Privacy Policy
We are pleased that you are visiting our website. Below, we would like to inform you about how your data is handled in accordance with Article 13 of the General Data Protection Regulation (GDPR).
Controller
The entity responsible for the data processing described below is the one named in the legal notice (Impressum).
Usage Data
When you visit our websites, temporary usage data is processed on our web server for statistical purposes in order to improve the quality of our websites. This data set consists of:
-
the name and address of the requested content,
-
the date and time of the request,
-
the volume of data transferred,
-
the access status (content delivered, content not found),
-
a description of the web browser and operating system used,
-
the referring URL, which indicates the page from which you accessed ours,
-
the IP address of the requesting computer, which is truncated so that it is no longer personally identifiable.
These log data are only analysed in anonymised form.
The legal basis for the processing of usage data is Art. 6 (1) sentence 1 lit. f GDPR. The processing is carried out based on our legitimate interest in making the website content available and ensuring a device- and browser-optimised display.
Storage of IP Address for Security Purposes
In addition, we store the full IP address transmitted by your web browser strictly for the purpose of identifying, limiting, and eliminating attacks on our website for a period of seven days. After this period, the IP address is deleted or anonymised. The legal basis for this processing is Art. 6 (1) sentence 1 lit. f GDPR (legitimate interest).
Website Hosting
Our website content is hosted by the following provider:
WIX
Provider: Wix.com Ltd., 40 Namal Tel Aviv St., Tel Aviv 6350671, Israel (hereinafter referred to as "WIX").
WIX is a tool for creating and hosting websites. When you visit our website, WIX helps to analyse user behaviour, visitor sources, the region of website visitors, and visitor numbers. WIX stores cookies in your browser that are necessary for the website’s display and security (essential cookies). The data collected by WIX may be stored on servers around the world, including the USA. For further details, please refer to WIX’s privacy policy:
https://de.wix.com/about/privacy.
According to WIX, data transfers to the USA and other third countries are based on the EU Commission’s standard contractual clauses or comparable safeguards under Art. 46 GDPR. Further information is available here:
https://de.wix.com/about/privacy-dpa-users.
Data Security
To protect your data from unauthorised access as comprehensively as possible, we implement technical and organisational measures. We use encryption on our websites. Your information is transmitted from your computer to our server and back via the internet using TLS encryption. You can usually recognise this by the closed padlock symbol in your browser’s address bar and the use of "https://" in the address line.
Contact Form
You may contact us using our contact form. To use the form, we require the data marked as mandatory fields.
We process this data based on Art. 6 (1) sentence 1 lit. f GDPR to respond to your enquiry.
Additionally, you may choose to provide further information voluntarily. Such information is not required for contacting us. Voluntary data is processed on the basis of your consent.
Your data is only used to respond to your enquiry. We delete your data when it is no longer needed, unless statutory retention obligations apply. Typically, this is 30 days after your enquiry has been processed.
If your data is processed under Art. 6 (1) sentence 1 lit. f GDPR, you may object to the processing at any time. You may also withdraw your consent for the processing of voluntary data at any time. Please contact the email address listed in the legal notice.
Storage Period
Unless already stated in detail, we delete personal data when they are no longer necessary for the purposes mentioned above and when no legitimate interests or statutory retention obligations prevent deletion.
Your Rights as a Data Subject
Under the GDPR, you are entitled to the following rights regarding the processing of your personal data:
Right of Access (Art. 15 GDPR)
You have the right to request confirmation as to whether personal data concerning you are being processed. If so, you have the right to access this data and the information specified in Art. 15 GDPR.
Right to Rectification (Art. 16 GDPR)
You have the right to request the immediate correction of inaccurate personal data concerning you and, where applicable, the completion of incomplete data.
Right to Erasure (Art. 17 GDPR)
You have the right to request the erasure of personal data concerning you without undue delay where one of the grounds set out in Art. 17 GDPR applies.
Right to Restriction of Processing (Art. 18 GDPR)
You have the right to request restriction of processing where one of the conditions outlined in Art. 18 GDPR is met – for example, if you object to processing while it is being reviewed.
Right to Data Portability (Art. 20 GDPR)
In the cases described in Art. 20 GDPR, you have the right to receive the personal data concerning you in a structured, commonly used and machine-readable format or to request transmission to another controller.
Right to Withdraw Consent (Art. 7 GDPR)
Where processing is based on your consent, you may withdraw it at any time pursuant to Art. 7 (3) GDPR. Please note that such withdrawal only applies to future processing. Data processing carried out before the withdrawal remains lawful.
Right to Object (Art. 21 GDPR)
Where data is processed based on Art. 6 (1) sentence 1 lit. f GDPR (legitimate interest) or Art. 6 (1) sentence 1 lit. e GDPR (public interest or exercise of official authority), you have the right to object to such processing on grounds relating to your particular situation. Your personal data will then no longer be processed unless compelling legitimate grounds for the processing can be demonstrated, which override your interests, rights and freedoms, or the processing serves the establishment, exercise, or defence of legal claims.
Right to Lodge a Complaint with a Supervisory Authority (Art. 77 GDPR)
Under Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data violates data protection regulations. You may assert this right with a supervisory authority in the Member State of your habitual residence, place of work or the place of the alleged infringement.
Asserting Your Rights
Unless otherwise stated above, please contact the entity listed in the legal notice to exercise your data subject rights.
Contact Details of the Data Protection Officer
Our external Data Protection Officer is available to answer your questions regarding data protection:
datenschutz nord GmbH
Konsul-Smidt-Straße 88
28217 Bremen
Website: https://www.dsn-group.de/
Email: office@datenschutz-nord.de
When contacting our Data Protection Officer, please also mention the responsible entity named in the legal notice.
COOKIES
Our websites use so-called "cookies." Cookies are small data packets and do not cause any damage to your device. They are either stored temporarily for the duration of a session (session cookies) or permanently (permanent cookies) on your device. Session cookies are automatically deleted after your visit. Permanent cookies remain stored on your device until you delete them yourself or your web browser automatically deletes them.
Cookies can be set by us (first-party cookies) or by third-party companies (so-called third-party cookies). Third-party cookies enable the integration of certain services from third-party companies within websites (e.g., cookies for processing payment services).
Cookies have various functions. Many cookies are technically necessary because certain website functions would not work without them (e.g., the shopping cart function or the display of videos). Other cookies can be used to evaluate user behavior or for advertising purposes.
Cookies that are necessary for the electronic communication process, for the provision of certain functions you have requested (e.g., for the shopping cart function), or for the optimization of the website (e.g., cookies to measure the web audience) (necessary cookies) are stored on the basis of Art. 6 para. 1 lit. f GDPR, unless another legal basis is specified. The website operator has a legitimate interest in the storage of necessary cookies for the technically error-free and optimized provision of its services. If consent to the storage of cookies and comparable recognition technologies has been requested, the processing is carried out exclusively on the basis of this consent (Art. 6 para. 1 lit. a GDPR and Section 25 para. 1 TDDDG); consent can be revoked at any time.
You can configure your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general, and activate the automatic deletion of cookies when closing the browser. If cookies are deactivated, the functionality of this website may be restricted.
If further cookies and services are used on this website, you can find details in this privacy policy.
Consent with Usercentrics
This website uses the consent technology of Usercentrics to obtain your consent for the storage of certain cookies on your device or for the use of certain technologies and to document this in a data protection-compliant manner. The provider of this technology is Usercentrics GmbH, Sendlinger Straße 7, 80331 Munich, Germany, website: https://usercentrics.com (hereinafter "Usercentrics").
When you enter our website, the following personal data is transmitted to Usercentrics:
-
Your consent(s) or the revocation of your consent(s)
-
Your IP address
-
Information about your browser
-
Information about your device
-
Time of your visit to the website
-
Geolocation
Furthermore, Usercentrics stores a cookie in your browser in order to be able to assign the consents you have given or their revocation. The data collected in this way is stored until you request us to delete it, delete the Usercentrics cookie yourself, or the purpose for data storage no longer applies. Mandatory statutory retention periods remain unaffected.
Usercentrics is used to obtain the legally required consents for the use of certain technologies. The legal basis for this is Art. 6 para. 1 lit. c GDPR.
