Data protection declaration
Introduction and general information
Thank you very much for your interest in our website. Protecting your personal data is very important to us. The following contains information on the handling of your data which are collected when you use our website. Your data are processed in accordance with the legal provisions on data protection.
Responsible entity with regard to data protection law
78713 Schramberg, Germany
Registration court: Local Court of Oberndorf
Registration number: HRB 732052
Contact information of the data protection officer
Ralf Brändle firstname.lastname@example.org
Our data protection declaration is intended to be easy to read and understandable by everyone. In this data protection declaration, the official terms of the General Data Protection Regulation (GDPR) are generally used. The official definitions are explained in Article 4 of the GDPR.
Data processing carried out as a result of using our website
When you call up our website, data about your web browser must be sent to our web server for technical reasons. The following data are recorded during an active connection for communication between your web browser and our web server:
We collect the data listed above to ensure smooth establishment of a connection to the website and enable convenient use of our website by the user. The log file is also used for the evaluation of system security and stability, as well as for administrative purposes. The legal basis for the temporary saving of data and log file is Article 6 Para. 1 letter f of the GDPR.
Contact form and making contact via email
When you send us enquiries using the contact form or by email, your information from the enquiry form or email, including the first name, surname, address and postal address specified by you there, is saved by us for the purpose of processing the enquiry and in case there are any follow-up questions. The specification of an email address is required for making contact, but specifying your name and telephone number is voluntary. Under no circumstances do we pass this data on to other parties without your consent. The legal basis for processing the data is our legitimate interest in responding to your concern as per Article 6 Para. 1 letter f of the GDPR and potentially Article 6 Para. 1 letter b of the GDPR if your enquiry is in regard to the conclusion of a contract. Once your enquiry has been processed, your data are deleted unless this is contradicted by legal retention requirements. In the case of Article 6 Para. 1 letter f of the GDPR, you can enter an objection to the processing of your personal data at any time.
Our website uses Google Analytics, an Internet analysis service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google Analytics uses so-called "cookies".
Google will use this information on behalf of the owner of this website to evaluate your use of the website and create reports on website activities. Google will also use this information to render additional services associated with the use of the website and the Internet for the website owner. The IP address sent by your browser as part of Google Analytics is not combined with any other data by Google. Processing occurs as per Article 6 Para. 1 letter f of the GDPR based on our legitimate interest in statistical analysis of user behaviour for optimisation and marketing purposes.
We only use Google Analytics with IP
anonymisation activated. This means that your IP address is only processed
further by Google in a shortened form. We have concluded an order processing
contract with the service provider in which we have obligated them to protect
the data of our customers and not pass them on to third parties. As personal
data are transferred to the USA, additional protection mechanisms are required
for ensuring the same level of data protection as the GDPR. To ensure this, we
have agreed upon standard data protection clauses as per Article 46 Para. 2
letter c of the GDPR with the provider. These clauses obligate the recipient of
the data in the USA to process the data in accordance with the level of
protection used in Europe. In cases where this cannot be ensured even with this
contractual extension, we make an effort to ensure additional regulations and
assurances by the recipient in the USA. The usage conditions of Google
Analytics and information on data protection can be called up using the
following links: https://marketingplatform.google.com/about/analytics/terms/us/ https://policies.google.com/?hl=en&gl=en
The data are deleted as soon as they are no longer required for the purpose for which they were collected. Deletion of the data on the user and event level linked with cookies, user IDs and advertising IDs (e.g. double-click cookies, Android advertising ID, IDFA [Apple code for advertisers]) occurs no later than 14 months following their collection.
You can prevent the saving of cookies by making the corresponding settings in your browser software. We would like to point out, however, that you may not be able to make full use of all functions on this website if you do so. You can also prevent Google collecting the data generated by the cookie and analysing your use of the website (including your IP address) and the processing of these data by Google by downloading and installing the browser plugin available here: https://tools.google.com/dlpage/gaoptout?hl=en.
Our website uses the online map
provider Google Maps over an interface. The provider of the map service is
Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The use
of Google Maps functions requires that your IP address be saved. The legal
basis for the processing of your personal data is the consent you have granted
for this purpose as per Article 6 Para. 1 Clause 1 letter a of the GDPR. When
this service is used, personal data are sent to the USA. The legal basis for
the transfer of your personal data to the USA is the consent you have granted
as per Article 49 Para. 1 Clause 1 letter a of the GDPR. Please note that for
this type of transmission of personal data without an adequacy decision and without
suitable guarantees you are being put at risk. The risk here is that American
authorities (intelligence services in particular) could access the personal
data due to legislation in the USA. Legal protection options or information on
the handling of your data by US authorities are highly limited or even lacking
altogether. Accordingly, data protection on the level of the GDPR cannot be
ensured. More information on handling user data can be found in the Google data
privacy declaration: https://policies.google.com/privacy?hl=en&gl=en.
In part, these cookies serve to simplify website processes by saving settings (e.g. the retention of options already selected). If personal data are also processed by individual cookies implemented by us, processing occurs as per Article 6 Para. 1 letter b of the GDPR either for performance of the contract or as per Article 6 Para. 1 letter f of the GDPR for protecting our legitimate interests in the best possible functioning of the website and a customer-friendly and efficient design of the website visit. You can set your browser in such a way that you are informed of the setting of cookies and only permit cookies in individual cases, preclude the acceptance of cookies for specific cases or in general and activate the automatic deletion of cookies upon closing the browser. Cookie settings can be managed using the following links for respective browsers.
You can also manage the cookies of many companies and functions used for advertising. For this purpose, use the corresponding user tools, which can be accessed under https://www.aboutads.info/choices/ or http://www.youronlinechoices.com/uk/your-ad-choices. Most browsers also offer a so-called "do not track function" with which you can specify that you do not wish to be "tracked" by websites. If this function is activated, the respective browser informs advertising networks, websites and applications that you do not wish to be tracked for the purpose of behaviour-based advertisement etc. Information and instructions on how you can edit this function are available from your respective browser provider at the following links:
Data transfer and recipients
Your personal data are not transferred to third parties unless
We also use carefully selected external service providers commissioned in writing for providing our services. They are bound by our instructions and are monitored by us on a regular basis. We have concluded order processing contracts with them as per Article 28 of the GDPR where required. They are service providers for web hosting, the sending of emails and the maintenance & servicing of our IT systems etc. The service providers will not pass on this data to third parties.
Duration of the storage of personal data
The duration of the storage of personal data depends on the relevant legal retention periods (e.g. according to commercial law and tax law). Upon expiry of the respective period, the corresponding data are routinely deleted. Should data be required for contract fulfillment or contract initiation or if we have a legitimate interest in their continued storage, the data are deleted when they are no longer required for these purposes or you have exercised your right to withdraw or object.
The following contains information on the rights of the person concerned granted to you by the applicable data protection law with regard to the processing of your personal data:
The right to demand information on
your personal data processed by us as per Article 15 of the GDPR.
In particular, you can demand information on the purposes of processing, the category of personal data, the categories of recipients to whom your data has been or is revealed, the planned duration of storage, the existence of a right to correction, deletion, restriction of processing or objection, the existence of a right to appeal, the origin of your data if they were not collected by us, as well as on the existence of automated decision making, including profiling and, if applicable, meaningful information on their details.
The right as per Article 16 of the GDPR to demand the immediate correction (if incorrect) or completion of your personal data saved by us.
The right as per Article 17 of the GDPR to demand the deletion of your personal data saved by us if their processing is not required for exercising the right to free expression of opinion and information, for the fulfillment of a legal obligation, for reasons of public interest or for the assertion, exercising or defence of legal claims.
The right as per Article 18 of the GDPR to demand limitation of the processing of your personal data if the correctness of the data is being disputed by you or processing of the data is unlawful, but you reject the deletion of the data and we no longer require them, but you require them for the assertion, exercising or defence of legal claims or you have entered an objection to their being processed as per Article 21 of the GDPR.
The right as per Article 20 of the GDPR to obtain your personal data which you have provided to us in a structured, commonly used, machine-readable format or to demand transfer to another responsible party.
The right as per Article 77 of the GDPR to lodge a complaint with a supervisory authority. In general, you can contact the supervisory authority of the federal state of our location specified above or, if applicable, that of your usual place of residence or place of work for this purpose.
The right to withdraw granted consent as per Article 7 Para. 3 of the GDPR: You have the right to withdraw granted consent to the processing of data at any time with future effect. In case of withdrawal, we will immediately delete the affected data if further processing cannot be supported by a legal basis for processing without consent. The withdrawal of consent does not affect the legality of processing which occurred based on consent up to the point of withdrawal.
Right to object
If your personal data are processed by us based on legitimate interest as per Article 6 Para. 1 Clause 1 letter f of the GDPR, you have the right as per Article 21 of the GDPR to make an objection to the processing of your personal data if it occurs for reasons arising from your special situation. If the objection regards the processing of personal data for the purposes of direct advertising, you have a general right to object without the requirement of specifying a special situation. If you would like to exercise your right to withdraw or object, it is sufficient if you send us an email: email@example.com.
Right to make changes
We reserve the right to adjust or update this data protection declaration under consideration of the applicable data protection regulations if necessary. In this way, we are able to adjust them to current legal requirements and take changes to our services into account, e.g. when introducing new services. The respective most recent version applies for your visit.
Date of this data protection declaration: 5 August, 2022