Privacy policy of ARCA Regler GmbH


Privacy policy
We are pleased that you are interested in our website. The protection of your personal data is very important to us. At this point, therefore, we would like to inform you about data protection in our company. Of course, we observe the legal provisions of the EU GDPR, the German Federal Data Protection Act (BDSG), the German Telemedia Act (TMG) and other data protection regulations.
You can trust us with your personal data! They are encrypted by modern security systems and transmitted to us. Our web pages are protected by technical and organisational measures against damage, destruction or unauthorised access.
The use of the ARCA Regler GmbH web pages is basically possible without divulging any personal data. However, if a data subject wishes to use special services of our company via our website, processing of personal data could become necessary.Legal basis
If the processing of personal data is necessary and there is no legal basis for such processing, we generally obtain the consent of the data subject.Information regarding protective measures and alternative contact
As controller, ARCA Regler GmbH has implemented numerous technical and organisational measures to ensure the most complete protection possible of personal data processed through this website. Nevertheless, web-based data transmissions can generally have security gaps, so that absolute protection cannot be guaranteed. For this reason, every data subject is free to transmit personal data to us by alternative means, for example by telephone.
This data protection information applies to data processing by ARCA Regler GmbH. If you have any questions, comments or complaints, or if you wish to raise an objection, please contact ARCA Regler GmbH, Kempener Str. 18, 47918 Tönisvorst, Germany
Email: sf@arca-valve.com

In the absence of a Data Protection Officer, the person responsible for data protection is the Managing Director, Dipl.-Ing. Johannes Fliegen.

Data subject rights
You can receive information about your data stored by us at any time without giving reasons. We will record your request and respond to it within one month of receiving your request.
You have the right,
• in accordance with Article 15 GDPR, to request information about your personal data processed by us. In particular, you can request information about the purposes of processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to correction, deletion, restriction of processing or objection, the existence of a right to complain, the origin of your data, if not collected by us, as well as the existence of automated decision-making including profiling and, where applicable, meaningful information on their details;
• in accordance with Article 16 GDPR, to demand the correction of your incorrect personal data or completion of your personal data stored by us without delay;
• in accordance with Article 17 GDPR, to request the deletion of your personal data stored by us, unless the processing is necessary for the exercise of the right to freedom of expression and information, for the fulfilment of a legal obligation, for reasons of public interest or for the assertion, exercising or defence of legal claims;
• in accordance with Article 18 GDPR, to demand the restriction of the processing of your personal data, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you reject its deletion and we no longer need the data, but you need it to assert, exercise or defend legal claims or you have objected to the processing in accordance with Article 21 GDPR;
• in accordance with Article 20 GDPR, to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request the transmission to another controller;
• in accordance with Article 7 (3) GDPR, to revoke your consent to us at any time. As a result, we may no longer continue the data processing based on this consent for the future.
• in accordance with Article 77 GDPR, to complain to a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our company.

Right to object
You can have your data collected by us blocked, corrected or deleted at any time, if your personal data is processed on the basis of legitimate interests in accordance with Art. 6 para. 1 sentence 1 f) GDPR, and object to the pseudonymised data collection and storage for the purposes of optimising our website. This objection is made in accordance with Article 21 GDPR. You can also revoke your consent to the collection and use of data at any time without giving reasons. To do so, please contact the contact address given in the imprint. We are always at your disposal should you have any further questions about our information on data protection and the processing of your personal data.
Please note that data protection regulations and data protection practices, e.g. with Google, may change on an ongoing basis. It is therefore advisable and necessary to keep up to date with changes in the legal provisions and practices of companies, e.g. Google.

Data security
Within the context of your website visit, we do not yet use the widespread SSL (Secure Socket Layer) method in conjunction with the highest level of encryption supported by your browser. This procedure is already being planned. You can tell whether a single page of our website is transmitted in encrypted form by the closed representation of the key or lock symbol in the lower status bar of your browser.
Otherwise, we also take appropriate technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or unauthorised access by third parties. Our security measures are continuously being improved in line with technological developments. Nevertheless, web-based data transmissions can generally have security gaps, so that absolute protection cannot be guaranteed. For this reason, every data subject is free to transmit personal data to us by alternative means, for example by telephone.

Up-to-dateness and amendment of this privacy policy
This privacy policy is currently valid and was published in May 2018. Further development of our web page and our offer as well as legal and official requirements require the regular review and, if necessary, amendment of our privacy policy. The current version of our privacy policy can be found at any time on this website at: www.arca-valve.com.

Subject of data protection
The subject of data protection is personal data. According to Article 4 Para. 1 EU GDPR, these are individual details about the personal or factual circumstances of a specific or identifiable natural person. These include, for example, information such as name, postal address, email address or telephone number, and possibly also usage data such as your IP address.

Scope of the data collection and storage
Visiting our website
In principle, you can visit the ARCA Regler web pages without divulging any personal data. However, if a person wishes to use special services of our company via our website, the processing of personal data could become necessary; for example, if you wish to receive product information. Mutual fairness applies to us here: You tell us who you are, we give you all the information you want and promise to handle your data carefully and to use it only to process your request. Please understand that we do not want to serve fake users. When you visit our website www.arca-valve.com (and all other domains we use), the browser used on your end device automatically sends information to the server of our website. This information is temporarily stored in a so-called log file. The following information is collected without your help and stored until automated deletion:
• IP address of the requesting computer,
• Date and time of access,
• Name and URL of the retrieved file,
• Website from which access takes place (referrer URL),
• Browser used and, if applicable, the operating system of your computer as well as the name of your access provider.
• Country from which the file retrieval takes place
The aforementioned data will be processed by us for the following purposes:
• ensuring a smooth connection to the website,
• ensuring comfortable use of our website,
• evaluation of system security and stability as well as
• for further administrative purposes in the context of the fulfilment of the contract or to fulfil legal or official requirements to which we are bound.
Article 6 I a) GDPR serves our company as the legal basis for processing operations in which we obtain consent for a specific processing purpose. If the processing of personal data is necessary for the performance of a contract to which the data subject is a party, as is the case, for example, with processing operations that are necessary for the delivery of goods or the provision of another service or consideration, the processing is based on Article 6 I b) GDPR.
The same applies to such processing operations as are necessary to carry out pre-contractual measures, for instance in cases of inquiries about our products or services. If our company is subject to a legal obligation that requires the processing of personal data, such as to fulfil tax obligations, the processing is based on Article 6 I c) GDPR. In rare cases, the processing of personal data may become necessary in order to protect the vital interests of the data subject or another natural person. This would be the case, for example, if a visitor were to be injured in our company and his name, age, health insurance data or other vital information had to be passed on to a doctor, hospital or other third party. The processing would then be based on Article 6 I d) GDPR. Finally, processing operations could be based on Article 6 I f) GDPR. Processing operations that are not covered by any of the aforementioned legal bases are based on this legal basis if the processing is necessary to safeguard a legitimate interest of our company or a third party, provided that the interests, fundamental rights and freedoms of the data subject do not outweigh such a legitimate interest. We are permitted to carry out such processing operations in particular because they have been specifically mentioned by the European legislator. In this respect, the legislator took the view that a legitimate interest could be assumed if the data subject is a customer of the controller (recital 47 sentence 2 GDPR).

ARCA Regler informs its customers and business partners at regular intervals about company offers by means of a newsletter. Our company newsletter may only be received by the data subject if (1) the data subject has a valid email address and (2) the data subject has registered for the newsletter dispatch. For legal reasons, a confirmation email will be sent to the email address entered by a data subject for the first time for sending the newsletter in the double opt-in procedure. This confirmation email serves to check whether the owner of the email address as the data subject has authorised the receipt of the newsletter.
The personal data collected in the course of registering for the newsletter will be used exclusively to send our newsletter.
The personal data collected within the scope of the newsletter service will not be passed on to third parties. The subscription to our newsletter can be cancelled by the data subject at any time. The consent to the storage of personal data that the data subject has given us for the newsletter dispatch can be revoked at any time. A corresponding link for revoking consent can be found in each newsletter. Furthermore, it is possible to unsubscribe from the newsletter at any time directly on the controller’s website or to inform the controller in another way.

Contact form
For questions of any kind, we offer you the opportunity to contact us via a form provided on the website. It is necessary to provide a valid e-mail address, your first and last name and the name of the company so that we know from whom the request originates and in order to be able to answer it. Further information can be provided voluntarily.
The data processing for the purpose of contacting us takes place in accordance with Article 6 para. 1 sentence 1 a) GDPR on the basis of your voluntarily given consent.
The personal data collected by us for the use of the contact form will be automatically deleted after completion of the request made by you.

Provision of services
We may need your personal data in order for us to actually be able to provide our products and services. This applies both to the sending of information material and to the answering of individual enquiries. We collect these data in order to meet your request. These data will only be used for a specific purpose. We promise fairness and transparency in the handling of your data! We expect the same from you – we do not serve fake users, which is why we consider it legitimate to only serve real existing people who reveal their real identity to us.
If you commission us with the production of a product or the provision of a service, we collect and store your personal data only to the extent necessary for the provision of the service or the execution of the contract and for legal reasons. To this end it may be necessary to pass on your personal data to companies that we use to provide the service or handle the contract. These are, for example, haulage companies or other service providers. These service providers are obligated by us to comply with data protection requirements within the framework of the statutory provisions.
After complete contract processing, your data will be blocked and, after expiry of the tax and commercial regulations, deleted unless you have expressly consented to a further use of data.

Data collection through the use of AW Stats
We use the AWStats program in order to be able to statistically evaluate our website. The program is a free web analysis software. It is used to evaluate log files that web servers create based on visitor requests. The program does not use any cookie files for the evaluation. The statistical analysis is carried out via the log files, which also contain IP addresses (see no. 3). As a rule, these data cannot be assigned to specific persons. These data are not combined with other data sources, in addition to which the data are deleted after a statistical evaluation.
Unlike other statistical programs, AWStats does not transmit any data to an external server. The program is installed on your own hosting package. The transfer of data abroad, for example, is avoided because our server is located in Germany.

Social Media
We operate a YouTube® channel with product information. The operator of the pages is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. YouTube stores data to determine which region you come from (IP address) in order to check what content may be accessed from your country. This is necessary, among other things, to block content that may not be shown in your country, e.g. for copyright reasons.
If you are logged in to your YouTube account, you enable YouTube to associate your surfing behaviour directly with your personal profile. You can prevent this by logging out of your YouTube account.
Further information on the handling of user data can be found in YouTube’s privacy policy at: https://policies.google.com/privacy?hl=En

Collection and storage of usage data
In order to optimise our website, we collect and store data such as the date and time of the visiting the page, the page from which you accessed our page and the like, unless you object to this data collection and storage. The duration of storage is 1 year.
This is done anonymously without personally identifying the page user. User profiles may be created by means of a pseudonym. Here, too, there is no connection between the natural persons behind the pseudonym and the collected usage data. We also use cookies to collect and store usage data.
These are small text files that are stored on your computer and are used to store statistical information such as the operating system, your Internet user program (browser), IP address, the previously accessed web page (referrer URL) and the time. We collect these data exclusively for statistical purposes in order to further optimise our website and to make our Internet offers even more attractive.
The collection and storage take place exclusively in anonymous or pseudonymised form and does not allow any conclusions to be drawn about you as a natural person.

Storage duration and routine deletion and blocking of personal data
ARCA Regler processes and stores the personal data of the data subject only for the period necessary to achieve the purpose of storage or if this has been provided for by the European legislator or another legislator in laws or regulations to which the controller is subject.
If the storage purpose no longer applies or if a storage period prescribed by the European legislator or another competent legislator expires, the personal data will be routinely blocked or deleted in accordance with the statutory provisions.
The criterion for the duration of the storage of personal data is the respective legal retention period. After expiry of the period, the corresponding data will be routinely deleted, provided that they are no longer required for the fulfilment or initiation of the contract.
In protecting our own legitimate interests, for example, the temporary storage of the IP addresses of website visitors can be justified if this is necessary, for example, to ensure the security of the website against attacks. The storage of IP addresses for these purposes usually lasts no longer than 14 days.

Existence of automated decision-making
As a responsible company, we do not use automatic decision-making or profiling.

Use of data for the specific purpose
We observe the principle of the use of data for its specific purpose and collect, process and store your personal data only for the purposes for which you have communicated it to us. Your personal data will not be passed on to third parties without your express consent, unless this is necessary for the provision of the service or for the execution of the contract. Also, the transmission to state institutions and authorities entitled to receive information takes place only within the scope of the statutory information obligations or if we are obliged to provide information by a court decision.
We also take internal data protection within the company very seriously. Our employees and the service providers commissioned by us have been obligated by us to maintain secrecy and to comply with the data protection regulations.