Data privacy policy
With the following information, Stefan Pfaff Werkzeug- und Formenbau GmbH & Co. KG provides you with an overview of the processing of your personal data when you visit our website and of your rights under data protection law.
Information on the processing of personal data
Below we inform you about the processing of personal data when you visit and use our website pfaffinnovation.com. Personal data within the meaning of Art. 4(1) of the General Data Protection Regulation (GDPR) is any information relating to an identified or identifiable natural person, e.g. name, address, email address or IP address.
The controller within the meaning of Art. 4(7) GDPR is:
Stefan Pfaff Werkzeug- und Formenbau GmbH und Co. KG
Am Eisenberg 1
D-88167 Röthenbach/Allgäu
Contact details of our data protection officer
You can reach our data protection officer by email at datenschutz@pfaffinnovation.com, by phone at +49 8384 8200-373 or by post at the address above, marked “Data protection”.
Categories of data, purposes and legal bases of processing
We process personal data only as far as necessary to provide our website, content and services. Legal bases are Art. 6(1)(a) GDPR (consent), (b) (contract or pre-contractual measures), (c) (legal obligation) and (f) (legitimate interests). Storing information on your device or accessing it (e.g. cookies) is additionally governed by Section 25 of the German Telecommunications Digital Services Data Protection Act (TDDDG).
(a) Visiting the website (server log files)
When you visit our website, our hosting service provider automatically records technical data transmitted by your browser: IP address, date and time of access, page requested, referring page, browser and operating system. We need these data to deliver the website and to keep it secure and stable (Art. 6(1)(f) GDPR). The website is encrypted via TLS (“https://”).
Security log
To protect the website against attacks, we store the IP address, date and time, the requested address and the browser identifier for login attempts and blocked requests. These data are processed exclusively on our own server and are automatically deleted after 7 days. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in the security of the website).
(b) Cookies and consent management
Technically necessary cookies, e.g. for saving your cookie settings, are used under Section 25(2) TDDDG and Art. 6(1)(f) GDPR. All other cookies and external services (Google Maps, Google Analytics) are only used with your consent (Section 25(1) TDDDG, Art. 6(1)(a) GDPR). We manage consent with the tool Borlabs Cookie, which runs on our own server. You can change or withdraw your consent at any time with effect for the future via “Cookie settings” in the footer.
(c) Contact via contact form, email or phone
When you contact us, we process the data you provide (contact form: first name, last name, email address, phone number, company name and message) to answer your enquiry. The legal basis is Art. 6(1)(b) GDPR for enquiries about our products and services, otherwise Art. 6(1)(f) GDPR. If your enquiry concerns another location, we forward it to the responsible company of the PFAFF Group (Art. 6(1)(f) GDPR).
(d) Google Maps
Our contact page contains maps from Google Maps, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The maps are only loaded after you consent. Your IP address and information about your browser are then transmitted to Google. Legal basis: your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). More information: https://policies.google.com/privacy
(e) Google Analytics
If we use Google Analytics 4 (Google Ireland Limited, address as above), we do so only with your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). Google Analytics uses cookies to analyse how our website is used (e.g. pages visited, duration, device, approximate location) so that we can improve it. Full IP addresses are not stored. More information: https://policies.google.com/privacy
(f) Links to social networks
In the footer we link to our pages on LinkedIn, Facebook and Instagram. These are simple links, not embedded plugins, so no data are transferred to these networks when you visit our website. Only when you click a link are you taken to the provider’s site, where its privacy policy applies (LinkedIn Ireland Unlimited Company or Meta Platforms Ireland Limited).
Recipients of your personal data
We only pass on your data insofar as this is necessary for the purposes stated above. Recipients or
categories of recipients are:
- IT service providers that host and maintain our website, as processors under Art. 28 GDPR (log
files, contact form); - Google Ireland Limited for Google Maps and, where applicable, Google Analytics, in each case only
after your consent; - if your enquiry is forwarded, the responsible company of the PFAFF Group in Austria, the USA or China.
Transfer of your data to third countries
When Google Maps and Google Analytics are used, data may be transferred to Google LLC in the USA. The transfer is based on the European Commission’s adequacy decision on the EU-U.S. Data Privacy Framework of 10 July 2023 (Art. 45 GDPR).
If we forward your enquiry to our companies in the USA or China, the transfer is based on EU standard contractual clauses (Art. 46(2)(c) GDPR). You can request a copy using the contact details above.
Storage period
We only store your data for as long as necessary for the respective purpose or as required by statutory
retention obligations. In detail:
- server log files: deleted as soon as they are no longer required for providing and securing the
website, unless needed to investigate a security incident; - security log: automatically deleted after 7 days;
- enquiries: deleted once your enquiry has been dealt with, unless statutory retention periods apply
(up to ten years under German commercial and tax law); - cookies: for the period stated in the cookie settings; your consent applies until you withdraw it.
If the purpose no longer applies or a statutory storage period expires, the data are routinely erased or
their processing is restricted.
Your rights
You have the following rights regarding your personal data:
- the right of access (Art. 15 GDPR),
- the right to rectification (Art. 16 GDPR),
- the right to erasure (Art. 17 GDPR),
- the right to restriction of processing (Art. 18 GDPR),
- the right to data portability (Art. 20 GDPR).
Where processing is based on your consent, you can withdraw it at any time with effect for the future (Art. 7(3) GDPR). The lawfulness of processing carried out before the withdrawal remains unaffected.
Right to object (Art. 21 GDPR): Where we process your data on the basis of Art. 6(1)(f) GDPR (legitimate interests), you may object to this processing at any time on grounds relating to your particular situation. We will then no longer process your data unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.
To exercise your rights, simply contact us at datenschutz@pfaffinnovation.com.
You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is the Bavarian Data Protection Authority (Bayerisches Landesamt für Datenschutzaufsicht, BayLDA), Promenade 18, 91522 Ansbach, Germany, www.lda.bayern.de.
Obligation to provide data
You can generally use our website without providing personal data. For an enquiry via the contact form we need the information marked as mandatory; without it we cannot process your enquiry.
Automated decision-making including profiling
We do not use automated decision-making, including profiling, within the meaning of Art. 22 GDPR.
Changes to this privacy statement
We will adapt this privacy statement if the legal situation or our website and services change. The version published on this page applies.