1
Introduction and Contact Information of the Data Controller
(1)
We are pleased that you are visiting our website and thank you for your interest. Below, we inform you about how we handle your personal data when you use our website. Personal data means any data that can be used to personally identify you.
(2)
The party responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Michael Pacharzyna, Freeheit 11A, 24257 Schwartbuck, Germany, Tel.: +49 15780319562, E-Mail: [email protected]. The party responsible for processing personal data is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data.
2
Data Collection When Visiting Our Website
(1)
When you use our website purely for informational purposes, i.e., if you do not register with us or otherwise provide us with information, we only collect data that your browser transmits to the server (so-called "server log files"). When you access our website, we collect the following data that are technically necessary for us to display the website to you:
Processing is carried out on the basis of our legitimate interest in improving the stability and functionality of our website in accordance with Art. 6 para. 1 lit. f GDPR. The data are not disclosed or otherwise used. However, we reserve the right to review server log files retrospectively should there be concrete evidence of unlawful use.
- Our visited website
- Date and time at the time of access
- Amount of data sent in bytes
- Source/reference from which you came to the page
- Browser used
- Operating system used
- IP address used (possibly in anonymized form)
Processing is carried out on the basis of our legitimate interest in improving the stability and functionality of our website in accordance with Art. 6 para. 1 lit. f GDPR. The data are not disclosed or otherwise used. However, we reserve the right to review server log files retrospectively should there be concrete evidence of unlawful use.
(2)
For security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to us), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the string "https://" and the lock icon in your browser address bar.
3
Hosting & Content Delivery Network
(1)
For hosting our website and displaying the page content, we use a provider that provides its services itself or through selected subcontractors exclusively on servers within the European Union. All data collected on our website are processed on these servers. We have concluded a data processing agreement with the provider that ensures the protection of our website visitors' data and prohibits any unauthorized disclosure to third parties.
(2)
Cloudflare
We use a content delivery network from the following provider: Cloudflare Inc., 101 Townsend St. San Francisco, CA 94107, USA
This service enables us to deliver large media files such as graphics, page content, or scripts more quickly via a network of regionally distributed servers. Processing is carried out to protect our legitimate interest in improving the stability and functionality of our website pursuant to Art. 6 para. 1 lit. f GDPR. We have concluded a data processing agreement with the provider that ensures the protection of our website visitors' data and prohibits any unauthorized disclosure to third parties. For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.
We use a content delivery network from the following provider: Cloudflare Inc., 101 Townsend St. San Francisco, CA 94107, USA
This service enables us to deliver large media files such as graphics, page content, or scripts more quickly via a network of regionally distributed servers. Processing is carried out to protect our legitimate interest in improving the stability and functionality of our website pursuant to Art. 6 para. 1 lit. f GDPR. We have concluded a data processing agreement with the provider that ensures the protection of our website visitors' data and prohibits any unauthorized disclosure to third parties. For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.
4
Cookies
(1)
To make your visit to our website attractive and to enable the use of certain functions, we use cookies, which are small text files stored on your device. Some of these cookies are automatically deleted when you close your browser (so-called "session cookies"), while others remain on your device for a longer period and enable the storage of page settings (so-called "persistent cookies"). In the latter case, you can find the storage duration in your web browser's cookie settings overview.
(2)
To the extent that cookies used by us process personal data, processing is carried out either for contract performance according to Art. 6 para. 1 lit. b GDPR, based on a given consent according to Art. 6 para. 1 lit. a GDPR, or to protect our legitimate interests according to Art. 6 para. 1 lit. f GDPR in the best possible functionality of the website as well as customer-friendly and effective website design.
(3)
You can configure your browser so that you are informed about the setting of cookies and can decide individually on their acceptance, or exclude the acceptance of cookies for specific cases or generally.
(4)
Please note that if you do not accept cookies, the functionality of our website may be limited.
5
Contact
(1)
When you contact us (e.g., via contact form or email), personal data is collected. Which data are collected when using a contact form can be seen from the respective contact form. This data is stored and used exclusively for the purpose of answering your inquiry or for contacting you and the associated technical administration.
The legal basis for processing this data is our legitimate interest in answering your inquiry according to Art. 6 para. 1 lit. f GDPR. If your contact is aimed at concluding a contract, the additional legal basis for processing is Art. 6 para. 1 lit. b GDPR. Your data will be deleted after your inquiry has been processed. This is the case when it can be concluded from the circumstances that the matter at issue has been finally clarified and insofar as no statutory retention obligations apply.
The legal basis for processing this data is our legitimate interest in answering your inquiry according to Art. 6 para. 1 lit. f GDPR. If your contact is aimed at concluding a contract, the additional legal basis for processing is Art. 6 para. 1 lit. b GDPR. Your data will be deleted after your inquiry has been processed. This is the case when it can be concluded from the circumstances that the matter at issue has been finally clarified and insofar as no statutory retention obligations apply.
6
Tools and Other Services
(1)
sevDesk
To handle accounting, we use the service of the cloud-based accounting software from the following provider: sevDesk GmbH, Hauptstraße 115, 77652 Offenburg, Germany
The provider processes incoming and outgoing invoices as well as, if applicable, bank transactions of our company to automatically capture invoices, match them to transactions, and create financial accounting in a semi-automated process.
We have concluded a data processing agreement with the provider that ensures the protection of our customers' data and prohibits any unauthorized disclosure to third parties.
To the extent that personal data is processed in this process, processing is carried out on the basis of our legal obligation to maintain proper accounting records pursuant to Art. 6 para. 1 lit. c GDPR.
To handle accounting, we use the service of the cloud-based accounting software from the following provider: sevDesk GmbH, Hauptstraße 115, 77652 Offenburg, Germany
The provider processes incoming and outgoing invoices as well as, if applicable, bank transactions of our company to automatically capture invoices, match them to transactions, and create financial accounting in a semi-automated process.
We have concluded a data processing agreement with the provider that ensures the protection of our customers' data and prohibits any unauthorized disclosure to third parties.
To the extent that personal data is processed in this process, processing is carried out on the basis of our legal obligation to maintain proper accounting records pursuant to Art. 6 para. 1 lit. c GDPR.
(2)
Adobe Acrobat Sign
For digital document signing, we use the services of the following provider: Adobe Systems Software Ireland Limited, 4-6 Riverwalk, City West Business Campus, Dublin 24, Ireland
The service enables you to legally sign documents by electronic signature from any device.
For this purpose, the service collects, stores, and transmits your electronic signature for verification and proof of signing as well as usage data of the device used (in particular the IP address) and certain transaction data.
Processing is carried out on the basis of our legitimate interest in efficient and time-saving business management and customer-friendly and effective document management pursuant to Art. 6 para. 1 lit. f GDPR.
We have concluded a data processing agreement with the provider that protects our website visitors' data and prohibits disclosure to third parties.
For digital document signing, we use the services of the following provider: Adobe Systems Software Ireland Limited, 4-6 Riverwalk, City West Business Campus, Dublin 24, Ireland
The service enables you to legally sign documents by electronic signature from any device.
For this purpose, the service collects, stores, and transmits your electronic signature for verification and proof of signing as well as usage data of the device used (in particular the IP address) and certain transaction data.
Processing is carried out on the basis of our legitimate interest in efficient and time-saving business management and customer-friendly and effective document management pursuant to Art. 6 para. 1 lit. f GDPR.
We have concluded a data processing agreement with the provider that protects our website visitors' data and prohibits disclosure to third parties.
7
Rights of the Data Subject
(1)
Applicable data protection law grants you, as a data subject, the following rights with respect to us as the controller regarding the processing of your personal data (information and intervention rights), whereby reference is made to the stated legal basis for the respective exercise conditions:
- Right to information according to Art. 15 GDPR
- Right to rectification according to Art. 16 GDPR
- Right to erasure according to Art. 17 GDPR
- Right to restrict processing according to Art. 18 GDPR
- Right to notification according to Art. 19 GDPR
- Right to data portability according to Art. 20 GDPR
- Right to withdraw given consent according to Art. 7 para. 3 GDPR
- Right to lodge a complaint according to Art. 77 GDPR
(2)
RIGHT TO OBJECT
WHEN WE PROCESS YOUR PERSONAL DATA BASED ON A BALANCING OF INTERESTS DUE TO OUR OVERRIDING LEGITIMATE INTEREST, YOU HAVE THE RIGHT AT ANY TIME, FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION, TO OBJECT TO THIS PROCESSING WITH EFFECT FOR THE FUTURE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE AFFECTED DATA. HOWEVER, FURTHER PROCESSING IS RESERVED IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE REASONS FOR PROCESSING THAT OUTWEIGH YOUR INTERESTS, RIGHTS AND FREEDOMS, OR IF PROCESSING SERVES THE ASSERTION, EXERCISE OR DEFENSE OF LEGAL CLAIMS.
IF YOUR PERSONAL DATA ARE PROCESSED BY US FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA FOR SUCH MARKETING PURPOSES. YOU CAN EXERCISE THE OBJECTION AS DESCRIBED ABOVE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE AFFECTED DATA FOR DIRECT MARKETING PURPOSES.
WHEN WE PROCESS YOUR PERSONAL DATA BASED ON A BALANCING OF INTERESTS DUE TO OUR OVERRIDING LEGITIMATE INTEREST, YOU HAVE THE RIGHT AT ANY TIME, FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION, TO OBJECT TO THIS PROCESSING WITH EFFECT FOR THE FUTURE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE AFFECTED DATA. HOWEVER, FURTHER PROCESSING IS RESERVED IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE REASONS FOR PROCESSING THAT OUTWEIGH YOUR INTERESTS, RIGHTS AND FREEDOMS, OR IF PROCESSING SERVES THE ASSERTION, EXERCISE OR DEFENSE OF LEGAL CLAIMS.
IF YOUR PERSONAL DATA ARE PROCESSED BY US FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA FOR SUCH MARKETING PURPOSES. YOU CAN EXERCISE THE OBJECTION AS DESCRIBED ABOVE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE AFFECTED DATA FOR DIRECT MARKETING PURPOSES.
8
Duration of Storage of Personal Data
(1)
The duration of storage of personal data is determined on the basis of the respective legal basis, the processing purpose, and – if applicable – additionally on the basis of the respective statutory retention period (e.g., commercial and tax retention periods).
(2)
When processing personal data on the basis of explicit consent according to Art. 6 para. 1 lit. a GDPR, the affected data are stored until you withdraw your consent.
(3)
If statutory retention periods exist for data processed under legal obligations or legal obligation-like obligations on the basis of Art. 6 para. 1 lit. b GDPR, this data is routinely deleted after the retention periods expire, provided it is no longer required for contract performance or pre-contractual activities and/or we no longer have a legitimate interest in further storage.
(4)
When processing personal data on the basis of Art. 6 para. 1 lit. f GDPR, this data is stored until you exercise your right to object according to Art. 21 para. 1 GDPR, unless we can demonstrate compelling legitimate reasons for processing that outweigh your interests, rights, and freedoms, or processing serves the assertion, exercise, or defense of legal claims.
(5)
When processing personal data for direct marketing purposes on the basis of Art. 6 para. 1 lit. f GDPR, this data is stored until you exercise your right to object according to Art. 21 para. 2 GDPR.
(6)
Unless otherwise provided in other information in this statement regarding specific processing situations, stored personal data are otherwise deleted when they are no longer necessary for the purposes for which they were collected or otherwise processed.
We provide voluntary translations of our legal texts for our international customers. These translations are for informational purposes only; we assume no responsibility for the accuracy and completeness of the translations. Only the German version is legally binding. In case of discrepancies between language versions, the German version shall prevail.