Alexander Krautz, Putbuser Weg 14, 01109 Dresden, Tel .: 0351-811 65 93, Fax: 0351-811 65 94, E-Mail: firstname.lastname@example.org.
1. Scope and legal basis
(1) This data protection declaration explains the type, scope and purpose of the processing of personal data within our online offer and the associated websites, functions and content.
(2) With regard to the terms used, such as “personal data” or their “processing”, we refer to the definitions from Art. 4 of the General Data Protection Regulation (GDPR).
(3) The term “user” includes all categories of persons affected by data processing. They include our business partners, customers, interested parties and other visitors to our online offer.
(4) The personal data of the users processed in the context of this online offer include
- Inventory data (e.g. names and addresses of customers),
- Contact details (e.g. email address, telephone number),
- Contract data (e.g. services used) ,
- usage data (e.g. the websites of our online offer visited, interest in our services),
- content data (e.g. entries in the contact form) and
- technical data (e.g. IP Addresses, device information)
(5) The processing of the users’ personal data takes place in particular for the following purposes:
- Provision of the online offer, its content and functions,
- Provision of our contractual services,
- Customer care,
- Answering contact inquiries and communication with the users,
- marketing and
- security of the online offer.
(6) We only process personal user data in compliance with the relevant data protection regulations. This means that user data will only be processed with legal permission. This is particularly the case if the data processing is necessary or required by law to fulfill our contractual services (e.g. to process orders and orders), or if the user has given consent or is based on our legitimate interests. The analysis, optimization, security and economic operation of our online offer come into consideration as legitimate interests.
(7) We would like to point out that the legal basis for consent is Art. 6 Para. 1 S. 1 lit. a) and Art. 7 GDPR, the legal basis for processing for the performance of our services and the implementation of contractual measures Art. 6 Para. 1 S. 1 lit. b) GDPR, the legal basis for processing to fulfill our legal obligations is Art. 6 Para. 1 S. 1 lit. c) GDPR and the legal basis for processing Safeguarding our legitimate interests is Art. 6 Para. 1 S. 1 lit. f) GDPR.
2. Security measures
(1) We meet in accordance with Art. 32 GDPR, taking into account the state of the art, the implementation costs and the type, scope, circumstances and purposes of processing as well as the different probability of occurrence and severity of the risk for the rights and Freedoms of natural persons, suitable technical and organizational measures to ensure a level of protection appropriate to the risk. This is intended to protect the data processed by us in particular against accidental or deliberate manipulation, loss, deletion or against unauthorized access by third parties. The security measures also include the encrypted transmission of data between your browser and our server.
(2) In addition, we have set up procedures that guarantee the exercise of data subject rights, the deletion of data and a response to the threat to the data.
3. Transfer of data to third parties and third-party providers
(1) If we disclose data to other persons and companies (contract processors or third parties) as part of our processing, transmit them to them or otherwise grant them access to the data, this is only done on the basis of legal permission. This applies, for example, to the transfer of data to third parties in accordance with Art. 6 Para. 1 S. 1 lit. have consented, a legal obligation provides for this or on the basis of our legitimate interests (e.g. when using agents, web hosts, etc.).
(2) If we process data in a third country (i.e. outside the European Union or the European Economic Area) or if we use third-party services or the disclosure or transfer of data to third parties, this will only be done if the special requirements of Art. 44 ff. GDPR are also met. This means that processing takes place, for example, on the basis of special guarantees, such as the officially recognized determination of a data protection level corresponding to the EU (e.g. for the USA through the “Privacy Shield”) or in compliance with officially recognized special contractual obligations (so-called “standard contractual clauses”).
(3) If we commission third parties to process data on the basis of a so-called “order processing contract”, this is done on the basis of Art. 28 GDPR.
4. Collection of access data and log files
- (1) We collect & nbsp; based on our legitimate interests within the meaning of Art. 6 Para. 1 lit. f) GDPR data about every access to the server on which this service is located (so-called server log files ). These data are technically necessary in order to display the respective website to you and to guarantee stability and security. The access data includes the IP address of the requesting computer, the date and time of access, the name and URL of the file accessed, the website from which the access was made (referrer URL), the browser used and, if applicable, the operating system of the user’s computer and the name of the requesting access provider.
- (2) The log file information is created in anonymised form and is used to evaluate system security and stability as well as for security reasons (e.g. to investigate any acts of abuse or fraud ) stored for a maximum of 90 days and then deleted. Data whose further storage is necessary for evidential purposes are excluded from deletion until the respective incident has been finally clarified.
5. Provision of contractual services
We process inventory, contact, contract data and content data for the purpose of fulfilling our contractual obligations and services in accordance with Article 6, Paragraph 1, Sentence 1, Letter b) GDPR. The entries marked as mandatory in online forms are required for the conclusion of the contract.
When contacting us by e-mail, the details of the user (e-mail address, possibly name and telephone number as well as the content) are used to process the contact request and process it in accordance with Art. 6 Para. 1 S. 1 lit. b) GDPR processed.
1) With the following information, we will inform you about the contents of our newsletter as well as the registration and dispatch procedure as well as your rights of objection. By subscribing to our newsletter, you declare that you agree to the receipt and the described procedure.
(2) We send newsletters by email with advertising information only with the consent of the recipient or with legal permission. Our newsletters contain information about our products and services, promotions and our company.
(3) The registration for our newsletter takes place in a so-called double opt-in procedure. This means that after registration you will receive an email in which you will be asked to confirm your registration. This confirmation is necessary so that nobody can register with someone else’s e-mail address. The registrations for the newsletter are logged in order to be able to prove the registration process in accordance with the legal requirements. This includes saving the time of registration and confirmation as well as the IP address. The purpose of the procedure is to be able to prove your registration and, if necessary, to clarify any misuse of your personal data. This is done on the basis of Art. 6 Paragraph 1 lit. f) GDPR.
(5) To register for the newsletter, it is sufficient to provide your email address. Optionally, we ask you to enter a name so that we can address you personally in the newsletter.
(6) Our newsletters contain a so-called “web beacon”, ie a pixel-sized file that is retrieved from our server when the newsletter is opened. As part of this retrieval, technical information, such as information about the browser and your system, as well as your IP address and the time of retrieval, are initially collected. This information is used for the technical improvement of the services based on the technical data or the target groups and their reading behavior based on their retrieval locations (which can be determined with the help of the IP address) or the access times. The statistical surveys also include determining whether the newsletters are opened, when they are opened and which links are clicked. For technical reasons, this information can be assigned to the individual newsletter recipients. However, it is not our aim to observe individual users. The evaluations serve us much more to recognize the reading habits of our users and to adapt our content to them or to send different content according to the interests of our users.
(7) The dispatch of the newsletter and the measurement of success are based on the consent of the recipient in accordance with Art. 6 Paragraph 1 Clause 1 lit. a), Art. 7 GDPR in conjunction with Section 7 Paragraph 2 No. 3 UWG.
(8) You can revoke your consent to receive our newsletter at any time. You will find a link to exercise your right of withdrawal at the end of each newsletter. If the users have only registered for the newsletter and canceled this registration, their personal data will be deleted.
(1) We use the technology of cookies for our online offer. Cookies are small text files that are stored on your device and assigned to the browser you are using and through which certain information flows to the place that sets the cookie (in this case us). Cookies cannot run programs or transmit viruses to your computer. They serve to make the Internet offer more user-friendly and more effective overall
(2) We use transient and persistent cookies. Transient cookies are automatically deleted when you close the browser. This includes in particular the session cookies. These store a so-called session ID, with which various requests from your browser can be assigned to the common session. This means that your device can be recognized when you return to our website. The session cookies are deleted when you close the browser. Persistent cookies are stored on your device between browser sessions so that your interests or actions can be stored across multiple websites. Persistent cookies are automatically deleted after a specified period. We do not use our own persistent cookies. However, this is done via the tools used for range measurement and for marketing purposes, about which users will be informed separately in the course of this data protection declaration, see the following paragraphs 9-11. In addition, we use a cookie to save the user decision when confirming the cookie banner, which, however, is not deleted unless the user prompts.
(3) You can delete cookies at any time in the security settings of your browser. You can also configure your browser settings according to your wishes and e.g. B. reject the acceptance of third-party cookies or all cookies. We would like to point out that you may then not be able to use all the functions of our online offer.
9. Google Analytics
(2) Google will use this information on our behalf to evaluate the use of our online offer by users, to compile reports on the activities within this online offer and to provide us with other services related to the use of this online offer and internet usage to provide. In doing so, pseudonymous user profiles can be created from the processed data.
(3) We use Google Analytics in order to only display the advertisements placed by Google and its partners’ advertising services to users who have also shown an interest in our online offer or who have certain characteristics (e.g. interests in certain topics or Products that are determined on the basis of the websites visited) that we transmit to Google (so-called “remarketing” or “Google Analytics audiences”). With the help of remarketing audiences, we would also like to ensure that our ads correspond to the potential interest of the users.
(4) We only use Google Analytics with activated IP anonymization. This means that the IP address of the user is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. The full IP address will only be sent to a Google server in the USA and shortened there in exceptional cases.
(5) The IP address transmitted by the user’s browser will not be merged with other Google data. Users can prevent the storage of cookies by setting their browser software accordingly; Users can also prevent Google from collecting the data generated by the cookie and relating to their use of the online offer and from processing this data by downloading and installing the browser plug-in available under the following link:
Click here to deactivate Google Analytics
[borlabs-cookie id = “google-analytics” type = “btn-switch-consent” /]
(6) You can find more information on the use of data by Google, setting and objection options on the Google website: & nbsp; https://www.google.com/intl/de/policies/privacy/partners & nbsp; (“Use of data by Google when you use our partners’ websites or apps “), & nbsp; https://policies.google.com/technologies/ads (“Use of data for advertising purposes”), & nbsp; https://adssettings.google.com/authenticated(“Manage information that Google uses to show you advertisements”).
This website uses Facebook’s visitor action pixels to measure conversion. The provider of this service is Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. According to Facebook, the data collected will also be transferred to the USA and other third countries.
In this way, the behavior of the page visitors can be tracked after they have been redirected to the provider’s website by clicking on a Facebook ad. This allows the effectiveness of Facebook advertisements to be evaluated for statistical and market research purposes and future advertising measures to be optimized.
The data collected are anonymous for us as the operator of this website; we cannot draw any conclusions about the identity of the user. However, the data is stored and processed by Facebook so that a connection to the respective user profile is possible and Facebook uses the data for its own advertising purposes, in accordance with the & nbsp; Facebook Data Usage Policy& nbsp ;. This enables Facebook to place advertisements on Facebook pages as well as outside of Facebook. This use of the data cannot be influenced by us as the website operator.
The use of Facebook pixels is based on Art. 6 Para. 1 lit. f GDPR. The website operator has a legitimate interest in effective advertising measures including social media. If a corresponding consent has been requested (e.g. consent to the storage of cookies), processing takes place exclusively on the basis of Art. 6 Para. 1 lit. a GDPR; the consent can be withdrawn at any time.
The data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: & nbsp; https://www.facebook.com/legal/ EU_data_transfer_addendum and & nbsp; https: //de-de.facebook. com / help / 566994660333381.
Insofar as personal data is collected on our website with the help of the tool described here and forwarded to Facebook, we and Facebook Ireland Limited, 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland are jointly responsible for this data processing (Art . 26 GDPR). The joint responsibility is limited exclusively to the collection of the data and its transfer to Facebook. The processing carried out by Facebook after the forwarding is not part of the shared responsibility. The obligations we have jointly have been set out in an agreement on joint processing. The wording of the agreement can be found at: & nbsp; https://www.facebook.com / legal / controller_addendum. According to this agreement, we are responsible for providing data protection information when using the Facebook tool and for implementing the tool on our website in a manner that is secure under data protection law. Facebook is responsible for the data security of Facebook products. You can assert rights of data subjects (e.g. requests for information) with regard to the data processed on Facebook directly on Facebook. If you assert your data subject rights with us, we are obliged to forward them to Facebook.
You can find more information on protecting your privacy in Facebook’s data protection information: & nbsp; https://de-de.facebook.com/about/privacy/ .
You can also use the remarketing function “Custom Audiences” in the settings for advertisements under & nbsp; https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen& nbsp; deactivate. To do this, you have to be logged in to Facebook.
If you do not have a Facebook account, you can deactivate usage-based advertising from Facebook on the website of the European Interactive Digital Advertising Alliance: & nbsp; http://www.youronlinechoices.com/de/praferenzmanagement/ .
You can revoke your consent to the use of Facebook pixels by using & nbsp; on this button & nbsp;.
[borlabs-cookie id = “facebook-pixel” type = “btn-switch-consent” /]
11. Google AdWords Conversion
(1) We use the online advertising program “Google AdWords” based on our legitimate interests (ie interest in the analysis, optimization and economic operation of our online offer within the meaning of Art. 6 Para. 1 lit. f. GDPR) “And in this context the conversion tracking (visitor action evaluation) of Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA, (” Google “). Google is certified under the Privacy Shield Agreement and thus offers a guarantee to comply with European data protection law ( https: / /www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).
(2) If you click on an advertisement placed by Google, a conversion tracking cookie will be placed on your computer. These cookies have a limited validity, do not contain any personal data and are therefore not used for personal identification. If you visit certain pages on our website and the cookie has not yet expired, we and Google can tell that you clicked on the ad and were redirected to this page. Every Google AdWords customer receives a different cookie. This means that there is no way that cookies can be tracked via the websites of AdWords customers. The information that is obtained with the help of the conversion cookie is used to generate conversion statistics. Here we find out the total number of users who clicked on one of our ads and were redirected to a page with a conversion tracking tag. However, we do not receive any information with which users can be personally identified.
(3) You can prevent participation in this tracking process in various ways. First of all, you can do this by setting your browser software accordingly. In particular, the suppression of third-party cookies means that you will not receive any advertisements from third-party providers. It is also possible to deactivate the cookies for conversion tracking by setting your browser so that cookies from the domain “www.googleadservices.com” are blocked, & nbsp; https://www.google.de/settings/ads , whereby this setting is deleted when you delete your cookies. In addition, you can use the link & nbsp; http://www.aboutads.info/choices & nbsp; to deactivate the interest-based advertisements of the providers, that are part of the self-regulation campaign “About Ads”, although this setting will be deleted if you delete your cookies. Finally, you can use Firefox, Internet Explorer or Google Chrome in your browser under the link http://www.google.com/settings/ ads / plugin& nbsp; permanently disable tracking. We would like to point out that in this case you may not be able to use all functions of this offer to their full extent.
(6) Further information on data protection at Google can be found here: & nbsp; http://www.google. com / intl / de / policies / privacy & nbsp; and & nbsp; https://services.google.com/sitestats /de.html.
12. Jetpack (WordPress Stats)
(1) On the basis of our legitimate interests (ie interest in the analysis, optimization and economic operation of our online offer within the meaning of Art. 6 Para. 1 S. 1 lit. f) GDPR), we use the Jetpack plug-in ( here the sub-function “Wordpress Stats”), which integrates a tool for the statistical analysis of visitor access and is provided by Automattic, Inc. 132 Hawthorne Street San Francisco, CA 94107, USA. Jetpack uses so-called “cookies”, text files that are stored on your computer and that enable your use of the website to be analyzed. Automattic is certified under the Privacy Shield Agreement and thus offers a guarantee to comply with European data protection law ( https: / /www.privacyshield.gov/participant?id=a2zt0000000CbqcAAC&status=Active).
(2) The information generated by the cookie about your use of this online offer is stored on a server in the USA. In doing so, user profiles can be created from the processed data, whereby these are only used for analysis and not for advertising purposes. Further information can be found in Automattic’s data protection declarations: & nbsp; https://automattic.com/privacy/ & nbsp; and notes on Jetpack- Cookies: & nbsp; https://jetpack.com/support/cookies/ .
13. Integration of YouTube videos
(1) & nbsp; We have integrated YouTube videos into our online offer, which can be found on & nbsp; http: / /www.YouTube.com & nbsp; and can be played directly from our website. These are all integrated in the “extended data protection mode”, i. H. that no data about you as a user will be transmitted to YouTube if you do not play the videos. Only when you play the videos will the data mentioned in paragraph 2 be transmitted. We have no influence on this data transfer
(2) & nbsp; When you visit the website, YouTube receives the information that you have accessed the corresponding subpage of our website. In addition, the data mentioned under & nbsp; Section 4 & nbsp; of this declaration will be transmitted. This happens regardless of whether YouTube provides a user account that you are logged in to, or whether there is no user account. If you are logged in to Google, your data will be assigned directly to your account. If you do not wish to be assigned to your profile on YouTube, you must log out before activating the button. YouTube stores your data as a user profile and uses it for advertising, market research and / or needs-based design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, although you must contact YouTube to exercise this
(3) & nbsp; You can find more information on the purpose and scope of data collection and processing by YouTube in the data protection declaration. There you will also find further information on your rights and setting options to protect your privacy: & nbsp; https: // www.google.de/intl/de/policies/privacy . Google also processes your personal data in the USA and has submitted to the EU-US Privacy Shield, & nbsp; https://www.privacyshield.gov/EU-US-Framework . & nbsp
14. Integration of services and content from third parties
(1) We set content within our online offer on the basis of our legitimate interests (ie interest in the analysis, optimization and economic operation of our online offer within the meaning of Art. 6 Para. 1 S. 1 lit. f) GDPR) – or service offers from third-party providers in order to incorporate their content and services, such as videos or fonts (hereinafter collectively referred to as “content”). This always presupposes that the third-party providers of this content perceive the IP address of the users, since they would not be able to send the content to their browser without the IP address. The IP address is therefore required to display this content. We strive to only use content whose respective providers only use the IP address to deliver the content.
(2) The following illustration provides an overview of third-party providers and their content, together with links to their data protection declarations, which contain further information on the processing of data and, in some cases, options for objection (so-called opt-out):
a) Maps provided by the “Google Maps” service provided by the third-party provider Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA. Data protection declaration: & nbsp; https://www.google.com/policies/privacy/ , Opt-Out: & nbsp; https://www.google.com/settings/ads/ .
b) Functions of the Google+ service: These functions are offered by the third party provider Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA. If you are logged into your Google+ account, you can link the contents of our pages to your Google+ profile by clicking the Google+ button. This enables Google to assign your visit to our website to your user account. We would like to point out that, as the provider of the website, we have no knowledge of the content of the data transmitted or of how it is used by Google+. Data protection declaration: & nbsp; https://policies.google.com/privacy , Opt-Out: & nbsp; https://adssettings.google.com/authenticated.
15. Your rights
(1) Users have the right to request, free of charge, information about the personal data that we process about them.
(2) Furthermore, users have the right to correct incorrect data, restrict processing and delete their personal data, if applicable the right to data portability and, if unlawful data processing is assumed, the right to lodge a complaint with the competent supervisory authority to be submitted.
(3) Users can also revoke their consent with future effect.
16. Deletion of data
(1) The data stored by us will be deleted as soon as they are no longer required for their intended purpose and the deletion does not conflict with any statutory retention requirements. If the user data is not deleted because it is required for other legally permissible purposes, its processing will be restricted. This means that the data is blocked and not processed for other purposes. This applies, for example, to user data that must be kept for commercial or tax reasons.
(2) According to the legal requirements, the storage takes place for 6 years according to § 257 Abs. 1 HGB (e.g. for commercial and business letters) and for 10 years according to § 147 Abs. 1 AO (e.g. for trading books and accounting documents) < / p>
17. Right of objection
Users can object to the future processing of their personal data in accordance with the legal requirements at any time. The objection can in particular be made against processing for direct marketing purposes.
Users are asked to inform themselves regularly about the content of our data protection declaration. We will adapt the data protection declaration as soon as the changes in the data processing carried out by us or changed legal provisions make this necessary. We will inform you as soon as the changes require your cooperation (e.g. consent) or other individual notification.
19. Facebook Custom Audience
We use the Facebook Custom Audience service from Facebook Ireland Limited, 4 Grand Canal Square, 2 Dublin, Ireland, e-mail: & nbsp; email@example.com , website: & nbsp; http://facebook.com/ . The processing also takes place in a third country for which there is no adequacy decision by the Commission. Therefore, the level of protection that is usual for the GDPR cannot be guaranteed during transmission, as it cannot be ruled out that, for example, authorities in the third country may have access to the data collected.
The legal basis for the transmission of personal data is your consent in accordance with Art. 6 Para. 1 lit. a GDPR or Art. 9 Para. 2 lit. a GDPR, which you have entered on our website.
Facebook Custom Audience is an advertising tool from Facebook, with which targeted Advertising campaigns can be made to site visitors. You can revoke your consent at any time. You can find more detailed information on withdrawing your consent either with the consent itself or at the end of this data protection declaration.
Further information on the handling of the transferred data can be found in the provider’s data protection declaration at & nbsp; https://www.facebook.com/about/privacy .
The provider offers at & nbsp; https://www.facebook.com/about/privacy
20. Borlabs Cookie Notice Plugin
This website uses Borlabs Cookie, which sets a technically necessary cookie (borlabs cookie) to save your cookie consent.
Borlabs Cookie does not process any personal data.
The borlabs-cookie cookie stores the consent you gave when you entered the website. If you would like to revoke this consent, simply delete the cookie in your browser. When you re-enter / reload the website, you will be asked again for your cookie consent.
21. Google Web Fonts
This page uses so-called web fonts, which are provided by Google, for the uniform display of fonts. When you call up a page, your browser loads the required web fonts into your browser cache in order to display texts and fonts correctly.
For this purpose, the browser you are using must connect to the Google servers. This gives Google knowledge that our website has been accessed via your IP address. The use of Google Web Fonts takes place in the interest of a uniform and appealing presentation of our online offers. This represents a legitimate interest within the meaning of Art. 6 Para. 1 lit.f GDPR.
If your browser does not support web fonts, a standard font will be used by your computer.
Further information on Google Web Fonts can be found at https://developers.google.com/fonts/faq and in Google’s data protection declaration: https://www.google.com/policies/privacy/.