Privacy
On the following pages, we inform you about the type, scope and purpose of processing your personal data within our online offer and the associated services.
This privacy policy applies to all processing of personal data carried out by us, both within the scope of providing our services and, in particular, on our websites, in mobile applications and other types of external online presence, such as our social media profiles.
Contact details of the data controller
***
General information on data processing
1. Scope of processing of personal data
As a matter of principle, we process our users’ personal data only to the extent necessary for the provision of a functional website and our contents and services. Regular processing of our users’ personal data only takes place with the user's consent. An exception is made in cases where prior consent cannot be obtained for factual reasons and processing of the data is permitted by law.
2. Legal basis for the processing of personal data
Insofar as we obtain the consent of the data subject for processing of personal data, Art. 6 Para. 1 Letter (a) GDPR serves as the legal basis.
When processing personal data which is necessary for the performance of a contract to which the data subject is a party, Art. 6 Para. 1 Letter (b) GDPR serves as the legal basis. This also applies to processing operations which are necessary to carry out pre-contractual measures.
Insofar as processing of personal data is necessary to fulfil a legal obligation to which our company is subject, Art. 6 Para. 1 Letter (c) GDPR serves as the legal basis.
In cases where vital interests of the data subject or another natural person require the processing of personal data, Art. 6 Para. 1 Letter (d) GDPR serves as the legal basis.
If processing is necessary to safeguard a legitimate interest of our company or of a third party, and if the interests, fundamental rights and freedoms of the data subject do not outweigh the interests of the former, Article 6 Paragraph 1 letter f GDPR serves as the legal basis for processing.
3. Data erasure and storage duration
The personal data of the data subject will be deleted or blocked as soon as the reason for storage no longer applies. Furthermore, data may be stored if provided for by the European or national legislator in EU regulations, laws or other regulations to which the data controller is subject. Data will also be blocked or deleted when a storage period prescribed by the above-mentioned standards expires, unless there is a need to continue storing the data for the purpose of concluding or fulfilling a contract.
Visiting our website and log files
1. Description and scope of data processing
Whenever our website is accessed, our system automatically collects data and information from the accessing computer system. The following data are collected:
- Browser type and browser version - Host name of the accessing computer - Date and time of access - IP address of the user - Referrer URL - Operating system of the user
The data is also stored on the log files of our system.
2. Legal basis for data processing
Legal basis for the temporary storage of data and log files is Art. 6 Para. 1 Letter (f) GDPR.
3. Purpose of data processing
The temporary storage of the user’s IP address by the system is necessary to enable provision of the website to the user's computer. For this purpose, the user's IP address must remain stored for the duration of the session.
Storage in log files is used to ensure the functionality of the website. In addition, we use the data to optimize the website and ensure the security of our information technology systems. The data is not subjected to evaluation for marketing purposes in this context.
These purposes also include our legitimate interest in data processing in accordance with Art. 6 Para. 1 Letter (f) GDPR.
4. Storage duration
Data are deleted as soon as they are no longer necessary for the purpose for which they were collected. In the case of the collection of data for the provision of the website, this period is 14 days. In the case of storage of the data in log files, this is after one month at the latest.
5. Possibility of objection and removal
The collection of data for the provision of the website and the storage of the data in log files is essential for operation of the website, so there is no possibility of objection on the part of the user.
Cookies and Tracking
1. Use of cookies
We use cookies on our website. Cookies are text files that are stored in the Internet browser or by the Internet browser on your terminal device (e.g. computer, tablet, smartphone, etc.) when you visit our website. These cookies contain characteristic character strings that enable unique identification of the Internet browser when you visit the website again.
We use cookies to make our website more user-friendly. These cookies enable us to automatically recognize that you have already been with us when you visit our site again, for example as a logged-in user. They are automatically deleted after a specified time. The data processed in this way are required for the above-mentioned purposes to protect our legitimate interests and those of third parties in accordance with Art. 6 Para. 1 S. 1 Letter (f) GDPR.
You can prevent the setting of cookies by our website at any time by changing the setting correspondingly in the Internet browser used, and thus permanently objecting to the setting of cookies. Furthermore, cookies that have already been set can be deleted at any time via an Internet browser or other software programs. This is possible in all common Internet browsers. If you deactivate the setting of cookies in the Internet browser used, it is possible that not all functions of our website can be used to their full extent.
2. Google analytics
We use Google Analytics, a web analytics service provided by Google LLC. (1600 Amphitheatre Parkway Mountain View, CA 94043, USA; hereinafter "Google").
Google Analytics uses "cookies", which are text files placed on your computer to help the website analyse how you use the site. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there.
However, if IP anonymization is activated on this website, your IP address will be shortened by Google in advance within member states of the European Union or in other states which are party to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there.
On our behalf, Google will use the information to evaluate your use of the website, to compile reports on website activities and to provide us with further services related to website and internet use. We, in turn, use the data to analyse the use of our website - anonymously of course - and to optimize it. The IP address transmitted by your browser within the framework of Google Analytics is not combined with other data from Google.
The legal basis for the use of Google Analytics is Art. 6 Para. 1 Letter (f) GDPR.
You can prevent the use of cookies by selecting the appropriate settings on your browser. However, please note that if you do this you may not be able to use the full functionality of this website. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link ( http://tools.google.com/dlpage/gaoptout?hl=de) Furthermore, you can also deactivate the collection of your data by Google by clicking on this link. This will set a special opt-out cookie that will prevent Google from collecting your information in the future. Please note that you will need to click the link again if you have deleted the cookie that was set.
For more information about privacy issues related to Google Analytics, please refer to Google Analytics Help at the following link:
https://support.google.com/analytics/answer/6004245?hl=de
3. Online services on social media platforms
We offer online services on social media platforms to provide information and as a means of contacting you. We have no influence on the processing of the data by the respective platform operator. As a rule, when you visit our social media services, the platform operator stores cookies in your browser in order to register your usage behaviour or interests for market research and advertising purposes. The platform operators use the user profiles, which are usually obtained across different devices, to display personalised advertising to you. We offer our online services on the following platforms:
Provider: Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland
Data processing takes place on the basis of an agreement on the joint processing of personal data in accordance with Art. 26 GDPR.
Privacy policy: https://www.facebook.com/about/privacy/ Right of objection / Opt-out: https://www.facebook.com/settings?tab=ads
Provider: Instagram Inc., 1601 Willow Road, Menlo Park, CA 94025, USA
Privacy policy: http://instagram.com/about/legal/privacy Right of objection / opt-out: http://instagram.com/about/legal/privacy
4. Other third-party services
Within our website, we continue to use services from third parties to optimize our Internet presence in order to integrate their content and services – such as fonts – into our website (hereinafter uniformly referred to as "Services"). This integration requires that the providers of these services process your IP address. Since this cannot be technically prevented, the processing of the IP address is therefore necessary for the use and implementation of the Services. We always endeavour to use only those services whose respective providers process the IP address solely for the direct provision of the services. Third party providers may also use so-called pixel tags (invisible graphics, also known as "web beacons") for statistical or marketing purposes. The "web beacons" can be used to examine and evaluate a variety of information, such as the visit to our website. In pseudonymized form, information can also be stored in cookies on your end device, which enables the processing of technical information about your browser and operating system used, linked websites, visit time and other information about the use of our website.
The legal basis for this processing of the transmitted data is Art. 6 Para. 1 Letter (f) GDPR. The services which may be used are:
Google Maps
Integration of maps from the "Google Maps" service of the provider Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. The privacy policy of this third-party service provider can be found at https://www.google.com/policies/privacy/. Information about restricting/disabling information transmission/advertising is available at https://adssettings.google.com/authenticated.
Google Fonts
Integration of fonts from the provider Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (see https://www.google.com/fonts). The privacy policy of this third-party provider can be found at https://www.google.com/policies/privacy/. Information about restricting/disabling the transmission of information/advertising is available at https://adssettings.google.com/authenticated.
Contact
If you contact us (e.g. by e-mail, contact form or telephone), your personal data will be processed for the purpose of handling and processing the contact request.
The legal basis for this processing of the transmitted personal data is Art. 6 Para. 1 Letter (b) GDPR. If health data are concerned, the legal basis is Art. 6 Para. 1 Letter (b) GDPR in conjunction with Art. 9 Para. 2 Letter (h) GDPR and Art. 22 Para. 1 no. 1 Letter (b). Federal Data Protection Act.
We delete these data as soon as they are no longer necessary for the purpose of their collection, i.e. regularly when the respective conversation with you has ended. The conversation ends when the relevant facts have been finally clarified. Otherwise the legal retention periods apply.
Your rights as a data subject
If your personal data is processed, you are a data subject within the meaning of the GDPR. You are therefore entitled to the following rights vis-à-vis the person responsible, i.e. us:
1. Right to information
You have the right to obtain confirmation as to whether or not relevant data are being processed and to receive information about this data, further information and a copy of the data, Art. 15 GDPR.
2. Right of rectification
As a data subject, you have the right to request the completion of the data concerning you or the correction of incorrect data concerning you, Art. 16 GDPR.
3. Right of deletion
You have the right to demand that the data in question be deleted immediately, Art. 17 GDPR.
4. Right to restrict processing
Under the conditions specified in detail in Art. 18 GDPR, you may request a restriction of the processing of the data.
5. Right of objection
You can object to the future processing of data concerning you at any time, Art. 21 GDPR. The objection may be made in particular against processing for the purposes of direct advertising.
6. Right of revocation
You have the right to revoke your declaration of consent under data protection law at any time with effect for the future, Art. 7 Para. 3 GDPR. The revocation does not affect the legality of the processing carried out on the basis of the consent given up to the time of the revocation.
7. Right to information
If you have exercised the right of rectification, erasure or limitation of processing vis-à-vis the controller, the controller is obliged to notify all recipients to whom the personal data concerning you have been disclosed of this rectification, erasure or limitation of processing, unless this proves impossible or involves a disproportionate effort.
You have the right vis-à-vis the controller to be informed of these recipients.
8. Right to data transferability
You have the right to request receipt of the data concerning you and with which you have provided us, and to request that it be communicated to other responsible data controllers, Art. 20 GDPR.
9. Right of appeal
You have the right to lodge a complaint with the competent supervisory authority, Art. 77 GDPR.
Privatsphäre
Wir informieren Sie über Art, Umfang und Zweck der Verarbeitung Ihrer personenbezogenen Daten innerhalb unseres Onlineangebotes und der damit verbundenen Leistungen.
Die Datenschutzerklärung gilt für alle von uns durchgeführten Verarbeitungen personenbezogener Daten, sowohl im Rahmen der Erbringung unserer Leistungen als auch insbesondere auf unseren Webseiten, in mobilen Applikationen sowie innerhalb externer Onlinepräsenzen, wie z.B. unserer Social-Media-Profile.
1.Begriffsbestimmungen
Diese Datenschutzerklärung beruht auf Begrifflichkeiten, die durch den Europäischen Richtlinien-und Verordnungsgeber beim Erlass der Datenschutz-Grundverordnung (DSGVO) verwendet wurden. Um zu gewährleisten, dass diese Erklärung verständlich ist, erläutern wir vorab die verwendeten Begrifflichkeiten. Soweit Sie nachstehend Verweise auf gesetzliche Regelungen ohne genaue Angabe des jeweiligen Gesetzesnamens finden, ist die DSGVO gemeint.
1.Personenbezogene Daten
„Personenbezogene Daten“ sind alle Informationen, die sich auf eine identifizierte oder identifizierbare natürliche Person (im Folgenden „betroffene Person“} beziehen; als identifizierbar wird eine natürliche Person angesehen, die direkt oder indirekt, insbesondere mittels Zuordnung zu einer Kennung wie einem Namen, zu einer Kennnummer, zu Standortdaten, zu einer Online-Kennung oder zu einem oder mehreren besonderen Merkmalen, die Ausdruck der physischen, physiologischen, genetischen, psychischen, wirtschaftlichen, kulturellen oder sozialen Identität dieser natürlichen Person sind, identifiziert werden kann.
2.Verantwortlicher
„Verantwortlicher“ ist die natürliche oder juristische Person, Behörde, Einrichtung oder andere Stelle, die allein oder gemeinsam mit anderen über die Zwecke und Mittel der Verarbeitung von personenbezogenen Daten entscheidet; sind die Zwecke und Mittel dieser Verarbeitung durch das Unionsrecht oder das Recht der Mitgliedstaaten vorgegeben, so kann der Verantwortliche beziehungsweise können die bestimmten Kriterien seiner Benennung nach dem Unionsrecht oder dem Recht der Mitgliedstaaten vorgesehen werden.
3.Verarbeitung
„ Verarbeitung“ ist jeder mit oder ohne Hilfe automatisierter Verfahren ausgeführte Vorgang oder jede solche Vorgangsreihe im Zusammenhang mit personenbezogenen Daten wie das Erheben, das Erfassen, die Organisation, das Ordnen, die Speicherung, die Anpassung oder Veränderung, das Auslesen, das Abfragen, die Verwendung, die Offenlegung durch Übermittlung, Verbreitung oder eine andere Form der Bereitstellung, den Abgleich oder die Verknüpfung, die Einschränkung, das Löschen oder die Vernichtung.
4.Dritter
„Dritter“ ist eine natürliche oder juristische Person, Behörde, Einrichtung oder andere Stelle außer der betroffenen Person, dem Verantwortlichen, dem Auftragsverarbeiter und den Personen, die unter der unmittelbaren Verantwortung des Verantwortlichen oder des Auftragsverarbeiters befugt sind, die personenbezogenen Daten zu verarbeiten.
