Ralf Tschorn
Inspection Solutions
P.O. Box 1123
73541 Lorch
Germany
Legal form:
Sole proprietorship
Represented by:
Ralf Tschorn
Contact:
Telephone: +49 7181 606986 0
E-Mail:
info@toollense.eu
VAT-ID:
DE330850871
Import/Export - EORI-No.:
DE306731470532551
We take the protection of your personal data seriously and comply with the statutory data protection regulations. Personal data is only collected by us to the extent necessary.
The following statement provides you with an overview of how we ensure this protection and what type of data is collected for what purpose.
The controller within the meaning of Art. 4 (7) EU General Data Protection Regulation (GDPR) is
Ralf Tschorn
Inspection Solutions
Owner: Ralf Tschorn
Postal address:
P.O. Box 1123
73541 Lorch
Phone:
+49 7181 - 6060986 0
E-mail:
info@toollense.eu
Please also refer to our Legal Notice: Legal Notice
(1) In the following, we inform you about the processing of personal data, in particular when using our website. In this privacy policy we use, among others, the following terms:
- Personal data
Personal data means any information relating to an identified or identifiable natural person (hereinafter “data subject”). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person. Information relating to legal entities is not personal data.
- Data subject
A data subject is any identified or identifiable natural person whose personal data is processed by the controller.
- Processing
Processing means any operation or set of operations which is performed on personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
- Restriction of processing
Restriction of processing means the marking of stored personal data with the aim of limiting their future processing.
- Profiling
Profiling means any form of automated processing of personal data consisting of the use of such personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects concerning that natural person’s performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements.
- Pseudonymisation
Pseudonymisation means the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures to ensure that the personal data is not attributed to an identified or identifiable natural person.
- Controller or controller responsible for processing
Controller or controller responsible for processing means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data. Where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law.
- Processor
Processor means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.
- Recipient
Recipient means a natural or legal person, public authority, agency or another body, to which the personal data are disclosed, whether a third party or not. However, public authorities which may receive personal data in the framework of a particular inquiry in accordance with Union or Member State law shall not be regarded as recipients.
- Third party
Third party means a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorised to process personal data.
- Consent
Consent of the data subject means any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.
(2) We only process your personal data if a legal basis exists, in particular if
- you have given your explicit consent in accordance with Art. 6 (1) sentence 1 lit. a GDPR;
- processing is lawful and necessary for the performance of a contract with you in accordance with Art. 6 (1) sentence 1 lit. b GDPR;
- a legal obligation exists for disclosure under Art. 6 (1) sentence 1 lit. c GDPR;
- processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority, Art. 6 (1) lit. e GDPR;
- processing is necessary for the establishment, exercise or defence of legal claims in accordance with Art. 6 (1) sentence 1 lit. f GDPR, and there is no reason to assume that you have an overriding legitimate interest in the non-disclosure of your data.
The transfer of your personal data to third parties for purposes other than those listed in this statement will not take place and, if it does, only if one of the legal bases of Art. 6 (1) GDPR (see above) applies.
(3) We adhere to the principles of data minimisation and data economy. We therefore store your personal data only as long as necessary to achieve the purposes stated here or as required by the various storage periods provided for by law. After the purpose no longer applies or these periods have expired, the corresponding data will be routinely blocked or deleted in accordance with the statutory provisions. As a rule, the duration of storage is based on the respective statutory retention period, e.g. commercial and tax law retention periods pursuant to § 257 (4) HGB, § 147 (3) AO (6 or 10 years). Retention periods may also result from ongoing limitation periods for claims. For example, claims under company pension schemes become time-barred after 30 years (§ 18a BetrAVG), civil law claims are generally time-barred after 3 years, with a maximum of 30 years. After expiry of the period, the corresponding data will be routinely deleted, provided that they are no longer required for contract fulfilment or contract initiation and/or there is no legitimate interest on our part in further storage.
(4) In some cases, we use external service providers to process your data. These have been carefully selected and commissioned by us, are bound by our instructions and are regularly monitored. If we use commissioned service providers for individual functions of our offer, we will inform you about the respective processes. If our service providers or partners are based in a country outside the European Economic Area (EEA), we will also inform you of the consequences of this circumstance.
(5) Unless you have registered for our newsletter or to receive advertising and there is no justification for processing under Art. 6 (1) sentence 1 lit. f GDPR or an objection under Art. 21 (2) GDPR, we will not use your data to inform you about further products from our portfolio. However, we will use your data to send you technical information about the webshop and contract processing, if applicable.
(6) Our website may contain links to websites of other providers or embed content from third-party websites. As soon as you click on a link, the respective website operator may receive information about you. Our privacy policy applies exclusively to our website. We have no influence on which data is collected and processed, nor are we aware of the scope of data collection, the purposes of processing or the storage periods of the linked websites. We must rely on the assumption that the privacy policies there are complete and correct.
(7) We would like to point out that data transmission on the Internet, e.g. via a browser or by e-mail, can have security gaps. Complete protection of data against access by third parties is not possible.
(1) When you use the website purely for informational purposes, i.e. if you do not register or otherwise provide us with information, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure stability and security (legal basis is Art. 6 (1) sentence 1 lit. f GDPR):
- IP address
- Date and time of the request
- Time zone difference to Greenwich Mean Time (GMT)
- Content of the request (specific page)
- Access status/HTTP status code
- Amount of data transmitted
- Website from which the request comes
- Browser
- Operating system (e.g. Windows 10, Linux) and its interface (e.g. X-Windows)
- Language and version of the browser software.
(2) The data listed above is processed by us for the following purposes:
- Ensuring a smooth connection to the website,
- Ensuring comfortable use of our website,
- Evaluating system security and stability, and
- for other administrative purposes.
Under no circumstances do we use the data collected for the purpose of drawing conclusions about your person, unless otherwise stated below.
(1) If you wish to place an order in our webshop or directly on our premises or otherwise enter into a contractual relationship with us, it is necessary for the conclusion of the contract that you provide the personal data that we need to process the contractual relationship.
We process the following personal data:
- Salutation, first name, last name;
- a valid e-mail address;
- address;
- telephone number (landline and/or mobile);
- information necessary to process the contractual relationship or to protect our rights and fulfil our obligations;
- in the event that we purchase precious metals from you, we record all data on your identity card or passport, i.e. in addition to the above data, the ID number.
(2) This data is processed
- to identify you as our contractual partner or as an employee of our contractual partner;
- to be able to advise, support and supply you appropriately;
- for correspondence with you;
- for invoicing;
- to process any warranty or liability claims and to assert any claims against you.
(3) We use your data within our company, record your data in our ERP system and in our accounting system. We disclose accounting data to our tax advisor. For the dispatch of goods, for example, we forward address data to the commissioned shipping company. We may also pass on your personal data to third parties if contracts or similar services are offered or provided by us together with partners, as well as to suppliers and subcontractors, insofar as this is necessary in each case. You will receive more detailed information on this when you provide your personal data or in the description of our offer.
(4) The collection, storage and disclosure of data therefore takes place for the purpose of fulfilling the contract and on the basis of Art. 6 (1) sentence 1 lit. b GDPR. Further processing will only take place if you have given your consent or if a statutory permission exists. Failure to provide this data may result in the contract not being concluded.
(5) As a rule, we process data directly from the persons affected by the contractual relationship (data subjects pursuant to Art. 13 GDPR).
As a rule, we do not process personal data that we have collected from third parties. Otherwise, we will inform the data subject separately in accordance with Art. 14 GDPR, in particular about the source from which the personal data originates. This does not apply if one of the following cases exists:
- the data subject already has the information,
- the provision of this information proves impossible or would involve a disproportionate effort within the meaning of Art. 14 (5) lit. b GDPR. In such cases, we take appropriate measures to protect the rights and freedoms and legitimate interests of the data subject,
- the obtaining or disclosure is expressly laid down by Union or Member State law to which we are subject and which provides appropriate measures to protect the legitimate interests of the data subject, or
- the personal data must remain confidential under Union or Member State law, in particular due to professional secrecy, including a statutory obligation of secrecy.
(6) Since you can only order from us against advance payment, cash on delivery or cash payment upon collection, we only record the payment data (name, address of the payer, bank details) that you provide to us and that is necessary for processing. In the case of the shipping/payment method “cash on delivery”, we forward your personal data to the performing postal/logistics company.
(7) We do not forward your data to a credit agency and we do not carry out any scoring, with or without automated decision-making.
(8) You can create a customer account, which allows us to store your data for future purchases. When a customer account is created, the data you provide will be stored revocably. You can delete all further data, including your user account, at any time in the customer area.
(9) For the duration of storage and retention of your personal data, we refer to § 2 (3) above.
We process personal data of applicants for the purpose of handling the application procedure on the legal basis of Art. 6 (1) lit. b GDPR, § 26 (1) BDSG (German Federal Data Protection Act) and Art. 6 (1) lit. a GDPR. Processing may also take place electronically. This is particularly the case if an applicant submits corresponding application documents to us electronically, for example by e-mail or via a web form on the website. If an employment relationship is concluded, the data transmitted will be stored for the purpose of processing the employment relationship in compliance with legal provisions. If no employment contract is concluded with the applicant, the application documents will be automatically deleted two months after notification of the rejection decision, provided that no other legitimate interests oppose deletion. Another legitimate interest in this sense may be, for example, a burden of proof in proceedings under the General Equal Treatment Act (AGG).
In addition to the purely informational use of our website and the webshop, we offer various services which you can use if you are interested, e.g. contacting us via e-mail, contact form, newsletter. For this purpose, you must usually provide further personal data which we use to provide the respective service and for which the above-mentioned principles of data processing apply. When you contact us, the data you provide (your e-mail address, and possibly your name and telephone number) will be stored by us in order to answer your questions. Further information may be provided voluntarily. Data processing for the purpose of contacting us is carried out in accordance with Art. 6 (1) sentence 1 lit. a GDPR on the basis of your voluntarily given consent. We delete the data arising in this context after storage is no longer necessary, or restrict processing if statutory retention obligations exist.
(1) If you have given consent to the processing of your data, you may revoke this at any time. Such a revocation affects the lawfulness of the processing of your personal data after you have declared it to us.
(2) Insofar as we base the processing of your personal data on a balance of interests (Art. 6 (1) sentence 1 lit. e and f GDPR), you may object to the processing. This is the case if processing is in particular not necessary for the performance of a contract with you, which is explained by us in the following description of the functions. When exercising such an objection, we ask you to explain the reasons why we should not process your personal data as carried out by us. In the event of your justified objection, we will examine the situation and either cease or adapt the data processing or demonstrate to you our compelling legitimate grounds on the basis of which we will continue the processing.
(3) You may, of course, object at any time to the processing of your personal data for advertising purposes.
(4) You can inform us of your objection or revocation using the contact details provided in § 1.
(5) If another legal basis for the processing of personal data exists, we may continue to process this data despite your objection or revocation.
You have the following rights vis-à-vis us with regard to your personal data:
• – in accordance with Art. 15 GDPR, to obtain information about your personal data processed by us.
In particular, you may obtain information about the purposes of processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the source of your data if it was not collected by us, and the existence of automated decision-making including profiling and, where applicable, meaningful information about its details;
• – in accordance with Art. 16 GDPR, to obtain without undue delay the rectification of inaccurate personal data concerning you and the completion of incomplete personal data stored by us;
• – in accordance with Art. 17 GDPR, to obtain the erasure of your personal data stored by us, unless processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defence of legal claims;
• – in accordance with Art. 18 GDPR, to obtain restriction of processing of your personal data where the accuracy of the personal data is contested by you, the processing is unlawful but you oppose the erasure of the personal data and we no longer need the data, but you require it for the establishment, exercise or defence of legal claims, or you have objected to processing in accordance with Art. 21 GDPR;
• – in accordance with Art. 20 GDPR, to receive the personal data which you have provided to us, in a structured, commonly used and machine-readable format or to request the transmission of those data to another controller;
• – in accordance with Art. 7 (3) GDPR, to withdraw your consent at any time. As a result, we will no longer be allowed to continue the data processing which was based on this consent for the future;
• – in accordance with Art. 77 GDPR, to lodge a complaint with a supervisory authority. As a rule, you can contact the supervisory authority at your usual place of residence or place of work or our registered office. You are welcome to follow this link: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.
(1) We use the widely used SSL (Secure Socket Layer) protocol within the website in conjunction with the highest level of encryption supported by your browser. As a rule, this is 256-bit encryption. If your browser does not support 256-bit encryption, we instead use 128-bit v3 technology. You can tell whether an individual page of our website is transmitted in encrypted form by the closed display of the key or lock symbol in the lower status bar of your browser.
(2) We also use appropriate technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or unauthorised access by third parties. Our security measures are continuously improved in line with technological developments.
Basic – the measuring unit only
Advanced – even more clarity and comfort
Professional – the measuring machine
Basic – the measuring unit only