3. Legal basis for the processing of personal data
We only process your personal data if there is a legal basis for doing so. Here, the following regulations in particular come into consideration according to the General Data Protection Regulation:
Art. 6 Abs. 1 S. 1 lit. a DSGVO: The data subject has given his/her consent to the processing of personal data concerning him/her for one or more specific purposes.
Art. 6 Abs. 1 S. 1 lit. b DSGVO: Processing is necessary for the performance of a contract to which the data subject is party or for the implementation of pre-contractual measures taken at the request of the data subject.
Art. 6 Abs. 1 S. 1 lit. c DSGVO: Processing is necessary for compliance with a legal obligation to which the controller is subject.
Art. 6 Abs. 1 S. 1 lit. d DSGVO: Processing is necessary in order to protect the vital interests of the data subject or another natural person.
Art. 6 Abs. 1 S. 1 lit. e DSGVO: Processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
Art. 6 Abs. 1 S. 1 lit. f DSGVO: Processing is necessary for the purposes of the legitimate interests of the controller or of a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require the protection of personal data, in particular where the data subject is a child.
4.Disclosure of the personal data
When visiting our website, your user data will only be forwarded to our hoster: Mittwald CM Service GmbH & Co.KG with the location of the cloud server in Germany. Otherwise, no further data will be passed on.
5.Storage period and deletion
We store all personal data that you submit to us only for as long as it is needed to fulfill the purposes for which it was submitted or as long as required by law. Upon fulfillment of the purpose and/or expiration of the legal storage periods, the data will be deleted or blocked by us.
In order to protect your data from unwanted access as comprehensively as possible, we take technical and organizational measures. We use an encryption process on our website. Your information is transmitted from your computer to our server and vice versa via the Internet using TLS encryption. You can recognize this by the fact that in the status bar of your browser the lock symbol is closed and the address line starts with https://.
7.Cookies in general
Cookies are text files that contain data from visited websites or domains and are stored by a browser on the user’s computer. A cookie is primarily used to store information about a user during or after his visit within an online offer.
The following cookie types and functions are distinguished:
Temporary cookies (also: session cookies): Temporary cookies are deleted at the latest after a user has left an online offer and closed his browser.
Permanent cookies: Permanent cookies remain stored even after the browser is closed. For example, login status can be saved or preferred content can be displayed directly when the user revisits a website. Likewise, the interests of users used for reach measurement or marketing purposes may be stored in such a cookie.
First-party cookies: First-party cookies are set by us.
Third-party cookies (also: third-party cookies): Third-party cookies are mainly used by advertisers (so-called third parties) to process user information.
Necessary (also: essential or absolutely necessary) cookies: Cookies may be absolutely necessary for the operation of a website (e.g. to store logins or other user inputs or for security reasons).
The cookies set on our website are set to support our following service programs:
Due to the marketing tools used, your browser establishes a connection with Google’s server as soon as you allow this in the settings and have given us consent to the data processing. We have no influence on the scope and further use of the data collected by Google through the use of this tool and therefore inform you according to our state of knowledge: Through the integration of DoubleClick, Google receives the information that you have called up the corresponding part of our website or clicked on the advertisement from us. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, there is a possibility that the provider will find out and store your IP address.
You can prevent participation in this tracking process in several ways:
by setting your browser software accordingly – the suppression of third-party cookies will result in you not receiving third-party ads;
durch Deaktivierung der Cookies für Conversion-Tracking, indem Sie Ihren Browser so einstellen, dass Cookies von der Domain www.googleadservices.com blockiert werden (https://www.google.de/settings/ads ). This setting is deleted when you delete your cookies;
by disabling the interest-based ads of the providers that are part of the self-regulatory campaign “About Ads” (via the link http://www.aboutads.info/choices ). This setting is deleted when you delete your cookies;
The Google AdServices service is an online advertising program from Google and is used to present our products through advertisements as soon as you have entered them in the Google search engine, thereby enabling us to optimize our service performance.
Your data will only be processed with your consent (Art. 6 para. 1 lit. a EU-DSGVO) in connection with our legitimate interest (Art. 6 para. 1 lit. f EU-DSGVO) for marketing purposes and will only be stored until you have revoked your consent.
In doing so, we process the following personal data:
Access time and duration
Should you additionally provide us with your data such as surname, first name and mail address, these data will also be processed.
In order for Google AdServices to display customized advertising, cookies are set, among other things. Cookies are small text files that store certain information on your computer.
We set the following cookies with this service:
_gcl_au This cookie is stored for 90 days and is used to link the Coversions. This cookie is 1st party cookie and contains a randomly generated user ID.
c) Google Analytics
We use “Google Analytics” on our website, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as: “Google”).
_ga This cookie stores your domain for 2 years and is a 1st party cookie. It contains a randomly generated user ID. Based on this ID, Google Analytics can recognize returning users on this website and merge the data from previous visits.
_gid This cookie stores your domain for 24 hours and is a 1st party cookie. It contains a randomly generated user ID. Based on this ID, Google Analytics can recognize returning users on this website and merge the data from previous visits.
The information generated by the cookie about the use of our website is usually transferred to a Google server in the USA and stored there. If anonymization of the IP address to be transmitted by the cookie is activated on the website (“IP anonymization”), your IP address will be truncated beforehand by Google within member states of the European Union or in other states party to the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there. Google will use this information for the purpose of evaluating your use of our website on our behalf, compiling reports on website activity and providing other services relating to website activity and internet usage to us. In the process, pseudonymous usage profiles can be created from the processed data. The IP address transmitted when using Google Analytics is not merged with other data from Google.
We use Google Analytics for the purpose of analyzing the use of our website and to be able to continuously improve individual functions and offers as well as the user experience. Through the statistical evaluation of user behavior, we can improve our offer and make it more interesting for you as a user. For this purpose, we obtain your consent for data processing pursuant to Art. 6 para. 1 lit. a EU-DSGVO. You can revoke your consent at any time, with effect for the future.
Furthermore, we process your data on the basis of our legitimate interest in the processing of the above data by Google, this is based in this respect on Art. 6 para. 1 lit. f EU-DSGVO.
You can prevent the storage of cookies generated by Google Analytics by making the appropriate settings in your web browser. In this respect, we would like to point out that in this case you may not be able to use all the functions of our website. If you want to prevent the collection of the data generated by the cookie and related to your user behavior (including your IP address) as well as the processing of this data by Google, you can download and install the web browser plugin available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de
In order to oblige Google to process the transmitted data only in accordance with our instructions and to comply with the applicable data protection regulations, we have concluded an order processing agreement with Google. For the exceptional cases in which personal data is transferred to the USA, Google has submitted to the rules for the protection of personal data within and outside the EU, the model contractual clauses https://ec.europa.eu/info/law/law-topic/data-protection and has certified itself. By doing so, Google commits itself to comply with the standards and regulations of European data protection law. For more information, please see the entry linked below: https://policies.google.com/privacy/frameworks?hl=en
Further information on data use by Google, on setting and objection options, and on data protection can be found on the following Google web pages:
Our website uses the map service Google Maps of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as: “Google”).
The use of Google Maps is a service for you, so that you can recognize our location exactly and if necessary. to better plan your visit with us. The use of Google Maps is based on your consent in accordance with. Art. 6 Abs. 1 S. 1 lit. a EU-DSGVO.
By using Google Maps, information about your use of this website (including your IP address) may be transmitted to and stored by Google on servers in the United States. Google may transfer the information obtained through Google Maps to third parties where required to do so by law, or where such third parties process the information on Google’s behalf. However, your IP address will in no case be associated with other data from Google. Nevertheless, we must point out that it would be technically possible for Google to identify individual users on the basis of the data received. We also have no influence on whether your personal data and personality profiles are processed by Google for other purposes.
Google Tag Manager is a solution that allows us to manage so-called website tags via an interface (and thus, for example, to integrate Google Analytics and other Google marketing services into our online offering). Der Tag Manager selbst (welches die Tags implementiert) verarbeitet keine personenbezogenen Daten der Nutzer. With regard to the processing of users’ personal data, reference is made to the following information on Google services.
Service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland.
Collection and storage of personal data as well as their type and purpose of use
a) When visiting the website
When you visit our website, the browser used on your terminal device automatically sends information to our website server. This information is temporarily stored in a so-called log file. Therefore, in order to improve the quality of our website, the following information is collected without your intervention and stored until automated deletion:
IP address of the requesting computer
Date and time of access
Name and URL of the retrieved file
Website from which the access is made (referrer URL)
Browser used and, if applicable, the operating system of your computer as well as the name of your access provider
This data cannot be assigned to specific persons. This data is not merged with other data sources.
b) Inquiry by mail, telephone or fax
If you contact us by e-mail, telephone or fax, your inquiry including all resulting personal data (name, inquiry) will be stored and processed by us for the purpose of processing your request. We do not share this data without your consent.
The processing of this data is based on Art. 6 DSGVO. In this context, the content of your request determines the legal basis for data processing.
The data you send to us via contact requests will remain with us until you request us to delete it, revoke your consent to store it, or the purpose for storing the data no longer applies (e.g. after we have completed processing your request). Mandatory statutory provisions – in particular statutory retention periods – remain unaffected.
10.In general, the following rights of the data subjects apply
When processing your personal data, the GDPR grants you certain rights as a website user:
a) Right to information (Art. 15 DSGVO)
You have the right to request confirmation as to whether personal data concerning you is being processed; if this is the case, you have a right to information about this personal data and to the information listed in detail in Article 15 of the GDPR.
b) Right to rectification and cancellation (Art. 16 and 17 DSGVO)
You have the right to request without undue delay the rectification of any inaccurate personal data concerning you and, where applicable, the completion of any incomplete personal data. You also have the right to request that personal data concerning you be deleted without delay, provided that one of the reasons listed in detail in Art. 17 DSGVO applies, e.g. if the data is no longer required for the purposes pursued.
c) Right to restriction of processing (Art. 18 DSGVO)
You have the right to request the restriction of processing if one of the conditions listed in Art. 18 DSGVO is met, e.g. if you have objected to the processing pursuant to Art. 21 DSGVO, for the duration of any review as to whether our legitimate interests override yours.
d) Right to data portability (Art. 20 DSGVO)
In certain cases, which are detailed in Art. 20 GDPR, you have the right to receive the personal data concerning you in a structured, common and machine-readable format or to request the transfer of this data to a third party.
e) Right of objection (Art. 21 DSGVO)
If data is collected on the basis of Art. 6 Abs. 1 S. 1 lit. f DSGVO (data processing for the protection of legitimate interests), you have the right to object to the processing at any time on grounds relating to your particular situation. We will then no longer process the personal data unless there are demonstrably compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
f) Right of withdrawal (Art. 7 Abs. 3 DSGVO)
If data is processed on the basis of your consent pursuant to Art. 7 DSGVO, you have the right to revoke your consent at any time. The revocation of consent shall not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.
g) Right of appeal to a supervisory authority
You have according to Art. 77 DSGVO the right to lodge a complaint with a supervisory authority if you believe that the processing of data concerning you violates data protection regulations. The right of complaint may be asserted in particular before a supervisory authority in the Member State of your residence, your place of work or the place of the alleged infringement.
11.Existence of automated decision making/profiling
We do not use automatic decision-making or profiling.