Private Policy
Thank you for visiting our website. In the following text, we would like to inform you about the handling of your data in accordance with Art. 13 of the General Data Protection Regulation (GDPR).
Persons in charge:
The controller for the data processing described below is named in the imprint.
Usage:
When visiting our websites, so-called usage data is temporarily evaluated as a protocol on our website for statistical purposes to improve the quality of our websites. This dataset consists of:
- the name and address of the requested content,
- the date and time of the query,
- the amount of data transferred,
- the access status (content transfer, content not found),
- the description of the web browser used and the operating systems,
- the referral link, which indicates from which page you came to ours.
The legal basis for the processing of usage data is Art. 6 (1) (f) GDPR. The processing is based on the legitimate interest of providing the contents of the website and ensuring a device- and browser-optimised display.
Storage of the IP address for security purposes:
In addition, we store the full IP address transmitted by your web browser strictly for a period of fourteen days, in the interest of being able to detect, file and eliminate attacks on our websites. At the end of this period, we delete or anonymize the IP address. The legal basis is Art. 6 para. 1 p. 1 lit. f GDPR.
Data security:
In order to protect your data as comprehensively as possible from unwanted access, we implement technical and organisational measures. These measures include encryption procedures on our websites. Your data is transferred from your computer to our server and vice versa via the internet using TLS encryption. You can usually recognize this by the fact that the lock symbol in the status bar of your browser is closed and the address line begins with https://.
Necessary cookies
We use cookies on our websites, which are required for the use of our websites.
Cookies are small text files that can be stored and read on your device. A distinction is made between session cookies, which are deleted as soon as you close your browser, and permanent cookies, which are stored beyond the individual session.
We do not use these necessary cookies for analysis, tracking, or advertising purposes.
In some cases, these cookies only contain information on certain settings and are not personally related. They may also be necessary to enable the use, security, and implementation of the site.
We use these cookies based on Art. 6 para. 1 p. 1 lit. f DSGVO.
You can set your browser so that it informs you about the placement of cookies. In this way, the use of cookies becomes transparent for you. You can also delete cookies at any time using the appropriate browser setting and prevent the setting of new cookies. Please note that our websites may then not be displayed and some functions may no longer be technically available.
Visitor measurement (Google Analytics):
We use web analytics tools to design our websites in accordance with the needs of our visitors. This creates usage profiles based on pseudonyms. For this purpose, permanent cookies are stored on your device and accessed by us. In addition, it is possible that we retrieve identifiers related to your browser or device (e.g., a so-called browser fingerprint or your full IP address). This allows us to recognise returning visitors and count them as such.
In addition, we use the following functions as part of visitor measurement:
- We supplement the pseudonymous data with additional data provided by third-party providers. This allows us to record demographic characteristics of our visitors, e.g. information on age, gender and place of residence.
- We use a tracking method that allows us to capture and subsequently evaluate the mouse cursor movement of our visitors.
- We create explorative click paths and browsing behaviour analysis based on contextual data, including usage history on other sites with also enabled cookies.
The legal basis for this data processing is your consent if you have given your consent via our consent banner.
Which third-party providers do we use in this context?
Below we list the third-party providers with whom we collaborate within the context of our visitor measurement. If data is processed outside the EU or the EEA (in particular in the USA) in this context, we provide information about the level of data protection in the following table.
Provider: Google
Maximum storage period: 2 Months
Adequate level of data protection: For transfers to the U.S., an adequate level of data protection is ensured due to the certification of the provider under the adequacy decision (EU-U.S. Data Privacy Framework).
Withdrawal of consent: If you wish to withdraw your consent, please click here and make the appropriate setting via our banner.
Storage period
Unless we have already informed you in detail about the storage period, we delete personal data when they are no longer required for the aforementioned processing purposes and no legitimate interests or other (legal) reasons for storage prevent deletion.
Data processors
We share your data with service providers that support us in the operation of our websites and the associated processes as part of data processing on behalf of the controller pursuant to Art. 28 GDPR. These are, for example, hosting service providers. Our service providers are strictly bounded by our instructions and are contractually obligated accordingly.
In the following, we will name the processors with whom we work, if we have not already done so in the above text of the data protection declaration. If data may be processed outside the EU or the EEA in this context, we inform you about this in the following table.
Processor: Contabo GmbH
Purpose: Webhosting and Support
Adequate level of data protection: Processing only within EU/EEA
Right to information (Art. 15 GDPR)
When processing your personal data, the GDPR grants you certain rights as a data subject:
Right of access (Art. 15 GDPR)
You have the right to obtain confirmation as to whether personal data of you is being processed; if this is the case, you have the right to obtain information about the processed personal data and to receive the information listed in detail in Art. 15 GDPR.
Right to rectification (Art. 16 GDPR)
You have the right to request the rectification of any inaccurate personal data relating to you and, where applicable, the completion of any incomplete data, without delay.
Right to erasure (Art. 17 GDPR)
You have the right to request the erasure of your personal data without delay, provided that one of the reasons listed in detail in Art. 17 GDPR applies.
Right to restriction of processing (Art. 18 GDPR)
You have the right to request the restriction of processing, for the duration of the assessment by the controller, if one of the requirements listed in Art. 18 GDPR is met, e.g. if you have objected to the processing.
Right to data portability (Art. 20 GDPR)
In certain cases, which are listed in detail in Art. 20 GDPR, you have the right to receive your personal data in a structured, commonly used and machine-readable format or to request the transfer of this data to a third party.
Right to withdraw consent (Art. 7 GDPR)
If the processing of data is based on your consent, you are entitled to withdraw your consent to the processing of your personal data at any time in accordance with Art. 7 (3) GDPR. Please note that the withdrawal of the consent only effective for the future. Processing that took place before the withdrawal is not affected.
Right to object (Art. 21 GDPR)
If data is collected on the basis of Art. 6 (1) (f) GDPR (data processing for the protection of legitimate interests) or on the basis of Art. 6 (1) (e) GDPR (data processing for the protection of public interests or in the exercise of official authority), you have the right to object to the processing at any time for reasons arising from your particular situation. We will then no longer process the personal data unless there are demonstrably compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)
Pursuant to Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority if you believe that the processing of your data violates data protection regulations. The right to lodge a complaint can be asserted in particular witha supervisory authority in the Member State of your habitual residence, your place of work or the place of the suspected infringement.
Asserting your rights
Unless otherwise described above, please contact the controller of the data processing named in the imprint to assert your rights as a data subject.