DEPA – Gesellschaft für Kranausleger

Privacy Policy

Privacy Policy

I. General Information

1. Name and contact details of the data controller
This privacy policy applies to data processing by:
Controller: DEPA Gesellschaft für Kranauslegerbauteile mbH (hereinafter referred to as DEPA), Friedrich-Sertürner-Straße 5, 51377 Leverkusen, Germany
Email: info@depa.de
Phone: +49 (0)214 – 87 00 92 – 0
Fax: +49 (0)214 – 87 00 92 – 9

The company data protection officer at DEPA can be contacted at:
dhpg IT-Services GmbH, Bunsenstr. 10a, 51647 Gummersbach, Attn: Dr. Christian Lenz, or via email at daten-schutz@dhpg.de or by phone at 02261-8195-0.

2. Data subject rights
You have the right to:

  • Request information about your personal data processed by us, according to Art. 15 GDPR. Specifically, you may request information on the purposes of processing, the category of personal data, the categories of recipients to whom your data has been disclosed or will be disclosed, particularly in the case of recipients in third countries, the planned retention period, or the criteria for determining this period, the existence of the right to rectification, erasure, restriction of processing or objection, the right to lodge a complaint with a supervisory authority, the source of your data if it was not collected by us, as well as the existence of automated decision-making, including profiling and, where applicable, meaningful information about its details;
  • Request the rectification of incorrect or completion of your personal data stored by us, according to Art. 16 GDPR;
  • Request the erasure of your personal data stored by us, according to Art. 17 GDPR, unless processing is necessary for exercising the right to freedom of expression and information, to comply with a legal obligation, for reasons of public interest, or for the establishment, exercise, or defense of legal claims;
  • Request the restriction of the processing of your personal data, according to Art. 18 GDPR, where you contest the accuracy of the data, the processing is unlawful, but you oppose the erasure, and we no longer need the data, but you require it for the establishment, exercise, or defense of legal claims, or if you have objected to processing under Art. 21 GDPR and it is not yet clear whether our legitimate reasons override yours;
  • Receive your personal data that you have provided to us in a structured, commonly used, and machine-readable format or to request its transfer to another controller, according to Art. 20 GDPR, where the processing is based on your consent or a contract and the processing is carried out by automated means;
  • Withdraw your consent at any time according to Art. 7(3) GDPR. This will result in us no longer processing data based on this consent for the future; and
  • Lodge a complaint with a supervisory authority, according to Art. 77 GDPR. Typically, you can contact the supervisory authority of your habitual residence, workplace, or our company headquarters for this purpose.

3. Right to object
Where your personal data is processed based on legitimate interests according to Art. 6(1)(1)(e) or (f) GDPR, you have the right to object to the processing of your personal data, provided there are reasons arising from your particular situation or the objection is directed against direct marketing.
In the first case, we will no longer process your data unless we can demonstrate compelling legitimate grounds for processing that override your interests, rights, and freedoms, or the processing serves to establish, exercise, or defend legal claims.
In the latter case, you have a general right to object, which will be implemented by us without requiring a specific situation. If you wish to exercise your right of withdrawal or objection, simply send an email to info@depa.de.

4. Data sharing
Your personal data will not be transferred to third parties for purposes other than those listed below. We will only share your personal data with third parties if:

  • You have given your explicit consent to do so according to Art. 6(1)(1)(a) GDPR;
  • The disclosure is necessary for the establishment, exercise, or defense of legal claims, according to Art. 6(1)(1)(f) GDPR, and there is no reason to believe that you have an overriding interest in the non-disclosure of your data;
  • There is a legal obligation to disclose the data according to Art. 6(1)(1)(c) GDPR; or
  • It is legally permissible and necessary for the execution of contractual relationships with you, according to Art. 6(1)(1)(b) GDPR.

In addition, our processors receive your personal data for processing as instructed, as far as necessary to fulfill the order. Our processors have no independent right to use your data.

5. Third countries
We only transfer data to third countries in accordance with legal regulations.
The legality of data transfer to third countries is determined by Art. 44 et seq. GDPR. If we transfer your data to a third country, you will be informed of this in the specific data protection information related to the respective processing operation, including the relevant legal basis.

II. Specific Data Protection Information for Data Processing on the Website

1. When visiting the website
When you access our website, information is automatically sent from your browser to our website’s server. This information is temporarily stored in a log file. The following information is recorded without your intervention and stored until automated deletion:

  • IP address of the requesting device,
  • Date and time of access,
  • Hostname of the accessing device,
  • Website from which access is made (referrer URL),
  • Websites accessed through our website,
  • Pages visited on our website,
  • Amount of data transferred,
  • Notification of whether the retrieval was successful,
  • Information about the browser and its version,
  • Operating system of your device.

We process the aforementioned data for the following purposes:

  • Ensuring a smooth connection setup of the website,
  • Ensuring comfortable use of our website,
  • Evaluating system security and stability, as well as
  • For other administrative purposes.

The legal basis for data processing is Art. 6(1)(1)(f) GDPR. Our legitimate interest lies in the operation of our website and the associated presentation of our company.
Your data will be deleted once it is no longer needed for the stated purposes, but no later than six months.

2. Cookies, analysis tools, plugins, and other third-party elements
We use cookies and plugins on our site.
Cookies are small files that your browser automatically creates and that are stored on your device (laptop, tablet, smartphone, etc.). Cookies do not cause any damage to your device, do not contain viruses, Trojans, or other malware. Information is stored in the cookie that is related to the specific device used. However, this does not mean that we gain direct knowledge of your identity.
Plugins are used to embed content or other services from these providers into a website.

a) Necessary cookies
The use of our necessary cookies serves to provide the services of the website and to make the use of our offer more pleasant for you.
We process your personal data collected with these cookies based on our legitimate interest in presenting our company and the services offered through the website you accessed, as well as to promote user-friendliness. The legal basis for processing is Art. 6(1)(1)(f) GDPR.
Most browsers automatically accept these cookies. However, you can configure your browser to prevent cookies from being stored on your computer or to always display a warning before such a cookie is created. Complete deactivation may result in the website not being displayed correctly or you not being able to use all the functions of our website.
The respective function descriptions, possible recipients of the data, information on possible transfers to a third country, and the storage period can be found in the following notes on the individual necessary cookies and the associated processing operations.

Consent management settings
We use a so-called cookie banner on our website. This allows us to obtain and manage users’ consent to data processing. The processing is necessary to fulfill a legal obligation (Art. 6(1)(1)(c) GDPR). The following data is processed using cookies for this purpose:

  • Your IP address (the last three digits are set to ‘0’),
  • Date and time of consent,
  • Browser information,
  • URL from which the consent was sent,
  • An anonymous, random, and encrypted key,
  • End-user consent status as proof of consent.

The key and consent status are stored in the browser using cookies for 12 months. This maintains your cookie preference for subsequent page requests. The key allows your consent to be verified and tracked.
Your personal data is continuously deleted after 12 months.
You can delete the cookies in your browser at any time.

b) Third-party cookies, analysis tools, plugins, and other third-party elements
The following third-party cookies and plugins with third-party content that we use are only deployed with your explicit consent and thus based on Art. 6(1)(1)(a) GDPR. You can withdraw your consent at any time with effect for the future. You can change your settings here or via the “COOKIE POLICY (EU)” button at the bottom of our website. Failure to give or withdrawal of consent may result in the website not being displayed correctly or you not being able to use all the functions of the website.
The third-party cookies and plugins we use aim to ensure a tailored design and continuous optimization of our website.
The respective function descriptions, possible recipients of the data, information on possible transfers to a third country, and the storage period can be found in the following notes on the individual processing operations associated with third-party cookies and plugins.

OpenStreetMap
This site uses the OpenStreetMap map service via a plugin. The provider of the map service is the OpenStreetMap Foundation (St John’s Innovation Centre, Cowley Road, Cambridge, CB4 0WS, United Kingdom; hereinafter referred to as “OSMF”).
We implement this plugin using a so-called two-click method to best protect visitors to our website. This means that your personal data (especially your IP address) is not transmitted to OSMF simply by visiting the website. Instead, you must first activate the embedded map by clicking on it. By doing so, you give your consent for the map displaying our company location to be loaded, and for data to be transmitted to OSMF.
Your information is typically transmitted unencrypted to an OSMF server and stored there.
OSMF also uses the collected data for its own purposes. You can find OSMF’s privacy policy and terms of use at https://osmfoundation.org/wiki/Privacy_Policy?tid=331723119658#Contact.

9. Validity and changes to this privacy policy
This privacy policy is currently valid and dated August 2024. As our website and the services offered through it develop or as legal or regulatory requirements change, it may be necessary to amend this privacy policy. The current privacy policy can be accessed and printed at any time on the website at https://www.depa.de/datenschutz/.