Data Protection

Data privacy - PHS-Tech GmbH
("www.phs-group.com")

PHS-TECH GmbH (“PHS”) adheres to all applicable data protection and privacy laws, including the applicable EU data protection regulations. We treat your personal data confidentially and in accordance with legal requirements. In the following, we would like to inform you about our handling of your data when you use our website.

I. Name and address of the data controller

The party responsible for the data collection, processing and use (“data processing”) i.e. the data controller within the meaning of the GDPR is:

PHS-TECH GmbH
Westfälische Str. 179
44309 Dortmund
mail@phs-group.com
+49 (0)231 92 52 53 8 – 0

II. Name and address of the data protection officer

For questions concerning the collection, processing or use of your personal data, and for information, correction, blocking or deletion of data and withdrawal of the consent granted, please contact the data protection officer at PHS.

Matthias Köppencastrop
mkc@phs-group.com
+49 (0)231 92 52 53 8 – 0

We will be happy to answer any questions regarding the processing of your personal data or this data protection declaration. You can also contact our data protection officer should you wish to exercise an existing right to amend, delete, correct or limit processing of your personal data or exercise your right of withdrawal. You have the right to contact the relevant authorities at any time regarding the data processed by PHS.

III. General information on data processing

PHS is responsible for the data processing that takes place during the use of this website. PHS’s employees are obliged to safeguard data secrecy, and have also been made aware of the special significance of data protection.

This data protection declaration can be called, viewed, printed or downloaded at any time at http://phs-tech.de/en/datenschutz-en/.

1. Scope of the processing of personal data

In the event that you simply access our website, personal data are collected only to the extent technically necessary, insofar as this is required to provide the website and does not differ to the information shown in this privacy policy.

The collection and use of personal data is only carried out regularly if your consent is given, a prior request for consent for reasons of fact is not possible, or the processing of data is permitted by law. Collected data will be erased immediately, insofar as they are no longer required and erasure is not precluded by legal storage requirements.

2. Legal basis for the processing of personal data

We process your personal data on the basis of different legal bases. These are shown below:

Reason for processing: Fulfilment of contract
Legal basis in the GDPR: Article 6 para. 1 b)
Explanation: Processing takes place only to the extent necessary for the performance and fulfilment of the rights and obligations under the contract. Unless expressly stated otherwise, data processing by PHS is only to this extent.

Reason for processing: Legitimate interest
Legal basis in the GDPR: Article 6 para. 1 f)
Explanation: Processing takes place insofar as VDV has a legitimate interest and no conflicting overriding interests are evident on your part. The specific interest is explained in this privacy policy in the context of the description of the type of processing.

Reason for processing: Consent
Legal basis in the GDPR: Article 6 para. 1 a)
Explanation: Processing takes place insofar as you have expressly agreed to this, and on the basis of transparent information about the type and scope of the data processing. You can revoke your consent at any time. However, processing carried out up to this point in time will not be affected.

Reason for processing: Legal obligation
Legal basis in the GDPR: Article 6 para. 1 c)
Explanation: Processing takes place insofar as it is necessary to fulfil German or European legal obligations.

3. Data erasure and storage period

We erase your personal data as soon as the legal basis for the processing is eliminated and there are no statutory storage requirements. A retention obligation may be provided for if this is regulated by the European or national legislation, laws or other regulations to which PHS is subject.

IV. Provision of the website and creation of log files

1. Description and scope of the data processing

In order to establish and maintain the connection when accessing the website for informational use only, only such server log files that your browser transmits to us are automatically collected and stored. When simply looking at the website, the following technical data are required to display the page and for reasons of IT security:

  • your IP address
  • the HTTP status code,
  • the browser type and browser version,
  • referrer URL code (previously visited site),
  • date and time of the server request,
  • the files transferred,
  • the size of the files transferred during the connection.

In addition, the personal data listed above are stored in the server log files. These data are not combined or stored with other data about you. We also use cookies and analysis services. Further details can be found in the following information in this privacy policy.

2. Legal basis for data processing

The legal basis for the temporary storage of personal data and log files is Article 6 para.1 f) of the GDPR (see III. 2.).

3. Purpose of data processing

The temporary storage of data in log files is imperative to ensure the permanent functioning of the IT systems and website technology, as well as to ensure IT security. It is also necessary to display the website correctly and enable its optimisation. This therefore constitutes a legitimate interest within the meaning of Article 6 para. 1 f) of the GDPR. The data collected in this context will not be used for marketing purposes.

4. Duration of storage

Saved log files shall be deleted after 30 days at the latest, unless there are statutory storage requirements.

V. Use of cookies

1. Description and scope of the data processing

PHS places cookies when visiting this website. A cookie is a small text file containing information transmitted by your browser. If you allow the use of cookies in your browser, this will not endanger your computer. During your visit to the website, technically necessary cookies will be set, as well as cookies for web analysis and website optimisation.

For technical reasons, so-called session cookies are used. These are technically necessary for establishing and maintaining the connection to the website. These cookies contain no personal information, and are automatically erased when you close your browser.

Along with technically required cookies, web analysis cookies are used for which the same information applies, unless otherwise stipulated in the data protection declaration. Upon visiting our website, we will notify you of the use of cookies for analysis purposes and direct you to this data protection declaration.

2. Legal basis for data processing

The legal basis for the processing of personal data in the case of the use of technically necessary cookies and cookies for web analytics purposes is Art. 6 para.1 f) of the GDPR (see III. 2.)

3. Purpose of data processing

Technically necessary cookies are used for the purpose of providing a fully functioning website. The use of cookies for web analysis is to improve the quality of the website and its content. This purpose represents a legitimate interest for data processing by PHS.

4. Storage duration, objection and elimination possibility

When cookies are set, they are stored in your browser and transmitted from there to our website. You can prevent the storage of cookies in your browser settings. However, this may cause some features of the site to be unavailable. Cookies which have already been set can also be erased from your browser at any time.

VI. Newsletter

1. Description and scope of the data processing

PHS gives you the option of subscribing to its newsletter. The following technically required data entered by you on the login screen and for registration is transmitted to PHS:

  • Name
  • Country
  • Email address
  • IP address of the accessing computer
  • Date and time of request

The newsletter sent by PHS contains so-called tracking pixels. A graphic image is inserted into the email newsletter in HTML format to allow a statistical evaluation of newsletter campaigns. By using tracking pixels, PHS can see if and when emails are opened and whether the links are clicked.

To subscribe to our newsletter, we use the double opt-in procedure. After subscribing, an email is sent to the email address provided containing a confirmation link to receive the newsletter.

2. Legal basis for data processing

The legal basis for processing your data for the purpose of sending the newsletter and use of tracking pixels is the provision of consent pursuant to Article 6 para. 1 a) of the GDPR (see III. 2.).

3. Purpose of data processing

PHS regularly notifies interested parties of its latest offers by newsletter. The data provided by you for this purpose is exclusively processed for providing and tailoring this newsletter to your requirements. We only require other data about you for the subscription to prevent any misuse of the newsletter offers and particularly of your email address. A statistical evaluation of newsletter emails is carried out to optimise the newsletter content.

4. Duration of storage

The data required for sending the newsletter is only stored while you are subscribed to the newsletter.

5. Opt-out

You can revoke your consent to receive the newsletter and the associated use of tracking pixels at any time. You can opt-out by clicking on the link provided in each newsletter or by sending an email to mail@phs-group.com.

VII. Recipients of personal data

In selected cases only, personal data are passed on to external service providers. These were carefully selected by PHS and were commissioned being bound by instructions. The recipients of personal data include technical service providers ensuring the provision and optimisation of the website, as well as service providers offering additional services, such as sending newsletters.

Your personal data are always stored in the EU and managed in accordance with our privacy policy and the GDPR, unless otherwise stated in this privacy policy. If personal data are transmitted to a company affiliated with PHS or other recipients outside the EU, this is done only on the basis of a permissible legal basis and in compliance with the statutory requirements of the GDPR. If you would like to find out more about protecting your transmitted data, please contact us (see I. for contact details).

1. Website analysis services

PHS uses website analysis services on the basis of consent pursuant to Article 6 para. 1 sentence 1 a) GDPR. These services ensure a needs-based design and the ongoing optimisation of our website. Furthermore, these tools are used to statistically evaluate the use of our website and for optimisation purposes. These interests are legitimate within the meaning of the directives above.

1.2. Google Analytics

On our website we use Google Analytics, a web analytics service provided by Google Inc. Google Analytics uses cookies, which are stored on your computer and facilitate the analysis of your use of our website. The information generated by the cookie on how you use this website is usually transferred to a Google server in the USA and stored there.

However, your IP address is truncated and thereby anonymised prior to transmission by Google within Member States of the European Union or other parties to the Agreement on the European Economic Area. Only in exceptional cases will the entire IP address be transmitted to a Google server in the USA and truncated there. IP anonymisation is enabled on our website. On behalf of PHS, Google uses this information to evaluate your use of the website, to compile reports on website activity and to provide other services to PHS related to website usage and internet usage.

The IP address provided by your browser as part of Google Analytics will not be combined with other data from Google. You can prevent the use of cookies by selecting the appropriate settings in your browser software; however, we would like to point out that if you do this, you may not be able to access all functions provided on our website. In addition, you may prevent the collection by Google of the data generated by the cookie and related to your use of the website (including your IP address) and the processing of these data by Google by downloading the browser plug-in available under the following link and installing: http://tools.google.com/dlpage/gaoptout?hl=en.

An alternative to the browser add-on, particularly when browsing on mobile end devices, you may prevent the collection of data by Google Analytics by installing an opt-out cookie which prevents any future collection of your data when visiting our website. Please click on this link: Deactivate Google Analytics. The opt-out cookie applies only in this browser and only for our website and is stored on your device. If you delete the cookies in this browser, you must set the opt-out cookie again.

The legal basis for the processing and transmission of data is the provision of consent pursuant to Article 6 para. 1 a) of the GDPR (see III. 2.).

Facebook is based in the USA and is active in a “third country” pursuant to Article 44 GDPR. Facebook is certified under the “EU-US Privacy Shield”, whereby compliance with European levels of data protection are guaranteed.

VIII. Rights of data subjects

If personal data about you are processed by PHS, you are a data subject within the meaning of Article 4 para. 1 of the GDPR. Therefore, you have the following rights with respect to the personal data concerning you:

  • Right to information pursuant to Article 15 of the GDPR
  • Right to rectification or erasure pursuant to Article 16 and Article 17 of the GDPR
  • Right to restriction of processing in accordance with Article 18 of the GDPR
  • Right to object to the processing of your data pursuant to Article 21 of the GDPR
  • Right to data portability pursuant to Article 20 of the GDPR
  • Right to revoke the data protection consent declaration according to Article 7 para. 3 of the GDPR.

As a visitor to our websites, you are not subject to automated decision-making within the meaning of Article 22 of the GDPR.

If you do not agree with the way we process your data, please contact our data protection officer (contact details in II.) Pursuant to Article 77 GDPR, you are furthermore entitled lo lodge an appeal with the competent authorities.