Data protection declaration
- Name and contact details of the person responsible and data protection officer
- Overview of data processing
- Collection of general data when using our website
- Contact to us via contact form, telephone or e-mail
- Rights of the person concerned (your rights)
- Storage time
1. Name and contact details of the person responsible
Responsible in the sense of the EU General Data Protection Regulation (EU GDPR) as well as other national data protection laws of the member states and other data protection regulations is:
+49 7121 4869986
Contact person: Tabea Knabe
2. Overview of data processing
a) The processing of personal data by us in general
We collect, process and use your personal data only insofar as this is necessary to provide our functional website and our services. Your personal data will be processed in accordance with the EU EU General Data Protection Regulation (EU GDPR) and the country-specific data protection regulations that apply to us.
(b) The legal basis of the processing
Art. 6 I lit. a EU GDPR serves as our legal basis for the processing of personal data, insofar as we have obtained the consent of the data subject for a specific processing purpose.
Art. 6 I lit. b EU GDPR serves as our legal basis for the processing of personal data necessary for the performance of a contract to which the data subject is a party, or for the implementation of pre-contractual measures taken at the request of the data subject. This applies, for example, to such processing operations as are necessary for the delivery of goods or the rendering of another service.
Art. 6 I. lit. c EU GDPR serves as a legal basis for the processing of personal data, which is necessary to fulfil a legal obligation to which we are subject.
Art. 6 I lit. f EU GDPR serves as our legal basis for the processing of personal data, insofar as the processing is necessary to safeguard the legitimate interests of our company or a third party, unless the interests or fundamental rights and freedoms of the data subject, which require the protection of personal data, prevail.
3. Collection of general data when using our website
When accessing our website, we collect and store for statistical analysis in log files the name of your Internet service provider, the website from which you visit us, the websites you visit on our website, the date and duration of access and the type of device used for access, browser type and operating system of the visitor website. The IP address is only collected and stored in abbreviated form, i.e. anonymized.
There is no person-related storage of this data. This data is also not merged with other data sources.
Processing of log files and IP addresses is based on Art. 6 I lit. f. EU- GDPR. In this respect, our legitimate interest in the functionality and optimization of the use of our website and, as far as the recording of the full IP address is exceptionally concerned, in order to avert attacks on our information technology systems.
a) When you visit our website, we use so-called cookies to make your visit to our website attractive and to enable the use of certain functions, e.g. to facilitate navigation or support dialogue. Cookies are small text files that are stored on your computer.
b) The cookies are deleted at the end of the session when the browser is closed (session cookies).
d) Please check the user menu of your web browser or the website of the manufacturer of your browser to find out how your browser program can be set accordingly. The help function in the menu bar of your web browser regularly shows you how to be informed about the setting of cookies, or you can reject new cookies and also delete cookies already received.
The settings for cookies of the common browser types can be viewed under the following links:
Internet Explorer: https://support.microsoft.com/en-us/help/17442/windows-internet-explorer-delete-manage-cookies
5. Contact to us via contact form, telephone or e-mail
In accordance with legal regulations, our website contains information that enables rapid electronic contact with us and communication with us, including the provision of our e-mail address. We also maintain a contact form. The personal data transmitted to us by e-mail, contact form or telephone will be stored by us for the purpose of communication and processing of the facts on which the contact was based. The data will not be passed on to third parties.
The processing of personal data sent to us by e-mail is based on Art. 6 I. lit. f EU GDPR, additionally on Art. 6 I. lit. b EU GDPR, provided that the contact is directed towards the conclusion of a contract.
Once the facts on which the contact was based have been concluded, we delete the data, unless there are periods for storage or other legitimate interests in further storage (see item 7).
6. Rights of the person concerned (your rights)
If your personal data is processed, the data protection regulations grant you comprehensive rights vis-à-vis the controller with regard to your personal data, which are described below.
Please note that the contact options for contacting us, for example to send an objection or to revoke a given consent, are indicated under item 1.
a) Right to Information
You have the right to request information from us about the personal data we process concerning you, in particular the purposes of processing; the categories of personal data being processed; the recipients or categories of recipients to whom the personal data have been or are still being disclosed; if possible, the planned duration for which the personal data will be stored or, if this is not possible, the criteria for determining this duration; the existence of a right of rectification or deletion of personal data concerning you or of a restriction on processing by the controller or of a right of objection to such processing; the existence of a right of appeal to a supervisory authority; if the personal data are not collected from the data subject and information on the origin of the data.
These rights follow from Art. 15 EU GDPR.
b) Right to correction
You have the right to request an immediate correction of incorrect and incomplete personal data with regard to your personal data.
These rights follow from Art. 16 EU GDPR.
c) Right to cancellation
You have the right to demand immediate erasure of your personal data if one of the reasons listed in Art. 17 I EU-GDPR exists. This does not apply if one of the exceptional circumstances of Art. 17 III EU-GDPR exists, in particular if the processing is necessary to fulfil a legal obligation, to exercise the right to freedom of expression and information or to assert, exercise or defend legal claims.
These rights follow from 17 EU GDPR.
d) Right to limitation of processing
You have the right to request that the personal data concerning you be restricted if you dispute the accuracy of the personal data, namely for a period that allows us to verify the accuracy of the personal data, that the processing is unlawful and you refuse to delete the personal data and instead request that the use of the personal data be restricted, we no longer need the personal data for the purposes of the processing, but you need them to assert, exercise or defend legal claims, or you have lodged an objection to the processing pursuant to Article 21(1) of the EU GDPR, as long as it is not yet clear whether the legitimate reasons on our part prevail over you. Where processing has been restricted in accordance with the above-mentioned reasons, such personal data may only be processed - apart from being stored - with your consent or for the purpose of asserting, exercising or defending rights or for the protection of the rights of another natural or legal person or on grounds of an important public interest of the Union or a Member State.
These rights follow from 18 EU GDPR.
e) Obligation to notify in connection with the correction or deletion of personal data or the restriction of processing
The right exists that the data controller shall notify all recipients to whom personal data have been disclosed of any correction or deletion of the personal data or any restriction on processing in accordance with Articles 16, 17(1) and 18 of the EU DSG Regulation, unless this proves impossible or involves a disproportionate effort.
These rights follow from Art. 19 EU GDPR.
f) Right of data portability
You have the right to have the personal data concerning you that you have provided to us transferred to yourself or to a third party, provided that the processing is based on a consent pursuant to Article 6 I a or Article 9 II a EU GDPR or on a contract pursuant to Article 6 I lit. b EU GDPR and the processing is carried out using automated procedures.
These rights follow from Art. 20 EU GDPR.
g) Right of objection
As far as the processing of your personal data is based on justified interests according to Art. 6 I lit. f EU-GDPR, you have the right to object to this at any time for reasons arising from your particular situation. We will then no longer process the personal data unless we can prove compelling reasons worthy of protection for the processing, which outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
These rights follow from Art. 21 EU GDPR.
h) Right to revoke consent
You have the right to revoke your consent at any time. The revocation of consent shall not affect the legality of the processing carried out on the basis of the consent until revocation.
This right follows from Art. 21 EU GDPR.
The contact options for revoking a given consent are indicated under item 1.
i) Right to lodge a complaint with a supervisory authority
You have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, place of work or place of presumed infringement, if they consider that the processing of personal data concerning them is contrary to the EU GDPR.
7. Storage time
We store the personal data collected for contract processing until the expiry of statutory or possible contractual deadlines, which serves to assert or exercise our legal claims or to defend legal claims against us. Once the corresponding periods have expired, we keep the information required by tax or commercial law for the periods provided for by law. Any further storage will only take place if a longer storage period is provided for by law or other regulations to which we are subject or if we have a legitimate interest in further storage.