I. GENERAL INFORMATION ON DATA PROCESSING

 

We process the personal data of our users only to the extent necessary to provide a functioning website as well as our content and services.

 

Insofar as we obtain the consent of the person concerned for the processing of personal data, Art. 6 para. 1 lit. a EU-GDPR serves as the legal basis.

 

Art. 6 para. 1 lit. b EU-GDPR serves as the legal basis for the processing of personal data required for the performance of a contract to which the data subject is a party. This also applies to processing operations which are necessary for the implementation of pre-contractual measures.

 

If the processing of personal data is necessary to fulfil a legal obligation to which our company is subject, Art. 6 para. 1 lit. c EU-GDPR serves as the legal basis.

 

In the event that vital interests of the data subject or another natural person necessitate the processing of personal data, Art. 6 para. 1 lit. d EU-GDPR serves as the legal basis.

 

If the processing is necessary to safeguard a legitimate interest of our company or a third party and the interests, fundamental rights and fundamental freedoms of the data subject do not outweigh the first interest, Art. 6 para. 1 lit. f EU-GDPR serves as the legal basis for the processing.

 

The personal data of the person concerned will be deleted or blocked as soon as the purpose of storage no longer applies. In addition, the data may be stored if the European or national legislator has provided for this in Union regulations, laws or other provisions to which the person responsible is subject. The data shall also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless it is necessary for further storage of the data for the conclusion or performance of a contract.

 

We sometimes use specialised providers for the provision of our website or certain services on the website (e.g. for hosting pages or sending newsletters). These providers act as service providers for us and may also obtain knowledge of your personal data in connection with the maintenance and servicing of the systems. We have concluded so-called contract processing agreements with these providers in accordance with Art. 28 EU-GDPR, which ensure that the data processing is carried out in a permissible manner.

 

II. PROVISION OF THE WEBSITE AND CREATION OF LOGFILES

 

Each time you access our website, our system automatically collects data and information from the computer system of the accessing computer.

 

The following data is collected:

 

(1) Information about the browser type and the version used

 

(2) The IP address of the user

 

(3) Date and time of access

 

(4) Websites from which the User's system accesses our Website

 

The data is also stored in the log files of our system. These data are not stored together with other personal data of the user.

 

The legal basis for the temporary storage of data and log files is Art. 6 para. 1 lit. f EU-GDPR.

 

The temporary storage of the IP address by the system is necessary to enable delivery of the website to the user's computer. For this purpose, the IP address of the user must remain stored for the duration of the session.

 

The data is stored in log files in order to ensure the functionality of the website. The data is also used to optimise the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context.

 

These purposes also include our legitimate interest in data processing pursuant to Art. 6 para. 1 lit. f EU-GDPR.

 

The data will be deleted as soon as they are no longer required for achieving the purpose for which they were collected. In case of the collection of data for the provision of the website, this is the case when the respective session has ended.

 

If the data is stored in log files, this will we done for seven days at the latest. A storage going beyond this is possible. In this case the IP addresses of the users are deleted or alienated, so that an assignment of the calling client is no longer possible.

 

The collection of data for the provision of the website and the storage of data in log files is mandatory for the operation of the website. Consequently, there is no possibility of objection on the part of the user.

 

III. CONTACT FORMS AND E-MAIL CONTACT

 

On our website there are contact forms which can be used for electronic contact. If a user makes use of this possibility, the data entered in the respective input mask will be transmitted to us and stored. Alternatively, it is possible to contact us via the e-mail address(es) provided. In this case, the personal data of the user transmitted with the e-mail will be stored.

 

The legal basis for the processing of data transmitted in the course of using the contact form or sending an e-mail is Art. 6 para. 1 lit. f EU-GDPR.

 

If the use of a contact form or the transmission of an e-mail serves to fulfil a contract to which the user is a contracting party or the implementation of pre-contractual measures, the legal basis for the processing of data is Art. 6 para. 1 lit. b GDPR.

 

The processing of personal data from the respective input mask or in case of an establishment of contact by e-mail serves us alone for the treatment of the establishment of contact.

 

These purposes also include our legitimate interest in the processing of personal data pursuant to Art. 6 para. 1 lit. f EU-GDPR, insofar as it is not already the fulfilment of a contract to which the user is a contracting party or the implementation of pre-contractual measures.

 

The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. For the personal data from the input mask of the respective contact form and those sent by e-mail, this is the case when the respective conversation with the user has ended. The conversation is terminated when it can be inferred from the circumstances that the relevant facts have been conclusively clarified. If for the communication contents legal storage periods exist, e.g. from commercial and/or tax-legal defaults, the appropriate data are deleted after expiration of these periods.

 

If there are no legal storage obligations, the user can object to the storage of his personal data at any time. In such a case, the conversation cannot be continued.

 

In this case, all personal data stored in the course of establishing contact will be deleted.

 

IV. RIGHTS OF THE DATA SUBJECT

 

Every data subject has the right of access under Article 15 of the EU-GDPR, the right of rectification under Article 16 of the EU-GDPR, the right of deletion under Article 17 of the EU-GDPR, the right to limitation of processing under Article 18 of the EU-GDPR, the right to object under Article 21 of the EU-GDPR and the right to transfer data under Article 20 of the EU-GDPR. With regard to the right of access and the right of cancellation, the restrictions under §§ 34 and 35 BDSG-neu (Bundesdatenschutzgesetz) apply. In addition, there is a right of appeal to a data protection supervisory authority (Article 77 EU-GDPR in conjunction with § 19 BDSG-neu).

 

You can revoke your consent to the processing of personal data at any time. This also applies to the revocation of declarations of consent given to us before the EU-GDPR came into force, i.e. before 25 May 2018. Please note that the revocation will only take effect in the future. Processing that took place before the revocation is not affected.