Thank you very much for visiting our website or for contacting us in any other way.

We place a particularly high priority on the protection of personal data. In general, you can use this website without providing any personal data. However, if you wish to take advantage of one of our company’s online services, the processing of personal data may be necessary. If the processing of personal data is necessary and there is no legal basis for such processing, we generally obtain the consent of the data subject.

The processing of personal data—such as a data subject’s name, address, email address, or phone number—is always carried out in accordance with the current Federal Data Protection Act (BDSG), the EU General Data Protection Regulation (GDPR), which took effect on May 25, 2018, and the Telecommunications and Digital Services Data Protection Act (TDDDG).

Through this Privacy Policy, our company aims to provide information about the nature, scope, and purpose of the personal data we process and to inform data subjects of their rights.

Our company has implemented numerous technical and organizational measures to ensure the most comprehensive protection possible for the personal data we process. However, Internet-based data transmissions may inherently involve security vulnerabilities, so absolute protection cannot be guaranteed.

I. Definitions

II. Data Controller

III. Data Protection Officer

IV. Provision of the Website

V. Logfiles

VI. Cookies

VII. Consent Management Tool

VIII. WordPress Download Manager

IX. Email Contact

X. Google Maps

XI. Product Configurator

XII. Application Process

XIII. Rights of Data Subjects

 

I. Definitions

Our company’s privacy policy is based on the GDPR. We aim to make our privacy policy easy to read and understand. To ensure this, we will first explain the terms used:

  1. Personal Data
    Personal data refers to “any information relating to an identified or identifiable natural person (hereinafter referred to as the ‘data subject’); a natural person is considered identifiable if they can be identified, directly or indirectly, in particular by association with an identifier such as a name, an identification number, location data, an online identifier, or one or more specific characteristics that reflect the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person” (Art. 4(1) GDPR).
  2. Data Subject
    A data subject is any identified or identifiable natural person whose personal data is processed by the controller.
  3. Processing
    Processing means any operation or set of operations performed on personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, distribution, or any other form of disclosure, the comparison or linking, the restriction, erasure, or destruction.
  4. Restriction of Processing
    Restriction of processing refers to the marking of stored personal data with the aim of limiting its future processing.
  5. Profiling
    Profiling ist jede Art der automatisierten Verarbeitung personenbezogener Daten, bei der diese personenbezogenen Daten verwendet werden, um bestimmte persönliche Aspekte, die sich auf eine natürliche Person beziehen, zu bewerten, insbesondere, um Aspekte bezüglich Arbeitsleistung, wirtschaftlicher Lage, Gesundheit, persönlicher Vorlieben, Interessen, Zuverlässigkeit, Verhalten, Aufenthaltsort oder Ortswechsel dieser natürlichen Person zu analysieren oder vorherzusagen.
  6. Pseudonymization
    Pseudonymization is the processing of personal data in which the personal data can no longer be attributed to a specific data subject without the use of additional information. This additional information is stored separately and is subject to technical and organizational measures, thereby ensuring that the personal data cannot be attributed to an identified or identifiable natural person.
  7. Data Controller
    A data controller is the natural or legal person, public authority, agency, or other body that, alone or jointly with others, determines the purposes and means of the processing of personal data.
  8. Data Processor
    A data processor is a natural or legal person, public authority, agency, or other body that processes personal data on behalf of the data controller.
  9. Recipient
    A recipient is a natural or legal person, public authority, agency, or other body to whom personal data is disclosed, regardless of whether or not that entity is a third party. However, public authorities that may receive personal data in the course of a specific investigative mandate under Union law or the law of the Member States are not considered recipients.
  10. Third Party
    A third party is a natural or legal person, public authority, agency, or other entity other than the data subject, the controller, the processor, and the persons authorized to process the personal data under the direct responsibility of the controller or the processor.
  11. Consent
    Consent means any freely given, specific, informed, and unambiguous indication of the data subject’s wishes, expressed in the form of a statement or other unambiguous affirmative action, by which the data subject indicates that he or she consents to the processing of personal data relating to him or her.

 

II. DATA CONTROLLER

The data controller within the meaning of the General Data Protection Regulation and other national data protection laws of the member states, as well as other data protection regulations, is:

Krapf & Lex Nachf. Verkehrstechnik GmbH & Co. KG
Neuer Gstettenweg 2
D-93426 Roding

Phone: +49 (0) 94 61 / 91 23 72
Fax: +49 (0) 94 61 / 91 12 75
Internet: http://www.krapf-lex.de
Email: contact(at)krapf-lex(dot)de

III. DATA PROTECTION OFFICER

BCCO GmbH
Hermann-Köhl-Straße 14
93049 Regensburg

Phone: +49 941 69800800
Email: datenschutz@bcco.de

 

IV. PROVISION OF THE WEBSITE

  1. Website Hosting
    This website is operated using a hosting service provider, whose European servers store the website’s content.
    The hosting service provider was carefully selected; furthermore, all necessary measures have been taken to ensure that data processing complies with data protection laws (for example, the conclusion of a data processing agreement). Each time our website is accessed, our system automatically collects data and information from the computer system of the accessing device.

The following data is collected in this process:

– The user’s operating system
– The user’s Internet service provider
– The user’s IP address
– Date and time of access
– Websites from which the user’s system accesses our website
– Websites accessed by the user’s system via our website
– File accessed
– Amount of data transmitted
The legal basis for the temporary storage of this data is Article 6(1)(f) of the GDPR.

  1. The system must temporarily store the IP address in order to deliver the website to the user’s computer. To do so, the user’s IP address must be stored for the duration of the session. These purposes constitute our legitimate interest under Article 6(1)(f) of the GDPR.
  1. The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. In the case of data collected for the purpose of providing the website, this occurs when the respective session ends.
  1. The collection of data for the purpose of providing the website is essential for the website’s operation; therefore, users do not have the option to object.

 

V. LOG FILES

  1. The data is also stored in our system’s log files. This data is not stored together with any other personal data belonging to the user. The legal basis for creating the log files is Article 6(1)(f) of the GDPR.
  1. Data is stored in log files to ensure the proper functioning of the website. In addition, we use this data to optimize the website and ensure the security of our IT systems. The data is not analyzed for marketing purposes in this context. These purposes also constitute our legitimate interest in data processing pursuant to Article 6(1)(f) of the GDPR.
  1. The data in the log files is deleted after seven days at the latest. Storage beyond this period is possible. In this case, users’ IP addresses are deleted or anonymized so that the client making the request can no longer be identified.
  1. Storing data in log files is essential for the operation of the website. Therefore, users have no right to object.

VI. COOKIES

  1. Our website uses cookies. Cookies are text files that are stored in or by the web browser on the user’s computer system. When a user visits a website, a cookie may be stored on the user’s operating system. This cookie contains a unique string of characters that allows the browser to be uniquely identified when the website is visited again. The following data is stored and transmitted via cookies:
    – Language settings
    – Login information
  2. To the extent that you have given us your consent, the legal basis for the processing of personal data using cookies is Article 6(1)(a) of the GDPR and Section 25(1) of the TDDDG. You may revoke your consent at any time with future effect by deactivating the corresponding category in the “Privacy Settings” on this page.
    To the extent that the processing is based on our legitimate interests, the legal basis is Article 6(1)(f) of the GDPR.
  1. Cookies are used to make it easier for our users to navigate the website. Analytical cookies are used to improve the quality of the website so that we can continuously optimize our offerings based on the insights gained regarding how the website is used. This also constitutes our legitimate interest in processing personal data pursuant to Article 6(1)(f) of the GDPR.
  1. Cookies are stored on the user’s computer and transmitted from there to our site. As a user, you therefore have full control over the use of cookies. By changing the settings in your web browser, you can disable or restrict the transmission of cookies. Cookies that have already been stored can be deleted at any time. This can also be done automatically. If cookies are disabled for our website, you may no longer be able to use all of the website’s features to their full extent.

VII. Consent Management Tool

This website uses “Borlabs Cookie” for consent management, which sets a technically necessary cookie (borlabs-cookie) to store your consent settings. “Borlabs Cookie” does not process any personal data.

The “borlabs-cookie” cookie stores the consents you provided when you accessed the website. You can revoke any consent you have given at any time, effective for the future, by deactivating the corresponding category in the “Privacy Settings” on this page.

You can also delete the “borlabs-cookie” cookie from your browser at any time. When you visit or reload the website afterward, you will be asked for your consent again.

IX. Email Contact

  1. You can contact us using the email address provided. In this case, the user’s personal data transmitted via email will be stored.
    No data will be disclosed to third parties in this context. The data will be used exclusively for the purpose of handling the correspondence.
  2. The legal basis for processing the data transmitted when sending an email is Article 6(1)(f) of the GDPR. If the purpose of the email contact is to enter into a contract, the additional legal basis for the processing is Article 6(1)(b) of the GDPR.
  3. If you contact us via email, this also constitutes the necessary legitimate interest in processing the data.
    The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. For personal data sent via email, this is the case when the respective conversation with the user has ended. The conversation is considered ended when it can be inferred from the circumstances that the matter in question has been conclusively resolved.

If a user contacts us via email, they may object to the storage of their personal data at any time. In such a case, the conversation cannot continue.
All personal data stored in the course of this contact will be deleted in this case.

X. Google Maps

We use the Google Maps API to display geographic information. When using Google Maps, Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) also collects, processes, and uses data regarding visitors’ use of the Maps features on our websites. Your data will not be transferred until you have given us your consent to the transfer in accordance with Art. 6(1)(a) of the GDPR and § 25(1) of the TDDDG.
When you visit our website, we display a notice regarding “Privacy Settings.” There, you already have the option to consent to data processing by clicking “Accept All.” If you only accept essential cookies there, Google Maps will not be displayed until you consent to data processing by clicking the information text in the map window. You can revoke your consent at any time with future effect by deactivating the corresponding category in the “Privacy Settings” on this page. If you do not wish for your data to be directly linked to your Google profile, you should log out of your user account before activating the feature.
Based on its legitimate interest (Art. 6(1)(f) GDPR) in personalized advertising, market analysis, or the customized design of Google websites, Google collects and stores data as analyzable usage profiles, even for users who are not logged in. To exercise your right to object to the creation of these user profiles, please contact Google directly.
By disabling JavaScript in your browser, you can completely deactivate the service. However, the map display on this website will then no longer be available.
For the transfer of data from the EU to the U.S., Google relies on the European Commission’s so-called Standard Data Protection Clauses, which are intended to ensure compliance with European data protection standards in the U.S.
For more information about Google’s data processing, please refer to Google’s Privacy Policy: https://policies.google.com/privacy?hl=de.
Google’s Terms of Service can be found at https://www.google.de/intl/de/policies/terms/regional.html, and the additional Terms of Service for Google Maps at
https://www.google.com/intl/de_US/help/terms_maps.html

 

XI. Product Configurator

  1. You can access our product configurator through our website.

When you access the configurator, cookies that are technically necessary for the configurator to function are set on the device you are using. To receive a quote for a configuration you have created, you must enter your contact information.

If a user takes advantage of this option to request a quote, the data entered in the form is transmitted to us and stored. This data includes: company name, first name, last name, email address, and phone number.

In this context, no data is shared with third parties. The data is used exclusively for processing the conversation and preparing the requested quote.

  1. The legal basis for the processing of the data is Article 6(1)(b) of the GDPR (implementation of pre-contractual measures taken at the request of the data subject).
  2. We use the personal data entered in the form solely to process your inquiry.

The other personal data processed during the submission process is used to prevent misuse of the form and to ensure the security of our IT systems.

  1. The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. For personal data entered in the input form, this is the case once the respective conversation with the user has ended. The conversation is considered to have ended when it is clear from the circumstances that the matter in question has been conclusively resolved.

Any additional personal data collected during the submission process will be deleted no later than seven days after the submission.

XII. Application Process

We offer you the opportunity to apply for a position with us (e.g., by mail or via our online application form). Below, we provide information about the scope, purpose, and use of your personal data collected as part of the application process. We assure you that the collection, processing, and use of your data are carried out in accordance with applicable data protection laws and all other legal requirements, and that your data will be treated with the strictest confidentiality.

If you submit an application to us, we will process your associated personal data (e.g., contact and communication information, application documents, notes taken during job interviews, etc.) to the extent necessary to decide whether to establish an employment relationship. The legal basis for this is Article 6(1)(b) of the GDPR (pre-contractual measures) and—if you have provided consent—Article 6(1)(a) of the GDPR. You may withdraw your consent at any time. Your personal data will be shared within our company exclusively with those individuals involved in processing your application.

  1. Online Application
    a) Quform uses a session cookie to ensure security and functionality within the plugin; this cookie is also set when you leave the form page without submitting the form. It stores only a session ID, not any personal data. It is necessary to protect against cross-site request forgery and to ensure the plugin functions properly (e.g., verifying whether the CAPTCHA solution was correct).
    b) The processing of your personal data in connection with Quform is based on our legitimate interest pursuant to Article 6(1)(f) of the GDPR. Our interest lies in providing our visitors with a useful feature and giving them the opportunity to submit their application materials to us quickly, easily, and securely.

    To the extent that the processing of the above data is carried out for the purpose of initiating contractual relationships, Article 6(1)(b) of the GDPR also serves as the legal basis.
    c) The purpose of data processing is to streamline and expedite the application process. Please note that we process your personal data only for the purpose for which you provided it to us, unless we are legally obligated or authorized to use it in another manner.

  1. Retention of Documents
    The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. In the event that the application process leads to employment, an apprenticeship, an internship, or another form of employment relationship, the data will initially continue to be stored and transferred to the personnel file.
    Otherwise, the application process ends upon receipt of a rejection notice. In this case, the data will be deleted once the position has been filled. The data will not be deleted if further processing and storage of your personal data is necessary in individual cases to assert, exercise, or defend legal claims. In this case, we have a legitimate interest in the further processing and storage of your personal data. The legal basis is Article 6(1)(f) of the GDPR. Your personal data will not be deleted even if we are required by law to continue storing it. If we are unable to offer you a position, if you decline a job offer, or if you withdraw your application, we reserve the right to retain the data you have provided for up to 6 months from the end of the application process (rejection or withdrawal of the application) based on our legitimate interests (Art. 6(1)(f) GDPR). The data will then be deleted, and the physical application documents will be destroyed. The data is retained primarily for evidentiary purposes in the event of a legal dispute. If it is apparent that the data will be needed after the 6-month period has expired (e.g., due to an impending or pending legal dispute), the data will not be deleted until the purpose for continued retention no longer applies. Data may also be retained for a longer period if you have given your consent (Art. 6(1)(a) GDPR) to be included in the applicant pool or if statutory retention requirements prevent deletion.
  1. Inclusion in the Candidate Pool
    If we do not extend a job offer to you, there may be an opportunity to include you in our candidate pool. If you are accepted, all documents and information from your application will be added to the applicant pool so that we can contact you if suitable vacancies arise. Inclusion in the applicant pool is based solely on your explicit consent (Art. 6(1)(a) GDPR). Giving consent is voluntary and has no bearing on the ongoing application process. You may also revoke this consent at any time. In this case, the data from the applicant pool will be permanently deleted, unless there are legal grounds for retaining it.
    The data from the applicant pool will be permanently deleted no later than one year after consent is granted.

 

XIII. Rights of Data Subjects

We are aware that you have certain rights regarding the processing of your data. This Privacy Policy is intended to inform you about the rights you have as a data subject and how you can exercise them.

  1. Right of Access (Art. 15 of the GDPR): You have the right to request information from us regarding what personal data we process about you and for what purpose. If you submit a request for information that is not made in writing via a contact address already on file in our systems, please understand that we may ask you to provide proof that you are the person you claim to be.
  2. Right to Rectification (Art. 16 of the GDPR): You have the right to have any inaccurate or incomplete personal data that we have stored about you corrected.
  3. Right to Erasure (Art. 17 of the GDPR): You have the right to request that we erase your personal data if it is no longer needed or if its processing violates data protection regulations.
  4. Right to Restriction of Processing (Art. 18 of the GDPR): You have the right to request that the processing of your personal data be restricted if you contest the accuracy of the data, if the processing is unlawful, or if you have objected to the processing.
  5. Right to Data Portability (Art. 20 of the GDPR): You have the right to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format and to transmit it to another controller.
  6. Right to Object (Art. 21 of the GDPR): You have the right to object to the processing of your personal data if the processing is based on our legitimate interests or is carried out for direct marketing purposes.
  7. Right to Withdraw Consent Under Data Protection Law (Art. 7, para. 3 of the GDPR): You have the right to withdraw your consent under data protection law at any time. Withdrawal of consent does not affect the lawfulness of processing carried out on the basis of that consent prior to its withdrawal.
  8. Right to lodge a complaint with a supervisory authority: Without prejudice to any other administrative or judicial remedy, pursuant to Article 77 of the GDPR, you have the right to lodge a complaint with a supervisory authority—in particular in the Member State of your habitual residence, place of work, or the place where the alleged infringement occurred—if you believe that the processing of your personal data violates the GDPR.
    The supervisory authority to which the complaint was submitted shall inform the complainant of the status and outcome of the complaint, including the possibility of a judicial remedy under Article 78 of the GDPR.

XIIII. External Services

OneTap Accessibility Plugin

Description and Scope of Data Processing

We use the OneTap plugin on our website. It is a user-friendly accessibility plugin designed to improve the website’s usability for people with disabilities.

During use, technically necessary data (e.g., IP address, browser information, access data) may be processed.

OneTap is provided by Starship Media GmbH (Doktor-Koss-Straße 14, Office 5, 4600 Wels, Austria).

Website: https://de.wponetap.com, Privacy Policy: https://de.wponetap.com/Datenschutz/

Legal Basis for Data Processing

The legal basis for using the plugin to create an accessible website is Article 6(1)(f) of the GDPR (legitimate interest) and—to the extent that you have given us your consent—Article 6(1)(a) of the GDPR in conjunction with Section 25(1) of the TDDDG.

Purpose of Data Processing

We use OneTap to improve the accessibility and usability of our website and to help ensure compliance with legal and technical standards for accessible web content. This also constitutes our legitimate interest.

Duration of Storage

OneTap does not store or collect any personal user data; only data that is technically necessary is processed.