KARL MAYER PRIVACY POLICY KARL MAYER CONNECT APP


Thank you for your interest in our application. The protection of your personal data during the collection, storage and other processing during your usage oft he application is important to us. Your data is protected in accordance with legal data protection regulations. Since 25 May 2018, the uniform requirements of the General EU Data Protection Regulation ("GDPR") applies throughout Europe in the area of data protection. The following privacy policy informs you ("you" and/or "user" and/or "data subject") about the processing of personal data carried out by KARL MAYER Holding GmbH & Co KG, ("KARL MAYER" and/or "us" and/or "Controller") in accordance with the GDPR and the German Federal Data Protection Act ("BDSG") also including the group-wide Binding Corporate Rules for all group companies related to KARL MAYER.


Please take a moment to read the privacy policy below. The privacy policy provide you with information on how we handle your personal data, how and for what purpose this personal data is used, to whom we pass this personal data on and how we protect your personal data. Your personal rights are our highest priority and we make every effort to protect and provide these rights.


If you have any questions or comments about our privacy policy, please contact us at datenschutzbeauftragter@karlmayer.com.


1. Controller


This privacy policy applies to data processing by


KARL MAYER Holding GmbH & Co KG, Brühlstrasse 25, 63179 Obertshausen, Germany

Represented by the Managing Directors Mr. Dipl. Ing. (BA) Arno K.-H. Gärtner, Dr. Helmut Preßl

Phone: +49 6104/402-0

Fax: +49 6104/402 73 600

E-mail: info@karlmayer.com


for the following application: KARL MAYER CONNECT


2. Data protection officer


You can contact the data protection officer of the Controller at


Data Protection Officer

c/o KARL MAYER Holding GmbH & Co KG,

Brühlstraße 25, 63179 Obertshausen, Germany

E-mail: datenschutzbeauftragter@karlmayer.com


3. Personal data, purposes of data processing, legal bases, recipients


3.1. Scope of processing of personal data


Personal data is information that can reveal or disclose the identity of the user. We only process personal data of our users if this is necessary to provide a functional application as well as our contents and services. The processing of personal data of our users takes place regularly only after consent of the user. An exception applies in those cases where prior consent cannot be obtained for factual reasons and the processing of the data is permitted by law.


3.2. Legal basis for the processing of personal data


Insofar as we obtain the consent of the data subject for the processing of personal data, Article 6(1)(a) GDPR serves as the legal basis.


For the processing of personal data necessary for the performance of a contract to which the data subject is a party, Article 6(1)(b) GDPR shall serve as the legal basis. This also applies to processing operations that are necessary to carry out pre-contractual measures.


Where the processing of personal data is necessary to fulfil a legal obligation to which KARL MAYER is subject, Article 6(1)(c) GDPR serves as the legal basis.


Where the vital interests of the data subject or another natural person require the processing of personal data, Article 6(1)(d) GDPR shall serve as the legal basis.


If processing is necessary to safeguard a legitimate interest of KARL MAYER or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the first interest, Article 6(1)(f) GDPR serves as the legal basis for processing.


The concretely applicable legal basis for the processing of personal data is always mentioned in this privacy policy with the respective concrete data processing.


3.3. Data deletion and storage time


The personal data of the data subject will be deleted or blocked as soon as the purpose of storage ceases to apply. Furthermore, data may be stored if this has been provided for by the European or national legislator in EU regulations, laws or other provisions to which the data subject is subject. The data will also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or fulfilment of a contract.


3.4. Data processing by the application


You can use the application without giving any personal information. Then no personal data is transferred to our server and you can only communicate with the textile machine and call up general machine documentation.


For application optimization we use special data collection methods. The exact procedures involved and how your data is used for this purpose are explained in detail below.


3.4.1. Data processing when accessing the application


Every time you access our application as a registered user, information is sent to the server of our application by your respective terminal device and temporarily stored in log files. The data records stored in this way contain the following data, which is stored until automatic deletion: Date and time of retrieval, name of the requested file, IP address of the requesting device, the amount of data transferred, loading time and the name of your access provider.


The legal basis for processing the IP address is Article 6(1)(f) DSGVO.


Our legitimate interest arises from the

Ensuring a smooth connection setup,

Ensuring comfortable use of our application,

Evaluation of system safety and stability.


A direct conclusion on your identity is not possible on the basis of the information and will not be drawn by us. These data are evaluated exclusively to ensure trouble-free operation of the application and its improvement and do not allow us to draw any conclusions about your person.


The data will be stored and automatically deleted once the aforementioned purposes have been achieved. If the data is stored in log files, this is the case after seven days at the latest. Further storage is possible. In this case, the IP addresses of the users are deleted or alienated, so that an assignment of the calling client is no longer possible.


3.4.2. Data processing when opening a user account


If you want to use the application in its entirety, you must create a user account and enter your personal details (first name, last name, mobile phone number, e-mail address, password). We collect this personal data if you voluntarily provide it to us when you open a user account. Which data is collected can be seen from the respective input forms.


We use and store the data provided by you for processing and handling your enquiries. After deletion of your user account, your data will be blocked for further use and deleted after expiry of the retention periods under tax and commercial law, unless you have expressly consented to further use of your data or we reserve the right to use data beyond this, which is permitted by law and about which we inform you below. The deletion of your user account is possible at any time and can be done by sending a message to the contact option described below.


The legal basis for data processing is Article 6(1)(a) DSGVO and Article 6(1)(b) DSGVO.


3.4.3. Geo-localization


If you have agreed to the so-called geolocalisation in your browser or in the operating system or other settings of your respective device, we use this function to be able to offer you individual services related to your current location (e.g. the location of the nearest branch). We process your location data processed in this way exclusively for this function. If you stop the use, the data will be deleted.


The legal basis for this data processing is Article 6(1)(f) GDPR.


You have the option of changing your browser or your operating system or the relevant location settings of your respective device in such a way that no location-related data is transmitted to us.


3.4.4. Data processing for push notifications


If you have registered as a user, we use push notifications from pushy.me. Pushy.me provides a software development kit which is included in KARL MAYER CONNECT APP. This communicates with Pushy.me, which is able to identify the device by a globally unique token (location by IP, last access, operating system) and send a push notification to the device. If the KARL MAYER CONNECT system wants to send push notifications to the device, the device tokens and the text are transferred to the Pushy.me service.

The device tokens are also stored in the KARL MAYER CONNECT system and can be assigned to users.


The legal basis for this data processing is Article 6 paragraph 1 letter a), Article 6 paragraph 1 letter b), Article 6 paragraph 1 letter c) DSGVO and Article 6 paragraph 1 letter f) DSGVO. Your data will be deleted once the intended purpose has been achieved.


After deletion of your user account, your data will be blocked for further use and deleted after expiry of the retention periods under tax and commercial law, unless you have expressly consented to further use of your data or we reserve the right to use data beyond this, which is permitted by law and about which we inform you below.


Your user account can be deleted at any time, either by sending a message to the known contact person or by deleting it in KARL MAYER CONNECT APP itself.

 

3.4.5. Data processing with SMS Gateway

In principle, a KARL MAYER CONNECT user account is created on the basis of an e-mail address.

Alternatively, it is also possible to perform all account-relevant actions (generating, resetting the password etc.) by a telephone number via our partner websms and the creation of an account there https://account.websms.com

The legal basis for this data processing is Article 6 paragraph 1 letter a), Article 6 paragraph 1 letter b), Article 6 paragraph 1 letter c) DSGVO and Article 6 paragraph 1 letter f) DSGVO. Your data will be deleted once the intended purpose has been achieved.


After deletion of your user account, your data will be blocked for further use and deleted after expiry of the retention periods under tax and commercial law, unless you have expressly consented to further use of your data or we reserve the right to use data beyond this, which is permitted by law and about which we inform you below.


Your user account can be deleted at any time, either by sending a message to the known contact person or by deleting it in KARL MAYER CONNECT APP itself.


We have concluded a data processing agreement with ADAMOS for this data processing. Your data will be stored within the EU.


3.4.6. Data processing upon contact


You have the possibility to contact us in several ways. By e-mail, by phone, by app contact mask or by mail. When you contact us, we use the personal data that you voluntarily provide to us in this context solely for the purpose of contacting you and processing your request. Which data is collected can be seen in the contact form in the respective input forms.


The legal basis for this data processing is Article 6 paragraph 1 letter a), Article 6 paragraph 1 letter b), Article 6 paragraph 1 letter c) DSGVO and Article 6 paragraph 1 letter f) DSGVO. Your data will be deleted once the intended purpose has been achieved.


After deletion of your user account, your data will be blocked for further use and deleted after expiry of the retention periods under tax and commercial law, unless you have expressly consented to further use of your data or we reserve the right to use data beyond this, which is permitted by law and about which we inform you below. The deletion of your user account is possible at any time and can be done by sending a message to the contact option described below.


3.4.7. Cloud connection


We use the cloud of ADAMOS GmbH for our application connection: ADAMOS GmbH, Uhlandstraße 9, 64297 Darmstadt, Germany ("ADAMOS"), Phone: +49 (0)6151-62-9030, info@adamos.com


We have concluded a data processing agreement with ADAMOS for this data processing. Your data will be stored within the EU.


4. Your statutory rights


Below you will find your rights that you can assert.


4.1. Overview of the individual statutory rights under Article 15 ff. GDPR


In addition to the right to revoke your consent given to us, you have the following further rights if the respective legal requirements are met:


the right to obtain information about your personal data stored by us (Art. 15 GDPR), in particular you can request information about the purposes of processing, the category of personal data, the categories of recipients to whom your data was or will be disclosed, the planned storage period, the origin of your data if these were not collected directly from you;


the right to correct inaccurate or complete correct data (Art. 16 GDPR),


the right to delete your data stored with us (Art. 17 GDPR), as far as no legal or contractual retention periods or other legal obligations or rights for further storage are to be observed by us,


the right to restrict the processing of your data (Art. 18 GDPR) if you dispute the accuracy of the data, if the processing is unlawful but you refuse to delete it; the data controller no longer needs the data, but you need them to assert, exercise or defend legal claims or you have filed an objection to the processing in accordance with Art. 21 GDPR,


the right to tranfer data in accordance with Art. 20 GDPR, i.e. the right to receive selected data stored by us about you in a common, machine-readable format, or to request the transfer to another Controller.


You can assert the above-mentioned rights under datenschutzbeauftragter@karlmayer.com


4.2. Right to object


Under the conditions of Art. 21 (1) GDPR, data processing may be objected for reasons arising from the special situation of the data subject.


The above general right to object applies to all processing purposes described in this Privacy Policy which are processed on the basis of Article 6(1)(f) GDPR. In contrast to the special right to object directed at data processing for advertising purposes, according to the GDPR we are only obliged to implement such a general objection if you give us reasons of superior importance (e.g. a possible danger to life or health).


You can exercise this right at datenschutzbeauftragter@karlmayer.com


4.3. Right of revocation


Insofar as we process data on the basis of a consent given by you, you have the right to revoke the consent given at any time. The revocation of the consent does not mean that the data processing carried out on the basis of the consent up to the time of the revocation becomes ineffective.


You can exercise this right at datenschutzbeauftragter@karlmayer.com


4.4. Right of appeal


Without prejudice to any other administrative or judicial remedy, you have the right of appeal to a supervisory authority, in particular in the Member State of your place of residence, employment or suspected infringement, if you believe that the processing of personal data concerning you is contrary to the GDPR.


5. Topicality and amendment of this Privacy Policy


This Privacy Policy is currently valid as of May 2018 and may need to be changed due to the further development of our webshop and or due to changes in legal or official requirements. The current privacy policy can be viewed and printed out at any time on the application itself under „privacy policy“.