ISI Industrie Service International GmbH is pleased to welcome you on the firm’s website and thanks you for your interest in our enterprise, our group of companies and our services.
General information regarding this data privacy statement
General data and information
The image, information and data material of ISI Industrie Service International GmbH made available on our website www.goisi.de is updated by an external service provider. We reserve the right to realize modifications and supplements in connection with the provided image, information and data material without further notice.
Name and contact data of the party responsible as per article 4, par. 7, DPA Regulation
Enterprise: ISI Industrie Service International GmbH
Address: Hubenkamp 1, 29614 Soltau
Phone: +49 5191 6060-200
Fax: +49 5191 6060-206
Security and protection of your personal data
We consider our main duty to observe the confidentiality of the personal data provided by you and to protect them from unauthorized access. Therefore, we exercise extreme diligence and apply up-to-date safety standards in order to guarantee the maximum protection of your personal data.
As a private-law company, we are subject to the stipulations of the European Data Protection Act Regulation (DPAReg) and the regulations of the Federal Data Protection Act (FDPA). We have taken technical and organisational measures to ensure that the regulations regarding the protection of data will be met be us as well as by our external service providers.
It is required by law that personal data will be processed lawfully in good faith and in a transparent manner which can be checked by the interested party (“legality, processing in good faith, transparency“). In order to guarantee such handling, below please find details of the individual legal definitions used also in this data privacy statement:
1. Personal data
„Personal data“ are all information details which refer to an identified or identifiable natural person (hereinafter referred to as „interested party“); a natural person is considered as identifiable when he or she can be identified directly or indirectly, especially by means of the assignment of an identifier such as a name, identification number, location data, online identification or one or several special features which are the expression of the physical, physiological, economic, cultural or social identity of said natural person.
„Processing“ refers to any operation executed with or without the help of automated procedures, or any such set of operations, performed in connection with personal data, i.e. their compilation, acquisition, organisation, sorting, storing, adjustment or modification, reading out, retrieval, use, disclosure by transmission, distribution or any other form of provision, reconciliation or linkage, limitation, deletion or destruction.
3. Limitation of processing
„Limitation of processing“ refers to the marking of stored personal data with the aim to limit their future processing.
„Profiling“ refers to any kind of automated processing of personal data consisting in the use of such personal data in order to assess certain personal aspects regarding a natural person, especially aspects helping to analyse or predict his or her work performance, economic situation, health, personal predilections, interests, reliability, behaviour patterns, whereabouts or changes of location.
„Pseudonymization“ refers to the processing of personal data in such a way that the personal data can no longer be assigned to a specific interested party without the use of additional information if such additional information is stored separately subject to technical and organisational measures ensuring that the personal data cannot be assigned to an identified or identifiable natural person.
6. File system
„File system“ refers to any structured collection of personal data which will be accessible in accordance with certain criteria, irrespective of whether such collection will be kept in a centralized or decentralized form or in accordance with functional or geographical considerations.
7. Person responsible
„Person responsible“ refers to a natural or legal person, entity, institution or any other body solely or jointly with others responsible for the decision regarding the purposes and means of the processing of personal data; in case the purposes and means of such processing should be determined by the European Union law or the laws of the member countries, the person responsible or the specific criteria of his appointment, respectively, can be stipulated by the European Union law or the law of the respective member countries.
„Processor“ refers to a natural or legal person, entity, institution or any other body processing the personal data by order of the person responsible.
„Recipient“ refers to a natural or legal person, entity, institution or any other body to which personal data will be disclosed, irrespective of whether it is a third party or not. However, entities receiving in case personal data within a specific investigation request in accordance with the European Union law or the law of the respective member countries will not be considered as recipients; the processing of such data by the entities in question will be realized in line with the applicable data protection regulations on the basis of the purposes of the processing.
10. Third party
„Third party“ refers to a natural or legal person, entity, institution or any other body with the exception of the interested party, the responsible, the processor and persons authorized to process the personal data under the direct responsibility of the responsible or the processor.
„Approval“ refers to the informed and unequivocally clear consent freely given by the interested party by means of a statement or any other action beyond doubt with respect to the specific case in which the interested party makes it clear that he or she agrees with the processing of the personal data concerning the interested party.
Legality of the processing
The processing of personal data will only be considered lawful if there exists a legal foundation for the processing. As per Art. 6, par. 1 lit. a – f DPAReg, legal foundations for the processing may be, above all, the following:
- The interested party consented to the processing of the personal data referring to him or her with respect to one or several specific purposes;
- the processing serves for the compliance with an agreement in connection with which the interested party is one of the contracting parties, or is required with respect to the realization of pre-contractual measures which will be undertaken upon request of the interested party;
- the processing is required in order to comply with a legal obligation to which the responsible is subjected;
- the processing is required in order to protect vital interests of the interested party or another natural person;
- the processing is required in order to comply with a task which is in the public interest or in order to exercise official authority which was conferred to the responsible;
- the processing is required in order to safeguard the rightful interests of the responsible or a third party unless there prevail the interests or fundamental rights and freedoms of the interested party requiring the protection of the personal data, especially if the party concerned is a child.
Information regarding the collection of personal data
(1) Below please find information about the collection of personal data in connection with the use of our website. Personal data are, among others, name, address, e-mail address, user behaviour.
(2) When contacting us by e-mail, firstname.lastname@example.org, your data (your e-mail address, in case your name and your phone number) will be stored by us in order to answer your questions. The data received in this connection will be deleted by us when their storage is no longer necessary or when the processing will be limited due to legal retention requirements.
Collection of personal data when visiting our website
When simply using our website for information purposes, i.e. if you do not register or send any further information, we will only collect the personal data transferred by your browser to the server of our provider. In case you want to have a look at our website, we will collect the following data which we need for technical reasons in order to display our website and to guarantee stability and security (the respective legal foundation is Art. 6, par. 1 lit. f DPAReg):
– IP address
– date and time of the inquiry
– time zone difference re Greenwich Mean Time (GMT)
– contents of the demand (specific page)
– access status /http status code
– respective transmitted data volume
– website from which the request is sent
– operating system and its respective interface
– language and version of the browser software
In addition to the data mentioned above, cookies will be stored on your computer when you use our website. Such cookies are small text files which will be assigned to the browser used by you and stored on your hard disk; specific information will be remitted to the party placing these cookies. Cookies are not able to execute programmes and do not transmit viruses to your computer. On the whole, they are used to make the internet offer more user-friendly and more efficient.
Information on the individual cookies used on our website can be found below:
Purpose: Session cookie
Retention period: Session
Purpose: Protection against malicious https requests, so-called cross-site request forgery requests
Retention period: Session
The legal basis for the use of this cookie is our legitimate interest in making our website available in accordance with Art. 6 Para. 1 lit. f) DSGVO.
Further functions and offers of our website
(1) In addition to the purely informative use of our website, we are also offering different services which could be of interest to you. In that case, as a rule you must indicate other personal data which will be used by us in order to provide the respective service subject to the aforementioned principles in connection with the processing of data.
(2) In part, we are making use of external providers to process your data. These providers were carefully chosen and selected by us; besides, they are bound to our instructions and are regularly monitored by us.
(3) Moreover, we can transmit your personal data to third parties in case the conclusion of contracts or similar services should be offered by us jointly with other partners. You will receive more detailed information in this connection when stating your personal data or below in the description of the offer.
(4) As far as our providers or partners are domiciled in a state outside the European Economic Area (EEA), we will inform you about the consequences of this fact in the description of our offer.
In general, our offers are directed to adults. Persons under 18 years of age should not transfer any personal data to us without the consent of their parents or legal guardians.
Rights of the interested party
(1) Revocation of consent
In case the processing of personal data should be based upon a given approval, you will be entitled to revoke such consent at any time. The legality of the processing of data realized due to such approval until its revocation will not be affected by such revocation.
You may contact us at any time in connection with the exercise of your right of revocation.
(2) Right of confirmation
You are entitled to request a confirmation by the responsible whether the respective personal data will be processed by us or not. You can request such confirmation at any time under the abovementioned contact data.
(3) Right to information
In case personal data should be processed, at any time you may request information on such personal data as well as the following information:
- the processing purposes;
- the categories of personal data which are processed;
- the recipients, or groups of recipients, to whom the personal data were disclosed or are still to be disclosed, especially recipients in third countries or international organizations;
- where possible, the intended period of storage of the personal data or, if not possible, the criteria for the fixing of the respective period;
- the existence of any right to rectify or delete the personal data referring to you or of any limitation regarding the processing by the responsible or of a right of objection against such processing;
- the existence of a right of appeal to a competent supervisory authority;
- in case the personal data should not be collected from the interested party, all available information regarding the origin of the data;
- the existence of an automated decision making including profiling as per Article 22, par. 1 and 4 DPAReg and – at least in such cases – significant information regarding the involved logic as well as the implications and the envisaged effects of such processing for the interested party.
In the event of a transmission of personal data to third countries or an international organization, you are entitled to information about the adequate guarantees as per Article 46 DPAReg in connection with the transmission. We will make available a copy of the personal data undergoing such processing. For any further copies requested by you, we may charge a reasonable compensation on the basis of our administrative expenses. In case of an electronic application by you, the information will be made available in a normal electronic format unless indicated otherwise. The right to receive a copy as per Article 3 may not impair the rights and freedoms of other persons.
(4) Right of rectification
You are entitled to demand the immediate rectification of incorrect personal data referring to you by us. Taking into consideration the purposes of the processing, you are entitled to request the completion of incomplete personal data – also via a supplementary statement.
(5) Right of deletion („Right to be forgotten“)
You are entitled to require the responsible to see to the immediate deletion of the personal data referring to you and we are obliged to delete personal data without delay in case one of the following reasons should be applicable:
- The personal data are no longer necessary for the purposes in connection with which they were collected or otherwise processed.
- The interested party revokes his or her approval upon which the processing is based as per Article 6, par. 6, letter a, or Article 9, par. 2, letter a, DPAReg, and there exists no other legal basis for the processing.
- The interested party files an objection against the processing as per Article 21, par. 1, DPAReg, and there exist no other imperative justified reasons for the processing, or the interested party files an objection against the processing as per Article 21, par. 2, DPAReg.
- The personal data were processed unlawfully.
- The deletion of the personal data is required in connection with the meeting of a legal obligation as per European Union law or the laws of the member countries by which the responsible is governed.
- The personal data were collected in connection with services offered by the information society as per Article 8, par. 1, DPAReg.
In case the responsible should have disclosed the personal data and should be bound to delete same as per par. 1, he will take the appropriate measures, including those of a technical nature, to inform those responsible for the processing of the data that an interested party requested the deletion of all links in connection with such personal data or copies or replications of same, taking into consideration the available technology and the implementation costs.
The right of deletion („right to be forgotten“) does not exist as far as the processing will be required:
– in order to exercise the right of freedom of expression and information;
– in order to meet a legal obligation requiring the processing in accordance with the European Union law or the laws of the member countries by which the responsible is governed, or in order to carry out a task which is in the public interest, or to exercise official authority transferred to the responsible;
– for reasons of public interest in the field of public health as per Article 9, par. 2, letters h and i, as well as Article 9, par. 3, DPAReg;
– for filing purposes as well as economic or historic research purposes in the public interest or for statistical purposes as per Article 89, par. 1, DPAReg, as far as the right indicated in par. 1 will probably make it impossible to realize the aims of this processing or seriously affect such aims, or
- in order to enforce, exercise or defend legal claims.
(6) Right to limit the processing
You are entitled to request the limitation of the processing of your personal data by us if one of the following requirements has been met:
- the correctness of the personal data is disputed by the interested party, that is for a period which enables the responsible to verify the correctness of the personal data;
- the processing is unlawful and the interested party refuses a deletion of the personal data, demanding instead a limitation of the use of said personal data;
- the responsible does no longer need the personal data, however, the interested party is in need of same in connection with the establishment, exercise or defence of legal claims; or
- the interested party filed an objection against the processing as per Article 21, par. 1, DPAReg, so that it is not yet certain whether the justified reasons of the responsible outweigh those of the interested party or not.
In case the processing should have been limited due to the aforesaid requirements, the personal data will only be processed - apart from their storing – with the approval of the interested party or in connection with the establishment, exercise or defence of legal claims or with regard to the protection of the rights of another natural or legal person or for reasons of substantial public interest of the European Union or a member country.
In order to exercise the right to limit the processing, the interested party can contact us at any time under the abovementioned contact data.
(7) Right of data portability
You are entitled to the transfer of the personal data you made available to us in a structured, common and machine-readable format, besides you are entitled to transfer such data to another responsible without being hindered by the responsible to whom the personal data were sent , provided that:
1) the processing is based upon an approval as per Article 6, par. 1, letter a, or Article 9, par. 2, letter a, or an agreement as per Article 6, par. 1, letter b, DPAReg, and
2) their processing is realized by means of automated procedures.
When exercising the right of data portability as per par. 1, you are entitled to demand the direct transmission of the personal data - as far as technically possible - from one responsible to the other responsible. The right of deletion („right to be forgotten”) will not be affected by the right of data portability. This right does not include any processing which is required in connection with the carrying out of a task in the public interest or the exercise of official authority transferred to the responsible.
(8) Right of objection
For reasons relating to your particular situation, you are entitled to file at any time an objection against the processing of personal data referring to you which will be realized as per Article 6, par. 1, letters e or f, DPAReg; this applies also with respect to a profiling based upon these respective stipulations. The responsible will no longer process the personal data unless he may indicate imperative reasons worth being protected which override the interests, rights and freedoms of the interested party, or the processing is required in connection with the exercise, enforcement or defence of legal claims.
In case personal data should be processed in order to engage in direct advertising, at any time you are entitled to file an objection against the processing of personal data referring to you for the purposes of such advertising; this refers also to a respective profiling as far as it is related to such direct advertising. In case you should object to the processing for purposes of direct advertising, the personal data will no longer be processed for such purposes.
In connection with the use of services of the information society, notwithstanding Directive 2002/58/EC you can exercise your right of objection by means of automated procedures using technical specifications.
For reasons relating to your particular situation, you are entitled to file an objection against the processing of personal data referring to you which will be realized for scientific or historic research purposes or statistical purposes as per Article 89, par. 1, unless such processing is required in order to meet a task in the public interest.
You can exercise the right of objection at any time by contacting the respective responsible.
(9) Automated decisions in particular cases including profiling
You are entitled to refuse being subjected to a decision exclusively based on automated processing - including profiling – which may have legal effects with respect to you or substantially affect you in a similar manner. The same does not apply if the decision:
1. is required for the conclusion of, or compliance with, an agreement between the interested party and the responsible;
2. must be permitted on account of legal provisions of the European Union or the member countries by which the responsible is governed, and such legal provisions include adequate measures to safeguard the rights and freedoms as well as the justified interests of the interested party, or
3. is made with the express approval of the interested party.
The responsible will take adequate measures to safeguard the rights and freedoms as well as the justified interests of the interested party which include, among others, the right to obtain the intervention of a person by the responsible, the presentation of the position of said party and the right to challenge the decision.
The interested party can exercise this right at any time by contacting the respective responsible.
(10) Right of lodging a complaint with a supervisory authority
Irrespective of any other administrative or judicial remedy, you are moreover entitled to lodge a complaint with a supervisory authority, especially in the member country of your abode, your workplace or the place of the possible breach in case the interested party should consider that the processing of the personal data referring to him or her is in breach of this Regulation
(11) Right of an effective judicial remedy
Irrespective of an available administrative or extrajudicial remedy including the right of lodging a complaint with a supervisory authority as per Article 77 DPAReg, you are entitled to obtain an effective judicial remedy in case you should consider that the rights accorded to you on account of this Regulation were breached due to a processing of your personal data which was not in line with same.
(12) Integration of Google Maps
(1) On this website we are making use of the offer of Google Maps. Due to this fact we can show you interactive maps directly on the website thus enabling you to make comfortable use of the map functions.
(2) Due to your visiting the website, Google will obtain the information that you called up the respective webpage of our website. Besides, the data indicated under § 3 of this statement will be transferred. i.e. no matter whether Google will provide a user account for your log-in or there is no user account. When logging in with Google, your data will be assigned directly to your account. In case you should not want such assignment in connection with your profile in Google, you must log out before activating the button. Google will store your data as user profile using them for the purposes of advertising, market research and/or a needs-based design of its website. In particular, such evaluation will be made (even with respect to users not logged in) in order to realize needs-based advertising and to inform other users of the social network about your activity on our website. You are entitled to object to the creation of such user profiles; in that case you will have to address your objection directly to Google.
(3) Further information with respect to the purpose and extent of the data collection and its processing by the plug-in provider can be found in the data privacy statements of the provider. Besides, you will also obtain further information about your respective rights and setting options regarding the protection of your personal privacy under: http://www.google.de/intl/de/policies/privacy. Google will also process your personal data in the USA and is governed by the EC-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
The website www.goisi.de contains cooperations with our group of companies and several service providers. Access to the offer pages of the group of firms is provided by ISI Industrie Service International GmbH to visitors of the homepage www.goisi.de. By the use of the services of the service provider, the users of the website www.goisi.de enter into a contractual relation with the respective service provider for which the corresponding contractual terms of the service provider will apply. Responsibility for the legal provisions and the contents regarding the services offered on the offer pages of the partner companies lies exclusively with the respective cooperation enterprises and their providers in charge providing the call-up of the website via the homepage of www.goisi.de.
Due to the use of the services of a service provider, contractual relations will be achieved exclusively with the respective partner enterprise and the user in accordance with the terms applicable with respect to such contractual relation.
The information made available to you on our website was compiled very carefully. The image data and information material were checked and updated with respect to their compliance with the data privacy regulations and copyright laws. However, despite the most meticulous control it cannot be guaranteed that they are error-free. Nevertheless, any liability or guarantee with respect to the topicality, correctness and completeness of the information and data made available must be excluded.
With our permanent control of the contents of the published material we do not assume any responsibility for the contents of external links. The responsibility for the contents of the linked sites lies exclusively with the provider of same. ISI Industrie Service International GmbH is likewise not responsible for the data protection measures of the providers of such websites
All information or data, their use and the log-in regarding websites of ISI Industrie Service International GmbH as well as all actions, inactions or omissions related to same are exclusively subject to German law. The place of venue is Soltau.
Inquiries, rectification and deletion of data
Please address all your inquiries as well as requests for the rectification or deletion of data to email@example.com or by mail to:
ISI Industrie Service International GmbH
stating your name and your contact details.
We should like to point out that your right of deletion of data may be limited by legal retention obligations we must observe. Besides, courts, prosecution authorities or other legally appointed authorities can call up data or request information on a legal basis.