Data protection

We are very delighted that you have shown interest in our enterprise. Data protection is of a particularly high priority for the management of the Kavaliershaus Fincken Nalbach GmbH & Co KG. It is generally possible to use the Kavaliershaus Fincken Nalbach GmbH & Co KG website without providing any personal data. However, if a person concerned wishes to make use of special services of our company via our website, it may be necessary to process personal data. If the processing of personal data is necessary and there is no legal basis for such processing, we generally obtain the consent of the data subject.

The processing of personal data, such as the name, address, e-mail address, or telephone number of a data subject shall always be in line with the General Data Protection Regulation (GDPR), and in accordance with the country-specific data protection regulations applicable to the Kavaliershaus Fincken Nalbach GmbH & Co.

1. definitions

a) Personal data

Personal data is any information relating to an identified or identifiable natural person.

b) Person concerned

Data subject is any identified or identifiable natural person whose personal data is processed by the controller responsible for the processing.

c) Processing

Processing is any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means.

d) Restriction of processing

Restriction of processing is the marking of stored personal data with the aim of restricting its future processing.

e) Profiling

Profiling is any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects.

f) Pseudonymization

Pseudonymization is the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information.

2. name and address of the controller

3. name and address of the data protection officer

4. collection of general data and information

The website of the Kavaliershaus Fincken Nalbach GmbH & Co KG collects a series of general data and information when a data subject or automated system calls up the website. This information is required to:

1. to deliver the content of our website correctly
2. to optimize the content of our website and the advertising for it
3. to ensure the long-term functionality of our information technology systems
4. to provide law enforcement authorities with the necessary information in the event of a cyberattack

5. subscription to our newsletter

On the website of the Kavaliershaus Fincken Nalbach GmbH & Co KG, users are given the opportunity to subscribe to our enterprise's newsletter.

The newsletter of our company can only be received by the data subject if:

1. the data subject has a valid e-mail address
2. the data subject registers to receive the newsletter

6. newsletter tracking

The newsletters of Kavaliershaus Fincken Nalbach GmbH & Co KG contain so-called tracking pixels. A tracking pixel is a miniature graphic that is embedded in emails to enable a statistical evaluation of the success of online marketing campaigns.

7 Routine deletion and blocking of personal data

The controller processes and stores personal data of the data subject only for the period necessary to achieve the purpose of storage.

8 Rights of the data subject

a) Right to confirmation

Each data subject shall have the right to obtain from the controller confirmation as to whether or not personal data concerning him or her are being processed.

b) Right to information

Every data subject has the right to obtain information free of charge from the controller at any time about the personal data stored about them.

c) Right to rectification

Every data subject has the right to demand the immediate rectification of inaccurate personal data concerning him or her.

d) Right to erasure (right to be forgotten)

Each data subject shall have the right to obtain from the controller the erasure of personal data concerning him or her without undue delay.

e) Right to restriction of processing

Every data subject has the right to obtain from the controller restriction of processing.

f) Right to data portability

Every data subject has the right to receive the personal data concerning him or her in a structured, commonly used and machine-readable format.

g) Right to object

Every data subject has the right to object to the processing at any time on grounds relating to his or her particular situation.

h) Automated decisions in individual cases including profiling

Every data subject has the right not to be subject to a decision based solely on automated processing.

i) Right to withdraw consent under data protection law

Every data subject has the right to withdraw consent to the processing of personal data at any time.

9. data protection for applications and in the application process

The controller collects and processes the personal data of applicants for the purpose of handling the application process. If the controller does not conclude an employment contract with the applicant, the application documents will be automatically deleted two months after notification of the rejection decision.

10. data protection provisions about the application and use of Facebook

The data controller has integrated Facebook components on this website.

11. data protection provisions about the application and use of Google Analytics

The controller has integrated the Google Analytics component (with anonymization function) on this website.

12. data protection provisions about the application and use of Google+

The controller has integrated the Google+ button as a component on this website.

13. data protection provisions about the application and use of Shariff

The controller has integrated the Shariff component on this website. The Shariff component provides social media buttons that are compliant with data protection regulations.

14. legal basis of the processing

Art. 6 I lit. a GDPR serves our company as the legal basis for processing operations for which we obtain consent for a specific processing purpose.

15. legitimate interests in the processing

Where the processing of personal data is based on Article 6 I lit. f GDPR, our legitimate interest is the performance of our business activities for the benefit of the well-being of all our employees and our shareholders.

16. duration of the storage of personal data

The criterion for the duration of the storage of personal data is the respective statutory retention period. Once this period has expired, the corresponding data is routinely deleted.

17. legal or contractual regulations for the provision of personal data

We inform you that the provision of personal data is partly required by law or may result from contractual regulations.

18. existence of automated decision-making

As a responsible company, we do not use automated decision-making or profiling.

Privacy Policy

We are very delighted that you have shown interest in our enterprise. Data protection is of a particularly high priority for the management of the Kavaliershaus Fincken Nalbach GmbH & Co.KG. The use of the Internet pages of the Kavaliershaus Fincken Nalbach GmbH & Co.KG is possible without any indication of personal data; however, if a data subject wants to use special enterprise services via our website, processing of personal data could become necessary.

1. definitions

a) Personal data

Personal data means any information relating to an identified or identifiable natural person.

b) Data subject

Data subject is any identified or identifiable natural person whose personal data is processed by the controller responsible for the processing.

c) Processing

Processing is any operation or set of operations which is performed on personal data or on sets of personal data.

d) Restriction of processing

Restriction of processing is the marking of stored personal data with the aim of limiting their processing in the future.

e) Profiling

Profiling means any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects.

f) Pseudonymization

Pseudonymization is the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject.

2. name and address of the controller

3. name and address of the Data Protection Officer

Any data subject may, at any time, contact our Data Protection Officer directly with all questions and suggestions concerning data protection.

4. cookies

The Internet pages of the Kavaliershaus Fincken Nalbach GmbH & Co.KG use cookies. Cookies are text files that are stored in a computer system via an Internet browser.

5. collection of general data and information

The website of the Kavaliershaus Fincken Nalbach GmbH & Co.KG collects a series of general data and information when a data subject or automated system calls up the website. This information is needed to:

1. deliver the content of our website correctly
2. optimize the content of our website as well as its advertisement
3. ensure the long-term viability of our information technology systems and website technology
4. provide law enforcement authorities with the information necessary for criminal prosecution in case of a cyber-attack

6. subscription to our newsletters

On the website of the Kavaliershaus Fincken Nalbach GmbH & Co.KG, users are given the opportunity to subscribe to our enterprise's newsletter.

7. newsletter tracking

The newsletter of the Kavaliershaus Fincken Nalbach GmbH & Co. KG contains so-called tracking pixels. A tracking pixel is a miniature graphic embedded in such e-mails.

8. rights of the data subject

a) Right of confirmation

Each data subject shall have the right granted by the European legislator to obtain from the controller confirmation as to whether personal data concerning him are being processed.

b) Right of access

Each data subject shall have the right granted by the European legislator to obtain from the controller free information about personal data stored at any time.

c) Right to rectification

Each data subject shall have the right granted by the European legislator to obtain from the controller rectification of inaccurate personal data.

d) Right to erasure (Right to be forgotten)

Each data subject shall have the right granted by the European legislator to obtain from the controller erasure of personal data.

e) Right of restriction of processing

Each data subject shall have the right granted by the European legislator to obtain from the controller restriction of processing.

f) Right to data portability

Each data subject shall have the right granted by the European legislator to receive personal data in a structured, commonly used and machine-readable format.

g) Right to object

Each data subject shall have the right granted by the European legislator to object to processing of personal data.

h) Automated individual decision-making, including profiling

Each data subject shall have the right granted by the European legislator not to be subject to a decision based solely on automated processing.

i) Right to withdraw data protection consent

Each data subject shall have the right granted by the European legislator to withdraw consent to processing of personal data at any time.

9. data protection for applications and the application procedures

The data controller shall collect and process the personal data of applicants for the purpose of the processing of the application procedure. If no employment contract is concluded, application documents shall be automatically erased two months after notification of the refusal decision.

10. data protection provisions about Facebook

On this website, the controller has integrated components of the enterprise Facebook.

11. data protection provisions about Google Analytics

On this website, the controller has integrated the component of Google Analytics (with the anonymizer function).

12. data protection provisions about Google+

On this website, the controller has integrated the Google+ button as a component.

13. data protection provisions about Shariff

On this website, the controller has integrated the component of Shariff. The Shariff component provides social media buttons that are compliant with data protection.

14 Legal basis for the processing

Art. 6(1) lit. a GDPR serves as the legal basis for processing operations for which we obtain consent for a specific processing purpose.

15. the legitimate interests pursued by the controller or by a third party

Where the processing of personal data is based on Article 6(1) lit. f GDPR our legitimate interest is to carry out our business in favor of the well-being of all our employees and the shareholders.

16. period for which the personal data will be stored

The criteria used to determine the period of storage of personal data is the respective statutory retention period. After expiration of that period, the corresponding data is routinely deleted.

17. provision of personal data as statutory or contractual requirement

We clarify that the provision of personal data is partly required by law or can also result from contractual provisions.

18 Existence of automated decision-making

As a responsible company, we do not use automatic decision-making or profiling.