Privacy Notice
Controller
The controller within the meaning of the data protection laws, in particular the EU General Data Protection Regulation (GDPR), is: Gunter Demnig
Data Protection Officer
We have appointed the following Data Protection Officer:
External Data Protection Officer (TÜV SÜD)
Datenschutzbüro Karsten Rößner
Karl-Bröger-Straße 10
36304 Alsfeld, Germany
Tel.: +49 6631 80 19 68
Fax: +49 6631 80 19 69
Email: dsb@ra-roessner-merle.de
Your Rights as a Data Subject
You may exercise the following rights at any time under the contact details provided, in accordance with the GDPR:
- Right of access to the personal data we store about you and information on how it is processed (Art. 15 GDPR),
- Right to rectification of inaccurate personal data (Art. 16 GDPR),
- Right to erasure of your personal data stored by us (Art. 17 GDPR),
- Right to restriction of processing where we are not yet permitted to erase your data due to legal obligations (Art. 18 GDPR),
- Right to object to the processing of your data by us (Art. 21 GDPR), and
- Right to data portability where you have consented to the processing or have concluded a contract with us (Art. 20 GDPR).
Where you have given us consent, you may withdraw it at any time with effect for the future.
You may also lodge a complaint with a supervisory authority at any time, for example the authority responsible in the federal state of your residence or the authority responsible for us as the controller.
A list of supervisory authorities (for the non-public sector) including their addresses can be found at: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.
Processing Activities
Collection of General Information When Visiting Our Website
Nature and purpose of processing
When you access our website, i.e., if you do not register or otherwise transmit information, information of a general nature is collected automatically. This information (server log files) includes, for example, the type of web browser, the operating system used, the domain name of your Internet service provider, your IP address, and similar data.
It is processed in particular for the following purposes:
- ensuring the technically error-free presentation and optimisation of the website
We do not use your data to draw conclusions about your identity. However, we reserve the right to subsequently review the server log files if there are specific indications of unlawful use.
Legal basis and legitimate interest
Processing is carried out pursuant to Art. 6(1)(f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website and ensuring system security and abuse detection.
Recipients
Recipients of the data may include technical service providers acting as processors for the operation and maintenance of our website.
Storage period
Data is stored in server log files in a form that allows identification of data subjects for a maximum of 14 days, unless a security-relevant event occurs (e.g., a DDoS attack).
In such a case, server log files are stored until the security-related event has been remedied and fully clarified.
Provision required or necessary
The provision of the above personal data is neither legally nor contractually required. However, without the IP address, the service and functionality of our website cannot be ensured. In addition, individual services may not be available or may be restricted.
Objection
Please refer to the information on your right to object under Art. 21 GDPR below.
Contacting Us
Nature and purpose of processing
Our website includes a contact form that can be used for electronic communication. If a user makes use of this option, the data entered into the input mask is transmitted to us and stored.
At the time the message is sent, the following data is also stored:
- the URL from which the request was made
You may also contact us via the email addresses provided. In this case, the user’s personal data transmitted with the email will be stored. This includes the date and time the email was sent, the email address, IP addresses, and information about the servers involved in the email communication.
You may contact us by telephone using the phone numbers provided. In this case, we collect log data including your phone number and the duration of the call.
Regardless of the communication channel used, we collect the content of your enquiry. Your data is stored for the purpose of communicating with you on an individual basis.
Legal basis
Data is processed on the basis of a legitimate interest (Art. 6(1)(f) GDPR).
Our legitimate interest in processing your data is to enable straightforward contact.
If you contact us to request an offer, the data is processed to carry out pre-contractual measures (Art. 6(1)(b) GDPR).
Recipients
Recipients of the data may include technical service providers acting as processors for the operation and maintenance of our website.
Storage period
Data is deleted no later than 3 years after the contact request has been processed.
If a contractual relationship is established, statutory retention periods apply. These are generally 6 or 10 years due to proper accounting and tax-law requirements.
Provision required or necessary
Providing your personal data is voluntary. However, we can only process your enquiry if you provide the required information and the reason for the enquiry.
Objection
Please refer to the information on your right to object under Art. 21 GDPR below.
Information on Your Right to Object under Art. 21 GDPR
Right to object on a case-by-case basis
You have the right, on grounds relating to your particular situation, to object at any time to the processing of personal data concerning you which is carried out on the basis of Art. 6(1)(f) GDPR (processing based on a balancing of interests); this also applies to profiling based on this provision within the meaning of Art. 4(4) GDPR.
If you lodge an objection, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.
Recipient of an objection
Katja Demnig
Changes to This Privacy Notice
We reserve the right to amend this privacy notice so that it always complies with current legal requirements or to implement changes to our services in the privacy notice, e.g., when introducing new services. The new privacy notice will then apply to your subsequent visit.
Questions on Data Protection
If you have any questions about data protection, please email the controller named above.
Copyright Notice
This privacy notice was created with the assistance of activeMind AG – experts for externalden Experten für external data protection officers (Version #2024-10-25).