Data protection is of a particularly high priority for the management of Weldspace. The surfing of the www.weldspace.com website is possible without any indication of personal data. However, if you want to use our services to their full extent, the processing of personal data could become necessary.
Personal data is processed by us only as necessary and for the purpose of providing a functional and user-friendly website, including its contents and the services offered there.
In accordance with the General Data Protection Regulation (hereinafter referred to as "GDPR"),
"personal data" is any information relating to an identified or identifiable living individual. Various pieces of information that together can lead to the identification of a specific person also constitute personal data. Personal data that have been anonymized, encrypted or pseudonymized, but can be used to re-identify an individual, remain personal data and fall within the scope of the General Data Protection Regulation. Personal data that have been anonymized in such a way that the data subject cannot be identified or can no longer be identified are no longer considered personal data. For the data to be truly anonymized, the anonymization must be irreversible.
"processing" means any operation or set of operations which is performed upon personal data, whether or not by automatic means, such as collection, recording, organization, filing, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
Weldspace respects your right to privacy and is committed to the following key principles:
- We protect your privacy and aim to provide you with a service that is tailored to your needs.
- Personal data is collected for specific purposes based on your consent or a legitimate interest when you contact us.
- You have the right to information and access to your personal data at any time and may request its correction or deletion.
- We do not sell your personal data to third parties. However, if necessary and if explicitly mentioned afterwards or if you have consented, we may share your data with group companies, brand licensees, partners and other service providers. In this case, their own privacy policies may also apply.
- We take all reasonable measures to ensure the security and protection of your data from misuse.
Name and address of the controller
The controller within the meaning of the General Data Protection Regulation, other data protection laws is:
Estonia, Tallinn, Lennujaama tee 7
What data do we process?
We process your personal data. This is any information relating to an identified or identifiable individual (Art. 4 No. 1 GDPR). We process contact data of our users, business partners and other third parties. We also process other information on personal and economic circumstances, insofar as this is necessary for the provision of our services. We also process data that we do not receive from you directly, but from other third parties. In this context, we also include data from publicly accessible sources, namely directories, registers and the freely accessible Internet. The specification of the data processing depends on the use of the respective function. You will find further supplementary information there in each case.
Information we collect
We may collect, store and use the following types of personal information:
- Master Data (e.g., person master data, names and uploaded certificates).
- Contact Data (e.g., email, phone numbers).
- Content data (e.g. text input in our website)
- Usage data (e.g., web sites visited, interest in content, access times).
- Meta/communication data (e.g., device information, IP addresses).
How we use information
The main reason we use your information is to provide and improve our services. We also use your information to protect you and to provide you with advertisements that may be of interest to you. Read on for a more detailed explanation of the various reasons we use your information, along with practical examples.
- To provide our services to you
- To provide you with customer support and respond to your inquiries
- To communicate with you about our services
- To improve our services and develop new services
- To conduct research and analysis of user behavior to improve our services and content (e.g., we may decide to change the look and feel or even substantially modify a particular feature based on user behavior)
- To develop new features and services
- To prevent, detect and respond to fraud or other illegal or unauthorized activities
- To address ongoing or perceived misconduct
- To perform data analysis to better understand these activities and develop countermeasures
- To retain data related to fraudulent activity to prevent recurrence
- To ensure compliance with laws
- To comply with legal requirements
- To assist law enforcement
How do we collect your data?
On the one hand, your data is collected by you providing it to us. Other data is collected automatically by our IT systems when you visit the website. This is mainly technical data (e.g. Internet browser, operating system or time of page view). This data is collected automatically as soon as you enter our website.
What do we use your data for?
Some of the data is collected to ensure error-free provision of the website. Other data may be used to analyze your user behavior and to provide our services
We use so-called cookies with our internet presence. Cookies are small text files or other storage technologies that are placed and stored on your end device by the Internet browser you use. These cookies are used to process certain information about you on an individual basis, such as your browser or location data or your IP address.
This processing makes our website more user-friendly, effective and secure. The legal basis for this processing is a contract, insofar as these cookies data are processed for the purpose of initiating or executing a contract. If the processing does not serve to initiate or execute a contract, our legitimate interest lies in improving the functionality of our website. In this case, the legal basis is our legitimate interest.
For technical reasons, in particular to ensure a secure and stable Internet presence, data is transmitted by your Internet browser to us or to our web space provider. These so-called server log files include the type and version of your internet browser, the operating system, the website from which you accessed our website (referrer URL), the website(s) of our website that you visit, the date and time of the respective access as well as the IP address of the internet connection from which our website is used.
The data collected in this way is temporarily stored, but not together with other data about you. This storage takes place on the legal basis of our legitimate interest. Our legitimate interest lies in the improvement, stability, functionality and security of our website. The data is deleted again after 30 days at the latest, unless further storage is required for evidence purposes. Otherwise, the data is exempt from deletion in whole or in part until the final clarification of an incident.
If you send us inquiries via our contact form, your data from the inquiry form, including the contact data you provided there, will be stored by us for the purpose of processing the inquiry and in case of follow-up questions. We do not pass on this data without your consent.
The processing of the data entered in the contact form is therefore based exclusively on your consent (Art. 6 para. 1 lit. a GDPR). You can revoke this consent at any time. For this purpose, an informal communication by e-mail to us is sufficient. The legality of the data processing operations carried out until the revocation remains unaffected by the revocation.
The data you entered in the contact form will remain with us until you request us to delete it, revoke your consent to store it, or the purpose for storing the data no longer applies (e.g. after we have completed processing your request). Mandatory legal provisions - in particular retention periods - remain unaffected.
We process inventory data (e.g., names and addresses as well as contact data of users), contract data (e.g., services used, names of contact persons, payment information) for the purpose of fulfilling our contractual obligations and services pursuant to Art. 6 para. 1 lit b. GDPR.
Users can optionally create an Employer or an Employee user account. As part of the registration process, users are provided with the required mandatory information. The user accounts are not public and cannot be indexed by search engines. However, user profiles are accessible for other users of Weldspace.
If the user has created a user account and has canceled the user account and requests deletion of the data by telephone, post or e-mail, their data will be deleted with regard to the user account, subject to their retention being necessary for reasons of commercial or tax law in accordance with Art. 6 para. 1 lit. c of the GDPR. It is the responsibility of the users to save their data in the event of termination before the end of the contract. We are entitled to irretrievably delete all user data stored during the term of the contract.
Within the scope of registration and renewed registrations as well as the use of our online services, we store the IP address, the time as well as further information which is part of the Hypertext Transfer Protocol (HTTP). The storage is based on our legitimate interests as well as those of the users in protection against misuse and other unauthorized use. In principle, this data is not passed on to third parties unless it is necessary for the pursuit of our claims or there is a legal obligation to do so in accordance with Art. 6 Para. 1 lit. c GDPR.
The legal basis for the processing of your personal data in the context of direct marketing measures is either your consent or our legitimate interest in marketing and promoting our services. The purpose of processing your personal data in the context of direct marketing measures is to send information, offers and, if applicable, to promote sales.
Your personal data will be deleted as soon as they are no longer necessary to achieve the purpose for which they were collected; this is the case in particular upon receipt of the revocation or objection. You can revoke your consent or object to the processing of your personal data in the context of direct marketing measures at any time for the future.
Commercial and business services
We process data of our contractual and business partners, e.g., customers and interested parties in the context of contractual and comparable legal relationships as well as related measures and in the context of communication with contractual partners (or pre-contractual), e.g., to answer inquiries.
We process this data to fulfill our contractual obligations, to secure our rights and for the purposes of the administrative tasks associated with this information as well as for business organization. We only disclose the data of the contractual partners to third parties within the scope of the applicable law to the extent that this is necessary for the aforementioned purposes or for the fulfillment of legal obligations or with the consent of the contractual partners (e.g., to participating telecommunications, transport, and other auxiliary services as well as subcontractors, banks, tax and legal advisers, payment service providers or tax authorities).
Unless otherwise specified, the purposes of processing are Contractual performance and service, contact requests and communication, office and organizational procedures, administration, and response to requests, visit action evaluation, interest-based and behavioral marketing. And, the Legal bases are Contractual performance and pre-contractual inquiries, Legal obligation, and our Legitimate interests.
We process the data of our customers and clients in order to enable them to use our services. Unless otherwise specified, the purposes of processing are Contractual performance and service, contact requests and communication, office and organizational procedures, administration, and response to requests, visit action evaluation, interest-based and behavioral marketing. And, the Legal bases are Contractual performance and pre-contractual inquiries, Legal obligation, and our Legitimate interests.
Legal defense and enforcement of our rights
The legal basis for the processing of your personal data in the context of legal defense and enforcement of our rights is our legitimate interest. The purpose of processing your personal data in the context of legal defense and enforcement of our rights is the defense against unjustified claims and the legal enforcement and assertion of claims and rights.
Your personal data will be deleted as soon as they are no longer necessary to achieve the purpose for which they were collected. The processing of your personal data in the context of legal defense and enforcement is mandatory for legal defense and enforcement of our rights. Consequently, there is no possibility for you to object.
We only use Google Analytics with IP anonymization activated. This means that the IP address of the user is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. The IP address transmitted by the user's browser will not be merged with other data from Google.
Users can prevent the storage of cookies by setting their browser software accordingly; users can also prevent the collection of the data generated by the cookie and related to their use of the online offer to Google as well as the processing of this data by Google by downloading and installing the browser plugin available under the following link: http://tools.google.com/dlpage/gaoptout?hl=en.
For more information on Google's use of data for advertising purposes, settings and opt-out options, please visit the Google websites: https://www.google.com/intl/en/policies/privacy/partners/ ("Data use by Google when you use our partners' websites or apps"), http://www.google.com/policies/technologies/ads ("Data use for advertising purposes"), http://www.google.com/settings/ads ("Manage the information Google uses to show you ads") and http://www.google.com/ads/preferences/ ("Determine what ads Google shows you").
Duration of storage and routine deletion of personal data
We process and store your personal data only for the period of time required to fulfill the purpose of storage or if this has been provided for, in laws or regulations. After the purpose has ceased to exist or has been fulfilled, your personal data will be deleted or blocked.
In the case of blocking, deletion will take place as soon as legal, statutory or contractual retention periods do not conflict with this, there is no reason to assume that deletion would impair your interests worthy of protection and deletion would not cause a disproportionately high expense due to the special nature of the storage.
Data transfer to third countries
If we use service providers in third countries, we take additional measures to ensure an adequate level of data protection for the transfer of personal data in accordance with Art. 44 of the GDPR and thus ensure that the transfer is generally permissible and that the special requirements for a transfer to a third country are met (e.g. by concluding standard contracts and additional guarantees, supplementary technical and organizational measures such as encryption or anonymization).
To protect the security of your data during transmission, we use state-of-the-art encryption procedures (e.g. SSL) via HTTPS.
The data you enter on our social media pages, such as comments, videos, pictures, likes, public messages, etc. are published by the social media platform and are not used or processed by us for any other purpose at any time. We only reserve the right to delete content if this should be necessary. Where applicable, we share your content on our site if this is a function of the social media platform and communicate with you via the social media platform. The legal basis is our legitimate interest. The data processing is carried out in the interest of our public relations and communication.
If you wish to object to certain data processing over which we have an influence, please contact us. We will then examine your objection. If you send us a request on the social media platform, we may also refer you to other secure communication channels that guarantee confidentiality, depending on the response required. You always have the option of sending us confidential inquiries to our address stated in the imprint.
As already stated, where the social media platform provider gives us the opportunity, we take care to design our social media pages to be as data protection compliant as possible. With regard to statistics that the provider of the social media platform makes available to us, we can only influence these to a limited extent and cannot switch them off. However, we make sure that no additional optional statistics are made available to us.
Data processing by the operator of the social media platform
The operator of the social media platform uses web tracking methods. The web tracking can also take place regardless of whether you are logged in or registered with the social media platform. As already explained, we can unfortunately hardly influence the web tracking methods of the social media platform. We cannot, for example, switch this off.
Please be aware: It cannot be ruled out that the provider of the social media platform uses your profile and behavioral data, for example to evaluate your habits, personal relationships, preferences, etc. We have no influence on this. In this respect, we have no influence on the processing of your data by the provider of the social media platform.
What rights do you have?
With regard to the data processing described in more detail below, users and data subjects have the right
- to confirmation as to whether data relating to them is being processed,
- to information about the data processed, to further information about the data processing and to copies of the data;
- to correction or completion of incorrect or incomplete data;
- to immediate erasure of the data concerning them;
- to receive the data concerning them and provided by them and to transfer this data to other providers/controllers;
- to lodge a complaint with the supervisory authority if they are of the opinion that the data concerning them is being processed by the provider in breach of data protection provisions.
In addition, the provider is obliged to inform all recipients to whom data has been disclosed by the provider of any correction or deletion of data or restriction of processing that takes place. However, this obligation does not apply if such notification is impossible or involves a disproportionate effort. Notwithstanding this, the user has a right to information about these recipients.
Likewise, users and data subjects have the right to object to the future processing of data concerning them, insofar as the data is processed by the provider. In particular, an objection to data processing for the purpose of direct advertising is permissible.
The above rights may be limited in some circumstances, for example, if fulfilling your request would reveal personal information about another person, if you ask us to delete information which we are required to have by law, or if we have compelling legitimate interests to keep it. We will let you know if that is the case and will then only use your information for these purposes. You may also be unable to continue using our services if you want us to stop processing your personal information.
We encourage you to get in touch if you have any concerns with how we collect or use your personal information.
The legal bases for processing are listed below and at least one of these must apply whenever we process personal data:
- Consent: the individual has given clear consent to process personal data for a specific purpose.
- Contract: the processing is necessary for a contract or because you have asked us to take specific steps before entering into a contract.
- Legal obligation: the processing is necessary for us to comply with the law (not including contractual obligations).
- Vital interests: the processing is necessary to protect someone’s life.
- Public task: the processing is necessary for us to perform a task in the public interest or for official functions, and the task or function has a clear basis in law.
- Legitimate interests: the processing is necessary for our legitimate interests or the legitimate interests of a third party, unless there is a good reason to protect your personal data which overrides those legitimate interests.
We do not use automated decision-making or profiling.
Do Not Sell My Personal Information
We do not sell information that directly identifies you, like your name, address or phone records. However, you should note that all the information that you upload on the Portal, including your name and uploaded certificates, are made public to other users of the Portal.
It is important that the data we hold about you is accurate and current, therefore please keep us informed of any changes to your personal data.
Our website is not intended for children, and we do not knowingly collect data relating to children. If you become aware that your Child has provided us with Personal Data, without parental consent, please contact us, and we take the necessary steps to remove that information from our server.
Our website may containc links to the online offers of other providers. We hereby point out that we have no influence on the content of the linked online offers and the compliance with data protection regulations by their providers.
Concerns and Contact
If you have any concerns about a possible compromise of your privacy or misuse of your personal data on our part, or any other questions or comments, you can contact us.