We inform you with this privacy statement about the nature, scope and purpose of the processing of your personal data within our online offer and the associated services.
1. Personal data
“Personal data” means any information relating to an identified or identifiable natural person (hereinafter the “data subject”); a natural person is considered as being identifiable, directly or indirectly, in particular by means of an identifier such as a name, an identification number, location data, an online identifier or one or more special characteristics expressing the physical, physiological, genetic, mental, economic, cultural or social identity of this natural person can be identified.
2. Person in charge
‘Person in charge’ means the natural or legal person, public authority, body or body which, alone or in concert with others, decides on the purposes and means of processing personal data; where the purposes and means of such processing are determined by Union law or the law of the Member States, the person in charge or the specific criteria for his designation may be provided for under Union or national law.
“Processing” means any process or series of operations related to personal data, such as collection, collection, organization, ordering, storage, adaptation or modification, read-out, queries, performed with or without the aid of automated procedures use, disclosure by transmission, dissemination or other form of provision, matching or linking, restriction, erasure or destruction.
4. Third party
“Third party” means a natural or legal person, public authority, body or body other than the data subject, the person in charge, the controller and the persons authorized under the direct responsibility of the person in charge or controller to process the personal data.
“Consent” means any expression of will voluntarily given by the data subject in an informed and unambiguous manner in the form of a statement or other unambiguous confirmatory act by which the data subject indicates that they are involved in the processing of your personal data.
“Profiling” means any kind of automated processing of personal data which consists in using that personal data to evaluate certain personal aspects relating to a natural person, in particular aspects relating to job performance, economic situation, health, to analyze or predict personal preferences, interests, reliability, behavior, location or change of location of that natural person.
II. Contact Details of the controller and the data protection officer
Senner Straße 156
Tel.: (0521) 403090
Senner Straße 156
Tel.: (0521) 403090
III. Nature and extent of processing of personal data
In principle, we process your personal data only to the extent necessary to provide this website and our services. The processing of the data takes place only if it is permitted by legal regulations. If you give your consent, any further processing is possible.
1. Visiting our website
When you visit our website, the browser you use automatically sends information to the server on our website. The following information is temporarily stored in log files:
- Date and time of access to the website,
- your internet protocol address (IP address),
- Internet service provider of the accessing system,
- Browser type used and the operating system
- Websites from which you came to our website,
- Websites that are accessed by your system through our website.
The legal basis for the storage of data and log files is Art. 6 para. 1 p. 1 lit. f DSGVO. The processing of the data is done to ensure the functionality of our website. In addition, the data is used for the technical optimization of the website as well as for the security and stability of our information technology systems. We do not use this data for marketing purposes or to draw conclusions about you. The personal data will be deleted as soon as they are no longer necessary for the purpose of their collection. When saving the data in log files, the data will be deleted at the latest after seven days. If stored beyond, your IP address will be deleted or alienated. The processing of this data in log files is essential for the provision of the website. Thus, there is no contradiction possible. When you visit our website, we process additional personal information by using certain analytics services. Further details can be found under no. IV. of this statement.
If you contact us (eg by e-mail, contact form, telephone or social media), your personal data will be processed to process the contact request and it’s processing. The legal basis for this processing of the transmitted data is Art. 6 (1) sentence 1 lit. b DSGVO. We will delete this information as soon as it is no longer necessary to achieve the purpose of the survey; so regularly when the conversation with you is over. The conversation is over when the facts are finally settled. Otherwise, the statutory retention periods apply. There is no disclosure of this data to third parties.
IV.Analysis Services: Cookies, Tracking and Content on Social Media
2. Google Analytics
We use Google Analytics, a web analytics service provided by Google Inc. (1600 Amphitheater Parkway Mountain View, CA 94043, hereinafter referred to as “Google”). Google Analytics uses so-called “cookies”, text files that are stored on your computer and that allow an analysis of the use of the website by you. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. However, in the event of activation of IP anonymization on this website, your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the US and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services related to website activity and internet usage to the website operator. The IP address provided by Google Analytics as part of Google Analytics will not be merged with other Google data. On behalf of the operator of this website, Google will use this information to evaluate your use, to compile reports on website activity and to provide other services related to the use of the website to the website operator. The legal basis for the use of Google Analytics is Art. 6 para. 1 lit. f DSGVO.
You can prevent the storage of cookies by a corresponding setting of your browser software; however, please note that if you do this, you may not be able to use all the features of this website to the fullest extent possible. In addition, you may prevent the collection by Google of the data generated by the cookie and related to your use of the website (including your IP address) as well as the processing of this data by Google by using the link below (http://tools.google.com/dlpage/gaoptout?hl=de)
3. Our social media offerings and third-party services
Furthermore, we use third-party offers on our website to optimize and analyze our website in order to provide their content and services, for example: Include videos or fonts in our website (hereafter referred to collectively as “Services”). This integration requires that the providers of these services process your IP address. Because this cannot be prevented technically, the processing of the IP address is thus necessary for the use and realization of the services. We endeavor to use only those services whose respective providers only process the IP address for the immediate provision of the services. Third parties may also use so-called pixel tags (invisible graphics, also referred to as “web beacons”) for statistical or marketing purposes. Through the “web beacons” different information, e.g. the visit to our website will be examined and evaluated. In a pseudonymised form, information may also be stored in cookies on your device, allowing us to process technical information about your browser and operating system, linked web pages, visit time and other information about our website. The legal basis for this processing of the transmitted data is Art. 6 (1) sentence 1 lit. b DSGVO. The services used are:
V. Your rights as a data subject
When your personal data are processed, you are the person concerned within the meaning of the DSGVO. This gives you the following rights to the person responsible:
1.Right to information
As the data subject, you have the right to ask the person responsible for confirmation of whether personal data relating to you are being processed; if this is the case, then they have a right to information about these personal data (Article 15 DSGVO). You can request information from the following information:
- the purposes for which the personal data are processed
- the categories of personal data being processed
- the recipients or the categories of recipients to whom the personal data relating to you have been or will be disclosed
- if possible, the planned duration for which the personal data will be stored or, if this is not possible, the criteria for determining that duration
- the existence of a right to rectification or erasure of personal data relating to you or to a restriction of processing by the person in charge or a right to object to such processing;
- the existence of a right of appeal to a supervisory authority
- if the personal data are not collected from the data subject, all available information on the source of the data
- the existence of automated decision-making including profiling according to Article 22 (1) and (4) and – at least in these cases – meaningful information about the logic involved, and the scope and intended impact of such processing on the data subject.
You also have the right to: To request information on whether the personal data concerning you are being transmitted to a third country or to an international organization. In this connection, you can request the appropriate guarantees in accordance with. Art. 46 DSGVO to be informed in connection with the transfer.
2. Right to rectification
You have the right to demand from the person responsible without delay the rectification of incorrect personal data concerning you. In consideration of the purposes of the processing you have the right to demand the completion of incomplete personal data – also by means of a supplementary declaration (Art. 16 DSGVO).
3. Right to deletion
As the data subject, you have the right in principle to require the person responsible to delete your personal data without delay if one of the following reasons applies:
- The personal data are no longer necessary for the purposes for which they were collected or otherwise processed.
- The data subject revokes their consent, to which the processing pursuant to Art. 6 para. 1 lit. a or Art. 9 para. 2 lit. a, and there is no other legal basis for processing.
- In accordance with Article 21 (1), the data subject objects to the processing and there are no high-level legitimate grounds for processing, or the data subject objects to the processing in accordance with Article 21 (2).
- The personal data were processed unlawfully.
- The deletion of personal data is required to fulfill a legal obligation under Union or national law, to which the person in charge is subject.
- The personal data has been collected in relation to information society services offered in accordance with Art. 8 (1).
If the person responsible has made public the personal data relating to you and is obliged to delete them for the reasons stated above, he shall take into account the available technology and the implementation costs appropriate measures, including technical means, to inform data person in charge processing the personal data that an affected person has requested that they delete all links to such personal data or copies or replications of such personal data.
This right to erasure does not exist if processing is required
- to exercise the right to freedom of expression and information,
- to fulfill a legal obligation required by the law of the Union or of the Member States to which the person in charge is subject, or to carry out a task of public interest or public power delegated to the person in charge;
- for reasons of public interest in the field of public health in accordance with Article 9 (2) lit. h and i and Article 9 (3)
- for archival purposes of public interest, for scientific or historical research purposes or for statistical purposes, in accordance with Article 89 (1), insofar as the law referred to in paragraph 1 is likely to render impossible or seriously affect the achievement of the objectives of that processing, or.
- to assert, exercise or defend legal claims.
4. Right to Restrict Processing
You have the right to demand that the person in charge restrict the processing if any of the following conditions apply:
- the accuracy of the personal data is disputed by the data subject for a period of time allowing the person in charge to verify the accuracy of the personal data;
- the processing is unlawful and the data subject refuses to delete the personal data and instead requests the restriction on the use of the personal data
- the person in charge no longer needs the personal data for the purposes of the processing, but the data subject requires them to assert, exercise or defend legal claims, or
- the person concerned has lodged an objection to the processing referred to in Article 21 (1) until such time as it has been established that the data subject’s legitimate grounds prevail over those of the data subject.
If processing has been restricted, such personal data may only be stored apart from their storage be processed with your consent or to assert, exercise or defend any legal claim or to protect the rights of another natural or legal person or for reasons of major public interest of the Union or of a Member State.
If you have restricted the processing, you will be notified by the person responsible before the restriction is lifted.
5. Right of objection
As the data subject, you have the right at any time, for reasons arising from your particular situation, against the processing of personal data relating to you which, on the basis of Art. 6 para. 1 lit. e or f DSGVO takes an objection. This also applies to a profiling based on these provisions.
The person responsible no longer processes the personal data in the event of an objection, unless we can prove compelling legitimate grounds for processing that outweigh the interests, rights and freedoms of the data subject. Or the processing serves the assertion, exercise or defense of legal claims. If the person responsible processes personal data in order to operate direct mail, you have the right to object at any time to the processing of personal data for the purpose of such advertising. This also applies to the profiling, as far as it is associated with such direct mail. If you object to the person in charge of the processing for the purposes of direct mail, he or she will no longer process the personal data for these purposes.
If you wish to exercise your right of objection, a message to our (n) data protection officer (s) is sufficient (for contact details see para. II).
In addition to Directive 2002/58 / EC, you have the option, in the context of the use of information society services, of exercising your right to opt-out by means of automated procedures that use technical specifications.
6. Right to revoke a data protection consent
You have the right to revoke your data protection consent at any time with effect for the future. The revocation does not affect the legality of the processing carried out on the basis of the consent until the revocation.
7. Right to information
If you have asserted the right of rectification, erasure or restriction of processing to the person in charge, he or she is obliged to notify all recipients to whom the personal data relating to you have rectified, deleted or restricted the processing unless this proves impossible or involves a disproportionate effort. The right to be informed about these recipients is given to the person responsible.
8. Right to Data Portability
You have the right to receive personally identifiable information relating to you provided to the person in charge in a structured, common and machine-readable format. In addition, you have the right to transfer this data to another person without hindrance by the person responsible for the personal data provided,
- The processing on a consent in accordance with Article 6 paragraph 1 lit. a or Article 9 paragraph 2 lit. a or on a contract pursuant to Article 6 (1) lit. b is based on and
- In the exercise of this right, you continue to have the right to obtain the personal data directly from one person in charge to another, as far as technically feasible. The right to data portability does not apply to you the processing of the data is necessary for the performance of a task in the public interest or in the exercise of public authority delegated to the person in charge.
9. Individual case-by-case decision-making including profiling
You have the right not to be subject to a decision based solely on automated processing – including profiling – which will have legal effect on you or significantly affect you in a similar manner. This shall not apply if the decision.
- necessary for the conclusion or performance of a contract between the data subject and the person in charge,
- is permissible on the basis of Union or Member State legislation to which the person in charge is subject and such legislation shall contain appropriate measures to safeguard the rights, freedoms and legitimate interests of the data subject;
or In the cases referred to in (a) and (b) above, the person in charge shall take reasonable steps to safeguard the rights and freedoms and legitimate interests of the data subject, including at least the right to obtain interference belongs to a person on the part of the person responsible, to a statement of his own position and to a challenge to the decision.
10. Right of appeal
Without prejudice to any other administrative or judicial remedy, you have right to lodge a complaint with a supervisory authority, in particular in the Member State of its residence, place of work or place of alleged infringement, if the data subject considers that the processing of personal data concerning you. The supervisory authority to which the complaint has been submitted informs you as the complainant of the status and results of the complaint, including the possibility of a judicial remedy pursuant to Art. 78 DSGVO.
VI. Data Security
We use technical and organizational measures to ensure the most complete protection of your personal data. Nevertheless, Internet-based data transmissions can generally have security holes, so that nobody can guarantee absolute protection. For this reason, you are free to personal data also in alternative ways, for example, by mail, fax or phone to send to us.