Privacy Policy

Privacy Information

We place great importance on the protection of your personal data. We, therefore, process and use your personal data exclusively in accordance with the principles described in more detail below and in compliance with the applicable privacy requirements, in particular the General Data protection Regulation (GDPR).

Name and contact details of the controller

Responsible for the website of FiXiT Management (https://www.fixit2rail.be) is

FiXiT Management

Oude Godstraat 170/2

2650 EDEGEM

BTW: 0781.516.132

 

E-mail: Kristof.oeyen@fixit2rail.be

Phone: +32 478 11 14 15

Information on the technical terms used by the gdpr in this privacy information

The technical terms that we use in this privacy information have the meaning given in the GDPR. You can, therefore, take all definitions from Art. 4 of the GDPR. We will gladly provide you with the following information on the most important technical terms we use in this privacy information.

 

Personal data

”Personal data” means any information relating to an identified or identifiable natural person. An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

 

Data subject

“Data subject" means the identified or identifiable natural person to whom personal data relate.

 

Processing

“Processing” means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

 

Controller

“Controller” means a natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data. Where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law.

 

Recipient

“Recipient” means a natural or legal person, public authority, agency or another body, to which the personal data are disclosed, whether a third party or not. Public authorities which may receive personal data in the framework of a particular inquiry in accordance with Union or Member State law shall not be regarded as recipients; the processing of those data by those public authorities shall be in compliance with the applicable privacy rules according to the purposes of the processing

 

Third-party

“Third-party” means a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorised to process personal data.

 

Consent

“Consent” of the data subject means any freely given, specific, informed and unambiguous indication of the data subject's wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.

Information on the processing of personal data in relation to the use of the website

1. If you use our website for purely informational purposes, the browser of your terminal device automatically sends information to the server of our website (https://www.schultecap.com) each time you call up our website. The following information is collected without your intervention:

 

- operating system of the user,

- type and version of the requesting browser,

- size of the browser,

- type of access to the website (mobile, desktop or tablet)

- date and time of access,

- IP address.

 

The above-mentioned personal data will be processed for the following purposes:

- Provision of the contents of our website,

- Ensuring the correct display of our website.

 

The legal basis for the above data processing is Art. 6 para. 1 sentence 1 lit. f) of the GDPR (balance of interests). Our legitimate interest is both the provision of the contents of our website accessed by the user and the correct display of our website.

 

Your personal data will be deleted as soon as they are no longer required for the purpose of their collection. This means that the personal data processed to provide and correctly display our website will be deleted as soon as your respective session has ended.

 

In principle, there is no obligation for you to provide us with the above-mentioned personal data. However, this data is absolutely necessary for the provision and display of the contents of our website. This means that if you do not provide us with your personal data, we will not be able to provide you with the contents of our website that you call up.

 

2. Whenever you visit our website, the terminal device with which you access our website (https://www.schultecap.com) also automatically transmits information to the server of the hosting provider of our website. The hosting provider of our website is ALL-INKL.COM - Neue Medien Münnich, Inhaber: René Münnich, Hauptstraße 68 | D-02742 Friedersdorf. According to the information provided by ALL-INKL, the following connection data, in particular, are collected each time you visit our website without your intervention:

- our domain,

- your IP address (client IP),

- date and time of access (timestamp),

- URL (request line),

- HTTP status code,

- the size of the data downloaded by you when you visit our website (size of the response body),

- the site from which you came to our website (referrer sent by the client),

- type and version of your browser and the operating system you use (user agent sent by the client).

 

The above data are processed by ALL-INKL in so-called log files. According to ALL-INKL, this data is not to be stored together with other personal data of the user. In this context, ALL-INKL emphasizes that when data is stored in the log files, the respective IP address of the visitor who accesses our website is anonymized.

According to ALL-INKL, the above-mentioned data is processed for the following purposes:

- Statistical analysis,

- Improving the services of the hosting provider of our website,

- Recognition and defence of attacks.

 

You are entitled to various rights against the processing of your data by ALL-INKL, whereby you must contact ALL-INKL yourself to exercise these rights (immediately). The legal basis for the above data processing is likely to be Art. 6 para. 1 sentence 1 lit. f) of the GDPR (balance of interests). The legitimate interest of ALL-INKL should be the optimization of its offer, its website, the measurement of the web audience and the protection of its server against attacks.

 

Further information on the purpose and scope of data collection and its processing by ALL-INKL can be found in the privacy information of ALL-INKL at https://all-inkl.com/datenschutzinformationen/. You will also find further information on your rights and settings to protect your privacy. Please note that we have no influence on the data collected and processed by ALL-INKL.

 

Information on the processing of personal data when you contact us by e-mail

For any sort of questions, you can contact us via the following e-mail address (Kristof.oeyen@fixit2rail.be). In this case, we will save your personal data transmitted with the e-mail.

 

The personal data provided by you will be used exclusively for processing the conversation. These data will not be passed on to third parties.

 

We process the personal data that you give us when contacting us by e-mail for the purpose of contacting you.

 

The legal basis for the processing of your personal data transmitted in the course of sending an e-mail is Art. 6 para. 1 lit. f) of the GDPR. If the e-mail contact aims at the conclusion of a contract, the additional legal basis for the processing of your personal data is Art. 6 para. 1 lit. b) of the GDPR.

 

Your personal data, which you give us when you contact us by e-mail, will be deleted as soon as they are no longer required for the purpose of their collection. This is the case when your request is completed.

 

You have the possibility to withdraw your consent to the processing of your personal data transmitted by e-mail at any time. For this purpose, you are welcome to contact us by e-mail at Kristof.oeyen@fixit2rail.be and object to the storage of your personal data. All personal data stored in connection with the contact will be deleted after receipt of your declaration of withdrawal. If you withdraw your consent, your request cannot be processed further, as the conversation will be terminated.

Cookies

Our website uses cookies. Cookies are small text files containing information which your browser automatically creates when you visit a website and which can be stored on your terminal device.

 

1. Technically necessary cookies

 

We use cookies that are technically necessary. These make the website usable. The website cannot function without these cookies. The following data is stored in the cookies and transmitted to us:

 

- Type and version of your browser and the operating system you use (user agent sent by the client).

- Used terminal device (e.g. mobile phone, tablet or PC).

 

The purpose of using technically necessary cookies is to ensure the use of our websites. Some functions of our websites cannot be offered without the use of cookies. For these, it is necessary that the browser is recognized even after a page change.

 

The legal basis for the processing of personal data using technically necessary cookies is Art. 6 para. 1 lit. f) of the GDPR (balance of interests). Our legitimate interest is both the provision of the contents of our website accessed by the user and the correct display of our website.

 

The technically necessary cookies used by us have the following storage periods:

 

Name of the cookie Purpose Expires
PHPSESSID Functionality and provision of the website via PHP When the session ends (automatically)
csrf_contao_csrf_token Prevents you from Cross-Site-Request-Forgery attacks When the session ends (automatically)

 

Most browsers automatically accept cookies. However, you can also completely deactivate the use of cookies in the settings of your respective browser program or delete already stored cookies. We would like to point out that some areas of the website may then no longer function properly.

 

2. Technically not necessary cookies

 

We do not use cookies that are technically not necessary.

disclosure of data

We do not transmit your personal data to third parties for the purposes other than those mentioned below. We only disclose your personal data to third parties if:

 

- you have given your explicit consent in accordance with Art. 6 para. 1 S. 1 lit. a) of the GDPR,

- disclosure pursuant to Art. 6 para. 1 S. 1 lit. f) of the GDPR is necessary for the assertion, exercise or defence of legal claims and there is no reason to assume that you have an overriding interest worthy of protection in not disclosing your data,

- in the event that there is a legal obligation for disclosure under Art. 6 para. 1 S. 1 lit. c) of the GDPR, and

- this is legally permissible and, according to Art. 6 para. 1 S. 1 lit. b) of the GDPR, necessary for the processing of contractual relationships that exist with you.

Information on data subject rights

1. Right of access under Art. 15 of the GDPR

 

As data subjects, you have the right of access if the requirements of Art. 15 of the GDPR are met.

 

This means that you can ask us to confirm whether we process personal data concerning you. If this is the case, you also have the right of access to these personal data. In addition, you may in particular request access to information on the purposes of the processing, the categories of personal data concerned, the recipients or categories of recipients to whom the personal data have been or will be disclosed, the envisaged period for which the personal data will be stored, the existence of the right to request rectification or erasure of personal data or restriction of processing of personal data concerning the data subject or to object to such processing, the right to lodge a complaint, the source of your data, if not collected by us, and the existence of automated decision-making, including profiling, and, where applicable, meaningful information on the details thereof.

 

The full extent of your right of access can be found in Art. 15 of the GDPR.

 

2. Right to rectification under Art. 16 of the GDPR

 

As data subjects, you have the right to rectification if the requirements of Art. 16 of the GDPR are met.

 

If we have stored personal data about you that is inaccurate, you can request us to rectify this data. The above applies accordingly if the personal data we have stored about you is incomplete.

 

If we have disclosed inaccurate or incomplete personal data about you to recipients, we will inform them of the necessary rectification. However, they will not be informed if the recipients have already deleted your personal data, if the information would require a disproportionate effort or if communication proves impossible. If necessary, we will inform you of the recipients to whom we have disclosed the inaccurate or incomplete personal data. If we consider it inappropriate to comply with your request, we will explain the reasons for this decision.

 

The full extent of your right to rectification can be found in Art. 16 of the GDPR.

 

3. Right to erasure ("right to be forgotten") under Art. 17 of the GDPR

 

As data subjects, you have the right to erasure if the requirements of Art. 17 of the GDPR are met.

 

This means that, in principle, you have the right to request us to erase personal data concerning you without undue delay, and we shall have the obligation to erase your personal data without undue delay if, in particular, one of the following grounds applies:

 

- your personal data is no longer necessary in relation to the purpose for which they were collected or otherwise processed, or

- you withdraw your consent on which the processing of your personal data is based and there is no other legal ground for the processing, or

- we have processed your personal data unlawfully, or

- your personal data has to be erased for compliance with a legal obligation in Union or Member State law, as controller for your personal data, or

- you object to the processing of your personal data and we cannot provide any overriding legitimate grounds for the processing. The above only applies in the event that we process your data to protect our legitimate interest or in the performance of a task which is in the public interest.

 

Right to erasure ("right to be forgotten") does not apply if one of the reasons listed in Art. 17 para. 3 of the GDPR applies. This is the case when the processing is necessary:

 

- for exercising the right of freedom of expression and information, or

- for compliance with a legal obligation which requires processing by Union or Member State law to which we are subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in us, or

- for reasons of public interest in the area of public health, or

- for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes so far as the right to erasure is likely to render impossible or seriously impair the achievement of the objectives of that processing, or for archiving, research or statistical purposes, or

- for the establishment, exercise or defence of legal claims.

 

Should we have disclosed your personal data to recipients, we would inform them of the necessary erasure. This does not apply if the recipients have already deleted your personal data, if the information would involve a disproportionate effort for the recipients or if communication would prove impossible. If necessary, we will inform you of the recipients to whom we have disclosed your personal data.

 

The full extent of your right to erasure can be found in Art. 17 of the GDPR.

 

4. Right to restriction of processing under Art. 18 of the GDPR

 

As data subjects, you have the right of restriction of processing if the requirements of Art. 18 of the GDPR are met.

 

This means that you, as a data subject, can request us to restrict processing if one of the following circumstances applies:

 

- if you contest the accuracy of the personal data that we process. In this case, we will restrict the processing of your personal data until we have verified the accuracy of the data, or

- the processing is unlawful and you, as a data subject oppose to erasure of your personal data and request restriction of their use instead, or

- when we no longer need your personal data, but you require them for the assertion, exercise or defence of legal claims, or

- if you object to the processing of your personal data by us. In this case, we will restrict the processing of your personal data as long as we examine the reasons for the processing.

 

If you effectively exercise your right of restriction, our handling of your personal data will be minimized considerably. Because in principle we may only store your personal data. Generally, we should stop all processing activities that go beyond the mere storage of your personal data. However, there are exceptions to this principle. We may continue to process your personal data without restriction, even though you have effectively exercised your right to restriction of data processing, in the following cases

 

- you give your consent to the processing, or

- the processing is necessary for the purpose of assertion, exercising or defending legal claims, or

- to protect the rights of other persons, or

- to safeguard important public interests of the Union or Member States, or

- the circumstances which entitle you to exercise this right cease to exist.

 

Should we have disclosed your personal data to recipients, we will inform them about the restricted processing. This does not apply if the recipients have already deleted your personal data, if the information would involve a disproportionate effort for the third parties or if communication would prove impossible. If necessary, we will inform you of the third parties to whom we have disclosed your personal data.

 

If you have obtained the restriction of processing, we will, of course, inform you before we lift this restriction.

 

The full extent of your right to processing pursuant to Art. 18 of the GDPR Rectification can be found in Art. 18 of the GDPR.

 

5. Right to data portability under Art. 20 of the GDPR

 

As a data subject, you have the right to data portability if the requirements of Art. 20 of the GDPR are met.

 

This means that you generally have the right to receive the personal data concerning you, which you have provided us with, in a structured, commonly used and machine-readable format. Furthermore, you have the right to transmit those data to another controller without hindrance from us. However, both apply only if the processing is based on a consent pursuant to Art. 6 para. 1 lit. a) or Art. 9 para. 2 lit. a) of the GDPR or on a contract pursuant to Art. 6 para. 1 lit. b) of the GDPR and the processing is carried out by means of automated (i.e. without human intervention) procedures.

 

Generally, in exercising your right to data portability, you shall have the right to have the personal data transmitted directly from us to another controller, where technically feasible.

 

The full extent of your right to data portability can be found in Art. 20 of the GDPR.

 

6. Right to withdraw the consent under Art. 7 para. 3 of the GDPR

 

You can also give us your consent to process your personal data. Your consent always refers to a specific processing purpose.

 

If you have given us your consent, you are entitled as a data subject to withdraw your consent pursuant to Art. 7 para. 3 of the GDPR at any time.

 

Please note that the data processing carried out based on your consent until the withdrawal remains lawful. The lawfulness of the data processing is therefore not affected by your withdrawal. We will inform you of this before you give your consent.

 

Should you withdraw your consent, we will immediately stop the activity to which you have previously consented. However, this does not apply if, in our opinion, there are other reasons for the lawful processing of your personal data. In this case, we will inform you that we will continue processing your personal data. We will also inform you of the legal basis that justifies our processing of your personal data.

 

7. Right to lodge a complaint with a supervisory authority under Art. 77 of the GDPR

 

As data subject, you have the right to lodge a complaint with a supervisory authority if the requirements of Art. 77 of the GDPR are met.

 

The supervisory authority responsible for us is:

 

Commission de la Protection de la Vie Privée

Rue de la Presse 35
1000 Bruxelles

Telefon: +32 (0) 2 274 48 00

E-Mail: contact@apd-gba.be

 

8. Right to object under Art. 21 of the GDPR

 

As a data subject, you have the right to object if the requirements of Art. 21 of the GDPR are met.

 

Based on the right of objection pursuant to Art. 21 of the GDPR, you can object to the processing of your personal data at any time. We will inform you as a data subject of your right to object explicitly at the latest at the time of the first communication with you.

 

If you would like to make use of your right of withdrawal or objection, you are welcome to send us an e-mail to the following address:

 

Kristof.oeyen@fixit2rail.be

 

There are two different rights of objection, on the one hand, the right of objection on grounds relating to the data subject´s particular situation (see a.) and on the other hand, the right to object to direct marketing (see b.).

 

 

a. Objection on grounds relating to the data subject´s particular situation, 21 of the GDPR

 

As a data subject, you have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you, which is based on Art. 6 para. 1 lit. e) or f) of the GDPR. This also applies to profiling.

 

In case of an objection, on grounds relating to your particular situation, we will no longer process the personal data concerned, unless we can demonstrate compelling legitimate reasons for processing which outweigh your interests, rights, and freedoms, or unless the processing serves to assert, exercise or defend legal claims.

 

The full extent of your right to object can be found in Art. 21 of the GDPR.

 

b. Right to object to direct marketing

 

Where personal data is processed for direct marketing purposes, you shall have the right to object at any time to processing of personal data concerning you for such marketing. This includes profiling to the extent that it is related to such direct marketing.

 

If you object to processing for direct marketing purposes, we will no longer process the concerned personal data for such purposes. We are therefore not allowed to send you any more direct advertising afterward.

 

The full extent of your right to object can be found in Art. 21 of the GDPR.