Data protection declaration
We run our websites according to the following principles:
We undertake to comply with the legal provisions on data protection and strive to always observe the principles of data avoidance and data minimization.
1. Name and address of the person responsible and the data protection officer
- The person responsible within the meaning of the General Data Protection Regulation and other national data protection laws of the member states of the European Union as well as other data protection regulations is::
Represented by Managing Directors Markus und Christopher Kassulke
I_Park Klingholz 13
Tel.: 09334/ 9757 – 0
Fax: 09334/ 9757 – 19
- The data protection officer of the person responsible is:
Thorsten Krietsch (Data Protection Officer TÜV), Carstennstr. 47, 12205 Berlin, firstname.lastname@example.org
2. Explanation of terms
We have designed our data protection declaration according to the principles of clarity and transparency. However, should there be any ambiguity regarding the use of different terms, the corresponding definitions can be viewed here [https://dsgvo-gesetz.de/art-4-dsgvo/].
3. Legal basis for processing personal data
We only process your personal data such as your surname and first name, your e-mail address and IP address, etc. if there is a legal basis for this. According to the General Data Protection Regulation, the following regulations in particular come into consideration here:
- Article 6 (1) sentence 1 lit. a GDPR: The data subject has given their consent to the processing of their personal data for one or more specific purposes.
- Article 6 (1) sentence 1 lit. b GDPR: Processing is necessary for the performance of a contract to which the data subject is party or for the implementation of pre-contractual measures that are carried out at the request of the data subject.
- Article 6 paragraph 1 sentence 1 lit. c GDPR: The processing is necessary to fulfill a legal obligation to which the person responsible is subject
- Article 6 paragraph 1 sentence 1 lit. d GDPR: Processing is necessary to protect the vital interests of the data subject or another natural person
- Art. 6 (1) sentence 1 lit. e GDPR: the processing is necessary for the performance of a task that is in the public interest or in the exercise of official authority that has been transferred to the person responsible
- Art. 6 (1) sentence 1 lit. f GDPR: processing is necessary to protect the legitimate interests of the person responsible or a third party, unless the interests or fundamental rights and freedoms of the data subject, which require the protection of personal data, prevail, especially when the data subject is a child
However, at the relevant points in this data protection declaration, we will always point out the legal basis on which the processing of your personal data takes place.
4. Disclosure of personal data
The transfer of personal data is also processing within the meaning of the previous paragraph 3. However, at this point we would like to inform you separately about the topic of transfer to third parties. The protection of your personal data is very important to us. For this reason, we are particularly careful when it comes to passing on your data to third parties.
It will therefore only be passed on to third parties if there is a legal basis for processing. For example, we pass on personal data to persons or companies who work for us as processors in accordance with Art. 28 GDPR. Processor is anyone who processes personal data on our behalf – i.e. in particular in an instruction and control relationship with us
In accordance with the requirements of the GDPR, we conclude a contract with each of our processors in order to oblige them to comply with data protection regulations and thus to provide your data with comprehensive protection.
5. Duration of Storage and Deletion
Your personal data will be deleted by us if they are no longer necessary for the purposes for which they were collected or otherwise processed, the processing is not necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation reasons of public interest or to assert, exercise or defend legal claims.
6. SSL Encryption
For security reasons and to protect the transmission of confidential content, such as the inquiries you send to us as the site operator, this site uses SSL encryption. You can recognize an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line.
If SSL encryption is activated, the data that you transmit to us cannot be read by third parties.
7. Collection and storage of personal data and their type and purpose of use
Content of the newsletter and registration data
We will only send you a newsletter if you order it from us and have given your consent in accordance with Article 6 Paragraph 1 Sentence 1 lit. The contents of the newsletter are specifically described when registering for the newsletter. To register for the newsletter, it is sufficient to provide your e-mail address. If you provide further voluntary information such as your name and/or your gender, this will only be used to personalize the newsletter addressed to you.
Double opt-in and logging
For security reasons, we use the so-called double opt-in procedure to register for our newsletter so that nobody can register with someone else’s e-mail address. Therefore, after registering for our newsletter, you will first receive an e-mail asking you to confirm your registration. This only becomes effective once the registration has been confirmed.
Furthermore, your registration for the newsletter will be logged. The logging includes the storage of the registration and confirmation time, your specified data and your IP address. If you make changes to your data, these changes will also be logged.
If you no longer wish to receive our newsletter, you can revoke your consent at any time for the future. To do this, you can click on the unsubscribe link at the end of each newsletter or send us an email to the following email address: email@example.comBy withdrawing your consent, the legality of the consent processing that took place up until the revocation is not affected
- Contact form / email contact
We provide you with a form on our website so that you can contact us at any time. In order to use the contact form, it is necessary to provide a name for a personal address and a valid e-mail address for contacting us, so that we know who sent the request and can also process it. If you send us requests via the contact form, Your details from the request form, including the contact data you provided there and your IP address in accordance with Article 6 Paragraph 1 Sentence 1 lit. b and f GDPR, will be used to carry out pre-contractual measures that are based on your request or for perception processed in our legitimate interest, namely to carry out our business activities. You are also welcome to send us an e-mail instead using the e-mail address given on our website. In this case, we store and process your e-mail address and the information you provide in the e-mail in accordance with Article 6 Paragraph 1 Sentence 1 lit. b and f GDPR in order to process your message The associated data will be deleted no later than 3 months after receipt, unless they are required for a further contractual relationship.
The data processed by cookies are required for the stated purposes to protect our legitimate interests and those of third parties in accordance with Article 6 Paragraph 1 Sentence 1 lit. f GDPR.
Most browsers automatically accept cookies based on the browser settings. However, you can configure your browser in such a way that either no cookies are stored on your device at all or at least a message is displayed before a new cookie is stored. If you completely deactivate the cookie function in your browser, you may not be able to use all the functions of our website.
Below we explain the different types of cookies that we use.
- Session cookies
In order to make the use of our offer more pleasant for you, we use so-called session cookies to recognize that you have already visited individual pages on our website. These session cookies are automatically deleted after you leave our site.
- Temporary cookies
- Cookies for marketing and optimization purposes
9. Video Embedding
Our website uses the YouTube plugin, which is operated by YouTube, LLC (901 Cherry Ave., San Bruno, CA 94066, USA).
If you activate the YouTube plugin during your visit, a connection to the YouTube servers will be established and the YouTube server will be informed which of our pages you have visited. This allows YouTube to associate your surfing behavior directly with your personal profile. You can prevent this by logging out of your member account before visiting our website.
Further information on the handling of user data can be found in YouTube’s data protection declaration at: https://policies.google.com/privacy?hl=en
The legal basis results from Art. 6 Para. 1 S. 1 lit. f GDPR. The underlying advertising purpose is to be regarded as a legitimate interest within the meaning of the GDPR.
10. Rights of the data subject
You have the following rights:
According to Art. 15 GDPR, you have the right to request information about your personal data processed by us. This right to information includes information about
- the processing purposes
- the categories of personal data
- the recipients or categories of recipients to whom your data has been or will be disclosed
- the planned storage period or at least the criteria for determining the storage period
the existence of a right to rectification, erasure, restriction of processing or objection
- the existence of a right of appeal to a supervisory authority
- the existence of a right of appeal to a supervisory authority
- the origin of your personal data, if they were not collected from us
- the existence of automated decision-making including profiling and, where appropriate, meaningful information about its details
According to Art. 16 GDPR, you have the right to immediate correction of incorrect or incomplete personal data stored by us.
According to Art. 17 GDPR, you have the right to demand the immediate deletion of your personal data from us, provided that further processing is not necessary for one of the following reasons:
- the personal data are still necessary for the purposes for which they were collected or otherwise processed
- to exercise the right to freedom of expression and information
- to fulfill a legal obligation that requires processing under European Union or Member State law to which the controller is subject, or to perform a task that is in the public interest or in the exercise of official authority that has been delegated to the controller
- for reasons of public interest in the field of public health in accordance with Art. 9 (2) lit. h and i and Art. 9 (3) GDPR
- for archiving purposes in the public interest, scientific or historical research purposes or for statistical purposes pursuant to Art. 89 (1) GDPR, insofar as the law mentioned under section a) is likely to make it impossible or seriously impair the achievement of the objectives of this processing
- to assert, exercise or defend legal claims
- Restriction of processing
According to Art. 18 GDPR, you can request the restriction of the processing of your personal data for one of the following reasons:
- You contest the accuracy of your personal data.
- The processing is unlawful and you oppose the erasure of the personal data.
- We no longer need the personal data for the purposes of processing, but you need them to assert, exercise or defend legal claims.
- You object to the processing in accordance with Art. 21 (1) GDPR.
If you have requested the correction or deletion of your personal data or a restriction of processing in accordance with Art. 16, Art. 17 Para. 1 and Art. 18 DSGVO, we will inform all recipients to whom your personal data has been disclosed, it unless this proves impossible or involves a disproportionate effort. You can ask us to inform you of these recipients.
You have the right to receive your personal data that you have provided to us in a structured, common and machine-readable format.
You also have the right to request the transmission of this data to a third party, provided that the processing was carried out using automated procedures and is based on consent in accordance with Article 6 Paragraph 1 Clause 1 Letter a or Article 9 Paragraph 2 Letter a or based on a contract in accordance with Article 6 Paragraph 1 Sentence 1 lit. b GDPR.
According to Art. 7 Para. 3 GDPR, you have the right to withdraw your consent to us at any time. The revocation of the consent does not affect the legality of the processing carried out on the basis of the consent up to the point of revocation. In the future, we may no longer continue the data processing that was based on your revoked consent.
According to Art. 77 GDPR, you have the right to complain to a supervisory authority if you believe that the processing of your personal data violates the GDPR.
If your personal data is processed on the basis of legitimate interests in accordance with Article 6 Paragraph 1 Clause 1 Letter f GDPR, you have the right to object to the processing of your personal data in accordance with Article 21 GDPR, provided there are reasons for this that arise from your particular situation or the objection is directed against direct advertising. In the latter case, you have a general right of objection, which we will implement without specifying the particular situation. If you would like to make use of your right of revocation or objection, an e-mail to firstname.lastname@example.org is sufficient
- Automated decision-making in individual cases, including profiling
You have the right not to be subject to a decision based solely on automated processing – including profiling – which has legal effect on you or significantly affects you in a similar way. This does not apply if the decision
i. is necessary for entering into, or the performance of, a contract between you and us
ii. is permitted on the basis of legislation of the European Union or the member states to which we are subject and this legislation contains appropriate measures to protect your rights and freedoms and your legitimate interests
iii. with your express consent
iv. However, these decisions must not be based on special categories of personal data according to Article 9 Paragraph 1 GDPR, unless Article 9 Paragraph 2 lit. a or g GDPR applies and appropriate measures have been taken to protect your rights and freedoms and your legitimate interests.
With regard to the cases referred to in i) and iii), we take appropriate measures to protect your rights and freedoms and legitimate interests, including at least the right to obtain human intervention on our part, to express your point of view and to contest the decision heard
Should we change the data protection declaration, this will be indicated on the website.