I. General information on data processing
1. Scope of processing of personal data
As a matter of principle, we only process personal data of our users to the extent necessary to provide a functional website and our content and services. The processing of our users' personal data regularly takes place only after the user's consent. An exception applies in cases where prior consent cannot be obtained for factual reasons and the processing of the data is permitted by statutory provisions.
2. Legal basis for the processing of personal data
Insofar as we obtain the consent of the data subject for processing operations involving personal data, Art. 6(1)(a) of the EU General Data Protection Regulation (GDPR) serves as the legal basis.
When processing personal data that is necessary for the performance of a contract to which the data subject is party, Art. 6(1)(b) GDPR serves as the legal basis. This also applies to processing operations that are necessary to carry out pre-contractual measures.
Insofar as processing of personal data is necessary to fulfil a legal obligation to which our company is subject, Art. 6(1)(c) GDPR serves as the legal basis.
In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6(1)(d) GDPR serves as the legal basis.
If processing is necessary to safeguard a legitimate interest of our company or a third party and the interests, fundamental rights and freedoms of the data subject do not override the first-mentioned interest, Art. 6(1)(f) GDPR serves as the legal basis for processing.
3. Data erasure and storage period
The personal data of the data subject will be erased or blocked as soon as the purpose of storage ceases to apply. Storage may also take place if this has been provided for by the European or national legislator in EU regulations, laws or other provisions to which the controller is subject. Data will also be blocked or erased when a storage period prescribed by the aforementioned standards expires, unless further storage of the data is necessary for the conclusion or performance of a contract.
II. Provision of the website and creation of log files
1. Description and scope of data processing
Each time our website is accessed, our system automatically collects data and information from the computer system of the accessing computer.
The following data is collected:
- Information about the browser type and version used
- The user's operating system
- The user's IP address
- Date and time of access
- Websites from which the user's system reaches our website
- Websites accessed by the user's system via our website
The data is also stored in our system's log files. This data is not stored together with other personal data of the user.
2. Legal basis for data processing
The legal basis for the temporary storage of the data and the log files is Art. 6(1)(f) GDPR.
3. Purpose of data processing
Storage in log files takes place to ensure the functionality of the website. In addition, the data helps us to optimise the website and to ensure the security of our information technology systems. The data is not evaluated for marketing purposes in this context.
These purposes also constitute our legitimate interest in data processing pursuant to Art. 6(1)(f) GDPR.
4. Storage period
Where data is stored in log files, this is the case after seven days at the latest. Storage beyond this is possible. In this case, the users' IP addresses are deleted or anonymised so that it is no longer possible to identify the accessing client.
5. Possibility of objection and removal
The collection of data for the provision of the website and the storage of data in log files is essential for the operation of the website. Consequently, the user has no possibility of objection.
III. Use of cookies
a) Description and scope of data processing
Our website uses cookies. Cookies are text files that are stored in the internet browser or by the internet browser on the user's computer system. When a user visits a website, a cookie may be stored on the user's operating system. This cookie contains a characteristic string of characters that enables the browser to be uniquely identified when the website is visited again.
We use cookies to make our website more user-friendly. Some elements of our website require that the accessing browser can be identified even after a page change.
When accessing our website, the user is informed about the use of cookies for analysis purposes and their consent to the processing of the personal data used in this context is obtained. In this context, reference is also made to this privacy policy.
b) Legal basis for data processing
The legal basis for the processing of personal data using technically necessary cookies is Art. 6(1)(f) GDPR.
The legal basis for the processing of personal data using cookies for analysis purposes is Art. 6(1)(a) GDPR if the user has given consent to this effect.
c) Purpose of data processing
The purpose of using technically necessary cookies is to simplify the use of websites for users. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognised even after a page change.
We need cookies for the following applications:
- Adoption of language settings
The user data collected by technically necessary cookies is not used to create user profiles.
These purposes also constitute our legitimate interest in the processing of personal data pursuant to Art. 6(1)(f) GDPR.
e) Storage period, possibility of objection and removal
Cookies are stored on the user's computer and transmitted by it to our site. As a user, you therefore also have full control over the use of cookies. By changing the settings in your internet browser, you can deactivate or restrict the transmission of cookies. Cookies that have already been stored can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all functions of the website to their full extent.
IV. Newsletter
1. Description and scope of data processing
On our website it is possible to subscribe to a free newsletter. When registering for the newsletter, the data from the input mask is transmitted to us, e.g. your email address.
In addition, the following data is collected during registration:
- IP address of the accessing computer
- Date and time of registration
Your consent to the processing of the data is obtained during the registration process and reference is made to this privacy policy.
In connection with data processing for sending newsletters, the data is not passed on to third parties. The data is used exclusively for sending the newsletter.
2. Legal basis for data processing
The legal basis for processing the data after the user has registered for the newsletter is Art. 6(1)(a) GDPR if the user has given consent.
3. Purpose of data processing
The user's email address is collected in order to deliver the newsletter.
The collection of other personal data as part of the registration process serves to prevent misuse of the services or the email address used.
4. Storage period
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. The user's email address is therefore stored for as long as the newsletter subscription is active.
Other personal data collected during the registration process is usually deleted after a period of seven days.
5. Possibility of objection and removal
The subscription to the newsletter can be cancelled by the user concerned at any time. For this purpose, there is a corresponding link in every newsletter.
This also makes it possible to withdraw consent to the storage of personal data collected during the registration process.
V. Contact form and email contact
1. Description and scope of data processing
There is a contact form on our website that can be used to get in touch electronically. If a user takes advantage of this option, the data entered in the input mask is transmitted to us and stored. This data is:
Surname, first name
Address
Telephone number
Fax, telephone number
The following data is also stored at the time the message is sent:
- The user's IP address
- Date and time of registration
Your consent to the processing of the data is obtained during the sending process and reference is made to this privacy policy.
Alternatively, you can contact us via the email address provided. In this case, the user's personal data transmitted with the email will be stored.
In this context, the data is not passed on to third parties. The data is used exclusively for processing the conversation.
2. Legal basis for data processing
The legal basis for processing the data is Art. 6(1)(a) GDPR if the user has given consent.
The legal basis for processing data transmitted in the course of sending an email is Art. 6(1)(f) GDPR. If the email contact is aimed at concluding a contract, the additional legal basis for processing is Art. 6(1)(b) GDPR.
3. Purpose of data processing
We process the personal data from the input mask solely to handle the contact. In the case of contact by email, this also constitutes the necessary legitimate interest in processing the data.
The other personal data processed during the sending process serves to prevent misuse of the contact form and to ensure the security of our information technology systems.
4. Storage period
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. For personal data from the input mask of the contact form and data sent by email, this is the case when the respective conversation with the user has ended. The conversation has ended when it can be inferred from the circumstances that the matter in question has been finally clarified.
The additional personal data collected during the sending process will be deleted after a period of seven days at the latest.
5. Possibility of objection and removal
The user has the option of withdrawing their consent to the processing of personal data at any time. If the user contacts us by email, they can object to the storage of their personal data at any time. In such a case, the conversation cannot be continued.
In this case, all personal data stored in the course of contacting us will be deleted.
6. Right to withdraw the declaration of consent under data protection law
You have the right to withdraw your declaration of consent under data protection law at any time. The withdrawal of consent does not affect the lawfulness of processing carried out on the basis of the consent before its withdrawal.
