1) Information on the collection of personal data and contact details of the data controller
1.1 We are pleased that you are visiting our website and thank you for your interest. In the following, we inform you about the handling of your personal data when using our website. Personal data is all data with which you can be personally identified.
1.2 The data controller on this website according to the General Data Protection Regulation (GDPR) is: Daniel John Hawk, Corinthstr. 55, 10245 Berlin, Germany, Tel.: +49 152 36227915, E-Mail: firstname.lastname@example.org. The data controller is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data.
1.3 This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or enquiries to the controller). You can recognize an encrypted connection by the character string “https://” and the lock symbol in your browser line.
2) Data collection when visiting our website
When using our website for informational purposes, i.e. if you do not register or otherwise provide us with information, we only collect data that your browser transmits to our server (so-called “server log files”). When you visit our website, we collect the following data, which is necessary for us to technically display the website to you:
- Our visited website
- Date and time of access
- Amount of data sent in bytes
- Source/reference which directed you to the page
- Browser used
- Operating system used
- IP address used (if applicable: in anonymous form)
Processing is carried out in accordance with point (f) of Article 6 (1) of the GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data will not be forwarded or used in any other way. However, we reserve the right to subsequently check the server log files if there are concrete indications of illegal use.
In order to make the visit of our website attractive and to enable the use of certain functions, we use so-called cookies on various pages. These are small text files that are stored on your end device. Some of the cookies we use are deleted after the end of the browser session, i.e. after closing your browser (so-called session cookies). Other cookies remain on your end device and enable us or our partners (third-party cookies) to recognise your browser during your next visit (persistent cookies). If cookies are set, they collect and process certain user information such as browser and location data as well as IP address values. Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie.
If personal data is also processed by individual cookies that we implement, the processing is carried out pursuant to point (b) of Art. 6 (1) of the GDPR either for the performance of the contract or pursuant to point (f) of Art. 6 (1) of the GDPR to protect our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design when visiting our site.
We may work with advertising partners who help us to make our website more interesting for you. For this purpose, cookies from partner companies are also stored on your hard drive when you visit our website (third-party cookies). If we cooperate with aforementioned advertising partners, you will be informed individually and separately about the use of such cookies and the scope of the information collected in each case within the following paragraphs.
Please note that you can set your browser so that you are informed when cookies are set and can decide individually whether to accept them or whether to exclude the acceptance of cookies in certain cases or in general. Each browser differs in the way it manages cookie settings. This is described in the help menu of each browser, which explains how you can change your cookie settings. These can be found for each browser under the following links:
- Microsoft Edge: https://support.microsoft.com/de-de/microsoft-edge/temporäres-zulassen-von-cookies-und-website-daten-in-microsoft-edge-597f04f2-c0ce-f08c-7c2b-541086362bd2
- Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
- Chrome: http://support.google.com/chrome/bin/answer.py?hl=de&hlrm=en&answer=95647
- Safari: https://support.apple.com/de-de/guide/safari/sfri11471/mac
- Opera: http://help.opera.com/Windows/10.20/de/cookies.html
Please note that if cookies are not accepted, the functionality of our website may be restricted.
4) Contacting us
When you contact us (e.g. via contact form or e-mail), personal data is collected. The type of data that is collected in the event of using a contact form is apparent from the respective contact form. This data is stored and used exclusively for the purpose of answering your request or for establishing contact and conducting any associated technical administration. The legal basis for processing the data is our legitimate interest in responding to your request pursuant to point (f) of Article 6 (1) of the GDPR. If the purpose of your contact is to conclude a contract, the additional legal basis for processing your data is point (b) of Article 6 (1) of the GDPR. Your data will be deleted after we have processed your inquiry. This is the case if it can be inferred from the circumstances that the matters in question have been clarified finally and provided that there are no legal obligations to the contrary to retain data.
5) Use of customer data for direct marketing
– Newsletter mailing via Campaign.Plus
Our email newsletters are sent via “Campaign.Plus”, a service of Campaign.Plus GmbH, Wollmarktstrasse 115b, 33098 Paderborn (hereinafter “Campaign.Plus”), to which we transfer the data you provided when registering for the newsletter. This transfer takes place in accordance with point (f) of Article 6 (1) of the DSGVO and serves our legitimate interest in using a newsletter system that is effective in advertising, secure and user-friendly. The data you enter for the purpose of receiving newsletters (e.g. e-mail address) will be stored on the servers of Campaign.Plus in the EU.
Campaign.Plus uses this information to send and statistically evaluate the newsletters on our behalf. In terms of evaluation, the newsletters sent by e-mail contain so-called web beacons or tracking pixels, which are single-pixel image files stored on our website. This makes it possible to determine whether a newsletter message has been opened and which links, if any, have been clicked on. With the help of so-called conversion tracking, it can also be analyzed whether a predefined action (e.g. purchasing a product on our website) has taken place after clicking on such links. In addition, technical information is collected (e.g. time of access, IP address, browser type and operating system). The data is collected exclusively pseudonymously and is not linked to your other personal data; a direct personal reference is not possible. This data is used exclusively for the statistical analysis of newsletter campaigns. The results of these analyses can be used to better adapt future newsletters to the interests of the recipients.
If you wish to opt out of data analysis for statistical evaluation purposes, you must unsubscribe from the newsletter.
We have signed a data processing agreement (Auftragsverarbeitungsvertrag) with Campaign.Plus, with which we oblige Campaign.Plus to protect our customers’ data and not to pass it on to third parties.
You can read more about the data analysis conducted by Campaign.Plus here: https://www.campaign.plus/datenschutzerklarung/
6) Rights of the data subject
6.1 The applicable data protection law grants you as a data subject the following rights (rights of access and intervention) vis-à-vis the controller with regard to the processing of your personal data, whereby reference is made to the following cited legal basis for the respective conditions in exercising these rights:
- Right of access according to Article 15 of the GDPR;
- Right to rectification according to Article 16 of the GDPR;
- Right to erasure according to Article 17 of the GDPR;
- Right to restriction of processing according to Article 18 of the GDPR;
- Right to be informed according to Article 19 of the GDPR;
- Right to data portability according to Article 20;
- Right to withdraw consent according to Article 7 (3) of the GDPR;
- Right to lodge a complaint according to Article 77 of the GDPR.
6.2 RIGHT TO OBJECT
IF IN THE CONTEXT OF A WEIGHING OF INTERESTS, WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR PREDOMINANT LEGITIMATE INTEREST, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO SUCH PROCESSING WITH EFFECT FOR THE FUTURE FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION.
IF YOU MAKE USE OF YOUR RIGHT TO OBJECT, WE WILL TERMINATE THE PROCESSING OF DATA CONCERNED. HOWEVER, WE RESERVE THE RIGHT TO CONTINUE PROCESSING IF WE CAN PROVE COMPELLING GROUNDS FOR PROCESSING WORTHY OF PROTECTION WHICH OUTWEIGH YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING SERVES TO ASSERT, EXERCISE OR DEFEND LEGAL CLAIMS.
IF YOUR PERSONAL DATA IS PROCESSED BY US IN ORDER TO CONDUCT DIRECT ADVERTISING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR THE PURPOSE OF SUCH ADVERTISING. YOU CAN EXERCISE YOUR RIGHT TO OBJECT AS DESCRIBED ABOVE.
IF YOU MAKE USE OF YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED FOR DIRECT ADVERTISING PURPOSES.
7) Storage duration of personal data
The storage duration of personal data is measured according to the respective legal basis, the purpose of processing and – if relevant – additionally according to the respective legal retention period (e.g. commercial and tax retention periods).
If personal data is processed on the basis of expressly given consent pursuant to point (a) of Article 6 (1) of the GDPR, this data is stored until the data subject revokes his/her consent.
If there are legal storage periods for data which is processed within the framework of legal or similar obligations on the basis of point (b) of Article 6 (1) of the GDPR, this data will be routinely deleted after expiration of the storage periods if it is no longer necessary for the fulfilment of a contract or the initiation of a contract and/or if we no longer have a legitimate interest in further storage.
When processing personal data on the basis of point (f) of Article 6 (1) of the GDPR, the data is stored until the data subject exercises his/her right to object according to Article 21 (1) of the GDPR, unless we can prove compelling grounds for data processing worthy of protection which outweigh the interests, rights and freedoms of the data subject, or the processing serves the assertion, exercise or defence of legal claims.
If personal data is processed for the purpose of direct marketing on the basis of point (f) of Article 6 (1) of the GDPR, this data is stored until the data subject exercises his/her right to object pursuant to Article 21 (2) of the GDPR.
Furthermore, unless otherwise indicated in other information contained in this statement regarding specific processing situations, personal data that has been stored shall be erased when it is no longer necessary for the purposes for which it was collected or otherwise processed.