Privacy Policy

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) and other applicable national and international data protection laws is:

Hereinafter referred to as “Arevano”, “we”, or “us”.

2. Data Protection Officer

Andre Maierhofer
Managing Director
E-Mail: info@areva-xno.com

3. General Information on Data Processing

We process personal data of our users only to the extent necessary to provide a functional website and our content and services. As a general rule, personal data is processed only with the consent of the user. An exception applies in cases where obtaining prior consent is not possible for factual reasons and the processing of the data is permitted by law.

Where we obtain the consent of the data subject for processing of personal data, Art. 6(1)(a) GDPR serves as the legal basis. When processing personal data necessary for the performance of a contract to which the data subject is a party, Art. 6(1)(b) GDPR serves as the legal basis. Where processing of personal data is necessary to comply with a legal obligation to which our company is subject, Art. 6(1)(c) GDPR serves as the legal basis. Where processing is necessary to protect a legitimate interest of our company or a third party and the interests, fundamental rights and freedoms of the data subject do not override the former, Art. 6(1)(f) GDPR serves as the legal basis.

4. Data Processing When Visiting Our Website

4.1 Server Log Files

Each time our website is accessed, our system automatically collects data and information from the computer system of the accessing device. The following data is collected:

• Information about the browser type and version used
• The user's operating system
• The user's internet service provider
• The user's IP address (anonymised)
• Date and time of access
• Websites from which the user's system accesses our website
• Websites accessed by the user's system via our website

The data is stored in our system's log files and automatically deleted after 14 days. No further storage together with other personal data of the user takes place. The legal basis is Art. 6(1)(f) GDPR. The legitimate interest arises from the need to ensure the functionality and security of the website.

4.2 Cookies

Our website uses cookies. Cookies are text files that are stored in the internet browser or by the internet browser on the user's computer system and enable the use of the website to be analysed.

We use technically necessary cookies only, which are required for the operation of the website (e.g. session cookies, language and display settings). The legal basis is Art. 6(1)(f) GDPR and Sec. 25(2) no. 2 TDDDG. We do not use analytics or tracking cookies.

External services that transfer data to third parties (Google Maps, Google reCAPTCHA) are loaded only after your consent (Art. 6(1)(a) GDPR, Sec. 25(1) TDDDG). Your choice is stored in your browser’s local storage (entry arevano-consent); no data is transmitted to us or to third parties in the process. You can change or withdraw your decision at any time via the “Privacy settings” link at the bottom of the page; this does not affect the lawfulness of processing carried out until then.

The fonts used on this website are served from our own server. No connection to Google Fonts is established.

You can prevent the storage of cookies by adjusting the settings of your browser software. Please note that if cookies are disabled, not all features of this website may be fully available.

5. Contact

5.1 Contact Form

Our website provides a contact form which can be used for electronic enquiries. If a user makes use of this option, the data entered in the input form is transmitted to us and stored:

• Name (required)
• Email address (required)
• Phone number (optional)
• Subject and message
• IP address as well as date and time of the enquiry

The legal basis for processing the data is Art. 6(1)(a) GDPR where the user has given consent. Where the contact aims at the conclusion of a contract, the additional legal basis is Art. 6(1)(b) GDPR. The data is deleted once the respective conversation with the user has ended, and no later than 30 days thereafter.

5.2 Email

If you contact us by email, the personal data you transmit will be processed solely for the purpose of handling your enquiry. The legal basis is Art. 6(1)(f) GDPR; where the enquiry is pre-contractual in nature, Art. 6(1)(b) GDPR applies. The data is deleted once your enquiry has been fully processed, provided no statutory retention obligations apply.

5.3 Abuse Protection (Google reCAPTCHA)

To protect our contact and support forms against spam and automated requests, we use Google reCAPTCHA Enterprise, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. In particular, your IP address, information about your browser and device, and information about your interaction with the page are transmitted to and evaluated by Google in order to determine whether an input was made by a human. A transfer to Google LLC in the USA is possible; Google LLC is certified under the EU-US Data Privacy Framework.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in protecting our website and forms against abuse. For further information, please see Google’s privacy policy: https://policies.google.com/privacy.

The reCAPTCHA script is loaded only once you consent in the privacy settings or submit a form. Without this check we cannot accept form submissions; in that case you can always reach us by email.

5.4 Map Display (Google Maps)

On our company page we embed map material from Google Maps, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

The map is not loaded automatically. Instead, you first see a placeholder with a button. Only when you press that button or consent in the privacy settings does your browser establish a connection to Google’s servers. In particular, your IP address, information about your browser and device, and usage data relating to the map are transmitted to Google. A transfer to Google LLC in the USA is possible; Google LLC is certified under the EU-US Data Privacy Framework.

The legal basis is your consent pursuant to Art. 6(1)(a) GDPR and Sec. 25(1) TDDDG. You can withdraw your consent at any time via the “Privacy settings” link at the bottom of the page. Without consent, the directions remain available as text. For further information, please see Google’s privacy policy: https://policies.google.com/privacy.

6. Disclosure of Data to Third Parties

Your personal data will not be transferred to third parties for purposes other than those listed below. We only disclose your personal data to third parties where:

• you have given your explicit consent pursuant to Art. 6(1)(a) GDPR,
• disclosure is necessary pursuant to Art. 6(1)(f) GDPR for the establishment, exercise or defence of legal claims and there is no reason to assume that you have an overriding legitimate interest in the non-disclosure of your data,
• there is a legal obligation to disclose pursuant to Art. 6(1)(c) GDPR, or
• this is necessary pursuant to Art. 6(1)(b) GDPR for the performance of a contract with you.

Where we engage processors, we have concluded data processing agreements with them in accordance with Art. 28 GDPR.

7. Data Security

During your visit to the website, we use the widely adopted SSL (Secure Socket Layer) protocol in conjunction with the highest level of encryption supported by your browser. We employ appropriate technical and organisational security measures to protect your personal data stored with us against accidental or intentional manipulation, partial or complete loss, destruction, or unauthorised access by third parties. Our security measures are continually improved in line with technological developments.

8. Rights of Data Subjects

With respect to your personal data stored with us, you have the following rights:

8.1 Right of Access (Art. 15 GDPR)

You have the right to request from us confirmation as to whether personal data concerning you is being processed, and, where that is the case, access to the personal data and the information specified in Art. 15 GDPR.

8.2 Right to Rectification (Art. 16 GDPR)

You have the right to obtain from us without undue delay the rectification of inaccurate personal data concerning you and the completion of incomplete personal data.

8.3 Right to Erasure (Art. 17 GDPR)

You have the right to obtain from us the erasure of personal data concerning you without undue delay where one of the grounds listed in Art. 17 GDPR applies and where processing is not necessary.

8.4 Right to Restriction of Processing (Art. 18 GDPR)

You have the right to obtain from us restriction of processing of your personal data where one of the conditions set out in Art. 18(1)(a) to (d) GDPR applies.

8.5 Right to Data Portability (Art. 20 GDPR)

You have the right to receive the personal data concerning you which you have provided to us in a structured, commonly used and machine-readable format, and you have the right to transmit that data to another controller.

8.6 Right to Object (Art. 21 GDPR)

You have the right to object at any time, on grounds relating to your particular situation, to processing of personal data concerning you which is carried out on the basis of Art. 6(1)(e) or (f) GDPR.

8.7 Right to Withdraw Consent (Art. 7(3) GDPR)

You have the right to withdraw any consent given to us at any time. This means that we will no longer continue the data processing that was based on such consent going forward. The lawfulness of processing carried out on the basis of consent before its withdrawal is not affected.

8.8 Right to Lodge a Complaint with a Supervisory Authority (Art. 77 GDPR)

You have the right to lodge a complaint with a data protection supervisory authority, in particular in the Member State of your habitual residence, your place of work or the place of the alleged infringement, if you consider that the processing of personal data relating to you infringes the GDPR. The supervisory authority competent for us is the Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 18, 91522 Ansbach, Germany.

To exercise your rights, please contact: info@areva-xno.com