Zásady ochrany osobních údajů

This application collects personal data from its users.

This document can be printed out for storage purposes using the "Print" command in the browser.

Karl Naumann GmbH
ST Bärenstein
Müglitztalstrasse 6
01773 Altenberg
E-mail address of the provider: [email protected]

Among the types of Personal Data that this Application collects, by itself or through third parties, there are First Name; Last Name; Phone Number; Email; Tracker; Usage Data.

Full details on each type of Personal Data processed are provided in the dedicated sections of this privacy policy or selectively through explanatory texts displayed prior to Data collection.
Personal Data may be freely provided by the User, or, in case of Usage Data, collected automatically when using this Application.

Unless otherwise specified, the provision of all Data requested by this Application is mandatory. If the User refuses to provide the Data, this Application may not be able to provide its services to the User. In cases where this Application expressly states that the provision of Personal Data is optional, Users may choose not to provide this Data without any consequences for the availability or functionality of the Service.
Users who are unclear about which personal data is mandatory can contact the provider.
Any use of Cookies - or of other tracking tools - by this Application or by the owners of third-party services used by this Application serves the purpose of providing the Service required by the User, in addition to any other purposes described in this document and in the Cookie Policy.

Users are responsible for any third-party Personal Data obtained, published or shared through this Application.

Processing methods
The provider processes the personal data of users in a proper manner and takes appropriate security measures to prevent unauthorized access and the unauthorized forwarding, modification or destruction of data.
Data processing is carried out using computers or IT-based systems in accordance with organizational procedures and practices that are specific to the purposes indicated. In addition to the Data Controller, other parties may operate this Application and have access to the Data, either internally (Human Resources, Sales, Marketing, Legal Department, System Administrators) or externally (such as providers of technical services, delivery companies, hosting providers, IT companies or communication agencies), appointed by the Data Controller as Data Processors where necessary. A current list of these parties can be requested from the provider at any time.

Location
The data is processed at the provider's premises and at all other locations where the parties involved in the data processing are located.

Depending on the location of the users, data transfers may involve the transfer of the user's data to a country other than their own. To find out more about the place of processing of the transferred data, users can consult the section with detailed information on the processing of personal data.

Storage period
Unless otherwise specified in this document, Personal Data will be processed and stored for as long as required by the purpose for which it was collected and may be retained for longer periods if necessary to comply with a legal obligation or based on the User's consent.

Personal data about the user is collected so that the provider can provide the service and also comply with its legal obligations, respond to enforcement requests, protect its rights and interests (or those of users or third parties), detect malicious or fraudulent activity. In addition, data is collected for the following purposes: Contacting the user and displaying content from external platforms.

Users can find more detailed information on these processing purposes and the Personal Data used for each purpose in the "Detailed information on the processing of Personal Data" section of this document.

Personal data is collected for the following purposes when using the following services:

This type of service allows users to view and interact with content hosted on external platforms directly through the application. Such services are often referred to as widgets, i.e. small elements that are placed on a website or in an application. They provide specific information or perform a specific function and often allow interaction with the user.
This type of service may still collect web traffic data for the pages on which the service is installed, even if users do not use it.

OpenStreetMap widget (OpenStreetMap Foundation )

OpenStreetMap widget is an online map visualization service provided by OpenStreetMap Foundation that allows this application to embed content on its pages.

Personal Data processed: Usage Data; Tracker.

Place of processing: United Kingdom - Privacy Policy.

By filling in the contact form with their Data, Users authorize this Application to use their details to reply to requests for information, quotes or any other kind of request as indicated by the form's header.

Personal Data processed: Email; Last Name; Phone Number; Tracker; First Name.

This document informs Users about the technologies used by this Application to achieve the purposes described below. These technologies enable the access or storage of information (e.g. through the use of cookies) on the User's device or the use of the device's data processing capacities when the User accesses or runs this Application.For the sake of simplicity, such technologies are defined as "Trackers" within this document, unless there is a need for differentiation.For example, although cookies can be used in both web and mobile browsers, they are not considered browser-based Trackers in mobile apps. Therefore, the term cookie is only used in this document when specifically referring to the type of tracker.

Some of the processing purposes for which trackers are used require the user's consent. If consent is given, it can be freely withdrawn at any time according to the procedure described in this document.

This Application uses its own Trackers (so-called "first-party Trackers") and third-party Trackers in connection with third-party services (so-called "third-party Trackers"). Unless otherwise stated in this document, such third parties also have access to the trackers they manage.
The period of validity and expiry of cookies and other similar trackers depend on the lifespan set by the provider or the respective third-party provider. Some of them expire as soon as the User ends the browsing session; for more precise and up-to-date information on the lifespan and other information - such as the use of other Trackers - Users are referred to the descriptions of the categories listed below and, in addition, to the linked privacy policies of the relevant third-party providers or by contacting the provider.

How this Application uses Trackers.

Functionality
This Application uses so-called "technical" Cookies and similar Trackers to enable operations that are strictly necessary for the performance and delivery of the Service.

Functionality
This Application uses Trackers to enable simple interactions and operations that allow Users to access certain features of the Service and facilitate communication with the Owner.

Trackers managed by third parties

Contact form
By filling in the contact form with their Data, Users authorize this Application to use their details to reply to requests for information, quotes or any other kind of request as indicated by the form's header.
Personal data processed: Email, last name, phone number, tracker and first name.

User experience
This Application uses Trackers to provide Users with enhanced options and features for interacting with external content, networks and platforms.

Trackers managed by third parties

OpenStreetMap widget (OpenStreetMap Foundation)

OpenStreetMap widget is an online map visualization service provided by OpenStreetMap Foundation that allows this Application to incorporate content of this kind on its pages.
Personal data processed: Usage Data and Tracker.
Place of processing: United Kingdom - Privacy Policy.

Managing settings and giving or withdrawing consent

Where the use of Trackers is based on consent, Users may give or withdraw their consent by setting or updating their preferences through the relevant privacy selection panel on this Application.

With regard to all Trackers used by third parties, Users can manage their preferences by using the relevant opt-out link (if available), by using the means indicated in the third party's privacy policy or by contacting the third party.
How to control or delete cookies and similar technologies through your device settings.

Users can use their own browser settings to:

• See what cookies or other similar technologies have been set on the device;
• Block cookies or similar technologies;
• delete cookies or similar technologies from the browser.

However, the browser settings do not allow detailed control of consent by category.

For example, users can find information on managing cookies via the most common browsers at the following addresses:

• Google Chrome
• Mozilla Firefox
• Apple Safari
• Microsoft Internet Explorer
• Microsoft Edge
• Brave
• Opera

Users can also manage certain trackers used within mobile apps via corresponding device settings - for example via the device settings for advertising on mobile devices, or generally via tracking settings (users can call up device settings and search for the corresponding commands).

Consequences of refusing the use of trackers

Users are free to decide whether or not to give their consent to the use of trackers. However, it should be noted that Trackers help this Application provide Users with a better user experience and enhanced features (in line with the purposes described in this document). Therefore, if the User chooses to block the use of Trackers, the Owner may not be able to provide such features.

Legal bases of the processing

The provider may only process users' personal data if one of the following applies:

• Users have given their consent for one or more specific purposes.
• the collection of data is necessary for the performance of a contract with the user and/or for pre-contractual measures arising therefrom
• the processing is necessary for compliance with a legal obligation to which the provider is subject
• the processing is related to a task carried out in the public interest or in the exercise of official authority vested in the provider

• the processing is necessary for the purposes of the legitimate interests pursued by the provider or by a third party.

In any case, the provider will be happy to provide information about the specific legal basis on which the processing is based, in particular whether the provision of personal data is a legal or contractual obligation or a prerequisite for the conclusion of a contract.

Further information on the storage period
Unless otherwise specified in this document, Personal Data will be processed and stored for as long as required by the purpose for which it was collected and may be stored for longer if necessary due to a legal obligation to be fulfilled or based on the User's consent.

Therefore:

• Personal data collected for the purpose of fulfilling a contract concluded between the provider and the user will be stored until this contract has been completely fulfilled.

• Personal data collected to protect the legitimate interests of the provider will be retained for as long as necessary to fulfill these purposes. Users can obtain more information about the legitimate interests of the Owner in the relevant sections of this document or by contacting the Owner.

In addition, the Owner may retain Personal Data for longer periods of time if the User has consented to such processing, as long as the consent is not withdrawn. Furthermore, the provider may be obliged to store personal data for a longer period of time if this is necessary to fulfill a legal obligation or by order of an authority.

After the retention period has expired, personal data will be deleted. Therefore, the right of access, the right to erasure, the right to rectification and the right to data portability cannot be asserted after the retention period has expired.

The rights of users under the General Data Protection Regulation (GDPR)

Users can exercise certain rights in relation to their data processed by the provider.

In particular, users have the right to do the following to the extent permitted by law:

• Withdraw consent at any time. If the user has previously consented to the processing of personal data, they may withdraw their consent at any time.

• Object to the processing of their data. The user has the right to object to the processing of their data if the processing is carried out on a legal basis other than consent.
• Receive information about their data. The user has the right to know whether the data is being processed by the provider, to receive information about individual aspects of the processing and to receive a copy of the data.
• Verification and rectification. The user has the right to check the accuracy of their data and to request that it be updated or corrected.
• Request restriction of the processing of their data. Users have the right to restrict the processing of their data. In this case, the provider will not process the data for any purpose other than storage.
• Request erasure or other removal of personal data. Users have the right to request the provider to delete their data.
• Receive their data and have it transferred to another controller. Users have the right to receive their data in a structured, commonly used and machine-readable format and, where technically feasible, to have it transmitted to another controller without hindrance.
• Lodge a complaint. Users have the right to lodge a complaint with the competent supervisory authority.

Users also have the right to obtain information about the legal basis for the transfer of data abroad or to an international organization governed by public international law or established by two or more countries, such as the UN, as well as about the security measures taken by the provider to protect their data.

Details on the right to object to processing

Where Personal Data is processed in the public interest, in the exercise of an official authority vested in the Owner or for the purposes of the legitimate interests pursued by the Owner, Users may object to such processing by providing a ground of justification relating to their particular situation.

Users are informed that they can object to the processing of their personal data for direct marketing purposes at any time free of charge and without giving reasons. If the user objects to the processing for direct marketing purposes, the personal data will no longer be processed for these purposes. Users can find out whether the provider processes personal data for direct marketing purposes in the relevant sections of this document.

How the rights can be exercised

Any requests to exercise User rights may be addressed to the Owner using the contact details provided in this document. These requests can be made free of charge and will be answered by the Owner as soon as possible and within one month at the latest, providing Users with the information required by law. Any rectification or erasure of personal data or restriction of processing shall be communicated by the Provider to all recipients to whom personal data have been disclosed, if any. Unless this proves impossible or involves a disproportionate effort. The provider shall inform the user of these recipients if the user so requests.

Legal measures
The User's personal data may be processed by the Owner for the purposes of legal enforcement within or in preparation of legal proceedings arising from improper use of this Application or the related services.
The User declares to be aware that the Provider may be required by the authorities to disclose personal data.

Further information about the User's personal data
In addition to the information contained in this privacy policy, this Application may provide the User with additional contextual information concerning particular Services or the collection and processing of Personal Data upon request.

System logs and maintenance
For operation and maintenance purposes, this Application and any third-party services may collect files that record interaction with this Application (System logs) or use other Personal Data (such as the IP Address) for this purpose.

Information not included in this privacy policy
Further information about the collection or processing of Personal Data may be requested from the Owner at any time using the contact details provided.

Changes to this privacy policy
The Owner reserves the right to make changes to this privacy policy at any time by notifying its Users on this page and possibly within this Application and/or - as far as technically and legally feasible - sending a notice to Users via any contact information available to the Owner. Users are therefore advised to visit this page regularly and in particular to check the date of the last change indicated at the bottom of the page.

If changes affect the use of data based on the user's consent, the provider will - if necessary - obtain new consent.