Controller and contract
Wolliner Straße 18
If you have any questions or suggestions on the subject of data protection, please feel free to contact us by e-mail at the following address: firstname.lastname@example.org .
Subject matter of data protection
The subject of data protection is personal data. According to Art. 4 No. 1 GDPR, personal data is any information relating to an identified or identifiable natural person; this includes, for example, names or identification numbers.
Automated data collection
When you access our website, your end device automatically transmits data for technical reasons. The following data is stored in log files separately from other data that you may send us:
• Retrieved URL
• Date and time of access
• IP address (shortened by one octet)
This non-personal data is stored exclusively for technical reasons and for the security of our website. At no time can they be assigned to a specific person.
Specifically, we use the following cookies:
• Session cookies
• Tracking cookies
Unless otherwise stated, the cookies are based on your consent in accordance with Art. 6 Para. 1 Sentence 1 lit. a), Art. 7 GDPR. You are free to consent to such processing. You can withdraw your consent at any time.
If you send us an inquiry by e-mail, via our contact form or in any other way, your data and the information provided will be stored and used for the purpose of answering the inquiry. In such cases you must provide your company name and e-mail address, otherwise we will not be able to process your inquiry. All other information is provided voluntarily by you; this information may be detailed complaints, general questions or messages, feedback, etc.
We collect and process this data in order to process your inquiry, Art. 6 Para. 1 Sentence 1 lit. b) GDPR.
We store the above-mentioned data for a period of three years, beginning with the year following the receipt of the inquiry. In the case of inquiries of potential legal relevance, we reserve the right to retain the enquiries within the relevant limitation periods (Art. 6 Para. 1 Sentence 1 lit. f) GDPR). Insofar as we are obliged by law to retain data, we will also store inquiries for the legally prescribed period (Art. 6 Para. 1 Sentence 1 lit. c) GDPR). Otherwise, your inquiries will be deleted when we no longer need them for legal reasons, in particular to enforce, secure or defend against claims. The storage is based on our legitimate interest, the proper documentation of our business operations and the protection of our legal positions, Art. 6 Para. 1 Sentence 1 lit. f) GDPR.
You must provide the necessary information so that we can actually process your inquiry. You are neither legally nor contractually obliged to provide such data; however, if you do not provide the relevant information, we will not be able to process your inquiry accordingly.
Google is certified according to the EU-U.S. Privacy Shield. For the USA, the European Commission decided in its decision of 12 July 2016 that an adequate level of data protection exists in accordance with the provisions of the EU-USA Privacy Shield (Adequacy Decision, Art. 45 GDPR). Further information on Google certification can be found at https://www.privacyshield.gov/participant?id=a2zt000000001L5AAItatus=Active
The use of Google Analytics is based on your consent, Art. 6 Para. 1 Sentence 1 lit. a), Art. 7 GDPR. You can withdraw your consent as follows:
You can deactivate Google Analytics via a browser add-on if you do not wish for the website analysis. You can download it here: https://tools.google.com/dlpage/gaoptout?hl=en.
Third party content
We also have included third-party content on our website. This content is generally loaded from the servers of the respective providers, so that your end device transmits certain technically necessary data to the third party provider. In particular, it cannot be excluded that these providers may take note of the IP address assigned to you. Insofar as personal data is processed in this context, this is done on the basis of the data protection declarations of the respective third party providers. The integration of such content by us is based on our legitimate interests in being able to provide our users with the relevant content and functionalities and to operate our website efficiently, as well as the fact that your legitimate interests do not prevail, Art. 6 Para. 1 Sentence 1 lit. f) GDPR.
We have integrated the "Google Web Fonts" service of Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google") into our website to display fonts. Google is certified under the EU-U.S. Privacy Shield Agreement. For the USA, the European Commission decided on 12.7.2016 that an adequate level of data protection exists under the provisions of the EU-U.S. Privacy Shield (Adequacy Decision, Art. 45 GDPR). You can find more information about Google's certification here: (www.privacyshield.gov/participant?id=a2zt000000001L5AAItatus=Active).
Disclosure of data
In principle, your personal data will only be passed on without your express prior consent in the following cases:
• Insofar as it is necessary for the clarification of an illegal use of our services or for criminal prosecution, personal data will be passed on to the law enforcement authorities as well as to injured third parties if necessary. However, this only happens if there are concrete indications of illegal or abusive behaviour. A transfer of data may also be made if this serves to enforce general terms and conditions or other agreements. In addition, we are required by law to provide information to certain public authorities on request. These are law enforcement authorities, governments that prosecute administrative offences with fines, and the tax authorities.
This data is passed on because of our legitimate interest in combating abuse, prosecution and securing and enforcing claims and that your rights and interests in the protection of your personal data do not prevail, Art. 6 Para. 1 Sentence 1 lit. f) GDPR, or because of a legal obligation under Art. 6 Para. 1 Sentence 1 lit. c) GDPR, e.g. by passing on relevant data to the tax authorities, auditors and the like.
In addition to the service providers listed above, we use the following service providers:
• Server Hosting: Webflow
• E-mail service provider: Webflow, Hubspot
We provide data to Processors on the basis of Art. 28 Para. 1 GDPR. In the event that personal data is transferred to a data processor outside the EU and no adequacy decision is made, we ensure the proper processing of the data by measures such as those set out in Art. 46 et seq. GDPR. For further information, please contact us at the e-mail address mentioned above.
The disclosure of personal data is justified by the fact that we have a legitimate interest in adapting our corporate form to the economic and legal circumstances and that your rights and interests in the protection of your personal data do not prevail, Art. 6 Para. 1 Sentence 1 lit. f) GDPR.
Deletion of your data
Unless otherwise stated, we will delete or anonymize your personal data as soon as it is no longer needed for the purposes for which we collected or used it in accordance with the preceding paragraphs. As a rule, we store your personal data for the duration of your use of the website. We also store your data if we are legally obliged to do so or if the data is required for longer periods of time for criminal prosecution or for securing or enforcing legal claims.
If data must be stored for legal reasons, the processing will be restricted. The data is then no longer available for further use.
Your rights as a data subject
As a person affected by the processing of personal data, you have the right to be informed about the data processed, a right to rectify your personal data, a right to have your personal data deleted, a right to restrict the processing of your personal data and a right to transmit your personal data.
Furthermore, you have the right to object to the processing of your personal data at any time for reasons relating to your particular situation, if the data processing is based on Art. 6 Para. 1 Sentence 1 lit. e) or lit. f) GDPR (including profiling) or if data is processed for direct marketing purposes.In case of the processing being based on your consent, you have the right to withdraw your consent at any time, Art. 7 Para. 3 Sentence 1 GDPR. You can do this by sending a message to email@example.com.
They also have the right to submit complaints to a supervisory authority. The supervisory authority responsible for Berlin is, for example.
Berliner Beauftragte für Datenschutz und Informationsfreiheit
(Berlin Commissioner for Data Protection and Freedom of Information)
A list of all European data protection authorities can be found here: http://ec.europa.eu/justice/article-29/structure/data-protection-authorities/index_en.htm
Data processing when exercising your rights
Finally, we would like to point out that we store the personal data that you provide when exercising your rights in accordance with Art. 15 to 22 GDPR for the purpose of implementing these rights and to provide proof of these rights. We will process stored data only for the purpose of information and information preparation and for the purpose of data protection control and we will restrict processing in accordance with Art. 18 GDPR. These processing operations are based on the legal basis of Art. 6 Para. 1 Sentence 1 lit. c) GDPR, Art. 15 to 22 GDPR and Art. 34 Para. 2 BDSG.