Privacy Policy

Welcome to the homepage of KAJO GmbH!

Thank you for your interest in our company and our high-quality lubricant products. The protection of your personal data is very important to us. Therefore, we would like to inform you with this data protection declaration which of your personal data we collect when you visit our site, in which context it is used and stored.

As the regulations of the GDPR and the laws of the Federal Data Protection Act (BDSG) can change constantly, we are also obliged to adapt to these circumstances. We therefore ask you to read our privacy policy regularly.

§ 1 Controller

The controller within the meaning of the EU General Data Protection Regulation (GDPR) is

KAJO GmbH
Boschstraße 13
59609 Anröchte Germany
Tel: +49 (0) 2947 881-0
Fax: +49 (0) 2947 881 999
Email: schmierstoffe@kajo.de
Website: www.kajo.de

Managing Director: Frank Lewen

This privacy policy applies solely to the website www.kajo.de and its content.

§ 2 Data protection officer

The provision of a data protection officer is not mandatory for KAJO due to the company structure in accordance with Art. 37 to 39 GDPR and §38 BDSG-NEU. Nevertheless, we feel obliged to ensure your data security and have therefore appointed a certified internal data protection officer:

datenschutzbeauftragter@kajo.de

§ 3 Personal data

According to Art. 4 of the GDPR, personal data is any information relating to an identified or identifiable natural person. An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, genetic, mental, economic, cultural or social identity of that natural person

§ 4 Principles of data processing

The processing of personal data (e.g. the collection, retrieval, use, storage or transmission) always requires a legal basis (Art. 6 GDPR) or your consent. Processed personal data will be deleted as soon as the purpose of the processing has been achieved and there are no longer any statutory retention obligations to be complied with.

§ 5 Data collection

1. provision and use of the website

a. Type and scope of processing
Every time a user accesses our website and every time a file is retrieved, data is transmitted to us by your browser. This is necessary so that our website can be displayed to you. Access data about this process is stored in a log file on the servers of our IT service providers. The stored data is collected by the providers for security reasons. Examples of this are

Accessing IP address
Browser type (version)
Operating system
Date / time of the enquiry

Furthermore, your data is analysed anonymously for statistical purposes; it is not passed on to third parties, neither for commercial nor for non-commercial purposes. If we process your personal data for the provision of certain offers, we will inform you below about the specific processes, the scope and purpose of the data processing, the legal basis for the processing and the respective storage period.

b. Legal basis
Art. 6 para. 1 lit. (f) GDPR serves as the legal basis for the aforementioned data processing. The processing of the aforementioned data is necessary for the provision of a website and thus serves to safeguard a legitimate interest of our company.

c. Storage period
In order to ensure the quality and stability of our website, it is necessary to store your data. This data will be deleted after a period of 14 days, unless an individual case arises and storage is required by law.

2. data collection by filling out the contact form

a. Type and scope of data collection
If you send us enquiries via the contact form, your details from the enquiry form, including the contact details you provide there, will be stored by us for the purpose of processing the enquiry and in the event of follow-up questions. We will not pass on this data without your consent. The data entered in the contact form is therefore processed exclusively on the basis of your consent (Art. 6 para. 1 lit. (a) GDPR). You can revoke this consent at any time. All you need to do is send us an informal email. The legality of the data processing operations carried out until the revocation remains unaffected by the revocation.

We will retain the data you provide on the contact form until you request its deletion, revoke your consent for its storage, or the purpose for its storage no longer pertains (e.g. after fulfilling your request). Mandatory statutory provisions - in particular retention periods - remain unaffected.

As part of the contact form, the user provides the following data so that the enquiry can be processed:

Surname - postcode, address
First name - email
Company - telephone

b. Legal basis
The collection and processing of personal data as part of the contact form constitutes a pre-contractual measure that takes place at the request of the data subject. The legal basis is therefore Art. 6 para. 1 lit (b) of the GDPR.

c. Storage duration
The duration of storage of the above-mentioned data depends on the background of your contact. Your data will be deleted regularly if the purpose of the communication no longer applies and storage is no longer necessary (e.g. after final processing of your request).

§ 6 Contact options on our website

You will find the following contact options on our website:

General contact (head office) schmierstoffe@kajo.de
Data Protection Officer datenschutzbeauftragter@kajo.de
Contact form schmierstoffe@kajo.de
Contact details of the competent authority poststelle@ldi.nrw.de

a. Type and scope of data processing
Every visitor to the website can send their request to these email addresses. Our data collection is limited to the e-mail address of the e-mail account you use to contact us and any personal data you provide when contacting us.

b. Legal basis
The permissibility of data collection is based on Art. 6 para. 1 lit. (f) GDPR, as there is an equal interest in establishing contact and communication between you and our company as well as a legitimate company interest in processing the above-mentioned data in order to be able to process your request.

c. Storage duration
The duration of the storage of the above-mentioned data depends on the background of your contact. Your data will be deleted regularly if the purpose of the communication no longer applies and storage is no longer necessary (e.g. after final processing of your request).

§ 7 Cookies

We use cookies on our website. Cookies are small text files that are sent by us to the browser of your end device and stored there when you visit our website. Some functions of our website cannot be offered without the use of technically necessary cookies. Other cookies, on the other hand, enable us to carry out various analyses.

Among other things, we can use cookies to make our website more user-friendly and effective for you, for example by tracking your use of our website and determining your preferred settings (e.g. country and language settings). If third parties process information via cookies, they collect the information directly via your browser. Cookies do not cause any damage to your end device. They cannot execute programmes or contain viruses.

The cookies we use are so-called "session cookies", a sub-category of transient temporary cookies. This type of cookie makes it possible to record your session ID. This allows various requests from your browser to be assigned to a common session and enables us to recognise your end device on subsequent visits to the website. They are automatically deleted at the end of your visit. Of course, you can also view our website without cookies. However, this can lead to functional restrictions of our offers.

a. Legal basis
Due to the purposes of use described (see above), the legal basis for the processing of personal data using cookies is Art. 6 para. 1 lit. (f) GDPR.

b. Storage period
As soon as the data transmitted to us via the cookies is no longer required to fulfil the purposes described above, this information is deleted. Further storage may take place in individual cases if this is required by law.

c. Configuration of browser settings
Most browsers are set to accept cookies by default. However, you can configure your browser so that it only accepts certain cookies or no cookies at all. However, we would like to point out that you may no longer be able to use all the functions of our website if cookies are deactivated by your browser settings on our website. You can also use your browser settings to delete cookies already stored in your browser. It is also possible to set your browser to notify you before cookies are stored. As the various browsers may differ in their respective functions, we ask you to use the respective help menu of your browser for the configuration options.

If you would like a comprehensive overview of all third-party access to your Internet browser, we recommend that you install specially developed plug-ins.

§ 8 Rights of data subjects

The GDPR gives you the following rights as a data subject of personal data processing:

In accordance with Art. 15 GDPR, you can request information about your personal data processed by us. In particular, you can request information about the purposes of processing, the categories of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of your data if it was not collected by us, about a transfer to third countries or to international organisations and about the existence of automated decision-making including profiling and, if applicable, meaningful information about its details.

In accordance with Art. 16 GDPR, you can request the immediate correction of incorrect or the completion of your personal data stored by us.

In accordance with Art. 17 GDPR, you can request the erasure of your personal data stored by us, unless the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defence of legal claims.

In accordance with Art. 18 GDPR, you can request the restriction of the processing of your personal data if the accuracy of the data is disputed by you, the processing is unlawful, we no longer need the data and you refuse to delete it because you need it for the assertion, exercise or defence of legal claims. You also have the right under Art. 18 GDPR if you have objected to the processing pursuant to Art. 21 GDPR.

In accordance with Art. 20 GDPR, you can request to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or you can request that it be transferred to another controller.

In accordance with Art. 7 para. 3 GDPR, you can revoke your consent to us at any time. As a result, we may no longer continue the data processing based on this consent in the future.

In accordance with Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority. The contact details for the competent supervisory authority are

Supervisory authority NRW: The State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia,

Kavalleriestraße 2-4
40213 Düsseldorf
Tel: 0211 38424-0
Tel: 0211 38424-10
poststelle@ldi.nrw.de
www.ldi.nrw.de

§ 9 Right to object

If your personal data is processed on the basis of legitimate interests in accordance with Art. 6 para. 1 sentence 1 lit. (f) GDPR, you have the right to object to the processing of your personal data in accordance with Art. 21 GDPR, provided that there are reasons for this arising from your particular situation or the objection is directed against direct advertising. In the case of direct marketing, you have a general right to object, which we will implement without you having to specify a particular situation.

§ 10 Amendment of the privacy policy

We reserve the right to amend this privacy policy at any time in compliance with the applicable data protection regulations. The current status is February 2019.