Data protection information - TÜV Saarland Certification

Data protection information

With the following text, we would like to inform you about which personal data is processed when you visit our website https://cert.tuev-saar.de/.

1. name and contact details of the person responsible

a. Controller

TÜV Saarland Certification GmbH
Am TÜV 1
66280 Sulzbach
Germany

Tel.: +49 (0) 68 97 / 5 06 -0
Fax.: +49 (0) 68 97 / 5 06 -2 05
E-Mail: info(at)tuev-saar.de

Managing Director:
Thorsten Greiner

is the controller within the meaning of the GDPR and for the processing of your personal data:

b. Data Protection Officer

If you have any questions about data protection, you can contact him either

via our data protection team by e-mail datenschutz@tuev-saar.de (e.g. to exercise data subject rights) or
Personally via our postal address with the addition “(personally) to the data protection officer” or by telephone via the above telephone number

2. processing on the website

In this section, we inform you about the processing that takes place on this website. In particular, you will receive information about the type of data, the purposes, the legal basis, the recipients or categories of recipients and the duration of the respective processing.

a. Server log files

Purpose of the processing:

When you visit our website, information of a general nature is automatically collected. This information (server log files) includes

IP address
Date and time of the request
Time zone difference to Greenwich Mean Time (GMT)
Content of the request (specific page)
Access status/HTTP status code
Amount of data transferred in each case
browser
Operating system and its interface
Language and version of the browser software

The data is processed for the following purposes:

Maintaining the compatibility of our website for as many visitors as possible
Combating abuse and troubleshooting
Optimization of our website
Ensuring the security of our information technology systems

Legal basis of the processing:

Art. 6 para. 1 lit. f GDPR (legitimate interest).

Legitimate interest:

Our legitimate interest arises from the above-mentioned purposes of processing and the following points:

Improving the stability and functionality of our website
Securing our IT systems

Recipient:

We use technical service providers for the operation and maintenance of our website who act as our processors.

Storage duration:

The aforementioned data will be deleted 7 days after the end of your visit to our website.

Provision prescribed or required:

The provision of the aforementioned personal data is neither legally nor contractually required. However, without the IP address and the above-mentioned data, the functionality of our website cannot be guaranteed.

b. Contact form

Purpose of the processing:

The data you enter will be processed for the purpose of communicating with you.

The data entered is processed on the basis of a legitimate interest (Art. 6 (1) (f) GDPR).

If you contact us to request a quote, the data entered in the contact form will be processed to carry out pre-contractual measures (Art. 6 para. 1 lit. b GDPR).

Legal basis of the processing:

Art. 6 para. 1 lit. b GDPR (implementation of pre-contractual measures)

Art. 6 para. 1 lit. f GDPR (legitimate interest).

Legitimate interest:

Enabling uncomplicated contact and communication with you to answer your request

Recipient:

We use technical service providers for the operation and maintenance of our website who act as our processors

Storage duration:

The data will be deleted six months after the request has been processed.

If a contractual relationship is established, the statutory retention periods apply to the relevant data.

Provision prescribed or required:

The provision of personal data in the contact form is neither legally nor contractually required. However, it is not possible to process the request without this information.

c. Application via e-mail or contact form

If you apply to us via our contact form or by e-mail, this data protection information for applicants applies.

3. Your rights as a data subject

In this section, we inform you about your rights to a. access, b. rectification, c. erasure, d. restriction of processing, e. data portability. Further rights can be found in sections 4 to 6.

If the legal requirements are met, you have the following rights with regard to your personal data:

Right of access, Art. 15 GDPR: In principle, you can request information free of charge as to whether we process your personal data. If this is the case, you have a right of access about the personal data processed about you and to receive a copy of this information.
Right to rectification, Art. 16 GDPR: In principle, you can request the immediate rectification or completion of personal data concerning you.
Right to erasure, Art. 17 GDPR: You have the right to obtain from us the erasure of personal data concerning you without undue delay.
Right to restriction of processing, Art. 18 GDPR: In principle, you can request the restriction of processing.
Right to data portability, Art. 20 GDPR: You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format. You also have the right to transmit this data to another controller without hindrance from us. The right to data portability only applies if the processing is based on consent pursuant to Art. 6 para. 1 lit. a) GDPR or Art. 9 para. 2 lit. a) GDPR or on a contract pursuant to Art. 6 para. 1 lit. b) GDPR.

To exercise your rights as a data subject, please contact us using the contact details provided in section 1 above.

4. Right to object to processing in accordance with Art. 21 GDPR

You may – subject to legal exceptions – object at any time to the processing of personal data concerning you on the basis of Art. 6 (1) (e) or (f) GDPR for reasons arising from your particular situation.

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defense of legal claims.

If we process your personal data for the purpose of direct marketing, you have the right to object at any time to the processing of your personal data for the purpose of such marketing. This also applies to profiling insofar as it is associated with such direct advertising. In the event of an objection to processing for direct marketing purposes, we will no longer process your personal data for these purposes.

The objection can be made informally and should preferably be addressed to the contact details given in section 1 of this data protection notice.

5. Right to lodge a complaint with a data protection supervisory authority

In addition, you have the right to lodge a complaint with a competent data protection supervisory authority (Art. 77 GDPR in conjunction with Section 19 BDSG). A list of supervisory authorities (for the non-public sector) with addresses can be found at

https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html

6. Data security

We use technical and organizational security measures to protect personal data from accidental or intentional manipulation, loss, destruction or access by unauthorized persons. Our security measures are continuously improved in line with technological developments. In order to protect your personal data from loss, destruction, falsification, manipulation and unauthorized access, data is transmitted via the SSL (Secure Socket Layer) encryption protocol. This ensures a secure connection and protects your data from unauthorized access during transmission.

7. Changes to the data protection notice

We reserve the right to make changes to this data protection notice so that it can be adapted to new statutory provisions or other changes in the factual or legal situation. Therefore, please inform yourself at the beginning of your use of our website about the data protection information applicable at that time.

Status of the data protection information: February 2025

This is a translation of the original German text. In the event of any translation errors, the German version shall prevail.