Privacy Notes
Data protection
The use of our website is generally possible without providing personal data. Insofar as personal data (e.g. name or e-mail addresses) is collected on our website, this is always done on a voluntary basis as far as possible. This data will not be passed on to third parties without your express consent.
We would like to point out that data transmission over the Internet (e.g. when communicating by e-mail) may be subject to security vulnerabilities. Complete protection of data against access by third parties is not possible.
We hereby expressly prohibit the use of contact data published within the scope of the imprint obligation by third parties for sending unsolicited advertising and information material. The operators of this website expressly reserve the right to take legal action in the event of the unsolicited sending of advertising information, such as spam e-mails.
Privacy Policy
Nadine Kerastas (hereinafter “NADINE” or “we”) takes the protection of your data very seriously and maintains the website www.kerastas.net in accordance with the applicable data protection legislation, including the provisions of the EU General Data Protection Regulation (hereinafter: GDPR). Below we inform you about the type and scope of the processing of your personal data by NADINE.
The controller is NADINE, which operates the website for the area in which the service is provided. This website is primarily aimed at recipients outside the European Economic Area.
If you have any further questions that are not answered by the data protection declaration, you can contact our data protection officer as follows
Nadine Kerastas
c/o Adressgeber #1312
An der Alten Ziegelei 38
48157 Münster
Germany
E-Mail: contact@kerastas.net
The lead supervisory authority for NADINE is
Denis Lehmkemper
The State Commissioner for Data Protection of Lower Saxony (Der Landesbeauftragte für den Datenschutz Niedersachsen)
Prinzenstrasse 5
30159 Hanover
poststelle@lfd.niedersachsen.de
TELEPHONE: +49 (0) 511 – 120-4500
FAX: +49 (0) 511 – 120-4599
1. data processing when accessing our website
NADINE operates the kerastas.net website.
When you visit our website, various information, such as your IP address, is automatically sent to our server and temporarily stored by us. The legal basis is Art. 6 para. 1 lit. f) GDPR. The legitimate interest arises from the purposes of
Optimization of the connection setup,
Ensuring and optimizing the user-friendliness and handling of our website, ensuring system security and stability and for security/prosecution in the event of a cyber attack.
Further information about data processing on our website can be found in the document COOKIES, WEB ANALYSIS SERVICES AND SOCIAL MEDIA (https://www.kerastas.net/cookies/).
You can access the cookie settings here: Privacy Settings
2. data processing during registration
It is possible to register as an interested party for our newsletter. The legal basis is Art. 6 para. 1 lit. b), f) GDPR.
3. data processing on the occasion of newsletter registration
Data processing in the context of a newsletter registration serves to be able to handle all processes within the inquiries. The legal basis is Art. 6 para. 1 lit. b) or f) GDPR. Your e-mail address will be used to communicate electronically about your order and its processing in accordance with Art. 6 para. 1 lit. c) GDPR. In order to fulfill the contractual obligations, the request/order data will be transmitted to the upstream supplier and, if applicable, to its transport person who will provide the booked services, and the data will be used for this purpose. Furthermore, we may also transmit the e-mail address and, if applicable, the name provided to the pre-supplier and its carrier in order to organize the delivery. In addition, information and usage data provided to us may be passed on to third parties if this appears necessary to process the request (e.g. unsubscribing from the newsletter).
4. further data processing
We also collect and store data that you explicitly provide to us yourself, e.g. during individual customer contact by e-mail, telephone or other means (e.g. via live chat, feedback form, etc.). The data required for collection will be communicated to you prior to the respective process if this does not result from the process itself. Furthermore, data such as the IP address, date or time may also be collected. If third-party communication software is used, the third-party providers may process usage data and metadata for security purposes, service optimization or marketing purposes. Therefore, please note the data protection information of the respective third-party providers.
Furthermore, usage data is collected that you leave behind when using the website (e.g. search queries carried out). Usage data may contain personal or company-related data or allow conclusions to be drawn about them. The usage data is automatically stored in server log files. These are used to make the handling of the platform functions more attractive and to ensure and improve their performance. This constitutes a legitimate interest for us pursuant to Art. 6 para. 1 lit. f) GDPR.
5 Data processing for advertising purposes and newsletters
Data processing for advertising purposes generally constitutes a legitimate interest for NADINE pursuant to Art. 6 para. 1 lit. f) GDPR. If you have registered yourself, we can process your contact data and inform you about products and services as well as relevant news or invitations to surveys independently of the newsletter subscription.
You have the right to object to data processing for advertising purposes at any time and free of charge, either as a whole or separately for the respective communication channel with effect for the future. As a result of the objection, the contact address concerned will be blocked for further advertising data processing in its entirety or for the respective communication channel. You can submit your objection via the unsubscribe link (at the end of an advertising email), by email or by post to the contact details provided.
Furthermore, we send an e-mail newsletter after prior registration (consent pursuant to Art. 6 para. 1 lit. a) GDPR). In the newsletter you will receive, for example, information about new products/articles and/or products/articles that are of interest to you, information about NADINE and its partners, live chats and events. We use it for our own advertising purposes. Subscription to the newsletter takes place using the so-called single opt-in procedure. We log the receipt of the newsletter order. Consent to receive the newsletter can be revoked at any time. The unsubscribe link can be found at the end of every email.
Tracking is used both for the newsletter and for advertising emails to measure success and thus improve our newsletter. This allows us to analyze the usage behavior of the e-mail. It is not our intention to analyze the usage behavior of an individual.
Further information, in particular on online marketing, can be found in the document COOKIES, WEB ANALYSIS SERVICES AND SOCIAL MEDIA.
6. transfer of data to third parties
NADINE sometimes uses third parties, such as processors, to process your data. Such third parties are selected carefully. In particular, affiliated companies of NADINE process your data together with NADINE or on behalf of NADINE. If the transfer is for administrative purposes, the transfer of the data is based on our legitimate business and economic interests in accordance with Art. 6 para. 1 lit. f) GDPR.
7 Third party websites
NADINE has no influence on the current content of third-party websites that are accessible via the platform and the way in which these websites are operated. NADINE is not responsible for data protection and is not responsible for the content of these external websites. NADINE is only responsible for its own content on these external websites.
8. recipients outside the EU
We store your data at NADINE within the European Union (Germany).
With the exception of the data processing mentioned in the data protection declaration or in the document COOKIES, WEB ANALYSIS SERVICES AND SOCIAL MEDIA, we will generally not transfer any data outside the EU.
9. deletion of personal data
Data that we store will be blocked for further use when the corresponding authorization ceases to apply, in particular after the purpose has been achieved, and deleted after expiry of the tax and commercial law or other statutory retention periods, unless you have expressly consented to the further use of your data or something else has been contractually agreed.
10 Data security
We take necessary and appropriate technical and organizational measures (TOM) to ensure an adequate level of protection. In doing so, we take into account the state of the art, the implementation costs and the nature, scope, circumstances and purposes of the processing as well as the different probabilities of occurrence and the extent of the risks to the rights and freedoms of data subjects.
For your security, your data is encrypted using an SSL (Secure Sockets Layer) website certificate.
11 Rights of the data subject
Right to information: You can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the origin of your data if it was not collected directly from you.
Right to rectification: You can request the rectification of inaccurate data or the completion of correct data.
Right to erasure and restriction: You can request the erasure of your personal data or alternatively request the restriction of processing in accordance with the legal requirements.
Right to data portability: You can have the data you have provided transferred to you in a commonly used, machine-readable format or request that it be transferred to another controller.
Right to lodge a complaint: To do so, you can contact the supervisory authority of your usual place of residence or our competent supervisory authority.
Right to object: You can object to all processing purposes described here that are processed on the legal basis of Article 6(1)(f) GDPR. Unlike the data processing described under “Data processing for advertising purposes”, we are only obliged to implement the objection if you state reasons of overriding importance arising from a particular situation.
To assert your rights, please contact gdpr@kerastas.net
12. changes to this declaration
If changes make it necessary to amend the privacy policy, we will amend the privacy policy.
Status: 26.04.2024
Information in accordance with the EU General Data Protection Regulation (GDPR)
In order to comply with our data protection obligations, we hereby provide you with the necessary information in accordance with Article 13 of the European General Data Protection Regulation (GDPR).
The controller responsible for processing your personal data is
Nadine Kerastas
c/o Adressgeber #1312
An der Alten Ziegelei 38
48157 Münster
E-Mail: contact@kerastas.net
Germany
The data protection officer is:
Title First name Last name
Nadine Kerastas
c/o Adressgeber #1312
An der Alten Ziegelei 38
48157 Münster
E-Mail: contact@kerastas.net
Germany
Information for:
CUSTOMERS:
The personal data transmitted by you will be used to provide the service offered in accordance with Art. 6 para. 1 U para. 1 lit. B) GDPR, § 57 para. 1 StBerG and § 57 para. 2 StBerG processed and used. The provision of your personal data is necessary for the provision of the service. If you do not provide it, we will unfortunately not be able to provide a service. Automated decision-making is not carried out.
Your personal data will not be passed on to external third parties. If operationally necessary, external service providers are integrated as processors (Art. 28 GDPR) in compliance with data protection regulations.
A transfer to a third country or an international organization of the personal data provided by you does not take place and is not planned.
Your data will be stored by us for the duration of the contractual relationship and beyond that until the statutory retention period ends.
In accordance with Art. 15 GDPR, you have a right to information about the processing of your personal data.
In addition, you are free to exercise your rights to rectification, erasure or, if erasure is not possible, to restriction of processing and to data portability in accordance with Articles 16-18 and 20 GDPR. If you wish to exercise this right, please contact our data protection officer.
You also have the right to lodge a complaint with the competent supervisory authority at any time. If you are of the opinion that your personal data is not being processed in compliance with data protection laws, we would kindly ask you to contact our data protection officer.
Furthermore, pursuant to Art. 13 para. 2 lit. B) GDPR, you have the right to object to the processing of your personal data at any time.
INTERESTED PARTIES
The personal data transmitted by you will be used to provide the service offered in accordance with Art. 6 para. 1 U para. 1 lit. B) GDPR collected, processed and used. The provision of your personal data is necessary for the performance of the contract. If you do not provide it, we will unfortunately not be able to conclude the contractual relationship. Automated decision-making is not carried out.
Your personal data will not be passed on to external third parties. If operationally necessary, external service providers are involved as processors (Art. 28 GDPR) in compliance with data protection regulations.
A transfer to a third country or an international organization of the personal data provided by you does not take place and is not planned.
Your data will be stored by us for the duration of the offer or contractual relationship and beyond that until the statutory retention period ends.
In accordance with Art. 15 GDPR, you have a right to information about the processing of your personal data. In addition, you are free to assert your rights to rectification, erasure or, if erasure is not possible, to restriction of processing and to data portability in accordance with Articles 16-18 and 20 GDPR. If you wish to exercise this right, please contact our data protection officer.
You also have the right to lodge a complaint with the competent supervisory authority at any time. If you are of the opinion that your personal data is not being processed in compliance with data protection laws, we would kindly ask you to contact our data protection officer.
Furthermore, pursuant to Art. 13 para. 2 lit. B) GDPR, you have the right to object to the processing of your personal data at any time.
APPLICANT:
The personal data you provide will be collected, processed and used for the purpose of deciding on the establishment of an employment relationship in accordance with Art. 88 (1) GDPR in conjunction with Section 26 (1) of the Federal Data Protection Act. The provision of your personal data is necessary for the handling of the application process and for the decision on the establishment of an employment relationship. If you do not provide your personal data, we will unfortunately not be able to consider you for the advertised position. Automated decision-making is not carried out.
Your personal data will not be passed on to external third parties. If operationally necessary, external service providers are involved as processors (Art. 28 GDPR) in compliance with data protection regulations.
To assess your documents, they will be forwarded to the responsible contact person in the relevant department for which the application is intended.
A transfer to a third country or an international organization of the personal data provided by you does not take place and is not planned.
Your application documents will be stored by us for the duration of the application process and kept for a further 3 months so that we can answer any questions you may have. After this period, the documents will be deleted. Documents sent by post will be returned or destroyed at the end of the 3-month period. Audit-proof e-mail archiving is not used.
We will only store your data until you withdraw your express written consent so that we can contact you in the future about job vacancies within our company that may be of interest to you.
In accordance with Art. 15 GDPR, you have a right to information about the processing of your personal data. In addition, you are free to assert your rights to rectification, erasure or, if erasure is not possible, to restriction of processing and to data portability in accordance with Articles 16-18 and 20 GDPR. If you wish to exercise this right, please contact our data protection officer.
You also have the right to lodge a complaint with the competent supervisory authority at any time. If you are of the opinion that your personal data is not being processed in compliance with data protection laws, we would kindly ask you to contact our data protection officer.
Furthermore, you have the right to object to the processing of your personal data at any time in accordance with Art. 13 para. 2 lit. b) GDPR.
VISITORS:
The personal data you provide will be collected, processed and used for the purpose of recording data in our visitor list and information required for operational purposes in accordance with Art. 6 para. 1 U para. 1 lit. f) GDPR. The provision of your personal data is necessary for operational reasons. If you do not provide your data, you may not enter our company premises or buildings. Automated decision-making is not carried out.
Your personal data will not be passed on to external third parties. If operationally necessary, external service providers are integrated as processors (Art. 28 GDPR) in compliance with data protection regulations.
A transfer to a third country or an international organization of the personal data provided by you does not take place and is not planned.
Your data will be stored by us for the duration of our operational requirements.
In accordance with Art. 15 GDPR, you have a right to information about the processing of your personal data.
In addition, you are free to assert your rights to rectification, erasure or, if erasure is not possible, to restriction of processing and to data portability in accordance with Articles 16-18 and 20 GDPR. If you wish to exercise this right, please contact our data protection officer.
You also have the right to lodge a complaint with the competent supervisory authority at any time. If you are of the opinion that your personal data is not being processed in compliance with data protection laws, we would kindly ask you to contact our data protection officer.
Furthermore, you have the right to object to the processing of your personal data at any time in accordance with Art. 13 para. 2 lit. b) GDPR.
EMPLOYEE:
The personal data you provide will be collected and processed for the purpose of implementing and terminating the employment relationship in accordance with Art. 88 (1) GDPR in conjunction with Section 26 (1) sentence 1 of the German Federal Data Protection Act (BDSG). The provision of your personal data is necessary for the employment in our company and the execution of the employment relationship. If you do not provide it, we will unfortunately not be able to employ you in our company. Automated decision-making is not carried out.
Your personal data will be passed on to the respective health insurance company, the tax office and other authorities which require data within the scope of the employment relationship due to a legal obligation, as well as to external business partners, insofar as this is necessary for the execution of the employment relationship, initiation or fulfillment of contracts or is in the legitimate interest of the person responsible.
Your personal data will not be passed on to external third parties. If operationally necessary, external service providers are integrated as processors (Art. 28 GDPR) in compliance with data protection regulations.
A transfer to a third country or an international organization of the personal data provided by you does not take place and is not planned.
Your data will be stored by us for the duration of the employment relationship and beyond that for the duration of the statutory retention period. After this period has expired, the documents will be deleted or destroyed in accordance with data protection regulations.
In accordance with Art. 15 GDPR, you have a right to information about the processing of your personal data.
In addition, you are free to assert your rights to rectification, erasure or, if erasure is not possible, to restriction of processing and to data portability in accordance with Articles 16-18 and 20 GDPR. If you wish to exercise this right, please contact our data protection officer.
You also have the right to lodge a complaint with the competent supervisory authority at any time. If you are of the opinion that your personal data is not being processed in compliance with data protection laws, we would kindly ask you to contact our data protection officer.
Furthermore, you have the right to object to the processing of your personal data at any time in accordance with Art. 13 para. 2 lit. b) GDPR.
Service providers/suppliers
The personal data you provide will be collected, processed and used for the purpose of providing the service offered in accordance with Art. 6 para. 1 U para. 1 lit. b) GDPR. The provision of your personal data is necessary for the performance of the contract. If you do not provide it, we will unfortunately not be able to conclude the contractual relationship. Automated decision-making is not carried out.
Your personal data will not be passed on to external third parties. If operationally necessary, external service providers are involved as processors (Art. 28 GDPR) in compliance with data protection regulations.
A transfer to a third country or an international organization of the personal data provided by you does not take place and is not planned.
Your data will be stored by us for the duration of the contractual relationship and beyond that until the statutory retention period ends.
In accordance with Art. 15 GDPR, you have a right to information about the processing of your personal data.
In addition, you are free to exercise your rights to rectification, erasure or, if erasure is not possible, to restriction of processing and to data portability in accordance with Articles 16-18 and 20 GDPR. If you wish to exercise this right, please contact our data protection officer.
You also have the right to lodge a complaint with the competent supervisory authority at any time. If you are of the opinion that your personal data is not being processed in compliance with data protection laws, we would kindly ask you to contact our data protection officer.
Furthermore, you have the right to object to the processing of your personal data at any time in accordance with Art. 13 para. 2 lit. b) GDPR.
Status: 26.04.2024
