Data protection
Privacy policy
The following privacy policy applies to the use of our website at www.avs-aggregatebau.de.
We consider data protection to be extremely important. Your personal data is collected and processed in compliance with the applicable data protection regulations, in particular the General Data Protection Regulation (GDPR). We collect and process your personal data in order to be able to offer you the above-mentioned portal. This policy describes how and for what purposes we collect and use your data, and what options you have in connection with your personal data.
By using this website, you consent to the collection, use and transfer of your information in accordance with this privacy policy.
1 Data controller
The entity responsible for the collection, processing and use of your personal data within the meaning of Article 4(7) GDPR is
AVS Aggregatebau GmbH, Salemstraße 43, D-89584 Ehingen-Stetten, Tel.: +49 7393 9507 0, Fax: +49 7393 9507 40, Email: info@avs-aggregatebau.de
Should you object to the collection, processing or use of your data by us in accordance with these data protection provisions, as a whole or for any individual measures, you may address your objection to the data controller.
You can save and print this privacy policy at any time.
2 General use of the website
2.1 Hosting
We make use of hosting services to provide the following services: infrastructure and platform services; computing capacity, storage and database services; security services; as well as technical maintenance services that we use for the purpose of operating the website.
In this context, we or our hosting provider process inventory data, contact data, content data, contract data, usage data, as well as the meta and communication data of customers, interested parties and visitors of this website, based on our legitimate interest regarding the efficient and secure provision of this website, in accordance with Article 6 (1)(f) and Article 28 GDPR.
2.2 Access data
We collect information about you when you use this website. We automatically collect information about your usage behaviour and your interaction with us and record data about your computer or mobile device. We collect, store and use data every time our website is accessed (so-called server log files). These access data include:
- Name and URL of the accessed file
- Date and time of access
- Amount of data transferred
- Notification of successful access (HTTP response code)
- Browser type and browser version
- Operating system
- Referrer URL (i.e. the previously visited page)
- Websites accessed by the user’s system via our website
- The user’s internet service provider
- The IP address and the requesting provider
We use these log data, without allocating them to your person or creating any type of profile, in order to carry out statistical evaluations for the purpose of the operation, security and optimisation of our website; to anonymously record the number of visitors to our website (traffic), and the extent and type of use of our website and services; and for accounting purposes, in order to measure the number of clicks received by our partners. This information enables us to provide personalised and location-based content, to analyse traffic, to detect and correct errors, and to improve our services.
This is also our legitimate interest pursuant to Article 6(1)(f) GDPR.
We reserve the right to subsequently check the log data if, based on concrete evidence, there is a justified suspicion of unlawful use. We store IP addresses in the log files for a limited period of time if this is necessary for security purposes or for the provision or billing of a service, e.g. if you use one of our offers. After an order process has been cancelled or payment has been received, we will delete the IP address if it is no longer required for security purposes. We also store IP addresses if we have reason to suspect that a criminal offence has been committed in connection with the use of our website.
As part of your account, we also store the date of your last visit (e.g. when you register, login, click on links, etc.).
2.3 Cookies
We use so-called session cookies to optimise our website. A session cookie is a small text file that is sent by the respective server when you visit a website, and which is temporarily stored on your hard drive. Session cookies store a session ID, which makes it possible to track the various requests made by your browser during the joint session. This allows your computer to be recognised when you return to the site. These cookies are deleted after you close your browser. They are used, for example, to enable you to use the shopping basket function across several pages of our website.
To a small extent, we also use persistent cookies, which are small text files that are stored on your device and enable us to recognise your browser the next time you visit our website. These cookies are stored on your hard drive and will be deleted automatically after the specified time has elapsed. Their life span is between 1 month and 10 years. These cookies enable us to present our services in a more user-friendly, effective and secure manner and, for example, to display information on the site that is specifically tailored to your interests.
Our legitimate interest to use cookies, in accordance with Article 6(1)(f) GDPR, is to make our website more user-friendly, effective and secure.
These cookies store the following data and information:
– Log-in-information
– Language settings
– Search terms entered
– Information on the number of times our website is called up and the individual functions of our website are used.
When a cookie is activated, it is assigned an identification number, but your personal data will not be assigned to this identification number. Your name, IP address or similar data that would allow the cookie to be assigned to you will not be placed in the cookie. Cookies are used to provide us with pseudonymous information, for example, about the pages of our shop that users have visited, the products they viewed, etc.
You can set your browser so that you are informed in advance about the placement of cookies and can decide in each case whether you want to reject cookies in specific cases or generally, or whether you want to disable them altogether. Doing so may, however, restrict the functionality of the website.
2.4 Contact by email
If you contact us (e.g. via a contact form or email), we will save your details for the purpose of processing your enquiry and in the event that any follow-up questions arise.
This is also our legitimate interest pursuant to Article 6(1)(f) GDPR.
We only store and use other personal data if you give your consent, or if we are legally permitted to do so without any special consent.
2.5 Google Analytics
We use Google Analytics, a web analytics service provided by Google Inc. (“Google”). Google is subject to and certified under the Privacy Shield Agreement between the European Union and the USA. Google thereby undertakes to comply with the standards and provisions of European data protection law. For more information, please refer to the following link: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active.
Google Analytics uses “cookies”, which are text files that are placed on your computer in order to analyse your use of our website. The information the cookie generates about your use of this website is generally transmitted to and stored on a Google server in the USA.
This is also our legitimate interest pursuant to Article 6(1)(f) GDPR.
However, if IP anonymisation is activated on this website, Google will first shorten your IP address in a member state of the European Union or in other states that are parties to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there. IP anonymisation is active on this website. Google will use this information on our behalf to evaluate your use of the website, to compile reports on website activities and to provide us with additional services related to website and internet use.
The IP address provided by your browser in the framework of Google Analytics will not be combined with other data from Google. You may refuse the use of cookies by selecting the appropriate settings on your browser. However, please note that doing so may prevent you from using the full functionality of this website.
You can also prevent the transfer of any data generated by the cookie relating to your use of the website (including your IP address) to Google, as well as the processing of such data by Google, by downloading and installing the browser plug-in available under the following link: http://tools.google.com/dlpage/gaoptout?
As an alternative to the browser plug-in, or on mobile browsers, you can set an opt-out cookie by clicking on the following link, which will prevent Google Analytics from collecting data within this website in the future (this opt-out cookie will only work in this browser and for this domain; if you delete the cookies in your browser, you will have to click on this link again): disable Google Analytics
2.6 Google Fonts
We use “Google Fonts”, which are provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Privacy policy: https://www.google.com/policies/privacy/, opt-out: https://adssettings.google.com/authenticated.”
2.7 Google Maps
We use maps from the “Google Maps” service. This is operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Users’ location data and IP addresses may be included in the processed data, but they are not collected without your consent. As a rule, consent is given in the context of your mobile device settings. This data may be processed in the USA.
Privacy policy: https://www.google.com/policies/privacy/, opt-out: https://adssettings.google.com/authenticated.”
2.8 Facebook
The AVS website uses social plug-ins (“plug-ins”) from the social networking site Facebook.com, which is operated by Facebook Inc, Palo Alto, USA (“Facebook”). The plug-ins are marked with the Facebook logo or the addition of the words “Facebook”, “Like” or “Share”.
If you call up a page on our website that contains any such plug-ins, they will initially not be active. The plug-ins will only be activated if you click on the respective buttons. By activating them, you establish a connection to Facebook and declare your consent to the transmission of data to Facebook. If you are logged in to Facebook, Facebook will be able to link your visit to your Facebook account. If you click on the respective button, that information will be transmitted from your browser directly to Facebook and will be stored by Facebook.
For the purpose and scope of such data collection, the further processing and use of your data by Facebook, as well as your rights in this regard and the settings options for protecting your privacy, please refer to Facebook’s data protection information.
If you do not want Facebook to link the data collected via our website to your Facebook account, you must log out of Facebook before visiting our website.
2.9 YouTube
The AVS website uses the YouTube video platform, which is operated by YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. YouTube is a platform that enables the playback of audio and video files.
When you call up our website, the integrated YouTube player will establish a connection to YouTube to ensure the technical transmission of the video or audio file. When the connection to YouTube is being established, data will be transferred to YouTube.
For the purpose and scope of such data collection, the further processing and use of your data by YouTube, as well as your rights and the settings options for protecting your privacy, please refer to YouTube’s data protection information.
2.10 Instagram
The AVS website uses social plug-ins (“plug-ins”) from the social networking site Instagram.com, which is operated by Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA (“Instagram”). The plug-ins are marked with an Instagram logo or the addition of the word “Instagram”.
If you call up a page on our website that contains any such plug-ins, they will initially not be active. The plug-ins will only be activated if you click on the respective buttons. By activating them, you establish a connection to Instagram and declare your consent to the transmission of data to Instagram. If you are logged in to Instagram, Instagram will be able to link your visit to your Instagram account. If you click on the respective button, that information will be transmitted from your browser directly to Instagram and will be stored by Instagram.
For the purpose and scope of such data collection, the further processing and use of your data by Instagram, as well as your rights and the settings options for protecting your privacy, please refer to Instagram’s data protection information.
2.11 Storage period
Unless specifically stated, we only store personal data for as long as necessary to carry out the intended purposes.
3 Processing of inventory data
We also process the inventory data described below.
3.1 Product recommendations
We will send you product recommendations by email on an irregular basis. This allows us to send you information about products from our range which you might find interesting based on your previous purchases from us. We act strictly in accordance with statutory requirements. You can object to this at any time without incurring any costs other than the transmission costs according to the basic tariffs. A written notice to us using the contact information listed under section 1 (e.g. email, fax, letter) is sufficient for this purpose. Of course, each email also contains an unsubscribe link.
3.2 Legal basis and storage period
The legal basis for data processing in accordance with the preceding paragraphs is Article 6(1)(a), (b) and (f) GDPR. In particular, we process data for the purpose of initiating, concluding and fulfilling contracts, as well as for direct advertising and product information purposes.
Unless specifically stated, we only store personal data for as long as necessary to carry out the intended purposes, or as required by law.
4 Your rights as a data subject
Under the applicable laws, you have various rights regarding your personal data. If you wish to assert these rights, please send your request by email or by post to the address specified in section 1, clearly identifying yourself.
Below you will find an overview of your rights.
4.1 The right to confirmation and information
You have the right to obtain confirmation from us at any time as to whether any personal data concerning you is being processed. Should this be the case, you have the right to request from us, free of charge, information about the personal data stored about you, together with a copy of this data. Furthermore, you have the right to the following information:
1. the purposes of the processing;
2. the categories of personal data being processed;
3. the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular in the case of recipients in third countries or international organisations;
4. if possible, the envisaged duration for which the personal data will be kept or, failing that, the criteria for determining that duration;
5. the existence of your right to have your personal data rectified or erased, or to limit the processing carried out by the data controller, or to object to any such processing;
6. the existence of your right to appeal to a supervisory authority;
7. if the personal data have not been collected from you, any available information on the origin of the data;
8. the existence of automated decision-making processes, including profiling in accordance with Articles 22(1) and (4) GDPR and, at least in such cases, meaningful information on the logic involved and the scope and intended impact of such processing on you.
If personal data are transferred to a third country or to an international organisation, you have the right to be informed of the appropriate guarantees pursuant to Article 46 GDPR in connection with the transfer.
4.2 Right to rectification
You have the right to request the rectification of your personal data without any undue delay. Taking into account the purposes of the processing, you have the right to request the completion of any incomplete personal data, including by means of a supplementary declaration.
4.3 Right to erasure (“right to be forgotten”)
In accordance with Article 17(1) GDPR, you have the right to demand that we delete your personal data without any undue delay, and we are obliged to delete personal data without undue delay if one of the following conditions is met:
1. Your personal data are no longer necessary for the purposes for which they were collected or otherwise processed.
2. You revoke your consent for the processing of your data pursuant to Article 6(1)(a) or Article 9(2)(a) GDPR, and there is no other legal basis for such processing.
3. You object to the processing of your data pursuant to Article 21(1) GDPR and there are no overriding legitimate reasons for such processing, or you object to the processing of your data pursuant to Article 21(2) GDPR.
4. Your personal data have been processed unlawfully.
5. The deletion of the personal data is necessary to comply with a legal obligation under applicable EU or national laws.
6. Your personal data have been collected in relation to information society services provided in accordance with Article 8(1) GDPR.
Should we have made your personal data public and are obliged to delete them pursuant to Article 17(1) GDPR, we shall take reasonable measures, including technical measures – while taking into account the available technology and the implementation costs – to inform the data controllers processing your personal data that you have requested that all links to your personal data, as well as any copies or replications of thereof, be deleted.
4.4 Right to restrict processing
You have the right to ask us to limit the processing of your personal data if one of the following conditions is met:
1. you dispute the accuracy of your personal data, for a period of time that allows us to verify the accuracy of the personal data;
2. the processing is unlawful, and you have objected to the deletion of your personal data and instead requested the limitation of the use of your personal data;
3. we no longer require your personal data for the purposes of processing, but you require that data in order to assert, exercise or defend any legal claims, or
4. you have objected to the processing of your personal data in accordance with Article 21(1) GDPR, until such time as it is established whether our company’s legitimate reasons outweigh yours.
4.5 Right to data portability
You have the right to receive any personal data that you have provided to us in a structured, common and machine-readable format, and you have the right to transfer these data to another data controller without any obstruction on our part, provided that
1. the processing is based on consent in accordance with Article 6(1)(a) or Article 9(2)(a) GDPR, or on a contract in accordance with Article 6(1)(b) GDPR and
2. the processing is carried out using automated procedures.
In exercising your right to data portability pursuant to paragraph 1, you have the right to have your personal data transmitted directly from us to another data controller, provided that this is technically feasible.
4.6 Right to object
You have the right to object, at any time, for reasons arising from your particular situation, to the processing of your personal data on the basis of Article 6(1)(e) or (f) GDPR; this also applies to any profiling based on these provisions. We will no longer process your personal data unless we can prove compelling legitimate reasons for the processing, which outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
Where personal data are processed by us for the purpose of direct marketing, you have the right to object at any time to the processing of your personal data for the purpose of such marketing; this also including profiling, insofar as it relates to such direct marketing activities.
You have the right to object, for reasons arising from your specific situation, to the processing of your personal data for purposes of scientific or historical research or for statistical purposes, in accordance with Article 89(1) GDPR, unless such processing is necessary for the performance of a task that is in the public interest.
4.7 Automated decisions including profiling
You have the right not to be subjected to a decision based solely on automated processing – including profiling – that has legal bearing on you or that significantly affects you in a similar manner.
No automated decisions will be made on the basis of the personal data that we collect.
4.8 Right to revoke consent
You have the right to revoke your consent to the processing of personal data at any time.
4.9 Right to file a legal complaint with a supervisory authority
You have the right to file a complaint with a supervisory authority, in particular in the Member State where you live, work or where the alleged violation took place, if you believe that the processing of your personal data is unlawful.
The State Commissioner for Data Protection Baden-Württemberg, Stefan Brink, Königsstraße 10a, D-70173 Stuttgart, Tel.: +49 711 615541 0, Fax: +49 711 6155 4115, Email: poststelle@lfd.bwl.de
5 Data security
We make every effort to ensure the security of your data in accordance with the applicable data protection laws and the technical possibilities at our disposal.
Your personal data will be transmitted in encrypted form. This applies both to your orders and to your customer login. We use the SSL (Secure Socket Layer) encryption protocol. However, we would like to point out that any data transmission on the internet (e.g. when communicating by email) may be subject to security gaps. No complete protection of data against access by third parties is possible.
To protect your data, we maintain technical and organisational security measures in accordance with Article 32 GDPR, which we continually adapt to reflect the latest technological developments.
We also do not guarantee that our website will be available at specific times; disturbances, interruptions or failures cannot be excluded. We regularly and carefully secure the servers we use.
6 Disclosure of data to third parties, no data transfer to non-EU countries
In principle, we only use your personal data inside our company.
Should we involve third parties in the fulfilment of contracts (such as logistics service providers), these third parties will only receive personal data to the extent necessary to perform the corresponding service.
In the event that we outsource certain parts of data processing (“contract processing”), we contractually oblige the processors we contract to use personal data only in accordance with the requirements of the applicable data protection laws, and to ensure the protection of the rights of the data subject.
No data will be transferred to bodies or persons outside the EU beyond the cases mentioned in clause 2 of this policy, and no such transfer is planned.
7 Data Protection Officer
If you have any questions or concerns about data protection, please contact our Data Protection Officer:
Christine Geppert, AVS Aggregatebau GmbH, Salemstraße 43,
D-89584 Ehingen-Stetten, Tel.: +49 7393 9507 245, Fax: +49 7393 9507 40, Email: datenschutz@avs-aggregatebau.de