Data protection information

Thank you for your interest in our website. Protecting your privacy is very important to Kenstone. When visiting our online shop, we process your personal data (all the information which relates to an identified or identifiable natural person) so far as this is allowed on the basis of legal provisions or your consent. This privacy statement provides you with information on how your personal data is processed (hereinafter referred to as “data processing” or “processing”). 

Contents

A. Data controller
B. Contact details of the Date Protection Officer
C. Operation and hosting of our website
D. Overview of our processes
E. Use of our website
F. Communication
G. Register for the member area
H. Your other rights as a data subject
I. Data security

A. Data controller

The controller for data collected on this website is:

KENSTONE GmbH
Helfmann-Park 5
65760 Eschborn, Germany
Tel.: +49 69 935345330

E-Mail: info@kenstone.de

B. Contact details of our Data Protection Officer

You can reach our Data Protection Officer at:

Data Protection Officer, KENSTONE GmbH
Commerzbank AG
GS-OS Physical Security & Data Protection 
Mainzer Landstr. 151 
60327 Frankfurt am Main, Germany

E-Mail: datenschutzbeauftragter@kenstone.de

C. Operation and hosting of our website

Our website is operated in our name and on our behalf (article 28 GDPR) by a service provider which carries out all of our data processing connected to the use of our website. This data processing is executed on the servers of a hosting service provider which connects the website to the internet on our behalf. Both service providers are based in Germany.

D. Overview of our data processing

We process data in the following contexts:

• When our website is accessed and browsed (“Use of our website”), we process data from and on your device which could partly enable identification of yourself (details on this under E. below);
• Finally, we process your data when you get in contact with us (“Communication”) by sending us a message using our contact form or using any other means of communication we have made available (details on this under F. below)

E. Use of our website

During every visit to our website, we process certain personal data from and partly also on your computer/device. This processing can be divided into the following categories:

• logging of your visit/use of functional cookies (details on this under I. below);

I. Logging of your visit/use of functional cookies

1. General information on data processing

Whenever our website is visited or a file from our website is downloaded, the following protocol data is automatically processed by us:

• host name of your computer/device (IP address);
• date and time of the visit/download;
• the pages accessed;
• the name of the downloaded file, if appropriate;
• type of browser used;
• operating system of your device;
• the website from which you have visited us.

We also use functional cookies for the operation of our website. These are small text files which are saved by us on your computer/device. Firstly, there are what are known as session cookies which are only applied during the period of your visit to our website. Secondly, what are known as persistent cookies are used. These stay on your computer/device for longer. Both types of cookies have an alphanumeric string of characters which, in the case of persistent cookies, enable the recognition of your browser when you visit our website again.

2. Scope and purpose of the processing

Data is processed by us for the following purposes:

• to identify and prevent attacks on our website;
• to determine whether your internet browser supports cookies;
• to prevent pop-ups being shown to you repeatedly;
• to display the selected language on our website

3. Data transfers/recipients

The recipients of your data are the technical operator and hosting service provider of our website (see under C. above)

4. Period for which data is stored

Data is stored for the following period of time:

• Protocol data: until the purpose is realised, a maximum of three months;
• Session cookies: until you leave our website;
• Persistent cookies: a year.

5. Legal basis

Processing is carried out on the basis of our interest in the functionality and security of our website. In our consideration, this legitimate interest does not run counter to any overriding interests or fundamental rights and freedoms of data subjects (article 6, paragraph 1, f GDPR). 

6. Right to object

F. Communication 

I. Making contact

1. General information on processing

You can contact us using the contact details provided under section A above or by using our contact form. We will then process the data you share with us in your message including your exact concern, your e-mail address for enquiries via e-mail, your postal address for letters, your telephone number for phone calls and your name, e-mail address and telephone number when you use our contact form.

2. Scope and purpose of the processing

We process your data in order to handle your enquiry and make contact with you for the purpose of answering it.

3. Data transfers/recipients

The recipients of your data are the technical operator and hosting service provider of our website (see under C. above)

4. Period for which data is stored

We store your data until we have answered your enquiry. We store business letters for six years in accordance with our commercial obligation to retain data. 

5. Legal basis for processing

Processing is carried out on the legal basis of taking steps prior to entering into a contract or for the performance of a contract (article 6, paragraph 1 b GDPR). As far it does not concern precontractual or contractual matters, the legal basis is our legitimate interest in the processing of your request. We assume that none of your overriding interests or fundamental rights and freedoms run counter to this (article 6, paragraph 1, f GDPR). On request, we can provide you with more information on our balance of interests.

6. Right to object

G. Register for the member area

1. General information on data processing

If you voluntarily register for our member area, we will process the following of your data:

• First name and surname;
• Email address;
• Company name.

2. Scope and purpose of processing

The data will be processed by us in order to identify you for your registration to the member area and to compare the entered data with the data stored by us about existing contractual partners, to check the community membership privilege. We also process the data in order to communicate with you via e-mail about the following contents:

• Registration confirmation and activation of your login for the member area;
• Notification when a bookmarked file (e.g. assessment template) has been updated;
• Notification about an answer to a question in the forum.

3. Data transfer/recipient

The recipient of your data is the technical operator and the hosting service provider of our website (see above under C.). Your first name and the first letter of your last name will be displayed to other members of the forum when you post a question or answer.

4. Duration of data storage

The data will be stored by us until you delete your account in our member area or otherwise make use of your right of objection (see section 6 below).

5. Legal basis

Processing is based on our interest in providing an exclusive information area for our members. In our assessment, no overriding interests or fundamental rights and freedoms of the persons concerned are opposed to this legitimate interest (Art. 6 paragraph 1 f DSGMO). On request, we will provide you with further information about our weighing of interests.

6. Right of objection

You have the right to object to this processing at any time for reasons arising from your particular situation. We will then no longer process this data for these purposes, unless we can prove compelling reasons for processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims. You can submit your objection to us using the contact details provided in A. above. Alternatively, you can delete your account in the member area here.

H. Your additional rights as a data subject

In relation to your personal data and alongside the rights already mentioned in the context of the data processing, you also have the following rights:

• Right of access: You can request information from us about the personal data which we have processed regarding you. You can find details on the scope of your right to access under article 15, GDPR and section 34 FDPA (2018).
• Right to rectification: You can request from us rectification of incorrect and completion of incomplete personal data. You can find details on the scope of your right to rectification under article 16, GDPR.
• Right to erasure: Under certain conditions, you can request that we delete your personal data. You can find details on the scope of your right to erasure under article 17, GDPR.
• Right to restriction: Under certain conditions, you can request for the processing of your personal data to be restricted. You can find details on the scope of your right to restriction under article 18, GDPR.
• Right to data portability: Under certain conditions, you can request that we send the personal data you have made available to us to you or another controller in a common, machine-readable format. You can find details on the scope of your right to data portability under article 20, GDPR.
• Right to withdraw consent: As far as we are required to ask for your consent to process your personal data, you have the right to withdraw this consent at any time with effect for the future. You can find further details on your right to withdraw consent under article 7, paragraph 3, GDPR.
• Right to lodge a complaint with a supervisory authority: You can also lodge a complaint with a supervisory authority. You can find details on the scope of your right to lodge a complaint under article 77, GDPR.

I. Data security

If your e-mail provider supports “Transport Layer Security” (TLS), then e-mail communication will be encrypted. For security reasons and to protect the transmission of confidential data (for example, for enquiries), we use SSL or TLS encryption. You will recognise the encrypted connection because the address line of your browser will change from “http://” to “https://” and to a padlock symbol in the URL line of your browser.

In addition, we also carry out further technical and organisational security measures in order to prevent the loss, destruction and misuse of data.