Data privacy policy
1. Data protection at a glance
General information
The following information gives a simple overview of what happens to your personal data when you visit our website. Personal data is any data that can be used to personally identify you. For detailed information on data protection, please refer to our data privacy policy below.
Data collection on our website
Who is responsible for the data collection on this website?
Data processing on this website is carried out by the website operator. Their contact details can be found in the site notice of this website.
How do we collect your data?
Some of your data is collected when you provide it to us. This can be, for example, data you enter into a contact form.
Other data is collected automatically by our IT systems when you visit the website. This is primarily technical data (e.g. internet browser, operating system or time the page was accessed). This data is recorded automatically as soon as you enter our website.
What do we use your data for?
Part of the data is collected to ensure that the website is provided error-free. Other data can be used to analyse your user behaviour.
What rights do you have regarding your data?
You have the right, at any time and free of charge, to obtain information about the origin, recipients and purpose of your stored personal data. You also have the right to demand the correction, blocking or deletion of this data. You can contact us at any time at the address given in the site notice for this and other questions on the subject of data protection. You also have the right to lodge a complaint with the competent supervisory authority.
In addition, under certain circumstances you have the right to demand the restriction of the processing of your personal data. For details, please refer to the section "Right to restriction of processing" in this data privacy policy.
Analytics tools and tools from third parties
When you visit our website, your browsing behaviour can be statistically evaluated. This is done primarily with cookies and with what we call analytics programmes. The analysis of your browsing behaviour is generally anonymous; the browsing behaviour cannot be traced back to you. You can object to this analysis or prevent it by not using certain tools. You can find detailed information in the data privacy policy below.
You can object to this analysis. We will inform you about the options for objection in this data privacy policy.
2. General notes and mandatory information
Data protection
The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data protection regulations and this data privacy policy.
When you use this website, various items of personal data are collected. Personal data is data that can be used to personally identify you. This data privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this is done.
We point out that data transmission on the internet (e.g. when communicating by email) can have security gaps. Complete protection of data against access by third parties is not possible.
Data protection information for customers and suppliers under Art. 13 GDPR
Within the context of the business relationship or its initiation, IMA International GmbH, Heinz Will GmbH & Co. KG and 3D-Werkstätte für Metallverarbeitung process personal data from you.
This includes in particular:
- Address data (including electronic addresses and, where applicable, phone numbers)
- Personal master data
- Data arising from the contract or business with you (e.g. type of service, ordered goods, delivery addresses, etc.)
This data is essential in order to perform or initiate the contract with you. The legal basis for the processing therefore derives from Art. 6 (1) lit. b GDPR. If you are not our contractual partner yourself but are only acting on behalf of your employer, we process your data as our contact at your company in order to ensure smooth and efficient business operations through direct contact with our counterparts. We store this data for the duration of the business relationship with you or your employer.
In addition, the business relationship generates financial data (invoices, etc.) which we must store for 10 years on the basis of § 147 AO in combination with Art. 6 (1) lit. c GDPR. The same retention period applies to communications with you, whether analogue or by email (§ 257 HGB in combination with Art. 6 (1) lit. c GDPR).
If we pass on your data to third parties as part of contract performance, we either do so by engaging these third parties as data processors (under Art. 28 GDPR) or because it is essential for contract performance, for example when data is passed to a forwarding agent for delivery purposes. In all such cases, we only transmit the data that is necessary to fulfil the purpose. Any data transmission going beyond this requires consent, which we will request from you where needed. You can withdraw such consent at any time with effect for the future.
In cases where we use your address data to send you information beyond the current business relationship, this is done on the basis of a legitimate interest in providing this information (Art. 6 (1) lit. f GDPR) and in line with the provisions of § 7 UWG. You can object to this distribution of information at any time.
In certain cases, we may work with credit agencies (e.g. Schufa or Creditreform) when initiating or performing a contract. In such cases, this processing is based on legitimate interest under Art. 6 (1) lit. f GDPR.
As a data subject, you may have the following rights in relation to this processing:
- Right to information
- Right to rectification of incorrect data
- Right to erasure of data
- Right to data portability
- Right to object to data processing
- Right to withdraw your consent, where we process your data on the basis of your consent
- Right to lodge a complaint with a supervisory authority. The supervisory authority for the federal state of Hesse is Der Hessische Beauftragte für Datenschutz und Informationsfreiheit, Gustav-Stresemann-Ring 1, 65819 Wiesbaden.
To safeguard your rights and ensure legally compliant processing, we have appointed an external data protection officer. You can reach them at datenschutz@gdsm.de
Note on the responsible party
The party responsible for data processing on this website is:
Uwe Bremer
Berliner Straße 36
35614 Aßlar | Germany
Phone: +49 6441-9855-0
Email: info@ima-international.com
The responsible party is the natural or legal person who, alone or jointly with others, decides on the purposes and means of processing personal data (e.g. names, email addresses or similar).
Withdrawal of your consent to data processing
Many data processing operations are only possible with your express consent. You can withdraw consent already given at any time. An informal email message to us is sufficient. The lawfulness of data processing carried out before the withdrawal remains unaffected by the withdrawal.
Right to object to data collection in special cases and to direct advertising (Art. 21 GDPR)
If data processing is based on Art. 6 (1) lit. e or f GDPR, you have the right at any time to object, on grounds relating to your particular situation, to the processing of your personal data; this also applies to profiling based on these provisions. The respective legal basis on which processing is based can be found in this data privacy policy. If you object, we will no longer process your personal data concerned, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or unless the processing serves the establishment, exercise or defence of legal claims (objection under Art. 21 (1) GDPR).
If your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for the purposes of such marketing; this also applies to profiling to the extent that it is related to such direct marketing. If you object, your personal data will no longer be used for direct marketing purposes thereafter (objection under Art. 21 (2) GDPR).
Right to lodge a complaint with the competent supervisory authority
In the case of breaches of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the member state of their habitual residence, place of work or the place of the alleged breach. The right to complain exists irrespective of any other administrative or judicial remedy.
Right to data portability
You have the right to have data, which we process automatically on the basis of your consent or in performance of a contract, handed over to yourself or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another controller, this will only be done insofar as it is technically feasible.
Information, blocking, deletion and rectification
Within the scope of the applicable legal provisions, you have the right at any time to free information about your stored personal data, its origin and recipients and the purpose of data processing and, where applicable, a right to rectification, blocking or erasure of this data. For this and other questions about personal data, you can contact us at any time at the address given in the site notice.
Right to restriction of processing
You have the right to demand the restriction of the processing of your personal data. For this you can contact us at any time at the address given in the site notice. The right to restriction of processing exists in the following cases:
- If you contest the accuracy of your personal data stored with us, we usually need time to verify this. For the duration of the verification, you have the right to demand the restriction of the processing of your personal data.
- If the processing of your personal data has been or is unlawful, you can demand the restriction of data processing instead of erasure.
- If we no longer need your personal data but you need it to establish, defend or assert legal claims, you have the right to demand the restriction of the processing of your personal data instead of erasure.
- If you have lodged an objection under Art. 21 (1) GDPR, a weighing of your interests against ours must take place. As long as it has not yet been determined whose interests prevail, you have the right to demand the restriction of the processing of your personal data.
- If you have restricted the processing of your personal data, this data - apart from its storage - may only be processed with your consent or to establish, exercise or defend legal claims, or to protect the rights of another natural or legal person, or for reasons of an important public interest of the European Union or a member state.
Our data protection officer
Maxim Fink
gds - Gesellschaft für Datenschutz Mittelhessen mbH
Auf der Appeling 8
35043 Marburg
Email: datenschutz@gdsm.de
3. Data collection on our website
Cookies
The pages on this website partly use so-called cookies. Cookies cause no damage to your computer and contain no viruses. Cookies serve to make our offering more user-friendly, effective and secure. Cookies are small text files that are stored on your computer and saved by your browser.
Most of the cookies we use are so-called "session cookies". They are automatically deleted at the end of your visit. Other cookies remain stored on your device until you delete them. These cookies allow us to recognise your browser on your next visit.
You can set your browser to inform you about the setting of cookies and to allow cookies only in individual cases, to exclude the acceptance of cookies for specific cases or in general and to activate the automatic deletion of cookies when closing the browser. Deactivating cookies may limit the functionality of this website.
Cookies that are required to carry out the electronic communication process or to provide certain functions you have requested (e.g. shopping cart function) are stored on the basis of Art. 6 (1) lit. f GDPR. The website operator has a legitimate interest in storing cookies for the technically error-free and optimised provision of its services. Where other cookies (e.g. cookies for the analysis of your browsing behaviour) are stored, these are dealt with separately in this data privacy policy.
Server log files
The provider of these pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:
- Browser type and browser version
- Operating system used
- Referrer URL
- Host name of the accessing computer
- Time of the server request
- IP address
This data is not merged with other data sources.
The collection of this data is based on Art. 6 (1) lit. f GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimisation of its website — for this purpose, server log files must be collected.
4. Analytics tools and advertising
Google Analytics
This website uses functions of the web analytics service Google Analytics. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Google Analytics uses so-called "cookies". These are text files that are stored on your computer and that allow an analysis of your use of the website. The information generated by the cookie about your use of this website is generally transmitted to a Google server in the USA and stored there.
The storage of Google Analytics cookies and the use of this analytics tool is based on Art. 6 (1) lit. f GDPR. The website operator has a legitimate interest in analysing user behaviour in order to optimise both its website and its advertising.
Browser plugin
You can prevent the storage of cookies by adjusting the settings in your browser software; however, we point out that in this case you may not be able to use all functions of this website to their full extent. You can also prevent the collection of the data generated by the cookie and related to your use of the website (including your IP address) by Google as well as the processing of this data by Google by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de.
Objection to data collection
You can prevent the collection of your data by Google Analytics by clicking on the following link. An opt-out cookie is set, which prevents the collection of your data on future visits to this website: Disable Google Analytics.
You can find more information about Google Analytics' handling of user data in Google's data privacy policy: https://support.google.com/analytics/answer/6004245?hl=de.
5. Data privacy policy IMA International Facebook page
By providing a Facebook fan page, we firstly collect data from you, the fan page users, and secondly enable Facebook to collect, store and use data from you, irrespective of whether you have a Facebook user account or not.
This only affects the type of data processing by Facebook, but not the question of whether data is processed. This happens in any case.
We cannot assume responsibility for the data processing carried out by Facebook, nor can we explain it fully. We refer at this point to the CJEU ruling of 5 June 2018 (case reference C-210/16), which establishes joint responsibility regarding Facebook fan pages. For Facebook's share of responsibility, please refer to Facebook's data privacy policies.
Below you will find a brief, comprehensible overview of the collection and processing of your data that arises under our responsibility in connection with your visit to our fan page.
We process the following data:
- Your visit to our fan page and, in this context, the domain name or the IP address of your computer, the client's file request (file name and URL), the HTTP response code and the website from which you are visiting us.
- Your Facebook interactions with our posts ("likes").
- If you comment on our posts, we record and store your comments in the course of the conversation.
- When we have open positions, you can apply for them via a Facebook function. We process this application data exclusively within the scope of the application process.
How we collect your data:
The data generated when you visit our website is collected automatically. Otherwise, we only collect data based on your inputs on our fan page and, where applicable, your interaction with a Facebook function.
What we use your data for:
- For technical administration and the provision of the website.
- To communicate with you via Messenger or within the fan page.
- Where applicable, as part of an additional function (e.g. applications) and exclusively for the obvious purpose.
How long we store your data:
The duration of data storage primarily depends on the fulfilment of the purpose. This means we store your data for exactly as long as we need it to fulfil the purpose of data collection. In some cases, however, statutory retention periods apply, which provide for a different storage duration. In these cases, we store the data for the duration prescribed by the respective law. We have no influence on the storage duration by Facebook.
You have the following rights:
- Right to information (you can also request all information from this notice at any time).
- Right to erasure (unless retention periods apply).
- Right to be forgotten (if data has been transmitted, we must request the recipient to delete it).
- Right to data portability (if you wish, we must transmit the data to a third party in machine-readable form).
- Right to object to the processing activity.
- Right to rectification if the data is incorrect.
- Right to lodge a complaint with a supervisory authority. The authority responsible for the federal state of Hesse can be reached via the following contact details:
Der Hessische Beauftragte
für Datenschutz und Informationsfreiheit
Postfach 3163
65021 Wiesbaden
The primary responsibility for granting the rights mentioned lies with Facebook.
6. Lead generation with Pulserio AG
We analyse our visitor data with the help of an external service provider. For this purpose, we forward the data obtained from the use of IP research to Pulserio AG, Schellenrainstrasse 13, 6210 Sursee, Switzerland, leadrebel.io/imprint. Categories of data subjects are website visitors and users of our web services. The purpose of processing is to analyse the data obtained from IP research for lead generation. If visitors to our site are asked for consent, the legal basis for the processing of the data is consent within the meaning of Art. 6 (1) lit. a GDPR. Otherwise, the data is processed on the basis of our legitimate interest within the meaning of Art. 6 (1) lit. f GDPR. Our legitimate interest lies in lead generation through the analysis of the data obtained with the help of IP research. On this page: leadrebel.io/optout you have an opt-out option. In case of opt-out, your data will no longer be collected by LeadRebel.