We take data protection seriously

The protection of your privacy when we process your personal data is an important concern for us. When you visit our website, our web servers automatically store the IP of your Internet service provider, the website from which you visit us, the pages which you visit when you are on our website, as well as the date and duration of the visit. This information is essential for the technical transmission of the web pages and for secure server operation. No personalised evaluation of this data is carried out.

If you send us data via the contact form, this data is stored on our servers as part of the data back-up process. We then use your data only to process your request. Your data will also be treated in the strictest of confidence. It will not be disclosed to any third party.

Controller:
International Certification Management GmbH
Starubinger Straße 19
94363 Oberschneiding
Tel.: +49 (0) 9426 952902-0
E-Mail: info(at)ic-management.com

Personal data

Personal data is data relating to your person. This includes your name, address and email address. You do not have to disclose any personal data in order to visit our Internet site. In some cases, we need your name and address as well as further information in order to be able to offer you the requested service.

The same applies if we supply you with information material on request or if we answer your enquiries. Furthermore, we store only the data that you have sent to us either automatically or voluntarily.

If you use one of our services, we generally collect only the data that is necessary for us in providing you with our service. We may ask you for further information, which will then be provided on a voluntary basis. Whenever we process personal data, we do so in order to provide you with our service or to pursue our commercial objectives.

When you contact us, especially when you place and order with us, we shall collect the following information:

• title, first name, last name, company names, legal representative,
• a valid e-mail address,
• address,
• telephone number (landline and mobile numbers),
• information necessary for the service (examination, assessment, certification).

This data is collected

• so that we can identify you as our customer;
• so that we can advise you and provide the service you requested;
• for corresponding with you;
• for billing you;
• for processing any applicable liability claims and for asserting any claims against you.

Data processing takes place at your request and is necessary according to Art. 6 (1), 1st sentence, lit.b DSGVO in relation to the said purposes for a suitable processing of your order and for fulfilling of mutual obligations from the contract relationship.

The personal data we collect for your order will be stored until the mandatory statutory retention period has ended, after which they are deleted, unless we are obliged pursuant to Art. 6 (1), 1st sentence, lit. c DSGVO to store the data for a longer period to comply with retention and documen-tation provisions of tax and commercial law (whether HGB – German Commercial Code, StGB – German Criminal Code, or AO – German Fiscal Code) or when you have declared your consent to a longer period of storage pursuant to Art. 6 (1), 1st sentence, lit.a DSGVO.

Automatically stored data

Server log files

The website provider automatically collects and stores information in so-called "server log files", which your browser automatically transmits to us. These are:

• Date and time of the request
• Name of the requested file
• Page from which the file was requested
• Access status (file transferred, file not found, etc.)
• Web browser and operating system used
• Complete IP address of the requesting computer
• Transferred data volume

This data is not combined with other data sources. Processing is carried out in accordance with Art. 6 (1), lit. f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website.

This data is temporarily stored by us for reasons of technical security, in particular in order to prevent attempts to attack our web server. The data, however, does not allow us to obtain any information on specific individuals. After seven days at the latest, the data is made anonymous by shortening the IP address at the domain level, so that it is no longer possible to establish a reference to the individual user. The data is also processed in anonymous form for statistical purposes; it is not compared with other data stocks or disclosed to any third party, even in the form of extracts. Only the number of page views is made known within the context of our server statistics, which we publish every two years in our activity report.

Cookies

When you visit our Internet pages, we may store information on your computer in the form of cookies. Cookies are small files that are transferred from an Internet server to your browser and stored on its hard drive. Only the Internet protocol address, i.e. no personal data, is saved during this process. The information stored in the cookies enables us to recognise you automatically the next time you visit our website, thereby making it easier for you to use our website. The legal basis for the use of cookies is the legitimate interest pursuant to Art. 6 (1) lit. f GDPR.

You can of course also visit our Internet pages without accepting cookies. If you do not want your computer to be recognised upon your next visit, you can also refuse the use of cookies by changing the settings in your browser to "Reject cookies". You can find out how to do this in the operating instructions of your browser. However, if you reject the use of cookies, there may be restrictions on the use of some areas of our Internet pages.

Google Maps

This website uses Google Maps to display maps and to generate route maps.

Google Maps is operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

By using Google Maps on this website, you agree with the collection, processing and use of the automatically collected data as well as the data you entered by Google or one of its representatives or by third party providers.

You will find the terms of use for Google Maps here.

Click here to view the data privacy statement from Google Maps.

Security

We have taken technical and administrative security precautions to protect your personal data against loss, destruction, manipulation and unauthorised access. All of our employees and the service providers working for us are obliged to comply with the valid data protection laws.

Whenever we collect and process personal data, it is encrypted before being transmitted. This means that your data cannot be misused by third parties. Our security precautions are subject to a constant improvement process and our privacy policies are constantly being revised. Please make sure that you have the latest version.

Affected Rights

You have a right to information, rectification, erasure or restriction of the processing of your stored data, a right of objection to the processing as well as a right to data portability and a right to complain in accordance with the requirements of data protection law.

Right to information:
You can request information from us on whether and to what extent we process your data, in particular information regarding your personal data that we are processing, the purposes of such processing, the category of personal data, the categories of parties to whom your data was or will be disclosed, the planned duration of data storage, the existence of a right to correct, delete, restrict the processing or a right of objection, the existence of right to complain, the origins of your data when the data was not collected by us, and regarding the presence of any automated decision making, including profiling and, if applicable, information on the relevant details.

Right to rectification:
If we process your data that is incomplete or incorrect, you can request that we rectify or complete such data at any time (Art. 16 DSGVO).

Right to erasure:
You can request that we erase your data (Art. 17 DSGVO) if we process it unlawfully or if the processing interferes disproportionately with your legitimate protection interests and when the processing is not required for exercising rights to free speech and information, for fulfilling legal obligations, for reasons of public interest or for asserting, exercising or defending against legal claims. Please note that there may be reasons preventing immediate erasure, e.g. in the case of legally regulated retention obligations.
Irrespective of the exercising of your right to erasure, we will erase your data immediately and completely, unless there is a contractual or legal obligation to retain it.

Right to restriction of the processing:

You may request that we restrict the processing of your data if

• you dispute the accuracy of the data, namely for a period of time that enables us to verify the accuracy of the data.
• the processing of the data is unlawful, but you refuse to have it erased and instead request a restriction on the use of the data,
• we no longer need the data for the intended purpose, but you still need this data to assert or defend legal claims, or
• you have lodged an objection to the processing of the data.

Right to data portability:

You may request us to provide you with the data you have made available to us in a structured, current and machine-readable format and to allow you to forward this data to another responsible party without our interference, provided that

• we process this data on the basis of a declaration of consent you have issued and which is revocable or in order to fulfil a contract between us, and
• this processing is carried out using automated methods.

If it is technically feasible, you can ask us to transfer your data directly to another responsible party.

Right of objection:
If we process your data on the basis of a legitimate interest, you can object to this data processing at any time; this would also apply to any profiling based on these provisions. We will then no longer process your data unless we can prove compelling justified reasons for the processing that outweigh your interests, rights and freedoms, or when the processing serves to assert, exercise or defend legal claims. You can object to the processing of your data for the purposes of direct advertising at any time without stating any reasons.

Right of appeal:
If you are of the opinion that we are infringing German or European data protection law when processing your data, please contact us so that we can clarify any questions. You also of course have the right to contact the relevant supervisory authority, i.e. your local State Office for Data Protection Supervision.
If you wish to assert any of the above rights against us, please contact our Data Protection Officer. In cases of doubt we may request additional information to confirm your identity.

Changes to this privacy policy

We reserve the right to change our privacy policies if this becomes necessary due to new technologies or statutory or legal changes. Please make sure that you have the latest version. If any fundamental changes are carried out to this privacy policy, we shall announce these on our website.

All interested parties and visitors to our website can reach us concerning questions of data protection at the following address:

Jutta Deinbeck
Staubinger Straße 19
94363 Oberschneiding
Tel.: +49 (0) 9426 952902-0
jutta.deibeck(at)ic-management.com