PRIVACY POLICY

1. DATA PROTECTION AT A GLANCE

GENERAL INFORMATION

The following section provides a simplified overview of what happens to your personal data when you visit this website. “Personal data” means any data that can be used to identify you personally. You will find more detailed information about data protection in our Privacy Policy, which can be found below this text.

DATA COLLECTION ON THIS WEBSITE

WHO IS RESPONSIBLE FOR DATA COLLECTION ON THIS WEBSITE?

Data processing on this website is performed by the website operator. You can find their contact data in the section of this Privacy Policy entitled “Data controller details”.

HOW DO WE COLLECT YOUR DATA?

On the one hand, we collect your data when you share it with us, for example when you enter information into a contact form.

Other data is collected by our IT system when you visit our website, either automatically or after obtaining your consent. This primarily concerns technical data (e.g. browser type, operating system, or time the page was accessed). This data is collected automatically as soon as you visit the website.

WHAT DO WE USE YOUR DATA FOR?

Some data is collected in order to ensure that the website functions seamlessly. Other data may be used to analyze your user behavior.

WHAT RIGHTS DO YOU HAVE WITH RESPECT TO YOUR DATA?

You have the right to request information about the origin, recipient, and purpose of processing of your personal data at any time and free of charge. You are also entitled to request the correction or deletion of this data. If you have given your consent to data processing, you can withdraw this consent at any time, effective from that moment onwards. Under certain circumstances, you may also have the right to limit the processing of your personal data. You also have the right to complain to the competent supervisory authority.

Please contact us if you have any questions about this or about data protection in general.

ANALYSIS TOOLS AND THIRD-PARTY TOOLS

When visiting this website, your browsing behavior may be statistically analyzed. This is mainly done using analysis programs.

You will find detailed information about these analysis programs in the Privacy Policy below.

2. Hosting

EXTERNAL HOSTING

This website is hosted by an external service provider (host). The personal data collected on this website is stored on the servers of the host. This primarily includes IP addresses, contact requests, metadata and communication data, contractual data, contact data, names, website hits, and other data generated via a website.

We use a host in order to fulfill our contractual obligations towards our potential and existing customers (Article 6(1)(b) GDPR) and in the interest of providing secure, rapid, and efficient access to our online services via a professional provider (Article 6(1)(f) GDPR). If your consent is requested, the processing will take place exclusively on the basis of Article 6(1)(a) GDPR and on the basis of Section 25, para. 1 of the German Telecommunications, Telemedia, and Data Protection Act (TTDSG) where you are asked for your consent to the use of cookies or access to information stored on your end device (e.g. device fingerprinting) within the meaning of the TTDSG. You can withdraw your consent at any time.

Our host will only process your data to the extent necessary to meet their service obligations and follow our instructions with respect to this data.

We use the following host:

netcup GmbH
Daimlerstraße 25
D-76185 Karlsruhe

ORDER PROCESSING

We have concluded an order processing agreement with the aforementioned provider. This is an agreement stipulated by data processing law that guarantees that the host will only use the personal data of our website users in accordance with our instructions and in line with the GDPR.

3. GENERAL INFORMATION AND OBLIGATORY NOTICES

DATA PROTECTION

The operator of this website takes the protection of your personal data very seriously. We treat your personal data as confidential, in line with legal data protection regulations and this Privacy Policy.

Whenever you use this website, various types of personal data are collected. “Personal data” means any data that can be used to identify you personally. This Privacy Policy explains what data we collect and what we use it for. It also explains how and for what purpose this occurs.

Please note that the transmission of data on the Internet (e.g. when communicating via e-mail) may present gaps in security. It is not possible to fully protect data against access by third parties.

DATA CONTROLLER DETAILS

The data controller responsible for data processing on this website is:

The data controller is the natural or legal person which, alone or jointly with others, determines the purposes and means of the processing of personal data (e.g. name, e-mail address, etc.).

RETENTION PERIOD

Unless a more specific retention period is mentioned in this Privacy Policy, we will store your personal data until it is no longer required for the purpose of the processing. If you submit a valid deletion request or withdraw your consent to data processing, your data will be deleted provided that there are no other legally admissible grounds for storing your personal data (e.g. retention periods under tax or commercial law); in the event that such grounds exist, the data will be deleted once these grounds no longer apply.

GENERAL INFORMATION ABOUT THE LEGAL BASIS FOR DATA PROCESSING ON THIS WEBSITE

If you have given your consent to data processing, we will process your personal data on the basis of Article 6(1)(a) GDPR and Article 9(2)(a) GDPR in the event that special categories of data are processed in accordance with Article 9(1) GDPR. If you have provided your explicit consent to the transmission of your personal data to third countries, data processing will also be performed on the basis of Article 49(1)(a) GDPR. If you have consented to the use of cookies or access to information on your end device (e.g. via device fingerprinting), data processing additionally takes place on the basis of Section 25(1) TTDSG. You can withdraw your consent at any time. If your data is necessary for the performance of a contract or the implementation of pre-contractual measures, we process your data on the basis of Article 6(1)(b) GDPR. Moreover, if the data processing is necessary in order to fulfill a legal obligation, we process your data on the basis of Article 6(1)(c) GDPR. In addition, data processing may take place on the grounds of our legitimate interest in accordance with Article 6(1)(f) GDPR. The following sections of this Privacy Policy will mention the applicable legal basis in each individual case.

WITHDRAWAL OF YOUR CONSENT TO DATA PROCESSING

Many data processing operations may only be performed with your express consent. If you have granted your consent, you may withdraw it again at any time. This does not affect the legality of the data processing performed up until you withdraw your consent.

RIGHT TO OBJECT TO THE COLLECTION OF DATA IN SPECIAL CASES AND TO DIRECT MARKETING (ARTICLE 21 GDPR)

IF DATA PROCESSING IS PERFORMED ON THE BASIS OF ARTICLE 6 (1) (E) OR (F) GDPR, YOU HAVE THE RIGHT TO OBJECT, ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION, TO THE PROCESSING OF YOUR PERSONAL DATA AT ANY TIME; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. THE LEGAL BASIS FOR PROCESSING IN A PARTICULAR CASE CAN BE FOUND IN THIS PRIVACY POLICY. IF YOU FILE AN OBJECTION, THE PERSONAL DATA AFFECTED WILL NO LONGER BE PROCESSED UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, RIGHTS, AND FREEDOMS OR FOR THE ESTABLISHMENT, EXERCISE, OR DEFENSE OF LEGAL CLAIMS (OBJECTION IN ACCORDANCE WITH ARTICLE 21 (1) GDPR).

IF THE PERSONAL DATA CONCERNING YOU IS PROCESSED FOR THE PURPOSES OF DIRECT MARKETING, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THE PROCESSING OF THE PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH MARKETING; THIS ALSO APPLIES TO PROFILING TO THE EXTENT THAT IT IS RELATED TO SUCH DIRECT MARKETING. IF YOU FILE AN OBJECTION, YOUR PERSONAL DATA WILL NO LONGER BE PROCESSED FOR THE PURPOSES OF DIRECT MARKETING (OBJECTION IN ACCORDANCE WITH ARTICLE 21 (2) GDPR).

RIGHT TO LODGE A COMPLAINT WITH THE COMPETENT SUPERVISORY AUTHORITY

In the event of an infringement of the GDPR, the data subject may file a complaint with a supervisory authority, in particular in the Member State of their habitual residence, place or work, or place of the alleged infringement. The right to lodge a complaint shall be without prejudice to other administrative or judicial remedies.

RIGHT TO DATA PORTABILITY

You have the right to request that the data we process automatically based on your consent or on a contract be transmitted to you or a third party in a commonly used, machine-readable format. If you require the data to be transferred directly to another data controller, this will only be done where technically feasible.

SSL AND TLS ENCRYPTION

This website uses SSL and TLS encryption for security reasons and for the protection of confidential data when transmitted, for example when submitting an order or an inquiry to us as the website operator. You can see whether an encrypted connection is in place by looking for the padlock symbol in the browser and for “https://” instead of “http://” in the address bar.

If SSL or TLS encryption is activated, the data you send to us cannot be read by third parties.

ACCESS, DELETION, AND CORRECTION

Under the currently applicable legal provisions, you have the right at any time to obtain information free-of-charge about the personal data concerning you that is being stored, as well as its origin and recipient, the purpose of the processing, and under certain conditions you have a right to correction or deletion of this data. Please contact us if you have any questions about this or about personal data in general.

RIGHT TO RESTRICTION OF PROCESSING

You have the right to request restriction of the processing of your personal data. To this end, you can contact us at any time. You have a right to restriction of processing under the following circumstances:

• If you are contesting the accuracy of the personal data we hold on you, we usually require time to verify this. You have the right to request restriction of the processing of your personal data for the duration of the verification process.
• If your personal data has been processed/is being processed unlawfully, you can request restriction of the data processing instead of deletion of the data.
• If we no longer require your personal data, but you still require it for the establishment, exercise, or defense of legal claims, you have the right to request restriction of the processing of your personal data instead of deletion.
• If you have filed an objection in accordance with Article 21(1) GDPR, it is necessary to weigh your interests up against our own. You have the right to request restriction of the processing of your personal data for as long as it remains unspecified whose interests take precedence.

If you have requested the restriction of the processing of your personal data, this data may, with the exception of storage, only be processed with your consent or for the establishment, exercise, or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the European Union or of a Member State.

OBJECTION TO MARKETING E-MAILS

We hereby prohibit the use of the contact details published as part of our legal notice obligation for the purpose of sending any unsolicited advertisements or information. The operators of the website expressly reserve the right to take legal action in the event of unsolicited sending of advertisements, e.g. in the form of spam e-mails.

4. DATA COLLECTION ON THIS WEBSITE

Cookies

Our websites use cookies. Cookies are small text files that cause no harm to your end device. They are either stored temporarily for the duration of a session (session cookies) or permanently (permanent cookies) on your end device. Session cookies are automatically deleted once you leave the website. Permanent cookies remain saved on your end device until you delete them yourself or they are deleted automatically by your internet browser.

Some third-party cookies may also be saved to your end device when you visit our website. These allow you or us to make use of certain third-party services (e.g. cookies for processing payment services). Cookies have a range of functions. Numerous cookies are necessary for technical reasons, as certain website functions would not work without them (e.g. the shopping cart function or videos). Other cookies are used to analyze user behavior or display adverts.

Cookies necessary for electronic communication, for the provision of certain functions used by you (e.g. for the shopping cart function), or for the optimization of the website (e.g. cookies used to measure website visitors), known as essential cookies, are saved on the basis of Article 6(1)(f) GDPR if no other legal basis is indicated. The website operator has a legitimate interest in using essential cookies, as this allows it to provide its services free of technical errors and in an optimized manner. If consent has been requested for the use of cookies and similar recognition technologies, processing takes place exclusively on the basis of this consent (Article 6(1)(a) GDPR and Section 25, para. 1 TTDSG); you can withdraw your consent at any time.

You can change your browser settings so that you are informed about the use of cookies and can permit the use of cookies on a case-by-case basis or under certain conditions, prohibit the use of all cookies, and have cookies automatically deleted when you close your browser. If you do not allow cookies, this may impair the functioning of the website.

If third-party cookies or analysis cookies are used, we will inform you of this separately in this Privacy Policy, and may request your consent.

BORLABS COOKIE CONSENT PLUGIN

Our website uses Borlabs Cookie consent technology in order to obtain your consent to the use of certain cookies in your browser or to the use of certain technologies, and to document this in line with data protection provisions. This technology is provided by Borlabs – Benjamin A. Bornschein, Rübenkamp 32, 22305 Hamburg, Germany (hereafter ‘Borlabs’).

When you visit our website, a Borlabs Cookie will be stored in your browser that saves information about consent you have provided or withdrawn. This data is not forwarded to the provider of Borlabs Cookie.

The stored data is retained until you request that we delete it or delete the Borlabs Cookie itself, or until the purpose of data processing no longer applies. This shall be without prejudice to mandatory legal retention periods. Details on data processing by Borlabs Cookie can be found at https://de.borlabs.io/kb/welche-daten-speichert-borlabs-cookie/.

We use Borlabs Cookie consent technology in order to obtain legally mandated consent to the use of cookies. The legal basis for this is Article 6(1)(c) GDPR.

CONTACT FORM

If you send an inquiry using our contact form, we will store the information you enter, including the contact details you provide, in order to process your inquiry and any follow-up questions. We will not pass this data on without your consent.

This data is processed on the basis of Article 6(1)(b) GDPR in those cases where your inquiry is in relation to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the data is processed on the basis of our legitimate interest in effectively processing inquiries we receive (Article 6(1)(f) GDPR or on the basis of your consent (Article 6(1)(a) GDPR) where this is requested; you can withdraw your consent at any time.

We will retain the data you enter in the contact form until you ask us to delete it, withdraw your consent to the storage of the data, or the purpose of processing no longer applies (e.g. once your inquiry has been processed). This shall be without prejudice to mandatory legal provisions, in particular retention periods.

INQUIRIES SENT VIA E-MAIL, TELEPHONE, OR FAX

If you contact us by e-mail, telephone, or fax, we will store and process your inquiry, including all personal data contained therein (name, content of inquiry) for the purpose of processing your request. We will not pass this data on without your consent.

This data is processed on the basis of Article 6(1)(b) GDPR in those cases where your inquiry is in relation to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the data is processed on the basis of our legitimate interest in effectively processing inquiries we receive (Article 6(1)(f) GDPR or on the basis of your consent (Article 6(1)(a) GDPR) where this is requested; you can withdraw your consent at any time.

We will retain the data you send us in connection with an inquiry until you ask us to delete it, withdraw your consent to the storage of the data, or the purpose of processing no longer applies (e.g. once your inquiry has been processed). This shall be without prejudice to mandatory legal provisions, in particular legal retention periods.

5. ANALYSIS TOOLS AND ADVERTISING

WP Statistics

This website uses the analysis tool WP Statistics to statistically analyze user visits. The tool is provided by Veronalabs, ARENCO Tower, 27th Floor, Dubai Media City, Dubai, Dubai 23816, UAE (https://veronalabs.com).

WP Statistics allows us to analyze your use of our website. To this end, WP Statistics records information including log files (IP address, referrer, browser used, origin of user, search engine used) and actions performed by the website visitor on the page (e.g. clicks and views).

The data collected using WP Statistics is exclusively stored on our own server.

The basis for the use of this analysis tool is Article 6(1)(f) GDPR. We have a legitimate interest in anonymized analysis of user behavior in order to optimize both our online offering and our advertising. If your consent is requested, the processing will take place exclusively on the basis of Article 6(1)(a) GDPR and on the basis of Section 25, para. 1 of the German Telecommunications, Telemedia, and Data Protection Act (TTDSG) where you are asked for your consent to the use of cookies or access to information stored on your end device (e.g. device fingerprinting) within the meaning of the TTDSG. You can withdraw your consent at any time.

IP ANONYMIZATION

We use WP Statistics with anonymized IP. This means your IP address is truncated so that it can no longer be directly attributed to you.

6. PLUGINS AND TOOLS

GOOGLE WEB FONTS (LOCAL HOSTING)

In order to ensure fonts are displayed uniformly, this website uses web fonts provided by Google. Google Fonts are installed locally. No connection is made with Google’s servers.

Further information on Google Fonts can be found at https://developers.google.com/fonts/faq and in the Google privacy policy at: https://policies.google.com/privacy?hl=en.

Source: erecht24 · Version as of January 2022