This data protection declaration clarifies the type, scope and purpose of the collection and use of personal data (hereinafter referred to as "data") in the context of our services, online services and associated websites, functions and content as well as any type of external online presence, such as our social media profile (hereinafter jointly referred to as "online service"). With regard to the terms used, such as "collection and use of data" or "person responsible", we refer to the definitions in Art. 4 of the Data Protection Basic Regulation (DSGVO).
E-mail address: firstname.lastname@example.org
Link to imprint
Types of Collected Data
- Inventory data (e.g., personal core data, names or addresses).
- Contact data (e.g., e-mail, telephone numbers).
- Content data (e.g., text entries, photographs, videos).
- Usage data (e.g., websites visited, interest in content, access times).
- Meta/communication data (e.g., device information, IP addresses).
Categories of Affected Persons
Visitors and users of online service (in the following we will refer to the affected persons collectively as "users").
Purpose of Collection and Use
- Provision of the online offer, i.e. functions and contents.
- Response of contact inquiries and communication with users.
- Safety measures.
- Online reach measurement/Marketing
"Personal data" means any information relating to an identified or identifiable natural person (hereinafter referred to as "data subject"); an identifiable natural person is any person who, directly or indirectly, in particular by means of association with an identifier such as a name, an identification number, location data, an online identifier (e.g., cookies, e-mail address, telephone number) or to one or more specific characteristics that are an expression of the physical, physiological, genetic, psychological, economic, cultural or social identity of that natural person.
"Collection and use' means any operation or set of operations which is carried out with or without the aid of automated processes and which involves personal data. The term is broad and covers practically every handling of data.
"Pseudonymisation' means the processing of personal data in such a way that the personal data can no longer be attributed to a specific data subject without the provision of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures ensuring that the personal data are not attributed to an identified or identifiable natural person.
"Profiling' means any automated processing of personal data consisting of the use of such personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects relating to the work performance, economic situation, health, personal preferences, interests, reliability, conduct, whereabouts or movements of that natural person.
"Responsible Person" means any natural or legal person, public authority, agency or body which alone or jointly with others determines the purposes and means of the collection and use of personal data.
"Processor' means a natural or legal person, public authority, agency or other body which collects and uses personal data on behalf of the responsible person.
Applicable Legal Bases
In accordance with Art. 13 DSGVO we inform you about the legal bases of our collection and use of data. For users from the area of application of the data protection basic regulation (DSGVO), i.e. the EU and the EEC, the following applies, if the legal basis is not mentioned in the data protection explanation:
- The legal basis for obtaining consent is Art. 6 Para. 1 lit. a and Art. 7 DSGVO;
- The legal basis for the collection and use of data for the fulfilment of our services and the execution of contractual measures as well as the response of inquiries is Art. 6 Para. 1 lit. b DSGVO;
- The legal basis for the collection and use of data for the fulfilment of our legal obligations is Art. 6 Para. 1 lit. c DSGVO;
- In the event that vital interests of the data subject or another natural person necessitate the collection and use of personal data, Art. 6 (1) lit. d DSGVO serves as the legal basis.
- The legal basis for the collection and use of data necessary for the performance of a task carried out in the public interest or in exercise of official authority entrusted to the person responsible is Art. 6 Para. 1 lit. e DSGVO.
- The legal basis for the collection and use of data to safeguard our legitimate interests is Art. 6 Para. 1 lit. f DSGVO.
- The collection and use of data for purposes other than those for which they were collected is governed by the provisions of Art. 6 (4) DSGVO.
- The collection and use of special categories of data (pursuant to Art. 9 Para. 1 DSGVO) is governed by the provisions of Art. 9 Para. 2 DSGVO.
We take appropriate technical and organisational measures to ensure a level of protection commensurate with the risk in accordance with the legal requirements, taking into account the state of the art, the implementation costs and the type, extent, circumstances and purposes of the collection and use of data as well as the different probability of occurrence and severity of the risk for the rights and freedoms of natural persons.
Measures shall include, in particular, ensuring the confidentiality, integrity and availability of data by controlling physical access to the data, as well as the respective access, input, disclosure, protection and separation of data. In addition, we have established procedures to ensure the exercise of data subjects' rights, deletion of data and reaction to data threats. Furthermore, we take the protection of personal data into account as early as the development or selection of hardware, software and processes, in accordance with the principle of data protection through technology design and data protection-friendly default settings.
Cooperation with Contract Processors, Jointly Responsible Persons and Third Parties
If we disclose data to other persons and companies (contract processors, jointly responsible persons or third parties) within the scope of our collection and use of data, transfer them or otherwise grant them access to the data, this shall only take place on the basis of a legal permission (e.g.B. if a transfer of the data to third parties, such as payment service providers, is necessary for the performance of the contract), users have consented, a legal obligation provides for this or on the basis of our legitimate interests (e.g. when using agents, web hosts, etc.).
If we disclose, transmit or otherwise grant access to data to other companies of our group of companies, this is done in particular for administrative purposes as a legitimate interest and beyond that on a basis corresponding to the legal requirements.
Transmissions to Third Countries
If we process data in a third country (i.e. outside the European Union (EU), the European Economic Area (EEA) or the Swiss Confederation) or if we do so as part of the use of third-party services or disclosure, or if data is transferred to other persons or companies, this will only take place if it is done to fulfil our (pre)contractual obligations, on the basis of your consent, a legal obligation or on the basis of our legitimate interests. Subject to expressed consent or contractually required transfer, we process or allow the data to be processed only in third countries with a recognised level of data protection, which includes US processors certified under the "Privacy Shield" or on the basis of special guarantees, such as a contractual obligation through so-called standard protection clauses of the EU Commission, the existence of certifications or binding internal data protection regulations (Art. 44 to 49 DSGVO, information page of the EU Commission).
Rights of Affected Persons
Right of access: You have the right to demand confirmation as to whether relevant data are collected and used and to request information about this data as well as further information and copies of the data in accordance with the legal requirements.
Right of rectification: You have the right, in accordance with the law, to request the completion of the data concerning you or the rectification of the inaccurate data concerning you.
Right to deletion and limitation of collection and use: You have the right, in accordance with the statutory provisions, to demand that the data concerned be deleted immediately or, alternatively, to demand a limitation of collection and use of data in accordance with the statutory provisions.
Right to data transfer: You have the right to receive the data concerning you which you have provided to us in a structured, common and machine-readable format in accordance with the legal requirements or to demand its transfer to another responsible party.
Complaints to the supervisory authority: You also have the right to submit a complaint to the responsible supervisory authority in accordance with the statutory provisions.
Right of Withdrawal
You have the right to revoke your consent with effect for the future.
Right of Objection
Right of objection: You have the right to object at any time to the collection and use of your personal data for reasons arising from your particular situation, which takes place on the basis of Art. 6 Para. 1 lit. e or f DSGVO; this also applies to profiling based on these provisions. If the personal data concerning you are collected and used for the purpose of direct advertising, you have the right at any time to object to the collection and use of personal data concerning you for the purpose of such advertising; this also applies to profiling, insofar as it is connected with such direct advertising.
Cookies and Right of Objection in the Case of Direct Advertising
"Cookies" are small files which are stored on the computers of users. Different data can be stored within the cookies. A cookie is primarily used to store information about a user (or the device on which the cookie is stored) during or after the user's visit to a website. Temporary cookies, or "session cookies" or "transient cookies", are cookies that are deleted after a user leaves a website and closes his browser. The content of a shopping basket in an online shop or a login status, for example, can be stored in such a cookie. Cookies are referred to as "permanent" or "persistent" and remain stored even after the browser is closed. For example, the login status can be saved in case the user visits again several days after. The interests of the users who are used for online reach measurement or marketing purposes can also be stored in such a cookie. "Third party cookies" are cookies that are offered by providers other than the person responsible for the online service (otherwise, if they are only their cookies, we speak of "first party cookies").
If users do not wish cookies to be stored on their computer, they are asked to deactivate the corresponding option in the system settings of their browser. Stored cookies can be deleted in the system settings of the browser. The exclusion of cookies can lead to functional limitations of our online services.
Deletion of Data
The data collected and used by us will be deleted or their use restricted in accordance with legal requirements. Unless expressly stated in this data protection declaration, the data stored by us will be deleted as soon as they are no longer required for their intended purpose and there are no legal obligations to retain them.
If the data are not deleted because they are required for other and legally permissible purposes, their use will be restricted. This means that the data will be blocked and not used for other purposes. This applies, for example, to data which must be stored for reasons of commercial or tax law.
Changes and Updates to the Data Protection Declaration
We kindly ask you to inform yourself regularly about the content of our data protection declaration. We will adapt the data protection declaration as soon as the changes to the collection and use of data carried out by us make this necessary. We will inform you as soon as the changes require your cooperation (e.g. consent) or other individual notification.
Hosting and E-mail Dispatch
The hosting services we use serve to provide the following services: Infrastructure and platform services, computing capacity, storage space and database services, e-mail dispatch, security services and technical maintenance services which we use for the purpose of operating this online service.
Here we, or our hosting provider, collect and use inventory data, contact data, content data, contract data, usage data, meta data and communication data of customers, interested parties and visitors to this online service on the basis of our legitimate interests in the efficient and secure provision of this online service in accordance with Art. 6 Para. 1 lit. f DSGVO in conjunction with Art. 28 DSGVO (conclusion of an order processing contract).
Collection of Access Data and Logfiles
We, respectively our hosting provider, collect on the basis of our legitimate interests in the sense of Art. 6 Para. 1 lit. f. DSGVO data about each access to the server on which this service is located (so-called server log files). The access data includes the name of the website accessed, file, date and time of access, data volume transferred, notification of successful access, browser type and version, the user's operating system, referrer URL (the previously visited page), IP address and the requesting provider.
Log file information is stored for security reasons (e.g. for the clarification of abuse or fraud actions) for the duration of maximally 7 days and deleted afterwards. Data, the further storage of which is necessary for evidence purposes, are excluded from deletion until the respective incident has been finally clarified.
Integration of Services and Contents of Third Parties
Within our online services, we employ on the basis of our legitimate interests (i.e. interest in the analysis, optimization and economic operation of our online services in the sense of Art. 6 Para. 1 lit. f. DSGVO) content or service offers from third parties in order to integrate their content and services, such as videos or fonts (hereinafter uniformly referred to as "content").
This always presupposes that the third-party providers of this content perceive the IP address of the user, since they would not be able to send the content to their browser without the IP address. The IP address is therefore required for the presentation of this content. We make every effort to use only those contents whose respective providers only use the IP address to deliver the contents. Third party providers may also use so-called pixel tags (invisible graphics, also known as "web beacons") for statistical or marketing purposes. "Pixel tags" can be used to evaluate information such as visitor traffic on the pages of this website. The pseudonymous information may also be stored in cookies on the user's device and may contain, among other things, technical information about the browser and operating system, referring web pages, log on times and other information about the use of our online services, as well as may be linked to such data from other sources.