Help

DATA PRIVACY

Information requirements according to Art. 12, 13 ff. EU-GDPR

  1. Name and address of the person responsible

Your contact person as the person responsible within the meaning of the European Data Protection Basic Regulation („EU-GDPR“) and other national data protection laws of the member states and other data protection regulations: Tool-Arena GmbH, represented by the managing director Niklas Vogt, Maybachstr.1 73066 Uhingen (hereinafter referred to as "we", "us" or "our")

  1. General information on data processing

a. Scope of the processing of personal data: As a matter of principle, we process your personal data only to the extent necessary to provide our services. The processing of your personal data is regularly only based on your consent. An exception is made in cases where prior consent cannot be obtained for factual reasons or where the processing of your personal data is permitted by law.

b. Legal bases for the processing of personal data: If we obtain your consent for the processing of personal data, Art. 6 para. 1 lit. a EU-GDPR serves as our legal basis. For the processing of personal data which is necessary for the fulfilment of a contract between you and us, Art. 6 para. 1 lit. b EU-GDPR serves as the legal basis. This also applies to processing operations which are necessary to carry out pre-contractual measures. Insofar as the processing of personal data is necessary to fulfil a legal obligation to which we are subject, Art. 6 para. 1 lit. c EU-GDPR serves as our legal basis. In the event that vital interests of you or another natural person make it necessary to process personal data, Art. 6 para. 1 lit. d EU-GDPR serves as our legal basis. If the processing is necessary to safeguard a legitimate interest of ours or of a third party and if your interests, fundamental rights and freedoms do not outweigh the former, Art. 6 para. 1 lit. f EU-GDPR serves as the legal basis for us to process the data.

c. Data deletion and storage period: Your personal data will be deleted or blocked as soon as the purpose for which it was stored no longer applies. Furthermore, data may be stored if this has been provided for by the European or national legislator in EU regulations, laws or other regulations to which we are subject. Data will also be blocked or deleted when a storage period prescribed by the above-mentioned standards expires, unless there is a need for further storage of the data in order to conclude or fulfil a contract.

  1. Providing the website and creating log files

a. Legal basis for data processing The legal basis for the processing of your personal data in the context of the provision of the website and the creation of log files is Art. 6 para. 1 letter f EU-GDPR.

b. Purpose of data processing: The temporary storage of your personal data by us is necessary to enable the website to be delivered to your computer. For this purpose your personal data must be stored for the duration of the session. The storage of your personal data in log files is done to ensure the functionality of the website. In addition, your personal data serves us to optimise the website and to ensure the security of our information technology systems. An evaluation of your personal data for marketing purposes does not take place in this context. These purposes also constitute our legitimate interest in data processing in accordance with Art. 6 para. 1 lit. f EU-GDPR.

c. Duration of storage: Your personal data will be deleted as soon as they are no longer required for the purpose for which they were collected. In the case of the collection of your personal data for the purpose of providing the website, this is the case as soon as the respective session has ended. If your personal data is stored in log files, it will be deleted after three days at the latest. Storage beyond this period is possible. In this case, your personal data will be deleted or alienated so that it is no longer possible to assign the calling client.

d. Objection and removal option: The collection of your personal data for the provision of the website and the storage of your personal data in log files is absolutely necessary for the operation of the website. You therefore have no possibility of objection.

  1. Use of cookies

a. Legal basis for data processing The legal basis for the processing of your personal data in the context of the use of technically necessary cookies is Art. 6 para. 1 letter f EU-GDPR.

b. Purpose of data processing: The use of technically necessary cookies serves to simplify your use of our website. Some functions of our website cannot be offered without the use of cookies. For these it is necessary that your internet browser is recognised even after a change of page. The user data collected by technically necessary cookies is not used to create user profiles. This is also our legitimate interest in the processing of your personal data in accordance with Art. 6 para. 1 lit. f EU-GDPR.

c. Duration of storage: Your personal data will be deleted as soon as they are no longer required for the purpose for which they were collected; this is particularly the case if cookies are deactivated.

d. Possibility of objection and removal Cookies are stored on your computer and transmitted from there to our website. You therefore have full control over the use of cookies. By changing the settings in your Internet browser, you can deactivate or restrict the transmission of cookies. You can delete already stored cookies at any time. This can also be done automatically. If cookies are deactivated for our website, it is possible that not all functions of the website can be used to their full extent.

  1. Webshop

a. Legal basis for data processing The legal basis for the processing of your personal data within the framework of the webshop is Art. 6 para. 1 lit. b EU-GDPR.

b. Purpose of data processing: The purpose of processing your personal data within the framework of the web shop is to fulfil a contract for the sale of goods or services between you and us.

c. Duration of storage: Your personal data will be deleted as soon as they are no longer required for the purpose for which they were collected. In the case of processing of your personal data within the framework of the web shop, this is the case when all claims arising from the contractual relationship have become statute-barred and there are no longer any legally prescribed retention periods.

d. Possibility of objection and removal: The processing of your personal data within the framework of the web shop is absolutely necessary for the sale of goods or services. Consequently, there is no possibility for you to object.

  1. Newsletter

a. Legal basis for data processing: The legal basis for the processing of your personal data in the context of sending out the newsletter is, if consent is given, Art. 6 para. 1 letter a EU-GDPR or, as a result of the sale of goods or services, the legal permission of § 7 para. 3 UWG.

b. Purpose of data processing: The collection of your personal data serves to send the newsletter to you. The purpose of processing your personal data in the context of sending the newsletter is to promote the sale of goods or services.

c. Duration of storage: Your personal data will be deleted as soon as they are no longer required for the purpose for which they were collected. Your personal data will therefore be stored for as long as the subscription to the newsletter is active.

d. Possibility of objection and removal: You can cancel your subscription to the newsletter at any time. For this purpose there is a corresponding link in every newsletter. Cancellation of the subscription also enables you to revoke your consent.

  1. Registation

a. Legal basis for data processing: The legal basis for the processing of your personal data in the context of registration is Art. 6 para. 1 lit. b EU-GDPR.

b. Purpose of data processing: Your registration enables the simplified conclusion of contracts between you and us. The processing of your personal data within the scope of registration is therefore necessary for the fulfilment of a contract between you and us or for the implementation of pre-contractual measures.

c. Duration of storage: Your data will be deleted as soon as they are no longer required for the purpose for which they were collected. This is the case during the registration process for the fulfilment of a contract or for the implementation of pre-contractual measures if your personal data is no longer necessary for the implementation of the contract. Even after conclusion of the contract, it may still be necessary to store personal data of the contractual partner in order to fulfil contractual or legal obligations.

d. Possibility of objection and removal: You have the possibility to cancel the registration at any time. You can have the personal data stored about you changed at any time. If your personal data is required for the fulfilment of a contract or for the implementation of pre-contractual measures, an early deletion of your personal data is only possible if there are no contractual or legal obligations that prevent a deletion.

  1. Contact form and contacting by e-mail

a. Legal basis for data processing: The legal basis for the processing of your personal data, which are transmitted in the event of contacting us via the contact form or by e-mail, is Art. 6 para. 1 lit. f EU-GDPR. If the purpose of contacting you via the contact form or by e-mail is to conclude a contract, Article 6 (1) (b) EU-GDPR is an additional legal basis for the processing. 

b. Purpose of data processing: The processing of your personal data in the event of contacting us via the contact form or by e-mail serves us solely to process the contact. 

c. Duration of storage: Your personal data will be deleted as soon as they are no longer required for the purpose for which they were collected. This is the case for personal data sent via the contact form or by e-mail when the respective conversation with you has ended. The conversation ends when it is clear from the circumstances that the matter in question has been finally clarified between you and us.

d. Possibility of objection and removal: You have the possibility to object to the processing of your personal data at any time for the future by using the contact form or by e-mail. In such a case the conversation between you and us cannot be continued. All personal data stored in the course of the contact will be deleted in this case.

  1. Web tracking and web analysis by Google Analytics

a. Processing handling: This website uses Google Analytics, the web analysis service of Google Inc. (hereinafter "Google"). Google Analytics uses so-called "cookies", text suggestion files which are stored on your computer and which enable an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. However, in the event that IP anonymisation is activated on this website, your IP address will be shortened by Google within member states of the European Union or in other states which are party to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage for the website operator. The IP address transmitted by your browser within the framework of Google Analytics is not combined with other data from Google.

b. Legal basis for data processing: The legal basis for the processing of your personal data is Art. 6 para. 1 lit. f EU-GDPR.

c. Purpose of data processing: The processing of your personal data enables us to analyse your surfing behaviour. By evaluating the data obtained, we are able to compile information on the use of the individual components of our website. This helps us to constantly improve our website and its user-friendliness. These purposes also constitute our legitimate interest in the processing of your personal data in accordance with Art. 6 para. 1 lit. f EU-GDPR. By making your IP address anonymous, your interest in the protection of personal data is sufficiently taken into account.

d. Duration of storage: Your personal data will be deleted as soon as they are no longer required for our aforementioned purposes. In our case this is after 14 months.

e. Possibility of objection and removal: Users of this website who do not want their data to be collected by Google Analytics can install the browser add-on to deactivate Google Analytics. This add-on instructs the JavaScript of Google Analytics (ga.js, analytics.js and dc.js) executed on websites not to allow the sending of information to Google Analytics. If you want to deactivate Google Analytics, please go to this page and install the Google Analytics deactivation add-on for your browser. For detailed information on installing and uninstalling the add-on, please refer to the relevant help resources for your browser. Browser and operating system updates may cause the deactivation add-on to no longer work as intended. For more information on managing add-ons for Chrome, click here. If you are not using Chrome, check directly with the manufacturer of your browser to see if add-ons work properly in the browser version you are using. The latest versions of Internet Explorer occasionally load the add-on to disable Google Analytics after data is sent to Google Analytics. Therefore, if you use Internet Explorer, the add-on will install cookies on your computer. These cookies ensure that any data collected is immediately deleted from the server that collected the data. Make sure that third-party cookies are not disabled for Internet Explorer. If you delete your cookies, these cookies will be reset by the add-on within a short period of time to ensure that your Google Analytics browser add-on continues to work properly. The browser add-on for deactivating Google Analytics does not prevent data from being sent to the website or to other web analysis services. You can find more information on the terms of use and data protection at http://www.google.com/analytics/terms/de.html or https://support.google.com/analytics/answer/6004245?hl=de. IP anonymisation is activated on this website.

  1. Google Ads remarketing

a. We use the remarketing function within the Google Ads service. With the remarketing function, we can present users of our website with advertisements based on their interests on other websites within the Google advertising network (in Google Search or on YouTube, so-called "Google Ads" or on other websites). For this purpose, the interaction of the users on our website is analyzed, e.g. which offers the user was interested in, in order to be able to display targeted advertising to the users on other sites even after they have visited our website. For this purpose, Google stores cookies on the end devices of users who visit certain Google services or websites in the Google display network. These cookies are used to record the visits of these users. The cookies are used to uniquely identify a web browser on a specific end device and not to identify a person.

b. Recipients: Further information on data protection at Google can be found here: https://policies.google.com/privacy?hl=de and https://services.google.com/sitestats/de.html.

Transfers to third countries are possible. So-called standard contractual clauses pursuant to Art. 46 DSGVO have been concluded as suitable guarantees. Further information can be found here: https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu_de

c. Deletion/revocation: You can prevent participation in this tracking process in various ways: a) by adjusting your browser software accordingly, in particular the suppression of third-party cookies will result in you not receiving any third-party ads; b) by installing the plug-in provided by Google at the following link: https://www.google.com/settings/ads/plugin; c) by deactivating the interest-based ads of the providers that are part of the self-regulatory campaign "About Ads" via the link https://optout.aboutads.info/?c=2&lang=EN, whereby this setting will be deleted when you delete your cookies; d) by permanently deactivating them in your browsers Firefox, Internetexplorer or Google Chrome under the link ,https://support.google.com/ads/answer/7395996 e) by means of corresponding cookie settings of our Consent Management System. We would like to point out that in this case you may not be able to use all functions of this offer in full.

Lifetime of cookies: up to 180 days (this only applies to cookies set via this website).

d. Legal basis: Art. 6 para. 1 lit a EU-DSGVO (consent).

  1. Other web analysis tools used

a. Other web analysis tools that Tool Arena uses include Google AdWords, Google Tag Manager, Facebook Pixel and LinkedIn Insight Tag.

b. Legal basis: The legal basis for the processing of your personal data is Article 6(1)(f) EU-GDPR.

c. Purpose: The processing of your personal data enables us to analyse your surfing behaviour. On the basis of the data obtained, we are able to compile information on the use of the individual areas of our website. This helps us to constantly improve our website and its user-friendliness.

d. Storage period: Your personal data will be deleted as soon as they are no longer required for our previously mentioned purposes.

e. Possibility of objection and removal: Cookies are stored on your computer and transmitted from there to our website. You therefore have full control over the use of cookies. By changing the settings in your Internet browser, you can deactivate or restrict the transmission of cookies. You can delete already stored cookies at any time. This can also be done automatically. If cookies are deactivated for our website, it is possible that not all functions of the website can be used to their full extent. On our website we offer you the possibility of an "opt-out" from the analysis procedure. To do this, you must click on the corresponding "Allow selection" button in the dialogue box. The dialogue box appears when you visit the website for the first time or if you have previously emptied your cache. In this way another cookie is set on your computer, which signals us not to collect your personal data. If you delete the relevant cookie, the opt-out cookie must be set by us again.

  1. Direct Marketing

a. The legal basis for the processing of your personal data in the context of direct marketing by post is Art. 6 para. 1 letter f EU-GDPR.

b. Purpose of data processing: The purpose of processing your personal data in the context of direct marketing by mail is to promote the sale of goods or services. For this purpose, we have a legitimate interest in the processing of data in accordance with Art. 6 para. 1 letter f EU-GDPR. 

c. Duration of storage: Your personal data will be deleted as soon as they are no longer required for the purpose of their collection; this is particularly the case if you have received an objection. 

d. Objection and removal option: You can object to the processing of your personal data in the context of direct marketing by post at any time for the future.

  1. Legal defence and enforcement

a. Legal basis for data processing: The legal basis for the processing of your personal data in the context of legal defence and law enforcement is Art. 6 para. 1 letter f EU-GDPR .

b. Purpose of data processing: The purpose of processing your personal data within the scope of legal defence and enforcement is the defence against unjustified claims and the legal enforcement of claims and rights. For this purpose, we have a legitimate interest in data processing in accordance with Art. 6 Para. 1 letter f EU-GDPR.

c. Duration of storage: Your personal data will be deleted as soon as they are no longer required for the purpose for which they were collected. 

d. Possibility of objection and removal: The processing of your personal data within the scope of legal defence and legal enforcement is absolutely necessary for legal defence and legal enforcement. Consequently, there is no possibility for you to object.

  1. Categories of recipients

Within our company, those departments and divisions receive personal data that they need to fulfil the aforementioned purposes. In addition, we sometimes use different service providers and transfer your personal data to other trustworthy recipients. These can be, for example:

  • banks
  • scan service
  • printers
  • lettershops
  • IT service providers
  • lawyers and courts
  1. Rights of the data subject

If your personal data is processed by us, you are a data subject within the meaning of the EU-GDPR and you have the following rights against us:

a. Right to information: You can demand confirmation from us as to whether personal data concerning you is being processed by us. If such processing has taken place, you can demand information from us about the following: (1) the purposes for which the personal data are processed; (2) the categories of personal data which are processed; (3) the recipients or (3) the recipients or categories of recipients to whom the personal data concerning you have been or will be disclosed; (4) the envisaged duration of the storage of the personal data concerning you or, if specific information cannot be provided, criteria for determining the duration of storage; (5) the existence of a right of rectification or erasure of personal data concerning you, a right to have the processing limited or refused by us; (6) the existence of a right of appeal to a supervisory authority; (7) any available information on the origin of the data when the personal data are not collected from you; (8) the existence of automated decision making including profiling as referred to in Art. 22 (1) and (4) EU GDPR and, at least in these cases, meaningful information about the logic involved and the scope and intended impact of such processing on you. You have the right to obtain information as to whether the personal data concerning you is transferred to a third country or to an international organisation. In this context, you may request to be informed of the appropriate safeguards in accordance with Article 46 EU GDPR in relation to the transfer.

b. Right of rectification: You have a right of rectification and/or integration towards us if the personal data processed concerning you is incorrect or incomplete. We must make the correction without delay.

c. Right to limit processing: You have the right to request that the processing of personal data concerning you be limited under the following conditions: (1) if you dispute the accuracy of the personal data concerning you for a period of time which allows us to verify the accuracy of the personal data; (2) if the processing is unlawful and you object to the deletion of the personal data and instead request the restriction of the use of the personal data; (3) if we no longer need the personal data for the purposes of the processing but you need the personal data for the purpose of asserting, exercising or defending legal claims; or (4) if you object to the processing in accordance with Art. 21 (1) EU-GDPR and it is not yet clear whether our legitimate reasons outweigh your reasons. If the processing of personal data relating to you has been restricted, such data, apart from being stored, may be processed only with your consent or for the purpose of pursuing, exercising or defending legal claims or protecting the rights of another natural or legal person or on grounds of an important public interest of the Union or a Member State. If the restriction on processing has been restricted under the above conditions, you will be informed by us before the restriction is lifted.

d. Right of deletion

i. Obligation to delete: You can demand that the personal data concerning you be deleted immediately and we are obliged to delete this personal data immediately if one of the following reasons applies: (1) the personal data concerning you are no longer necessary for the purposes for which they were collected or otherwise processed (2) you withdraw your consent on which the processing was based pursuant to Article 6 (1) (a) or Article 9 (2) (a) EU GDPR and there is no other legal basis for the processing. (3) You object to the processing in accordance with Art. 21 (1) EU GDPR and there are no legitimate legitimate grounds for processing that take precedence, or you object to the processing in accordance with Art. 21 (2) EU GDPR. (4) The personal data concerning you have been processed unlawfully. (5) The deletion of personal data concerning you is necessary to comply with a legal obligation under Union law or the law of the Member States to which we are subject. (6) The personal data concerning you have been collected in relation to information society services offered, in accordance with Article 8(1) EU GDPR.

ii. Information to third parties: If we have made the personal data concerning you public and if we are obliged to delete them in accordance with Art. 17 para. 1 EU-GDPR, we will take reasonable measures, including technical measures, taking into account the available technology and the implementation costs, to inform data controllers who process the personal data that you, as a data subject, have requested them to delete all links to this personal data or copies or replications of this personal data.

iii. Exceptions: The right of erasure shall not apply insofar as processing is necessary (1) for the exercise of the right to freedom of expression and information; (2) to comply with a legal obligation which requires processing under the law of the Union or of the Member States to which we are subject or in the performance of a task carried out in the public interest or in the exercise of official authority vested in us; (3) for reasons of public interest relating to public health pursuant to Art. 9 (2) lit. h and i as well as Art. 9 (3) EU-GDPR; (4) for archiving, scientific or historical research purposes in the public interest or for statistical purposes in accordance with Art. 89 (1) EU-GDPR, insofar as the law referred to in section a) is likely to render impossible or seriously prejudice the attainment of the objectives of such processing, or (5) to assert, exercise or defend legal claims.

e. Right to information: If you have asserted the right to rectification, erasure or limitation of processing against us, we are obliged to notify all recipients to whom the personal data concerning you have been disclosed of this rectification, erasure or limitation of processing, unless this proves impossible or involves a disproportionate effort. You have the right to be informed about these recipients.

f. Right to data transferability: You have the right to receive the personal data concerning you that you have provided to us in a structured, common and machine-readable format. In addition, you have the right to transfer these personal data, which have been made available to us, to another responsible party without hindrance by us, provided that (1) the processing is based on an agreement pursuant to Art. 6 para. 1 letter a EU-GDPR or Art. 9 para. 2 letter a EU-GDPR or on a contract pursuant to Art. 6 para. 1 letter b EU-GDPR and (2) the processing is carried out by means of automated procedures. In exercising this right, you also have the right to request that the personal data concerning you be transmitted directly by us to another responsible party, insofar as this is technically feasible. The freedoms and rights of other persons must not be affected by this. The right to transfer data does not apply to the processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us.

g. Right to object: You have the right to object at any time, for reasons arising from your specific situation, to the processing of personal data concerning you, which is carried out on the basis of Article 6(1)(e) or (f) of the EU-GDPR; this also applies to profiling based on these provisions. We will no longer process the personal data concerning you unless we can demonstrate compelling legitimate reasons for processing which outweigh your interests, rights and freedoms, or unless the processing serves to assert, exercise or defend legal claims. If the personal data concerning you are processed for the purpose of direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing, including profiling, insofar as it is connected with such direct marketing. If you object to processing for the purposes of direct marketing, your personal data will no longer be processed for those purposes. You may exercise your right of objection in relation to the use of information society services by means of automated procedures involving technical specifications, without prejudice to Directive 2002/58/EC.

h. Right to revoke the declaration of consent under data protection law: You have the right to revoke your declaration of consent under data protection law at any time. Revocation of your consent does not affect the lawfulness of the processing that has taken place on the basis of your consent until revocation.

i. Automated case-by-case decision including profiling: You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects vis-à-vis you or significantly affects you in a similar manner. This does not apply if the decision is (1) necessary for the conclusion or performance of a contract between you and us, (2) permitted by Union law or the law of the Member States to which we are subject and that law contains adequate measures to safeguard your rights and freedoms and your legitimate interests, or (3) with your express consent. However, such decisions may not be based on special categories of personal data pursuant to Art. 9 (1) EU-GDPR, unless Art. 9 (2) lit. a or g EU-GDPR applies and appropriate measures have been taken to protect your rights and freedoms and your legitimate interests. With regard to the cases referred to in (1) and (3), we shall take appropriate measures to safeguard the rights and freedoms and your legitimate interests, which shall include at least the right to obtain the intervention of a person from us, to present our point of view and to challenge the decision.

j. Right to appeal to a supervisory authority: Without prejudice to any other administrative or judicial remedy, you have the right to appeal to a supervisory authority, in particular in the Member State in which you are resident, your place of work or the place where the suspected infringement is committed, if you consider that the processing of personal data relating to you is in breach of the EU-GDPR. The competent supervisory authority for us is: The Landesbeauftragte für den Datenschutz Baden-Württemberg Postfach 10 29 32 70025 Stuttgart The supervisory authority to which you have submitted a complaint will inform you of the status and the results of the complaint, including the possibility of a legal remedy under Article 78 EU-GDPR. If you have any questions, please do not hesitate to contact our data protection officer.