Data Policy

General Information

The fol­low­ing notes pro­vide a sim­ple overview of what hap­pens to your per­son­al data when you vis­it this web­site. Per­son­al data is any data by which you can be per­son­al­ly iden­ti­fied. Detailed infor­ma­tion on the sub­ject of data pro­tec­tion can be found in our pri­va­cy pol­i­cy list­ed below this text.

Data Collection on This Website

Who is responsible for data collection on this website?

The data pro­cess­ing on this web­site is car­ried out by the web­site oper­a­tor. You can find the con­tact details of the web­site oper­a­tor in the sec­tion “Notice on the Respon­si­ble Par­ty” in this pri­va­cy policy.

How do we collect your data?

Your data is col­lect­ed, first­ly, when you pro­vide it to us. This can be data that you enter in a con­tact form, for example.

Oth­er data is col­lect­ed auto­mat­i­cal­ly or with your con­sent by our IT sys­tems when you vis­it the web­site. This is main­ly tech­ni­cal data (e.g., inter­net brows­er, oper­at­ing sys­tem, or time of page access). The col­lec­tion of this data occurs auto­mat­i­cal­ly as soon as you enter this website.

What do we use your data for?

A por­tion of the data is col­lect­ed to ensure the error-free pro­vi­sion of the web­site. Oth­er data can be used to ana­lyze your user behavior.

What rights do you have regarding your data?

You have the right at any time to obtain free infor­ma­tion about the ori­gin, recip­i­ent, and pur­pose of your stored per­son­al data. You also have the right to request the cor­rec­tion or dele­tion of this data. If you have giv­en con­sent for data pro­cess­ing, you can revoke this con­sent at any time for the future. Fur­ther­more, you have the right, under cer­tain cir­cum­stances, to request the restric­tion of the pro­cess­ing of your per­son­al data. Addi­tion­al­ly, you have the right to lodge a com­plaint with the com­pe­tent super­vi­so­ry authority.

You can con­tact us at any time regard­ing this or oth­er ques­tions on the sub­ject of data protection.

2. Hosting

We host the content of our website with the following provider:

Mittwald

This web­site is host­ed by an exter­nal ser­vice provider (host). The per­son­al data col­lect­ed on this web­site is stored on the servers of the host. This may include IP address­es, con­tact requests, meta and com­mu­ni­ca­tion data, con­tract data, con­tact details, names, web­site access­es, and oth­er data gen­er­at­ed via a website.

The use of the host is for the pur­pose of ful­fill­ing con­tracts with our poten­tial and exist­ing cus­tomers (Art. 6 Para. 1 lit. b GDPR) and in the inter­est of secure, fast, and effi­cient pro­vi­sion of our online ser­vices by a pro­fes­sion­al provider (Art. 6 Para. 1 lit. f GDPR).

Our host will only process your data to the extent nec­es­sary to ful­fill its ser­vice oblig­a­tions and fol­low our instruc­tions regard­ing this data.

We use the fol­low­ing host:

Mittwald CM Ser­vice GmbH & Co. KG
rep­re­sent­ed by Robert Mey­er Ver­wal­tungs GmbH
rep­re­sent­ed by Robert Mey­er, Flo­ri­an Jür­gens
Königs­berg­er Str. 4 – 6
32339 Espelkamp

Phone: +49 57722 93734
Fax: +49 5772 293333
Email: marketing@mittwald.de

Order Processing

We have con­clud­ed a con­tract on order pro­cess­ing (AVV) for the use of the above-men­tioned ser­vice. This is a con­tract required by data pro­tec­tion law, which ensures that this ser­vice provider process­es the per­son­al data of our web­site vis­i­tors only accord­ing to our instruc­tions and in com­pli­ance with the GDPR.

3. General Information and Mandatory Disclosures

Data Protection

The oper­a­tors of this site take the pro­tec­tion of your per­son­al data very seri­ous­ly. We treat your per­son­al data con­fi­den­tial­ly and accord­ing to the legal data pro­tec­tion reg­u­la­tions as well as this pri­va­cy policy.

When you use this web­site, var­i­ous per­son­al data is col­lect­ed. Per­son­al data is data that can be used to per­son­al­ly iden­ti­fy you. This pri­va­cy pol­i­cy explains what data we col­lect and what we use it for. It also explains how and for what pur­pose this is done.

We would like to point out that data trans­mis­sion over the Inter­net (e.g., when com­mu­ni­cat­ing via email) can have secu­ri­ty vul­ner­a­bil­i­ties. A com­plete pro­tec­tion of the data from access by third par­ties is not possible.

Notice on the Responsible Party

The respon­si­ble par­ty for data pro­cess­ing on this web­site is:

Andrea Sachau
Anna-Holl­mann-Weg 3
22587 Ham­burg

Phone: +49 (0)170 1102787
Email: moin@andreasachau.de

The respon­si­ble par­ty is the nat­ur­al or legal per­son who alone or joint­ly with oth­ers deter­mines the pur­pos­es and means of pro­cess­ing per­son­al data (e.g., names, email address­es, etc.).

Storage Duration

Unless a more spe­cif­ic stor­age peri­od is stat­ed with­in this pri­va­cy pol­i­cy, your per­son­al data will remain with us until the pur­pose for the data pro­cess­ing no longer applies. If you make a legit­i­mate request for dele­tion or revoke your con­sent to data pro­cess­ing, your data will be delet­ed unless we have oth­er legal­ly per­mis­si­ble rea­sons for stor­ing your per­son­al data (e.g., tax or com­mer­cial law reten­tion peri­ods); in the lat­ter case, the dele­tion takes place after these rea­sons cease to apply.

General Information on the Legal Basis for Data Processing on This Website

If you have con­sent­ed to data pro­cess­ing, we process your per­son­al data on the basis of Art. 6 Para. 1 lit. a GDPR or Art. 9 Para. 2 lit. a GDPR if spe­cial cat­e­gories of data are processed accord­ing to Art. 9 Para. 1 GDPR. In the case of an express con­sent to the trans­fer of per­son­al data to third coun­tries, the data pro­cess­ing is also based on Art. 49 Para. 1 lit. a GDPR. If you have con­sent­ed to the stor­age of cook­ies or to access to infor­ma­tion in your ter­mi­nal device (e.g., via device fin­ger­print­ing), the data pro­cess­ing is addi­tion­al­ly based on § 25 Para. 1 TDDG. The con­sent can be revoked at any time. If your data is nec­es­sary for the ful­fill­ment of a con­tract or for the imple­men­ta­tion of pre-con­trac­tu­al mea­sures, we process your data on the basis of Art. 6 Para. 1 lit. b GDPR. Fur­ther­more, we process your data if it is nec­es­sary to ful­fill a legal oblig­a­tion on the basis of Art. 6 Para. 1 lit. c GDPR. The data pro­cess­ing can also be based on our legit­i­mate inter­est accord­ing to Art. 6 Para. 1 lit. f GDPR. The respec­tive legal basis on which a pro­cess­ing is based is explained in this pri­va­cy policy.

Recipients of Personal Data

In the course of our busi­ness activ­i­ties, we work with var­i­ous exter­nal enti­ties. It may also be nec­es­sary to trans­mit per­son­al data to these exter­nal enti­ties. We only pass on per­son­al data if this is nec­es­sary in the con­text of ful­fill­ing a con­tract, if we are legal­ly oblig­ed to do so (e.g., trans­fer of data to tax author­i­ties), if we have a legit­i­mate inter­est in doing so under Art. 6 Para. 1 lit. f GDPR, or if anoth­er legal basis per­mits the data trans­fer. When using data proces­sors, we only pass on per­son­al data of our cus­tomers on the basis of a valid con­tract for data pro­cess­ing. In the case of joint pro­cess­ing, a con­tract for joint pro­cess­ing is concluded.

Revocation of Your Consent to Data Processing

Many data pro­cess­ing oper­a­tions are only pos­si­ble with your express con­sent. You can revoke an already giv­en con­sent at any time. The legal­i­ty of the data pro­cess­ing car­ried out until the revo­ca­tion remains unaf­fect­ed by the revocation.

Right to Object to Data Collection in Special Cases and to Direct Marketing (Art. 21 GDPR)

IF THE DATA PROCESSING IS BASED ON ART. 6 PARA. 1 LIT. E OR F GDPR, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA AT ANY TIME FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. THE RESPECTIVE LEGAL BASIS ON WHICH A PROCESSING IS BASED CAN BE FOUND IN THIS PRIVACY POLICY. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR AFFECTED PERSONAL DATA UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OUTWEIGH YOUR INTERESTS, RIGHTS, AND FREEDOMS, OR THE PROCESSING SERVES THE ASSERTION, EXERCISE, OR DEFENSE OF LEGAL CLAIMS (OBJECTION ACCORDING TO ART. 21 PARA. 1 GDPR).

IF YOUR PERSONAL DATA IS PROCESSED FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH MARKETING; THIS ALSO APPLIES TO PROFILING TO THE EXTENT THAT IT IS RELATED TO SUCH DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA WILL THEN NO LONGER BE USED FOR DIRECT MARKETING PURPOSES (OBJECTION ACCORDING TO ART. 21 PARA. 2 GDPR).

Right to Lodge a Complaint with the Competent Supervisory Authority

In the event of vio­la­tions of the GDPR, the affect­ed indi­vid­u­als have the right to lodge a com­plaint with a super­vi­so­ry author­i­ty, par­tic­u­lar­ly in the mem­ber state of their habit­u­al res­i­dence, place of work, or the loca­tion of the alleged vio­la­tion. The right to lodge a com­plaint exists with­out prej­u­dice to oth­er admin­is­tra­tive or judi­cial remedies.

Right to Data Portability

You have the right to have data that we process auto­mat­i­cal­ly based on your con­sent or in ful­fill­ment of a con­tract deliv­ered to you or to a third par­ty in a com­mon, machine-read­able for­mat. If you request the direct trans­fer of the data to anoth­er respon­si­ble par­ty, this will only be done to the extent tech­ni­cal­ly feasible.

Access, Rectification, and Deletion

With­in the frame­work of the applic­a­ble legal pro­vi­sions, you have the right at any time to free infor­ma­tion about your stored per­son­al data, its ori­gin and recip­i­ent, and the pur­pose of data pro­cess­ing and, if nec­es­sary, a right to rec­ti­fi­ca­tion or dele­tion of this data. For this pur­pose, as well as for fur­ther ques­tions on the sub­ject of per­son­al data, you can con­tact us at any time.

Right to Restriction of Processing

You have the right to request the restric­tion of the pro­cess­ing of your per­son­al data. For this pur­pose, you can con­tact us at any time. The right to restric­tion of pro­cess­ing exists in the fol­low­ing cases:

  • If you dis­pute the accu­ra­cy of your per­son­al data stored by us, we usu­al­ly need time to ver­i­fy this. For the dura­tion of the ver­i­fi­ca­tion, you have the right to request the restric­tion of the pro­cess­ing of your per­son­al data.
  • If the pro­cess­ing of your per­son­al data was/is unlaw­ful, you can request the restric­tion of data pro­cess­ing instead of deletion.
  • If we no longer need your per­son­al data, but you need it to exer­cise, defend, or assert legal claims, you have the right to request the restric­tion of the pro­cess­ing of your per­son­al data instead of deletion.
  • If you have object­ed under Art. 21 Para. 1 GDPR, a bal­ance must be struck between your and our inter­ests. As long as it is not yet clear whose inter­ests pre­vail, you have the right to request the restric­tion of the pro­cess­ing of your per­son­al data.

If you have restrict­ed the pro­cess­ing of your per­son­al data, this data may only be processed—apart from its storage—with your con­sent or for the asser­tion, exer­cise, or defense of legal claims or for the pro­tec­tion of the rights of anoth­er nat­ur­al or legal per­son or for rea­sons of impor­tant pub­lic inter­est of the Euro­pean Union or a mem­ber state.

Rejection of unsolicited e‑mails

We here­with object to the use of con­tact infor­ma­tion pub­lished in con­junc­tion with the manda­to­ry infor­ma­tion to be pro­vid­ed in our Site Notice to send us pro­mo­tion­al and infor­ma­tion mate­r­i­al that we have not express­ly request­ed. The oper­a­tors of this web­site and its pages reserve the express right to take legal action in the event of the unso­licit­ed send­ing of pro­mo­tion­al infor­ma­tion, for instance via SPAM messages.

[bor­labs-cook­ie type=“btn-cookie-preference” title=“Cookie settings”/]