Following we will inform you about the purpose, scope and way of processing your personal data.
1. Personal data – Article 4 No. 1 GDPR
‘personal data’ means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
2. Data subject – Article 4 No. 1 GDPR
Data subject is every identified or identifiable natural person, whose personal data is processed by the controller.
3. Controller Article 4 No. 7 GDPR
‘controller’ means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law.
4. Processing – Article 4 No. 2 GDPR
‘processing’ means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
Legal basis – lawfulness of processing Art. 6
The processing of personal data is takes place based on the following legal basis:
- Art. 6 para. 1 (a): we have obtained your consent for the processing;
- Art. 6 para. 1 (b) the processing is necessary for the performance of a contract to which you as the data subject are a party or in order to take steps at the request of the data subject prior to entering into a contract.
- Art. 6 para. 1 (c) processing is necessary for compliance with a legal obligation to which the controller is subject..
- Art. 6 para. 1 (d) processing is necessary in order to protect the vital interests of the data subject or of another natural person.
- IArt. 6 para. 1 (f) processing is necessary for the purposes of the legitimate interests pursued by our company or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data.
We have a legitimate interest in the use of these cookies as a functioning, up to date and user friendly website is for our company essential.
If some cookies require consent of the data subject, legal basis for the processing of the personal data is Art. 6 para. 1 (a) GDPR.
How can cookies be restricted or blocked?
You can adjust the settings of your browser so that cookies, which are set by the website (or another website in the internet), are restricted or blocked. In your browser you will find information about the adjustment to your settings. On www.allaboutcookies.org fyou will find general information about cookies as well as the adjustment of cookie settings for the various browsers.
Contact via email
If you contact us via email, we will process your email address as well as the personal data the email contains. The sole purpose for the processing is to answer your request. Data created during this process will be erased, if its not longer necessary in relation to the purposes for which they were collected. Legal basis is Art. 6 para. 1 (f) GDPR.
If we offer the possibility on our website to register for a newsletter, we use this for direct marketing purposes. Our newsletter informs you about interesting news and offers regarding our company. Prerequisite for receiving our newsletter is that you sign up for it, either on our website or in writing and you need a valid email address.
If you sign up, we will send you a confirmation email to the email address you initially provided. We us the double opt in process to register for our newsletter. This means you will receive an email with a confirmation link and only if you click on this link and register, the sign-up process will be complete. The confirmation email serves the purpose of making sure that owner of the email address provided as the data subject has authorized the newsletter subscription.
During sign-up to our newsletter we process the personal data you provided in the input form. This data will be transmitted to us. We also store your IP-address of the computer system provided by your internet service provider at the time of the registration and date as well as time of the registration.
We need the aforementioned personal data to provide you with our newsletter. We obtain your consent for processing your personal data during the registration for the newsletter. Legal basis is Art. 6 para. 1 (a) GDPR.
We don’t share the personal data provided by you while registration for the newsletters with any third party. The data is solely used for the newsletter subscription.
You are free to unsubscribe at any time. We provide you with a respective link in our newsletter. If you unsubscribe we consider this as a withdrawal of your consent. You may as well withdraw your consent by sending us an email (or in writing). The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal. You may object the processing of your personal data at any time.
If you unsubscribe from our newsletter we erase all personal data that was stored in regard to the newsletter subscription.
IWe store your email address as long as the subscription to our newsletter is active (please see our statement above).
We use google web fonts to display this website. Web fonts enable us to present a consisten website design despite varying browser settings form different website users. Web fonts are hosted on servers in Germany. While calling this website your browser will download the fonts from these servers. No connection to google servers will be established.
Usage of CDN (Content Delibery Network)
We use CDN’s to speed up the display of this website. These CDN’s store data files (especially larger media files such as images, graphics or texts) on regionally distributed Server that are located as close as possible to the user, to minimize the display/ delivery time of our website.
The processing of user data is subject to the aforementioned purposes and serves the security and functioning of the CDN.
Therefore your browser must establish a connection to the CDN server. This enables the provider of the CDN server to recognize that our website was called via your IP-address.6 para. 1 (f) GDPR.
The purpose of utilizing CDN is our legitimate interest in a secure and efficient display, analysis and optimization of our website, according to Art. 6 para. 1 (f) GDPR.
We use the following CDNs for our website:
Internet Hosting provider and Log-files
This website is hosted by a provider with a German hosting provider. We entered into a data processing agreement with this provider.
If you access our website, the browser of your device automatically provides information to the server if the internet hosting provider.
The IP-address of your device with whom you call our website/ webservice, your browser, the configuration of your computer/ device system as well as time and date of the access. The IP-address is solely stored as far as it is necessary to provide the services of the website hosting provider and our own services. Otherwise the IP-addresses will be erased or anonymized. Your IP-address will be stored to recognize and defend attacks on the IT-systems utilized.
Legal basis for the aforementioned data processing is Art. 6 para. 1 (f) GDPR. We have a legitimate interest in the processing as it is pivotal to provide our website, the stability and security of the utilized IT-systems.
Rights of the data subject
The GDPR contains the following rights to the data subject towards the processing of the controller.
You have the following rights:
• Right of access, Art. 15 GDPR
• Right to rectification, Art. 16 GDPR
• Right to erasure (‘right to be forgotten’), Art. 17 GDPR
• Right to restriction of processing, Art. 18 GDPR
• Notification obligation regarding rectification or erasure of personal data or restriction of processing, Art. 19 GDPR
• Right to data portability, Art 20 GDPR
• Right to object
• Right to withdraw consent
Right to withdraw consent
The data subject shall have the right to withdraw his or her consent at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
This right is based upon Art. 7 para. 3 GDPR.
Separate information on your tight to object Art 21 GDPR
The data subject shall have the right to object, on grounds relating to his or her particular situation, at any time to processing of personal data concerning him or her which is based on point (e) or (f) of Article 6(1), including profiling based on those provisions. We shall no longer process the personal data unless we demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims.
Where personal data are processed for direct marketing purposes, you as the data subject shall have the right to object at any time to processing of personal data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing. Where you as the data subject objects to processing for direct marketing purposes, the personal data shall no longer be processed for such purposes.