Data protection

Data Protection

Responsible and legally compliant handling of your personal data is very important to us. This privacy policy describes the way we process your personal information when you visit our website and how we proceed with it.

 

1. Responsibility

The person responsible in the sense of the General Data Protection Regulation (GDPR), other data protection laws in the member states of the European Union such as the Federal Data Protection Act (BDSG n.F.) and other provisions with data protection character is:

Andrea Cordella, Julius-Probst-Straße 4, D-66459 Kirkel-Limbach

Further information can be found in the imprint.

2. Explanation of essential terms

This Privacy Policy uses terms established by the European Regulatory Authority when issuing the General Data Protection Regulation. For a better understanding of this Privacy Policy, we explain the key terms below:

Personal Data

Personal data is any information relating to an identified or identifiable natural person (hereinafter the "person concerned"). A natural person is considered to be identifiable if it can be identified, directly or indirectly, in particular by association with an identifier such as a name, an identification number, location data, an online identifier or one or more special features, that express the physical, physiological, genetic, mental, economic, cultural or social identity of this natural person.

Person concerned

“Person concerned” is any identified or identifiable natural person whose personal data is processed by the controller - for example, you as a customer of our company or user of this website.

Processing

Processing means any process or series of operations related to personal data, such as collecting, recording, organizing, managing, storing, adapting or modifying, reading, querying, using, with or without the aid of automated procedures; disclosure by submission, dissemination or other form of provision, reconciliation or association, restriction, erasure or destruction.

Person(s) responsible or controller(s)

Responsible controller is the natural or legal person, public authority, body or institution that, alone or in concert with others, decides on the purposes and means of processing personal data. In a nutshell, that's us.

Consent

Consent is any statement or other unambiguous confirmatory act by the data subject for the particular case voluntarily given and unambiguously expressed, by which the data subject indicates that he/she consents to the processing of the personal data concerning him / her.

3. Data processed on these websites

Below we inform you about the processing of personal data when using this website. Personal data in connection with the use of this website are e.g. name, address, as well as e-mail address and IP address.

In principle, we process personal data of users only insofar as this is necessary to provide a functioning website and its contents. Furthermore, we collect personal data when you contact us by e-mail or via a contact form.

3.1 Data processing for the provision of the website and creation of log files

By your visit to our website personal data is processed. In order to transmit and display the Internet pages in your browser, it is necessary to process the IP address of the device you are using. In addition, more information about the browser of your device is transmitted.

In terms of data protection, we are also obliged to guarantee the confidentiality and integrity of personal data processed using our IT systems.
For this purpose, the following data is logged:

• IP address of the calling terminal
• Operating system of the calling terminal
• Browser type and version of the calling terminal
• Name of the file retrieved
• Date and time of retrieval
• Referring URL

When the IP address is stored, the last two blocks are filled with the number 0 so that a personal reference from the remaining data can no longer be established.

Storage in log files is done to ensure the functionality of the website. In addition, the data is used on a case by case basis to optimize the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context and is also excluded in principle by the anonymized IP address.

The legal basis for this data processing is Art. 6 para. 1 lit. f) GDPR. Our legitimate interest in the sense of this legal standard is the operation of this website as well as the implementation of the protection goals of the confidentiality, integrity and availability of the data.

3.2 Use of cookies

Cookies are used on our website. Cookies are small text files stored in your device via your browser. Cookies do not install or start programs or other applications on your computer. Rather, they are necessary to ensure certain functions of our Internet pages. For this purpose, we use session cookies of our system, which are automatically deleted from your browser immediately after the visit to the website.

For web analytics, we also use cookies that are stored over a longer period of time.

Through appropriate settings in your browser, you can prevent the setting of cookies. However, this may mean that the use of our website will be limited.

The legal basis for this data processing is Art. 6 para. 1 lit. f) GDPR in conjunction with § 15 TMG. Our legitimate interest in the sense of this legal standard is the proper operation of these Internet pages.

3.3 Data transmission in the context of an e-mail communication

If you send us an e-mail, we collect and process the personal data that you provide to us in the e-mail. This can e.g.
• Your first name,
• Your last name,
• Your address,
• Your phone number,
• Your e-mail address and
• the content of your e-mail or message if it contains personal information.

This is done in order to communicate with you if you have contacted us, to answer your questions or to provide you with the information you request.
The legal basis for this data processing is Art. 6 para. 1 lit. f) GDPR. Our legitimate interest in the sense of this legal standard is the communication with customers and interested parties.

3.4 Use of our contact form

We offer a contact form on our website where you can submit inquiries to us or contact us in general. In addition to the voluntary information and your message content, we require the following information from you:

• Name
• E-mail address

We require this information in order to process your request, to address you correctly and to provide you with an answer.

Furthermore, we collect your IP address for safety measures when transmitting the data.
Inquiries received via the contact form on our website are usually stored in our e-mail program until the processing is completed.

Should data in the context of a customer or prospective customer relationship no longer be necessary or outweighing a conflicting interest of the customer or prospective customer, we will delete the relevant data, as far as there are no legal storage requirements.

The legal basis for this data processing is Art. 6 para. 1 lit. f) GDPR. Our legitimate interest in the sense of this legal standard is the communication with customers and interested parties in connection with taking measures to ward off spam attacks.

3.5 Use of Google Maps

This website uses Google Maps API to visually display geographic information.

The operating company of Google Maps is Google Inc., 1600 Amphitheater Pkwy, Mountain View, CA 94043-1351, USA.

When accessing the websites that integrate Google Maps, Google transmits data to third-party servers. For more information about Google's data processing, please refer to the Google Privacy Notice.There you can also change your personal privacy settings in the privacy center.

With respect to the use of Google Maps, it should be noted that Google's reasonable level of privacy is ensured through its participation in the Privacy Shield and Google's privacy and data protection policies.

For detailed information about managing your own data related to Google products, click here.

The legal basis for this data processing is Art. 6 para. 1 lit. f) GDPR. Our legitimate interest in the sense of this legal standard is an appealing presentation of our online offers and an easy findability of the places we have indicated on the website.

3.6 Calling scripts from Google Content Delivery Networks (CDN)

We use fonts and jQuery scripts that are not stored locally on the web server but in a content delivery network provided by Google. When accessing the pages containing these fonts or scripts, data is transferred to Google servers in third countries.

The operating company of Google CDNs is Google Inc., 1600 Amphitheater Pkwy, Mountain View, CA 94043-1351, USA.

With respect to the design of this presentation via the embedding of scripts and scripts through the Google CDN, it should be noted that Google's reasonable level of privacy is ensured through its participation in the Privacy Shield and Google's privacy and data protection policies ,

For more information about Google's data processing, please refer to the Google Privacy Notice. There you can also change your personal privacy settings in the privacy center.

For detailed information about managing your own data related to Google products, click here.
The legal basis for this data processing is Art. 6 para. 1 lit. f) GDPR. Our legitimate interest in terms of this legal standard is an appealing presentation and a guaranteed functionality of our online offers.

3.7 Use of Matomo (formerly Piwik)

This website uses Matomo, an open source software for the statistical evaluation of visitor access. The software is operated on our server and the data protection-sensitive log files are stored exclusively on this server.

Matomo uses so-called "cookies". These are text files that are stored on your computer and that allow an analysis of the use of the website by you. The information thus generated about your use of the Internet offer is stored on our server in Germany.

The IP address is anonymized immediately after processing and before its storage by replacing the digits of the last block with 0, so that in the context of our analyzes, a direct personal reference is not possible.

You have the option to prevent the installation of cookies by changing the settings of your browser software. We point out that with appropriate attitude not all functions of this website may be available.

You can decide whether a unique web analytics cookie may be stored in your browser in order to enable us as the operator of the website to collect and analyze various statistical data.

4. Purposes of processing personal data

If you are a customer of our company, we process the aforementioned data for the operation of our website and for the fulfillment of contractual obligations towards our customers.

For inquiries from you outside an active customer relationship, we process the data for the implementation of pre-contractual measures.

5. Information about the storage duration of your data

The processed personal data will be deleted or blocked as soon as the purpose of the storage is omitted. In addition, such storage may be provided for by the European or national legislator in EU regulations, laws or other regulations to which the controller is subject. Blocking or deletion of the data also takes place when a storage period prescribed by the standards mentioned expires, unless there is a need for further storage of the data for conclusion of a contract or fulfillment of the contract.


If the data processing takes place in connection with an existing customer relationship, we store the data collected here, taking into account the overall context and taking into account our contractual obligations resulting from the existing customer relationship.

For requests from you outside of an active customer relationship, we store the data until the request is completed, as long as there are no other legal requirements.

6. Information about consent

If we process your personal data on the basis of a consent, you have the right to revoke your consent at any time, without affecting the legality of the processing carried out on the basis of the consent until the revocation.

7. Voluntary information beyond the data collected by us

Insofar as you provide us with data, e.g. voluntarily provided in forms and these are not required for the performance of our contractual obligations, we process this data on the basis that we assume that the processing and use of this data is in your interest.

8. Recipient of the data collected from you and forwarding of this data

Data that you provide to us via these Internet pages are generally not disclosed to third parties. In particular, your data will not be disclosed to third parties for their advertising purposes.


However, we use service providers for the operation of these internet sites, such as our internet service provider. It may happen that one of our service providers receives knowledge of personal data. We carefully select our service providers - in particular with regard to data protection and data security - and take all data protection measures necessary for legally permissible data processing.

9. Data processing outside the European Union

With the exception of the use of Google Maps, we do not process your personal data in a so-called third country outside the European Union and Switzerland.

With respect to the use of these Google products, we point out that Google's reasonable level of privacy is ensured by its participation in the Privacy Shield and Google's privacy and data security policies.

10. Note about absence of an automated decision making including profiling

Automated decision-making including profiling according to Art. 22 para. 1 and 4 does not take place when processing your data on this website.

11. Your rights as a Person concerned

According to Art. 15 GDPR you have the right to informationabout your personal data. You can contact our data protection officer or us directly for information at any time.

In the case of a request for information that is not in writing, we ask for your understanding that we may then have to request proof from you proving that you are the person for whom you are claiming.

You also have a right to correction(Art. 16 GDPR) or cancellation(Art. 17 GDPR) or to limitation(Art. 18 GDPR) of processing, insofar as you are legally entitled to do so. Furthermore, you have a right to data portability (Article 20 GDPR) and according to Art. 21 GDPR a right to objectto the processing within the scope of the legal requirements.

In addition to the rights listed above, you also have the right to complain about the processing of personal data by us at a supervisory authority for data protection, without prejudice to any other administrative or judicial remedy, in accordance with Art. 77 GDPR.

12. Revision of this privacy policy

We reserve the right to change this Privacy Policy from time to time to ensure it complies with current legal requirements or to reflect changes in our services in the Privacy Policy. Your new visit will be subject to the updated privacy policy, which you will always find here.

 

As of May 2018