Privacy and Security
Your personal data will be processed in accordance with the EU-DDSGVO and the BDSG. By means of this data protection declaration, we would like to inform you about the type, scope and purpose of the data processed by us and clarify your rights.
You are not only important to us as a customer, the protection of your personal data is also very important to Elektroteks Mattress Machinery. We treat all your data with the greatest possible care and adhere strictly to the legal requirements of the European Data Protection Basic Regulation EU-DSGVO and the Federal Data Protection Act BDSG of 25 May 2018.
The collection and processing of personal data may become necessary when using special services via our Internet pages. If there is no legal basis for this, Elektroteks Mattress Machinery will generally obtain the consent of the person concerned.
Elektroteks Mattress Machinery has implemented numerous technical and organisational measures in order to guarantee the most comprehensive protection of personal data possible. However, no complete protection can be guaranteed with Internet-based data transmissions. Therefor each person concerned is free to transmit personal data to us by alternative means, e.g. by post or telephone.
I. Provider and responsible body within the meaning of the Data Protection Act
The person responsible within the meaning of the Basic Data Protection Regulation, other data protection laws applicable in the Member States of the European Union and other provisions of a data protection nature:
Elektroteks Mattress Machinery
Kayapa Organize Sanayi Bölgesi Beyaz Cd. No:20 Nilüfer, Bursa, Türkiye
E-Mail: [email protected]
Status: May 2018
II. General information on data processing
In this data protection declaration Elektroteks Mattress Machinery informs you about the type, scope and purpose of the processing of personal data within our online offer. It is valid regardless of the domains, systems, platforms and devices used (e.g. desktop PC, smartphone or tablet) with which the online offer or business is carried out.
- Definition of terms
This data protection declaration uses the terms defined in Article 4 of the Basic Data Protection Regulation (EU-DSGVO), which are generally to be understood as gender-neutral. For the sake of ease of reading, we have listed the most important terms and their meaning according to the DSGVO for you here:
Personal data means any information relating to an identified or identifiable natural person. A natural person is deemed to be identifiable if it can be identified directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or one or more special features that are an expression of the physical, physiological, genetic, psychological, economic, cultural or social identity of this natural person.
The personal data of users collected and processed within the scope of this online service includes inventory data (e.g., names and addresses of customers), contract data (e.g., services used, names of clerks, payment information), usage data (e.g. websites visited on our online service, expressed interest in our products) and content data (e.g. entries made in the contact form).
Processing means any operation or set of operations which is carried out with or without the aid of automated means relating to personal data, such as collection, recording, organisation, sorting, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or association, qualification, erasure or destruction.
Profiling includes any automated processing of personal data consisting of the use of such personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects relating to the work performance, economic situation, health, personal preferences, interests, reliability, behaviour, whereabouts or movement of that natural person.
Anonymisation means the processing of personal data in such a way that the personal data can no longer be attributed to a specific data subject without additional information, provided that such additional information is kept separately and is subject to technical and organisational measures ensuring that the personal data cannot be attributed to an identified or identifiable natural person.
Processor is a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.
Third party means any natural or legal person, public authority, agency or any other body, other than the data subject, the controller, the processor and the persons authorised to process the personal data under the direct responsibility of the controller or the processor.
Third countries are countries in which the DSGVO is not directly applicable law. In other words, all countries outside the EU or the European Economic Area.
Consent shall mean any voluntary, informed and unambiguous expression by the data subject of his or her will in the particular case, in the form of a statement or other unequivocal confirmatory act, indicating that he or she consents to the processing of his or her personal data.
2. Scope of processing of personal data
As a matter of principle, we only process personal data insofar as this is necessary to provide a functioning website as well as our contents and services.
In order to fulfil contracts or to be able to fulfil our contractual rights and obligations, Elektroteks Mattress Machinery processes inventory data such as names, addresses and contact data of users as well as contract data (e.g. services used, names of contact persons, payment information) in accordance with Art. 6 Para. 1 lit b. DSGVO.
3. Legal basis for the processing of personal data
Elektroteks Mattress Machinery generally only collects and processes personal data in compliance with the relevant data protection regulations. This means that user data will only be collected and processed if one of the following points is present:
- a) Legal permission or regulation
This includes in particular the processing of data which is necessary for the fulfilment of contracts or for the implementation of pre-contractual measures and is therefore legally permitted. In addition, data are processed which are necessary for the fulfilment of a legal obligation as well as for our online service.
- b) Consent of the user
This refers to all data for the processing of which the user has given his voluntary consent.
- c) Legitimate interest of the provider
These are data in which Elektroteks Mattress Machinery has a justified interest. These can be, for example, data that serve the analysis, optimization and economic operation as well as the security of the online offer. The same applies to data for range measurement, the creation of profiles for advertising and marketing purposes, the collection of access data and the use of third-party services.
The legal basis of the consents refers to Art. 6 para. 1 lit. a. and Art. 7 DSGVO, the legal basis for the processing for the fulfilment of our services and the implementation of contractual measures to Art. 6 para. 1 lit. b., the legal basis for the processing for the fulfilment of our legal obligations to the extent of Art. 6 para. 1 lit. c. DSGVO, the legal basis for the processing to fulfil our legal obligations under Art. 6 para. 1 lit. c., and the DSGVO, the legal basis for the processing to fulfil our legal obligations under Art. 6 para. 1 lit. b. DSGVO, and the legal basis for the processing to safeguard our legitimate interests under Art. 6 para. 1 lit. f. DSGVO.
4. Data erasure and storage duration
The personal data of the person concerned will be deleted or blocked as soon as the purpose of storage no longer applies. In addition, a storage can take place, if this was provided for by European or national laws, in Union-legal regulations or other regulations, to which Elektroteks Mattress Machinery is subject. The data will also be blocked or deleted if a storage period prescribed as binding for Elektroteks Mattress Machinery expires, unless further storage of the data is necessary for the conclusion or fulfilment of a contract.
5. Security measures to protect personal data
Elektroteks Mattress Machinery protects your data against loss, destruction, accidental or intentional manipulation, as well as access by unauthorized persons through current technical solutions. Furthermore, organizational and contractual measures ensure that the provisions of data protection laws are complied with.
III. Disclosure of data to third parties and third providers
Your personal data will only be passed on within the scope of the statutory provisions. This happens, for example, if a data transfer on the basis of Art. 6 Para. 1 lit. b) DSGVO is necessary for contractual purposes or in the case of justified interests pursuant to Art. 6 Para. 1 lit. f) DSGVO in the economic and effective operation of our business. If we use other companies that are subject to the DSGVO as members of the European Union to provide our services (in particular parcel services, subcontractors, suppliers, etc.), we take appropriate legal precautions as well as appropriate technical and organizational measures to ensure the protection of personal data in accordance with the relevant statutory provisions.
If content, tools or other means are used by other providers within the scope of this data protection declaration and their registered office is located in a third country (hereinafter referred to as "third party provider"), it must be assumed that a data transfer takes place to the registered offices of the third party provider. Data will only be transferred to third countries,
(a) where an adequate level of data protection is certified by the DSGVO
(b) the consent of users
(c) a legal authorisation
IV. Provision of the website and creation of log files
1. Description and scope of data processing
Whenever you access our website, Elektroteks Mattress Machinery automatically collects and stores data and information from the computer system of the accessing computer.
The following data is collected:
- browser types and versions used,
- the operating system used by the accessing system,
- the URL of the website from which you accessed our website (so-called referers)
- the sub-sites that are accessed via an accessing system on our website,
- the date and time of access to the website,
- an Internet protocol address (IP address),
- the Internet service provider of the accessing system,
- other data and information that serve to avert danger in the event of attacks on our information technology systems.
The data is stored in the log files of our system. These data are not stored together with other personal data. In addition, Elektroteks Mattress Machinery does not use this data to draw any conclusions about the person concerned.
2. Legal basis for data processing
The legal basis for the temporary storage of data and log files is Art. 6 para. 1 lit. f DSGVO.
Purpose of the data processing
This information is needed to:
- to deliver the contents of our website correctly,
- to optimise the content of our website and the advertising for it,
- to ensure the long-term operability of our information technology systems and the technology of our website,
- to provide law enforcement authorities with the information they need to prosecute a cyber attack.
This anonymously collected data and information is evaluated by Elektroteks Mattress Machinery both statistically and with the aim of increasing data protection and data security in our company. An evaluation of the data for marketing purposes does not take place in this context.
4. Duration of storage
The data in the log files are automatically deleted after seven days at the latest. Storage beyond this is possible if further storage of the data is necessary for evidence purposes (e.g. in the case of cyber attacks). This data will only be deleted after the respective incident has been finally clarified.
5. Possibility of opposition and removal
The collection of data for the provision of the website and the storage of data in log files is mandatory for the operation of the website. Consequently, there is no possibility for the user to object.
1. Description and scope of data processing
When using functions and offers of third parties (e.g. YouTube, Google services, ...) these providers may also store cookies on your computer.
You will find further information on the third-party cookie providers of the Elektroteks Mattress Machinery website further below in this data protection declaration under the item "Use of analysis and marketing tools".
3. Legal basis for data processing
The legal basis for the processing of personal data using cookies is our legitimate interest in the processing of personal data pursuant to Art. 6 para. 1 lit. f DSGVO.
4. Purpose of the data processing
The "session cookies" used by Elektroteks Mattress Machinery are cookies that are only stored for the duration of the current visit to our online presence (e.g. to store your login status or the shopping basket function and thus to enable the use of our online offer at all). In a session cookie, a randomly generated unique identification number is stored, a so-called session ID. In addition, a cookie contains information about its origin and its storage period. These cookies cannot store any other data. Session cookies are deleted when you have finished using our online service and log out or close your browser, for example.
The analysis cookies are used for the purpose of improving the quality of our website and its contents. Through the analysis cookies, we learn how the website is used and can thus constantly optimize our offer. What this means in detail and all further information can be found in this data protection declaration under "Use of analysis and marketing tools".
5. Duration of storage, possibility of objection and removal
If you do not wish cookies to be stored on your computer, the setting of cookies by our website can be prevented at any time by means of an appropriate setting in the Internet browser you are using and the setting of cookies can thus be permanently rejected. Cookies that have already been saved can be deleted in the system settings of your browser.
If cookies are deactivated or deleted, not all functions of our website may be fully usable.
VI. Use of analysis and marketing tools
1. Google Analytics
On the basis of our legitimate interests in the analysis, optimisation and economic operation of our online offer (in the sense of Art. 6 Para. 1 lit. f. of the German Data Protection Act), we act in accordance with the provisions of Art. 6 Para. 1 lit. f. of the German Data Protection Act. DSGVO Google Analytics, a web analysis service of Google Inc. "("Google").
Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Google is certified under the Privacy Shield Agreement and thus offers a guarantee of compliance with European data protection law.
Google will use this information on our behalf in order to evaluate the use of our online offer by users, to compile reports on the activities within this online offer and to provide us with further services associated with the use of this online offer and Internet use. The processed data can be used to create pseudonymised user profiles.
We use Google Analytics to display ads placed by Google and its partners within advertising services only to users who have shown an interest in our online services or who have certain characteristics (e.g. interests in certain topics or products determined on the basis of the websites visited) which we transmit to Google (so-called "remarketing" or "Google Analytics audiences"). With the help of so-called remarketing audiences, we also want to ensure that our ads correspond to the potential interest of the users and do not appear annoying.
We only use Google Analytics with IP anonymization enabled. This means that the IP address of the user is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there.
Further information on the use of data by Google, setting and objection options can be found on the websites of Google: https://www.google.com/intl/de/policies/privacy/partners ("Use of data by Google for your use of websites or apps of our partners"), http://www.google.com/policies/technologies/ads ("Use of data for advertising purposes"), https://adssettings.google.com/authenticated?hl=en ("Manage information that Google uses to show you advertising").
VII. Use of plug-ins and tools
1. Google Web Fonts
This page uses so-called web fonts from Google for the uniform display of fonts. When you call up a page, your browser loads the required web fonts into your browser cache in order to display texts and fonts correctly.
Google Web Fonts are used in the interest of a uniform and appealing presentation of our online services. If your browser does not support web fonts, a standard font will be used by your computer.
2. Google Maps
This page uses the Google Maps map service via an API. Provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
To use the features of Google Maps, it is necessary to store your IP address. This information is usually transferred to a Google server in the USA and stored there. The provider of this site has no influence on this data transfer.
The use of Google Maps takes place in the interest of an appealing presentation of our online offers and at an easy findability of the places indicated by us on the website. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f DSGVO.
3. Google reCAPTCHA
This site uses Google reCAPTCHA to verify and prevent interactions through automated access, such as so-called bots. This service is provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA, hereinafter referred to as "Google".
By being certified according to the EU-US Privacy Shield https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active, Google guarantees that the data protection requirements of the EU are also complied with when processing data in the USA.
This service enables Google to determine which website is sending a request and from which IP address you are using the so-called reCAPTCHA input box. In addition to your IP address, Google may also collect other information necessary for the provision and guarantee of this service.
The legal basis is Art. 6 Para. 1 lit. f) DSGVO. Our interest lies in the security of our website and the defence against unwanted, automated access in the form of spam or similar.
Google offers further information on the general handling of your user data at https://policies.google.com/privacy.
VIII. Contact form and e-mail contact
1. Description and scope of data processing
A contact form is available on our website, which can be used for electronic contact. If a user makes use of this possibility, the data entered in the input mask will be transmitted to us and stored.
These data are:
- E-mail address
- Your inquiry/communication to Elektroteks Mattress Machinery
At the time the message is sent, the following data is also stored:
- The IP address of the user
- Date and time of contact
Your consent will be obtained for the processing of the data as part of the sending process and reference will be made to this data protection declaration.
Alternatively, it is possible to contact us via the e-mail address provided. In this case, the personal data of the user transmitted with the e-mail will be stored.
The data will not be passed on to third parties in this context. The data will be used exclusively for the processing of the conversation.
2. Legal basis for data processing
The legal basis for the processing of the data is Art. 6 para. 1 lit. a DSGVO if the user has given his consent.
The legal basis for the processing of data transmitted in the course of sending an e-mail is Art. 6 para. 1 lit. f DSGVO. If the purpose of the e-mail contact is to conclude a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b DSGVO.
3. Purpose of the data processing
The processing of the personal data from the input mask serves us exclusively for the processing of the establishment of contact. In the case of contacting us by e-mail, this also constitutes the necessary legitimate interest in the processing of the data.
The other personal data processed during the sending process serve to prevent misuse of the contact form and to ensure the security of our information technology systems.
4. Duration of storage
The data will be deleted as soon as they are no longer required for the purpose for which they were collected.
For the personal data from the input mask of the contact form and those sent by e-mail, this is the case when the respective conversation with the user has ended.
The conversation is terminated when it can be inferred from the circumstances that the relevant facts have been conclusively clarified.
The additional personal data collected during the sending process will be deleted after a period of seven days at the latest.
5. Possibility of opposition and removal
The user has the possibility to revoke his consent to the processing of his personal data at any time. If the user contacts Elektroteks Mattress Machinery by e-mail, he can object to the storage of his personal data at any time. In such a case, the conversation cannot be continued.
If you wish to revoke your consent or object to the storage of your personal data, please inform the responsible person named above in this data protection declaration. You can use any form of contact (e-mail, letter, telephone call...) for this purpose.
In this case, all personal data stored in the course of establishing contact will be deleted within 7 days.
IX. Rights of the data subject
The DSGVO grants data subjects comprehensive rights with regard to the processing of personal data. Which rights these are in detail, what scope they have and how they can claim these rights is explained in detail in this point of the data protection declaration.
As soon as personal data is processed by you, you are the data subject within the meaning of the DSGVO and you are entitled to the following rights vis-à-vis the person responsible:
1. Right to information
You may request confirmation from the data controller as to whether personal data concerning you will be processed by us.
In the event of such processing, you may request information from the data processor regarding the following information:
- a) the purposes for which the personal data will be processed;
- b) the categories of personal data processed;
- c) the recipients or categories of recipients to whom the personal data relating to you has been or will be disclosed;
(d) the intended duration of the retention of the personal data relating to you or, if it is not possible to provide specific information in this respect, criteria for determining the retention period;
(e) the existence of a right to have personal data concerning you rectified or erased, of a right to limit the processing carried out by the controller or of a right to object to such processing;
(f) the existence of a right of appeal to a supervisory authority;
(g) any available information as to the source of the data, where the personal data are not collected from the data subject;
- h) the existence of automated decision-making including profiling in accordance with Art. 22 (1) and (4) DSGVO and - at least in these cases - meaningful information on the logic involved and the scope and intended effects of such processing for the data subject.
You have the right to request information as to whether the personal data concerning you will be transferred to a third country or to an international organisation. In this context, you may request to be informed of the appropriate guarantees pursuant to Art. 46 DSGVO in connection with the transfer.
2. Right to rectification
You have the right to have your personal data corrected and/or completed by the data controller if the personal data processed concerning you is inaccurate or incomplete. The data controller must carry out the rectification immediately.
3. Right to limit the processing
Under the following conditions, you may request that the processing of your personal data be restricted:
- a) if you dispute the accuracy of the personal data concerning you for a period of time which allows the controller to verify the accuracy of the personal data;
- b) the processing is unlawful and you refuse to delete the personal data and instead request that the use of the personal data be restricted;
- c) the controller no longer needs the personal data for the purposes of the processing, but you need them for the assertion, exercise or defence of legal claims, or
- d) if you have objected to the processing pursuant to Art. 21 para. 1 DSGVO and it has not yet been established whether the legitimate reasons of the data controller outweigh your reasons.
If the processing of personal data concerning you has been restricted, such data may not be processed - apart from their storage - without your consent or for the purpose of asserting, exercising or defending legal rights or protecting the rights of another natural or legal person or for reasons of an important public interest of the Union or of a Member State.
If the processing restriction has been limited in accordance with the above conditions, you will be informed by the controller before the restriction is lifted.
4. Right to cancellation
You may request the controller to delete the personal data concerning you immediately and the controller is obliged to delete such data immediately if one of the following reasons applies:
(a) personal data concerning you are no longer necessary for the purposes for which they were collected or otherwise processed.
- b) You revoke your consent on which the processing pursuant to Art. 6 para. 1 lit. a or Art. 9 para. 2 lit. a DSGVO was based and there is no other legal basis for the processing.
- c) You object to the processing pursuant to Art. 21 para. 1 DSGVO and there are no overriding legitimate reasons for the processing, or you object to the processing pursuant to Art. 21 para. 2 DSGVO.
- d) The personal data concerning you have been processed unlawfully.
- e) The deletion of your personal data is necessary to fulfil a legal obligation under Union law or the law of the Member States to which the controller is subject.
- f) The personal data relating to you have been collected in relation to information society services offered pursuant to Art. 8 para. 1 DSGVO.
Information to third parties
If the person responsible has made the personal data concerning you public and is obliged to delete them in accordance with Art. 17 (1) DSGVO, he shall take appropriate measures, including technical measures, taking into account the available technology and the implementation costs, to inform the persons responsible for data processing who process the personal data that you, as the person concerned, have requested them to delete all links to this personal data or copies or replications of this personal data.
The right to deletion does not exist if the processing is necessary for
- the exercise of freedom of expression and information;
- to fulfil a legal obligation which the processing requires under the law of the Union or of the Member States to which the controller is subject, or to perform a task carried out in the public interest or in the exercise of official authority vested in the controller;
- for reasons of public interest in the field of public health pursuant to Art. 9 para. 2 lit. h and i and Art. 9 para. 3 DSGVO;
- for archival purposes in the public interest, scientific or historical research purposes or for statistical purposes pursuant to Art. 89 para. 1 DSGVO, insofar as the law referred to under section a) presumably makes it impossible or seriously impairs the attainment of the objectives of such processing, or
- to assert, exercise or defend legal claims.
5. Right to information
If you have exercised the right to rectify, cancel or limit the processing of your personal data against the controller, the latter is obliged to notify all recipients to whom the personal data concerning you have been disclosed of this rectification, cancellation or limitation of the processing, unless this proves impossible or involves a disproportionate effort.
You have the right to be informed of such recipients by the data controller.
6. Right to data transferability
You have the right to receive the personal data concerning you that you have provided to the data controller in a structured, common and machine-readable format. In addition, you have the right to communicate these data to another data controller without being hindered by the controller to whom the personal data was provided, provided that
- the processing is based on a consent pursuant to Art. 6 para. 1 lit. a DSGVO or Art. 9 para. 2 lit. a DSGVO or on a contract pursuant to Art. 6 para. 1 lit. b DSGVO and
- processing is carried out using automated procedures.
In exercising this right, you also have the right to have the personal data concerning you transferred directly by one responsible person to another responsible person, as far as this is technically feasible. Freedoms and rights of other persons must not be affected by this.
The right to data transfer does not apply to the processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
7. Right of objection
You have the right, for reasons arising from your particular situation, to object at any time to the processing of your personal data on the basis of Art. 6 para. 1 lit. e or f DSGVO; this also applies to profiling based on these provisions.
The person responsible will no longer process the personal data relating to you unless he can prove compelling grounds for processing worthy of protection which outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
If the personal data concerning you are processed for the purpose of direct marketing, you have the right to object at any time to the processing of the personal data concerning you for the purpose of such advertising; this also applies to profiling insofar as it is connected with such direct marketing.
If you object to the processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes.
You have the possibility to exercise your right of objection through automated procedures using technical specifications in connection with the use of Information Society services, notwithstanding Directive 2002/58/EC.
8. Right to revoke the declaration of consent under data protection law
You have the right to revoke your declaration of consent under data protection law at any time. The revocation of your consent does not affect the legality of the processing that took place on the basis of your consent until you revoke your consent.
9. Automated decision in individual cases including profiling
You have the right not to be subject to any decision based solely on automated processing, including profiling, that has any legal effect on you or similarly significantly affects you. This does not apply if the decision
(a) is necessary for the conclusion or performance of a contract between you and the person responsible,
(b) is authorised by legislation of the Union or of the Member States to which the person responsible is subject and contains appropriate measures to safeguard your rights and freedoms and your legitimate interests; or
- c) with your express consent.
However, these decisions may not be based on special categories of personal data pursuant to Art. 9 para. 1 DSGVO, unless Art. 9 para. 2 lit. a or g DSGVO applies and appropriate measures have been taken to protect the rights and freedoms as well as your legitimate interests.
With regard to the cases referred to in (a) and (c), the person responsible shall take appropriate measures to protect the rights and freedoms as well as your legitimate interests, including at least the right to obtain the intervention of a person on the part of the person responsible, to state his own position and to challenge the decision.
10. Right of appeal to a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right to complain to a supervisory authority, in particular in the Member State where you are staying, at your place of work or at the place where the alleged infringement is alleged, if you consider that the processing of your personal data is contrary to the DSGVO.
The supervisory authority with which the complaint was lodged shall inform the complainant of the status and outcome of the complaint, including the possibility of a judicial remedy under Article 78 DSGVO.
We reserve the right to change the data protection declaration in order to adapt it to changed legal situations or, in the event of changes to the service or data processing. However, this only applies with regard to declarations on data processing. If user consents are required or components of the data protection declaration contain provisions of the contractual relationship with the users, the changes will only be made with the consent of the users.
Users are requested to inform themselves regularly about the content of the data protection declaration.