Privacy Policy​

We are pleased that you are visiting our website. Below, we would like to inform you about how your data is handled in accordance with Article 13 of the General Data Protection Regulation (GDPR).

​

Controller

The entity responsible for the data processing described below is the one named in the legal notice (Impressum).

​

Usage Data

When you visit our websites, temporary usage data is processed on our web server for statistical purposes in order to improve the quality of our websites. This data set consists of:

​

• the name and address of the requested content,

• the date and time of the request,

• the volume of data transferred,

• the access status (content delivered, content not found),

• a description of the web browser and operating system used,

• the referring URL, which indicates the page from which you accessed ours,

• the IP address of the requesting computer, which is truncated so that it is no longer personally identifiable.

​

These log data are only analysed in anonymised form.

The legal basis for the processing of usage data is Art. 6 (1) sentence 1 lit. f GDPR. The processing is carried out based on our legitimate interest in making the website content available and ensuring a device- and browser-optimised display.

​

Storage of IP Address for Security Purposes

In addition, we store the full IP address transmitted by your web browser strictly for the purpose of identifying, limiting, and eliminating attacks on our website for a period of seven days. After this period, the IP address is deleted or anonymised. The legal basis for this processing is Art. 6 (1) sentence 1 lit. f GDPR (legitimate interest).

​

Website Hosting

Our website content is hosted by the following provider:

WIX
Provider: Wix.com Ltd., 40 Namal Tel Aviv St., Tel Aviv 6350671, Israel (hereinafter referred to as "WIX").

WIX is a tool for creating and hosting websites. When you visit our website, WIX helps to analyse user behaviour, visitor sources, the region of website visitors, and visitor numbers. WIX stores cookies in your browser that are necessary for the website’s display and security (essential cookies). The data collected by WIX may be stored on servers around the world, including the USA. For further details, please refer to WIX’s privacy policy:
https://de.wix.com/about/privacy.

​

According to WIX, data transfers to the USA and other third countries are based on the EU Commission’s standard contractual clauses or comparable safeguards under Art. 46 GDPR. Further information is available here:
https://de.wix.com/about/privacy-dpa-users.

​

The use of WIX is based on Art. 6 (1) lit. f GDPR. We have a legitimate interest in ensuring a reliable presentation of our website. If the appropriate consent has been requested, the processing is carried out exclusively on the basis of Art. 6 (1) lit. a GDPR and § 25 (1) TTDSG, to the extent the consent includes the storage of cookies or access to information on the user's device (e.g. device fingerprinting) within the meaning of the TTDSG. Consent can be withdrawn at any time.

​

Data Security

To protect your data from unauthorised access as comprehensively as possible, we implement technical and organisational measures. We use encryption on our websites. Your information is transmitted from your computer to our server and back via the internet using TLS encryption. You can usually recognise this by the closed padlock symbol in your browser’s address bar and the use of "https://" in the address line.

​

Contact Form

You may contact us using our contact form. To use the form, we require the data marked as mandatory fields.

We process this data based on Art. 6 (1) sentence 1 lit. f GDPR to respond to your enquiry.

Additionally, you may choose to provide further information voluntarily. Such information is not required for contacting us. Voluntary data is processed on the basis of your consent.

Your data is only used to respond to your enquiry. We delete your data when it is no longer needed, unless statutory retention obligations apply. Typically, this is 30 days after your enquiry has been processed.

If your data is processed under Art. 6 (1) sentence 1 lit. f GDPR, you may object to the processing at any time. You may also withdraw your consent for the processing of voluntary data at any time. Please contact the email address listed in the legal notice.

​

Storage Period

Unless already stated in detail, we delete personal data when they are no longer necessary for the purposes mentioned above and when no legitimate interests or statutory retention obligations prevent deletion.

​

Your Rights as a Data Subject

Under the GDPR, you are entitled to the following rights regarding the processing of your personal data:

Right of Access (Art. 15 GDPR)
You have the right to request confirmation as to whether personal data concerning you are being processed. If so, you have the right to access this data and the information specified in Art. 15 GDPR.

Right to Rectification (Art. 16 GDPR)
You have the right to request the immediate correction of inaccurate personal data concerning you and, where applicable, the completion of incomplete data.

​

Right to Erasure (Art. 17 GDPR)
You have the right to request the erasure of personal data concerning you without undue delay where one of the grounds set out in Art. 17 GDPR applies.

​

Right to Restriction of Processing (Art. 18 GDPR)
You have the right to request restriction of processing where one of the conditions outlined in Art. 18 GDPR is met – for example, if you object to processing while it is being reviewed.

​

Right to Data Portability (Art. 20 GDPR)
In the cases described in Art. 20 GDPR, you have the right to receive the personal data concerning you in a structured, commonly used and machine-readable format or to request transmission to another controller.

​

Right to Withdraw Consent (Art. 7 GDPR)
Where processing is based on your consent, you may withdraw it at any time pursuant to Art. 7 (3) GDPR. Please note that such withdrawal only applies to future processing. Data processing carried out before the withdrawal remains lawful.

​

Right to Object (Art. 21 GDPR)
Where data is processed based on Art. 6 (1) sentence 1 lit. f GDPR (legitimate interest) or Art. 6 (1) sentence 1 lit. e GDPR (public interest or exercise of official authority), you have the right to object to such processing on grounds relating to your particular situation. Your personal data will then no longer be processed unless compelling legitimate grounds for the processing can be demonstrated, which override your interests, rights and freedoms, or the processing serves the establishment, exercise, or defence of legal claims.

​

Right to Lodge a Complaint with a Supervisory Authority (Art. 77 GDPR)
Under Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data violates data protection regulations. You may assert this right with a supervisory authority in the Member State of your habitual residence, place of work or the place of the alleged infringement.

​

Asserting Your Rights

Unless otherwise stated above, please contact the entity listed in the legal notice to exercise your data subject rights.

​

Contact Details of the Data Protection Officer

Our external Data Protection Officer is available to answer your questions regarding data protection:

datenschutz nord GmbH
Konsul-Smidt-Straße 88
28217 Bremen
Website: https://www.dsn-group.de/
Email: office@datenschutz-nord.de

When contacting our Data Protection Officer, please also mention the responsible entity named in the legal notice.

​