Privacy policy

Thank you for visiting our website and for your interest in our company. We take the protection of your private data very seriously and want you to feel comfortable when visiting our internet pages. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this data protection declaration. The use of our website is generally possible without providing personal data. When you visit our website, we store the date, time, duration and IP address as well as the pages you view. This is done exclusively for statistical purposes. It is not passed on to third parties. No user-related surfer profiles or similar are created or processed. We would like to point out that data transmission on the Internet (e.g. when communicating by e-mail) can have security gaps. Complete protection of data against access by third parties is not possible.

The protection of your personal data is of particular concern to us. We therefore process your data exclusively on
basis of the legal regulations (DSGVO)
With these notes, we inform you about the processing of your personal data by KRIWAN Testzentrum GmbH. The DSGVO regulates the information obligations of the controller towards the data subject depending on whether personal data is collected from the data subject (direct collection, Art. 13 DSGVO) or from third parties (third-party collection, Art. 14 DSGVO).

We process your personal data exclusively within the framework of the legal provisions.
This includes the following categories of personal data:
Master data (e.g. surname, first name, address), contract data (e.g. customer number, insurance number), billing data and bank data as well as comparable data.

1. Person responsible for data processing

KRIWAN Testzentrum GmbH
Teslastraße 2
74670 Forchtenberg
Germany
Phone: +49 7947 9150-0
Fax: +49 7947 9150-50
E-Mail: info@kriwan-testzentrum.de

1.1 Name of the external data protection officer

Firma Priolan
Ulrich Jahnke
u.jahnke@priolan.de
Gottlieb-Daimler-Straße 9
74076 Heilbronn
Germany

2. Purposes and legal bases of data processing

2.1 Data processing for the purpose of contract initiation and contract execution (Art. 6 para. 1 b DSGVO)

The processing of the data is necessary for the contract initiation, implementation and billing of your contract.

2.2 Data processing based on your consent (Art. 6 para.1 a DSGVO)

Insofar as we have obtained consent from you to process personal data for specific purposes, the processing is lawful on this basis. Consent given can be revoked at any time. This also applies to the revocation of declarations of consent that you gave us before the DSGVO came into force on May 25, 2018. The revocation of consent is for the future and does not affect the lawfulness of the data processed until the revocation.

2.3 Data processing for legitimate interest (Art. 6 para. 1 f DSGVO)

We process your data in a permissible manner to protect our legitimate interests.This includes the use of your personal data to carry out measures for the improvement and development of services and products, to be able to offer you a customer-specific approach with customized offers and products, as well as to carry out market and opinion research or have it carried out by market and opinion research institutes. This gives us an overview of the transparency and quality of our products, services and communication and enables us to align and shape them in the interests of our customers.
To assert legal claims and to defend ourselves in the event of legal disputes
To use your data anonymously for analysis purposes

Should we wish to process your personal data for a purpose not previously mentioned, we will inform you of this in advance within the framework of the legal provisions.

2.4 Data processing due to legal requirements (Art. 6 para. 1 c DSGVO) or in the public interest (Art. 6 para. 1 e DSGVO).

As a company, we are subject to various legal obligations (e.g. tax laws, commercial code) that make it necessary to process your data to comply with the law.

3. categories of recipients of personal data

Within our company, access to your data is granted to those entities that need it to fulfill the above-mentioned purposes (see Purpose and legal basis for processing personal data). This also applies to service providers and vicarious agents employed by us. Personal data will only be transmitted by us to third parties if this is necessary for the aforementioned purposes or if you have given your prior consent.
Recipients of personal data may be, for example: Print service providers, trade, analysis specialists, further processing companies.
Data transfer, in particular by way of administrative access to bodies or states outside the European Union (third country transfer), is not possible on the basis of the aforementioned purposes and legal bases. Data access in these cases also only takes place if either an adequacy decision of the Commission exists for the respective country, we have agreed with the service providers on the standard contractual clauses provided by the EU Commission for these cases, or the respective company has established its own internal binding data protection regulations, which have been recognized by the data protection supervisory authorities (https://ec.europa.eu/info/law/law-to-pic/data-protection_en).

4. Duration of data storage

We store your personal data for the above-mentioned purposes. Your data will be processed for the first time from the time of collection, insofar as you or a third party provide it to us. We delete your personal data when the contractual relationship with you has ended, all mutual claims have been fulfilled and there are no other statutory retention obligations or legal justification reasons for storage. These include, among others, retention obligations from the German Commercial Code (HGB) and the German Fiscal Code (AO). This means that we delete your personal data at the latest after expiry of the statutory retention obligations, which is usually 10 years after the end of the contract.

5. data subject rights

You can request information, Art 15 DSGVO, about the data stored about you at the above address. In addition, under the conditions of the regulations of the DSGVO, you can demand the correction, Art 16 DSGVO, the deletion, Art 17 DSGVO and the restriction of processing, Art 18 DSGVO, of your data. You are entitled to the return of the data provided by you in a structured, common and machine-readable format. The rights may be subject to the restrictions of legal as well as operational interests – in this case, you will be provided with appropriate information based on your rights to information.

5.1 Right of objection

Where we process data to protect our legitimate interests (see 2.3 Data processing for legitimate interest), you have the right to object to this processing at any time on grounds relating to your particular situation. This also includes the right to object to processing for advertising purposes.

5.2 Right of revocation in the case of consent

Consent given can be revoked at any time (see 2.2 Data processing based on your consent).

6. provision of personal data

Within the framework of our business relationship, you must provide those personal data that are necessary for the establishment and implementation of the business relationship and the fulfillment of the associated contractual obligations or which we are legally obliged to collect. Without this data, we cannot conclude the contract.

7 Automated decision making

No automated decision-making, including profiling, takes place for the purpose of establishing and executing this contract.

8. data sources

We process personal data that we receive from our customers in the course of our business relationship. We also process personal data that we are permitted to obtain from publicly accessible sources, e.g. debtor lists, land registers, commercial and association registers, the press and the Internet. In addition, we use personal data that we may permissibly obtain from companies within our group or from third parties, e.g. credit agencies.

9. modification clause

As our data processing is subject to changes, we will also adapt our data protection information from time to time. We will inform you of any changes in good time.

10. security

We use technical and organizational measures to protect your data against accidental or intentional manipulation, loss, destruction or against unauthorized access. Our security measures are continuously improved in accordance with technical developments.

11. Children

Personal data should not be transmitted to the KRIWAN website by children under the age of 18 without the consent of their parents or guardians. KRIWAN encourages all parents and guardians to instruct their children in the safe and responsible use of personal data on the Internet. KRIWAN will not knowingly collect, process or use personal data from children.

12. Cookies

This website uses cookies. Cookies are small text files that are sent from the web server to your PC and are usually stored on your hard drive. They are not programs that can cause damage to the user’s PC. Cookies make it possible to determine whether you visit our website again. Personal data is not stored. The information cannot be assigned to a specific person. You can also deactivate the storage of cookies via the settings of your browser. For more details, please refer to the help function of your Internet browser. In this case, visiting the website may only be possible to a limited extent.
You can also deactivate cookies. For more details, please refer to the user manual of your Internet browser. In this case, visiting the internet presence may only be possible to a limited extent.

13. Google Analytics

This website uses Google Analytics, a web analytics service provided by Google, Inc. (“Google”). Google Analytics uses so-called cookies, which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of this website (including your IP address) will be transmitted to and stored by Google on servers in the United States. Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google’s behalf. Google will not associate your IP address with any other data held by Google.

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de

You can also prevent the collection of your data by Google Analytics by setting the opt-out cookie. This prevents the collection of your data during future visits to our website.

Exclude from website tracking

14. right to information

If you have any questions or comments about the processing of your personal data, you can contact our data protection officer:
info@kriwan-testzentrum.de

or our external data protection officer:
u.jahnke@priolan.de

Upon request, we will inform you in writing as soon as possible, in accordance with the applicable laws and regulations, whether and what personal data we have stored about you. If outdated or incorrect information is stored, we will correct it at your request. Furthermore, you are entitled to the blocking or deletion of the data, taking into account legal obligations.