- The connection data of the requesting device, including the IP address;
- The web pages accessed, including the referring page;
- The date and time of your visit;
- The type and version of the requesting browser and the operating system;
- The volume of data transferred in connection with your visit.
Internal recipients: Access to your personal data is restricted to the extent needed and to those persons at Kloeckner who need such access in order to fulfill the above-mentioned purposes.
External recipients: We pass on your personal data to external recipients only if it is necessary to do so in order to process and respond to your inquiry or order, it is expressly allowed by law or you have given us your consent to doing so.
External recipients may be the following:
Kloeckner Group companies or external service providers that we use for the provision of services, such as in connection with technical infrastructure and maintenance and with the provision of content under contract.
b) Public bodies
Public authorities and government institutions, such as prosecutors, courts or tax authorities to which we are under a binding obligation to disclose personal data by law.
c) Other recipients
We pass on your personal data to other recipients only if it is necessary for contract fulfillment, you have given your consent or it is expressly allowed by law. Other recipients may notably include Group companies, payment service providers, credit reporting agencies or debt collection agencies.
Our service provider for matters related to debt collection is:
Atradius Crédito y Caución S.A. de Seguros y Reaseguros
3 Harbour Drive
Cardiff CF10 4WZ
Phone: + 44 29 2082 4000
Fax: + 44 29 2082 40003
Atradius N.V.’s data protection notice is available online at https://atradius.co.uk/article/privacy-statement.html. Atradius’s Data Protection Officer can be contacted by e-mail at firstname.lastname@example.org.
VI. Transfer to countries outside of the EU
Where applicable, we also transfer personal data processed in connection with the processes described above to recipients who process your personal data outside the territory of the European Union. If the countries concerned do not have an equivalent level of data protection in accordance with EU law, we ensure adequate protection of your personal data with the recipients concerned by means of appropriate safeguards as stipulated in the GDPR. You can request a copy of the safeguards from us (see heading I for contact details).
VII. Your rights
Your rights as a data subject under the General Data Protection Regulation (GDPR) – subject to the applicable legal requirements being met – are as follows:
Access: You have the right of access to personal data concerning you that we process.
Rectification: You have the right to obtain rectification of your personal data. You also have the right to have incomplete personal data completed.
Erasure: In certain instances, you have the right to obtain erasure of your personal data.
Restriction of processing: In certain instances, you have the right to have us restrict the processing of your personal data.
Data portability: If you have provided us with data on the basis of a contract or consent, you have the right to receive the data you have provided in a structured, commonly used and machine-readable format or to have us transmit it to another controller.
Right to object
You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on Article 6(1)(f) of the GDPR. We will then no longer process the personal data for the stated purposes unless we can demonstrate compelling legitimate grounds for processing that override your interests, rights and freedoms, or the processing is for the purpose of establishing, exercising or defending legal claims.
With regard to the processing of your data for direct marketing purposes, please see the separate information on opt-out rights with regard to direct marketing.
Please also note the information on revocation of your consent with regard to processing on the basis of cookies in section IV.
Revocation of consent: If you have given us consent to the processing of your data, you can revoke it at any time with effect for the future. This does not affect the lawfulness of the processing of your data prior to the revocation.
Exercising your rights: To exercise any or all of your rights as described above, please contact us by e-mail or postal mail at the address under heading I. above. Alternatively, you can also contact the Data Protection Officer responsible for you (see heading II for contact details). Please make sure that we can clearly identify you.
In instances where we share joint responsibility with another controller in accordance with Article 26 of the GDPR, you may also contact the other controller in order to exercise your aforementioned rights, using the contact details provided.
On request, we will make available the essence of the arrangement under Article 26(1) of the GDPR determining who meets which responsibilities under the GDPR.
Right to lodge a complaint with a supervisory authority: You have the right to lodge a complaint with a supervisory authority – in particular, in the Member State of your habitual residence, place of work or place of the alleged infringement – if you consider that the processing of personal data concerning you is unlawful.
VIII. Automated individual decision-making, including profiling
There is no automated individual decision-making, including profiling, within the meaning of Article 22 of the GDPR, in connection with the use of our website.
As of November 2019