Thomas Fromm

WAFIOS Aktiengesellschaft
Data Protection Officer
Silberburgstr. 5
D-72764 Reutlingen
E-mail: datenschutzbeauftragter@wafios.de

You enjoy the following legal rights as a person affected, provided that the applicable requirements are met:

• Right to revoke at any time pursuant to GDPR Article 7 Paragraph 3 any consent given to us pursuant to GDPR Article 6, Paragraph 1, Sentence 1, Letter a. The withdrawal of consent means that we have to discontinue the processing of the personal data of the person affected in the future.
• Right to information about the data we have stored about you in accordance with Article 15 of the GDPR.
• Right to rectification of inaccurate data in accordance with Article 16 of the GDPR.
• Right to erasure of the data we have stored in accordance with Article 17 of the GDPR.
• Right to restriction of processing of the data we have stored in accordance with Article 18 of the GDPR.
• Right to data portability in accordance with Article 20 of the GDPR.
• Right to object in accordance with Article 21 of the GDPR.
• Right to lodge a complaint with a relevant supervisory authority in accordance with Article 77 of the GDPR if you consider that the processing of personal data relating to you infringes the GDPR. The body responsible for us is the Baden-Württemberg State Officer for Data Protection and Freedom of Information.

If personal data is processed due to legitimate interests of the data controller in accordance with Article 6, Paragraph (1), Sentence 1, Letter f of the GDPR, you have the right to object to the processing of your personal data in accordance with Article 21 of the GDPR, on grounds relating to his or her particular situation.

If you wish to make use of your right to object, just send an e-mail to datenschutz@wafios.de or any other formless notification to the data controller.

If you use your right to object, the data controller shall no longer process your personal data unless the data controller demonstrates compelling legitimate grounds for the processing which override your interests, rights and freedoms.

When you visit our website, our web server temporarily stores every access in a log file.

The following data will be stored until it is automatically deleted:

• IP address of the accessing computer
• Date and time of the access
• Name and URL of the downloaded file
• Data volume transferred
• Message whether download has been successful
• Identification data of the browser and operating system used
• This data is processed for the following purposes:
• Enables use of the website (connection establishment)
• System security
• Technical administration
• Network infrastructure
• Optimization of the internet offer

We are not able to assign these data to a particular person. The data will not be merged with any other sources. Furthermore, the data will be deleted after a statistical analysis.

Data processing takes place in line with the legal basis of Article 6, Paragraph 1, Sentence 1, Letter f of the GDPR.

During data processing, your concerns with regard to data protection are taken into account at all times in accordance with the legal provisions. Personal data will only be saved, if you choose to make this information available to us (for example, your name or your (e-mail) address). We use the data provided by you without your express permission exclusively for responding to your questions.

Data processing takes place in line with the legal basis of Article 6, Paragraph 1, Sentence 1, Letter b) of the GDPR.

In order to make your visit to our website more comfortable, to enable the use of certain functions and for market research purposes, we use so-called cookies on various pages of our website. Cookies are smaller text files. These are stored when you visit our website. In doing so, a distinction is made between session cookies and persistent cookies. The first are deleted after closing the browser, i.e. after the end of the website visit, the latter, i.e. persistent cookies, remain stored for recognition.

A so-called cookie consent banner allows you to select which cookies may be set when you visit our site. Technical cookies are necessary for operating the website. Analytics cookies collect data on usage and functionality. Advertising cookies are used to deliver advertising tailored to individual interests. We do not currently use this category of cookies.

It is also possible to completely exclude the acceptance of cookies. However, it should be noted that without cookies the functionality of the website may be limited. The help menus of the respective browsers describe how you can change the cookie settings. You will find the corresponding links below:

Microsoft Edge™

Safari™

Chrome™

Firefox™

Opera™

The following cookies are set when you visit our website:

The legal basis for the data processing is your consent according to Article 6, Paragraph 1, Sentence 1, Letter b) of the GDPR.

In addition, cookies are still set by the cookie consent tool, which are only used to process the selected consents.

We use so-called session cookies for the log-in area on our website in order to make our webshop more attractive to visitors and to enable the use of certain functions (e.g. a virtual shopping cart). Session cookies are small text files that are used as identifiers. We transfer these cookies via your web browser to your computer's hard drive and are able to read these during your current visit to our website. Please note that these cookies are created as soon as you register or log on to the webshop. As described above, you can change the cookie settings.

In addition to the cookies listed above, the following cookies are used in the shop:

Further information about the cookies can be found at oxidforge.org/en/list-of-cookies.html.

Data processing takes place in line with the legal basis of Article 6, Paragraph 1, Sentence 1, Letter f) of the GDPR. Our legitimate interest is to provide a functional and user-friendly shop.

This website makes use of Google Analytics, a website analysis service provided by Google Inc. ("Google"). Google Analytics relies on cookies - see section 5. These allow us to analyze your use of our website. Cookies are saved by Google for up to two years on your computer. The data generated by the cookie concerning your use of this website is usually transmitted and saved to a Google server in the USA. In the event an IP anonymizer is activated on this website, Google will abbreviate the IP address for Member States of the European Union as well as for other parties to the Agreement on the European Economic Area. Only in exceptional cases will the complete IP address be transferred to a Google server in the USA and abbreviated there. Google will use this information, on behalf of the operator of this website, to evaluate your use of this website, compile reports on the activities on the website and to perform further services for the operator of this website that are associated with the use of this website and the Internet. The IP address transmitted from your browser in connection with Google Analytics will not be integrated with any other of Google's information.

You can prevent the storage of cookies by setting the Consent banner or a corresponding setting in your browser software. Moreover, you can prevent the collection of the data generated by the cookie and related to your use of the website (including your IP address) to Google as well as the processing of this data by Google by downloading and installing the browser plug-in available under the following link:

tools.google.com/dlpage/gaoptout

We would like to point out that this website uses the extension "gat._anonymizeIp()" with Google Analytics in order to ensure the anonymous collection of IP addresses (so-called IP masking).

The legal basis for the data processing is Article 6, Paragraph 1, Sentence 1, Letter a of the GDPR, thus processing is carried out only on the basis of explicit consent.

When using our online contact form, personal data (like e.g. your name and e-mail address) will only be collected as provided by you. All fields marked with an * are mandatory. Your e-mail address will only be used for processing your inquiry. We store your data for as long as this is necessary to process your inquiry and/or if legal data retention obligations mean we are not permitted to delete your data.

Data processing takes place in line with the legal basis of Article 6, Paragraph 1, Sentence 1, Letter b of the GDPR.

We have established a webshop for our entrepreneur customers. When registering for this webshop, you will get direct, password-protected access to our webshop. Your data required for using this webshop will be saved here, i.e. your customer data (name, address, e-mail address, phone number, etc.), your user data (e-mail address, password) as well as data concerning the orders placed by you that are still open, completed or that have been dispatched recently. We store your data until you delete your user account and/or if legal data retention obligations mean we are not permitted to delete your data.

Data processing takes place in line with the legal basis of Article 6, Paragraph 1, Sentence 1, Letter b of the GDPR.

We use the customer data provided to us in conjunction with an order or enquiry to process the contract or your enquiry. Without this information we will not be able to process your order or request.

Data processing takes place in line with the legal basis of Article 6, Paragraph 1, Sentence 1, Letter b of the GDPR.

We have our own presence on the video platform YouTube.com. We use these to make our own videos about our company or our products available to the public. YouTube is an offer of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, IRELAND.

If you follow the "YouTube" links on our website, you will be redirected to the "WAFIOS Aktiengesellschaft" offer on YouTube. YouTube uses user data (IP address and possibly personal information) for business purposes. We refer here to the data usage guidelines of YouTube. If you are logged in to YouTube or Google when viewing our video offer, the call-up can be assigned to you personally. We do not receive any personal data ourselves and cannot assign a call-up to a person.

You can prevent data transmission to YouTube or Google by logging out of your account. Under the link adssettings.google.com/authenticated you can set an opt-out cookie after logging into your Google Account.

You can find the privacy policy of Google at policies.google.com/privacy.

Data processing takes place in line with the legal basis of Article 6, Paragraph 1, Sentence 1, Letter f of the GDPR.

An additional free web offer is our second-hand machinery exchange. Here we offer the possibility to buy or sell second-hand machines. Here we are only providing a platform. The respective providers are responsible for the individual contents of the advertisements. Registration is necessary to use the portal.

The following personal data may be collected during registration:

• Salutation, first and last name
• Company
• Phone number
• Email address
• Password
• Street and house number
• Postal code and town

Moreover, the IP address of the PC used is recorded. We also save the date and time of registration. We need this data to prevent misuse, if applicable.

In doing so, the legal basis is your consent according to Article 6, Paragraph 1, Sentence 1, Letter a of the GDPR. This is obtained in conjunction with the registration process.

For registered users there is the possibility to create an advertisement for a second-hand WAFIOS machine. In doing so, there is an option to display contact details. In this respect, these are visible to other portal users. The e-mail address specified will be used to contact you. Where applicable, this is person-related. Any contact will be made per e-mail and will take place outside of our portal. Any sales are not carried out by us.

The legal basis for the data processing when preparing an advertisement is also your consent according to Article 6, Paragraph 1, Sentence 1, Letter a of the GDPR.

In addition, registered users can submit a service request to us. For this purpose, we use the data of your registration to create an offer corresponding to the request.

In addition to your consent, the legal basis for this is also Article 6, Paragraph 1, Sentence 1, Letter b of the GDPR, i.e. the data is processed on the basis of preliminary or contractual measures.

You have the option to delete your profile on our WAFIOS second-hand machinery exchange at any time. In this case, your data will be deleted or rendered anonymous. Any service requests transmitted are not affected by this. These are stored according to their necessity. If a contract is concluded, the storage period is ten years.++++ When using the second-hand machinery portal, only system cookies are used which are necessary for the function.

• Data Protection