A. Name and Contact Details of the Controller
The controller within the meaning of the General Data Protection Regulation (GDPR) and other data protection regulations is as stated in the Legal Notice (Impressum).
B. Provision of the Website and Creation of Log Files
- Description of Data Processing
Every time our website is accessed, our system automatically collects data and information from the computer system of the calling computer. The following data is collected: information about the browser type and version used, the user’s operating system, the user’s IP address, date and time of access, websites from which the user’s system reaches our website (referrer URL), the subpages of our homepage accessed by the user, the name of the retrieved file, and the notification of whether the retrieval was successful.
These data are deleted from the system’s log files after 7 days, unless their further processing is exceptionally necessary to protect our legitimate interests, for example, to initiate the blocking of IT addresses or to file a criminal complaint. The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. These data are not stored or merged with other personal data of the user.
- Purpose and Legal Basis of Data Processing
The data mentioned in Section 1 are collected to enable the delivery of the website to the user’s computer. The legal basis for this is Art. 6(1)(f) GDPR. The temporary collection of the IP address to display the pages accessed by the user is technically necessary for this purpose and represents a legitimate interest on our part. Furthermore, the collection serves the security of our web server and the trouble-free operation of our website, for example through monitoring to prevent or detect hacker attacks. These purposes also constitute a legitimate interest on our part within the meaning of Art. 6(1)(f) GDPR, which is not overridden by any interests of the user.
- Transfer and Recipients of Data
The collected data is stored on our web server (hosting). We use a service provider for hosting who processes the data on our behalf and is contractually obliged to comply with data protection regulations. The server location is in Germany or the European Union. The collected data is not transmitted to third parties unless this is necessary in the event of attacks on our IT infrastructure, for example within the scope of filing a criminal complaint with law enforcement authorities.
- Possibility of Objection
The collection of the IP address for the provision of the website and the storage of the data in log files is mandatory for the operation of the website. Consequently, there is no possibility for the user to object.
C. Contact via E-Mail
- Description and Purpose of Data Processing
Contact can be made via the e-mail address provided by us. In this case, the user’s personal data transmitted with the e-mail will be stored. The data is used exclusively for processing the conversation and answering the request. The legal basis for the processing of data transmitted in the course of sending an e-mail is Art. 6(1)(f) GDPR. If the e-mail contact aims at the conclusion of a contract, the additional legal basis for the processing is Art. 6(1)(b) GDPR.
- Duration of Storage
The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. If the inquiry relates to a concluded contract or a contract currently being negotiated, the communication contents and times are stored until any claims arising therefrom serve become time-barred. Otherwise, the conversation is ended when it can be inferred from the circumstances that the matter in question has been finally clarified.
- Possibility of Objection
The user can object to the storage of their personal data at any time. In such a case, the conversation cannot be continued. All personal data stored in the course of contacting us will be deleted in this case, provided that no statutory retention obligations exist.
D. Cookies and Technical Functions
- Use of Cookies (Polylang)
Our website uses cookies. Cookies are text files that are stored in the internet browser or by the internet browser on the user’s computer system. We use cookies to ensure the multilingualism of the website. For this purpose, we use the plugin “Polylang”.
The plugin sets a cookie (e.g., “pll_language”) to store the language setting selected by the user or the language of the browser. This serves to display the website directly in the correct language to the user upon a return visit or when switching between subpages.
The legal basis for the processing of personal data using this technically necessary cookie is Art. 6(1)(f) GDPR. Our legitimate interest lies in the provision of a functional, user-friendly, and multilingual website.
Since cookies are stored on your end device, you as the user have full control over the use of cookies. By changing the settings in your internet browser, you can deactivate or restrict the transmission of cookies. Cookies that have already been stored can be deleted at any time.
- Local Integration of Google Fonts (OMGF)
We use “Google Fonts” typefaces on our website. However, to protect your privacy, we have integrated these fonts locally on our own web server (using the OMGF plugin). This means that when you visit our page, no connection is established to Google’s servers and therefore no data transfer (such as your IP address) to Google takes place in connection with the display of the fonts. The fonts are displayed solely by our server, which has already been described in Section B.
E. Rights of the Data Subject
As a data subject, you have a right to free information about the data stored by us about your person as well as, if applicable, a right to rectification, to restriction of processing, to erasure, to notification of third parties, to data portability, to objection, and to lodge a complaint with the competent data protection supervisory authority.
- Right of Access
You have the right to request confirmation from us as to whether we are processing personal data concerning you. If this is the case, you have a right to information about this data as well as information about the processing purposes, the categories of personal data, the recipients, the planned storage duration, and the existence of data subject rights.
- Right to Rectification
You have the right to request the rectification of incorrect or the completion of your personal data stored by us.
- Right to Restriction of Processing
Under the conditions of Art. 18 GDPR, you can request the restriction of the processing of your personal data if the accuracy of the data is disputed by you, the processing is unlawful but you refuse their erasure, or we no longer need the data but you need them for the assertion, exercise or defense of legal claims, or you have lodged an objection against the processing in accordance with Art. 21 GDPR.
- Right to Erasure
You have the right to request that personal data concerning you be deleted immediately if one of the reasons of Art. 17 GDPR applies, for example, if the data are no longer required for the purposes pursued or if you have lodged an objection against the processing.
- Right to Data Portability
You have the right to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request the transmission to another controller, provided that the processing is based on consent or a contract and is carried out by automated means.
- Right to Object
If your personal data are processed on the basis of legitimate interests pursuant to Art. 6(1)(f) GDPR, you have the right to object to the processing of your personal data pursuant to Art. 21 GDPR, provided that there are grounds for this arising from your particular situation. If you wish to exercise your right of revocation or objection, an e-mail to the address mentioned above under A. is sufficient.
- Right to Lodge a Complaint with a Supervisory Authority
You have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes the GDPR.