Search

Data Privacy Policy

Thank you for visiting our website and for your interest in our company and our services. The protection of your privacy when you use our Website is important to us. We, as the data controller and service provider at the same time, want to inform you in the following about the processing of your personal data and your rights as a data subject relating to the use of the website

uma-pen.com

(hereinafter also referred to as the “Website”)

of our company,

uma Schreibgeräte

Ullmann GmbH

Fritz-Ullmann-Weg 3

D-77716 Fischerbach

(hereinafter also referred to as “we” or “uma").

Your personal data is processed exclusively within the scope of the statutory provisions of the data protection law of the European Union, in particular the EU General Data Protection Regulation (hereinafter “GDPR”), and in supplementation, the German Federal Data Protection Act (hereinafter “BDSG”), and further legal regulations on data protection (hereinafter referred to collectively as “Data Protection Regulations").

If you would like to take a look for yourself at the GDPR, you can find it online at: https://eur-lex.europa.eu/legal-content/DE/TXT/HTML/?uri=CELEX:32016R0679.

This Data Privacy Policy applies only to the Website that can be retrieved at the domain uma.com including all subdomains. The following information does not refer to other websites of uma or external websites of other providers, to which links are provided on the Website. The terms used, e.g. “personal data” or their “processing” are consistent with the definitions in Art. 4 GDPR.

 

1. Object of data protection and legal bases

The object of data protection is personal data. Personal data is all information relating to an identified or identifiable natural person (so-called “data subject"). Your personal data consequently includes all data that permits identifying you personally, such as your name, your address, phone number or email address. Personal data furthermore also includes the information potentially created through the use of our Website, e.g. the start, end and scope of the use or your IP address.

We will process your data only if an applicable legal regulation permits it. When doing so, we will also rely on the following legal bases for the processing of your data:

Consent (Art. 6 (1) sent. 1, lit. a) GDPR): We will process certain data only on the basis of your previously granted, explicit and voluntary consent. You have the right to revoke your consent at any time with effect for the future.

Fulfilment of a contract or conducting pre-contractual measures (Art. 6 (1) sent. 1, lit. b) GDPR): In particular, for the initiation or execution of your contractual relationship with uma, we require certain data from you.

Fulfilment of a legal obligation, (Art. 6 (1) sent. 1, lit. c) GDPR): Moreover, we process your personal data to fulfil legal obligations, e.g. requirements under supervisory law or retention obligations under commercial and tax law.

Protection of legitimate interests (Art. 6 (1) sent. 1, lit. f) GDPR):
uma will process certain data to protect its own interests or the interests of third parties. However, this applies only if your interests are not overriding in the specific case.

Please note that this is no complete or exhaustive enumeration of the possible legal bases, but these are merely examples that are to make the legal bases of data protection regulations more transparent. More information on the legal bases of the particular data processing activities on our website can be found in the statements under the following sections.

 

2. Server logfiles

You can visit the public part of our Website, which is accessible without prior registration, without providing any personal data of yourself. By visiting our Website, the following information about the access can be stored:

  • the IP address of the requesting end device,
  • retrieved pages and files,
  • the http response code,
  • the size of the pages and files retrieved in bytes,
  • the website you were visiting before and from which were referred to our Website (referrer URL),
  • date, time and time zone of the server request,
  • browser type and version,
  • operating system used on the requesting end device.

We process these data on the basis of Art. 6 (1) sent. 1, lit. f) GDPR for making the Website available, ensuring its technical operation and for the security of our information technology systems. In doing so, we pursue the interest of enabling the use of our Website, ensuring its technical functionality and maintaining it permanently. When calling up our Website, these data will be processed automatically. Without this provision, you cannot use our Website. We use these data not for the purpose of identifying you personally.

The data gathered automatically will usually be deleted after 7 days, unless we need them as an exception for a longer period for the aforementioned purposes. In such a case, we will delete your data immediately as soon as the purpose is no longer given.

You cannot object to the gathering and storing of your server log data, as these data are necessarily required for a fault-free operation of the Website.

 

3. Communication by means of the contact form or by email

If you communicate with us by means of the contact form or by email, the contact details (e.g. name, email address) you provide voluntarily will be gathered, processed and used only for the limited purposes of either registering, and if applicable, responding to your query or queries or for technical administration. The data shared by you by means of our contact forms will be encrypted in the transmission using Transport Layer Security (TLS), which is widely known under its previous name Secure Socket Layer (SSL).

The data transmitted in communication by means of a contact form or by email will be processed on the basis of Art. 6 (1) sent. 1, lit. a) GDPR if the initiation of a contractual relationship is concerned or on the basis of Art. 6 (1) sent. 1, lit. f) GDPR. In case of the latter, we have a legitimate interest in processing contact requests sent to us voluntarily.

We will delete the data entered by you, as soon as the purpose of the gathering is completely obsolete, subject to the fulfilment of continuously applicable legal retention obligations.

Insofar as your data are processed on the basis of legitimate interests, you can object at any time to the storage of your personal data. In that case, your data will no longer be processed, unless we can prove a legitimate interest in the processing or are otherwise legally obligated to store the data. To exercise your right of objection regarding the storing, please contact us in writing by fax or email.

However, please note that in communication by means of a contact form, complete data security cannot be guaranteed by us and communication by email will be exchanged via an unsecured data connection. Accordingly, please refrain from transferring confidential information such as bank or credit card data, etc. through this channel. We recommend that you use a secure transmission method such as letters by regular mail when sending confidential information.

 

4. Newsletter

To subscribe to our newsletters, it is enough to enter the required information that is marked with (*). This usually includes your name and email address. Moreover, you can also provide further information voluntarily if applicable, such as your country and language, with which you make it easier for us to select and arrange the newsletter based on your interests.

For sending the newsletter, we use the so-called double-opt-in procedure, i.e. we will send you a newsletter by email only once you have expressly confirmed beforehand that we should activate the newsletter service. We will then send you a message by email and ask you by clicking a link contained in this email that you would like to receive our newsletter. By completion of this separate double opt-in procedure, you will have given your consent to receive the newsletter.

We will send the newsletter only upon corresponding registration, i.e. with your consent on the basis of Art. 6 (1) lit. a) GDPR. We expressly reserve invoking other legal bases. To the extent that the contents of a newsletter are described in concrete terms in the context of subscribing to it, the contents are decisive for the scope of the consent. In addition, our newsletters contain information about us and our products, offers, campaigns and our company.

If you no longer wish to receive any newsletters from us later on, you can revoke your consent at any time. A notice sent in text form (e.g. email, letter) to the contact details above or datenschutz (at) uma-pen.com is sufficient for this purpose. Of course, you can also find an unsubscribe link in every newsletter.

 

5. Cookies

The Website uses cookies and similar technologies such as HTML5 Storage (hereinafter referred to collectively as “Cookies”) to enable the optimal design of the Website. For example, this makes navigation simpler and enables a high measure of user-friendliness.

Cookies are small identification codes that our webserver sends to your browser and that are stored on our end device with a corresponding standard setting. Cookies are small identification codes that our webserver sends to your browser and that are stored on our end device with a corresponding standard setting. These can be used to determine if communication with us from your end device has already taken place before. They thereby serve the purpose of making the use more convenient for you and optimising our offer. At the same time, we differentiate whether the cookie is necessarily required or if it was set directly by our Website or third parties. Please find detailed information in the provisions below on the kind, function, purposes, legal bases and possibilities to object to the data processing as relates to cookies:

If you use our Website, you will be informed by us about the use of cookies and you can consent to the use and storage of cookies on your end device. You can object to the storage of cookies at any time by deactivating the cookie settings of this Website described below or by selecting the browser setting “do not accept any cookies”. Please see the help feature of your browser regarding the steps for managing and deleting cookies in the settings of your browser. In addition, you can also deactivate all coolies by means of free browser add-on s such as “Adblock Plus” (adblockplus.org/de) in combination with the “EasyPrivacy” list (easylist.to). If you do not accept any cookies, however, this can result in functional limitations of the Website.

a) Necessarily required cookies

On our Website, we use the following cookies that are necessarily required for the functioning of our Website and the storing of which is within our legitimate interest, since we would otherwise not be able to offer our Website with certain basic features (e.g. you would have to newly log in again every time you change pages).

Designation

Function/Purpose

Storage period

PHPSESSID

Initialisation of the user session for the use of the Website

Session

uma-pen.com

Stores the consent status of the user regarding cookies at the current domain

1 year

The data processing takes place to protect our legitimate interests on the basis of Art. 6 (1) sent. 1, lit. f) GDPR. Our legitimate interest to this end results from the described purposes of use.

b) Cookies of third-party providers

For the integration of contents and functions of third-party providers (in this regard, also see the following sections), we use cookies of third-party providers, which permit them, e.g. to receive the information that you have retrieved this Website. Please visit the website of the third-party provider to obtain more information about their use of cookies. We use the following cookies of third-party providers:

Designation

Function/Purpose

Third-party provider

Storage period

_gat_UA-8061667-1

Anonymised user analysis of downloads, video retrievals, booking of service offers

Google Inc.

Session

_ga

Anonymised user analysis of website retrievals

Google Inc.

14 months

_gid

Registers a unique ID that is used to generate statistical data on how the visitor uses the Website.

Google Inc.

1 day

The data processing takes place to protect our legitimate interests on the basis of Art. 6 (1) sent. 1, lit. f) GDPR. Our legitimate interest to this end results from the described purposes of use.

More details and the possibilities to object to the data processing as relates to cookies of third-party providers can be found in the following descriptions of the individual functions that are based on the use of such cookies or cookie-like technologies.

 

6. Google Analytics

This website uses Google Analytics, a web analysis service of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google"). Google Analytics uses third-party provider cookies to identify the frequency of use of certain areas of our website and preferences. The information generated by the cookie about your use of our Website (including your truncated IP address) will usually be transmitted to and stored by Google on servers in the USA. In this respect, the data is processed on the basis of our legitimate interests in the definition of Art. 6 (1) lit. f) GDPR, notably our interests in the analysis, optimisation and efficient operation of our online offer. Google is certified, among other, under the Privacy Shield Agreement and it thereby offers a guarantee that the European Data protection laws are observed.

Google will use this information on our behalf and on the basis of a contract for commissioned data processing, in order to analyse your usage of our Website, compile reports for us about website activities, and to perform additional services for us relating to the use of the Website and of the internet.

We use Google Analytics only with activated IP anonymisation. This means, the users’ IP addresses will be truncated by Google within the Member States of the European Union (EU) or in other signatory states of the Treaty on the European Economic Area (EEA). The complete IP address will only be transmitted in exceptional cases to a server of Google in the USA and it will be truncated there. The IP address transmitted from your browser will not be combined with other Data of Google.

The data will be deleted as soon as it is no longer needed for the purposes of archiving. In our case, this is normally the case after six months.

You can prevent the storing of the cookies by deactivating “cookies of third-party providers” (see above Sec. 5) or by means of a corresponding setting or browser add-on; however, we point out that you might not be able to use all functions of our Website to full extent in that case. In addition, you can prevent the gathering of the data generated by the cookie relating to your usage of the Website (incl. your IP address) to be transmitted to Google, as well as the further processing of these data by Google, by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de.

More information about data use by Google, options for settings and objections can be found on Google’s websites at the following links:

https://www.google.com/intl/de/policies/privacy/partners (“Use of data by Google when you use websites or apps of our partners”),

https://www.google.com/policies/technologies/ads (“Use of data for advertising purposes”),

https://www.google.de/settings/ads (“Managing information that is used by Google to display advertising to you”).

 

7. Embedding of videos

Videos of YouTube are embedded on this Website. This service is operated by YouTube LLC, 901 Cherry Avenue, San Bruno, CA 94066, USA, (“YouTube”), which is a subsidiary of Google LLC., Amphitheatre Parkway, Mountain View, CA 94043, USA.

When playing the videos, a connection to the servers of YouTube in the USA will be established. Certain information (e.g. your IP address) will be transmitted to YouTube in the process. It can also be the case that YouTube stores cookies on your end device if you have agreed to the use and storage of cookies from third-party providers. We do not obtain any knowledge of the kind and scope of the data gathered by YouTube and we have no influence on their use. Through embedding, YouTube can also receive the information that your browser has called up a corresponding page of this Website, even if you do not have a user account at YouTube or if you are presently not logged into YouTube. Your data will be processed to enable said features for you and facilitate the use of certain contents on our Website on the basis of Art. 6 (1) lit. f) GDPR. In addition, we have a legitimate interest in using the contents and services of third parties for the efficient operation and optimisation of our Website.

You can find more information on the purpose and scope of the data gathering, the further processing, and use of the data by YouTube, as well as your rights in this regard and existing optional settings for the protection of your data privacy in YouTube’s data privacy policies at:

Data Privacy Policy of YouTube/Google: https://www.google.de/intl/de/policies/privacy/

If you do not want that the providers attribute the visit to this Website to your user account with them, you need to log off from the respective service before you visit this Website. Even if you are not logged in with the providers, websites with active plug-ins can send data to the providers through the use of cookies, which permit the provider, e.g. to create a pseudonymised user profile.

The videos of YouTube, which are embedded on this Website and stored at http://www.youtube.com, and which can be played back directly from this Website, are integrated in the “expanded data protection mode”, i.e. according to YouTube, no data about you as a user will be transferred to YouTube if you do not play the videos.

You can prevent the storing of cookies of third-party providers by deactivating them in the settings of your browser or by means of a browser add-on, e.g. “Adblock Plus” (https://adblockplus.org/de/) in combination with the “EasyPrivacy” list (https://easylist.to/) (see above, Sec. 5); however, we point out that you might then not be able to use all of the functions of this Website.

 

8. Integration services and contents of third-parties/Google Maps

We furthermore use offers of the following third-party providers on our Website, in order to embed their contents and services such as maps (hereinafter referred to collectively as “Contents”). In this regard, your data are processed on the basis of our justified interests (Art. 6 (1) lit. f) GDPR) in the efficient operation and optimisation (in particular user-friendliness) of our Website and assurance of the security of our technical systems.

The third-party providers of these contents obtain knowledge of your IP address in all instances, as they would not be able to transfer the Contents to your end device without the IP address. The IP address is required to display the Contents. It can also be the case that the third-party providers will store cookies on your end device.

To display maps, we use the service “Google Maps” of the provider Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. The processed data can include, in particular IP addresses and location data, which however are not gathered without your consent (usually given by means of the corresponding device settings). More information about data use by Google and the options for settings and objections at Google can be found on Google’s websites at the links listed below.

You can prevent the storage and use of cookies for the listed services by adjusting the corresponding browser settings or using browser add-ons.

More information about data use by Google and the options for settings and objections at Google can be found on Google’s websites at the following links:

https://www.google.com/intl/de/policies/privacy/partners (“Use of data by Google when you use websites or apps of our partners”),

https://www.google.com/policies/technologies/ads (“Use of data for advertising purposes”),

https://www.google.de/settings/ads (“Managing information that is used by Google to display advertising to you”).

 

9. Recipients of personal data

Your personal data will be transferred by us to external recipients only if this is required for the execution or processing of your request, or if we have received your consent to it or if another legal permission applies.

External recipients can be, in particular:

Commissioned data processors: These are service providers that we engage for the performance of services, for example, in the area of technical infrastructure and maintenance of our Website. Such commissioned data processors are selected carefully by us and audited regularly to ensure that your privacy stays protected. These service providers may use the data exclusively for the purposes defined by us and according to our instructions. In observation of the legal requirements of Art. 28 GDPR, we are authorised to use such commissioned data processors.

Public entities: These are authorities, state institutions and other corporations of public law, e.g. supervisory authorities, courts, public prosecutors or fiscal authorities. Personal data are transmitted to such public entities solely for legally compulsory reasons. The legal basis for such a transfer, if applicable, is Art. 6 (1) sent. 1, lit. c) GDPR).

Non-public entities: Service providers and assistants, for example, tax advisers or auditors to whom the data are transferred based on a legal obligation or for the protection of legitimate interests. The data will be transferred only based on Art. 6 (1) sent. 1, lit. c) and/or f) GDPR.

 

10. Data processing in third countries

If we transfer your data to third country outside the EU or the EEA according to the statements above, we will ensure before the transfer that, apart from legally permitted exceptions, an appropriate standard of data protection applies at the recipient or that you consent to the data transfer. An appropriate data protection standard is ensured, for example, by an EU-US Privacy Shield certification of the recipient, the conclusion of EU standard contract clauses or the applicability of so-called Binding Corporate Rules (BCR).

 

11.  Storage period

We store your personal data only for as long as this is required to fulfil the purposes or – in case of a consent – for as long as you do not revoke the consent. In case of a revocation, we will not continue to process your personal data, unless their further processing is permitted pursuant to the relevant legal regulations or even mandatorily prescribed (e.g. within the scope of retention obligations under commercial and tax law). We will also delete your personal data if we are obligated to do so for statutory reasons.

For the rest, please find details on the storage period of your personal data in the respective statements under the above sections.

 

12. Your rights

As a data subject of the data processing, you have a number of rights. These are, in detail:

Right of access (Art. 15 GDPR): You have the right to obtain access to the data that is stored about you.

Right of correction and erasure (Art. 16 and Art. 17 GDPR): You can request us to correct incorrect data and – insofar as the legal conditions are fulfilled – to erase your data.

Right to restrict the processing (Art. 18 GDPR): You can demand from us – insofar as the legal conditions are fulfilled – that we restrict the processing of your data.

Right to data portability (Art. 20 GDPR): If you have provided data to us on the basis of a contract or a consent, you can request on fulfilment of the legal requirements that you receive the data you have provided in a structured and commonly used format or that we transfer the data to another data controller.

Right to object to the data processing on grounds of legitimate interests (Art. 21 GDPR): You have the right to object at any time, for reasons arising from your particular situation, to the data processing carried out by us, insofar as the processing is based on legitimate interests in the definition of Art. 6 (1) sent. 1, lit. f) GDPR. If you exercise your right to object, we will discontinue the processing of your data, unless we can prove compulsory reasons for the continued processing that override your rights.

Objection to cookies: You can furthermore object to the use of cookies at any time. If you would like to object to the use of certain cookies, please notice our statements under Sec. 5.

Revocation of consent (Art. 7 GDPR): If you have granted us your consent to the processing of your data, you can revoke it any time with effect for the future. The legitimacy of the processing of your data up until the revocation will remain unaffected thereof.

Right to lodge complaint with the supervisory authority (Art. 77 GDPR): You can additionally lodge complaint with the competent supervisory authority if you believe that the processing violates applicable law. For this purpose, you can optionally contact the data protection authority with jurisdiction at the place of your residence, your workplace or the place of the presumable violation or you can contact the data protection authority that is competent for us. The supervisory authority for data protection that is competent for us is the State Data Protection Officer for Baden-Württemberg (www.baden-wuerttemberg.datenschutz.de).

In case of questions on the topic of the processing of your personal data, your rights as a data subject and any consent granted, you are welcome to contact our Data Protection Officer using the communication channels indicated under Sec. 13. To exercise your rights as data subject, please also contact our Data Protection Officer directly.

 

13. Our Data Protection Officer

We have appointed a company Data Protection Officer. You can reach him as follows:

– Michael Schöner –

uma Schreibgeräte

Ullmann GmbH

Fritz-Ullmann-Weg 3

D-77716 Fischerbach

Phone: +49 (0)78 32 / 707-0

Fax: +49 (0)78 32 / 707-13

www.uma-pen.com

Email: datenschutz (at) uma-pen.com

 

14. Security

We will take technical and organisational security measures, in order to protect your personal data from accidental or intentional manipulations, loss, destruction or access by unauthorised persons. These security measures will be adjusted according to the respectively current state of technology.

Your personal data transferred in the course of your use of our Website will be transferred safely by us with encryption. In doing so, we use the encryption protocol Transport Layer Security (TLS), which is widely known under its previous name Secure Sockets Layer (SSL).

Our employees are obligated to observe data secrecy.

 

15. Changes

It may become necessary from time to time to adjust the content of this Data Privacy Policy. We therefore reserve the right to change this Data Privacy Policy at any time. If your consent should be required for a change, we will request it from you. We will also publish the modified version of the Data Privacy Policy in this place. When you visit our website again, you should therefore also read the Data Privacy Policy again.

Status:         May 2018

Would you like more information?
Simply send us a short note, and we shall contact you !

Please use our Contact Form for inquiries, remarks and ideas.
Please note that the boxes marked with an asterisk (*) must be filled in to enable us to process your input properly.

We use cookies to optimize your experience on this site. By continuing to browse the site you are agreeing to our use of cookies.