The data protection declaration of SMI Handling Systeme GmbH is based on the terminology used by the European guidelines and ordinances when the basic data protection regulation (DS-GVO) was issued. Our data protection declaration should be easy to read and understand for the public as well as for our customers and business partners. To ensure this, we would like to explain the terms used in advance.
We use the following terms, among others, in this data protection declaration:
Personal data means any information relating to an identified or identifiable natural person (hereinafter referred to as "data subject"). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, on-line identification, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
Data subject means any identified or identifiable natural person whose personal data are processed by the controller.
Processing is any operation or set of operations, performed with or without the aid of automated means, which is performed upon personal data, such as collection, recording, organisation, organisation, filing, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
Restriction of processing
Restriction of processing is the marking of stored personal data with the aim of limiting their future processing.
Profiling is any automated processing of personal data consisting of the use of such personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects relating to the performance of work, economic situation, health, personal preferences, interests, reliability, conduct, location or change of location of that natural person.
Pseudonymisation is the processing of personal data in such a way that the personal data can no longer be attributed to a specific data subject without the need for additional information, provided that this additional information is kept separately and is subject to technical and organisational measures which ensure that the personal data is not attributed to an identified or identifiable natural person.
Controller or controller
Controller or data controller is the natural or legal person, public authority, agency or any other body which alone or jointly with others determines the purposes and means of the processing of personal data. Where the purposes and means of such processing are determined by Union or national law, provision may be made for the controller or for the specific criteria for his or her designation in accordance with Union or national law.
Processor is a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.
The recipient is any natural or legal person, public authority, agency or other body to whom personal data are disclosed, whether or not that person is a third party. However, authorities which may receive personal data in the context of a specific investigation mandate under Union or national law shall not be considered as recipients.
Third party means any natural or legal person, public authority, agency or body other than the data subject, the controller, the processor and the persons who, under the direct authority of the controller or the processor, are authorized to process the personal data.
Consent shall mean any freely given and informed unequivocal expression of the data subject's wishes in the specific case, in the form of a statement or any other unequivocal affirmative act by which the data subject signifies his or her consent to the processing of personal data relating to him or her.
The person responsible within the meaning of the basic data protection regulation, other data protection laws applicable in the member states of the European Union and other regulations of a data protection nature is the:
SMI Handling Systeme GmbH
An der Brille 5-7
Fon: +49 2335 9608-0
As a data protection officer is appointed with us:
Mr. Dipl.-Inform. Olaf Tenti
GDI Gesellschaft für Datenschutz und Informationssicherheit mbH
58095 Hagen (NRW)
Fon: +49 (0)2331/356832-0
Our website is operated on servers of 1&1 IONOS SE, Elgendorfer Str. 57 in 56410 Montabaur (hoster).
When our websites are accessed, data is automatically collected and stored in log files on our hoster's server. This data may have a personal reference. Among the data collected are:
(1) browser types and versions used,
(2) the operating system used by the accessing system, Page 4 from 12
(3) the website from which an accessing system arrives at our website (so-called referrer),
(4) the sub-websites which are accessed via an accessing system on our website,
(5) the date and time of access to the website,
(6) an Internet Protocol (IP) address,
(7) the Internet service provider of the accessing system and
(8) other similar data and information that serve to avert danger in the event of attacks on our information technology systems.
The hoster uses the collected data to ensure the trouble-free operation of the website as well as to ensure IT security and to improve our offer. If there are concrete indications, the log data may be analysed subsequently. The temporary storage of the IP address by the hoster is necessary to enable delivery of the website to the user's computer. For this purpose, your IP address must remain stored for the duration of the session. This data is not merged with other data sources. The legal basis for the data collection is Art. 6 para. 1 p. 1 lit. f DSGVO. Our legitimate interest in the data collection results from the aforementioned purposes. The data is deleted by the hoster as soon as it is no longer required to achieve the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended. In the event that the data is stored in log files, the data will be deleted after 8 weeks. The collection of data for the provision of the website and the storage of the data in log files is absolutely necessary for the operation of the website. Consequently, there is no possibility for you to object.
not use our own cookies to provide our website.
For security reasons and to protect the transmission of confidential content, such as orders or enquiries that you send to us as the site operator, this site uses SSL or TLS encryption. You can recognise an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line. If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties (end-to-end encryption). The protocols authenticate the communication partner and ensure the integrity of the transported data.
This website uses the cookie consent technology of Usercentrics to obtain your consent to the storage of certain cookies on your terminal device and to document this in accordance with data protection law. The provider of this technology is Usercentrics GmbH, Rosental 4, 80331 Munich, website: https://usercentrics.com/de/ (hereinafter "Usercentrics").
When you enter our website, the following personal data is transferred to Usercentrics:
Furthermore, Usercentrics stores a cookie in your browser in order to be able to allocate the consents granted to you or their revocation. The data collected in this way is stored until you request us to delete it, delete the Usercentrics cookie yourself or the purpose for storing the data no longer applies. Mandatory legal storage obligations remain unaffected. This data will not be passed on to other third parties. This data processing is carried out pursuant to Art. 6 (1) lit. f DSGVO on the basis of our legitimate interest in providing a cookie consent management service for website visitors. We have concluded an order processing contract with Usercentrics. This is a contract required by data protection law, which ensures that Usercentrics only processes the personal data of our website visitors in accordance with our instructions and in compliance with the DSGVO.
On our website you have the possibility to contact us via contact form or e-mail. It is also possible to contact us by telephone. In this context, the information you provide on the form or in the email, including the contact details you provide there, will be stored and processed by us for the purpose of processing the enquiry and in the event of follow-up questions. This data ([e.g. name, address, telephone number, e-mail address, IP address]) will not be passed on to third parties without your consent. The data is not merged with other data collected on this website. The data may be stored as part of the customer relations management (CRM) if you are already a customer of our company. Page 6 from 12 The contact form is sent encrypted using TLS technology. The encryption serves to prevent unauthorised access to your personal data by third parties. The processing of this data is based on Art. 6 (1) lit. b DSGVO if your request is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective handling of the enquiries addressed to us (Art. 6 (1) f DSGVO ). The data you provide will remain with us until you request us to delete it , you object to the processing or the purpose for storing the data no longer applies (e.g. after processing your enquiry has been completed). Mandatory legal provisions - in particular retention periods - remain unaffected.
On our website you have the opportunity to apply for a job in our company. For this purpose, we accept digital applications, regardless of whether you are applying for a position advertised by us or whether it is a speculative application. You can find the separate data protection information for applicants under this link.
On this website we use the "Google Maps" service, operated by Google LLC., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, or if you have your registered office or place of residence in the EU, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). This allows us to show you interactive maps directly on the website and enables you to use the map function conveniently. By visiting the website, Google receives the information that you have accessed the corresponding sub-page of our website. In addition
By integrating "Google Maps", "Google Fonts" are loaded, operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, or if you have your registered office or place of residence in the EU, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). We have no influence on this. By visiting the website, Google receives the information that you have accessed the corresponding sub-page of our website. In addition
On our website we use components (videos) of the company YouTube, LLC 901 Cherry Ave., 94066 San Bruno, CA, USA, a company of Google Inc., Amphitheatre Parkway, Mountain View, CA 94043, USA; the option " - extended data protection mode - " provided by YouTube is activated. The YouTube videos are accessed by clicking on them separately. Only the data required to display the videos - i.e. the information about which of our pages you are visiting - is transmitted to the service provider. If you are logged into YouTube while visiting our website, the transmitted information will be assigned to your YouTube member account. You can prevent this by logging out of your member account before visiting our website. By calling up a page with a video embedded by YouTube, a connection is established to the YouTube servers in order to display the content (i.e. the video) on our page by sending a message to your browser. The legal basis for the use of YouTube is your consent pursuant to Art. 6 para. 1 p. 1 lit. a DSGVO, insofar as you give us your consent to this when you first access the page. As there -is no EU Commission adequacy decision for the transfer of personal data to the USA-, we have concluded -standard data protection clauses with Google within the meaning of Art. 46 (2) lit. c DSGVO. Further information on YouTube's data protection is provided by Google at the following link: https://www.google.de/intl/de/policies/privacy/
The YouTube video platform is operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, or if you have your registered office or place of residence in the EU, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). The following information does not apply to any direct integration of YouTube videos on our website. When visiting our channel on YouTube, your data may be automatically collected and stored for market research and advertising purposes. So-called usage profiles are created from this data using pseudonyms. These can be used, for example, to place advertisements within and outside the video platform that presumably correspond to your interests. Cookies are generally used on your end device for this purpose. The function of cookies is explained in the context of the data protection instructions there, so please refer to the corresponding notes there. Visitor behaviour and user interests are stored in these cookies. Furthermore, we receive a statistical evaluation from the collected data as to which groups of people are interested in our individual videos posted on YouTube. In particular, the number of views and playing times of videos are provided to us in this context. The data is made available for statistical analysis in such an anonymous form that it is not possible to draw conclusions about Page 10 from 12 individual persons. The information contained in the data includes the approximate geographical location, the age group and other summary characteristics. The legal basis for the collection and processing of data is your consent within the meaning of Art. 6 (1) sentence 1 lit. a DSGVO, which you may have given or give to Google when calling up the website(s) there. You may revoke your consent to data processing at any time with effect for the future; to do so, please contact Google directly. The revocation of consent does not affect the lawfulness of the data processing that took place until the revocation. For detailed information on the processing and use of data by Google on the YouTube website, as well as a contact option and your rights and settings options in this regard to protect your privacy, please refer to Google's data protection information, which can be found at the following link: https://policies.google.com/privacy?hl=de&gl=de As there -is no EU Commission adequacy decision for the transfer of personal data to the USA-, we have concluded -standard data protection clauses with Google within the meaning of Art. 46 (2) lit. c DSGVO.
You are entitled to the rights set out below. You can assert these against us. To assert them, please use the above data or contact us by e-mail at: email@example.com .
In accordance with Art. 15 DSGVO, you have the right to request information about your personal data processed by us. In particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right of complaint, the origin of your data if it has not been collected by us, as well as the existence of automated decision-making including profiling and, if applicable, meaningful information about its details;
Pursuant to Art. 16 DSGVO, you have the right to request the correction of inaccurate or incomplete personal data stored by us without delay;
In accordance with Art. 17 DSGVO, you have the right to request the deletion of your personal data stored by us, unless the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the assertion, exercise or defence of legal claims;
Restriction of processing:
In accordance with Art. 18 DSGVO, you have the right to request the restriction of the processing of your personal data, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you object to its erasure and we no longer require the data, but you need it for the Page 11 from 12 assertion, exercise or defence of legal claims, or you have objected to the processing in accordance with Art. 21 DSGVO;
In accordance with Art. 20 DSGVO, you have the right to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request that it be transferred to another controller;
Withdrawal of your consent:
In accordance with Art. 7 (3) DSGVO, you have the right to revoke your consent at any time. This has the consequence that we may no longer continue the data processing based on this consent for the future. Please address your revocation to the above data or by e-mail to: firstname.lastname@example.org .
Right of objection
You have the right to object at any time, for reasons arising from your particular situation, to the processing of personal data relating to you which is carried out on the basis of Art. 6 para. 1. p. 1 lit. e) or f) DSGVO; this also applies to profiling based on these provisions. The controller shall no longer process the personal data concerning you unless it can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or for the establishment, exercise or defence of legal claims. If the personal data concerning you is processed for the purpose of direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing; this also applies to profiling, insofar as it is related to such direct marketing. If you object to processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes. You have the possibility, in connection with the use of information society services, notwithstanding Directive 2002/58/EC, to exercise your right to object by means of automated procedures using technical specifications.
Automated decision in individual cases including profiling
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. This does not apply if the decision is necessary for the conclusion or performance of a contract between you and the controller, is permitted by Union or Member State law to which the controller is subject and that law contains adequate measures to safeguard your rights and freedoms and your legitimate interests, or is made with your explicit consent. Page 12 from 12 However, these decisions must not be based on special categories of personal data pursuant to Art. 9(1) DSGVO, unless Art. 9(2)(a) or (g) DSGVO applies and appropriate measures have been taken to protect the rights and freedoms and your legitimate interests.
Complaint to a supervisory authority:
In accordance with Art. 77 DSGVO, you have the right to complain to a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our company headquarters for this purpose.
Status: October 2021