Logo

Privacy Policy

1. Privacy at a Glance

General Information

The following notes provide a simple overview of what happens to your personal data when you visit this website. Personal data refers to any data that can be used to personally identify you. Detailed information on data protection can be found in our privacy policy listed below this text.

Data Collection on This Website

Who is responsible for data collection on this website?
Data processing on this website is carried out by the website operator. You can find their contact details in the "Information on the Responsible Party" section of this privacy policy.

How do we collect your data?
Your data is collected in two ways:

  1. Data you provide to us: For example, data you enter into a contact form.

  2. Automated data collection: Other data is collected automatically or with your consent when you visit the website via our IT systems. This primarily includes technical data (e.g., internet browser, operating system, or time of page access). This data is collected automatically as soon as you enter the website.

What do we use your data for?
Some data is collected to ensure the proper functioning of the website. Other data may be used to analyze user behavior.

What rights do you have regarding your data?
You have the right to obtain free information at any time about the origin, recipient, and purpose of your stored personal data. You also have the right to request the correction or deletion of this data. If you have given consent for data processing, you may revoke this consent at any time for the future. Additionally, under certain circumstances, you have the right to request the restriction of the processing of your personal data. Furthermore, you have the right to lodge a complaint with the relevant supervisory authority.

For these and other questions regarding data protection, you can contact us at any time.

2. Hosting

IONOS

We host our website with IONOS SE. The provider is IONOS SE, Elgendorfer Str. 57, 56410 Montabaur (hereinafter referred to as "IONOS"). When you visit our website, IONOS collects various log files, including your IP addresses. For details, please refer to IONOS's privacy policy: https://www.ionos.de/terms-gtc/terms-privacy.

The use of IONOS is based on Art. 6(1)(f) GDPR. We have a legitimate interest in ensuring the most reliable presentation of our website. If consent has been requested, processing is carried out exclusively based on Art. 6(1)(a) GDPR; consent can be revoked at any time.

Data Processing Agreement

We have entered into a Data Processing Agreement (DPA) with the above-mentioned provider. This is a legally required contract that ensures the provider processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.

3. General Information and Mandatory Disclosures

Data Protection

The operators of this website take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with legal data protection regulations and this privacy policy.

When you use this website, various personal data is collected. Personal data refers to data that can be used to personally identify you. This privacy policy explains what data we collect and how we use it. It also explains how and for what purpose this is done.

We would like to point out that data transmission over the Internet (e.g., via email) may have security vulnerabilities. Complete protection of data from third-party access is not possible.

Information on the Responsible Party

The party responsible for data processing on this website is:

Datenbeschützerin GmbH
Unterer Sand 9
94209 Regen, Germany

Phone: +49 (0)9921 88229000
Email: info@datenbeschuetzerin.de

The responsible party is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data (e.g., names, email addresses, etc.).

Storage Duration

Unless a more specific storage period is stated in this privacy policy, your personal data will remain with us until the purpose for processing the data no longer applies. If you assert a legitimate request for deletion or revoke consent for data processing, your data will be deleted unless we have other legally permissible reasons for storing your personal data (e.g., tax or commercial retention periods). In the latter case, deletion will take place after these reasons no longer apply.

Revocation of Your Consent to Data Processing

Many data processing operations are only possible with your express consent. You can revoke consent you have already given at any time. The legality of data processing carried out before the revocation remains unaffected.

Right to Object to Data Collection in Special Cases and to Direct Marketing (Art. 21 GDPR)

IF DATA PROCESSING IS BASED ON ART. 6(1)(E) OR (F) GDPR, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA AT ANY TIME FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION. THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. THE RESPECTIVE LEGAL BASIS ON WHICH PROCESSING IS BASED CAN BE FOUND IN THIS PRIVACY POLICY. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR AFFECTED PERSONAL DATA UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR PROCESSING THAT OVERRIDE YOUR INTERESTS, RIGHTS, AND FREEDOMS OR IF PROCESSING IS FOR THE ESTABLISHMENT, EXERCISE, OR DEFENSE OF LEGAL CLAIMS (OBJECTION PURSUANT TO ART. 21(1) GDPR).

IF YOUR PERSONAL DATA IS PROCESSED FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR SUCH MARKETING. THIS ALSO APPLIES TO PROFILING TO THE EXTENT THAT IT IS RELATED TO SUCH DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA WILL NO LONGER BE USED FOR DIRECT MARKETING PURPOSES (OBJECTION PURSUANT TO ART. 21(2) GDPR).

Right to Lodge a Complaint with the Supervisory Authority

In the event of violations of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, particularly in the member state of their habitual residence, place of work, or the place of the alleged violation. The right to lodge a complaint exists without prejudice to other administrative or judicial remedies.

Right to Data Portability

You have the right to have data that we process automatically based on your consent or in fulfillment of a contract handed over to you or a third party in a commonly used, machine-readable format. If you request the direct transfer of the data to another controller, this will only be done to the extent technically feasible.

SSL/TLS Encryption

For security reasons and to protect the transmission of confidential content, such as orders or inquiries you send to us as the site operator, this site uses SSL or TLS encryption. You can recognize an encrypted connection by the browser's address line changing from "http://" to "https://" and by the lock symbol in your browser line.

If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Access, Deletion, and Correction

Within the framework of applicable legal provisions, you have the right to free information about your stored personal data, its origin and recipients, and the purpose of data processing at any time. You may also have the right to correct or delete this data. For this purpose, as well as for further questions regarding personal data, you can contact us at any time.

Right to Restriction of Processing

You have the right to request the restriction of the processing of your personal data. To do so, you can contact us at any time. The right to restriction of processing exists in the following cases:

If you have restricted the processing of your personal data, this data may only be processed—apart from storage—with your consent or for the establishment, exercise, or defense of legal claims or to protect the rights of another natural or legal person or for reasons of important public interest of the EU or a member state.

Objection to Promotional Emails

We hereby object to the use of contact data published as part of the imprint obligation for sending unsolicited advertising and informational materials. The operators of this website expressly reserve the right to take legal action in the event of unsolicited advertising, such as spam emails.

4. Use of the Whistleblowing Portal

The service is operated by the Internal Reporting Office of Datenbeschützerin Regina Stoiber GmbH, Unterer Sand 9, 94209 Regen, Germany. We have concluded a data processing agreement with them. Further information on data protection can be found at: https://regina-stoiber.com/datenschutzerklaerung/

Reporting an Incident

When you submit a report via the reporting form on this portal, the internal reporting office "Datenbeschützerin GmbH" collects the following data from you:

Content-related details about the incident may include personal information about third parties.

We collect this data based on your voluntary report under Art. 6(1)(a) GDPR. We delete the data annually at the end of the year if it is older than 12 months. You can revoke the processing of your personal data at any time. Previous processing remains unaffected. Data about the incident may continue to be stored without reference to your identity.

The internal reporting office forwards the incident data to us (the responsible party for this portal) but without your personal data.

Processing the Incident

We collect, process, and use personal data only to the extent necessary for processing the incident. If we need further information from you, we contact the internal reporting office, which then contacts you again.

If direct contact with you is necessary, we will ask for your consent under Art. 6(1)(a) GDPR to transmit your personal data to us. In very rare cases, the internal reporting office may also transmit your personal data to us due to legal requirements under Art. 6(1)(c) GDPR. Disclosure to law enforcement agencies, lawyers, or other authorities may occur as part of case processing.

Information about the incident is stored with us until the case is closed. Depending on the case, the data will either be stored for the legally required retention period or deleted 12 months after the case is concluded.