Privacy policy

Stand: 19.06.2025

We are delighted that you are interested in our company. It is generally possible to use our website without providing any personal data. However, if a data subject wishes to make use of special services of our company via our website, it may be necessary to process personal data. If the processing of personal data is necessary and there is no legal basis for such processing, we generally obtain the consent of the data subject.

The processing of personal data, such as the name, address, e-mail address or telephone number of a data subject, is always carried out in accordance with the General Data Protection Regulation and in accordance with the country-specific data protection regulations applicable to us. By means of this data protection declaration, our company would like to inform the public about the type, scope and purpose of the personal data we collect, use and process. Furthermore, data subjects are informed of their rights by means of this privacy policy.

As the controller, we have implemented numerous technical and organizational measures to ensure the most complete protection possible for personal data processed via this website. Nevertheless, Internet-based data transmissions can generally have security gaps, so absolute protection cannot be guaranteed. For this reason, every data subject is free to transmit personal data to us by alternative means, for example by telephone.

Definition of terms

The data protection declaration is based on the terms used by the European legislator for the adoption of the General Data Protection Regulation (GDPR). Our privacy policy should be easy to read and understand for the public as well as for our customers and business partners. To ensure this, we would like to explain the terms used in advance.

• Personal data: Any information relating to an identified or identifiable natural person.
• Person affected: Any identified or identifiable natural person whose personal data is processed.
• Processing: Any process in connection with personal data, such as collection, storage, use, disclosure, etc.
• Restriction of processing: Marking of stored personal data with the aim of restricting its future processing.
• Profiling: Automated processing of personal data to evaluate certain personal aspects.
• Pseudonymization: Processing of personal data so that it can no longer be attributed to a specific data subject without additional information.
• Person responsible: The natural or legal person who determines the purposes and means of the processing of personal data.
• Processor: A person or body that processes personal data on behalf of the controller.
• Receiver: A person or body to whom personal data is disclosed.
• Third party: A person or body other than the data subject, the controller or the processor.
• Consent: Voluntary, informed and unambiguous expression of the data subject's consent to the processing of their personal data.

Name and address of the controller

Michael Finck Industrievertretungen
Michael Finck
Keltenstr. 13
55758 Kempfeld
Deutschland
+49 157-53691221
E-Mail: m.finck@finck-industrievertretungen.de
DE355917788

Cookies / SessionStorage / LocalStorage

The Internet pages use cookies, LocalStorage and SessionStorage to make our website more user-friendly, effective and secure. The data subject can prevent the setting of cookies at any time and delete cookies that have already been set.

Collection of general data and information

The website collects a range of general data and information that is stored in the server log files each time it is accessed. This information is required to deliver the content correctly, to ensure the functionality of the systems and to provide law enforcement authorities with the necessary information in the event of a cyber attack.

Rights of the data subject

• Right to confirmation: Each data subject shall have the right to obtain from the controller confirmation as to whether or not personal data concerning him or her are being processed.

• Right to information: Every data subject has the right to receive information free of charge at any time about the personal data stored about them. This includes information about:

  • the purposes of processing,
  • the categories of personal data that are processed,
  • the recipients or categories of recipients to whom the personal data has been disclosed,
  • the planned duration of storage or the criteria for determining this duration,
  • the existence of a right to rectification or erasure of personal data,
  • the existence of a right of appeal to a supervisory authority,
  • the origin of the data if it was not collected from the data subject,
  • the existence of automated decision-making, including profiling.

• Right to rectification: Every data subject has the right to demand the immediate correction of incorrect personal data. Furthermore, the data subject has the right to request the completion of incomplete personal data.

• Right to erasure (right to be forgotten): Each data subject shall have the right to obtain from the controller the erasure of personal data concerning him or her without undue delay where one of the following grounds applies:

  • The personal data are no longer necessary for the purposes for which they were collected.
  • The data subject withdraws consent and there is no other legal basis for the processing.
  • The data subject objects to the processing and there are no overriding legitimate grounds for the processing.
  • The personal data was processed unlawfully.
  • The deletion is necessary to fulfill a legal obligation.

• Right to restriction of processing: Every data subject has the right to request the restriction of processing if:

  • The accuracy of the personal data is disputed.
  • The processing is unlawful and the data subject requests the restriction of use.
  • The controller no longer needs the personal data, but the data subject requires them for the establishment, exercise or defense of legal claims.
  • The data subject has objected to the processing.

• Right to data portability: Each data subject shall have the right to receive the personal data concerning him or her in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller.

• Right to object: Every data subject has the right to object, on grounds relating to his or her particular situation, at any time to processing of personal data concerning him or her.

• Right to automated decisions in individual cases, including profiling: Every data subject has the right not to be subject to a decision based solely on automated processing which produces legal effects concerning him or her or significantly affects him or her.

• Right to withdraw consent under data protection law: Every data subject has the right to withdraw consent to the processing of personal data at any time.

Legal basis of the processing

Personal data is processed on the basis of the General Data Protection Regulation (GDPR). The legal bases may vary depending on whether the processing is based on consent, a contract, a legal obligation or a legitimate interest.

Legitimate interests in the processing

Where the processing of personal data is based on Article 6(1)(f) GDPR, our legitimate interest is to carry out our business for the benefit of the well-being of all our employees and shareholders.

Duration of storage of personal data

The duration of the storage of personal data depends on the respective statutory retention periods. After these periods have expired, the corresponding data is routinely deleted, provided that it is no longer required for contract fulfillment or contract initiation.

Legal or contractual provisions for the provision of personal data

We would like to inform you that the provision of personal data is partly required by law (e.g. tax regulations) or may also result from contractual regulations (e.g. information on the contractual partner).

Sometimes it may be necessary for a data subject to provide us with personal data that must subsequently be processed by us. For example, the data subject is obliged to provide us with personal data if our company concludes a contract with them. Failure to provide the personal data would mean that the contract with the data subject could not be concluded.

Before personal data is provided by the data subject, the data subject must contact one of our employees. Our employee will inform the data subject on a case-by-case basis whether the provision of the personal data is required by law or contract or is necessary for the conclusion of the contract, whether there is an obligation to provide the personal data and what the consequences would be if the personal data were not provided.

Existence of automated decision-making

As a responsible company, we do not use automated decision-making or profiling.

This privacy policy should cover the basic data protection requirements for a self-employed company with one person. However, it is advisable to have the statement reviewed by a legal expert to ensure that it meets all the specific requirements and regulations that apply to your business and industry.