We collect and process data to ensure full functionality of our website. The processing of data includes their disclosure due to transmission.For the transmission of data to the U.S., the European Commission has established an adequacy determination, the EU-U.S. Privacy Shield Framework. The European Commission confirmed that the Privacy Shield Framework is a valid legal mechanism to comply with EU requirements when transferring personal data from the EU to the United States. To the extent that we transmit data to the U.S., we have marked the participation of our service providers in the EU-U.S. Privacy Shield Program. In the following, please find a list of specifications regarding the types of data, processing purposes, legal basis, recipients and transmissions into third countries:
We register when a data subject calls up our websites. We process the following data: name of the accessed file, the date and time of access to the Internet site, the data volume transmitted, the browser types and versions used, the operating system used by the accessing system, the website from which an accessing system reaches our website (referrer), the Internet protocol address (IP address) and the Internet service provider of the accessing system. We process the data in accordance with our legitimate interest pursuant to Art. 6 (1) (f) GDPR, to ensure security of our online services. The log files will be deleted after seven days, unless they are required to verify or prove an alleged illegal use of the website services, which has become known during the data safekeeping period.
In the context of hosting this website, we store all data processed in connection with its operation. This is necessary to operate this website. All data is processed based on our legitimate interests in accordance with Art. 6 (1) (f) GDPR. To provide our online services, we use the services of web hosting providers, to whom we transfer the aforementioned data.
If a data subject contacts us, his or her data (name and contact details, if specified) and message will be processed solely for the purposes of dealing with the request. All these data, which are required to handle your request, are processed in accordance with Art. 6 (1) (b) GDPR or Art. 6 (1) (f) GDPR.Certification under: https://www.privacyshield.gov/participant?id=a2zt0000000KzLyAAK&status=Active For additional information regarding data privacy please visit: https://www.salesforce.com/company/privacy/
If a data subject contacts us via the contact form or per e-mail, his or her name, first name, e-mail address, telephone number (if provided) and the message will be stored to process and execute the request. In addition, we process data to mail brochures and/or application forms ordered by the data subject. These data are processed based on your consent in accordance with Art. 6 (1) (a) GDPR or to fulfil our pre-contractual or contractual duties pursuant to Art. 6 (1) (b) GDPR.If a data subject submits a legally binding offer (e.g. via our online application registration or a printed application) to enter into a contract for a SOLIT Precious Metal Depot, a SOLIT SECURE STORAGE account or any other service offered by us, TRESTA Treuhandgesellschaft mbH, An der Werft 5, 21680 Stade will collect, process and use all data of this data subject which is required to execute the contract and fulfil the legal and contractual obligation of the SOLIT Management GmbH. Additional information is available at https://www.tresta-stade.de. Data, which are transmitted to the service provider Salesforce.com, inc. in connection with the execution of the contract and application, will be saved on the Salesforce servers in Frankfurt am Main, Germany. For back-up purposes, a mirror backup of all data is regularly transmitted to Paris, France. Certification under: https://www.privacyshield.gov/participant?id=a2zt0000000KzLyAAK&status=Active For additional information regarding data privacy please visit: https://www.salesforce.com/company/privacy/
We use external dynamic content to optimise the appearance and content of our website. When a data subject visits our website, a request is automatically sent to the server of the relevant content provider via API, transferring certain log data (e.g. the data user’s IP address). The dynamic content is then transferred to our website and displayed there. We use external content in connection with the following functionalities:aa) Integration of YouTube videos We have integrated videos from the YouTube portal operated by YouTube LLC, 901 Cherry Ave. San Bruno, CA 94066, USA (“YouTube”) into our website. When a data user plays back these videos, log data is transferred to YouTube’s servers in the USA. This data is processed on the basis of our overriding legitimate interest in optimising the marketing of our services in accordance with Art. 6(1) (f) GDPR. YouTube is certified under: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active Additional information are available at: https://policies.google.com/privacy?hl=de&gl=de
We store personal data only for as long as is necessary for the purposes for which it is being processed or until a data subject withdraws his or her consent. Insofar as statutory retention requirements need to be complied with, the retention period for certain data can be up to 10 years, regardless of the purposes for which it is being processed.
At any time, data subjects are entitled to request free information about all the personal data we stored about them.
If a data subject no longer agrees to his or her personal data being stored or if his or her personal data is no longer correct, we will, upon receipt of a corresponding instruction from the data subject, have his or her data erased or blocked or make the necessary corrections (to the extent possible under applicable law). The same applies if a data subject requests us to restrict the processing of his or her data in the future.
On request we will provide data subjects their data in a commonly-used, structured and machine-readable format, so that they can transfer it to another controller if they wish.
Data users have the right to lodge a complaint with the responsible supervisory authority: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html
Data subjects are entitled to withdraw their consent at any time with future effect. This will not affect the legality of the processing prior to their withdrawal.
The above rights do not apply to data where we are not able to identify the data subject, for example if the data has been anonymised for analysis purposes. It may be possible for data subjects to exercise their rights to information/access, erasure, blocking, rectification, or transfer to another organisation in relation to these data, if they provide us with additional information that enables us to identify them.
If data subjects have any questions about the processing of their personal data, or if they wish to exercise their rights to access/information, rectification, blocking, opt-out or erasure of data, or if they wish their data to be transferred to another organisation, they may contact email@example.com