Privacy Policy
Unless otherwise stated below, the provision of your personal data is neither legally nor contractually required, nor is it necessary for the conclusion of a contract. You are not obliged to provide the data. Failure to provide the data has no consequences. This applies unless otherwise indicated in the processing operations described below. "Personal data" refers to any information relating to an identified or identifiable natural person.
Server Log Files
You can visit our websites without providing any personal information. Each time you access our website, usage data is transmitted to us or our web host/IT service provider via your internet browser and stored in log files (so-called server log files). This stored data includes, for example, the name of the page accessed, the date and time of access, the IP address, the volume of data transferred, and the requesting provider. Processing is carried out on the basis of Article 6(1)(f) of the GDPR, reflecting our overriding legitimate interest in ensuring the trouble-free operation of our website and improving our services. Your data may be transmitted to and processed in third countries outside the EU, specifically Canada and the USA.

Contact
Controller/Data Protection Officer
Feel free to contact us. Data Controller / Our Data Protection Officer is

Robert Ostermeyer
Salzbergstraße 4a
38855 Wernigerode
Germany

Tel.: +49 (0)3943 625164
post@corno.de


Data processing within the scope of the whistleblower protection system

If you submit information to the internal reporting office within the framework of the established whistleblower protection system, we collect your personal data (name, electronic contact details, address, message text, information regarding violations within the meaning of Section 3 (3) of the Whistleblower Protection Act [HinSchG], information regarding the identity of persons protected under the HinSchG) only to the extent provided by you. The data processing serves the purpose of fulfilling the tasks, obligations, and rights assigned to the internal reporting office by the HinSchG. Data processing is carried out to fulfill a legal obligation pursuant to Art. 6 (1) (c) GDPR in conjunction with Section 10 HinSchG. Your data will subsequently be deleted in compliance with statutory retention periods (3 years after the conclusion of the procedure within the meaning of Section 18 HinSchG).
Customer-initiated contact via email
If you initiate business contact with us via email, we collect your personal data (name, email address, message text) only to the extent provided by you. Data processing is carried out for the purpose of processing and responding to your contact inquiry. If the contact serves to implement pre-contractual measures (e.g., consultation regarding a potential purchase, preparation of a quote) or relates to a contract already concluded between you and us, this data processing is based on Art. 6(1)(b) GDPR. If the contact is made for other reasons, this data processing is based on Art. 6(1)(f) GDPR, grounded in our overriding legitimate interest in processing and responding to your inquiry. In this case, you have the right to object at any time—on grounds relating to your particular situation—to the processing of personal data concerning you that is based on Art. 6(1)(f) GDPR. We use your email address solely to process your inquiry. Your data will subsequently be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.
Collection and processing when using the contact form
When you use the contact form, we collect your personal data (name, email address, message text) only to the extent provided by you. Data processing serves the purpose of establishing contact. If the contact serves to implement pre-contractual measures (e.g., consultation regarding a potential purchase, preparation of a quote) or relates to a contract already concluded between you and us, this data processing is based on Art. 6(1)(b) GDPR. If the contact is made for other reasons, this data processing is based on Art. 6(1)(f) GDPR, grounded in our overriding legitimate interest in processing and responding to your inquiry. In this case, you have the right to object at any time—on grounds relating to your particular situation—to the processing of personal data concerning you that is based on Art. 6(1)(f) GDPR. We use your email address only to process your inquiry.