Privacy Statement

I. General information

1. Name and address of the data controller

The data controller within the meaning of the General Data Protection Regulation (GDPR) and other national data protection laws of member states as well as other data protection provisions is:

KAUP GmbH & Co. KG | Gesellschaft für Maschinenbau
Braunstraße 17
63739 Aschaffenburg
Germany
Tel.: +49 6021 865 0
E-mail: zentrale@kaup.de
Website: www.kaup.de

2. Data protection officer 

Our external data protection officer can be reached at the following address:

EDV Sachverständigen- und Datenschutzbüro Michael J. Schüssler
Kolpingstraße 3
D-63739 Aschaffenburg
Tel.: +49 6021 439 1845
E-Mail: info@svb-ms.de
Website: www.datenschutz4you-aschaffenburg.de

3. Competent data protection authority

Landesamt für Datenschutzaufsicht
Promenade 27
D-91522 Ansbach
Tel.: +49 981 53 1300
E-Mail: poststelle@lda.bayern.de
Website: www.lda.bayern.de

II. General information on data processing

1. Scope of the processing of personal data

KAUP GmbH & Co. KG (KAUP) processes personal data of our users only to the extent it is needed to provide a functioning web site and for our content and services. The processing of personal data of our users is only carried out on a regular basis with the permission of the user. An exception exists in cases where obtaining permission in advance is not possible for practical reasons and the processing of the data is permitted by legal regulations.

2. Legal basis for the processing of personal data

Where we obtain the permission of the data subject for processing personal data, Art. 6 Para. 1 lit. a GDPR serves as the legal basis. When processing personal data necessary for the fulfilment of a contract for which the data subject is a party to the contract, Art. 6 Para. 1 lit. b GDPR serves as the legal basis. This also applies to processing necessary for carrying out pre-contract measures. If the processing is necessary to protect a legitimate interest of our organization or of a third party, and the first named interest does not outweigh the interests, basic rights and basic freedoms of the data subject, Art. 6 Para. 1 lit. f GDPR serves as the legal basis for processing.

3. Deleting data and retention periods

The personal data of the data subject will be deleted or locked as soon as it is no longer needed for the purpose it was stored for. Retention of data can also occur if this is provided for by European or national legislators with respect to EU regulations, laws or other provisions applicable to the data subject. Locking or deleting the data also occurs when a retention duration laid down by the specified standards expires, unless a need for continued retention of the data exists to complete or fulfil a contract.

III. Providing the web site

1. Description and scope of the data processing

Each time one of our Internet pages is accessed, our system records data and information automatically about the computer system of the accessing computer, and saves this for a maximum of two days. The following data are collected with the pixel technology of our tracking system "etracker":

  1. (1) information on the type of browser and its version
  2. (2) the operating system of the user
  3. (3) device type of the user - desktop, phone, tablet
  4. (4) IP address of the user
  5. (5) entry/source of the user - direct entry, search machine, social media, other web sites
  6. (6) data and time of access

2. Legal basis for data processing

The legal basis for the temporary retention of the data is Art. 6 Para. 1 lit. f GDPR.

3. Purpose of data processing

Temporary retention of the IP address by the system is necessary to enable the supply of the web site to the user's computer. To do so, the IP address of the user must be retained for the duration of the session. This purpose provides our justified interest in processing the data in accordance with Art. 6 Para. 1 lit. f GDPR.

4. Retention duration

The data are deleted as soon as they are no longer required to fulfil the purpose they were collected for. In the case of data collection to provide the web site, this is the situation when the respective session is ended.

5. SSL encryption

To protect the security of your data during transmission, we use an encryption process corresponding to the latest technology (e.g. SSL) via HTTPS.

6. Possibility to revoke via 1st party cookie and tracking opt-in

The data created with "etracker" are processed and stored solely in Germany by "etracker" on behalf of the supplier of this web site and are thus subject to the strict German and European data protection laws and standards. "Etracker" has been independently checked in this respect, certified and awarded with the ePrivacyseal data protection seal of approval.

Data processing is carried out on the legal basis of Art. 6 Para.1 lit f (justified interest) of the GDPR. The justified interest of KAUP exists in the optimization of our online offering and our web presence. As the private realm of our visitors is particularly important, the IP address is anonymized at the earliest possible point by "etracker" and login or device identifiers are converted by "etracker" to a unique key that cannot be used to identify an individual. No other use, combination with other data or transfer to third parties is carried out by "etracker".

You can revoke permission for the data processing described above at any time. Revoking permission will have no negative consequences for you.

For further information on data protection with "etracker", see here.

7. Use of cookies

a) Description and scope of the data processing

Our web site uses cookies for analysis purposes. Cookies are text files that are stored in the Internet browser or by the Internet browser on the user's computer system. When a user accesses our web site, a cookie can be stored in the operating system of the user. This cookie contains a characteristic sequence of characters (cookie ID) that allows a unique identification of the browser when the web site is accessed again.

We use cookies to make our web site more user friendly and to allow the analysis of the surfing behaviour of the user. Some elements of our Internet pages require that the browser also needs to be identified after a change of page. In the cookies, the following data are stored and transmitted:

  1. (1) language settings
  2. (2) log-in information
  3. (3) search terms entered
  4. (4) frequency pages are accessed

The data recorded in this way are pseudonymised using technical measures. Applying the data to the accessing user is thus no longer possible. The data are not stored together with other personal data of the user.

When accessing our web site, the user is informed with a banner about the use of cookies for analytical purposes and referred to this data protection statement. The person affected can prevent cookies being stored by our Internet site at any time by making an appropriate setting in their Internet browser and thus permanently rejecting the storage of cookies. Furthermore, cookies already stored can be deleted at any time using the Internet browser or other software. This is possible in all current Internet browsers. If the affected person deactivates cookies (see Point III. 6.) in the Internet browser used, under some circumstances not all functions of our Internet site will work to their full extent.

b) Legal basis for data processing

The legal basis for the processing of personal data using technically required cookies is Art. 6 Para. 1 lit. f GDPR. The legal basis for the processing of personal data when using cookies for analysis purposes when appropriate permission has been granted is Art. 6 Para. 1 lit. a GDPR.

c) Purpose of data processing

The purpose of the use of technically necessary cookies is to simplify the use of the web site for the user. The user data recorded by the technically necessary cookies are not used to create user profiles. The use of analysis cookies has the purpose of improving the quality of our web site and its content. With the analysis cookies, we find out how the web site is used and can thus continuously optimise our offering. We find out, for example, which routes are used through the web site, where the users come from and what they are searching for on kaup.de.This purpose provides our justified interest in processing personal data in accordance with Art. 6 Para. 1 lit. f GDPR.

d) Duration of the retention, revocation and removal possibilities

The cookies are stored on the computer and transmitted from there to our site. As a result, you also have full control over the use of cookies. By changing the settings in your Internet browser, you can deactivate or limit the transmission of cookies. Cookies already stored can be deleted at any time. This can also be automated.

8. Google Fonts

a) Description and scope of the data processing

On our website we use Google Fonts to display external fonts. This is a service of Google LLC, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter referred to as "Google".

b) Legal basis for data processing

The legal basis is Art. 6 para. 1 lit. f) DSGVO. Our legitimate interest lies in the optimisation and economic operation of our Internet presence.

c) Purpose of data processing

In order to enable the display of certain fonts on our website, to improve loading times and to ensure uniform display across all devices, a connection to the Google server in the USA is established when our website is called up. Through the connection to Google established when calling up our website, Google can determine from which website your enquiry was sent and to which IP address the font representation is to be transmitted.

If your browser does not support web fonts, a standard font will be used by your computer.

d) Duration of the retention

Google offers further information at https://adssettings.google.com/authenticated and https://policies.google.com/privacy?hl=en, in particular on the possibilities of preventing the use of data.

9. Google Maps

a) Description and scope of the data processing

In our internet presence we use the map service Google Maps via an API. This service is provided by Google LLC, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter referred to as "Google".

b) Legal basis and purpose for data processing

The legal basis is Art. 6 para. 1 lit. f) DSGVO. Our legitimate interest lies in the ease with which you can find the places - company locations - indicated by us on the website. In order to use the functions of Google Maps, it is necessary to store your IP address. This information is usually transferred to a Google server in the USA and stored there. The provider of this site has no influence on this data transfer.

Google offers further information at https://policies.google.com/privacy?hl=en.

10. Registration log-in area

1. Description and scope of the data processing

On our Internet site, we offer users the possibility to register by entering personal data. These data are entered in an input form, sent to us and stored. There is no transfer of the data to third parties. The following data are collected in the course of the registration process:

  1. (1) Salutation (Female, Male)
  2. (2) First and last name
  3. (3) Company name
  4. (4) Company location
  5. (5) E-mail address 
  6. (6) Password - encrypted


At the time of registration, the following data are stored:

  1. (1) Date and time of registration

In the course of the registration process, the permission of the user to process the data is obtained.

2. Legal basis for data processing

The legal basis for the processing of the data when permission has been granted by the user is Art. 6 Para. 1 lit. a GDPR.

3. Purpose of data processing

Registration of the user is necessary to have certain content and services ready on our web site. Registered users can access the following additional content:

  1. (1) Prices: current prices for our attachments can be viewed on the respective product detail pages.
  2. (2) Price list: the current price list for KAUP is available to download.
  3. (3) Order documentation: all previous orders including the associated documentation can be viewed and downloaded.
  4. (4) eQuotation tool: the independent production of a binding offer is possible.

Our prices can only be viewed by authorised persons. Therefore, registration is necessary in order to be able to check this authorisation. The order documentation and the eQuotation tool represent added value for the registered user. In order to prevent misuse of the information provided in this way and to allow exact allocation, registration is necessary.

4. Retention duration

The data are deleted as soon as they are no longer required to fulfil the purpose they were collected for.

5. Revocation and removal possibilities

As the user, you have the possibility to cancel the registration at any time. You can change the data stored about you at any time yourself. To do so, log into your account and the data stored can be edited in the "Edit user data" area. An exception to this is the e-mail address. This cannot be changed independently, as this is fixed as the user name. An account can be deleted via the web site administration for info at: webregistration@kaup.de.

11. Contact forms and e-mail contact

1. Description and scope of the data processing

There are various contact forms on our Internet site (general contact form, product enquiry, warranty claim form) that can be used for electronic contact. If a user takes advantage of these possibilities, the data entered in the input form are transmitted to us and stored. These data are:

1.1 General contact form

  1. (1) Salutation (Female, Male) 
  2. (2) First and last name 
  3. (3) Company name 
  4. (4) Street and number 
  5. (5) Postal code 
  6. (6) E-mail address 
  7. (7) Data protection read and accepted 

1.2 Product enquiry

  1. (1) First and last name 
  2. (2) Company name
  3. (3) E-mail address 
  4. (4) Postal code 
  5. (5) Data protection read and accepted 
  6. (6) Country 

1.3 Warranty claim form

1.3.1 Applicant / Dealer

  1. (1) Contact person 
  2. (2) Company name 
  3. (3) Postal code, place
  4. (4) E-mail address 
  5. (5) Telephone number

1.3.2 Customer / User

  1. (1) Contact person 
  2. (2) Company name 
  3. (3) Postal code, place 
  4. (4) E-mail address 
  5. (5) Telephone number 

1.3.3 Fork lift truck/ Vehicle

  1. (1) Brand - Model 
  2. (2) Working hours

1.3.4 KAUP attachment

  1. (1) Model 
  2. (2) Serial number 
  3. (3) Date of repair 

1.3.5 Costs incurred / services

  1. (1) Description of claim and repair 
  2. (2) Data protection read and accepted 

At the time of the message being sent, the following data are stored:

  1. (1) the IP address of the computer being used
  2. (2) information on the type of browser and its version
  3. (3) date and time the form is used

For processing the data, in the course of the sending process your permission is obtained and reference made to this data protection statement.

Alternatively, contact is possible with the e-mail address provided. In this case, the personal data of the user transmitted with the e-mail are stored.

There is no transfer of the data to third parties in this respect. The data are exclusively used for processing the conversation.

2. Legal basis for data processing

The legal basis for the processing of the data when permission has been granted by the user is Art. 6 Para. 1 lit. a GDPR.

The legal basis for processing the data transmitted in the course of sending an e-mail is Art. 6 Para. 1 lit. f GDPR. If the intention of the e-mail contact is to conclude a contract, an additional legal basis for the processing is Art. 6 Para. 1 lit. b GDPR.

3. Purpose of data processing

Processing of personal data from the input form is used solely to process the approach. In the case of an approach by e-mail, the required justified interest in the processing of the data also exists.

The other personal data processed during the sending procedure serve to prevent misuse of the contact form and to ensure the security of our information systems.

4. Retention duration

The data are deleted as soon as they are no longer required to fulfil the purpose they were collected for. For personal data from the input mask on the contact form and those sent by e-mail, this is the case if the respective conversation with the user has been concluded. The conversation is ended if it can be assumed from the circumstances that the affected content has been completely clarified.

The personal data additionally collected during the sending process are deleted after a period of seven days at the latest.

5. Revocation and removal possibilities

The user has the possibility at any time to retract their consent for processing their personal data. If the user makes contact with us by e-mail, they can object to the storage of their personal data. In such a case, the conversation can no longer be continued.

All personal data stored in the course of the approach will be deleted in this case.

6. Rights of the affected person

If your personal data are processed, you are the data subject within the meaning of the DSVGO and you have the following rights against the data controller:

1. Right of access to information

You can demand a confirmation from the data controller about whether personal data of yours is processed by us. If there is such processing, you can demand the following information from the data controller:

  1. (1) the purposes for which the personal data are processed;
  2. (2) the categories of personal data that are processed;
  3. (3) the recipients and categories of recipients who have been given access to your personal data or who still have access;
  4. (4) the existence of a right of rectification or deletion of your personal data, a right to restrict processing by the data controller or the right to object to this processing;
  5. (5) the existence of a right to complain to the regulatory authority;
  6. (6) all available information about the source of the data if the personal data was not collected from the data subject.

You have the right to demand information about whether your personal data has been transferred to a third country or to an international organisation. In this connection, you can demand to be informed about the appropriate guarantees in accordance with Art. 46 GDPR in connection with the transfer.

2. Right of rectification

You have the right to rectification and/or updating by the data controller where the processed personal data of yours is incorrect or incomplete. The data controller must make the correction without delay.

3. Right to limit the processing

Under the following conditions, you can demand that the processing of your personal data is limited:

  1. (1) if you dispute the accuracy of your personal data for a period of time that allows the data controller to check the accuracy of your personal data;
  2. (2) the processing is unlawful and you reject the deletion of the personal data and instead demand that the use of the personal data is limited;
  3. (3) the data controller no longer requires the personal data for the purposes of processing, but you need them for enforcement, exercise or defence of legal claims, or
  4. (4) if you have made an objection against the processing in accordance with Art. 21 Para. 1 GDPR and it is not yet certain whether the legitimate interests of the data controller outweigh your reasons.

If the processing of your personal data has been limited, these data may only, with the exception of their storage, be processed with your permission or for the enforcement, exercise or defence of legal claims or the protection of the rights of other natural or legal persons or for reasons of important public interests of the European Union or a member state.

If the limitation on processing in accordance with the above-mentioned conditions is reduced, you will be informed by the data controller before the limitation is removed.

4. Right of deletion

a) Duty to delete

You can demand from the data controller that your personal data is deleted without delay, and the data controller is required to delete these data without delay as long as one of the following reasons applies:

  1. (1) your personal data are no longer needed for the purposes they were collected or processed in other ways.
  2. (2) you withdraw your agreement on which the processing in accordance with Art. 6 Para. 1 lit. a or Art. 9 Para. 2 lit. a GDPR is based, and there is no other legal basis for the processing.
  3. (3) you make an objection in accordance with Art. 21 Para. 1 GDPR against the processing and there are no overriding justifying reasons, or you make an objection in accordance with Art. 21 Para. 2 GDPR against the processing.
  4. (4) your personal data were processed unlawfully.
  5. (5) the deletion of your personal data is necessary to fulfil a legal duty in accordance with EU law or the law of a member state that the data controller is subject to.
  6. (6) your personal data were collected in relation to services of the information society offered in accordance with Art. 8 Para. 1 GDPR.

b) Information to third parties

If the data controller has made your personal data public and they are obliged to delete them in accordance with Art. 17 Para. 1 GDPR, they will take appropriate measures considering available technologies and the cost of implementation, including of a technical nature, to inform the data processor that you as the data subject have demanded the deletion of all links to these personal data or of copies or replications of these personal data.

c) Exceptions

The right of deletion does not exist if the processing is necessary

  1. (1) to fulfil a legal duty that demands the processing in accordance with the law of the EU or the member states that the data controller is subject to, or to fulfil a task that is in the public interest or is carried out as a result of public authority delegated to the data controller; or
  2. (2) for the enforcement, exercise or defence of legal claims.

5. Right to data portability

You have the right to be given the personal data you have made available to the data controller in a structured, current and machine-readable format. Furthermore, you have the right to transfer these data to another data controller without hindrance from the data controller to whom the data were made available, as long as

  1. (1) the processing concerns a consent in accordance with Art. 6 Para. 1 lit. a GDPR or Art. 9 Para. 2 lit. a GDPR or a contract in accordance with Art. 6 Para. 1 lit. b GDPR, and
  2. (2) the processing occurs with the aid of an automated procedure.

When exercising this right, you also have the right to effect the direct transfer of your personal data from one data controller to another data controller as long as this is technically feasible. Freedoms and rights of other persons may not be affected as a result.

The right to data portability does not apply to the processing of personal data necessary for executing a task that is of public interest or in the application of public authority delegated to the data controller.

6. The right to object

You have the right for reasons arising out of your particular situation at any time to make an objection against the processing of your personal data carried out on the basis of Art. 6 Para. 1 lit. f GDPR.

The data controller no longer processes your personal data unless they can show compelling reasons meriting protection that outweigh your interests, rights and freedoms, or the processing serves to enforce, exercise or defend legal claims.

If your personal data are processed for direct marketing, you have the right at any time to object to the processing of your personal data for the purposes of this type of advertising.

If you object to the processing for the purposes of direct marketing, your personal data will no longer be processed for this purpose.

You have the possibility in connection with the use of services in the information society - notwithstanding Directive 2002/58/EC - to exercise your right to object using an automated procedure for which technical specifications are used.

7. Right to withdraw the data protection declaration of consent

You have the right to withdraw your data protection declaration of consent at any time. The withdrawal of the consent does not affect the lawfulness of the processing that occurs up to the withdrawal that was based on the consent.

8. Right of complaint to a regulatory authority

Regardless of any other legal remedies relating to administrative or judicial law, you have the right of complaint to a regulatory authority, in particular in the member state where you are located, where your workplace is or in the location of the alleged offence, if you are of the opinion that the processing of your personal data contravenes the GDPR.

The regulatory authority where the complaint is made will inform the complainant of the progress and the results of the complaint including the possibility of judicial remedies in accordance with Art. 78 GDPR.

IX. Restriction

KAUP GmbH & Co. KG reserves the right to change these data protection guidelines under consideration of the data protection requirements at any time.

Further legal information: