enables revocation of the consent to the storage of the personal data collected during the registration process.
Registration
On our website, we offer the opportunity to register by providing personal data. The data is entered in an input mask and transmitted to us and stored. The data is not passed on to third parties. The following data is processed during the registration process:
First Name
Last Name
Email-address
Password
Company
Identification number (company)
Address
ZIP Code
Country
City
Phone (optional)
The following data is also stored at the time of registration:
The IP address of the user
The date and time of registration
Your user registration is required for the provision of certain content and services on our website. This includes software downloads, which are provided in relation to purchased products. An allocation of the solutions, some of which are specially tailored to the customer, is only possible if you can be identified as a user in this way.
The legal basis for the processing of the data is Art. 6 (1) lit. a GDPR if the user has given his consent.
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. This is the case for the data collected during the registration process when the registration on our website is cancelled or modified.
As a user, you have the option to cancel the registration at any time. You can have your personal data changed at any time. To do so, please contact our customer support.
Contact form and e-mail contact
Our website offers a contact form that can be used for electronic contact. If you contact us via that channel, the data entered in the input mask is transmitted to us and stored. These data are:
Subject
Salutation
Name
Company name
Position
Country
Phone number
E-Mail address
Message
The following data is also stored at the time the message is sent:
The IP address of the user
The date and time of registration
Alternatively, it is possible to contact us via the e-mail address provided on the website. In this case, your personal data transmitted with the e-mail will be stored. The data will not be passed on to third parties and is used exclusively for processing the conversation.
The processing of personal data from the input mask serves solely the processing of the contact. In the case of contact by e-mail, this also constitutes the necessary legitimate interest in processing the data. Other personal data processed during the sending process serves to prevent misuse of the contact form and to ensure the security of our information technology systems.
The legal basis for the processing of data transmitted in the course of sending an e-mail is Art. 6 (1) lit. f GDPR. If the e-mail contact aims at the conclusion of a contract, the additional legal basis for the processing is Art. 6 (1) lit. b GDPR.
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. For the personal data from the input mask of the contact form and those sent by e-mail, this is the case when the respective conversation with the user has ended. The conversation is ended when it is clear from the circumstances that the matter in question has been conclusively clarified.
The additional personal data collected during the sending process will be deleted after a period of seven days at the latest.
If you contact us by e-mail, you can object to the storage of his personal data at any time. In such a case, the conversation cannot be continued. To object to the storage, either contact us via the contact form or write and e-mail to the addresses provided.
All personal data stored in the course of contacting us will be deleted in this case.
Use of our webshop
Our website offers a webshop, allowing you to purchase technical reports (“benchmarkings”). If you use the webshop, we collect and process the following additional personal data:
Email-address
First Name
Last Name
Password
Company
Identification number (company)
Address
ZIP Code
Country
City
Phone (optional)
Payment method and payment details
Data about which and how many reports you purchase and the price of your purchase
The following data is also processed at the time the purchase order is made:
The IP address of the device you are using to access our webshop and send your purchase order
Date and time of your visit to our webshop
Alternatively, it is possible to contact us via the e-mail address provided on the website. In this case, your personal data transmitted with the e-mail will be stored. The data will not be passed on to third parties and is used exclusively processed to complete the purchase.
The processing of personal data from the input mask of our webshop serves solely the purpose of completing the purchase, including logistics and customer service. The IP address and date and time of your visit that are provided to us during the sending process of the purchase order are processed to prevent misuse of the webshop and to ensure the security of our involved information technology systems.
The legal basis for the processing of data transmitted in the course of purchases you make via our webshop is Art. 6 (1) lit. b GDPR in case you are our contractual partner because you purchase the benchmarking report(s) for yourself (performance of the respective contract between you and us) or Art. 6 (1) lit. f GDPR in case the company you represent purchases the benchmarking report(s). In the latter case, our interest in performing the purchasing contract with the company you represent constitutes the necessary legitimate interest in processing your personal data.
The data related to your purchase is deleted after completion of the contract and expiry of applicable retention obligations under tax and commercial law. The additional personal data collected during the sending process will be deleted after a period of seven days at the latest.
To make a purchase in our webshop, you must provide the personal data mentioned above, except for the optional phone number. If you do not provide us with the data, we cannot process your purchase order and complete the purchase.
IV. Rights of the data subject
If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights towards the Controller:
Access: You have the right to obtain information about the data processed about you.
Rectification: You can request the rectification of inaccurate data concerning your person. In addition, you can request the completion of incomplete data.
Erasure: In certain cases, you can request the erasure of your personal data.
Restriction of processing: In certain cases, you can request that the processing of your data be restricted.
Data portability: If you have provided data on the basis of a contract or consent, you can request that you receive the data you have provided in a structured, commonly used and machine-readable format or that it be transferred to another responsible party.
Right to object
Right to object on a case-by-case basis
You have the right to object at any time to the processing of your personal data based on Article 6 (1) lit. e GDPR or Article 6 (1) lit. f GDPR for reasons arising from your particular situation; this also applies to profiling based on these provisions. Your personal data will then no longer be processed for these purposes, unless compelling legitimate interests for the processing can be demonstrated by us which override your interests, rights and freedoms, or the processing serves the assertion, exercise or defense of legal claims.
Right to object to processing of data for direct marketing purposes
In individual cases personal data is processed for the purpose of direct marketing. You have the right to object to the processing of personal data concerning you for the purpose of such advertising at any time. This also applies to profiling, as far as it is associated with such direct advertising. If you object to the processing for direct marketing purposes, your personal data will no longer be processed for these purposes.
Revocation of consent: If you have given your consent to the processing of your data, you can revoke this consent at any time with effect for the future. The lawfulness of the processing of your data until the revocation remains unaffected.
Assertion of your rights: To exercise the aforementioned right please contact us via the Contact us form or by e-mail to the address indicated in section I. above. In doing so, please ensure that we are able to clearly identify you.
Right of complaint to the supervisory authority: You have the right to lodge a complaint with a data protection supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement, if you consider that the processing of personal data concerning you is unlawful.