Privacy Policy
Copyright © 2021 FVA GmbH
All rights reserved.
Last updated 15 December, 2021.
These terms are governed by the laws of the Federal Republic of Germany irrespective of your location. By using the FVA website you agree to be bound by the German-language version of these terms and conditions, and acknowledge that, in the event of conflict between the German-language version and this translated version, the German language version shall prevail.
The FVA would like to thank you for your interest in our association, its products and services.
We take the protection of your personal data, which you also communicate to us by visiting this website, as well as its confidential handling very seriously. The processing of your personal data takes place solely in accordance with the respectively applicable statutory data protection requirements, in particular the EU General Data Protection Regulation (hereinafter referred to as “GDPR”).
We process personal data of employees of our association members and business partners. This personal data is the subject of this data protection information. We would like to use this document to inform you about the scope of the processing of your personal data and your data protection rights within the scope of association membership and/or your business relationship with us.
1. Controller
The controller responsible for the data processing is:
FVA GmbH
Lyoner Strasse 18
60528 Frankfurt am Main, Germany
Phone: +49 69 6603-1515
E-mail: info(at)fva-service.de
Please contact us at any time should you have any questions or suggestions concerning data protection. Data protection manager for the VDMA (Mechanical Engineering Industry Association) and its bodies, which include the FVA, are:
Sven Laux
VDMA e. V.
Head of Human Resources Department
Lyoner Strasse 18
60528 Frankfurt am Main, Germany
Phone: +49 69 6603-1640
E-mail: datenschutz(at)vdma.org
Thomas Zopick
VDMA e. V.
Head of IT Department
Lyoner Strasse 18
60528 Frankfurt am Main, Germany
Phone: +49 69 6603-1868
E-mail: datenschutz(at)vdma.org
You can contact our data protection officer at:
Scheja und Partner Rechtsanwälte mbB
Adenauerallee 136
53113 Bonn, Germany
Phone: +49 228 22 72 26-0
E-mail: DSB-VDMA(at)scheja-partner.de
Contact: https://www.scheja-partner.de/kontakt/kontakt.html
2. The subject of data protection
This data protection information covers personal data. This personal data includes all information that relates to an identified or identifiable natural person (so-called “affected person”). This data includes, for example, information on the name, postal address, email address or telephone number, but also includes information that is required during the association membership and/or business relationship, such as details on the beginning, end and scope of the usage of the membership, products and services.
3. Purposes and legal conditions for data processing
In the following, we will give an overview on the purposes and legal conditions of data processing within the scope of your association membership and/or business relationship with us.
3.1 Processing and implementing workflows and services in the framework of your individual relationship (association membership and/or business relations) with us
We generally process data that is basically collected within the framework of a business relationship with companies. We do, however, also process personal data when this is necessary for the preparation and implementation of a contract with you personally.
Additional details on the purposes of the data processing can be obtained in the respective agreements and/or contract documents.
Data processing is performed on the basis of Article 6 para. 1 lit. b GDPR. You must specify the personal data which is necessary for the preparation and implementation of your association membership and/or our business relationship with you. We will not be able to process your query or fulfill a contract without this data.
We shall delete the data when it is not longer needed for the pursued purposes and no other legal obligation exists. Should the latter apply, we shall delete the data once the other legal obligation no longer exists.
3.2 Fulfillment of legal obligations
We also process your personal data to comply with legal obligations that we are subject to. The obligations may arise, for example, from association, commercial, tax, money laundering, finance or penal legislation. The purposes for the processing arise from the respective legal obligation; the processing generally serves the purpose of complying with federal control and information obligations.
Data processing is performed on the basis of Article 6 para. 1 lit. c GDPR. When we collect personal data due to a legal obligation, you must provide the personal data required to fulfill the legal obligation. We may not be able to process your query should you not provide this personal data.
We shall delete the personal data once the legal obligation no longer exists, provided that no other legal requirement exists. Should the latter apply, we shall delete the data once the other legal requirement no longer exists.
3.3 Safeguarding legitimate interest
We also process your personal data to safeguard our legitimate interests or those of third parties. We pursue the following interests, which are also the respective purposes. For the specific interests that are at the same time the respective purposes, please consult the General information on the handling of personal data in the VDMA and its bodies.
To facilitate comprehensive and effective support provided by the VDMA and its bodies, we together document the service portfolio in a jointly used member and customer database. All responsible organizations are obligated to comply with lawful data processing in accordance with Article 26 GDPR in the case of joint data processing. The controller for individual rights in joint data processing is VDMA e. V., Lyoner Strasse 18, 60528 Frankfurt am Main, Germany.
The data processing is performed on the basis of Article 6 para. 1 lit. f GDPR. We shall explicitly point out those cases in which you have to provide data. We may not be able to process your query should you not provide this personal data.
We shall delete the data when it is no longer needed for the pursued purposes and no other legal obligation exists. Should the latter apply, we shall delete the data once the other legal obligation no longer exists.
3.4 Events
In order to inform you about similar offers or events by email in the future, we process your personal data to the extent necessary. The legal basis for this is Art. 6 para. 1 lit. f GDPR.
3.5 Consent
If you have given your consent for specific purposes, the respective purposes shall arise from the contents of the submitted consent.
The data processing is performed on the basis of Article 6 para. 1 lit. a GDPR. We shall explicitly point out those cases in which you have to provide data. Without the provision of this data, we may not be able to process the request covered by the consent. You may revoke your consent at any time. However, this shall not affect the lawfulness of the processing conducted, based on the consent, until the revocation.
We shall delete the data when it is no longer needed for the pursued purposes, or if you have revoked the consent and no other legal obligation exists. Should the latter apply, we shall delete the data once the other legal obligation no longer exists.
4. Recipients of personal data
4.1 Internal recipients
Only those persons who require the data for the purposes stated under section 3 shall have access.
4.2 Joint responsibility
In case of data processing conducted within the scope of shared responsibility in accordance with Article 26 GDPR, the VDMA e. V. and its bodies are the reciprocal recipients.
4.3 External recipients
We shall only forward your personal data to external recipients when this is necessary for the completion or processing of your query, if another legal permission to do so exists or if you have provided your consent for this purpose.
External recipients may include:
(a) Commissioned processors:
External processors we commission to perform services, for example in technical infrastructure and maintenance or the provision of contents relevant for agreements and contracts. We select these commissioned processors very carefully and review their activities regularly to ensure the protection of your personal data. The service provider may only use the personal data for the purposes we specify.
(b) Public bodies:
Authorities and government institutions, such as district attorneys, courts or finance authorities, to which we must provide personal data based on mandatory and statutory grounds.
(c) Other bodies:
Cooperation partners to which personal data is transferred based on consent or legal grounds, for example to trade fair companies, standardization and research institutions, congress and event organizations, national and international associations.
4.4 Miscellaneous
(1) The hosting services we use serve to provide the following services: infrastructure and platform services, computing capacity, storage space and database services, security services, as well as technical maintenance services which we use for the purpose of providing this online offer.
In doing so, we or our hosting provider process inventory data, contact data, content data, contract data, usage data, meta and communication data of customers, interested parties, and visitors of this online offer on the basis of our legitimate interests in efficient and secure provision of this online offer in accordance with Art. 6 para. 1 lit. f DSGVO in conjunction with Art. 28 DSGVO.
(2) Furthermore, we may pass on your personal data to third parties if we offer participation in promotions, competitions, conclusion of contracts, or similar services together with partners.
(3) If our service providers or partners are based in a state outside the European Economic Area (EEA), we will inform you of the consequences of this in the description of the offer.
5. Data processing in third countries
If a data transfer takes place to bodies whose registered office or their place of data processing is not in a member state of the European Union or in another party to the Agreement on the European Economic Area, prior to transfer we ensure that, outside of legally permitted exceptional cases at the recipient, either an appropriate level of data protection exists (e.g. under an adequacy decision from the European Commission, through suitable guarantees by the recipient such as self-certification according to the EU-US Privacy Shield or the agreement of so-called standard contractual clauses in the European Union with the recipient) or that adequate consent has been granted.
We can provide you with an overview of the recipients in third countries and a copy of specifically agreed provisions for safeguarding the appropriate level of data protection. Please use the information provided in section 1 for this enquiry.
6. Retention period
The retention period for personal data is provided in the respective section on data processing.
Also generally applicable: We only store personal data for as long as it is necessary to fulfill the respective purposes or – in case of consent – until you revoke your consent. In case of objection, we delete your personal data, unless its processing is permitted under the relevant statutory provisions.
We also delete your personal data when we are obligated to do so due to legal requirements.
7. Details on services, cookies & co.
7.1 Own services
The following services are used on www.mobilemachines-karlsruhe.de/en/:
(a) Logfiles:
Data categories
Each time our website is accessed, our system automatically collects data and information from the computer system of the calling computer. The following data is collected: IP address of the user; date and time of access; name of the requested website or file; status of transmission and amount of data transferred; websites where the user came from (so-called "referrer"); websites accessed by the user's system through our website; information about the browser type and version used; operating system of the user; internet service provider of the user.
Purposes
Dispatch of the newsletter
Legal basis
Article 6 para 1 lit. b and f GDPR
Pursued legitimate interests
See purposes
Recipients or categories of recipients
Hosting provider, internal departments, external service provider for technical support government agencies on demand
Storage periods or criteria for their determination
7 days after creation
Duty to provide personal data and possible consequences of failure to provide
No duty to provide, automatic collection by accessing the service
Data sources
Direct collection when accessing website/service
(b) Newsletter registration:
Data categories
IP address of the user; date and time of access; name of the requested website or file; status of transmission and amount of data transferred; websites where the user came from (so-called "referrer"); websites accessed by the user's system through our website; information about the browser type and version used; operating system of the user; internet service provider of the user.
Purposes
Statistical evaluations, optimising the website, system security (fraud prevention), error diagnosis
Legal basis
Article 6 para 1 lit. b and f GDPR
Pursued legitimate interests
See purposes
Recipients or categories of recipients
Hosting provider, internal departments, external service provider for technical support government agencies on demand
Storage periods or criteria for their determination
7 days after creation
Duty to provide personal data and possible consequences of failure to provide
No duty to provide, automatic collection by accessing the service
Data sources
Direct collection when accessing website/service
7.2 Integration of third-party services
We use third-party services to enable you to use their functions, services and features. These integrated services are designed and provided by the respective third party. Therefore we have no influence on the design, contents and function of those services or the processing of personal data by the provider. Please obtain further information directly from the providers of those integrated services.
(a) Google Maps:
Provider/recipient
Google Inc., Amphitheatre Parkway, Mountain View, CA 94043, USA
Purposes
Providing the Google map service
Legal basis
Article 6 para 1 lit. b and f GDPR
Pursued legitimate interests
Providing the Google map service
The provider’s data protection notice
https://policies.google.com/privacy?hl=en
Further information
To prevent a connection to Google Maps, java script can be deactivated in the browser settings.
(b) YouTube:
Provider/recipient
YouTube LLC, 901 Cherry Avenue, San Bruno, CA 94066, USA (vertreten durch Google Inc., Amphitheatre Parkway, Mountain View, CA 94043, USA)
Purposes
Display YouTube videos
Legal basis
Article 6 para 1 lit. f GDPR
Pursued legitimate interests
Enable viewing of YouTube videos
The provider’s data protection notice
https://policies.google.com/privacy?hl=en
Further information
The integration takes place through the "extended data protection mode" of YouTube.
7.3 Cookies
On our website we use cookies to provide an extensive range of functions, make the usage more comfortable and optimise our offers. Cookies are small text files generated by a web server und stored on your computer during the online visit by your web browser.
We use so-called “session cookies“ which are automatically deleted after upon completion of your browser session.
Furthermore, we use persistent cookies which are mostly used to provide permanently recurring settings to you as a website visitor. This enables us to modify our website individually in accordance to your preferences. Persistent cookies also enable us to analyse our visitor’s usage behaviour though only within the scope of validity.
In addition to that, further cookies might be used in connection with the integration of specific services by the providers of those services (so-called “third-party cookies“).
If you do not want cookies to be used you can prevent the storage of cookies on your device with respective configurations of your internet browser. Please bear in mind that the functionality and the range und functions could be restricted by that. Furthermore we will only use specific cookies with your previous consent. Also you can make use of your right to object when it comes to specific cookies.
Legal basis
Article 6 para 1 lit. f GDPR
8. Rights affected
You have numerous rights as a person affected by the data processing. In detail:
(a) Right of access:
You have the right to receive information from us on the personal data we have stored about you.
(b) Right to rectification and erasure:
You can demand that we rectify any inaccurate personal data and – to the extent that legal requirements are met – the deletion of your personal data.
(c) Right to the restriction of processing:
You can demand that we – to the extent that legal requirements are met – restrict the processing of your personal data.
(c) Data portability:
If you have provided us with data based on an agreement and/or a contract or your consent, you have the right, when the legal requirements are given, to receive your personal data in a structured, commonly used and machine-readable format and have the right to demand that we transmit this data to another controller.
(e) Withdrawal of consent:
If you have consented to the processing of your personal data, you may withdraw this consent at any time with effect for the future. The lawfulness of the processing of your personal data up to the time of withdrawal remains unaffected.
(f) Right to lodge a complaint with a supervisory authority:
You may also file a complaint with the responsible supervisory authority when you are of the opinion that the processing of your personal data violates applicable law. To do so, you may turn to the data protection authority which is responsible for your place of residence or your country; you may also contact the data protection authority which is responsible for us.
9. Rights to object
9.1 Objecting to data processing based on “legitimate interest”
You have the right, based on reasons arising from your special situation, to object to our processing of your personal data at any time, provided this objection is based on the legal grounds of a “legitimate interest”. If you assert your right to object, we shall stop processing your personal data, unless we can document – in accordance with statutory provisions – compelling legitimate grounds for the continued processing which override your rights.
9.2 Objecting to data processing for direct advertising proposes
We process personal data based on the legal grounds of a “legitimate interest” and to conduct direct advertising. You have the right to object to such processing at any time.
10. Your contact to us and the assertion of your rights
You may contact us, at no charge, should you have any questions on the processing of your personal data, your individual rights as an affected person and any consent you may have granted. To assert all of your above-mentioned rights, please contact datenschutz(at)vdma.org or one of the parties stated in section 1 above. Please make sure that we can clearly identify your person.
Status: 15 December, 2021
We thank you for taking the time to read this legal information and appreciate your interest in FVA. Do you still have questions? Our support team would be happy to answer them.