1. Collection and storage of personal data and the nature and purpose of their use
a) When visiting the website
When you call up this website, the browser used on your terminal device automatically sends information to the server of our website. This information is temporarily stored in a so-called log. The following information is recorded without your intervention and stored until it is automatically deleted:
- IP address of the requesting computer,
- Date and time of access,
- The name and URL of the retrieved file,
- Website from which the access is made,
- the browser used and, if applicable, the operating system of your computer and the name of your access provider
We process the above-mentioned data for the following purposes:
- To ensure a smooth connection of the website
- Ensuring a comfortable use of my website
- Evaluation of system security and stability and for other administrative purposes
b) Upon conclusion of the contract
The following data will be collected from you upon conclusion of the contract:
- Home address
- Invoice address if applicable
- E-mail address
You may provide the following data voluntarily:
The collection of data for the purpose of concluding a contract with us is carried out in accordance with Art. 6 Para. 1 S. 1 lit. b DSGVO on a legal basis. This data will be stored for as long as it is necessary for the fulfilment of contractual obligations, or is required by law or, in the case of (ii), your consent to the storage of the data is revoked. In the case of (ii), the collection of data in accordance with Art. 6 para. 1 sentence 1 lit. a DSGVO is based on your voluntarily given consent. 2. Transfer of data
Your personal data will not be transferred to third parties for purposes other than those listed below.
We only pass on your personal data to third parties if:
- you have given your express consent in accordance with Art. 6 Para. 1 S. 1 lit. a DSGVO
- the disclosure pursuant to Art. 6 para. 1 sentence 1 letter f DSGVO is necessary for the assertion, exercise or defence of legal claims and there is no reason to assume that you have an overriding interest worthy of protection in not disclosing your data
- in the event that there is a legal obligation to pass on the data in accordance with Art. 6 Para. 1 S. 1 lit. c DSGVO, as well as this is legally permissible and is required in accordance with Art. 6 Para. 1 S. 1 lit. b DSGVO for the processing of contractual relationships with you.
The tracking measures listed below and used by us are carried out on the basis of Art. 6 (1) p. 1 lit. f DSGVO. With the tracking measures used, we want to ensure a needs-based design and continuous optimization of our website. On the other hand, we use the analysis tools to statistically record the use of our website for the purpose of optimizing our offer and to preserve security through cyber attacks or similar. These interests are to be regarded as legitimate in the sense of the aforementioned provision.
The respective data processing purposes and data categories can be found in the corresponding tracking tools.
5. Social media plug-ins
- Google Analytics
For the purpose of designing and continuously optimising our pages to meet your needs, we use Google Analytics, a web analysis service of Google Inc. (https://www.google.de/ intl/en/ about/) (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter “Google”). In this context, pseudonymised user programmes are created and cookies (see section 4) are used. The information generated by the cookie about your use of this website such as:
– Browser type/version
– Operating system used
– Referrer URL (the previously visited page)
– Host name of the accessing computer (IP address)
– Time of the server request
are transmitted to a Google server in the USA and stored there. The information is used to evaluate the use of the website, to compile reports on the website activities and to provide further services associated with the use of the website and the Internet for the purposes of market research and the design of these Internet pages in line with requirements. This information may also be transferred to third parties if required by law or if third parties process this data on our behalf. Under no circumstances will your IP address be merged with other Google data. The IP addresses are made anonymous, so that an assignment is not possible (IP masking).
As an alternative to the browser add-on, especially in the case of browsers on mobile devices, you can also prevent Google Analytics from recording the data by clicking on this link. An opt-out cookie is set to prevent the future collection of your data when you visit this website. The opt-out cookie is only valid in this browser and only for our website and is stored on your device. If you delete the cookies in this browser, you will have to set the opt-out cookie again.
Further information on data protection in connection with Google Analytics can be found in the Google Analytics help (https://support.google.com/analytics/answer/ 6004245?hl=en).
- Google Adwords Conversion Tracking
In order to record the use of our website statistically and evaluate it for the purpose of optimising our website for you, we also use Google Conversion Tracking. Google Adwords sets a cookie (see item 4) on your computer if you have reached our website via a Google display. These cookies lose their validity after 30 days and are not used for personal identification. If the user visits certain pages of the Adwords client’s website and the cookie has not yet expired, Google and the client can recognise that the user has clicked on the ad and been redirected to that page.
Each Adwords client receives a different cookie. Cookies can therefore not be tracked through the websites of Adwords clients. The information collected through the conversion cookie is used to generate conversion statistics for Adwords clients who have opted for conversion tracking. The Adwords customers are informed of the total number of users who have clicked on their ad and been redirected to a page with a conversion tracking tag. However, they do not receive any information that can be used to identify users personally.
We have integrated Wordfence on this website. The provider is Defiant Inc, Defiant, Inc, 800 5th Ave Ste 4100, Seattle, WA 98104, USA (hereinafter Wordfence).
Wordfence is used to protect our website from unwanted access or malicious cyberattacks. For this purpose, our website establishes a permanent connection to Wordfence’s servers so that Wordfence can match its databases with the accesses made to our website and block them if necessary.
The use of Wordfence is based on Art. 6 para. 1 lit. f DSGVO. The website operator has a legitimate interest in protecting its website as effectively as possible against cyberattacks. Insofar as a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a DSGVO; the consent can be revoked at any time.
Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://www.wordfence.com/help/general-data-protection-regulation/.
On our website, we use social plug-ins from the social networks Facebook, Twitter and Instagram on the basis of Art. 6 Para. 1 S. 1 lit. f DSGVO in order to make ourselves better known. The underlying advertising purpose is to be regarded as a legitimate interest in the sense of the DSGVO. The responsibility for operation in conformity with data protection regulations is to be guaranteed by their respective providers. The integration of these plug-ins by us is carried out by means of the so-called two-click method in order to protect visitors to our website in the best possible way.
6. Rights of data subjects
On our website, social media plugins from Facebook are used to make their use more personal. For this purpose we use the “LIKE” or “SHARE” button. This is an offer from Facebook. If you call up a page of our website that contains such a plugin, your browser establishes a direct connection with the Facebook servers. The content of the plugin is transmitted by Facebook directly to your browser, which integrates it into the website. Through the integration of the plugin, Facebook receives the information that your browser has called up the corresponding page of our website, even if you do not have a Facebook account or are not currently logged in to Facebook. This information (including your IP address) is transmitted by your browser directly to a Facebook server in the USA and stored there. If you are logged in to Facebook, Facebook can assign your visit to our website directly to your Facebook account. If you interact with the plugins, for example by clicking the “LIKE” or “SHARE” button, the corresponding information is also transmitted directly to a Facebook server and stored there. The information is also published on Facebook and displayed to your Facebook friends.
Facebook may use this information for the purposes of advertising, market research and the design of Facebook pages in line with requirements. For this purpose, Facebook creates usage, interest and relationship logs, e.g. to evaluate your use of our website with regard to the advertisements displayed on Facebook, to inform other Facebook users about your activities on our website and to provide other services associated with the use of Facebook. If you do not want Facebook to assign the data collected via our website to your Facebook account, you must log out of Facebook before visiting our website. For the purpose and scope of data collection and the further processing and use of data by Facebook, as well as your rights in this regard and setting options for protecting your privacy, please refer to Facebook’s data protection information (https://www.facebook.com/about/privacy).
Our Site also uses so-called social plugins (“Plugins”) from Instagram, which is operated by Instagram LLC, 1601 Willow Road, Menlo Park, CA 94025, USA (“Instagram”).
The plugins are marked with an Instagram logo, for example in the form of an “Instagram Camera”. If you call up a page of our website that contains such a plug-in, your browser will establish a direct connection to the Instagram servers. The content of the plugin is transmitted by Instagram directly to your browser and integrated into the page. This integration informs Instagram that your browser has called up the relevant page of our website, even if you do not have an Instagram profile or are not currently logged in to Instagram. This information (including your IP address) is transmitted by your browser directly to an Instagram server in the USA and stored there. If you are logged in to Instagram, Instagram can directly attribute your visit to our website to your Instagram account. When you interact with the plug-ins, for example by clicking the “Instagram” button, this information is also transmitted directly to an Instagram server and stored there.
You have the right to request information about your personal data processed by us in accordance with article 15 of the DSGVO. In particular, you may request information as to the purposes of the processing, the category of personal data, the categories of recipients to whom your data have been or will be disclosed, the envisaged storage period, the existence of a right of rectification, cancellation, limitation of processing or opposition, the existence of a right of appeal, the origin of your data, if not collected by us, as well as the existence of automated decision making including profiling and, if applicable, relevant information on the details thereof; in accordance with Art. 16 DSGVO to demand the correction of incorrect or incomplete personal data stored by us without delay; according to Art. 17 DSGVO to demand the deletion of your personal data stored by us, unless the processing is necessary to exercise the right to freedom of expression and information, to fulfil a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims; according to Art. 18 DSGVO, to demand the restriction of the processing of your personal data if you dispute the correctness of the data, if the processing is unlawful but you refuse to delete it and we no longer require the data, but you require it for the assertion, exercise or defence of legal claims or if you have a right to demand the processing of your personal data in accordance with Art. 21 DSGVO; to receive your personal data, which you have provided us with, in a structured, common and machine-readable format in accordance with Art. 20 DSGVO or to request the transfer to another responsible party; to revoke your consent to us at any time in accordance with Art. 7 para. 3 DSGVO. As a result, we may no longer continue to process the data which was based on this consent in the future and
complain to a supervisory authority pursuant to Art. 77 DSGVO. As a rule, you can turn to the supervisory authority of your usual place of residence or workplace or to the supervisory authority of our head office. 7. Right of objection
If your personal data are processed on the basis of legitimate interests in accordance with Art. 6 Paragraph 1 S. 1 letter f DSGVO, you have the right, in accordance with Art. 21 DSGVO, to object to the processing of your personal data if there are reasons for doing so arising from your particular situation or if the objection is directed against direct advertising. In the latter case, you have a general right of objection, which will be implemented by us without indicating any special situation. If you wish to exercise your right of revocation or objection, simply send an e-mail to firstname.lastname@example.org. 8. Data security
We use the common SSL (Secure Socket Layer) procedure in connection with the highest level of encryption supported by your browser when you visit our website. As a rule, this is a 256 bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. You can tell whether an individual page of our website is being transmitted in encrypted form by the closed display of the key or lock symbol in the lower status bar of your browser.
We also use suitable technical and organisational security measures to protect your data against accidental or deliberate manipulation, partial or complete loss, destruction or unauthorised access by third parties. Our security measures are continuously improved in line with technological developments. 9. Topicality and change of this data protection explanation
This data protection declaration is based on the requirements of the basic data protection regulation applicable from May 2018 and the Federal Data Protection Act (new). It is updated on an ongoing basis.
Responsible in terms of §55 RStV and § 5 TMG for the content of this website: Elisa Di Fina