Privacy Policy

1. Controllers

The controllers within the meaning of the General Data Protection Regulation (GDPR) and other applicable national and international data protection laws are:

Hereinafter collectively referred to as “Arevano”, “we”, or “us”.

2. Data Protection Officer

Andre Maierhofer
Managing Director
E-Mail: info@areva-xno.com

3. General Information on Data Processing

We process personal data of our users only to the extent necessary to provide a functional website and our content and services. As a general rule, personal data is processed only with the consent of the user. An exception applies in cases where obtaining prior consent is not possible for factual reasons and the processing of the data is permitted by law.

Where we obtain the consent of the data subject for processing of personal data, Art. 6(1)(a) GDPR serves as the legal basis. When processing personal data necessary for the performance of a contract to which the data subject is a party, Art. 6(1)(b) GDPR serves as the legal basis. Where processing of personal data is necessary to comply with a legal obligation to which our company is subject, Art. 6(1)(c) GDPR serves as the legal basis. Where processing is necessary to protect a legitimate interest of our company or a third party and the interests, fundamental rights and freedoms of the data subject do not override the former, Art. 6(1)(f) GDPR serves as the legal basis.

4. Data Processing When Visiting Our Website

4.1 Server Log Files

Each time our website is accessed, our system automatically collects data and information from the computer system of the accessing device. The following data is collected:

• Information about the browser type and version used
• The user's operating system
• The user's internet service provider
• The user's IP address (anonymised)
• Date and time of access
• Websites from which the user's system accesses our website
• Websites accessed by the user's system via our website

The data is stored in our system's log files and automatically deleted after 14 days. No further storage together with other personal data of the user takes place. The legal basis is Art. 6(1)(f) GDPR. The legitimate interest arises from the need to ensure the functionality and security of the website.

4.2 Cookies

Our website uses cookies. Cookies are text files that are stored in the internet browser or by the internet browser on the user's computer system and enable the use of the website to be analysed.

We use technically necessary cookies that are strictly required for the operation of the website (e.g. session cookies, language settings). The legal basis is Art. 6(1)(f) GDPR. In addition, we use analytics cookies only with your explicit consent (Art. 6(1)(a) GDPR).

You can prevent the storage of cookies by adjusting the settings of your browser software. Please note that if cookies are disabled, not all features of this website may be fully available.

5. Contact

5.1 Contact Form

Our website provides a contact form which can be used for electronic enquiries. If a user makes use of this option, the data entered in the input form is transmitted to us and stored:

• Name (required)
• Email address (required)
• Phone number (optional)
• Subject and message
• IP address as well as date and time of the enquiry

The legal basis for processing the data is Art. 6(1)(a) GDPR where the user has given consent. Where the contact aims at the conclusion of a contract, the additional legal basis is Art. 6(1)(b) GDPR. The data is deleted once the respective conversation with the user has ended, and no later than 30 days thereafter.

5.2 Email

If you contact us by email, the personal data you transmit will be processed solely for the purpose of handling your enquiry. The legal basis is Art. 6(1)(f) GDPR; where the enquiry is pre-contractual in nature, Art. 6(1)(b) GDPR applies. The data is deleted once your enquiry has been fully processed, provided no statutory retention obligations apply.

6. Disclosure of Data to Third Parties

Your personal data will not be transferred to third parties for purposes other than those listed below. We only disclose your personal data to third parties where:

• you have given your explicit consent pursuant to Art. 6(1)(a) GDPR,
• disclosure is necessary pursuant to Art. 6(1)(f) GDPR for the establishment, exercise or defence of legal claims and there is no reason to assume that you have an overriding legitimate interest in the non-disclosure of your data,
• there is a legal obligation to disclose pursuant to Art. 6(1)(c) GDPR, or
• this is necessary pursuant to Art. 6(1)(b) GDPR for the performance of a contract with you.

Where we engage processors, we have concluded data processing agreements with them in accordance with Art. 28 GDPR.

7. Data Security

During your visit to the website, we use the widely adopted SSL (Secure Socket Layer) protocol in conjunction with the highest level of encryption supported by your browser. We employ appropriate technical and organisational security measures to protect your personal data stored with us against accidental or intentional manipulation, partial or complete loss, destruction, or unauthorised access by third parties. Our security measures are continually improved in line with technological developments.

8. Rights of Data Subjects

With respect to your personal data stored with us, you have the following rights:

8.1 Right of Access (Art. 15 GDPR)

You have the right to request from us confirmation as to whether personal data concerning you is being processed, and, where that is the case, access to the personal data and the information specified in Art. 15 GDPR.

8.2 Right to Rectification (Art. 16 GDPR)

You have the right to obtain from us without undue delay the rectification of inaccurate personal data concerning you and the completion of incomplete personal data.

8.3 Right to Erasure (Art. 17 GDPR)

You have the right to obtain from us the erasure of personal data concerning you without undue delay where one of the grounds listed in Art. 17 GDPR applies and where processing is not necessary.

8.4 Right to Restriction of Processing (Art. 18 GDPR)

You have the right to obtain from us restriction of processing of your personal data where one of the conditions set out in Art. 18(1)(a) to (d) GDPR applies.

8.5 Right to Data Portability (Art. 20 GDPR)

You have the right to receive the personal data concerning you which you have provided to us in a structured, commonly used and machine-readable format, and you have the right to transmit that data to another controller.

8.6 Right to Object (Art. 21 GDPR)

You have the right to object at any time, on grounds relating to your particular situation, to processing of personal data concerning you which is carried out on the basis of Art. 6(1)(e) or (f) GDPR.

8.7 Right to Withdraw Consent (Art. 7(3) GDPR)

You have the right to withdraw any consent given to us at any time. This means that we will no longer continue the data processing that was based on such consent going forward. The lawfulness of processing carried out on the basis of consent before its withdrawal is not affected.

8.8 Right to Lodge a Complaint with a Supervisory Authority (Art. 77 GDPR)

You have the right to lodge a complaint with a data protection supervisory authority, in particular in the Member State of your habitual residence, your place of work or the place of the alleged infringement, if you consider that the processing of personal data relating to you infringes the GDPR. The competent supervisory authority for Arevano companies is the Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 18, 91522 Ansbach, Germany.

To exercise your rights, please contact: info@areva-xno.com