Area of application
This legal notice and data protection declaration applies to this website and domains of CFF GmbH & Co. KG (hereinafter to be referred to as CFF).
In some cases, the CFF website also contains links to websites of third-party, to which this legal notice and data protection declaration does not apply.

Legal notice
Despite the careful compilation of the contents of our website, we do not grant any guarantee of their faultlessness, accuracy, completeness or undisturbed accessibility. Insofar as is legally permissible, we accept no liability for direct or indirect damages including loss of earnings arising from the use of our website, or in connection with information made available on the website. We reserve the right to change or supplement the information provided, and to do so at any time. The contents of the website will be updated on a regular basis but cannot be considered to be completely updated due to time delays in the information available. Please request the most current technical details and availability of the products and services.
Links to other websites are not maintained by us and we are not responsible for the contents thereof. However, CFF is not responsible for the data protection stipulations or the contents of these websites and accepts no liability in this regard.
If files are offered for download free of charge, CFF accepts no liability for any damages resulting from the download. The download is carried out exclusively at the user's own risk and without any liability or warranty, except in the event of any intent or gross negligence on the part of CFF.
CFF holds and reserves all rights to the content and layout of its website. The intellectual property contained in our website is protected, as are our brands. Text, images and graphics on our website and their layout etc., as well as animations and software are subject to copyright law and other protective legislative provisions. Any reproduction or transfer of the whole or parts thereof is not permitted unless our written permission has been obtained. This website does not grant any license for the use of the intellectual property.
CFF reserves the right to change, suspend or close down the website at any time and without prior notice.

Data Protection Statement - gathering, processing and transfer of personal information

Responsible in accordance to DSGVO:
CFF GmbH & Co. KG
Arnstädter Straße 2
98694 Ilmenau OT Gehren

+49 36783 882-0
datenschutzbeauftragter@cff.de

On your visit to our website, data may be collected which may, in some cases, be of a personal nature. In this declaration, we point out what personal information we collect during your visit to our website, and how we handle this data.
If your name, address or other personal data is required, you will be clearly informed. Your personal user data is used to make the services provided by CFF as easy to use as possible and to improve its services.
By calling up the internet website, CFF receives useful data which is stored for security purposes and possibly allows identification (for example IP address, date, time and pages viewed). These information are used for the analysis of malfunctions, for the administration of the website and for the attainment of demographic information. Furthermore, we use IP addresses and as necessary other information to find out which of our websites are being visited and what topics interest our visitors. IP addresses are captured on visits to our website. We only collect data anonymously and we will not connect it with the profile of a registered user unless the user's prior consent has been obtained.
Your personal information is not used for marketing purposes, sold or made available to third parties in any other way without your prior approval.
However, as part of the provision of our services, your information may under certain circumstances be transferred to third parties who we have included in order processing, e.g. business partners or IT service providers. Within the transfer of personal information to these third parties, we restrict ourselves to the information which is necessary for the provision of the service in question and we ensure that this transfer is carried out in compliance with the required data security. CFF will only transfer your personal information to third parties who have committed themselves to data protection and to the processing of your information in compliance with the applicable laws.
In addition, CFF may be forced by court or official order to reveal your data and associated information. Likewise, we reserve the right to use your information for the assertion of or defense against legal claims.
In the event of a takeover or merger with another company, it may be necessary to disclose or transfer your information to actual or potential buyers. In this case, CFF will aspire to the highest possible level of data protection and will comply with the legal stipulations.

Information on data security
CFF understands the importance of the protection and discreet handling of the information which you transfer to us via the internet. We give data security on our website top priority.
We consider the protection of your personal information a very serious matter. Our processing of your personal information collected during your visit to our website is carried out fully in accordance with the relevant legal stipulations.
If you decide to give CFF personal data via internet so that, e.g., correspondence can be carried out or an order can be placed, this data is carefully and confidentially handled as required by the comprehensive regulations of the Federal Data Protection Law (BDSG).
CFF wants to give you as much control as possible over your personal information. Normally, you can access our website without providing any personal information.

Cookies
Cookies are being used in some areas of our website. A cookie is a small text file stored on your hard disc by a website. Cookies do not damage your computer and do not contain viruses. Information contained in cookies is only used to facilitate your use of our pages and adapt them to your needs. Most browsers are now set by default to accept cookies automatically. However, you may set your browser to decline cookies or to display warnings about the cookies it receives.
Furthermore you can delete cookies on your system at any time. If you do not accept cookies, the functions of our services might, however, be impaired.

Web analysis
CFF uses Google Analytics statistics and evaluation programs in order to statistically evaluate the accessing of the CFF website.
Google Analytics uses cookies which enable an analysis of your use of the website. As a rule, the information about your use of this website obtained by the cookie is transmitted to a Google server in the USA, where it is saved. Your IP address will however be shortened by Google – if IP anonymization is activated on the website. This applies within the EU member states or in other signatory states of the preceding agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened. Contracted to do so by the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on the website activities and to provide the website operator with other services relating to website use and internet use. Google will not merge with other data the IP address transmitted by your browser within the scope of Google Analytics. You may prevent the saving of cookies by setting your browser software accordingly. However, if you choose to do so, please note that you might not be able to fully utilize all functions of this website. In addition, you may prevent Google's capture and processing of the data generated by the cookies and related to your use of the website (incl. your IP address) by downloading and installing the browser plugin available via the following link http://tools.google.com/dlpage/gaoptout?hl=de.

Right of revocation
If you make a request to CFF not to use your personal information for further contact and/or to delete this information, we will carry out your request. Data which is urgently required for the processing of an order or for commercial purposes are not affected by a cancellation or deletion.
Please appreciate that, in the case of a revocation, the personalized service cannot be rendered owing to the fact that the revocation requires the use of the customer data.

Information about customer’s and supplier’s data processing according to article 13 and 14 GDPR

Legal bases and purposes of processing

• Consent (article 6, paragraph 1, point a GDPR)
If you have given us consent to the processing of personal data, the respective consent is the legal basis for the processing mentioned there. You can revoke your consent at any time.
• Fulfillment of the contractual obligations (article 6, paragraph 1, point b GDPR)
We process your personal data to implement our contracts with you in the context of our business relationships.
• Fulfillment of our legal obligations (article 6, paragraph 1, point c GDPR)
We process your personal data, if this is necessary for the fulfilment of legal obligations (e.g. tax laws).
Furthermore, we process your data for the fulfilment of fiscal control and reporting obligations as well as the archiving of data for the purposes of data protection and data security as well as for auditing by tax and other authorities. In addition, the disclosure of personal data may become necessary within the framework of official/judicial measures for the purposes of gathering evidence, criminal prosecution or enforcement of civil law claims.
• Legitimate interest of us or third parties (article 6, paragraph 1, point f GDPR)
We may also use your personal data on the basis of a balance of interests to safeguard the legitimate interests of us or third parties, for example to assert or defend legal claims and to safeguard our business transactions.
 
Categories of processed personal data

Following data will be processed:

• General company data (name, address, VAT number, ...)
• Contact details of contact persons (name, function, telephone number, e-mail, fax, ...)
• Company register data
• Credit data and conditions
• Information on processing of payment transactions (account data, ...)
• Access data as part of the business process


Recipients of personal data 

We pass on your personal data within our company to those areas that require this data to fulfil their contractual and legal obligations or to implement our legitimate interest.
In addition, the following parties may receive your data:

• third parties commissioned by us (article 28 GDPR), service providers for supporting activities and other persons responsible in the sense of the GDPR such as IT service providers and contractual partners
• Authorities, public bodies and institutions, such as financial and administrative authorities, which we are legally obliged to transmit to you
• Bodies and institutions due to legal disputes and payment problems (e.g. to authorities, credit agencies, debt collection agencies, lawyers, courts, experts, group companies and committees and supervisory bodies)
• other places for which you have given us your consent for the data transfer


Duration of data storage

If necessary, we process your personal data for the duration of our business relationship, this also includes the initiation and execution of a contract as well as the legal storage and documentation obligations.


Your Rights of Data Protection

In accordance with Art. 21 DSGVO, we have the right to object to the processing of personal data by us insofar as the rights of our company do not conflict with your right of objection.
You have the right to be informed:
• Information according to article 15 GDPR
• Correction in accordance with article 16 GDPR
• Cancellation in accordance with article 17 GDPR
• Restriction of processing pursuant to article 18 GDPR
• Data transferability from article 20 GDPR
 
In addition, there is a right of appeal to the data protection supervisory authority (article 77 GDPR):
Der Thüringer Landesbeauftragte für den Datenschutz und die Informationsfreiheit

Postfach 90 04 55
99107 Erfurt

poststelle@datenschutz.thueringen.de
Phone: +49 (361) 57-3112900
Fax: +49 (361) 57-3112904

Thank you very much for your attention.