Data protection declaration

As of: April 05, 2018

sera takes protecting your personal data very seriously. Our data processing is oriented only to collect, process or use only personal data required for a reasonable and economic usage of our offer. In the following, you will find out when data are stored while using our Internet service and how we use them.

Responsible

sera GmbH
Borsigstr. 49
52525 Heinsberg
Germany

Data Protection Officer

DATAIX GmbH
Maria Rast
Bischof-Hemmerle-Weg 9
52076 Aachen
Germany
 
Telefon: +49 (0) 241 /510 555 00
Telefax: +49 (0) 241 /510 555 50
E-Mail: datenschutz@sera.biz

Scope of application

In this data protection declaration, users will receive information about the kind, the extent and the purpose of collecting and using their data, which are collected and used by the responsible party.

We took technical and organizational measures that ensure the data protection regulations are observed. Our offers are in particular subject to the regulations of the European General Data Protection Regulation (GDPR), the Federal Data Protection Act (BDSG) and the Tele-media Act (TMG).

Visits to our web site

Information is automatically collected by us or the web space provider with every access to this offer. This information, also called server log files, are of a general nature and do not allow for any conclusions regarding your person.

Collected data include:

  • name of the web site,
  • file,
  • date,
  • data amount,
  • web browser and web browser version,
  • operating system,
  • domain name of your Internet provider,
  • referrer URL (the site from where you accessed our offer)
  • IP address.

Without these data it would sometimes technically not be possible to deliver and present the contents of the web site. Insofar, collecting the data is by all means necessary. We furthermore use the anonymous information for statistical purposes. They help us optimize the offers and technology. We also reserve the right to ourselves to check the log files afterwards if there is a suspicion of illegal use of our offer.

The legal basis for data processing is Article 6 Paragraph 1 S. 1 lit. f GDPR. Our legitimate interest arises from the above mentioned data collection purposes.

Registration on our web site

Personal data will be collected if you register on our web site for using personalized services. This includes the name, the address as well as the phone number and the e-mail address as contact and communication data.

Login allows access to services and contents that are available only for registered users. If required, logged-in users have at any time the possibility to change or delete the data provided in the course of registration. Upon request, we will of course inform you, which personal data are collected and stored. Furthermore, we will correct or delete the data upon request, provided there is no conflict with legal storage duty requirements. Please use the aforementioned contact data in this data protection declaration for questions or your claim for correction or deletion of the data.

Your voluntary, revocable agreement according to Article 6 Paragraph 1 S. 1 lit. a, 7 GDPR is the legal basis for processing the data.

Newsletter

If you sign up for our newsletter, we will use the data entered by you exclusively for this purpose or for informing you about circumstances relevant for this service or the registration. We will not forward these data to third parties.

Receiving the newsletter requires a valid e-mail address. The IP address from which you sign up for the newsletter and the date on which you order the newsletter will also be stored. These data serve as proof for us in case of abuse if a different e-mail address is registered for the newsletter. According to legal requirements, we are working with the so-called “double opt-in” method for additionally making sure an e-mail address is not abusively entered into our distribution list by third parties. In the course of this method, ordering the newsletter, sending the confirmation e-mail and receipt of the registration conformation are journalized.

Your voluntary, revocable agreement according to Article 6 Paragraph 1 S. 1 lit. a, 7 GDPR is the legal basis for processing the data.

You have at any time the possibility to revoke your agreement for storing the data, your e-mail address and their usage for the newsletter mailing. We will make a link for revocation available for you in every newsletter and on the web site. You also have the possibility to tell us your revocation request via the contact possibilities mentioned in this document.

Contact form

If you contact us via the online form or by e-mail, we will store the information provided by you for being able to answer your request and place possible follow-up questions. Your voluntary, revocable agreement according to Article 6 Paragraph 1 S. 1 lit. a, 7 GDPR is the legal basis for processing the data.

Prize game

From time to time, you will have the opportunity to participate in prize games on our web or Facebook site. If you participate in the Facebook prize game, be it by uploading pictures, liking pictures, sharing pictures or sharing your participation, we will store the data submitted by you in this context exclusively for this purpose. These data are not forwarded to third parties by us nor connected to personal data without your agreement.

Participation in a prize game requires a valid e-mail address. The Facebook user name as well as date and time of participation will also be stored.

Your voluntary, revocable agreement according to Article 6 Paragraph 1 S. 1 lit. a, 7 GDPR is the legal basis for processing the data.

You have at any time the possibility to revoke your agreement for storing the data, your e-mail address and their usage for the prize game. We will make a link for revocation available for you with every prize game and on the web site. You also have the possibility to tell us your revocation request via the contact possibilities mentioned in this document.

Integration of services and contents of third parties

Our offer sometimes includes contents, services and performances of other providers. These are, for instance, maps made available by Google Maps, videos from YouTube as well as images and pictures from other web sites. Submitting the IP address is by all means necessary for accessing and presenting these data in the browser of the user. The providers (called “third party providers” in the following) will thus note the IP address of the corresponding user.

Even though we are trying to use exclusively third party providers which require the IP address only for being able to supply contents, we do not have any influence on whether the IP address is possibly stored. In this case, this process serves for statistical purposes, among others. In case we know the IP address is being stored we will inform our users about this.

Cookies

This web site uses so-called cookies. These are text files stored on your computer by the server. They contain information about the browser, the IP address, the operating system and the internet connection. These data will not be forwarded to third parties nor connected to personal data by us without your agreement.

Cookies mainly fulfill two purposes. They help us making navigation through our offer easier, and they allow for correct presentation of the web site. They are not being used for introducing viruses or staring applications.

Article 6 Paragraph 1 S. 1 lit. f GDPR is the legal basis for processing the data.

Our legitimate interest arises from the previously mentioned purposes of data collection.

You have the possibility to access our offer also without cookies. The corresponding settings in the browser must be changed to do so. Please use the help function of your browser for information about how cookies are being de-activated. However, we point out that possibly some functions of this web site may possibly be adversely affected and usage convenience is reduced. The sites www.aboutads.info/choices/ (USA) and www.youronlinechoices.com/uk/your-ad-choices/ (Europe) allow you to administrate online advertisement cookies.

Use of Matomo

This website uses Matomo, an open source, self-hosted software to collect anonymous usage data for this website.
The data on visitor behavior is collected to identify any problems such as pages not found, search engine problems or unpopular pages. Once the data (number of visitors seeing error pages or only one page, etc.) is processed, Matomo generates reports for the website operators to respond to (layout changes, new content, etc.). In addition, this website offers a contact form that allows you to send us an inquiry directly and allows us to respond directly to your e-mail address.
Matomo processes the following data:

  • Cookies
  • Anonymized IP addresses by removing the last 2 bytes (i.e. 198.51.0.0 instead of 198.51.100.54)
  • Pseudo-anonymized location (based on the anonymized IP address)
  • Date and time
  • Title of the page accessed
  • URL of the page accessed
  • URL of the previous page (if this is permitted)
  • Screen resolution
  • Local time
  • Files that have been clicked and downloaded
  • External links
  • Duration of the page load
  • Country, region, city (with low accuracy due to IP address)
  • Main language of the browser
  • User agent of the browser
  • Interactions with forms (but not their content)

The contact form also processes the e-mail address and optionally the telephone number of the enquirer. The data is not shared with anyone and is only used to respond to the inquiry.

You can avoid installation of the cookies by according settings in the browser software. In this case, possibly not all functions of this web site can be fully used.

Furthermore, you can avoid collection of the data created by the cookie and connected to your usage of the website (including your IP address) as well as processing these data by Google by downloading and installing a browser add-on

(https://tools.google.com/dlpage/gaoptout?hl=de).

Aa an alternative to the browser add-on, in particular with browsers on mobile terminals, you can avoid collection by Google Analytics by clicking this link:

developers.google.com/analytics/devguides/collection/gajs/

An opt-out cookie will be placed that prevents future collection of your data when visiting this web site. The opt-out cookie is valid only in this browser and only for our web site, and is stored on your terminal. If you delete the cookies in this browser, you will have to place the opt-out cookie again.

You will find further information about data protection in connection with Google Analytics in, for instance, the Google Analytics help (https://support.google.com/analytics/answer/6004245?hl=de).

Duration of data storage

We will store your data as long as required for fulfilling our contractual and pre-contractual as well as our legal obligations. In particular storage of your data according to our online registration form is laid out permanently. Your data will be deleted if this is not required anymore or if you request deletion, unless this is in conflict with legal storage obligations (e.g. from trade or tax legislation; storage up to ten years) or a legitimated interest (e.g. for claim enforcement). If required, we will lock the data. It is necessary to keep the data in a lock file for control purposes for being able to consider a data lock at all time. Final deletion of locked data takes place under the same aforementioned conditions.

Your rights on information, correction, deletion, objection against processing, complaint, revocation of agreement

Overview

According Article 15 GDPR, you have the right to demand a confirmation from the responsible party whether personal data concerning you are being processed; if this is the case, you have a right on information about these personal data and on the following information:

  1. 1. the purposes of processing;
  2. the categories of personal data being processed;
  3. the recipients or categories of recipients whom the personal data were disclosed or will be disclosed, in particular in case of recipients in third countries or in case of international organizations;
  4. if possible the scheduled duration for which the personal data will be stored, or, if this is not possible, the criteria for setting this duration;
  5. the existence of a right on correction (Article 16 GDPR) or deletion of the personal data considering you (Article 17 GDPR) or on restriction of processing by the responsible party (Article 18 GDPR) or a right on objection against this processing (Article 21 GDPR);
  6. the existence of a right on complaint with a controlling institution (Article 77 in connection with Article 57 Paragraph 2, § 19 BDSG); the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, LDI, www.ldi.nrw.de is competent for us.
  7. if the personal data are not collected from the affected person, all available information about the origin of the data;
  8. the existence of an automatized decision making including profiling according to Article 22 Paragraphs 1 and 4 GDPR and – at least in these cases - significant information about the logic involved as well as the extent and the aspired consequences of such processing for the affected person.
  9. Furthermore, there is the right on data transferability (Article 20 GDPR) and agreements entered until cancellation (Article 7 Paragraph 3 GDPR). The legitimacy of processing based on the agreement conducted before cancellation is not affected by cancelling the agreement.

In particular: Your right to objection according to Article 21 GDPR

You have the right, due to reasons arising from your special situation, to object at any time against processing personal data concerning you, which takes place due to Article 6 Paragraph 1 Letters e or f GDPR (public interest or legitimated interest of the responsible party); this also applies to profiling based on these regulations. We will then process the personal data no longer, except if we can prove compelling reasons worth protecting for processing, which outweigh your interests, rights and liberties, or if the processing serves for enforcement, exercising or defense of legal claims.

If personal data are being processed to do direct advertisement, you have the right at any time to object against the processing of personal data concerning you for the purpose of such advertisement; this also applies to profiling, if it is in connection with such direct advertisement. If you object against processing for the purpose of direct advertisement, e.g. by a message to the contact address in the footer (see link below in the footer: "Contact") or to one of the e-mail addresses on our web site, the personal data will no longer be processed for these purposes.

Data security

During your visit on our web site, we are using the so-called SSL procedure (Secure Socket Layer), depending on the encryption level your browser supports. It usually is a 256 bit encryption. If your browser does not support 256 bit encryption, we are using the so-called 128 bit v3 technology. You can tell by the closed key or lock symbol being displayed in the address bar of the browser or in the bottom status bar of your browsers whether a page of our internet presentation is being transmitted using encryption.

We take suitable technical and organizational safety precautions to protect your data against partial or complete loss, damage, destruction and against unauthorized access by third parties. We are keeping our safety precautions on the current state of technology.

Changes to our data protection declaration

We are reserving the right to changes at any time as to ensure our data protection declaration always meets the current legal requirements. This also applies in case the data protection declaration needs to be altered due to new or revised performances, such as new service performances. The new data protection declaration will then apply the next time you access our offer.

Retailer search
l