Privacy Policy

Thank you very much for your interest in our website. The management at allcop Farbbild-Service GmbH & Co. KG strongly values data protection. The allcop Farbbild-Service GmbH & Co. KG website can generally be used without providing personal data. If the data subject wishes to use the special services offered on our company website, it may be necessary to process personal data. If the processing of personal data is necessary and no legal basis exists for processing, we generally obtain the consent of the data subject.

Personal data, for example the name, address, e-mail address, or telephone number of a data subject is always processed in compliance with the General Data Protection Regulation and in compliance with the national data protection laws to which allcop Farbbild-Service GmbH & Co. KG is subject. In this data protection declaration our company seeks to provide the general public with information about the type, scope, and purpose of the personal data we collect, use, and process. This data protection declaration further provides the data subject with information about their rights.

allcop Farbbild-Service GmbH & Co. KG as the data controller has implemented numerous technical and organisational measures to ensure the best possible protection of the personal data processed on this website. Nevertheless, online data transmissions can always have security flaws, so that absolute protection cannot be ensured. All data subject are therefore free to transmit personal data to us using alternative means, such as via telephone.

1. Definitions

The data protection declaration of allcop Farbbild-Service GmbH &Co. KG is based on the terminology used by the European body issuing directives and regulations when adopting the General Data Protection Regulation (GDPR). Our data protection declaration is intended to be easy to read and comprehend for both the public as well as our customers and business partners. To ensure this, we would like to first explain the terminology used.

This data protection declaration uses the following terms, among others:

a)    Personal data

Personal data refers to any information relating to an identified or identifiable natural person (“data subject”). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.

b)    Data subject

Data subject refers to an identified or identifiable natural person whose personal data is processed by the controller.

c)    Processing

Processing refers to any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation, or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

d)    Restriction of processing

Restriction of processing refers to the marking of stored personal data with the aim of limiting their processing in the future.

e)    Profiling

Profiling refers to any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects concerning that natural person's performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location, or movements.

f)     Pseudonymisation

Pseudonymisation means the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures to ensure that the personal data are not attributed to an identified or identifiable natural person.

g)    Data controller or controller

Data controller refers to the natural or legal person, public authority, agency, or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data. Where the purposes and means of such processing are determined by Union or Member State law, the data controller or the specific criteria for its nomination may be provided by Union or Member State law.

h)    Data processor

Data processor refers to a natural or legal person, public authority, agency, or other body which processes personal data on behalf of the controller.

i)      Recipient

Recipient refers to a natural or legal person, public authority, agency, or another body to which the personal data are disclosed, whether a third party or not. However, public authorities, which may receive personal data in the framework of a particular inquiry in accordance with Union or Member State law, shall not be regarded as recipients.

j)      Third party

Third party refers to a natural or legal person, public authority, agency, or body other than the data subject, data controller, data processor, and persons who, under the direct authority of the controller or processor, are authorised to process personal data.

k)    Consent

Consent of the data subject refers to any freely given, specific, informed, and unambiguous indication of the data subject's wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.
 

2. Data controller name and address

In accordance with the GDPR, as well as other directives applicable in the member states of the European Union and other guidelines pertaining to data protection, the data controller is:

allcop Farbbild-Service GmbH & Co. KG
Kreuzhofstraße 5
88161 Lindenberg im Allgäu
Germany

Phone: 08381 503 0
E-mail: info@allcop.de
Website: www.allcop.com
 

3. Name and address of the data protection officer

The data controller's data protection officer is:

Thomas Hug
IDKOM Networks GmbH
Dieselstraße 1
87437 Kempten
Germany

Phone: 0831590900
E-mail: datenschutz@idkom.de
Website: www.idkom.de

The data subject may direct any inquiries and suggestions regarding data protection to our data protection officer.
 

4. Cookies

The website pages of allcop Farbbild-Service GmbH & Co. KG use cookies. Cookies are text files which are placed and stored on a computer system through a browser.

Many websites and servers use cookies. Many cookies have a so-called cookie ID. A cookie ID is a unique identifier of the cookie. It consists of a string, through which web pages and servers can be allocated to the precise web browser, in which the cookie was stored. This makes it possible to distinguish the visited web pages and servers as well as the data subject’s individual browser from other web browsers, which contain other cookies. A specific web browser can be recognised and identified by means of the unique cookie ID.

By using cookies, allcop Farbbild-Service GmbH & Co. KG can provide the users of this website with more user-friendly services, which would not be possible without using cookies.

Using cookies, the information and offers on our website can be optimised in the interest of the users. As already pointed out, cookies allow us to recognise the users of our website. The purpose of this recognition is to simplify the use of our website for the users. The user of a website that uses cookies, for example, does not have to re-enter his or her access data during each visit, because this is done by the website and the cookie placed on the user's computer. Another example are cookies for the shopping basket in online shops. An online shop uses cookies to remember the products a customer added to the virtual basket.

The data subject can prevent our website from installing cookies at any time by configuring the respective settings of the web browser being used, thus permanently objecting to cookies. Furthermore, cookies, which were already placed, can be deleted at any time via a web browser or other software. This is possible with all standard web browsers. If the data subject deactivates the placement of cookies in the web browser being used, the full range of all functions on our website may not be available.

Edit cookie settings

 

5. Collection of general data and information

The allcop Farbbild-Service GmbH & Co. KG website collects a series of general data and information each time a data subject or automated system accesses the website. These general data and information are stored in the log files of the server. Storage may pertain to (1) browser types and version used, (2) the accessing operating system used, (3) the originating website from which a system accesses our website (so-called referrer), (4) the sub-pages, which direct the accessing system to our website, (5) the date and time of access to our website, (6) an Internet protocol address (IP address), (7) the Internet Service Provider of the accessing system, and (8) other similar data and information that serve the aversion of threats in case of attacks on our information technology systems.

allcop Farbbild-Service GmbH & Co. KG does not draw conclusions about the data subject when using the general data and information. Rather, this information is required (1) to properly deliver the contents of our website, (2) to optimize the contents of our website as well as the advertising for it, (3) to ensure the permanent functionality of our information technology systems and the technology of our website, as well as to (4) provide law enforcement authorities with the necessary information in the event of a cyber attack. On the one hand, allcop Farbbild-Service GmbH & Co. KG anonymously collects the data and information for the purpose of statistical analysis and with the objective of increasing data protection and data security in our company, in order to ultimately ensure an ideal level of protection for the personal data we process. The anonymous data from the server log files are stored separately from all personal data indicated by a data subject.
 

6. Registration on our website

The data subject shall have the possibility to register on the website of the data controller by providing personal data. The personal data transmitted to the data controller is determined by the respective input mask used for registration. The personal data entered by the data subject shall be collected and stored solely for internal use by the data controller and for the data subject's own purposes. The data controller may arrange for the transfer to one or more data processors, such as a parcel service provider, who will also use the personal data exclusively for an internal use attributable to the data controller.

By registering on the data controller’s website, the IP address assigned to the data subject by the Internet Service Provider (ISP), the date, and time of registration are also stored. The storage of this data takes place on the basis that this is the only way to prevent the misuse of our services and, if necessary, to enable the investigation of criminal offences committed. In this respect, the storage of these data is necessary to protect the data controller. This data will not be passed on to third parties, unless there is a legal obligation to do so or the passing on of the data serves for criminal prosecution.

The registration of the data subject, with the voluntary provision of personal data, enables the data controller to offer the data subject content or services which, by their very nature, can only be provided to registered users. Registered persons are free to modify the personal data provided during registration at any time or to have them completely deleted from the data stock of the data controller.

The data controller shall provide the data subject with information on what personal data relating to the data subject are stored at any time on request. Furthermore, the data controller shall correct or delete personal data at the request or indication of the data subject, unless otherwise required by law. The entire staff of the data controller are available as contact persons for the data subject for this purpose.
 

7. Contact option on the website

Due to legal provisions, the allcop Farbbild-Service GmbH & Co. KG website contains information, which enables swift electronic contact as well as direct communication with our company, which also includes a general address and electronic mail (e-mail) address. If a data subject contacts the controller via e-mail or the contact form, the personal data submitted by the data subject are automatically stored. Such personal data submitted by the data subject to the controller on a voluntary basis are stored for the purpose of processing or contacting the data subject. These personal data are not transmitted to third parties.
 

8. Routine erasure and blocking of personal data

The data controller processes and stores the data subject's personal data only for the time period needed to achieve the purpose of storage or if this is prescribed by the European legislative bodies, or any other legislator of laws or regulations to which the data controller is subject.

In the event that the purpose of storage no longer applies, or a limitation period prescribed by the European legislative bodies or any other competent legislator is reached, the personal data are routinely blocked or erased in accordance with the legal provisions.
 

9. Rights of the data subject

a)    Right to confirmation

Every data subject has the right granted by the European legislative bodies to obtain from the data controller confirmation whether the personal data relating to him or her were processed. If a data subject wishes to exercise the right to confirmation, he or she may contact our data protection officer or any other staff member employed by the data controller at any time.

b)    Right of access

The European legislative bodies grant every data subject the right to obtain from the data controller information regarding the data stored relating to him or her and to receive a copy of this information free of charge. Furthermore, the European legislative bodies grant the data subject the right to access the following information:

• the processing purposes
• the categories of personal data processed
• the recipients or categories of recipients to whom the personal data have been or will   be disclosed, in particular to recipients in third countries or to international organisations
• if possible, the planned duration for which the personal data will be stored or, if this is not possible, the criteria for determining this duration
• the existence of a right of rectification or erasure of personal data relating to them or of a right of objection to their processing by the data controller
• the existence of a right of appeal to a supervisory authority
• if the personal data are not collected from the data subject: all available information on the origin of the data
• the existence of automated decision-making, including profiling, in accordance with Article 22(1) and (4) of the DPA and, at least in these cases, conclusive information about the logic involved and the scope and intended impact of this processing on the data subject

Furthermore, the data subject has a right to obtain information regarding the transmission of personal data to a third country or an international organisation. If this is the case, the data subject also has the right to receive information on adequate guarantees in connection with the transmission.

If a data subject wishes to exercise the right to information, he or she may contact our data protection officer or any other staff member employed by the data controller at any time.

c)    Right to rectification

The European legislative bodies grant every data subject the right to obtain from the controller without undue delay the rectification of inaccurate personal data concerning him or her. Taking into account the purposes of the processing, the data subject further has the right to have incomplete personal data completed, including by means of providing a supplementary statement.

If a data subject wishes to exercise the right to correction, he or she may contact our data protection officer or any other staff member employed by the data controller at any time.

d)    Right to erasure (right to be forgotten)

The European legislative bodies grant every data subject the right to obtain from the data controller the erasure of personal data concerning him or her without undue delay and the data controller shall have the obligation to erase personal data without undue delay where one of the following grounds applies and if processing is not required:

• The personal data were collected for purposes or otherwise processed, for which it is no longer required.
• The data subject withdraws his/her consent, on which the processing was based pursuant to Article 6(1)(a) of the GDPR or Article 9(2)(a) of the GDPR and there is no other legal basis for said processing.
• The data subject files an objection to the processing pursuant to Article 21(1) of the GDPR and there are no paramount legitimate reasons for said processing or the data subject files an objection to the processing pursuant to Article 21(2) of the GDPR.
• The personal data was processed illegally.
• The deletion of personal data is required to meet a legal obligation according to EU law or the law of member states, which the responsible person is subject to.
• The personal data was collected with regard to the offered services of the information society pursuant to Article 8(1) of the GDPR.

If one of the above-mentioned grounds applies and a data subject wishes to exercise the right to erasing the data stored by allcop Farbbild-Service GmbH & Co. KG, he or she may contact our data protection officer or any other staff member employed by the data controller at any time. The employee of allcop Farbbild-Service GmbH &Co KG will arrange for the deletion request to be complied with immediately.

If allcop Farbbild-Service GmbH & Co. KG published the personal data and is obligated to erase the data in accordance with Article 17(1) of the GDPR, then allcop Farbbild-Service GmbH & Co. KG shall take reasonable steps under consideration of available technology and the cost of implementation, including technical measures, to inform other controllers of the personal data about the data subject's request to erase any links to, or copies or replications of those personal data by such processors, if processing is not necessary. The data protection officer of allcop Farbbild-Service GmbH & Co. KG will immediately respond as appropriate on a case-by-case basis.

e)    Right to restriction of processing

According to the European legislative bodies, every data subject has the right to request the restriction of processing from the controller if one of the following requirements is given:

• The data subject disputes the accuracy of the personal data and does so for a period, which enables the data controller to review the accuracy of the personal data.
• The processing is illegal, the data subject objects to the erasure of the personal data and instead demands the restricted use of the personal data.
• The controller no longer requires the personal data for the purpose of processing however, the data subject requires the data, to assert, exercise, or defend legal claims.
• The data subject has filed an objection to the processing pursuant to Article 21(1) of the GDPR and it is yet to be determined if the data controller’s legitimate reasons outweigh those of the data subject.

If one of the above-mentioned prerequisites applies and a data subject wishes to exercise the right to limiting the personal data by allcop Farbbild-Service GmbH & Co. KG, he or she may contact any staff member employed by the data controller at any time. The allcop Farbbild-Service GmbH & Co. KG staff member will immediately initiate the limitation of processing.

f)     Right to data portability

According to the European legislative bodies, every data subject has the right to receive all personal data pertaining to the data subject, which was made available to a controller by the data subject, in a structured, conventional, and machine-readable format. Furthermore, the data subject has the right to transmit this data to another controller without being hindered by the controller to whom the personal data was made available to, provided that processing is based on consent pursuant to Article 6(1)(a) of the GDPR or Article 9(2)(a) of the GDPR or on a contract pursuant to Article 6(1)(b) of the GDPR and processing is conducted with the help of automated processes, provided that processing is not required for the performance of a task, which is in the public interest or takes place in exercising public authority, which was transferred to the data controller.

Further, pursuant to Article 20(1) of the GDPR, the data subject, in exercising his or her right to data portability, also has the right to achieve that the personal data is directly transferred from one data controller to another controller, insofar as this is technically feasible and provided that this does not affect the rights and freedoms of other persons.

To exercise the right to data portability, the data subject may contact any employee of allcop Farbbild-Service GmbH & Co. KG.

g)    Right to object

According to the European legislative bodies, every data subject has the right to object to the processing of personal data concerning the data subject at any time, on grounds relating to his or her particular situation based on Article 6(1)(e) or (f) of the GDPR. This also applies to profiling based on these provisions.

In the event of an objection, allcop Farbbild-Service GmbH & Co. KG shall no longer process the personal data unless we demonstrate compelling legitimate grounds for the processing which override the interests, rights, and freedoms of the data subject or for the establishment, exercise or defence of legal claims.

If allcop Farbbild-Service GmbH & Co. KG processes personal data for the purpose of direct advertising, the data subject has the right to file an objection to the processing of personal data for the purpose of such advertising. This also applies to profiling, provided that it is linked to such direct advertising. If the data subject objects to the processing to allcop Farbbild-Service GmbH & Co. KG for purposes of direct advertising, allcop Farbbild-Service GmbH & Co. KG will no longer process the personal data for these purposes.

Furthermore, the data subject has the right, for reasons resulting from his or her special situation, to object to the processing of personal data pertaining to the data subject, which takes place at allcop Farbbild-Service GmbH & Co. KG for scientific or historical research purposes or for statistical purposes pursuant to Article 89 (1) of the GDPR, unless such a processing is required to fulfil a task, which is in the public interest.

To exercise the right to object, the data subject may directly contact any employee of allcop Farbbild-Service GmbH & Co. KG. Irrespective of Directive 2002/58/EC, the data subject has the option, in connection with the use of information society services, of exercising his or her right to object via automated procedures that use technical specifications.

h)    Automated individual decision-making, including profiling

According to the European legislative bodies, every data subject whose personal data are processed has the right not to be subject to a decision based solely on automated processing — including profiling —, which takes effect in view of the data subject or significantly comprises the data subject in a similar manner, provided that the decision (1) is not required for the conclusion or fulfilment of a contract between the data subject and the data controller, or is permissible (2) based on the legal guidelines of the European Union or member states, to whose laws the data controller is subject and these legal guidelines contain appropriate measures of maintaining the rights and freedom, as well as the legitimate interest of the data subject, or (3) with explicit consent of the data subject.

If the decision (1) is required for the conclusion or fulfilment of the contract between the data subject and the data controller, or (2) the data subject provides explicit consent, allcop Farbbild-Service GmbH & Co. KG will take appropriate measures to protect the rights and freedoms as well as the legitimate interests of the data subject, which at least include the right of obtaining the intervention of a person on the part of the controller, explanation of one’s own point of view and contesting the decision.