QUESTIONS ON DATA PROTECTION
What is personal data?
Personal data includes all information that can be used to identify you personally (e.g. first and last name, e-mail address, telephone number) - but also, for example, the IP address of your computer.
What personal data is collected?
Personal data is only collected and used if there is a legal reason for its collection and use. We collect and use personal data only to the extent necessary to provide a functional website and our content and services. Based on your voluntary entries on the website, we collect data, for example, on the contact form (first and last name and your e-mail address), when ordering publications (content and address) and the order form for a newsletter (e-mail address). The data you enter will be deleted as soon as it is no longer required to fulfil the purpose for which it was collected. We do not collect any further data.
What other information is collected?
When you access the website, your IP address is recorded along with the time and content of your access, including the amount of data transferred and a message as to whether the access was successful. The IP address is temporarily stored in order to ensure the functionality of the website. This data is deleted after the end of access to the website, because the collection is no longer necessary once the purpose has been achieved. Further information can be found in the section "Server log files".
How is data collected?
The data that is collected each time the site is accessed is logged automatically; otherwise only on the basis of your input and (e.g. for the ordering service) by a temporary cookie. Further information can be found in the section "Use of cookies".
What will the data be used for?
The data is used exclusively for the provision, optimisation and security of the website. With your consent, your data will only be used to receive your message (e.g. for a contact enquiry or appointment booking) or to process your order.
The data will NOT be used...
We do not use your data for personal profiling or advertising purposes and do not pass your data on to third parties, unless this is necessary, for example, in the context of order processing. You may find further information in the following sections.
USE OF COOKIES
This site uses cookies to make the website easier to use. Cookies are small text files that your Internet browser stores on your computer. If you call up the corresponding page again, the cookies enable your computer to be recognised.
This means, for example, that data you have entered once will be available when you fill in the contact or order form again. In most cases, we use cookies that are automatically deleted from your hard drive when you close your Internet browser (so-called session cookies). Other cookies remain on your computer and enable us to recognise your computer on your next visit (persistent cookies).
You can change the storage of cookies in your browser settings at any time by selecting the "Do not accept cookies" function. However, we would like to point out that in this case you may no longer be able to use our website to its full extent.
ONLINE FORMS
Our website offers you various functions (e.g. contact, application or registration forms). When you use these forms, we collect, process and store personal data.
The data you enter in the online forms will be forwarded to us by e-mail via our provider. We will only use the data collected to process your enquiry. Once the enquiry has been processed, the data collected will be deleted.
In addition, the data entered in the form is stored in a database on the web server, together with the user's IP address. This storage serves the purpose of spam defence. The data is deleted from the server after 7 days.
The data will not be used for any other purpose or passed on to third parties.
SERVER LOGFILES
When a page is called up, the web server of our host saves certain data in log files. These log files contain, among other things: The address of the page called up (URL), the browser used, the referrer, the time and date of the call and the system used by the page visitor. The server uses Apache's standardised combined log file format for this purpose.
The storage of this data is used to analyse errors in the event of problems or functional failures on the server (e.g. errors when accessing a page or attacks by hackers or spambots).
This data is not merged with other data sources, in particular with personal user data. However, we reserve the right to check stored log files in the event of a specific breach of law or contract by a user. This is primarily for the protection and security of user data.
SERVICES OF EXTERNAL PROVIDERS
In order to shorten loading times for our visitors and increase the range of functions, this website uses APIs and CDNs from various external providers, e.g. for the provision of web fonts, the display of maps or the faster loading of frequently used script libraries.
This always presupposes that the third-party providers of this content recognise the IP address of the user, as they would not be able to send the content to their browser without the IP address. The IP address is therefore required to display this content. We endeavour to only use content whose respective providers only use the IP address to deliver the content.
Here you will find an overview of the third-party providers, their content and links to their data protection declarations, which contain further information on the processing of data and, if applicable, options to object (so-called opt-out).
Google Analytics
On the basis of our legitimate interests (i.e. interest in the analysis, optimisation and economic operation of our online offer within the meaning of Art. 6 para. 1 lit. f. GDPR), we use Google Analytics, a web analysis service provided by Google Inc. GDPR) Google Analytics, a web analysis service of Google Inc. ("Google"). Google uses cookies. The information generated by the cookie about the use of the online offer by the user is usually transmitted to a Google server in the USA and stored there.
Google is certified under the Privacy Shield Agreement and thus offers a guarantee of compliance with European data protection law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).
Google will use this information on our behalf to analyse the use of our online offer by users, to compile reports on the activities within this online offer and to provide us with further services associated with the use of this online offer and the use of the Internet. Pseudonymised user profiles can be created from the processed data.
We only use Google Analytics with activated IP anonymisation. This means that the IP address of users is truncated by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there.
The IP address transmitted by the user's browser will not be merged with other Google data. Users can prevent the storage of cookies by setting their browser software accordingly; users can also prevent Google from collecting the data generated by the cookie and relating to their use of the online offer and from processing this data by Google by downloading and installing the browser plug-in available under the following link: http://tools.google.com/dlpage/gaoptout?hl=de.
Alternatively, you can deactivate tracking by clicking on the following link: Deactivate Google Analytics
Further information on the use of data by Google, setting and objection options can be found on Google's websites: https://www.google.com/intl/de/policies/privacy/partners ("Data use by Google when you use our partners' websites or apps"), http://www.google.com/policies/technologies/ads ("Use of data for advertising purposes"), http://www.google.de/settings/ads („Informationen verwalten, die Google verwendet, um Ihnen Werbung einzublenden“).
Google Maps
We use maps from the "Google Maps" service of the third-party provider Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, on our website. Privacy policy: https://www.google.com/policies/privacy/ Opt-Out: https://www.google.com/settings/ads/.
jQuery
We integrate the external code of the JavaScript framework "jQuery", provided by the third-party provider jQuery Foundation, https://jquery.org.
RIGHTS OF THE DATA SUBJECT
a) Right to confirmation
Each data subject shall have the right granted by the European legislator to obtain from the controller the confirmation as to whether or not personal data concerning him or her are being processed. If a data subject wishes to avail himself of this right of confirmation, he or she may, at any time, contact any employee of the controller.
b) Right to information
Any person affected by the processing of personal data has the right, granted by the European legislator of directives and regulations, to obtain from the controller free information at any time about the personal data stored about him or her and a copy of this information. Furthermore, the European legislator has granted the data subject access to the following information:
- the purposes of processing
- the categories of personal data that are processed <li
- where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period
- the existence of the right to request from the controller rectification or erasure of personal data or restriction of processing of personal data concerning the data subject or to object to such processing
- the existence of a right to lodge a complaint with a supervisory authority
- if the personal data is not collected from the data subject: All available information about the origin of the data
- the existence of automated decision-making, including profiling, referred to in Article 22(1) and (4) GDPR and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject </li
Furthermore, the data subject has a right to information as to whether personal data has been transferred to a third country or to an international organisation. If this is the case, the data subject also has the right to obtain information about the appropriate safeguards in connection with the transfer. If a data subject wishes to avail himself of this right of access, he or she may, at any time, contact any employee of the controller.
c) Right to rectification
Any person affected by the processing of personal data has the right granted by the European legislator of directives and regulations to demand the immediate correction of incorrect personal data concerning them. Furthermore, the data subject has the right to request the completion of incomplete personal data, including by means of a supplementary declaration, taking into account the purposes of the processing. If a data subject wishes to exercise this right to rectification, he or she may, at any time, contact any employee of the controller.
d) Right to deletion (right to be forgotten)
Each data subject shall have the right granted by the European legislator to obtain from the controller the erasure of personal data concerning him or her without undue delay, and the controller shall have the obligation to erase personal data without undue delay where one of the following grounds applies, as long as the processing is not necessary
- the personal data was collected or otherwise processed for purposes for which it is no longer necessary.
- the data subject withdraws consent on which the processing is based according to point (a) of Article 6(1) of the GDPR, or point (a) of Article 9(2) of the GDPR, and where there is no other legal ground for the processing.
- the data subject objects to the processing pursuant to Art. 21 (1) GDPR and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing pursuant to Art. 21 (2) GDPR.
- the personal data was processed unlawfully.
- the deletion of personal data is necessary to fulfil a legal obligation under Union law or the law of the Member States to which the controller is subject.
- the personal data was collected in relation to information society services offered in accordance with Art. 8 para. 1 GDPR.
If one of the aforementioned reasons applies, and a data subject wishes to request the erasure of personal data stored by us, he or she may, at any time, contact any employee of the controller. The employee will ensure that the request for erasure is complied with immediately. If we have made the personal data public and our company is obliged to erase the personal data in accordance with Article 17(1) GDPR, we will take appropriate measures, including technical measures, taking into account the available technology and the implementation costs, to inform other data controllers who process the published personal data that the data subject has requested the erasure of all links to this personal data or of copies or replications of this personal data from these other data controllers, insofar as the processing is not necessary. The employee will take the necessary steps in individual cases.
e) Right to restriction of processing
Each data subject shall have the right granted by the European legislator to obtain from the controller restriction of processing where one of the following applies:
- the accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal data.
- the processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of their use instead.
- the controller no longer needs the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise or defence of legal claims.
- the data subject has objected to processing pursuant to Article 21(1) GDPR pending the verification whether the legitimate grounds of the controller override those of the data subject.
If one of the aforementioned conditions is met, and a data subject wishes to request the restriction of the processing of personal data stored by us, he or she may at any time contact any employee of the controller. The employee will arrange for the restriction of processing.
f) Right to data portability
Any person affected by the processing of personal data has the right, granted by the European legislator, to receive the personal data concerning him or her, which he or she has provided to a controller, in a structured, commonly used and machine-readable format. He or she also has the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided, where the processing is based on consent pursuant to point (a) of Article 6(1) GDPR or point (a) of Article 9(2) GDPR or on a contract pursuant to point (b) of Article 6(1) GDPR and the processing is carried out by automated means, unless the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller. Furthermore, when exercising their right to data portability in accordance with Art. 20 para. 1 GDPR, the data subject has the right to obtain that the personal data be transferred directly from one controller to another controller, insofar as this is technically feasible and provided that this does not adversely affect the rights and freedoms of other persons. To assert the right to data portability, the data subject can contact an employee at any time.
g) Right to object
Any person affected by the processing of personal data has the right granted by the European legislator to object, on grounds relating to his or her particular situation, at any time to processing of personal data concerning him or her which is based on point (e) or (f) of Article 6(1) GDPR. This also applies to profiling based on these provisions. In the event of an objection, we will no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims. If we process personal data for direct marketing purposes, the data subject shall have the right to object at any time to processing of personal data concerning him or her for such marketing. This also applies to profiling insofar as it is associated with such direct advertising. If the data subject objects to us to the processing for direct marketing purposes, we will no longer process the personal data for these purposes. In addition, the data subject has the right, on grounds relating to his or her particular situation, to object to processing of personal data concerning him or her by us for scientific or historical research purposes, or for statistical purposes pursuant to Article 89(1) of the GDPR, unless the processing is necessary for the performance of a task carried out for reasons of public interest. To exercise the right to object, the data subject may contact any employee directly. The data subject is also free, in the context of the use of information society services, and notwithstanding Directive 2002/58/EC, to exercise his or her right to object by automated means using technical specifications.
h) Automated decisions in individual cases including profiling
Each data subject shall have the right granted by the European legislator not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her, or similarly significantly affects him or her, provided that the decision (1) is not necessary for the conclusion or performance of a contract between the data subject and the controller, or (2) is authorised by Union or Member State law to which the controller is subject and which also lays down suitable measures to safeguard the data subject's rights and freedoms and legitimate interests, or (3) is based on the data subject's explicit consent. If the decision (1) is necessary for entering into, or the performance of, a contract between the data subject and a data controller, or (2) it is based on the data subject's explicit consent, we shall implement suitable measures to safeguard the data subject's rights and freedoms and legitimate interests, at least the right to obtain human intervention on the part of the controller, to express his or her point of view and contest the decision. If the data subject wishes to exercise the rights concerning automated individual decision-making, he or she may, at any time, contact any employee of the controller.
i) Right to withdraw consent under data protection law
Any person affected by the processing of personal data has the right granted by the European directive and regulation giver to revoke consent to the processing of personal data at any time. If the data subject wishes to exercise the right to withdraw the consent, he or she may, at any time, contact any employee of the controller.
INFORMATION, CORRECTION, BLOCKING AND DELETION
You can request information about your stored data free of charge at any time.
In accordance with the conditions of the BDSG, you have the right to have your stored data corrected, blocked or deleted. If deletion conflicts with statutory or contractual retention obligations, we will block the data.
On request, we will provide you with complete information about the data stored about you or your company at any time and free of charge, correct, block or delete your data and answer any questions you may have about the collection, storage and use of your data. Please use the contact details given in the legal notice.
