Data Protection
1. Privacy Policy
General information
The following information will provide you (the „data subject“) with an easy-to-navigate overview of how your personal data is processed when you visit this website. The term “personal data” comprises all data that can be used to personally identify you. Detailed information on data protection can be found in our Privacy Policy below.
Data collection on this website
Who is the responsible party for the collection of data on this website (i.e., the “controller”)?
The data on this website is processed by the operator of the website, whose contact information is available under the section “Information about the controller” in this Privacy Policy.
How do we collect personal data?
We collect your data as a result of your sharing of your data with us. This may, for instance, be information you enter into our contact form.
Other data are collected by our IT systems automatically or after you consent to its collection during your website visit. This data primarily comprises technical information (e.g., web browser, operating system, or the time the site was accessed). This information is collected automatically when you enter this website.
What are the purposes we use your data for?
Some data is collected to ensure that the website is provided without errors. Other data may be used to analyze the user‘s behavior.
What rights do you have in relation to the processing of your data?
You have the right to receive information about the origin, recipients, and purposes of your personal data that we store at any time and free of charge. You also have a right to demand that your data is rectified or erased. If you have consented to data processing, you have the option to withdraw this consent at any time, which shall affect all future data processing. Moreover, you have the right to demand that the processing of your data be restricted under certain circumstances. Furthermore, you have the right to file a complaint with the competent supervisory authority.
Please do not hesitate to contact us at any time if you have questions about your rights as a data subject or any other data protection-related issues.
Analysis tools and tools provided by third parties
There is a possibility that your browsing patterns will be statistically analyzed when you visit this website. Such analyses are performed primarily with what we refer to as “analysis software.”
For more detailed information, please consult our Privacy Policy below.
2. General and mandatory information
Data protection fundamentals and security
As the operators of this website and its pages, we take the protection of your personal data very seriously. Therefore, we handle your personal data as confidential information and in compliance with applicable data protection regulations, legal provisions, and laws (primarily the General Data Protection Regulation of the EU – “GDPR”) in accordance with this Privacy Policy.
Whenever you use this website, a variety of personal information will be collected and processed. Personal data is data that can be used to personally identify you. This Privacy Policy outlines which data we collect as well as the purposes we use this data for. It also states how the data is collected.
Taking into account and considering all relevant facts, like state of the art, nature, scope, circumstances and purposes of the processing, as well as the varying likelihood and severity of the risk to the rights and freedoms of the data subjects/users of the website, SVA has implemented appropriate technical and organizational measures to ensure a level of protection appropriate to the risk.
Please note that despite all implemented security measures the security of any data transmitted online (e.g. when communicating by email) cannot be guaranteed. Due to its nature, no technology is one hundred percent safe, hence it is not possible to completely protect your data from access by third parties.
Information about the Controller (“us” or “SVA”)
The Controller for this website is:
SVA System Vertrieb Alexander GmbH, Borsigstrasse 26, 65205 Wiesbaden, Germany
Managing Directors: Philipp Alexander, Sven Eichelbaum
Tel.: +49 06122 536-0, fax: +49 06122 536 399, email: mail@sva.de
“Controller” means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data (e.g., names, email addresses, etc.).
Retention periods
Unless a more specific period has been specified in this Privacy Policy, your personal data is processed until the purpose for which it was collected no longer applies. If you assert a justified request for deletion or withdraw your consent to data processing, your data will be deleted, unless it has to be processed on legally permissible grounds (e.g., retention periods specified in tax or commercial law); in the latter case, the data will be deleted after these lawful grounds cease to apply.
General information on the legal basis for data processing on this website
If you have consented to data processing, we process your personal data on the basis of Art. 6 (1)(a) or Art. 9 (2)(a) GDPR where special categories of data are processed pursuant to Art. 9 (1) GDPR. In the case of explicit consent to the transfer of personal data to third countries, the data processing is also based on Art. 49 (1)(a) GDPR. If you have consented to the storage of cookies or to the accessing of information on your end device (e.g., via device fingerprinting), the data processing is additionally based on Section 25 (1) of the German Telecommunications and Telemedia Data Protection Act (TTDSG). Such consent may be withdrawn at any time. If your data is required for the performance of a contract or for the implementation of pre-contractual measures, we process your data on the basis of Art. 6(1)(b) GDPR. If your data is required for the fulfillment of a legal obligation, we process it on the basis of Art. 6(1)(c) GDPR. Furthermore, the data processing may be carried out on the basis of our legitimate interest according to Art. 6(1)(f) GDPR. Information on the relevant legal basis in each individual case is provided in the following paragraphs of this Privacy Policy.
Contact details of the data protection team:
Data Protection, SVA System Vertrieb Alexander GmbH, Borsigstrasse 26, 65205 Wiesbaden, Germany
Tel.: +49 6122 536-0, email: datenschutz@sva.de
Contact details of the data protection officer:
Data Protection Officer, SVA System Vertrieb Alexander GmbH, Borsigstrasse 26, 65205 Wiesbaden, Germany
Tel.: +49 6122 536-0, email: dsb@sva.de
Withdrawal of your consent to the data processing
A wide range of data processing transactions are only possible with your express consent. You can withdraw your consent at any time with effect for the future. This shall be without prejudice to the lawfulness of any data processing that occurred prior to your withdrawal of consent.
Right to object to data collection in certain cases; right to object to direct marketing (Art. 21 GDPR)
In the event that data is processed on the basis of Art. 6(1)(e) or (f) GDPR, you have the right to object to the processing of your personal data at any time for reasons arising from your unique situation. This also applies to user behavior based on these provisions. To determine the legal basis of any processing, please consult this Privacy Policy. If you object to the processing (objection pursuant to Art. 21(1) GDPR), we will no longer process your personal data for the specified purpose, unless we are in a position to present compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defense of legal claims.
If your personal data is being processed in order to engage in direct marketing, you have the right to object to the processing of your affected personal data for the purposes of such marketing at any time. This also applies to user behavior to the extent that it is connected with such direct marketing. If you object, your personal data will subsequently no longer be used for direct marketing purposes (objection pursuant to Art. 21(2) GDPR).
Right to lodge a complaint with the competent supervisory authority
In the event of violations of the GDPR, data subjects are entitled to lodge a complaint with a supervisory authority, in particular in the Member State of his or her habitual residence, place of work, or at the place where the alleged violation occurred. The right to lodge a complaint is in effect regardless of any other administrative or judicial remedy.
Right to data portability
You have the right to receive your personal data processed by us in a structured, commonly used and machine-readable formator to have this data transmitted to a third party if the processing is based on your consent or performance of a contract and if the processing is carried out by automated means. If you demand the direct transfer of the data to another controller, this will be done only if it is technically feasible.
SSL and/or TLS encryption
For security reasons and to protect the transmission of confidential content such as purchase orders or inquiries you submit to us as the website operator, this website uses either SSL or TLS encryption. You can recognize an encrypted connection by checking whether the address line of the browser switches from “http://” to “https://” and also by the appearance of the lock icon in the browser line.
If SSL or TLS encryption is activated, data you transmit to us cannot be read by third parties.
Information about rectification and erasure of data
Within the scope of the applicable regulatory provisions, you have the right to demand information about your processed personal data, its origin and recipients, as well as the purpose of the processing of your data at any time. You may also have a right to have your data rectified or erased. If you have questions about this subject matter or any other questions about personal data, please do not hesitate to contact us at any time.
Right to demand restriction of processing
You have the right to demand the restriction of processing of your personal data. To do so, you may contact us at any time. The right to demand restriction of processing applies in the following cases:
In the event that you dispute the accuracy of your data processed by us, we will usually need some time to verify this claim. During the time that this investigation is ongoing, you have the right to demand that we restrict the processing of your personal data.
If the processing of your personal data was/is conducted in an unlawful manner, you have the option to demand the restriction of processing of your data in lieu of demanding the erasure of this data.
If we no longer need your personal data for the purposes of processing but you require the data for the establishment, exercise or defense of legal claims, you have the right to demand the restriction of processing of your personal data instead of its erasure.
If you have raised an objection pursuant to Art. 21(1) GDPR, your interests and our interests will have to be weighed against each other. Until it has been determined whose interests prevail, you have the right to demand a restriction of processing of your personal data.
If you have restricted the processing of your personal data, this data – with the exception of its storage – may only be processed subject to your consent, for the establishment, exercise or defense of legal claims, to protect the rights of another natural or legal person or for reasons of important public interest of the European Union or of a member state.
Prohibition on sending unsolicited advertising material to SVA
We herewith object to the use of contact information published in conjunction with the obligation to provide a legal notice to send us promotional and information material that we have not expressly requested. The operators of this website and its pages reserve the express right to take legal action in the event of the unsolicited sending of promotional information, for instance via spam messages.
3. Data collection on this website
Cookies
Our websites and pages use what are referred to as “cookies.” Cookies are small text files that do not cause any damage to your device. They are either stored temporarily for the duration of a session (session cookies) or are permanently stored on your device (permanent cookies). Session cookies are automatically deleted once you terminate your visit. Permanent cookies remain stored on your device until you actively delete them or they are automatically erased by your web browser.
In some cases, it is possible that cookies from third-party companies are stored on your device when you enter our site (third-party cookies). These cookies enable you or us to take advantage of certain services offered by the third party (e.g., cookies for the processing of payment services).
Cookies have a variety of functions. Many cookies are technically essential since certain website functions would not work in the absence of the cookies (e.g., the shopping cart function or the embedding of videos). Other cookies may be used to analyze user behavior or display promotional messages.
Cookies that are required for electronic communication, for the provision of certain functions you want to use (e.g., for the shopping cart function) or to optimize the website (e.g., cookies for website visitor analytics) are known as essential cookies and are stored on the basis of legitimate interests in accordance with Art. 6(1)(f) GDPR, unless a different legal basis is cited. The operator of the website has a legitimate interest in the storage of essential cookies to ensure the technically error-free and optimized provision of the operator’s services. If your consent to the storage of the cookies and similar recognition technologies has been requested, processing occurs exclusively on the basis of the consent obtained (Art. 6(1)(a) GDPR in conjunction with Section 25 (1) TTDSG); this consent may be withdrawn at any time.
You have the option to set up your browser in such a manner that you will be notified any time cookies are placed and to permit the acceptance of cookies only in specific cases. You may also exclude the acceptance of cookies in certain cases or in general or activate the function for the automatic deletion of cookies when the browser closes. If cookies are deactivated, the functions of this website may be limited.
In the event that third-party cookies are used or if cookies are used for analytical purposes, we will notify you separately in conjunction with this Privacy Policy and, if applicable, ask for your consent.
Cookie consent with Consent Manager Provider
Our website uses cookie consent technology from Consent Manager Provider to obtain your consent to the storage of certain cookies on your end device and to document this in a data protection-compliant manner. The provider of this technology is: Jaohawi AB, Håltegelvägen 1b, 72348 Västerås, Sweden, website: https://www.consentmanager.de (hereinafter “Consent Manager Provider”).
When you enter our website, a connection is established with the Consent Manager Provider servers to obtain your consent and provide you with other explanations regarding the use of cookies. Consent Manager Provider will then store a cookie in your browser to identify the consent you have given or its withdrawal. The data collected in this way is stored until you request that we delete it, until you delete the Consent Manager Provider cookie itself, or until the purpose for which the data is stored no longer applies. Mandatory legal storage obligations remain unaffected.
Consent Manager Provider is used to obtain and document the legally required consent for the use of cookies. The legal basis for this is the duty of the Controller to be able to demonstrate that the data subject has consented to processing of his or her personal data in accordance with Art. 6(1)(c) in conjunction with Art. 7 (1) GDPR. You may withdraw or change your decision at any time by clicking on the Consent Manager settings button, found in the bottom left corner of the page.
The purpose of this data processing is to provide a cookie banner and ensure a consent process for the use of cookies on this website.
Server log files
The provider of this website and its pages automatically collects and stores information in what are known as server log files, which your browser communicates to us automatically. The information comprises:
- the type and version of the browser used
- the operating system used
- the referrer URL
- the host name of the accessing computer
- the time of the server request
- the IP address.
This data is not merged with other data sources.
This data is processed on the basis of Art. 6(1)(f) GDPR. The operator of the website has a legitimate interest in the use of such data for ensuring the error-free operation of the website and the optimization thereof. In order to achieve this, server log files must be collected and processed.
Contact form
If you submit inquiries to us via our contact form, the information provided in the contact form as well as any contact information provided therein will be processed by us in order to handle your inquiry and in the event that we have further questions. We do not pass this data on without your consent.
This data is processed on the basis of Art. 6(1)(b) GDPR if your inquiry is related to the performance of a contract or is required for the provision of pre-contractual measures. In all other cases, the data is processed on the basis of our legitimate interest in the effective handling of inquiries submitted to us (Art. 6(1)(f) GDPR) or on the basis of your consent (Art. 6(1)(a) GDPR) if it has been obtained; the consent can be withdrawn at any time.
The information you enter into the contact form will remain with us until you ask us to erase the data, you withdraw your consent to its storage, or if the purpose for which the information is stored no longer exists (e.g., after we have concluded our response to your inquiry). This shall be without prejudice to any mandatory legal provisions, in particular retention periods.
Inquiry by email, telephone, or fax
If you contact us by email, telephone, or fax, your inquiry, including all resulting personal data (name, request), will be stored and processed by us for the purpose of processing your inquiry. We do not pass this data on without your consent.
This data is processed on the basis of Art. 6(1)(b) GDPR if your inquiry is related to the performance of a contract or is required for the provision of pre-contractual measures. In all other cases, the data is processed on the basis of our legitimate interest in the effective handling of inquiries submitted to us (Art. 6(1)(f) GDPR) or on the basis of your consent (Art. 6(1)(a) GDPR) if it has been obtained; the consent can be withdrawn at any time.
The data you provide to us via contact inquiries remains with us until you request that we delete it, you withdraw your consent to its storage or the purpose for the data retention no longer applies (e.g., when the processing of your inquiry is complete). Mandatory statutory provisions – in particular statutory retention periods – remain unaffected.
4. Social media
Social media elements with Shariff
We use elements of social media networks on this website and its pages (e.g., Facebook, Twitter, Instagram, Pinterest, XING, LinkedIn, Tumblr).
You will be able to recognize these social media elements because of the respective social media logos that appear. To guarantee the protection of data on this website, we use these elements only in combination with the “Shariff” solution. This application prevents the social media elements that have been integrated into this website from transferring personal data to the respective provider as soon as you enter our website.
A direct connection to the provider’s server will not be established until you have activated the respective social media element by clicking on the respective button (which indicates your consent). As soon as you activate the social media element, the respective provider receives the information that you have visited this website along with your IP address. If you are simultaneously logged into your respective social media account (e.g., Facebook), the provider in question will be able to allocate your visit to this website to your user account.
The activation of the plug-in constitutes a declaration of consent as defined in Art. 6(1)(a) GDPR in conjunction with Section 25(1) Telecommunications-Telemedia Data Protection Act (abbreviated in German to TTDSG). You have the option to withdraw this consent at any time, which shall affect all future transactions.
This service is used to obtain the consent to the use of certain technologies required by law. The legal basis for this is Art. 6(1)(c) in conjunction with Art. 7 (1) GDPR.
5. Analysis tools and advertising
Matomo
This website uses the open-source web analysis service Matomo. Matomo uses technologies that make it possible to recognize the user across multiple pages with the aim of analyzing user behavior (e.g., cookies or device fingerprinting). The information collected by Matomo about the use of this website will be stored on our server. Prior to storing, your IP address will be anonymized.
Through Matomo, we are able to collect and analyze data on the use of our website by visitors to the website. This enables us to gather information such as the exact time at which a site has been visited and from which region. In addition, we collect various log files (e.g., IP address, referrer, browser and operating system used) and can measure whether our website visitors perform certain actions (e.g., clicks, purchases, etc.).
The use of this analysis tool is based on Art. 6(1)(a) GDPR in conjunction with Section 25 (1) TTDSG, insofar as the consent includes the storage of cookies or access to information on the user’s end device (e.g., device fingerprinting) within the meaning of the TTDSG. Such consent may be withdrawn at any time.
IP anonymization
Any data analysis with Matomo is based on prior IP anonymization. Your IP address is shortened before the analysis, so that it is no longer clearly assignable to you.
Hosting
We host Matomo exclusively on our own servers so that all analysis data remains with us and is not transferred to anyone else.
Evalanche
We use the marketing tool Evalanche. The provider is SC-Networks GmbH, Würmstrasse 4, 82319 Starnberg, Germany (hereinafter “Evalanche”).
Evalanche is a tool for optimizing and automating our marketing activities. With Evalanche, we can, in particular, automate our lead generation and target our website content. In addition, we can analyze the user behavior of our website visitors and can subsequently trigger further marketing campaigns. For this purpose, Evalanche stores various data about website visitors, such as addresses, interests, location, and similar.
Evalanche is certified according to the internationally recognized IT security standard ISO 27001.
If your approval (consent) has been obtained, the above-mentioned service will only be used on the basis of Art. 6(1)(a) GDPR and Section 25 TTDSG. Such consent may be withdrawn at any time.
Data processing by the provider
We have concluded a data processing agreement (DPA) with the above-mentioned provider. This is a contract mandated by data privacy law that guarantees that the provider only processes the personal data of our website visitors based on our instructions and in compliance with the GDPR.
6. Newsletter and mail advertising
Newsletter data
If you would like to subscribe to the newsletter offered on this website, we need your email address as well as information that allows us to verify that you are the owner of the provided email address and that you consented to the receipt of the newsletter. Further data shall only be collected on a voluntary basis. We shall use such data only for providing the requested information and shall not share such data with any third parties.
The processing of the information entered into the newsletter subscription form shall occur exclusively on the basis of your consent (Art. 6(1)(a) GDPR). You may withdraw the consent you have given to the processing of data, the email address and the use of this information for the purpose of providing the newsletter at any time, for instance by clicking on the “Unsubscribe” link in the newsletter. This shall be without prejudice to the lawfulness of any data processing that has taken place up until then.
The data shared with us for the purpose of subscribing to the newsletter will be processed by us or the newsletter service provider until you unsubscribe from the newsletter. The data will be deleted from the newsletter distribution list after you unsubscribe from the newsletter or after the purpose for the provision of the newsletter has ceased to apply. We reserve the right to delete or restrict the processing of email addresses from our newsletter distribution list at our own discretion within the scope of our legitimate interest in accordance with Art. 6(1)(f) GDPR.
Data stored by us for other purposes remains unaffected.
After you unsubscribe from the newsletter distribution list, your email address may be stored by us or the newsletter service provider in a blacklist, if such action is necessary to prevent future mailings. The data from the blacklist is used only for this purpose and is not merged with other data. This serves both your interest and our interest in complying with legal requirements when sending newsletters (legitimate interest within the meaning of Art. 6(1)(f) GDPR). The retention period of the data in the blacklist is indefinite. You may object to the storage if your interests outweigh our legitimate interest.
Mail advertising
We use your address in compliance with all legal provisions on sending mail advertising.
This is based on our legitimate interest in direct advertisement pursuant to Art. 6(1)(f) GDPR in conjunction with Recital 47 GDPR. If your consent has been requested, processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR; this consent may be withdrawn at any time. More specific rules may be communicated to you as part of the data collection process and take precedence over this provision.
Your address will remain with us until the purpose of the data processing ceases to apply. If you assert a justified request for deletion or withdraw your consent to mail advertising, your data will be deleted, unless it has to be processed due to legal obligations (e.g., retention periods specified in tax or commercial law); in the latter case, the data will be deleted after these grounds cease to apply.
7. Processing of customer and contract data
We collect, process, and use personal customer and contract data for the establishment, arrangement and modification of our contractual relationships. Personal data relating to the use of this website (usage data) will be collected, processed and used only if this is necessary to enable the user to use our services or if required for billing purposes. The legal basis for these processes is Art. 6(1)(b) GDPR.
The collected customer data shall be deleted upon completion of the order or termination of the business relationship and upon expiration of any existing statutory retention periods. Statutory retention periods remain unaffected.
Data transfer upon conclusion of contracts for services and digital content
We share personal data with third parties only if this is necessary in conjunction with the execution of the contract; for instance, with the financial institution tasked with the processing of payments.
Any further transfer of data shall only occur if you have expressly consented to the transfer. Any other sharing of your data with third parties in the absence of your express consent, for instance for advertising purposes, shall not occur.
The basis for the processing of data is Art. 6(1)(b) GDPR, which permits the processing of data for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract.
