Data protection

Welcome to our website. We look forward to your visit! In addition to supporting our customers, the protection of your personal data is an important concern for us.
In the following, you will find out what activities we carry out during your visit to our website in accordance with the applicable data security legislation, what information we may collect and in what form it is processed.
Any changes to the privacy policy will be updated on this page to keep you informed about what data WEA SERVICE DAG GmbH stores and uses.
The most important data protection information is organised thematically below.

A. Name and address of the controller
The controller responsible for the collection, processing and use of your personal data within the meaning of the EU General Data Protection Regulation is

WEA SERVICE DAG GmbH
Kastanienweg 29 
DE-65835 Liederbach a.T.
Telephone: +49 1724687229
E-mail: info@wea-service.com

If you wish to object to the collection, processing and use of your data by WEA SERVICE DAG GmbH in accordance with these data protection provisions as a whole or for individual measures, you can send your objection by e-mail or letter to the above address.
 

B. General information on data processing

B.1 Why we use data
Our services are constantly being improved and made more attractive. We can only optimise the content of the WEA SERVICE website according to your requirements if we know which parts of our website are visited most frequently and for the longest time. If you entrust us with personal information, this will only be used by WEA SERVICE DAG GmbH for the purposes of technical website administration, customer management, product surveys and marketing to the extent necessary in each case. The better we understand your wishes, the faster you will find the information you require on our website.

B.2 Information on the collection of personal data
In the following, we provide information about the collection of personal data when you use our website. Personal data is all data that can be related to you personally, e.g. name, address, e-mail addresses, user behaviour.
If you are asked to provide personal information such as your name, address or telephone number on our website, this is subject to special provisions, which are pointed out to you with the following wording:
"I agree that my personal data (including telephone number and/or e-mail address) may be collected, processed and used for the purpose of contract processing, prospecting, surveying and providing information". The data will not be passed on to third parties. This consent can be revoked at any time at WEA SERVICE DAG GmbH, 65835 Liederbach a.T.".
We use this data exclusively for the above-mentioned purposes. It will not be passed on to third parties outside WEA SERVICE DAG GmbH.
In addition to the data that you provide to us, we use information in the way you use our website to guide you as quickly as possible to the information that may be of interest to you and to constantly optimise our website.

B.3 Legal basis for the processing of personal data
Insofar as we obtain the consent of the data subject for the processing of personal data, Art. 6 para. 1 lit. a EU General Data Protection Regulation (GDPR) serves as the legal basis.
When processing personal data that is necessary for the fulfilment of a contract to which the data subject is a party, Art. 6 para. 1 lit. b GDPR serves as the legal basis. This also applies to processing operations that are necessary for the implementation of pre-contractual measures.
Insofar as the processing of personal data is necessary to fulfil a legal obligation to which our company is subject, Art. 6 para. 1 lit. c GDPR serves as the legal basis.
If the processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the former interest, Art. 6 para. 1 lit. f GDPR serves as the legal basis for the processing.

B.4 Data erasure and storage duration
The personal data of the data subject will be erased or blocked as soon as the purpose of storage no longer applies. Data may also be stored if this has been provided for by the European or national legislator in EU regulations, laws or other provisions to which the controller is subject. The data will also be blocked or erased if a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or fulfilment of a contract.

C. Provision of the website
C.1 Collection of personal data when you visit our website
When you visit our website, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect data that is technically necessary for us to display our website to you and to ensure stability and security. The following data is collected here:
- IP address of the user
- Date and time of the request
- Content of the request (specific page)
- Amount of data transferred in each case
- Website from which the enquiry originates
- Information about the browser type
- Operating system of the user
- Language and version of the browser software
- Websites from which the user's system accesses our website
- Websites that are accessed by the user's system via our website
This data is also stored in the log files of our system. This data is not stored together with other personal data.

C.2 Legal basis for data processing
The legal basis for the temporary storage of data and log files is Art. 6 para. 1 lit. f GDPR.

C.3 Purpose of the processing
The temporary storage of the IP address by the system is necessary to enable the website to be delivered to the user's computer. For this purpose, the user's IP address must be stored for the duration of the session. The IP addresses are required for problem diagnosis, website administration and demographic information.
The logged data is used exclusively for data security purposes, in particular for defence against attempted attacks on our web server and for statistical evaluations.

C.4 Duration of storage
The data is deleted as soon as it is no longer required to fulfil the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended.
If the data is stored in log files, this is the case after seven (7) days at the latest. Storage beyond this period is possible. In this case, the IP addresses of the users are deleted or anonymised so that it is no longer possible to identify the accessing client.

C.5 Objection and removal options
The collection of data for the provision of the website and the storage of data in log files is absolutely necessary for the operation of the website. Consequently, the user has no option to object.

D. Use of cookies
D.1 Description and scope of data collection
Our website uses cookies. Cookies are text files that are stored in the Internet browser or by the Internet browser on the user's computer system. When a user accesses a website, a cookie may be stored on the user's operating system. This cookie contains a characteristic string of characters that enables the browser to be uniquely identified when the website is called up again. Cookies cannot execute programmes or transfer viruses to your computer.
We use cookies to make our website more user-friendly. Some elements of our website require that the accessing browser can be identified even after a page change.

D.2 Legal basis for data processing
The legal basis for the processing of personal data using cookies is Art. 6 para. 1 lit. f GDPR.

D.3 Purpose of the data processing
The purpose of using technically necessary cookies is to simplify the use of websites for users. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognised even after a page change.
The user data collected by technically necessary cookies is not used to create user profiles.
These purposes also constitute our legitimate interest in the processing of personal data in accordance with Art. 6 para. 1 lit. f GDPR.

D.4 Duration of storage
Cookies are stored on the user's computer and transmitted by it to our website. As a user, you therefore have full control over the use of cookies. You can deactivate or restrict the transmission of cookies by changing the settings in your internet browser.

D.5 Objection and removal options
Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all functions of the website to their full extent.

H. Online presence in social media
We maintain publicly accessible profiles in social networks in order to get in touch with users, interested parties and customers active there and to inform them about our services.
In the case of social networks such as Facebook, user data may be processed outside the European Union in third countries such as the USA. This can make it more difficult for users to enforce their rights. We endeavour to only integrate social networks that comply with EU data protection standards. And document this through their privacy policies and/or standard data protection clauses (SDC).
If you are logged into your social media account and visit our social media presence, the operator of the social media portal can assign this visit to your user account. However, your personal data may also be collected if you are not logged in or do not have an account with the respective social media portal. In this case, this data is collected, for example, via cookies that are stored on your end device or by recording your IP address.
With the help of the data collected in this way, the operators of the social media portals can create user profiles in which your preferences and interests are stored. The data is generally used for market research and advertising purposes. In this way, personalised advertising can be displayed to you inside and outside the respective social media presence. If you have an account with the respective social network, the interest-based advertising can be displayed on all devices and platforms on which you are logged in or have been logged in.
Please also note that we cannot track all processing operations on the social media portals. Depending on the provider, further processing operations may therefore be carried out by the operators of the social media portals. For details, please refer to the terms of use and data protection provisions of the respective social media portals.

H.1 Legal basis
Our social media presences are intended to ensure the widest possible presence on the internet. This is a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR. The analysis processes initiated by the social networks may be based on different legal bases, which must be specified by the operators of the social networks (e.g. consent within the meaning of Art. 6 para. 1 lit. a, Art. 7 GDPR).

H.2 Controller and assertion of rights
If you visit one of our social media sites (e.g. Facebook), we are jointly responsible with the operator of the social media platform for the data processing operations triggered during this visit. You can assert your rights (information, rectification, erasure, restriction of processing, data portability and complaint) both against us and against the operator of the respective social media portal (e.g. Facebook).
Please note that, despite the joint responsibility with the social media portal operators, we do not have full influence on the data processing procedures of the social media portals. Our options are largely determined by the company policy of the respective provider.

H.3 Storage duration
The data collected directly by us via the social media presence will be deleted from our systems as soon as the purpose for its storage no longer applies, you request us to delete it, revoke your consent to storage or the purpose for data storage no longer applies. Stored cookies remain on your end device until you delete them. Mandatory statutory provisions - in particular retention periods - remain unaffected.
We have no influence on the storage period of your data that is stored by the operators of social networks for their own purposes. For details, please contact the operators of the social networks directly (e.g. in their privacy policy, see below).


H.4 Social networks in detail
- Facebook, -pages, -groups, (Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland) on the basis of an 
Agreement on joint processing of personal data 
Privacy policy: www.facebook.com/about/privacy/,
Opt-out: www.facebook.com/settings and www.youronlinechoices.com, 
- Google/YouTube (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) - Privacy Policy: policies.google.com/privacy,
Opt-Out: adssettings.google.com/authenticated,
- Twitter (Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA) - Privacy Policy: twitter.com/de/privacy,
Opt-Out: twitter.com/personalization,
- LinkedIn (LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Ireland) - Privacy Policy www.linkedin.com/legal/privacy-policy ,
Opt-Out: www.linkedin.com/psettings/guest-controls/retargeting-opt-out,
- Xing (XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany) -
Privacy policy/ Opt-Out: privacy.xing.com/de/datenschutzerklaerung
- Google/ YouTube (Google Ireland Limited, Google Building Gordon House, 4 Barrow Street, Dublin, D04 E5W5, Ireland) - Privacy Policy: policies.google.com/privacy,
- Opt-out: adssettings.google.com/authenticated,

I. Social plugins (Facebook, Twitter, LinkedIn, XING, YouTube)
So-called "social plugins" are used on our website. These are currently the plugins of the services Facebook, Twitter, LinkedIn, Xing and YouTube. These plugins can be used to send data, including personal data, to service providers in the USA and may be used by them.

I.1 Shariff protection tools
The website itself does not collect any personal data via the social plugins or through their use. WEA SERVICE uses the Shariff solution to prevent data from being transferred to service providers, including in the USA, without the user's knowledge. This solution ensures that no personal data is initially passed on to the providers of the individual social plugins when you visit our website. Only when you click on one of the social plugins can the data be transferred to the service provider and stored there.
You can find more information about the Shariff solution on the website of the provider, Heise Medien Gmbh & Co. KG: m.heise.de/ct/artikel/Shariff-Social-Media-Buttons-mit-Datenschutz-2467514.html

I.2 Privacy policy for the use of Facebook plugins
Plugins of the social network Facebook, provider Facebook Inc, 1 Hacker Way, Menlo Park, California 94025, USA, are integrated on our pages. You can recognise the Facebook plugins by the Facebook logo or the "Like" button on our site. You can find an overview of the Facebook plugins here: developers.facebook.com/docs/plugins/.
When you visit our website, a direct connection is established between your browser and the Facebook server via the plugin. Facebook receives the information that you have visited our site with your IP address. If you click on the Facebook "Like" button while you are logged into your Facebook account, you can link the content of our pages to your Facebook profile. This allows Facebook to associate your visit to our pages with your user account. We would like to point out that, as the provider of the pages, we have no knowledge of the content of the transmitted data or its use by Facebook. Further information on this can be found in Facebook's privacy policy at
de-de.facebook.com/policy.php.
If you do not want Facebook to be able to associate your visit to our pages with your Facebook user account, please log out of your Facebook user account.

I.3 Privacy policy for the use of Twitter
Functions of the Twitter service are integrated on our pages. These functions are offered by Twitter Inc, 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. By using Twitter and the "Re-Tweet" function, the websites you visit are linked to your Twitter account and made known to other users. Data is also transmitted to Twitter. We would like to point out that, as the provider of the pages, we have no knowledge of the content of the transmitted data or its use by Twitter. Further information on this can be found in Twitter's privacy policy at twitter.com/privacy.
You can change your data protection settings on Twitter in the account settings at: twitter.com/account/settings

I.4 Privacy policy for the use of LinkedIn
Our website uses functions of the LinkedIn network. The provider is LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA.
Each time one of our pages containing LinkedIn functions is accessed, a connection to LinkedIn servers is established. LinkedIn is informed that you have visited our website with your IP address. If you click on the LinkedIn "Recommend" button and are logged into your LinkedIn account, LinkedIn is able to associate your visit to our website with you and your user account. We would like to point out that, as the provider of the pages, we have no knowledge of the content of the transmitted data or its use by LinkedIn.
Further information on this can be found in LinkedIn's privacy policy at: www.linkedin.com/legal/privacy-policy

I.5 Privacy policy for the use of XING
Our website uses functions of the XING network. The provider is XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany. Each time one of our pages containing XING functions is accessed, a connection to XING servers is established.
To the best of our knowledge, no personal data is stored in the process. In particular, no IP addresses are stored and usage behaviour is not evaluated.
The use of YouTube is in the interest of an appealing presentation of our online offers. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR.
Further information on data protection and the XING share button can be found in XING's privacy policy at www.xing.com/app/share

I.6 Privacy policy for the use of Google Maps
We use Google Maps on this website to visualise geographical information and create directions. Google Maps is a map service operated by Google Ireland Limited, Google Building Gordon House, 4 Barrow Street, Dublin, D04 E5W5, Ireland ("Google").
When you use Google Maps, Google collects data about your use of the Google Maps functions, including your IP address.
It cannot be ruled out that the information collected will also be transmitted to a Google server in a third country, in particular to a server of Google's parent company, Google LLC, 1600 Amphitheatre Parkway, Mountain View, California, USA, and stored there.
The basis for the data exchange with Google LLC is regulated by standard data protection clauses (SDK) in the "Contract Data Processing Terms for Google Advertising Products" (https://privacy.google.com/businesses/processorterms/). 
If you are logged into your Google account, Google may add the processed information to your account depending on your account settings and treat it as personal data, see in particular www.google.de/policies/privacy/partners/.
You have the option of deactivating the Google Maps service and thus preventing the transfer of data to Google by deactivating JavaScript in your browser. However, we would like to point out that you will not be able to use the map display in this case.
Enabling the visual display constitutes a legitimate interest within the meaning of the relevant legal basis of Art. 6 para. 1 lit. f GDPR.
Further information on the terms of use of Google Maps and data processing by Google can be found on Google's websites, for example at
- www.google.com/intl/de_de/help/terms_maps.html (Terms of use for Google Maps)
- policies.google.com/privacy (Google privacy policy)

I.7 Privacy policy for the use of YouTube
We have embedded videos from YouTube (YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA) in our website. This has been done using the so-called "double-click" method. This means that you are initially only shown a preview image on our website without a connection to YouTube being established. Only when you click on the respective preview image will a connection to YouTube be established and your IP address forwarded to the YouTube servers. YouTube is thus informed that our website has been visited with your IP address. We have no knowledge of the data collected in this way or how it is used.
It cannot be ruled out that the information collected may also be transmitted to a server of YouTube LLC in a third country, in particular to a server of Google's parent company, Google LLC, 1600 Amphitheatre Parkway, Mountain View, California, USA, and stored there.
The basis for the data exchange with Google LLC is regulated by standard data protection clauses (SDK) in the "Contract Data Processing Terms for Google Advertising Products" (https://privacy.google.com/businesses/processorterms/).
If you are logged into your YouTube or Google account, Google may add the processed information to your account depending on your account settings and treat it as personal data, see in particular www.google.de/policies/privacy/partners/.
We integrate YouTube so that you can watch videos directly on our website. By integrating external videos, we reduce the load on our servers and can use the corresponding resources elsewhere, which can increase the stability of our servers, among other things. This constitutes a legitimate interest within the meaning of the relevant legal basis of Art. 6 para. 1 lit. f GDPR.
Further information on data processing by Google can be found at policies.google.com/privacy

J. Where is my data processed?
Your data is processed in Germany. To the extent permitted by law, data processing also takes place in other European and non-European countries. A transfer to third countries is not planned

K. How secure is my data?
WEA SERVICE DAG GmbH has taken extensive technical and operational security precautions in accordance with applicable European law to protect your data from unauthorised access and misuse.

L. Will my data be passed on to third parties?
Data is not passed on to third parties.

M. Rights of the data subjects
If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights vis-à-vis the controller:

M.1 Right to information
You can request information free of charge about the scope, origin and recipients of the stored data as well as the purpose of the storage.

M.2 Right to rectification
You have a right to rectification and/or completion vis-à-vis the controller if the processed personal data concerning you is incorrect or incomplete. The controller must make the rectification without undue delay.

M.3 Right to erasure
You have the right to obtain from the controller the erasure of personal data concerning you without undue delay and the controller shall have the obligation to erase such data without undue delay where one of the following grounds applies:
(1) The personal data concerning you are no longer necessary in relation to the purposes for which they were collected or otherwise processed.
(2) You revoke your consent on which the processing was based pursuant to Art. 6 para. 1 lit. a or Art. 9 para. 2 lit. a GDPR and there is no other legal basis for the processing.
(3) You object to the processing pursuant to Art. 21 (1) GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Art. 21 (2) GDPR.
(4) The personal data concerning you has been processed unlawfully.
(5) The deletion of personal data concerning you is necessary to fulfil a legal obligation under Union law or the law of the Member States to which the controller is subject.
(6) The personal data concerning you have been collected in relation to the offer of information society services referred to in Art. 8 (1) GDPR.

M.4 Right to data portability
You have the right to receive the personal data concerning you, which you have provided to the controller, in a structured, commonly used and machine-readable format.

M.5 Right to object
You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (e) or (f) of Article 6(1) GDPR, including profiling based on those provisions.
The controller will no longer process the personal data concerning you unless the controller demonstrates compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims.
You have the right to revoke your declaration of consent under data protection law at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

M.6 Right to lodge a complaint with the supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes the GDPR.
The supervisory authority with which the complaint has been lodged shall inform the complainant on the progress and the outcome of the complaint including the possibility of a judicial remedy pursuant to Art. 78 GDPR.