SULO Deutschland GmbH takes the protection of personal data very seriously. It is therefore important to us to protect your data, which may be collected during your visit to sulo.com. The legal provisions for the protection of your data can be found in the Basic Data Protection Regulation and the Federal Data Protection Act.
The responsible body pursuant to Art. 4 Para. 7 of the EU General Data Protection Regulation (DS-GVO) is
SULO Germany GmbH
Bünder Str. 85
D-32051 Herford
Phone: +49 5221 598-01
E-mail:
You can reach our data protection officer at our postal address with the addition "the data protection officer" or at .
SULO Deutschland GmbH takes the protection of personal data very seriously. It is therefore important to us to protect your data, which may be collected during your visit to sulo.com. The legal provisions for the protection of your data can be found in the Basic Data Protection Regulation and the Federal Data Protection Act.
The responsible body according to Art. 4 Para. 7 EU Data Protection Regulation (DS-GVO) is SULO Deutschland GmbH, Bünder Str. 85, D-32051 Herford, Tel.: +49 5221 598-01, E-Mail: . You can reach our data protection officer at our postal address with the addition "the data protection officer" or at .
Below you will find information on what data we collect during your visit to our site and how it is used. If you have any further questions, please feel free to contact us at .
You also have the right to complain to the relevant supervisory authority in the event of unlawful use of data. This is:
State Commissioner for Data Protection and Freedom of Information
North Rhine-Westphalia
PO Box 20 04 44
40102 Düsseldorf
Tel.: 0211/38424-0
Fax: +49 211/38424-10
E-mail:
Server data collection
When you visit our site, various server statistics are automatically stored, which your browser transmits to our provider's server. These are:
- IP address
- Date and time of the request
- Content of the request (specific page)
- Access status/HTTP status code
- Amount of data transferred in each case
- Website from which the request came
- browser
- Operating system and its interface
- Language and version of the browser software
When you use our website for information purposes only, i.e. if you do not register or otherwise transmit information to us, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure its stability and security (legal basis is Art. 6 para. 1 p. 1 lit. f DS-GVO):
In principle, you have the right to object to this data collection. This is exceptionally not factually possible here, as otherwise the use of the site would be impossible.
Use and disclosure of personal data
General
Insofar as you have provided us with personal data, e.g. name, address, etc., we use this data to answer your enquiries, to advise you and process contracts concluded with you and for technical administration. Your personal data will only be passed on to third parties or otherwise transferred if this is necessary for the purpose of processing the contract, if this is necessary for billing purposes or if you have given your prior consent. You have the right to revoke your consent at any time with effect for the future, see your data subject rights.
Contract processing
In the context of contracts concluded with you, we collect and store the personal data you provide, e.g. name, address, for the purpose of processing the contract, e.g. also for invoicing. The data is passed on to banks in the context of billing. The billing data is transferred to the tax office and the tax office within the framework of tax law requirements. The legal basis for the collection and processing of the data is Art. 6 I (b) DSGVO in the context of contract processing. The legal basis for the transfer of data to the tax office and the tax office is Art. 6 I (c) DSGVO. This data is deleted after expiry of the applicable statutory retention obligations. If we are not subject to any statutory retention obligations, the data will be deleted when the purpose ceases to apply.
Contact form and enquiry by e-mail
When using our contact form, we collect and store the name and e-mail address for the purpose of answering your enquiry. This data is sent to us by e-mail.
If you send us a contact request by e-mail, we collect and store the e-mail address and the data contained in the e-mail. The legal basis is Art. 6 I (a) DSGVO, as you consent to the above-mentioned processing of your data when using the form as well as when sending us an e-mail. The deletion of the data takes place when the purpose of the storage has ceased to apply, i.e. after answering your e-mail/contact form enquiry or when the matter connected with the enquiry has been conclusively clarified. In this respect, the statutory retention periods apply in the event of a mandate being taken on. You have the right to revoke your consent at any time without affecting the lawfulness of the processing carried out on the basis of your consent.
For the right to deletion and information, see your data subject rights.
(Online) applications
If you apply for a job with us, your personal data such as name, address and telephone number will be collected by us and stored for the duration of the selection process. Your data will only be used by authorised persons of the personnel department or the management for processing within the scope of the selection procedure. Your personal data will not be passed on to third parties.
If you send us an unsolicited application using our general contact e-mail address, the content of your application e-mail may be viewed by unauthorised personnel. There is a requirement that the application documents are immediately forwarded to the personnel department unopened and that the incoming and forwarded e-mails are deleted. If you would like to exclude this, please contact us by telephone before submitting your unsolicited application so that we can provide you with the contact details of the correct contact person.
The legal basis is Art. 6 I (a) DSGVO, as you consent to the above-mentioned processing of your data when sending the application documents.
Deletion takes place if you revoke your consent to the use of this data without affecting the lawfulness of the processing carried out on the basis of the consent, unless statutory retention periods intervene. In these cases, blocking takes the place of deletion. Otherwise, application documents will be deleted after a period of 3 months following the end of the selection procedure, unless you have expressly consented to the retention of your application data for future advertisements.
You have the right to access and object to your data stored by us at any time, see your data subject rights.
Cookies
This site uses cookies. These are small text files that are stored in your internet browser (e.g. Firefox, Chrome, Microsoft Explorer/Edge, Safari etc.) or by it on your computer (i.e. your operating system) when you visit our site. With the help of the cookie, which contains a certain string of characters, our website recognises your internet browser when you call it up again. We use our own cookies, so-called session cookies.
Specifically, we use the following cookies:
- "PHPSESSID" (the PHP session required by the server).
- "qtrans_front language" this stores the last language set for the user so that he or she also ends up directly at the same language selection on a later visit.
The legal basis is Art. 6 I (f). Our legitimate interest results from the fact that we only facilitate the accessibility of the page for you with the aforementioned cookies, do not collect any tracking data in the process and therefore there is no interference with your personal rights and fundamental freedoms.
You can exclude the acceptance of cookies in your web browser. However, this may impair the functionality of the site. For more information on your rights as a data subject, see below.
These cookies are only valid for the duration of your browser session and are deleted when you end your visit to our site.
Data subject rights
Information rights
You have the right at any time to receive free information about the personal data we have stored about you. You can request information about the following. We must provide the information within one month:
(1) the purposes for which the personal data are processed;
(2) the categories of personal data processed;
(3) the recipients or categories of recipients to whom the personal data concerning you have been or will be disclosed;
(4) the envisaged duration of the storage of the personal data concerning you or, if specific information on this is not possible, criteria for determining the storage period;
(5) the existence of a right to obtain the rectification or erasure of personal data concerning you, a right to obtain the restriction of processing by the controller or a right to object to such processing;
(6) the existence of a right of appeal to a supervisory authority;
(7) any available information on the origin of the data if the personal data are not collected from the data subject;
(8) the existence of automated decision-making, including profiling, pursuant to Article 22(1) and (4) of the GDPR and, at least in these cases, meaningful information about the logic involved and the scope and intended effects of such processing for the data subject. We would like to point out that such automated decision-making processes do not take place on our part.
(9) whether the personal data concerning you will be transferred to a third country or to an international organisation. In this context, you may request to be informed about the appropriate safeguards pursuant to Article 46 of the GDPR in connection with the transfer.
Right to rectification
You have the right to request that we correct any inaccurate personal data relating to you or complete any incomplete personal data without undue delay.
Right to erasure
Right to erasure
You have the right to have the personal data concerning you erased without undue delay and we are obliged to erase this data without undue delay if one of the following reasons applies:
(1) The personal data concerning you are no longer necessary for the purposes for which they were collected or otherwise processed.
(2) You withdraw your consent on which the processing was based pursuant to Art. 6 I (a) and there is no other legal basis for the processing.
(3) You object to the processing of your data collected on the basis of our legitimate interests as set out (e.g. Google Analytics) pursuant to Article 21 I of the GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing in the context of direct marketing pursuant to Article 21 II of the GDPR.
(4) The personal data concerning you has been processed by us unlawfully, for example without consent or without legitimate interests.
(5) The deletion of the personal data concerning you is necessary to comply with a legal obligation imposed on us under Union or German law.
(6) The data was collected in the context of information society services offered to you as a minor in accordance with Art. 8 ADSGVO.
If we have published personal data about you and we are obliged to delete it for one of the aforementioned reasons, we will inform the companies on whose websites the data was published about your request for deletion in an appropriate manner and explain that you, as the data subject, have requested us to delete all links to this data and to delete all copies or replications.
Exceptions
The right to erasure does not exist insofar as the processing is necessary for
(1) for the exercise of the right to freedom of expression and information;
(2) for compliance with a legal obligation which requires processing under Union or German law, e.g. under tax retention obligations, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in us;
(3) for reasons of public interest in the area of public health pursuant to Art. Art.9 II (h) and (i) and Art.9 III DSGVO;
(4) for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes pursuant to Art. 89 (I) DSGVO, insofar as the right to erasure is likely to render impossible or seriously prejudice the achievement of the purposes of such processing; or
(5) for the assertion, exercise or defence of legal claims, e.g. in court proceedings.
Right to restriction of data processing
You have the right to request us to restrict processing if one of the following conditions is met:
(1) If you dispute the accuracy of the personal data, for a period of time that allows us to verify the accuracy of the personal data,
(2) If the processing is unlawful and you object to the erasure of the personal data and request the restriction of the use of the personal data instead.
(3) If we no longer need the personal data for the purposes of processing, but you require it for the assertion, exercise or defence of legal claims.
(4) If you have objected to the processing of your personal data that we collect on the basis of our legitimate interests as set out (e.g. Google Analytics), as long as it has not yet been determined whether our legitimate grounds outweigh your rights.
If processing has been restricted in accordance with the aforementioned grounds, this personal data may - apart from being stored - only be processed with your consent or for the assertion, exercise or defence of legal claims or for the protection of the rights of another natural or legal person (GmbH, AG, etc.) or for reasons of important public interest of the Union or a Member State.
If you have obtained the restriction of processing, you will be informed by us before the restriction is lifted.
Duty to notify
If you have exercised the right to rectification, erasure or restriction of processing, we are obliged to notify all recipients to whom personal data relating to you has been disclosed of this rectification or erasure of the data or restriction of processing, unless this proves impossible or involves a disproportionate effort.
You have the right to be informed about these recipients.
Right to portability
You have the right to receive the personal data concerning you that you have provided to us in a structured, common and machine-readable format. You also have the right to transfer this data to another company without hindrance from us, provided that.
(1) the processing is based on consent pursuant to Art. 6 (I) DSGVO or on a contract pursuant to Art. 6 I (b) DSGVO and
(2) the processing is carried out with the aid of automated procedures.
In exercising this right, you also have the right to have the personal data concerning you transferred directly from us to another company, insofar as this is technically feasible. The freedoms and rights of other persons must not be affected by this.
The right to data portability does not apply to the processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us.
Right to object
You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Article 6 I (e) - processing necessary for a task carried out in the public interest - or (f) DSGVO - processing carried out for our legitimate interest, e.g. online marketing; this also applies to profiling based on these provisions.
We will no longer process the personal data relating to you unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
If the personal data concerning you is processed for the purpose of direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing; this also applies to the processing insofar as it is related to such direct marketing.
If you object to the processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes.
You have the possibility, in connection with the use of information society services, notwithstanding Directive 2002/58/EC, to exercise your right to object by means of automated procedures using technical specifications.
Right to revoke the declaration of consent under data protection law
You have the right to revoke your declaration of consent under data protection law at any time. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.
Contact person for data subject rights
If we do not enable you to exercise your rights directly within the scope of processing, please contact us at or by post at the address given in the imprint.
Data security
We use the widespread SSL procedure (Secure Socket Layer) in connection with the highest level of encryption supported by your browser when you visit our website. As a rule, this is 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. You can tell whether an individual page of our website is encrypted by the closed key or lock symbol in the lower status bar of your browser.
We also use appropriate technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or against unauthorised access by third parties. Our security measures are continuously improved in line with technological developments.
Changes to the data protection declaration
We may update this privacy statement from time to time, in particular to reflect changes in legislation or case law. We therefore recommend that you visit our site regularly so that you are informed about the protection and processing of your data.
May 2018