In the following, we would like to inform you about which personal data is collected when you visit our website, how we process or use it, and what rights you have as a user of the website vis-à-vis Salm Global Timber GmbH under data protection law (EU General Data Protection Regulation (GDPR) and Federal Data Protection Act (BDSG)).
In principle, we collect, process and use your personal data only in accordance with the statutory provisions. Personal data when you visit our website is only created when you visit our website and that relates to you personally.
The information applies to the website https://salm-global-land.de.
With regard to the terms (e.g. „processing“ or „controller“), we refer to the definitions in Art. 4 GDPR.
The controller responsible for data processing is: Salm Global Timber GmbH
Schlossstrasse 3
55595 Wallhausen
Phone: +49 6706 9444-0
E-Mail: salm-global-land@salm-salm.de
Scope of the Processing of Personal Data
We generally process personal data of our users only to the extent necessary to provide a functional website and our content and services. Personal data is usually processed only with the user’s consent. Exceptions apply where prior consent cannot be obtained for factual reasons and processing is permitted by law.
Legal Basis for the Processing of Personal Data
Where we obtain consent for processing personal data, the legal basis is Article 6(1)(a) GDPR.
If personal data is processed to fulfill a contract to which the data subject is a party, the legal basis is Article 6(1)(b) GDPR. This also applies to processing necessary for pre-contractual measures.
Where processing is necessary to comply with a legal obligation to which our company is subject, the legal basis is Article 6(1)(c) GDPR.
If processing is necessary to safeguard a legitimate interest of our company or a third party, and the interests, fundamental rights, and freedoms of the data subject do not override this interest, the legal basis is Article 6(1)(f) GDPR.
Data Deletion and Storage Period
We delete or block personal data as soon as the purpose of storage no longer applies. Data may be stored beyond this period if required by European or national legislation. Data is also deleted or blocked when statutory retention periods expire, unless longer storage is required for the conclusion or fulfillment of a contract.
Description and Scope of Data Processing
Each time our website https://salm-global-land.de is accessed, the provider automatically collects data and information from the accessing computer system. This includes:
1. Browser type and version
2. User’s operating system
3. User’s internet service provider
4. User’s IP address
5. Date and time of access
6. Websites from which the user’s system accesses our website
7. Websites accessed by the user’s system via our website
These data are also stored by the provider in log files. They are not stored together with other personal data of the user.
Legal Basis for Data Processing
The legal basis for temporary storage of data and log files is Article 6(1)(f) GDPR.
Purpose of Data Processing
Temporary storage of the IP address is necessary to deliver the website to the user’s device. For this purpose, the IP address must be stored for the duration of the session.
Log files are stored to ensure the functionality of the website, improve the website, and ensure the integrity and security of our IT systems. This constitutes our legitimate interest under Article 6(1)(f) GDPR.
These data are not evaluated for market research or advertising purposes and are not shared with third parties for such purposes.
Duration of Storage
Data is deleted as soon as the purpose for which it was collected no longer applies. This is the case when the session ends.
Log file data is deleted after no more than seven days. Longer storage is possible; in this case, IP addresses are deleted or anonymized so that the accessing client can no longer be identified.
Right to Object and Withdrawal
Collection and storage of these data are strictly necessary for operating the website. Therefore, there is no right to object.
Description and Scope of Data Processing
Our website uses cookies. Cookies are text files stored in the internet browser or by the browser on the user’s computer system. When a user accesses a website, a cookie may be stored on the user’s operating system. This cookie contains a characteristic string that enables unique identification of the browser when the website is accessed again.
We use only session cookies. These store a session ID that allows multiple requests from your browser to be assigned to the same session. This enables recognition of your device when you return to the website. Session cookies are deleted when you close your browser.
Legal Basis for Data Processing
The legal basis for processing personal data using cookies is Article 6(1)(f) GDPR.
Purpose of Data Processing
Cookies are used to simplify website usage. Some website functions cannot be provided without cookies, as they require the browser to be recognized after a page change.
Data collected through technically necessary cookies is not used to create user profiles.
Storage Duration, Right to Object, and Removal
Cookies are stored on the user’s device and transmitted to our website by the user. Users therefore have full control over cookies. Cookies can be disabled or restricted through browser settings, and stored cookies can be deleted at any time. If cookies are disabled, some website functions may no longer be fully available.
Description and Scope of Data Processing
Our website provides a contact form for electronic communication. If you use it, the data entered into the input fields is transmitted to and stored by us.
This includes:
First Name
Last Name
Email address
Message
At the time of submission, the following data is also stored:
User’s IP address
Date and time of registration
Your consent is obtained during the submission process and reference is made to this privacy policy.
Alternatively, you may contact us via the email address provided. In this case, the personal data transmitted with the email is stored.
These data are not shared with third parties and are used exclusively to process the communication.
Legal Basis for Data Processing
If consent is given, the legal basis is Article 6(1)(a) GDPR.
For data transmitted via email, the legal basis is Article 6(1)(f) GDPR. If the email contact aims at concluding a contract, Article 6(1)(b) GDPR also applies.
Purpose of Data Processing
Personal data from the contact form is processed solely to handle the inquiry. Email contact also constitutes our legitimate interest in processing the data.
Additional data processed during submission serves to prevent misuse of the contact form and ensure IT system security.
Duration of Storage
Data is deleted once the purpose for which it was collected no longer applies, i.e., once communication with the user has ended.
Additional data collected during submission (e.g. IP address) is deleted no later than seven days after submission.
Right to Object and Withdrawal
Users may withdraw their consent at any time. If you object to storage of your personal data, communication cannot be continued.
All data collected during contact will be deleted in this case.
If we process your personal data, you are a data subject under the GDPR and have the following rights:
1. Right of access (Art. 15 GDPR)
2. Right to rectification (Art. 16 GDPR)
3. Right to erasure (Art. 17 GDPR)
4. Right to restriction of processing (Art. 18 GDPR)
5. Right to data portability (Art. 20 GDPR)
6. Right to withdraw consent (Art. 7(3) GDPR)
7. Right to object to future processing (Art. 21 GDPR)
You also have the right to be informed whether your personal data is transferred to a third country or international organization and about the safeguards under Art. 46 GDPR.
You have the right to lodge a complaint with a data protection supervisory authority under Art. 77 GDPR.
We use Google reCAPTCHA to determine whether an entry in our contact or newsletter form is made by a human or a computer. Google analyzes the following data: IP address, website visited where reCAPTCHA is embedded, date and duration of visit, browser and operating system identifiers, Google account (if logged in), mouse movements, and image recognition tasks. The legal basis for this processing is Article 6(1)(f) GDPR. Our legitimate interest lies in ensuring website security and protecting against automated misuse.
Status: 25 May 2018