Data Privacy

The responsible body within the meaning of the applicable data protection laws is:

Toni Brentrup

Your rights as a data subject

You can exercise the following rights at any time by contacting our data protection officer:

• Information about your data stored with us and its processing (Art. 15 DSGVO),
• Correcting incorrect personal data (Art. 16 DSGVO),
• Deletion of your data stored with us (Art. 17 DSGVO),
• Restriction of data processing, provided that we are not yet allowed to delete your data due to legal obligations (Art. 18 DSGVO),
• opposition to the processing of your data by us (Art. 21 DSGVO) and
• Data transferability, if you have consented to data processing or have concluded a contract with us (Art. 20 DSGVO).

If you have given us your consent, you can revoke it at any time with effect for the future.

You may at any time submit a complaint to the supervisory authority responsible for you, e.g. the supervisory authority of your federal state in which you live or the authority responsible for us.

A list of the supervisory authorities (for the non-public sector) with their addresses can be found at: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.

Collection of general information while visiting our website

Type and purpose of processing:

If you access our website, i.e. if you do not register or otherwise deliberately provide information, information of a general nature is automatically collected.

This information (server log files) includes, for example, your type of web browser, the operating system used, the domain name of your Internet service provider, your IP address, and similar.

They are processed in particular for the following purposes:

• Ensuring a problem-free connection to the website,
• Ensuring a smooth use of our website,
• Evaluation of system security and stability as well
  for further administrative purposes.

We do not use your data to conclude about you personally. Information of this type may be statistically evaluated by us to optimize our website and the technology behind it.

Legal basis:

Processing takes place in accordance with Art. 6 Para. 1 lit. f GDPR based on our legitimate interest in improving the stability and functionality of our website.

Recipients:

The recipients of the data may be technical service providers who act as processors for the operation and maintenance of our website.

Storage period:

The data will be deleted as soon as it is no longer required for their collection. This is generally the case for the data used to provide the website when the respective session has ended.

Necessary or mandated provision:

The provision of your personal data is voluntary. Without the IP address, however, the service and functionality of our website are not guaranteed. In addition, individual services and services may not be available or restricted. For this reason, an objection is not possible.

Newsletter

Type and purpose of processing:

Your data will only be used to send you the subscribed newsletter by e-mail. Your name will be entered to address you personally in the newsletter and, if necessary, to identify you if you wish to exercise your rights as a data subject.

Your e-mail address is sufficient for receiving the newsletter. When you register to receive our newsletter, the data you provide will be used exclusively for this purpose. Subscribers may also be informed by e-mail of circumstances relevant to the service or registration (e.g. changes to the newsletter offering or technical circumstances).

We require a valid e-mail address for effective registration. In order to check that a registration has been carried out by the owner of an e-mail address, we use the “double opt-in” procedure. To this end, we log the order of the newsletter, the sending of a confirmation e-mail, and the receipt of the reply requested herewith. Further data will not be collected. The data will be used exclusively for the newsletter dispatch and will not be passed on to third parties.

Legal basis:

On the basis of your expressly given consent (Art. 6 Para. 1 lit. a DSGVO), we regularly send you our newsletter or comparable information by e-mail to your specified e-mail address.

You can revoke your consent to the storage of your personal data and its use for the newsletter dispatch at any time with effect for the future. In every newsletter, you will find a corresponding link. You can also unsubscribe directly from this website at any time or inform us of your cancellation via the contact option provided at the end of this data protection notice.

Recipients:

Recipients of the data may be contract processors.

Storage period:

The data will only be processed in this context as long as the corresponding consent is available. They will be subsequently deleted.

Necessary or mandated provision:

The provision of your personal data is voluntary, solely based on your consent. Unfortunately, we are unable to send you our newsletter without your consent.

Contact form

Type and purpose of processing:

The data entered by you will be stored for individual communication with you. For this reason, it is necessary to provide a valid e-mail address as well as your name. This is used to assign the query and then answer it. The specification of further data is optional.

Legal basis: 

The data entered in the contact form is processed on the basis of a legitimate interest (Art. 6 Para. 1 lit. f DSGVO).

By providing you with the contact form, we hope to make it simple for you to contact us. Your details will be to process your inquiry and for possible follow-up questions.

If you contact us to request an offer, the data entered in the contact form will be processed to carry out pre-contractual measures (Art. 6 Para. 1 lit. b DSGVO).

Recipients:

Recipients of the data may be contract processors.

Storage period: 

Data will be deleted (at the latest) 6 months after the request has been processed.

If it comes to a contractual relationship, we are subject to the legal retention periods according to HGB and will delete your data after the expiration of these periods.

Necessary or mandated provision:

The provision of your personal data is voluntary. However, we can only process your request if you provide us with your name, e-mail address, and the reason for the request.

Use of script libraries (Google web fonts)

Type and purpose of processing:

In order to display our content correctly and graphically appealing across browsers, we use “Google Web Fonts” from Google LLC (1600 Amphitheater Parkway, Mountain View, CA 94043, USA; hereinafter “Google”) on this website to display fonts.

The privacy policy of the library operator Google can be found at: https://www.google.com/policies/privacy/

Legal basis:

The legal basis for the integration of Google web fonts and the associated data transfer to Google is your consent (Art. 6 Para. 1 a GDPR).

Recipients:

Calling script libraries or font libraries automatically triggers a connection to the operator of the library. It is theoretically possible – but currently unclear whether and if so for what purposes – that the operator collects Google data in this case.

Storage period:

We do not collect personal data by integrating Google web fonts.

Further information on Google Web Fonts can be found at: https://developers.google.com/fonts/faq and in Google’s data protection declaration: https://www.google.com/policies/privacy/

Third country transfer:

Google processes your data in the USA and has submitted it to the EU_US Privacy Shield: https://www.privacyshield.gov/EU-US-Framework

Necessary or mandated provision:

The provision of your personal data is voluntary. However, a visually appealing presentation of the content by standard fonts may not be possible.

Withdrawal of consent:

The JavaScript programming language is regularly used to display the content. You can therefore object to data processing by deactivating the execution of JavaScript in your browser or installing a JavaScript blocker. Please note that this may result in functional restrictions on the website.

Use of Google Maps

Type and purpose of processing:

On this website, we use the offer of Google Maps. Google Maps is operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter “Google”). This allows us to display interactive maps directly on the website and enables you to use the map function conveniently.

You can find more information about data processing by Google in the Google privacy policy. There you can also change your personal privacy settings in the Privacy Center.

Detailed instructions on how to manage your own data in connection with Google products can be found here.

Legal basis:

The legal basis for the integration of Google Maps and the associated data transfer to Google is your consent (Art. 6 Para. 1 a GDPR).

Recipients:

By visiting the website, Google receives information that you have called up the corresponding sub-page of our website. This occurs regardless of whether Google provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data will be directly assigned to your account.

If you do not want the assignment in your profile at Google, you must log out of Google before activating the button. Google stores your data as usage profiles and uses them for advertising, market research, and/or demand-oriented design of its websites. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have a right to object to the creation of these user profiles, whereby you must contact Google to exercise this.

Storage period:

We do not collect personal data by integrating Google Maps.

Third country transfer:

Google processes your data in the USA and has submitted it to the EU_US Privacy Shield: https://www.privacyshield.gov/EU-US-Framework

Withdrawal of consent:

If you do not want the elicitation, processing, or use of your data from Google due to our website, you can deactivate the execution of JavaScript in your browser. In this case, however, you may not be able to use our website or may only be able to use it to a limited extent.

Necessary or mandated provision:

The provision of your personal data is voluntary, solely based on your consent. Please note that the prevented access may result in functional restrictions on the website.

SSL encryption

In order to protect the security of your data during transmission, we use state-of-the-art encryption procedures (e.g. SSL) via HTTPS.

Changes to our data protection regulations

We reserve the right to adapt this data protection declaration so that it always corresponds to current legal requirements or to implement changes to our services in the data protection declaration, e.g. when introducing new services. Your renewed visit will then be subject to the new data protection declaration.

Questions about the data protection officer

If you have any questions about data protection, please send us an e-mail or contact the person responsible for data protection in our organization directly.

The data protection declaration was created with the help of the activeMind AG, the experts of external data protection officers (version #2019-04-10).