Usage data (e.g., websites visited, interest in content, access times), meta/communication data (e.g., device information, IP addresses), processing of special categories of data (Art. 9 para. 1 DSGVO): No special categories of data are processed.
Provision of the online offer, its contents and functions Provision of contractual services, service and customer care, marketing, advertising and market research and security measures.
In accordance with Art. 32 DSGVO and taking into account the state of the art, the implementation costs and the nature, scope, circumstances and purposes of the processing as well as the varying probability of occurrence and severity of the risk to the rights and freedoms of natural persons, we take appropriate technical and organisational measures to ensure a level of protection commensurate with the risk; these measures include, in particular, safeguarding the confidentiality, integrity and availability of data by controlling the physical access to the data as well as the access, input, transmission, safeguarding of availability and its separation. Furthermore, we have established procedures to ensure that data subjects' rights are exercised, data is deleted, and we respond to any threats to the data. Furthermore, we take the protection of personal data into account as early as the development or selection of hardware, software and procedures, in accordance with the principle of data protection by designing technology and by using data protection-friendly default settings (Art. 25 DSGVO). The security measures include in particular the encrypted transmission of data between your browser and our server. Cooperation with contract processors and third parties If, in the course of our processing, we disclose data to other persons and companies (contract processors or third parties), transmit it to them or otherwise grant them access to the data, this will only be done on the basis of a legal permit (e.g. to use your personal data for the purpose of processing your order). e.g. if a transfer of the data to third parties, such as to payment service providers, is necessary for the performance of the contract in accordance with Art. 6 Para. 1 letter b DSGVO), if you have consented, if a legal obligation provides for this or on the basis of our legitimate interests (e.g. when using agents, web hosts, etc.). If we commission third parties to process data on the basis of a so-called "contract processing agreement", this is done on the basis of Art. 28 DSGVO.
If we process data in a third country (i.e. outside the European Union (EU) or the European Economic Area (EEA)) or if this is done in the context of using the services of third parties or disclosure or transfer of data to third parties, this will only take place if it is done to fulfil our (pre-)contractual obligations, on the basis of your consent, on the basis of a legal obligation or on the basis of our legitimate interests. Subject to legal or contractual permissions, we will only process or transfer the data in a third country if the special requirements of Art. 44 ff. DSGVO. This means that the processing is carried out, for example, on the basis of special guarantees, such as the officially recognised determination of a level of data protection corresponding to that of the EU (e.g. for the USA through the "Privacy Shield") or compliance with officially recognised special contractual obligations (so-called "standard contractual clauses").
You have the right to obtain confirmation as to whether or not data in question is being processed and to obtain information about this data and to receive further information and a copy of the data in accordance with Art. 15 DSGVO. You have accordingly. Art. 16 DPA, you have the right to request the completion of data concerning you or the correction of incorrect data concerning you. In accordance with Art. 17 DSGVO, you have the right to demand that data concerning you be deleted immediately, or alternatively, in accordance with Art. 18 DSGVO, to demand that the processing of the data be restricted. You have the right to demand that the data concerning you which you have made available to us be received in accordance with Art. 20 DSGVO and to demand that it be passed on to other responsible parties. You also have the right to lodge a complaint with the competent supervisory authority in accordance with Art. 77 DSGVO.
You have the right to revoke consents granted in accordance with Art. 7 para. 3 DSGVO with effect for the future.
When contacting us (via contact form or e-mail), the user's details are processed for the purpose of handling the contact request and its processing in accordance with Art. 6 Para. 1 lit. b) DSGVO. The user's details may be stored in our customer relationship management system ("CRM system") or comparable enquiry organisation. Collection of access data and log files We collect data on the basis of our legitimate interests in the sense of Art. 6 Para. 1 lit. f. DSGVO data on every access to the server on which this service is located (so-called server log files). The access data includes the name of the website accessed, file, date and time of access, amount of data transferred, notification of successful access, browser type and version, the user's operating system, referrer URL (the previously visited site), IP address and the requesting provider. For security reasons (e.g. to clarify misuse or fraud), log file information is stored for a maximum of seven days and then deleted. Data whose further storage is required for evidence purposes is excluded from deletion until the respective incident has been finally clarified. Online presences in social media We maintain online presences on the basis of our legitimate interests within the meaning of Art. 6 para. 1 lit. f. DSGVO online presences within social networks and platforms in order to be able to communicate with customers, interested parties and users active there and inform them about our services. When calling up the respective networks and platforms, the terms and conditions and data processing guidelines of their respective operators apply. Unless otherwise stated in our data protection declaration, we process the data of users if they communicate with us within the social networks and platforms, e.g. write articles on our online presences or send us messages.