Data protection
Information on the Collection of Personal Data
a) Below, we provide information on the collection of personal data when using our website. Personal data includes all data that can be related to you personally, e.g., name, address, email addresses, and user behaviour.
b) The data controller in accordance with Art. 4(7) of the EU General Data Protection Regulation (hereinafter referred to as “GDPR”) is:
FRANK Walz- und Schmiedetechnik GmbH
Frankstr. 1 Reddighäuser Hammer
35116 Hatzfeld (Eder), Germany
Phone: +49 6452-9331-0
Fax: +49 6452-9331-147
Email: service@frank-original.com
To protect your rights and to ensure the lawful processing of your data, we have appointed an external Data Protection Officer. The contact details are:
gds – Gesellschaft für Datenschutz Mittelhessen mbh
datenschutz at gdsm.de (at = @)
Phone: +49 6421 / 80413-10
c) If we use contracted service providers for individual features of our offer or wish to use your data for advertising purposes, we will inform you in detail below about the respective processes. We will also specify the established criteria for the storage period.
Your Rights
a) You have the following rights in relation to personal data concerning you:
- Right of access (Art. 15 GDPR),
- Right to rectification (Art. 16 GDPR) or erasure (Art. 17 GDPR),
- Right to restriction of processing (Art. 18 GDPR),
- Right to object to processing (Art. 21 GDPR), further details in section 6,
- Right to data portability (Art. 20 GDPR).
b) You also have the right to lodge a complaint with a supervisory authority about our processing of your personal data (Art. 77 GDPR).
Collection of Personal Data When Visiting Our Website
a) If you use our website purely for informational purposes, i.e., without registering or providing us with information, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data, which is technically necessary for us to display our website and to ensure its stability and security, based on Art. 6(1)(f) GDPR and in accordance with §25 of the Telecommunications-Telemedia Data Protection Act (TTDSG):
- IP address,
- Date and time of the request,
- Time zone difference to Greenwich Mean Time (GMT),
- Content of the request (specific page),
- Access status/HTTP status code,
- Amount of data transmitted,
- Website from which the request originates,
- Browser,
- Operating system and its interface,
- Language and version of the browser software.
b) The personal data collected here is not stored as log files but deleted immediately after using our website.
c) In addition to the aforementioned data, cookies are stored on your computer when you use our website. Cookies are small text files that are stored on your hard drive associated with the browser you are using, and through which certain information flows to the entity that sets the cookie (in this case, us). Cookies cannot run programs or deliver viruses to your computer. They serve to make the internet offering more user-friendly and effective overall. The use of these cookies is based on Art. 6(1)(a) and (c) GDPR.
Use of Cookies
a) This website uses the following types of cookies, the scope and functionality of which are explained below:
- Transient cookies (see b),
- Persistent cookies (see c).
b) Transient cookies are automatically deleted when you close your browser. This includes, in particular, session cookies. These store a so-called session ID, with which various requests from your browser can be assigned to the shared session. This allows your computer to be recognised when you return to our website. Session cookies are deleted when you log out or close your browser.
c) Persistent cookies are automatically deleted after a specified period, which may differ depending on the cookie. You can delete cookies at any time in your browser’s security settings.
d) We use cookies that are technically necessary to make your visit to our website possible. If we use non-essential cookies, we will obtain your consent.
e) When using technically necessary cookies for the display and necessary functions of our website, the legal basis is §25(2) TTDSG and Art. 6(1)(f) GDPR (legitimate interest). For non-essential cookies, we will obtain your consent based on §25(1) TTDSG and Art. 6(1)(a) GDPR.
f) You can grant and manage your consent through our Consent Manager on your first visit to our website.
g) Cookie Consent Manager System "Usercentrics"
We use a Cookie Consent Manager tool to inform you about technologies used on our website, obtain, manage, and document your consent to process your personal data via these technologies. This is necessary according to Art. 6(1)(c) GDPR in conjunction with Art. 7(1) GDPR to fulfil our legal obligation to prove your consent to the processing of your personal data. Service provider: Usercentrics GmbH, Sendlinger Straße 7, 80331 Munich, Germany. More information on how Usercentrics processes data can be found at usercentrics.com/privacy-policy.
Data Security
The personal data we collect and store is treated confidentially and protected by appropriate technical and organisational measures against loss, alteration, and unauthorised access by third parties. Your personal data is transmitted over the internet in encrypted form. We use SSL encryption (Secure Socket Layer) for data transmission.
Automated Decision-Making, Profiling
We do not use any automated decision-making processes (including profiling) concerning personal data collected during your visit to our website.
External Hosting
This website is hosted by an external service provider (Host). Personal data collected on this website is stored on the host’s servers, including IP addresses, contact requests, meta and communication data, contract data, contact details, names, website access, and other data generated via the website. The use of the host is necessary for fulfilling contracts with potential and existing customers (Art. 6(1)(b) GDPR) and to ensure the secure, fast, and efficient provision of our online offer by a professional provider (Art. 6(1)(f) GDPR). Where consent is required, processing is based exclusively on Art. 6(1)(a) GDPR and §25(1) TTDSG. The consent can be revoked at any time. The host processes your data only as necessary to fulfil its performance obligations and follows our instructions regarding these data.
We use the following host:
Mittwald CM Services GmbH & Co. KG
Königsberger Str. 4-6
32339 Espelkamp, Germany
Other Functions and Offers on Our Website
a) In addition to the purely informational use of our website, we offer various services that you can use if interested. Typically, you will need to provide additional personal data, which we use to provide the respective service and to which the previously mentioned principles of data processing apply.
b) In some cases, we use external service providers to process your data. These have been carefully selected, commissioned by us, and are bound by our instructions and are regularly monitored.
c) Furthermore, we may pass on your personal data to third parties if we offer participation in campaigns, competitions, contract conclusions, or similar services in conjunction with partners. You will receive further information about this when you provide your personal data or below in the description of the offer.
d) If our service providers or partners are based in a country outside the European Economic Area (EEA), we will inform you of the consequences of this in the description of the offer.
Objection or Withdrawal of Consent to the Processing of Your Data
a) If you have given your consent to the processing of your data, you can withdraw it at any time. Such a withdrawal will affect the lawfulness of the processing of your personal data after you have expressed it to us.
b) Where we base the processing of your personal data on a balance of interests, you can object to the processing. This is the case if the processing is not necessary, in particular, for the performance of a contract with you, which we will detail in the subsequent description of the functions. When exercising such an objection, we ask you to explain the reasons why we should not process your personal data as we have done. In the event of your justified objection, we will examine the situation and either stop or adapt the data processing or show you our compelling legitimate grounds for continuing the processing.
Of course, you can object to the processing of your personal data for advertising and data analysis purposes at any time. You can inform us of your objection to advertising via the following contact details: By post to FRANK Walz- und Schmiedetechnik GmbH, Frankstr. 1 Reddighäuser Hammer, 35116 Hatzfeld (Eder), Germany, or via email at: service@frank-original.com.
Contact via Email or Contact Form
a) When you contact us via email or using a contact form, the data you provide (e.g., name, request, email address, phone number) will be stored by us to answer your queries and for any follow-up questions. We will not share this data without your consent.
b) The data sent to us via contact requests will remain with us until you request deletion, withdraw your consent to storage, or the purpose for data storage no longer applies (e.g., after your request has been processed). Mandatory statutory provisions – especially retention periods – remain unaffected.
c) The processing of this data is based on Art. 6(1)(b) GDPR if your request relates to the fulfilment of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective handling of inquiries addressed to us (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR), if this has been requested.
Matomo (Local Hosting)
Our website uses the open-source web analytics service Matomo. Matomo uses so-called “cookies,” which are text files stored on your computer that allow an analysis of your use of the website. The information generated by the cookie about your use of this website is stored on our server. The IP address is anonymised before being saved. Matomo cookies remain on your device until you delete them.
If consent has been obtained, processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and §25(1) TTDSG. Consent can be withdrawn at any time. The information generated by the cookie about your use of this website will not be shared with third parties. You can prevent the storage of cookies by adjusting your browser settings accordingly, but please note that in doing so, you may not be able to use all the functions of this website fully. If you do not agree to the storage and use of your data, you can reject it in the consent tool. Your data will either be deleted once the purpose is achieved, or if you withdraw your consent. Exceptions apply if legal retention periods prevent deletion.
Use of Google Maps
a) On this website, we use the Google Maps service via an API based on your consent in accordance with Art. 6(1)(a) GDPR. This allows us to display interactive maps directly on the website and makes the map function easy to use. The provider is Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.
b) To ensure privacy on this website, Google Maps is deactivated when you first visit our website. No connection to Google’s servers will be made unless you activate Google Maps yourself. By doing so, you consent to the transmission of your data to Google.
c) After activation, Google Maps will store your IP address and possibly your location data, which will then usually be transferred to a server in the USA and stored there. We have no influence on this data transmission after Google Maps has been activated. In cases where personal data is transferred to the USA, Google complies with the EU-U.S. Data Privacy Framework, www.dataprivacyframework.gov/s/.
d) Further information on the handling of user data can be found in Google's privacy policy: https://www.google.de/intl/en/policies/privacy/.
jQuery
We use the jQuery CDN service on our website provided by the jQuery Foundation to deliver our website and all its subpages quickly and smoothly across different devices. jQuery is distributed via the Content Delivery Network (CDN) of the American software company StackPath (LLC 2012 McKinney Ave., Suite 1100, Dallas TX 75201, USA). Through this service, personal data is collected, managed, and processed. The legal basis is your consent pursuant to Art. 6(1)(a) GDPR. Currently, the data transfer is based on StackPath’s Standard Contractual Clauses (SCCs). We reserve the right to deactivate jQuery if a court or supervisory authority deems these SCCs non-compliant with data protection regulations. Further information on StackPath’s privacy policy can be found at www.stackpath.com/legal/privacy-statement/. More information about jQuery’s privacy policy can be found here: https://openjsf.org/wp-content/uploads/sites/84/2019/11/OpenJS-Foundation-Privacy-Policy-2019-11-15.pdf.
Use of Google Web Fonts
This site uses web fonts provided by Google to ensure consistent font representation. When you access a page, your browser loads the required web fonts into your browser cache to display texts and fonts correctly. The fonts are stored locally on our server, so no personal data is transmitted to Google. If your browser does not support web fonts, a standard font from your computer will be used. Further information about Google Web Fonts can be found at developers.google.com/fonts/faq and in Google's privacy policy at https://www.google.com/policies/privacy/.
Embedding YouTube Videos
a) We have embedded YouTube videos into our online offering, which are stored on www.YouTube.com and can be played directly from our website. These are all embedded in "enhanced privacy mode," meaning no data about you as a user will be transmitted to YouTube unless you play the videos. Only when you play the videos will the data mentioned in (b) be transferred. We have no control over this data transmission.
b) To ensure privacy on this website, YouTube is disabled when you first visit our website. A connection to YouTube's servers will only be established if you activate YouTube yourself (consent according to Art. 6(1)(a) GDPR and §25(1) TTDSG). This prevents your data from being transmitted to YouTube upon first visiting the site.
c) After activation, YouTube will receive the information that you have accessed the corresponding subpage of our website. The data mentioned in section V of this policy will also be transmitted. This happens regardless of whether you are logged into a YouTube user account or whether no user account exists. If you are logged into Google, your data will be directly associated with your account. If you do not wish to have this association with your profile, you must log out before activating the button. YouTube stores your data as usage profiles and uses them for advertising, market research, and/or customised website design. This kind of evaluation takes place (even for users who are not logged in) to provide demand-oriented advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, but you must contact YouTube to exercise this right.
d) Further information on the purpose and scope of the data collection and its processing by YouTube can be found in the privacy policy. There you will also find further information about your rights and settings options for protecting your privacy: www.google.de/intl/en/policies/privacy/. For cases in which personal data is transferred to the USA, Google complies with the EU-U.S. Data Privacy Framework, www.dataprivacyframework.gov/s/.
Data Processing by Social Networks
We maintain publicly accessible profiles on social networks. The social networks we use in detail are listed below. Social networks like Facebook, etc., can generally analyse your user behaviour comprehensively when you visit their website or a website with integrated social media content (e.g., like buttons or advertising banners). When you visit our social media profiles, various data protection-relevant processing operations are triggered. Specifically:
If you are logged into your social media account and visit our social media presence, the operator of the social media portal can assign this visit to your user account. Personal data may also be collected if you are not logged in or do not have an account with the social media platform. This data collection is carried out through cookies stored on your device or by recording your IP address.
Using the data collected, social media operators can create user profiles in which your preferences and interests are stored. In this way, interest-based advertising can be displayed to you inside and outside of the respective social media platform. If you have an account with the social network, interest-based advertising can be displayed on all devices on which you are logged in or have been logged in.
Please note that we cannot track all processing activities on social media portals. Depending on the provider, further processing operations may therefore be carried out by the social media operators. For details, please refer to the terms of use and privacy policies of the respective social media portals.
Legal Basis
Our social media presence is intended to ensure the broadest possible presence on the internet. This constitutes a legitimate interest pursuant to Art. 6(1)(f) GDPR. The analysis processes initiated by social networks may be based on differing legal foundations, which must be stated by the operators of the social networks (e.g., consent pursuant to Art. 6(1)(a) GDPR).
Controller and Assertion of Rights
If you visit one of our social media pages (e.g., Facebook), we are jointly responsible with the social media platform operator for the data processing operations triggered by your visit. You can assert your rights (access, rectification, erasure, restriction of processing, data portability, and complaint) both against us and against the operator of the respective social media platform (e.g., Facebook).
Please note that, despite the joint responsibility with the social media platform operators, we do not have full influence on the data processing operations of the social media portals. Our options are determined by the corporate policy of the respective provider.
Storage Duration
The data directly collected by us via the social media presence will be deleted from our systems as soon as the purpose for its storage no longer applies, you request its deletion, revoke your consent to storage, or the purpose for data storage no longer applies. Stored cookies remain on your device until you delete them. Mandatory statutory provisions – especially retention periods – remain unaffected.
We have no control over the storage duration of your data that is stored by social media operators for their own purposes. For details, please refer directly to the privacy policies of the social media operators (e.g., in their privacy policy, see below).
Social Networks in Detail
We have a profile on Facebook. The provider is Meta Platforms Inc., 1 Hacker Way, Menlo Park, California 94025, USA. We have entered into a joint controller agreement with Facebook. This agreement defines the processing operations for which we or Facebook are responsible when you visit our Facebook page. You can view this agreement at the following link: www.facebook.com/legal/terms/page_controller_addendum. You can adjust your advertising settings independently in your user account. To do this, click on the following link and log in: www.facebook.com/settings. For more information, please refer to Facebook's privacy policy: www.facebook.com/about/privacy/.
We have a profile on Instagram. The provider is Meta Platforms Ireland Limited. For details on how they handle your personal data, please refer to Instagram's privacy policy: help.instagram.com/581066165581870.
YouTube
We have a profile on YouTube. The provider is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. For more details on how they handle your personal data, please refer to YouTube's privacy policy: policies.google.com/privacy.
We have a profile on LinkedIn. The provider is LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA. For more details on how they handle your personal data, please refer to LinkedIn's privacy policy: www.linkedin.com/legal/privacy-policy.