We operate a website offering general information and the option of making contact with us. In doing so, we pay great attention to protecting your privacy. We explain below how we treat your personal data.
1. Responsible Party
The responsible party pursuant of data protection law is:
CNC Outlet Center GmbH
Gewerbering 6
82140 Olching
Germany
Telephone: +49 8142 4487200
E-Mail: info@cnc-outlet.de
represented by the Managing Directors, René Schmidt, Holger Kösler, Markus Braun
Company Register: Amtsgericht München HRB 202420
2. Collection and storage of personal data; types of data und purposes for which they are used
In compliance with the statutory provisions of the Federal Data
Protection Act (BDSG), the General Data Protection Regulation (GDPR) and
the German Teleservices Act (TMG), we only collect personal data where
this is permitted under law and where you share your personal data with
us voluntarily in the process of ordering goods, opening a customer
account or making contact in some other way. Without your explicit
consent we only use the data that you share with us to deal with your
enquiries, and to fulfil and handle your order.
We do not use customer data for advertising purposes unless you have
given us explicit consent to make such further use of your data.
a) When you visit our Website
When you visit our website, data are automatically sent to our website server by the browser you are using with your end device. These data are temporarily stored in what is known as a log file. The following data are collected without your involvement and are stored until they are automatically erased:
- IP address of the computer you are using
- date and time of your visit to the website
- name and URL of the file you have retrieved
- website from which you came to our website (referrer URL)
- your computer's browser type and, possibly, the operating system, as well as the name of your access provider
We process the above-mentioned data for the following purposes:
- to guarantee a smooth connection to our website
- to guarantee a smooth user experience when you visit our website
- to analyse system security and stability
- for other administrative purposes
b) When you use our newsletter
If you have subscribed to our newsletter, we store your e-mail address
pursuant to Art. 6 (1) a) GDPR. Your data are erased as soon as you
unsubscribe from our mailing list, save where we are required under law
to retain your data. You may unsubscribe at any time, for example by
using the link shown at the end of every newsletter. Alternatively, you
may unsubscribe at any time by sending an e-mail to info@cnc-outlet.de.
c) When you contact us by e-mail
If you send us an e-mail, we will store your e-mail address and other data that you have shared with us in your message, so that we can answer your enquiry pursuant to Art. 6 (1) a) GDPR. As soon as we no longer require these data to process your enquiry, we will erase them without undue delay, unless we are required by law to retain them. We ensure that collected data are protected against unauthorised disclosure to third parties using state-of-the-art technology. Please note, however, that unencrypted e-mails that are sent via the internet are not adequately protected from being read by unauthorised third parties.
d) When you use our contact form
When you have queries of any kind, we also offer you the opportunity
to communicate with us using a contact form on the website. When you use
this form, you are required to provide a valid e-mail address so that
we know who has sent us the query, and so that we can respond to it. Any
other information you share with us is on a voluntary basis.
Data processing for the purpose of making contact with us is pursuant to
Art. 6 (1) a) GDPR on the basis of your voluntary consent. The personal
data that we collect when you use the contact form are automatically
erased once your query has been resolved.
3. Transfer of data to third parties
Your personal data are not transferred to third parties except for the following purposes. We only transfer your personal data to third parties if:
- you have given us your explicit consent pursuant to Art. 6(1) a) GDPR
- such transfer is lawful and is necessary in order for us to perform our contract with you pursuant to Art. 6 (1) b) GDPR. Most notably, in this instance your address data will be shared with a mailing company contracted to effect delivery insofar as this is necessary for the delivery of the goods and in order to keep you informed about the delivery status of your package
- the transfer of your data is a statutory obligation pursuant to Art. 6 (1) c) GDPR.
4. Cookies
We use cookies on our website. These are small files that are
automatically created by your browser which are stored on your end
device (laptop, tablet, smartphone or similar) when you visit our
website. Cookies do not harm your end device and do not contain viruses,
trojans or other malware.
The cookie contains information related to the respective end device
being used. This information does not however allow us to identify you
directly.
The use of cookies allows us, on the one hand, to improve your user
experience on our website. We use what are known as session cookies, for
example, to identify the individual pages of our website that you have
already visited. These cookies are automatically deleted when you leave
our website.
We furthermore place temporary cookies to optimise user-friendliness.
These remain on your end device for a determined period. If you visit
our website again to make use of our services, we can automatically see
that you have visited us previously, and details of your input and
settings, so that you do not have to enter them again.
On the other hand, we also use cookies to statistically analyse usage of
our website and evaluate it for the purpose of optimising our service
to you (see 5. below). These cookies allow us to establish on a future
visit that you have already visited our website before. These cookies
are automatically deleted after a given specified period.
It is necessary for us to process the data generated by the cookies for
the specified purposes to pursue our legitimate interests and the
interests of third parties pursuant to Art. 6 (1) f) GDPR.
Most browsers automatically accept cookies. You may however configure
your browser so that no cookies are stored on your computer, or so that
you are always notified before a new cookies is stored. However, if you
deactivate cookies you may not be able to use all the functions of our
website.
5. Analysis Tools
We use the tracking measures set out below pursuant to Art. 6 (1) f)
GDPR. In applying these tracking measures we wish to ensure the
needs-appropriate design and ongoing optimisation of our website. We
also use tracking measures to statistically record website usage and
analyse it for the purpose of optimising our service to you. These
interests are legitimate pursuant to the above provision.
For details of the respective data processing purposes and data categories, please refer to the respective tracking tools.
6. Google Maps
This website uses Google Maps API in order to present geographical information. When you use Google Maps, Google collects, processes and uses data about how you have used the map functions. For more information about how Google processes data, please refer to Google’s privacy policy. You can also modify your personal privacy settings at Google’s Privacy Centre. Detailed instructions on managing your data with regard to Google products are available here: https://support.google.com/accounts/answer/3024190.
7. Social Media Plugins
We use social plugins provided by the social networks Facebook, Instagram and Xing pursuant to Art. 6 (1) f) GDPR in order to raise the profile of our company through these networks. The underlying advertising purpose is a legitimate interest in the sense of the GDPR. The respective providers are responsible for privacy-compliant operation. These plugins are integrated into our website using a two-click method to provide our website visitors with the best possible protection.
a) Facebook
Social media plugins from Facebook are used on our website to better
personalise their use. To this end we use the “LIKE” or “SHARE” buttons.
These are a service provided by Facebook.
When you visit one of our web pages containing this kind of plugin, your
browser will create a direct link with Facebook’s servers. The content
of the plugin is directly transmitted from Facebook to your browser and
integrated by Facebook into the web page.
By integrating the plugin, Facebook obtains the information that your
browser has retrieved the corresponding page of our website, even if you
do not have a Facebook account or are not logged in to Facebook at that
moment. These data (including your IP address) are directly transmitted
from your browser to a Facebook server in the USA and stored there.
If you are logged in to Facebook, Facebook can directly associate your
visit to our website with your Facebook account. When you interact with
plugins by, say, using the “LIKE” or “SHARE” buttons, that information
is also transmitted directly to a Facebook server and stored there. This
information is also published on Facebook and displayed to your
Facebook friends.
Facebook may use this information for the purposes of advertising,
market research and needs-appropriate design of Facebook pages. To this
end, Facebook usage, interest and relationship profiles are created, for
example to analyse your use of our website with regard to the ads you
are shown on Facebook, to inform other Facebook users about your
activities on our website, and to provide other services associated with
the use of Facebook.
If you do not wish Facebook to associate data that it collects when you
visit our website with your Facebook account, you must log out of
Facebook before you visit our website.
The purpose and scope of data collected and the further processing and
use of data by Facebook, as well as your rights in this connection and
settings options to protect your privacy are set out in Facebook’s
privacy policy: (https://www.facebook.com/about/privacy/).
b) Instagram
Our website also uses social plugins (“plugins”) from Instagram,
operated by Instagram LLC., 1601 Willow Road, Menlo Park, CA 94025, USA
(„Instagram“).
The plugins feature an Instagram logo in the form, say, of an “Instagram camera”.
When you visit one of our web pages containing this kind of plugin, your
browser will create a direct link with Instagram’s servers. The content
of the plugin is directly transmitted from Instagram to your browser
and integrated by Instagram into the web page. By integrating the
plugin, Instagram obtains the information that your browser has
retrieved the corresponding page of our website, even if you do not have
an Instagram account or are not logged in to Instagram at that moment.
These data (including your IP address) are directly transmitted from
your browser to an Instagram server in the USA and stored there. If you
are logged in to Instagram, Instagram can directly associate your visit
to our website with your Instagram account. When you interact with
plugins by, say, using the “Instagram” button, that information is also
transmitted directly to an Instagram server and stored there.
This information is also published on your Instagram account and displayed to your contacts there.
If you do not wish Instagram to associate the data collected when you
visit our website directly with your Instagram account, you must log out
of Instagram before visiting our website.
Further information is available in Instagram’s privacy policy (https://help.instagram.com/155833707900388).
c) Xing
The “XING Share button” is used on this website. When you visit our
website, a connection to the XING SE (“XING”) servers is temporarily
created allowing the XING Share button functions (and the
calculation/display of counters) to be provided. XING does not store
your personal data when you visit our website. Most notably, XING does
not store any IP addresses. Equally, your user behaviour is not analysed
via cookies when you use the XING Share button.
Current privacy information about the XING Share button and further details are available here: (https://www.xing.com/app/share?op=data_protection).
8. Embedded YouTube Videos
YouTube videos are embedded in parts of our website. The operator of
the corresponding plugins is YouTube, LLC, 901 Cherry Ave., San Bruno,
CA 94066, USA. If you visit a page containing the YouTube plugin, a
connection to YouTube’s servers is created, so that YouTube knows which
pages you have visited. If you are logged in to your YouTube account,
YouTube can associate your browsing behaviour with your personal
account. You can prevent this by logging out of your YouTube account
beforehand.
When you launch a YouTube video, the provider places a cookie that collects information about your user behaviour.
If you have deactivated cookies for the Google Ad programme, you will not receive any such cookies when you view YouTube videos.
However, YouTube stores non-personal usage information on other cookies.
If you wish to prevent this, you must block cookies in your browser.
Further information about privacy at YouTube is available in the
provider’s privacy policy at: (a
href="https://www.google.de/intl/de/policies/privacy/"
target="_blank">https://www.google.de/intl/de/policies/privacy/).
9. Your right as data subject
You have the right:
- pursuant to Art. 15 GDPR to request information as to whether or not we are processing personal data concerning you. You may, in particular, request information about the purposes of processing, the categories of personal data, the categories of recipients to whom your data have been or will be disclosed, the envisaged period for which the data will be stored, the existence of a right to rectification, to erasure, to the restriction of processing, or to object to processing, to lodge a complaint, to obtain information as to the source of your data where we did not collect them from you in person, and the existence of automated decision-making, including profiling and, where applicable, meaningful information about same;
- pursuant to Art. 16 GDPR to request the rectification or completion of any personal data we have stored about you, without undue delay;
- pursuant to Art. 17 GDPR to request the erasure of your personal data provided that their processing is not necessary to exercise the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise or defence of legal claims;
- pursuant to Art 18 GDPR to request the restriction of processing of your personal data where you contest the accuracy of the personal data, where processing is unlawful but you oppose the erasure of the personal data, and where we no longer need the personal data but you require them for the establishment, exercise or defence of legal claims, or where you have objected to processing pursuant to Art. 21 GPDR;
- pursuant to Art. 20 GDPR to request the personal data that you have provided to us in a structured, commonly used and machine-readable format or to request that those data be transmitted to another data controller;
- pursuant to Art. 7 (3) GDPR to withdraw the consent you have given to us at any time. As a consequence, we will not be permitted in future to continue processing your data on the basis of that consent; and
- pursuant to Art. 77 GDPR to lodge a complaint with a supervisory authority. As a rule, you may do so with the supervisory authority in your usual place of residence or place of work, or with our head office.
10. Right to object
You may object to the storage of your personal data at any time with future effect. You may do so by sending an e-mail to info@cnc-outlet.com. If your data have been stored for the purpose of contract performance, we will erase your data immediately after the contract has been fulfilled.
11. Data security
When you visit our website we deploy the widely-used SSL (secure
socket layer) procedure in conjunction with the highest available level
of encryption supported by your browser. As a rule, this is 256-bit
encryption. If your browser does not support 256-bit encryption, we use
128-bit v.3 technology instead. You can see whether individual pages of
our website are encrypted because a lock or key symbol will display in
your browser’s address bar.
We furthermore take suitable technical and organisational security
measures to protect your data against accidental or wilful manipulation,
against partial or complete loss, destruction or unauthorised access by
third parties. Our security measures are improved on an ongoing basis
in line with technological advances.
12. Questions about data protection
If you have any queries about data protection, please send us an e-mail or contact our Data Protection Officer directly:
Mr. Michael Voltz (Solicitor)
Antonienstraße 1
80802 Munich
Germany
E-Mail: datenschutz@cnc-outlet.de
13. Currentness and amendment of this Privacy Policy
This Privacy Policy is currently valid and was last updated in May 2018.
It may become necessary to amend this Privacy Policy owing to the
further development of our website and services or because of changes to
statutory or official requirements. You can read and print the
respective valid version of our Privacy Policy at any time on our
website at https://www.cnc-outlet.com/en/privacy.