Information on data protection
We appreciate your interest in our company. CRONIMET (Holland) b.v. takes the protection of your personal data very seriously. In the following, we inform you which personal data we collect and for which purposes it is processed.
Data protection law information for business partners and prospective business partners
Data protection law information for business partners and prospective business partners
Dear Sir/Madam,
we inform you with the following data protection information about the processing of your personal data in the context of the contractual relationship or contract initiation.
A. The party responsible for data processing
CRONIMET (Holland) B.V.
Vlasweg 7
4782 PW Moerdijk
Telefon +31 (0) 168 382038
Fax +31 (0) 168 382029
mail@cronimet.nl
B. Data categories, purposes and legal basis of processing
We process your personal data which we receive from you within the scope of the business relationships or contract initiation. This is generally contact data (name, address, telephone number and email address) and, if required as part of the business transaction, bank and payment (transaction) data (bank, account details, reference, and credit card information if applicable), information from publicly available sources, information databases and credit check agencies (e.g. Internet, trade register, credit agencies) as well as other data, which you voluntarily provide us with within the scope of processing a project or a contractual relationship within the scope of contract negotiations (e.g. business cards). We process your personal data exclusively within the scope of the legal terms, particularly under consideration of the regulations of the General Data Protection Regulation (“GDPR”) and the Federal Data Protection Act (“BDSG”). We process your personal data on the basis of the following described legal bases and for the purposes of
-
contract negotiation, contract implementation and termination of the contractual relationship (Art. 6 para. 1 sent. 1 lit. b GDPR) e.g. fulfilment of a contract (e.g. delivery or performance of a service and payment transaction), general communication with business partners e.g. answering enquiries about products and services, contract negotiations etc.;
-
based on consent given (Art. 6 para. 1 sent. 1 lit. a GDPR) e.g. despatch of newsletters or information correspondence, participation in marketing campaigns or surveys etc.;
-
based on legal stipulations (Art. 6 para. 1 sent. 1 lit. c GDPR), e.g. to fulfil trade law or tax law retention obligations, to fulfil reporting or information obligations towards authorities, etc.;
-
based on a legitimate interest (Art. 6 para. 1 sent. 1 lit. f GDPR); e.g. measures for IT security or measures to ensure proper business operations, to protect the company code, for the protection of property and the investigation of criminal offences, to enforce legal claims or defend legal disputes, to ensure compliance requirements, etc.
As we also use the contact data of the person you have nominated to us as a contact partner, we ask you to pass on this information to the affected employees within your company.
C. Recipients or categories of recipients of personal data
We transmit your personal data to authorities/public bodies if required due to primary legal regulations. If necessary, we transmit your personal data to companies within our company group if required to fulfil the purposes stated above in section B. We employ external service providers for various business transactions as assignment processors in terms of Art. 28 GDPR. We have concluded order data processing contracts with these service providers to ensure that your personal data is protected. The above described recipients may also be located in countries outside of the European Economic Area (“third countries”). Third countries may not have the same level of data protection as in the European Economic Area. If data transmission takes place in a third country, we ensure that this transmission only takes place according to the terms of the legal regulations (chapter V GDPR).
D. Duration of storage
Personal data is generally deleted after expiry of the legal (primarily trade and tax law) retention periods. If personal data is not affected by legal retention obligations, it will be deleted when it is no longer required for the purposes described in section B. above. A different retention period may apply if you consented when the data was collected.
E. Rights of data subjects
You have the right to receive information about your personal data we have saved, the right to arrange for incorrectly saved personal data to be corrected or – if relevant – to change or revoke your consent to data processing at any time, including without providing a reason with future effect, the right to restrict the processing of your personal data with future effect, to revoke the processing of your personal data with future effect or to demand the deletion of your personal data. Under the conditions set out in Art. 20 GDPR, you have the right to receive the personal data concerning you, which has been saved, in a structured, commonly used and machine-readable format and the right to transmit that data to another responsible party without hindrance on our part.
In order to exercise your rights, you can contact the person responsible mentioned in section A. In order to avoid possible cases of misuse, we may require that inquiries be accompanied by a handwritten signature or that the inquirer otherwise legitimizes himself/herself.
Furthermore, without prejudice to any other administrative or judicial remedy, every data subject shall have the right to lodge a complaint with a supervisory authority, in particular in the Member State of his or her habitual residence, place of work or place of the alleged infringement, if the data subject considers that the processing of personal data relating to him or her infringes the GDPR.
Data protection law information for video conferences
Data protection law information for video conferences
Dear Sir/Madam,
we inform you with the following data protection information about the processing of your personal data in the context of the participation in video conferences.
A. The party responsible for data processing
CRONIMET (Holland) B.V.
Vlasweg 7
4782 PW Moerdijk
Telefon +31 (0) 168 382038
Fax +31 (0) 168 382029
mail@cronimet.nl
B. Purposes and legal basis of processing, data categories
We process your personal data that we receive from you in the course of using the video conferencing systems (in particular “Skype for Business”).
The following personal data are subject to processing:
-
User details: First name, last name, phone (optional), email address, password (if “single sign-on” is not used), profile picture (optional), department (optional).
-
Meeting metadata: Topic, description (optional), attendee IP addresses, device/hardware information.
-
If recording (optional): MP4 file of all video, audio and presentation recordings.
-
When dialling in with the telephone: information about the incoming and outgoing phone number, country name, start and end time. If necessary, further connection data such as the IP address of the device can be stored.
-
Text, audio and video data: You may have the opportunity to use the chat, question or survey functions in an “online meeting”. To this extent, the text entries you make are processed in order to display them in the “online meeting” and, if necessary, to log them. To enable the display of video and the playback of audio, the data from the microphone of your terminal device and from any video camera of the terminal device will be processed accordingly for the duration of the meeting. You can turn off or mute the camera or microphone yourself at any time via the “Skype” applications.
To participate in an “online meeting” or to enter the “meeting room”, you must at least provide information about your name.
Scope of processing:
-
We use in particular “Skype for Business” to conduct “online meetings”. If we want to record “online meetings”, we will transparently communicate this to you in advance and – if necessary – ask for consent (Art. 6 para. 1 sent. 1 lit. a GDPR). The fact of the recording will also be displayed to you in the “Skype for Business” app.
-
If it is necessary for the purposes of logging the results of an online meeting, we will log the chat content. However, this will generally not be the case.
In detail, your personal data will be processed for the following purposes and on the basis of the following legal grounds:
-
Art. 6 para. 1 sent. 1 lit. f GDPR: Our legitimate interest in these cases is the effective implementation of “online meetings”.
-
Art. 6 para. 1 sent. 1 lit. b GDPR: Insofar as the “online meetings” take place in the context of contract initiation, contract execution and termination of contractual relationships, e.g. fulfilment of a contract (such as delivery or provision of a service and payment processing) or general communication with business partners (such as answering inquiries about products and services, contract negotiations, etc.).
-
Art. 6 para. 1 sent. 1 lit. a GDPR: Giving consent when recording the video conference.
C. Recipients or categories of recipients of the personal data
The names of all participants are transferred to all participants by the software; if necessary, the software offers the separate option of entering the participant data. If the data subject has activated their camera and microphone, data is transferred to all other participants.
Personal data processed in connection with participation in “online meetings” will generally not be disclosed to third parties unless it is specifically intended for disclosure. Please note that, as in the case of face-to-face meetings, content from “online meetings” is often used precisely to communicate information with customers, interested parties or third parties and is therefore intended to be passed on.
In addition, your personal data will be transferred to the processors commissioned to carry out the video conferences and, if applicable, to their subcontractors. Insofar as our service providers process your personal data on our behalf, we ensure within the scope of processing pursuant to Art. 28 GDPR that they comply with the provisions of the data protection laws in the same manner. Please also note the data protection information of the respective providers. The respective service provider is responsible for the content of third-party services, whereby we check the services for compliance with the legal requirements within the scope of reasonableness.
We value the fact that your personal data is processed within the EU/EEA. However, we may use service providers who process data outside the EU/EEA. In these cases, we ensure that an adequate level of data protection comparable to the standards within the EU is established at the recipient before transferring your personal data. This can be achieved, for example, via EU standard contract clauses, Binding Corporate Rules, or special agreements to whose regulations the company can submit.
D. Duration of the storage of personal data
Your personal data will be processed for the duration of the fulfilment of the purposes set out in section B. above; the data processing is necessary for the duration of the video conference, for example. Personal data is generally deleted after expiry of the legal (primarily trade and tax law) retention periods. If personal data is not affected by legal retention obligations, it will be deleted when it is no longer required for the purposes described in section B. above. A different retention period may apply if you consented when the data was collected.
E. Rights of data subjects
You have the right to receive information about your personal data we have saved, the right to arrange for incorrectly saved personal data to be corrected or – if relevant – to change or revoke your consent to data processing at any time, including without providing a reason with future effect, the right to restrict the processing of your personal data with future effect, to revoke the processing of your personal data with future effect or to demand the deletion of your personal data. Under the conditions set out in Art. 20 GDPR, you have the right to receive the personal data concerning you, which has been saved, in a structured, commonly used and machine-readable format and the right to transmit that data to another responsible party without hindrance on our part.
In order to exercise your rights, you can contact the person responsible mentioned in section A. In order to avoid possible cases of misuse, we may require that inquiries be accompanied by a handwritten signature or that the inquirer otherwise legitimizes himself/herself.
Furthermore, without prejudice to any other administrative or judicial remedy, every data subject shall have the right to lodge a complaint with a supervisory authority, in particular in the Member State of his or her habitual residence, place of work or place of the alleged infringement, if the data subject considers that the processing of personal data relating to him or her infringes the GDPR.
F. Changes to this privacy policy
Constant technological development, changes to our services or the legal situation and other reasons may require adjustments to our data protection notice. We therefore reserve the right to change this privacy policy at any time with effect for the future. The current version is available on our website. Please visit our website regularly and inform yourself about the applicable data protection provisions.
Data protection law information for the social media channel
Data protection law information for the social media channel
Dear Sir/Madam,
we inform you with the following data protection information about the processing of your personal data in the context of our social media channel. If you have any further questions regarding the handling of your personal data, please do not hesitate to contact us.
A. The party responsible for data processing
CRONIMET (Holland) B.V.
Vlasweg 7
4782 PW Moerdijk
Telefon +31 (0) 168 382038
Fax +31 (0) 168 382029
mail@cronimet.nl
B. Social media channel
We operate the following social media website to draw attention to ourselves:
The operator of the following social media channel shares responsibility with us:
Where our influence on data processing ends, the limit of our responsibility is reached. At these points, it is not possible for us to influence the data processing by the operator of the social media channel. We are therefore unable to provide information on what personal data is processed by the operator. For further information on the processing of the collected personal data and the possibilities to object, we refer to the corresponding data protection declaration of the channel operator.
C. Data processing by us
Submitted data such as comments, videos, pictures, likes, public messages that you leave on our social media channel may be published by the social media platform. These will only be used or processed by us for the following purposes.
Personal data transmitted to us via social media by private message, such as documents or communication data, will not be published by us, but it cannot be ruled out that the social media operator will process or publish this data.
We would like to point out that we do not wish to receive applications via messengers as these cannot guarantee the protection of your personal data to the extent that is required and desired on our part.
We also reserve the right to delete content should this be necessary. We may share your content on our site if this is a function of the social media platform and permissible and communicate with you via the social media platform.
The legal basis for our data processing within the framework of the social media channel is Art. 6 para. 1 sent. 1 lit. f GDPR. The data processing is carried out in the interest of our public relations work and timely communication.
The social media provider is partly located in the USA and other countries outside the EU and the EEA. The data may therefore also be processed by the provider of the respective platform in countries outside the EU and EEA. Please note that companies in these countries may be subject to data protection laws that do not offer the same level of protection for your personal data as is the case in the member states of the EU.
We would also like to point out that we have no influence on the scope, type and purpose of the data processing by the provider of the social media platform. You can find more information about the processing of your data by the social media provider in the privacy policy of the platform provider.
D. Data processing by the social media channel
On our website, you will find the link to the company website on the social media platform. You can recognise the link to the website of the social media service by the respective company logo, for example. If you follow this link, you will reach the company presence on the social media platform. When you click on a link to such a platform, a connection to the platform's servers is established. This transmits to the servers of the platform that you have visited our website.
In addition, further data is transmitted to the provider of the platform. This may include the following data:
-
address of the website on which the activated link is located
-
date and time the website was accessed or the link was activated
-
information on the browser and operating system used
-
IP address.
We expressly draw your attention to the fact that the social media provider stores the data (e.g. IP address, preferences and personal interests, behavior on the platform, any personal information stored on the platform, etc.) of users and uses it for business purposes.
We would like to point out that the respective operator of the social media platform uses web tracking methods. We would also like to point out that web tracking could also take place regardless of whether you are logged in and/or registered with the social media platform. It is not possible for us to influence the web tracking methods of the platforms. If, for example, you would like to switch off the web tracking, you must arrange this on the respective website of the operator.
If you are a member of the social media channel and are logged into your user account, the social media provider can associate your visit to our page with your user account. If you would like to prevent the provider from linking data about your visit to our company presence with your membership data stored with the platform, you must
-
log out of the social media platform before each visit to our company presence,
-
delete the cookies stored on your device and
-
close and restart your browser.
In this way, according to the social media provider, all information through which you can be identified by social media provider is deleted.
It cannot be ruled out that the provider of the social media platform uses your data to create a profile about you, for example, and thus generates tailored advertising for you.
For more information on data processing by the provider of the social media platform and further objection options, you can view the privacy statements of the operator here:
Where we are jointly responsible for processing with the operator, you will find the main content of the joint processing of your data here:
E. LinkedIn
We operate our LinkedIn company page to inform you and to communicate with you as a user, interested party or potential employee/applicant.
The provider of the platform is LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland.
In accordance with LinkedIn's terms of use, which each user must agree to when creating a LinkedIn profile, we may identify subscribers to our site and view their profiles or other shared information. For example, your LinkedIn name and profile picture are visible to us (and other LinkedIn users) when you visit our company page or comment on our posts. We therefore only collect personal data that has become an obvious part of our LinkedIn company page through your participation.
LinkedIn uses small text files that are stored on the various end devices of the users (cookies) to store and further process this information. According to LinkedIn, the cookies used by LinkedIn are for authentication, security, settings, personalised advertising features and services, and analysis and research. You can view details of the cookies used by LinkedIn here: https://de.linkedin.com/legal/cookie-policy
The operation of the LinkedIn company page, including the processing of users' personal data, is legal based on Art. 6 para. 1 sent. 1 lit. f GDPR in order to safeguard our legitimate interests in providing information and interaction opportunities via LinkedIn for and with our users and visitors. For the LinkedIn retargeting cookie and applications via our LinkedIn company page, your consent serves as the legal basis, Art. 6 para. 1 sent. 1 lit. a GDPR. Further legal bases for data processing may arise in individual cases from Art. 6 para. 1 sent. 1 lit. b GDPR. We delete personal data as soon as the purpose of the data processing has been achieved and there are no further legal grounds against the deletion of the data. In the case of data transfers outside the EU or EEA, LinkedIn states that it guarantees an adequate standard of protection as defined in Art. 44 etc seq. GDPR. This is implemented in particular by concluding standard contractual clauses.
Further information on data processing can be found in LinkedIn's privacy policy here: https://de.linkedin.com/legal/privacy-policy
F. Rights of data subjects
You have the right to receive information about your personal data we have saved, the right to arrange for incorrectly saved personal data to be corrected or – if relevant – to change or revoke your consent to data processing at any time, including without providing a reason with future effect, the right to restrict the processing of your personal data with future effect, to revoke the processing of your personal data with future effect or to demand the deletion of your personal data. Under the conditions set out in Art. 20 GDPR, you have the right to receive the personal data concerning you, which has been saved, in a structured, commonly used and machine-readable format and the right to transmit that data to another responsible party without hindrance on our part.
In order to exercise your rights, you can contact the person responsible mentioned in section A. In order to avoid possible cases of misuse, we may require that inquiries be accompanied by a handwritten signature or that the inquirer otherwise legitimizes himself/herself.
Furthermore, without prejudice to any other administrative or judicial remedy, every data subject shall have the right to lodge a complaint with a supervisory authority, in particular in the Member State of his or her habitual residence, place of work or place of the alleged infringement, if the data subject considers that the processing of personal data relating to him or her infringes the GDPR.
G. Changes to this privacy policy
Constant technological development, changes to our services or the legal situation and other reasons may require adjustments to our data protection notice. We therefore reserve the right to change this privacy policy at any time with effect for the future. The current version is available on our website. Please visit our website regularly and inform yourself about the applicable data protection provisions.
