Privacy Policy

1. Name and Contact Details of the Controller

This privacy policy informs you about the processing of your personal data on the website of

Conveying Engineering & Consulting GmbH
represented by the Managing Directors Mr Hanjo Kloß, Mr Christian Matschulla and Mr Carsten Lippert
Ludwig-Erhard-Straße 57 (Listbogen)
04103 Leipzig, Germany
Phone: +49 (0) 341 336410
Fax: +49 (0) 341 3364112
Email: info@cec-leipzig.de

Contact details of the person responsible for data protection:
Mr Sebastian Voigt
Email: sebastian.voigt@cec-leipzig.de
Phone: +49 (0) 341 3364120

2. Scope and Purpose of Processing Personal Data

When you access this website, CEC-Leipzig.de, the internet browser used by the visitor automatically sends data to the server of this website, which is stored temporarily in a log file. Until it is automatically deleted, the following data is stored without any further input from the visitor:

• IP address of the visitor's device,
• date and time of the visitor's access,
• name and URL of the page accessed by the visitor,
• the website from which the visitor accessed the company website (so-called referrer URL),
• browser and operating system of the visitor's device as well as the name of the visitor's access provider.

This access data is automatically deleted after 14 days, unless it is exceptionally required for a longer period in order to investigate a specific case of misuse or a security incident.

The processing of this personal data is justified pursuant to Art. 6 (1) sentence 1 (f) GDPR. The company has a legitimate interest in data processing for the purpose of

• establishing a connection to the company's website quickly,
• enabling a user-friendly use of the website,
• recognising and ensuring the security and stability of the systems, and
• facilitating and improving the administration of the website.

The processing is expressly not carried out for the purpose of gaining insights into the identity of the website visitor.

Visitors can send messages to the company via an online contact form on the website. In order to receive a reply, at least a valid email address, a name and details of your enquiry are required. Without the information marked by us as "required", it is not possible to respond to your enquiry. By providing your email address, you agree that we will respond to your enquiry by this means. All further information may be provided voluntarily by the enquiring person. By submitting the message via the contact form, the visitor consents to the processing of the personal data submitted. Data processing takes place solely for the purpose of handling and responding to enquiries submitted via the contact form. This is done on the basis of voluntarily given consent pursuant to Art. 6 (1) sentence 1 (a) GDPR. The personal data collected for use of the contact form is automatically deleted once the enquiry has been dealt with and there are no grounds for further retention (e.g. a subsequent engagement of our company).

3. Hosting

This website is operated by an external service provider (hosting). The provider is Host Europe GmbH, c/o Spaces, Gertrudenstraße 30-36, 50667 Cologne, Germany. The personal data collected when this website is accessed is stored on the provider's servers in Germany. This concerns in particular the access data (server log files) referred to in item 2, which is automatically deleted after 14 days, as well as the data you submit to us via the contact form.

The provider is used for the purpose of providing this website securely, quickly and reliably. The legal basis is our legitimate interest in a professional provision of our online offering pursuant to Art. 6 (1) sentence 1 (f) GDPR.

The provider processes the data exclusively on our behalf and in accordance with our instructions and is contractually obliged to take appropriate technical and organisational measures to protect your data.

4. Cookies and Local Storage

This website does not use cookies. To store your choice regarding the notice on technically necessary services, as well as your consent to embedding the map display (see item 5), only your browser's local storage (localStorage) is used. No data is transmitted to our servers or to third parties in the process; the information remains solely on your device until you delete it via your browser settings.

5. Map Service (Leaflet / OpenStreetMap)

On our contact page we embed an interactive map to display our company location. This is based on the open-source software Leaflet and retrieves map tiles from OpenStreetMap tile servers. The map is only loaded after your explicit consent; only then is a connection established to the map provider's servers, during which your IP address is transmitted for technical reasons. The legal basis is your consent pursuant to Art. 6 (1) sentence 1 (a) GDPR. Further information on OpenStreetMap's data protection practices can be found at osmfoundation.org/wiki/Privacy_Policy (opens in a new tab) .

6. Spam Protection in the Contact Form (ALTCHA)

To protect our contact form from automated abuse (spam), we use the privacy-friendly open-source service ALTCHA. Unlike conventional captcha services, ALTCHA does not use tracking, cookies or the transmission of data to third-party providers; verification is carried out using a purely computational method (proof-of-work) directly in your browser. The legal basis is our legitimate interest pursuant to Art. 6 (1) sentence 1 (f) GDPR in protecting our website against automated attacks and abuse.

7. Your Rights

Applicable data protection law grants you extensive rights (rights of access and intervention) vis-à-vis the controller with regard to the processing of your personal data, about which we inform you below:

• Pursuant to Art. 7 (3) GDPR, you have the right to withdraw consent once given for the processing of data at any time with effect for the future. In the event of withdrawal, we will delete the data concerned without delay, unless further processing can be based on a legal basis for processing without consent. The withdrawal of consent does not affect the lawfulness of processing carried out on the basis of the consent until the withdrawal.
• Pursuant to Art. 15 GDPR, you have the right to obtain information about your personal data stored by us, the purposes of processing, the categories of personal data processed, the recipients or categories of recipients to whom your data has been or will be disclosed, and the planned duration of storage or the criteria for determining that duration. You also have the right to information about the origin of your data if it was not collected from you, the existence of automated decision-making including profiling, and meaningful information about the logic involved as well as the significance and envisaged consequences of such processing for you.
• Pursuant to Art. 16 GDPR, you have the right to the immediate rectification of inaccurate personal data concerning you and the completion of incomplete personal data stored by us.
• Pursuant to Art. 17 GDPR, you have the right to request the erasure of your personal data where the requirements of Art. 17 (1) GDPR are met, including where you contest the accuracy of the personal data (for the period enabling the controller to verify the accuracy of the data), where processing is unlawful and you refuse erasure and request restriction of use instead, where the controller no longer needs the personal data for the purposes of processing but you require it for the establishment, exercise or defence of legal claims, or where you have objected to processing pursuant to Art. 21 (1) GDPR pending verification of whether the controller's legitimate grounds override yours.
• Pursuant to Art. 18 GDPR, you have the right to request the restriction of processing of your personal data where you contest the accuracy of the data pending verification, where you oppose erasure due to unlawful processing and request restriction instead, where you need the data for the establishment, exercise or defence of legal claims after we no longer need it for the purposes of processing, or where you have objected to processing on grounds relating to your particular situation pending verification of whether our legitimate grounds override yours.
• We will inform all recipients to whom personal data has been disclosed of any rectification, erasure of personal data or restriction of processing pursuant to Art. 16, Art. 17 (1) and Art. 18 GDPR, unless this proves impossible or involves disproportionate effort. We will inform the data subject of these recipients upon request.
• Pursuant to Art. 20 GDPR, you have the right to receive the personal data you have provided to us in a structured, commonly used and machine-readable format, or to request its transmission to another controller, insofar as this is technically feasible.

8. Suggestions and Complaints

If you have any questions, suggestions or complaints regarding the processing of your personal data, you may contact us, the Data Protection Officer named above, or the data protection authority responsible for us:

Saxon Data Protection Commissioner (Der Sächsische Datenschutzbeauftragte)
Mr Andreas Schurig
Bernhard-von-Lindenau-Platz 1
01067 Dresden, Germany
Phone: +49 (0) 351 4935401
Fax: +49 (0) 351 4935490
Email: saechsdsb@slt.sachsen.de