The controller within the meaning of the General Data Protection Regulation, further data protection laws applicable in the member states of the European Union, and other provisions of a data protection nature is:
Badische Stahlwerke GmbH
Graudenzer Strasse 45
Tel.: 07851 – 83-0
Article 6(1)(a) GDPR is our company’s legal basis for processing operations, for which we obtain consent for a specific processing purpose. If the processing of personal data is necessary to fulfill a contract to which the data subject is a party, as is the case for example with processing operations that are necessary for the delivery of goods or the provision of other services or return services, the processing is based on Article 6(1)(b) GDPR. The same applies to processing operations that are necessary to carry out pre-contractual measures, for example in cases of inquiries about our products or services. If our company is subject to a legal obligation which requires the processing of personal data, for example to fulfill tax obligations, the processing is based on Article 6(1)(c) GDPR. In rare cases, it may be necessary to process personal data in order to protect the vital interests of the data subject or another natural person. This would be the case, for example, if a visitor to our company were injured and their name, age, health insurance data, or other vital information would need to be disclosed to a physician, hospital, or other third party. Then the processing would be based on Article 6(1)(d) GDPR. Lastly, processing operations could be based on Article 6(1)(f) GDPR. This forms the legal basis for processing operations that are not covered by any of the aforementioned legal bases if the processing is necessary to safeguard a legitimate interest of our company or a third party, provided that the interests, fundamental rights, and freedoms of the data subject do not outweigh ours. The reason we are permitted to carry out such processing operations is because they have been specifically mentioned by the European legislator. In this respect, the legislator is of the opinion that a legitimate interest could be assumed if the data subject is a customer of the controller (recital 47 sentence 2 GDPR).
Our online presence contains links to external third-party websites; we have no influence on this content. Thus, we also cannot accept any liability for this third-party content. The respective provider or operator of the website is always responsible for the content of the linked websites. At the time that they were linked, these linked webpages were checked for possible legal violations. No illegal content was recognized at the time that the link was created. It is not reasonable to permanently monitor the content of the linked websites without concrete evidence of a legal violation. As soon as we become aware of legal violations, we will remove such links immediately.