Data Protection Statement

Data protection is an area that our company holds in very high regard. It is fundamentally possible to use this website without providing any personal data. Personal data may need to be processed, however, should a data subject wish to use certain services offered by our company. Should personal data need to be processed and no statutory basis exist for such processing, it is our general practice to obtain the consent of the data subject.

The processing of personal data, such as the name, address, e-mail address, or telephone number of a data subject, always occurs in compliance with the German Federal Data Protection Act (BDSG), the General Data Protection Regulation (GDPR) – which is set to come into effect as of 25.5.2018 – and other applicable legislation. With this data protection statement, our company would like to outline the nature, scope and purpose of the personal data that we process and inform data subjects of their corresponding rights.

Our company has implemented numerous technical and organisational measures to ensure that the processed personal data is as fully and completely protected as possible. Given, however, that Internet-based data transmissions may, in principle, have security gaps, it is not possible to provide any absolute security guarantees.

1 Definitions

Our company’s data protection statement is based on the General Data Protection Regulation (GDPR). Our aim is to make our data protection statement as simple to read and understand as possible. To ensure this, we would like to first explain the terminology used:

1.1 Personal data

Personal data means “any information relating to an identified or identifiable natural person (hereinafter referred to as the ‘data subject’). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person" (GDPR Art. 4 (1)).

1.2 Data subject

A data subject is any identified or identifiable natural person whose personal data is processed by the controller.

1.3 Processing

Processing means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

1.4 Restriction of processing

Restriction of processing means the marking of stored personal data with the aim of limiting their processing in the future.

1.5 Profiling

Profiling means any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects concerning that natural person’s performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements.

1.6 Pseudonymisation

Pseudonymisation means the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures to ensure that the personal data are not attributed to an identified or identifiable natural person.

1.7 Controller

Controller means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data.

1.8 Processor

Processor means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.

1.9 Recipient

Recipient means a natural or legal person, public authority, agency or another body, to which the personal data are disclosed, whether a third party or not. However, public authorities which may receive personal data in the framework of a particular inquiry in accordance with Union or Member State law shall not be regarded as recipients.

1.10 Third party

Third party means a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorised to process personal data.

1.11 Consent

Consent of the data subject means any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.

2 Name and address of controller

Please consult the Imprint section for this information.

3 Contact details of data protection officer

This email address is being protected from spambots. You need JavaScript enabled to view it.

Any data subject may, at any time, contact our Data Protection Officer directly with any questions or suggestions concerning data protection.

4 Cookies

Our company’s website pages use cookies. Cookies are text files that are saved and stored in a computer system via an Internet browser.
Many Internet sites and servers use cookies. Many cookies contain a so-called cookie ID. A cookie ID is a unique identifier of the cookie. It consists of a character string through which website pages and servers can be assigned to the specific Internet browser in which the cookie was stored. This allows visited website pages and servers to differentiate the individual browser of the data subject from other Internet browsers that contain other cookies. A specific Internet browser can be recognised and identified using the unique cookie ID. Through the use of cookies, Possehl Electronics can provide the users of this website with more user-friendly services that would not be possible without the cookie setting.

Through a cookie, the information and offers on our website can be optimised with the user in mind. Cookies allow us, as previously mentioned, to recognise our website users. The purpose of this recognition is to make it easier for users to utilise our website. Website users that use cookies do not, for example, have to enter access data each time the website is accessed, as this is done by the website and the cookie is thus stored on the user’s computer system. Another example is a shopping cart cookie in an online shop. The online store remembers the articles that a customer has placed in the virtual shopping cart via a cookie.

The data subject may, at any time, prevent the setting of cookies through our website by making the setting changes to their Internet browser and may thus permanently deny the setting of cookies. Moreover, cookies that have previously been placed may be deleted at any time via an Internet browser or other software program. This is possible with all popular Internet browsers. If the data subject disables the setting of cookies in the Internet browser used, it is very possible that the full functionality of our website may not be used.

5 Collection of general data and information

Our web servers collect a series of general data and information when a data subject or automated system visits the website. These general data and information are stored in the server log files. The following may be collected: the types of browser and the versions used; the operating system used by the accessing system;  the website from which an accessing system reaches our website; the sub-pages that are accessed via an accessing system on our website; the date and time the website is accessed;  an Internet protocol address (IP address);  the Internet service provider of the accessing system;  and any other similar data and information that may serve to ward off attacks on our IT systems.

When using these general data and information, Possehl Electronics does not draw any conclusions about the data subject. Instead, this information is needed to provide our website content accurately; to optimise the content of our website as well as its advertisement; to ensure the long-term viability of our information technology systems and website technology; and to provide law enforcement authorities with the information necessary for criminal prosecution in the event of a cyber-attack. To this end, Possehl Electronics analyses this anonymously collected data and information statistically and also with the aim of increasing our company’s data protection and data security so as ultimately to ensure the optimal level of protection for the personal data that we process. The anonymous data in the server log files are stored separately from any and all personal data provided by a data subject.

6 Contact options via the website

Owing to statutory regulations, our company’s website contains information that enables you to contact our company quickly through electronic means and also to communicate with us directly via multiple general addresses using so-called electronic mail (e-mail address). If a data subject contacts the controller by e-mail or via a contact form, the personal data transmitted by the data subject are automatically stored. Such personal data which are transmitted voluntarily by a data subject to the data controller are stored for the purpose of processing the request or contacting the data subject. None of this personal data is disclosed to third parties.

7 Routine erasure and blocking of personal data

The data controller will only process and store the personal data provided by the data subject for as long as is necessary in order to accomplish the purpose for which the data are stored or if so prescribed by the European legislator through laws or regulations with which the controller must comply. Once the purpose of storing the data ceases to exist, or if a prescribed retention period defined by the European legislator expires, the personal data are routinely blocked or erased in accordance with legal requirements.

8 Rights of the data subject

8.1 Right to confirmation

Every data subject has the right to obtain confirmation from the controller as to whether or not personal data concerning them are being processed. Should a data subject wish to make use of this right of confirmation, they may, at any time, contact our Data Protection Officer or any other employee of the controller.

8.2 Right of access by the data subject

In respect of the processing of their personal data, every data subject has the right to obtain from the controller information at no cost to them concerning the personal data stored on them and to receive a copy of such information in addition to the information listed below:

• the purposes of the processing;
• the categories of personal data processed;
• the recipients or categories of recipient to whom the personal data has been or will be disclosed, in particular recipients in third countries or international organisations;
• where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period;
• the existence of the right to rectification or erasure of the personal data relating to their person, or the right to the restriction of processing of personal data by the controller, or the right to object to such processing;
• the right to lodge a complaint with a supervisory authority;
• where the personal data are not collected from the data subject: all available information as to the origin of said data;
• the existence of automated decision-making, including profiling, pursuant to Art. 22 (1) and (4) GDPR and – at least in these cases – detailed information about the logic involved as well as the significance and the envisaged consequences of such processing for the data subject.

The data subject furthermore has a right to obtain information as to whether personal data have been transferred to a third country or an international organisation. Where this is the case, the data subject moreover has the right to be informed of the appropriate safeguards relating to the transfer of such data.

If a data subject wishes to make use of their right of access, they may, at any time, contact our Data Protection Officer at:
This email address is being protected from spambots. You need JavaScript enabled to view it.

8.3 Right to rectification

In respect of the processing of their personal data, every data subject has the right to require the immediate rectification of any inaccurate personal data concerning them. The data subject furthermore has the right, having due consideration to the purpose of processing such data, to require that incomplete personal data be completed — including by means of a supplementary statement.

If a data subject wishes to make use of their right of access, they may, at any time, contact our Data Protection Officer at:
This email address is being protected from spambots. You need JavaScript enabled to view it.

8.4 Right to erasure (right to be forgotten)

In respect of the processing of personal data, every data subject has the right to require from the controller that their personal data be erased without delay, provided that any of the reasons listed below apply and to the extent that such data no longer need be processed:

• The personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed.
• The data subject withdraws their consent underlying the processing of such data in accordance with Art. 6(1) (a) GDPR, Art. 9(2)(a) GDPR, and where there are no other legal grounds for the processing of such data.
• The data subject objects to the processing of such data pursuant to Art. 21(1) GDPR and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing of such data pursuant to Art. 21(2) GDPR.
• The personal data have been unlawfully processed.
• The personal data must be erased in order to comply with a legal obligation under Union or Member State law to which the controller is subject.
• The personal data have been collected in relation to the offer of information society services pursuant to Art. 8(1) GDPR.

If any of the aforementioned reasons applies and a data subject wishes to request the erasure of personal data stored at our company, they may contact our Data Protection Officer at any time. Our Data Protection Officer will arrange for the erasure request to be complied with immediately.

If our company has made personal data public and should our company, as the controller, be obliged under Art. 17(1) GDPR to erase the personal data, our company, taking account of the available technology and the implementation costs, will take reasonable steps, including technical measures, to inform other controllers processing the personal data that has been made public that the data subject has requested that these other controllers processing the personal data erase any and all links to said personal data or any and all copies or replications of such personal data  insofar as the processing of such data is not required. The Data Protection Officer will arrange for the necessary measures in individual cases.

8.5 Right to restriction of processing

In respect of the processing of data, every data has the right, as granted by the European legislator, to require from the controller that the processing of their personal data be restricted if any of the following conditions applies:

• The accuracy of the personal data is contested by the data subject, namely for a period that enables the controller to verify the accuracy of the personal data.
• The processing is unlawful and the data subject opposes the erasure of the personal data and instead requests that use of the personal data be restricted.
• The controller no longer needs the personal data for processing purposes but the data subject requires them to assert, exercise or defend against legal claims.
• The data subject has objected to their personal data being processed pursuant to Art. 21(1) GDPR pending verification as to whether the legitimate grounds of the controller override those of the data subject.

If any of the aforementioned reasons applies and a data subject wishes to request the erasure of personal data stored at our company, they may contact our Data Protection Officer at any time. Our Data Protection Officer will arrange for the erasure request to be complied with immediately

If any of the aforementioned conditions is met and a data subject wishes to request that the processing of their personal data stored at our company be restricted, they contact our Data Protection Officer at any time. The Data Protection Officer will arrange for the restriction to be implemented.

8.6 Right to data portability

In respect of the processing of data, every data subject has the right to receive any personal data concerning them, which they have provided to a controller, in a structured, commonly used and machine-readable format. The data subject also has the right to transmit such data to another controller without hindrance from the controller to which the personal data was provided, provided that the processing of the personal data is based on the consent issued pursuant to Art. 6(1) a GDPR or Art. 9(2) a GDPR, or based on a contract as defined in Art. 6(1) b GDPR, and the processing is carried out by automated means, provided that such processing is not necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

Moreover, in exercising their right to data portability pursuant to Art. 20(1) GDPR, the data subject has the right to have personal data transmitted directly from one controller to another, where technically feasible and provided that this does not adversely affect the rights and freedoms of others.

In order to assert the right to data portability, the data subject may contact Data Protection Officer at any time.

8.7 Right to object

In respect of the processing of personal data, every data subject has the right, on grounds relating to their particular situation, to object, at any time, to their personal data being processed pursuant to Art. 6 (1) e or f GDPR. This also applies to any profiling based on these provisions.

Our company will cease processing the personal data in the event of such an objection being raised, unless we can present compelling legitimate grounds for processing such personal data which override the interests, rights and freedoms of the data subject, or where the processing of such personal data serves to assert, exercise or defend legal claims.

If our company processes personal data for direct marketing purposes, the data subject has the right to object, at any time, to their personal data being processed for such marketing. This equally applies to profiling to the extent that it is related to such direct marketing. If the data subject lodges an objection with our company in respect of their personal data being processed for direct marketing purposes, we will cease processing the personal data for such purposes.

The data subject furthermore has the right, on grounds relating to their particular situation, to object to their personal data being processed at our company for scientific or historical research purposes, or for statistical purposes pursuant to Art. 89(1) GDPR, unless the processing of such data is necessary for the performance of a task carried out for reasons of public interest.
In order to exercise their right to object, the data subject may contact the Data Protection Officer directly.

8.8 Right to withdraw data protection consent

In respect of the processing of personal data, every data subject has the right to withdraw their consent, at any time, to their personal data being processed. If the data subject wishes to exercise their right to withdraw their consent, they may contact the Data Protection Officer at any time.

9 Data protection for applications and the application procedure

The data controller collects and processes the personal data of applicants for the purpose of carrying out the application procedure. The processing may also be carried out electronically. This is especially the case if an applicant submits the corresponding application documents to our company electronically, e.g. by e-mail or a web form on the website. If our company concludes an employment contract with an applicant, the submitted data will be stored for the purpose of processing the employment relationship in compliance with the legal requirements. If no employment contract is concluded between our company and the applicant, the application documents will be erased automatically six (6) months after the decision to reject the candidate has been made known, provided that the controller has no other legitimate interests that would oppose their erasure. Other legitimate interests in this regard are e.g. the burden of proof in a lawsuit as prescribed under the General Act on Equal Treatment (Allgemeines Gleichbehandlungsgesetz [AGG]).

10 Competent supervisory authority

Landesbeauftragter für Datenschutz und Informationsfreiheit 
Baden-Württemberg
Postfach 10 29 32
70025 Stuttgart
Germany

Phone: +49 (0) 711 / 61 55 41 - 0

E-mail: This email address is being protected from spambots. You need JavaScript enabled to view it.

11 Amendments to the data protection provisions

We reserve the right to amend our security and data protection provisions to the extent that technical developments render this necessary. In such instances, we will also adapt our data protection notices accordingly. Our data protection statement in its most recent version, as amended from time to time, applies.

(08/2019)