Data Privacy Policy
Data Privacy Policy
We are pleased that you are visiting the instantspringquote.com website. The following contains
information about the collection of personal data with the use of this website:
Name and address of the responsible party
Responsible party within the meaning of the General Data Protection Regulation and other national
data protection laws of the member states as well as other data protection regulations is:
USA:
Acxess Spring
2225 East Cooley Dr.
Colton, CA 92324
United States
Contact Email: info@instantspringquote.com
instantspringquote.com
Ph no : 951 276 2777
Name and address of the Data Protection Officer
You can reach the Data Protection Officer of the responsible party at:
Acxess Spring
2225 East Cooley Dr.
Colton, CA 92324
United States
Contact Email: info@instantspringquote.com
instantspringquote.com
Over 70 Trillion Spring Configurations
SIGN IN | SIGN UP
Search Quotation Number or Part Number
Ph no : 951 276 2777
Data Processing in general
1. Extent of the processing of personal data
We process the personal data of our users, in principle, only to the extent of what is necessary to provide
a functional website as well as our content and services. The processing of the personal data of our
users takes place regularly only with the consent of the user. An exception in such cases is when prior
consent is not possible for factual reasons and the processing of the data is permitted by legal
provisions.
Moreover, we will collect personal data (e.g. e-mail address, name, phone number and company) within
the operation of our websites only if you make such data available and if we have the authorization to
do so with your consent or on the basis of a legal regulation for processing and use. Information
required to render a service is indicated accordingly, any other information is voluntary. We use such
data for the purpose of which you provided us the data, e.g. to answer your inquiry, to process your
inquiry or to provide you with access to certain information or offers.
2. Legal basis for the processing of personal data
Insofar as consent has been obtained by the person concerned to process personal data, Art. 6(1)(a) of
the EU Data Protection Basic Regulation (GDPR) serves as the legal basis.
When processing personal data to fulfill a contract, the contracting party, which is the person
concerned, Art. 6(1 lit)(b) of the GDPR serves as the legal basis. This also applies to processing required
for the execution of pre-contractual measures.
Insofar as the processing of personal data is necessary to meet a legal obligation which our company is
subject to, Art. 6(1)(c) of the GDPR serves as the legal basis.
In case the vital interests of the person concerned, or another natural person make the processing of
personal data necessary, Art. 6(1)(d) of the GDPR serves as the legal basis.
If the processing is necessary to safeguard a legitimate interest of our company or of a third party and
outweigh the interests, fundamental rights and freedoms of the person concerned, then Art. 6(1 lit)(f)
GDPR serves as the legal basis for the processing.
3. Data deletion and storage period
The personal data of the person concerned will be deleted or blocked as soon as there is no longer a
purpose for the storage. Storage can also take place if provided for by European or national legislators in
regulations, laws or other provisions the responsible party is subject to. Blocking or deletion of the data
shall also take place when the mandatory storage period by the aforementioned standards expires.
Providing the website and creating log files
1. Description and extent of the data processing
Whenever our website is called up, our system records data and information automatically from the
system of the calling computer.
The following data is collected:
- IP address,
- date and time of the request,
- time zone difference to Greenwich Mean Time,
- content of the request,
- access Status/https-status code,
- the transferred data volume,
- website from which the request comes,
- browser,
- the operating system and its interface language and version
The data is also stored in the log files of our system. The information is stored in the log files of our
system solely for the purposes of the technical administration of our website. This data will not stored
together with other personal data of the user, neither transferred to third parties.
2. Legal basis for the data processing
The legal basis for the temporary storage of data and log files is Art. 6(1)(f) GDPR.
3. Purpose of the data processing
The temporary storage of the IP address by the system is necessary to enable delivery of the website to
the user’s computer. For this purpose, the IP address of the user must be stored for the length of the
session.
Storage in log files takes place to ensure the functionality of the website. The data also serves to
optimize the website and to ensure the security of our information system. An evaluation of the data for
marketing purposes does not take place in this regard.
Our legitimate interest in data processing is for these purposes in accordance with Art. 6(1)(f) GDPR.
4. Storage period
The data will be deleted as soon as the purpose of the data’s collection is no longer necessary.
Collecting the data to be provided to the website will end with each session.
In case the storage of IP addresses in log files takes place:
If the data is stored in log files, this will be for the duration of seven days at the most. Storage beyond
that point is possible. In which case the IP addresses of the users are deleted or distorted to prevent
attributing to the requesting client.
5. Objection and removal option
The collecting of data for the website and the storing of data in log files are essential to operate the
website. Therefore the user has no possibility to object.
Use of cookies
1. Description and extent of the data processing
On various occasions, cookies are used on our apps and websites in order to provide you with targeted
information and to store your search settings. Cookies are small text files sent to your PC or end device
from our web and normally stored on your hard drive for the browser you use. Cookies cannot run any
programs nor transfer viruses onto your computer, but serve only to provide us the information needed
to make your visit to our website easier and more effective. A cookie contains a character string which
enables the clear identification of the browser whenever the website is visited again. If you have an
account on any of our websites, we use cookies to identify you for subsequent visits, otherwise you
would have to make a new login with each visit. The stored information is saved separately from any
other data that might have been provided to us. In particular, the data of cookies will not be linked with
any of your additional data.
- Our websites use cookies to the following extent:
- Session IDs (temporärer Einsatz),
- persistent Cookies (zeitlich beschränkter Einsatz),
- Third-Party-Cookies (von Drittanbietern).
Session IDs allow the various requests by your browser to be assigned to a common session, so that
your computer will be recognized when you return to the website:
We use cookies to make our website more user-friendly. Some elements of our website require that the
browser be identified even after a page change
In particular, the following data is stored and transferred in the cookies:
- Language settings,
- Log-in information: User name, password encrypted if user selects option “remember my login
data”
We also use cookies on our website to enable an analysis of the user’s surfing behavior.
In this respect, especially the following data can be transferred:
- Search terms entered.
- Frequency of page views .
- Utilization of website functions.
User data collected in this manner are pseudonymized through technical precautions. Therefore the
user visiting the website cannot be identified. The data will not be stored together with other personal
data.
When calling up our website, an info banner lets the users know that cookies are used for purposes of
analysis and they are referred to this data protection declaration. It will also be pointed out that the
storing of cookies can be prevented in the browser settings.
b ) Legal basis for the data processing
The legal basis for the processing of personal data with the use of cookies is Art.6(1)(f) GDPR.
c) Purpose of the data processing
The reason for using technically necessary cookies is to simplify the use of websites for the users. Some
of the functions of our website cannot be offered without the use of cookies. For those, it is necessary
that the browser can also be recognized after a page change.
We need cookies for the following uses:
- Session ID
The user data collected by technically necessary cookies will not be used to create user profiles.
The use of analysis cookies serve the purpose of improving the quality of our website and its contents.
The analysis cookies show us how our website is used and help us to constantly optimize our offer.
At this point we need to describe the purpose of using analysis cookies in more detail.
Our legitimate interest in data processing is for these purposes in accordance with Art. 6(1)(f) GDPR.
e) Storage period, possibilities for objection and removal
Cookies are stored on the user’s computer and from there transferred to our page. It follows that you as
the user have the complete control over the use of cookies. By changing your settings in your Internet
browser, you can deactivate or limit the transfer of cookies. Cookies already stored can be deleted at any
time. This can also be done automatically. The deactivating of cookies for our website can possibly lead
to a restricted use of all of the website’s functions.
The session IDs are then deleted when you log out or close the browser. Persistent cookies will be
deleted automatically after a specified time, which can vary depending on the cookie.
Registration
1. Description and extent of the data processing
We offer users on our website the option to register with their personal data.
The following details are collected during the registration process:
- E-mail address*
- Password*
- Confirm password*
- Time zone
- Language
- Declaration of consent to the terms of use and the data privacy statement
Profile information
- First name*
- Last name*
- Company*
- Street*
- Postal code*
- City*
- Country*
Those marked with * are mandatory. Further personal data will only be collected only on a voluntary
basis, such as for a request or registration.
During registration, the following data will also be stored:
- IP address of the user
- Date and time of registration
The user’s consent to process such data will be obtained during registration and reference will be made
to the regulations of the terms of use as well as the provisions of this data protection declaration and
agreed on and legally binding for the duration of the user relationship.
2. Legal basis for the data processing
Legal basis for the processing of data, after the user registers for the newsletter, is the submitting of the
user’s consent Art. 6(1)(a) GDPR.
If the registration serves to fulfill a contract of which the user is a party (e.g. use / license agreement for
the providing and obtaining of CAD models) or the implementation of pre-contractual measures, the
legal basis for the data processing is also Art. 6(1)(b) GDPR.
3. Purpose of the data processing
Every access to our portal and every obtaining of CAD models will be recorded. The storage serves
internal system-related and statistical purposes. The following is recorded: Name of the accessed file,
date and time of access, data volume transferred, report on successful access, web browser and
requesting domain.
3.1 A registration of the user is necessary to hold specific contents and services
ready on our website.
If you use our portal, we will store the data necessary to perform the contract. In addition, we will store
the voluntary data you have provided for the duration of use of the portal, unless previously deleted. All
information can be managed and modified in the protected customer area.
3.2 A registration of the user is necessary to fulfill a contract with the user or for the
implementation of pre-contractual measures.
Other personal data processed for the obtaining of CAD models serves to prevent misuse in the
providing of the CAD models (e.g. violation of the Fair Use Policy) and to ensure the safety of our
information technology systems.
4. Storage period
The data will be deleted as soon as the purpose of the data’s collection is no longer necessary.
This is the case for the data collected during registration, if registration is withdrawn or amended on our
website.
5. Objection and removal option
Users have the option to cancel registration at any time. You can modify your stored data anytime.
You can delete and manage your account and change your information in the protected customer area.
If the data is necessary to perform a contract or to implement pre-contractual measures, a premature
deletion of the data is only possible if not prevented by contractual or legal obligations.
Contact form and e-mail contact
1. Description and extent of the data processing
There is a contact form on our website which can be used for electronic contacting. If the user takes
advantage of it, the data entered into the input mask will be transferred to us and stored. The data
consists of:
- E-mail address
- Your name
- Company
- Postal code
- Place
During registration, the following data will also be stored:
- Date and time of registration
For the processing of the data, your consent will be obtained and this data protection declaration will
be referred to during registration.
As an alternative, contacting is also possible via the e-mail address provided. In this case, the user’s
personal data submitted with the e-mail will be stored.
In this context, no further data will be transferred to any third parties. The data will only be used to
process the conversation.
2. Legal basis for the data processing
Legal basis for the processing of data, after the user registers for the newsletter, is the submitting of the
user’s consent Art. 6(1)(a) GDPR.
Legal basis for the processing of data transferred by e-mail is Art. 6(1)(f) GDPR. If e-mail contact is aimed
for after concluding a contract, the legal basis for processing is also Art. 6(1)(b).
3. Purpose of the data processing
The processing of personal data from the input mask serves only for contacting. In case of contacting
by email, here is also a legitimate interest in the processing of the data.
To ensure your contact to the nearest Instant Spring Quote location, we will also transfer your data, if
necessary, to an Instant Spring Quote branch office or subsidiary near you.
Any other personal data processed during dispatch serves to prevent misuse of the contact form and to
ensure the safety of our information technology systems.
4. Storage period
The data will be deleted as soon as the purpose of the data’s collection is no longer necessary. This is the
case when the conversation with the user is finished, for the personal data from the input mask of the
contact form and the data has been sent by email. The conversation is finished when it can be assumed
that the matter has finally been clarified.
The additional personal data collected during dispatch will be deleted after a period of seven days.
5. Objection and removal option
The user can at any time withdraw his consent to the processing of his personal data. If the user
contacts us by email, he has the option to object to the storage of his personal data. In this case, the
conversation can no longer continue.
You can also submit the withdrawal of your consent and the objection to storage anytime in text form
(email).
In this case, all personal data that was stored in the course of contacting will be deleted.
Data transfer to third parties
Provided you have given your consent or if we are required by law to do so, we will transfer you personal
data besides the third parties mentioned in IX 3.2, to the following third parties for specific purposes:
If you have provided us with your personal data, e.g. email when contacting us or via the contact form
or when signing up for the newsletter, we will forward your data, if necessary, to our subsidiaries in order
to answer your requests or to grant you access to certain information or offers. In this case, you will be
notified about the transfer of your data to any subsidiaries.
In some instances, we make use of external providers to process your data. We have carefully selected
and commissioned them in writing. They are bound to our instructions and checked upon by us on a
regular basis. The service provider shall not forward the said data to third partie
The described recipients might be located outside of the European economic area (“third countries”),
where the level of data protection is not the same as in your home country. In such cases, Instant Spring
Quote will take measures to ensure a suitable level of data protection.
We will pass on your personal data to subsidiaries in third countries basically only when they have
obligated themselves in EU standard contractual clauses to ensure a suitable level of data protection.
The transfer of data takes place exclusively within and in compliance with the applicable legal
regulations. We will neither sell your personal data to third parties nor market in any way.
Use of our Apps
1. Description and extent of the data processing
If you make use of our apps, we will use your data to provide the product or service that you have
selected. Necessary information will be transferred to the app store during the download, in particular
- user name,
- e-mail address
- customer number of your account,,
- time of download
- payment information and
- the individual device number
We have no influence on this data collection and are not responsible for it. We process the data
provided insofar as necessary to download the app onto your end device. Beyond that, your data will
not be stored.
2. Legal basis for the data processing
Legal basis for the processing of data, after the user registers for the newsletter, is the submitting of the
user’s consent Art. 6(1)(a) GDPR.
Legal basis for the processing of data transferred while using this app is Art. 6(1)(f) GDPR. If the use of
the app serves the concluding of a contract (e.g. obtaining/download of CAD models), an additional
legal basis for processing is Art. 6(1)(b) GDPR.
3. Purpose of the data processing
3.1 Download of CAD files
If you wish to receive the CAD files of manufacturers by e-mail, you can register in the app settings.
Information required for downloading CAD models is marked accordingly, all other is voluntary.
If you request CAD models via our app by e-mail, we will store your data that is necessary to fulfill the
contract. All information can be managed and changed in the protected customer area.
3.2 Use of your photos
Depending on the respective operating system of your end device, we ask for permission in a pop-up to
use your photos while downloading or when you begin using the app. If you refuse, we will not use the
data. It could be, however, that you then will not be able to use all the functions of the app. Later on, you
can alway consent or withdraw permission in the settings of your operating system.
If you allow access, the app will access only the said data and transfer to our server, insofar as is
necessary to render the functionality
3.3 Collection of your location data
Our offer also includes so-called Location Based Services, with which we make you special offers
tailored to your respective location.To offer you such functions of the app, we will collect your location
data by means of GPS and your IP address in anonymized form, with your permission. You can allow or
refuse this function at any time in the settings of your operating system. Your location will only be
transferred to us whenever you use app functions that require us to know your location.
4. Storage period
The data will be deleted as soon as the purpose of the data’s collection is no longer necessary and no
legal retention obligations exist.
5. Objection and removal option
Users have the option to cancel registration at any time. You can modify your stored data anytime.
You can delete and manage your account and change your information in the protected customer area.
Data security
We maintain current technical measures to ensure data security, in particular for the protection of your
personal data from risks during data transfers as well as the acquiring of knowledge by third parties.
These measures are adjusted according to the current state of the art. All of the information you provide
to Instant Spring Quote in message forms are securely transmitted using the latest internet security
technology and used only for the purposes specified. We use a SSL (Secure Sockets Layer Protocol)
based data transmission procedure. This protocol enables all of the data that is transmitted between
your browser and our server to be fully encrypted. This protects your data from being manipulated or
accessed by unauthorized third parties during transmission
Rights of the person concerned
If you process personal data, you are the person concerned. GDPR and you have the following rights
against the responsible party:
1. Right to information
You can request a confirmation from the responsible party of whether your personal data is being
processed by us.
If your data is being processed, you can request the following information from the responsible party:
(1) the purpose of the processing of your personal data;
(2) the categories of personal data being processed;
(3) the recipients or categories of the recipients to which the said personal data have been or will be
disclosed;
(4) the expected storage period of your personal data or, in case concrete information is not available,
criteria for the setting of the storage period;
(5) the existence of a right to correction or deletion of your personal data, a right to the limitation of
processing by the responsible party or a right of objection against the processing.
(6) the existence of a right to appeal with a supervisory authority;.
(7) all available information about the origin of the data, if the personal data was not collected from the
person concerned;
(8) the existence of automatic decision making, including profiling as per Art. 22(1) and (4) GDPR and –
at least in these cases – meaningful information about the logic involved as well as the scope and the
effects hoped for of such a processing for the person concerned.
You have the right to request information about whether your personal data will be transferred to a
third country or an international organization. In this connection, you can ask about the suitable
guarantees as per Art. 46 GDPR relating to the transfer.
2. Right of correction
You have a right of correction and/or completion against the responsible party, insofar as your
processed personal data is not correct or incomplete. The responsible party is to make adjustments
immediately.
3. Right to limit processing
You can request a limitation of the processing of your personal data on the following conditions:
(1) if you dispute the correctness of your personal data for a long enough period to allow the responsible
party ample time to check the correctness of your personal data.
(2) the processing is unlawful and you refuse the deletion of the personal data and request, instead,
limiting the use of personal data;
(3) the responsible party has no further need of the personal data, however you have need of the data
for the establishment, exercise and defense of legal claims or
(4) if you have objected to the processing as per Art. 21(1) GDPR and it is not yet sure if the responsible
party’s legitimate reasons outweigh your reasons
If the processing of your personal data has been limited, such data – except for storage purposes – may
only be processed with your consent or for the establishment, exercise or defense of legal claims or to
protect the rights of another natural or legal entity or for reasons of an important public interest of the
European Union or a member state.
If the limitation was according to the above conditions, you will be informed before the limitation is
removed.
4. Right of deletion
a) Obligation to delete
You can request of the responsible party to delete your personal data immediately, and the responsible
party is obligated to delete the data immediately, provided one of the following reasons apply:
(1) Your personal data is no longer needed for the purposes the data was collected or otherwise
processed.
(2) You revoke your consent for the processing that was based on Art. 6 (1)(a) or Art. 9(2)(a) GDPR, and
there is no other legal basis for the processing of your data.
(3) As per Art. 21 (1) GDPR, you enter an objection against the processing and there are no other
overriding legitimate reasons for the processing, or as per Art. 21(2) GDPR, you enter an objection
against the processing.
(4) Your personal data was unlawfully processed.
(5) The deletion of your personal data is to meet a legal obligation in accordance with European Union
law or that of the member states, which the responsible party is subject to.
(6) Your personal data was collected with regard to the services of the information society as per Art. 8(1)
GDPR.
b) Information to third parties
If the responsible party made your personal data public and if he is obligated to delete your data
according to Art. 17(1) GDPR, he is to take suitable measures, in consideration of available technology
and the costs of implementation, also of a technical kind, to inform you that as the person concerned, the deletion of all links to the respective personal data has been requested, including copies or
replications of the personal data.
c) Exceptions:
The right to have data deleted does not apply insofar as processing is necessary
(1) to practice the right of freedom of opinion and information;
(2) to meet a legal obligation that requires processing according to the law of the European Union or
member states, which the responsible party is subject to, or for the performance of a task that is in the
public’s interest or the exercise of official authority that has been transferred to the responsible party.
(3) for reasons of public interest in the area of public health as per Art.9(2)(h)(i) as well as Art. 9(3) GDPR.
(4) for archive, scientific or historical research purposes in the public’s interest in accordance with Art.
89(1) GDPR, insofar as the right mentioned in Section a) renders the expected realization of the
objectives of processing impossible or seriously affected, or
(5) for the establishment, exercise or defense of legal claims.
5. Right to information
If you have asserted the right of correction, deletion or limitation against the responsible party, he is
obligated to inform all those recipients in possession of your personal data of the correction or deletion
of the data or the limitation of processing, unless it proves to be impossible or involves disproportionate
effort.
You have the right to be informed about those recipients by the responsible party.
6. Right to data portability
You have the right to receive your personal data, which you provided to the responsible party, in a
structured, conventional and machine-readable format. Moreover, you have the right to transfer the
data to another responsible party without hindrance by the responsible party whom you provided with
your personal data, as long as
(1) the processing is based on consent according to Art.6(1)(a) GDPR or Art. 9(2)(a) GDPR or in a contract
as per Art.6(1)(b) GDPR and
(2) the processing takes place by means of automated processes.
In exercising this right, you also have the right to cause that your personal data be directly transferred
from one responsible party to another, if technically possible. The freedom and rights of other persons
must not hereby be affected.
The right to data portability does not apply to a processing of personal data which is necessary to
perform a task, which is in the public’s interest or in exercising official authority transferred to the
responsible party.
7. Right of objection
You have the right, for reasons stemming from your special situation, to object to the processing of your
personal data, on the basis of Art. 6(1)(e) or (f) GDPR; this also applies to profiling supported by these
provisions.
If you file an objection, the responsible party will no longer process your personal data unless he can
prove compelling legitimate reasons for the processing which outweigh your interests, rights and
freedom, or the processing serves the establishment, exercise or defense of legal claims.
You have the right to object at any time to the processing of your personal data for such advertising;
this also applies to profiling, insofar as it is directly related to direct advertising.
If you object to the processing for purposes of direct advertising, we will no longer process your
personal data for such purposes..
You have the option, relating to the use of services of the information society – regardless of Directive
2002/58/EC – to exercise your right of objection by means of automated processing, where technical
specifications are used.
8. Right of withdrawal from the declaration of consent under data protection law
You have the right to withdraw from your declaration of consent under data protection law at any time.
After consent has been withdrawn, the legality of the processing done up to the time of the withdrawal
remains unaffected.
9. Automated decision in individual cases, profiling included
You have the right not to be subject to a decision solely based on automated processing – profiling
included – which has indirect legal effects for you or otherwise affect you adversely. This does not apply,
if the decision
(1) is necessary for the conclusion or fulfillment of a contract between you and the responsible party,
(2) is permissible as per legal regulations of the European Union or member states, which the
responsible party is subject to, and those legal regulations contain appropriate measure to ensure you
rights and freedoms as well as your legitimate interests or
(3) is made with your expressed consent.
However, those decisions must not be based on special categories of personal data in accordance with
Art. 9(1) GDPR, as far as Art. 9(2)(a) or (g) GDPR does not apply and suitable measures have been taken
to protect the rights and freedoms as well as their legitimate interests.
In regards to (1) and (3) of the mentioned cases, the responsible party is to take suitable measures to
ensure the rights and freedoms as well as their legitimate interests, which is to include at least the right
to obtain the intervention of a person on the part of the responsible party, to present one’s own point of
view and to challenge the decision.
10. Right of appeal with a supervisory authority
Irrespective of another administrative or judicial remedy, you have the right of appeal with a supervisory
authority, in particular with the member state of your residence, your workplace or the place of the
presumed infringement, if you are of the opinion that the processing of your personal data is in
violation of the GDPR.