1. General

The following information gives an overview of what happens with your personal data when you visit our website. Personal data are all data that can be used to identify you personally. For more information on data protection see our privacy statement below. 

Date acquisition on our website

Who is responsible for data acquisition on this website? 

Data processing on this website is done by the website operator. Its contact details can be gathered from the legal notice above. 

How are data collected by us?

What are your data used for?

Part of the data is collected to ensure an error-free provision of the website. Other data can be used to analyse the user behaviour.   

What rights do you have concerning your data?

You have the right at any time to obtain free information on the origin, recipient and purpose of your personal data stored. You also have the right to request the rectification, blocking or erasure of such data. On this and other issues of data protection you can contact us at any time under the address given in the legal notice. In addition, you have the right to complain with the competent supervisory authority. 

Under certain circumstances you may also request the limiting of the processing of your personal data. For more details see the privacy statement under "Right to limiting the processing".  

Analysis tools and tools of third-party providers

We do not use any third-party analysis tools on our website.

2. General information and mandatory information

Data protection

The operators of these websites take the protection of your personal data very seriously. Personal data are treated confidentially and in accordance with the statutory data protection regulations and this privacy statement.   

When you use this website, certain personal data are collected. Personal data are data by which you can be identified personally. This privacy statement explains which data are collected and what we use them for. It also explains how and for what purpose we do it.

Please be aware that there may be security gaps when data are transmitted on the Internet (e.g. communication by e-mail). A complete protection of data against unauthorized access is not possible.     

Note on responsible body

The responsible body for data processing on this website: 

CDA GmbH
Am Mittelrain 11
98529 Suhl

Represented by André Keller

Phone: +49 (0) 3681 387 0
E-Mail: sales@cda.de

The responsible body is the natural person or legal entity taking decisions either solely or together with other on the purposes and ways of processing personal data (e.g. names, email addresses etc.). 


Revocation of consent to data processing

Many data processing operations require your express consent. A consent may be withdrawn at any time. To this end it is sufficient to send us an informal email.  The lawfulness of the data processing done until revocation shall remain unaffected by the revocation.  


Right to object the data collection in special cases and direct marketing (Art. 21 GDPR)

Where personal data are processed based on Art. 6 para. 1 sub-para. e or f GDPR, you shall have the right on grounds relating to your particular situation to object such processing including profiling based on those provisions. The relevant legal basis of processing can be gathered from the privacy statement. If you object, we will abstain from processing your relevant personal data unless we can demonstrate compelling legitimate grounds for processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims (objection purs. to Art. 21 para. 1 GDPR).

Where personal data are processed for direct marketing purposes, you shall have the right to object at any time the processing of personal data for such marketing which includes profiling to the extent that it is related to such direct marketing. If you object, your personal data will then no longer be processed for such purposes (objection purs. to Art. 21 para. 2 GDPR).


Right of complaint with the supervisory authority 

In case of breach of the GDPR the party affected has the right to lodge a complaint with a supervisory authority in particular in the member state of its habitual residence, place of work or place of the alleged breach. The right to complain exists without prejudice to other administrative or judicial remedies.  


Right to data portability

You have the right to have data which we process automatically based on your consent or in performing a contract transmitted to yourself or a third party in a machine-readable form.  If you request a direct transmission to another controller, it will be done as far as technically feasible only.


SSL or TLS encryption

Information, blocking, erasure and rectification

Right to limiting the processing

3. Data protection officer

Legally required data protection officer

We have appointed a data protection officer for this company. 

CDA GmbH
Lars Nickel
Am Mittelrain 11
98529 Suhl

Phone: +49 (0) 3681 387 176
email: datenschutzbeauftragter@cda.de

4. Data acquisition on our website

Cookies

The websites use partially so-called cookies. The latter do not do any harm to your computer and do not contain viruses. Cookies make our offerings more user-friendly, effective and safer.  Cookies are small text files that are placed on your computer and stored by your browser.   

Most of the cookies used by us are so-called session cookies. They are deleted automatically at the end of your visit. Other cookies remain on your terminal until deleted by you. These cookies enable us to recognize your browser when you visit us again.  

You can adjust your browser so that you will be informed about the setting of cookies and whether to accept it or not., exclude the acceptance of cookies for certain cases or generally and activate the automatic deletion of cookies. The deactivation of cookies may limit the functionality of this website. 

Cookies necessary for electronic communication or provision of certain required functions (e.g. shopping cart) are stored based on Art. 6 para. 1 sub-para. f GDPR. The website operator has a legitimate interest in storing cookies for a technically error-free and optimized provision of its services. To the extent other cookies (e.g. for the analysis of your surfing behaviour) are stored they are treated separately in this privacy statement.


Server log files

The website provider collects and stores information automatically in so-called server log files that are automatically transmitted to us by your browser, which are:   

• Browser type and browser version
• Operating system used
• Referrer URL
• Host name of accessing computer
• Time of server request
• IP address

There is no merging of these data with other data sources. 

The data are collected based on Art. 6 para. 1 sub-para. f GDPR. The website operator has a legitimate interest in a technically error-free presentation and optimization of its website. The server log files must be acquired for this purpose.


Contact form

Inquiries by email, phone or telefax  

Should you contact us by email, phone or telefax, your inquiry including all resulting personal data (name, inquiry) are stored and processed by us in order to handle your request. The relevant data will not be disclosed without your consent. 

These data are processed based on Art. 6 para. 1 sub-para. b GDPR provided your inquiry is linked with the performance of a contract or required to take pre-contractual measures. In all other cases the processing is subject to your consent (Art. 6 para. 1 sub-para. a GDPR) and / or our legitimate interests (Art. 6 para. 1 sub-para. f GDPR), since we have a legitimate interest in the effective handling of the inquiry received.

The data sent by contact inquiry remain with us until you request the erasure of the same, withdraw your consent to storage or the purpose of data storage no longer applies (e.g. request has been dealt with). Mandatory statutory provisions – legal retention periods in particular – shall remain unaffected.   


5. Analysis tools and advertising

We do not use any third-party analysis tools on our website.

6. Plug-ins and tools

This site uses the Google Maps map service via an API. Provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

To use the Google Maps functions, it is necessary to store your IP address.  This information is usually transmitted to a Google server in the USA and stored there. The provider of this site has no influence on the data transmission.   

The use of Google Maps is in the interest of an attractive presentation of our online offerings and a fast retrieval of the places indicated on our website. It constitutes a legitimate interest as defined by Art. 6 para. 1 sub-para. f GDPR.

For more information on the handling of user data see the privacy statement of Google: https://policies.google.com/privacy?hl=de.

7. Our social media presence

Data processing by social networks

We maintain publicly available profiles in social networks. The individual social networks used by us are listed below. 

Social networks, such as Facebook, Google+ etc., can usually analyse the user behaviour in a comprehensive manner when you visit their website or a website with integrated social media content (e.g. like buttons or ad banners). The visit to our social media presence triggers a number of data protection related processes. Specifically:

When you are logged into your social media account and visit our social media presence the operator of the social media portal can assign the visit to your user account. Your persona data may also be acquired when you are not logged in or are not in the possession of an account with the relevant social media portal. In this case the data are acquired via cookies, for example, stored on your terminal or by acquiring your IP address. 

By using the data thus acquired the operators of the social media portals can create user profiles where the preferences and interests are stored. It is thus possible to provide interest-based advertising within or outside the relevant social media presence. If you are in the possession of an account of the relevant social network, the interest-based ads can be displayed on all devices you are or were logged in.

Please note that not all processing steps on social media portals can be tracked by us. Depending on the provider it is therefore possible that other processing steps can be carried out by the social media portal operators. For relevant details see the terms of use and data protection regulations of the social media portals concerned. 
 

Legal basis

Our social media presence shall provide an internet presence as comprehensive as possible. It is a legitimate interest as defined by Art. 6 para. 1 sub-para. f GDPR. The analytical processes initiated by the social networks may have a different legal basis which have to be indicated by the operators of the social networks (e.g. consent as defined by Art. 6 para. 1 sub-para. a GDPR).


Controller and enforcement of rights

When you visit a social media presence (e.g. Facebook) we and the operator of the social media platform are jointly responsible for the data processing triggered by this visit. You can assert your rights (information, rectification, erasure, limitation of processing, data portability and complaint) both towards us and the operator of the relevant social media portal (e.g. towards Facebook).   

Please note that despite the joint responsibility with the social media portal operators there is no full influence by our side on the data processing of the social media portals. The means at our disposal very much depend on the corporate policy of the relevant provider.  


Duration of storage

Social networks in detail

Facebook