Privacy Statement

The controller as defined in the General Data Protection Regulation and other national data protection laws of Member States as well as any other provisions relating to data privacy is:

Generally, we only process the personal data of our users to the extent that doing so is necessary in order to provide a functional website and to offer our content and services. As a rule, the personal data of our users are only processed after consent has been obtained from the user. An exception applies in such cases in which obtaining consent in advance is impossible for practical reasons and the processing of data is permitted by law.

Art. 6 (1) (a) of the EU General Data Protection Regulation (GDPR) constitutes the legal basis with respect to obtaining consent of the data subject for processing personal data. With respect to processing personal data necessary for the performance of a contract to which the data subject is party, Art. 6 (1) (b) GDPR constitutes the legal basis. The same holds true for any processing required to implement pre-contractual measures. Where processing of personal data is necessary for compliance with a legal obligation to which our company is subject, Art. 6 (1) (c) GDPR constitutes the legal basis. To the extent that processing is necessary in order to protect the vital interests of the data subject or of another natural person, Art. 6 (1) (d) constitutes the legal basis.
Where processing is necessary for the purposes of the legitimate interests pursued by our company or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject, Art. 6 (1) (f) GDPR serves as the legal basis for said processing.

The personal data of the data subject are erased or blocked as soon as the purpose of data storage no longer applies. Moreover, data may also be stored if provided for under European or national legislation in directives, provisions or other regulations under Union law that apply to the data subject. Data are also blocked or erased in such cases where a storage deadline stipulated in the aforementioned standards has expired, unless such data must continue to be stored to ensure the conclusion of a contract or for the purpose of contract performance.

Each time our website is pulled up, our system automatically collects data and information from the system of the computer pulling up the site.
The following data are collected in the process:

The log files contain IP addresses or other data that allow an allocation to a user. This may be the case, for example, if the link to the website from which the user accesses our website or the link to the website that the user switches to contains personal data.
The data are also stored in the log files of our system. This data are not stored together with any other of the user’s personal data.

The legal basis for the temporary storage of data and log files is Art. 6 (1) (f) GDPR.

It is necessary for the system to temporarily store the IP address in order to allow the website to be delivered to the user’s computer. To accomplish this, the IP address of the user must remain stored for the duration of the session.
The information is stored in log files to ensure that the website functions properly. In addition, such data also supports the optimisation of the website and ensures the security of our IT systems. No analysis of such data is performed for marketing purposes in connection with this.
Such purposes also constitute our legitimate interests in data processing in accordance with Art. 6 (1) (f) GDPR.

Data are erased as soon as the necessity thereof to accomplish the purpose for which they were collected has become obsolete. In such cases in which data are collected for the provision of the website, this is the case once the relevant session has ended.
This is the case after no later than seven days if the data were stored in log files. It is possible for the storage duration to exceed this time. In this case, the IP addresses of the users are erased or encrypted, thus making it impossible to allocate them to the client that pulled up our website.

The provision of data critically requires the collection of data and the storage of data in log files for the operation of the Internet pages. Consequently, the user cannot be given a right to object.

A contact form is provided on our website that can be used to contact us electronically. If a user takes advantage of this option, the data entered in the input mask are transferred to us and stored. This data include:

At the time the message is sent, the following data are also stored:

For data processing purposes, your consent is obtained during the sending process with reference to this Privacy Statement.

Alternately, the user may contact us using the e-mail address provided. In this case, the user’s personal data transferred via e-mail will be stored.

No data are shared with third parties in connection with this. The data are used exclusively to process the conversation.

Legal basis for processing data is Art. 6 (1) (a) GDPR, provided the consent of the user is available.

The legal basis for processing data that are transferred in a sent e-mail is Art. 6 (1) (f) GDPR. If the purpose of the e-mail contact is to conclude a contract, the additional legal basis for data processing is Art. 6 (1) (b) GDPR.

The sole purpose of processing the personal data from the input mask is to be able to process the contact request. In the event of an e-mail requesting contact, the necessary legitimate interest in processing the data can also be found here.
The other personal data processed during the sending process serves to prevent the contact form from being misused and to ensure the security of our IT systems.

Data are erased as soon as the necessity thereof to accomplish the purpose for which they were collected has become obsolete. For the personal data from the input mask of the contact form and those sent via e-mail, this is the case once the relevant conversation with the user has ended. The conversation is deemed ended once it can be assumed from the circumstances that the matter in question has been conclusively clarified. The personal data additionally collected during the sending process are erased after a deadline of seven days.

The user has the option to revoke his or her consent to the processing of personal data at any time. If the user contacts us via e-mail, he or she may object to the storage of his/her personal data at any time. In a case such as this, the conversation can no longer be continued. All personal data that were stored at the time contact was made are erased in this case.

The website provider uses the services of etracker GmbH from Hamburg, Germany (www.etracker.com) to analyse use data. Cookies are used here to allow a statistical analysis of the use of this website by its visitors and to display user-specific content or advertising. Cookies are small text files that are stored by the Internet browser on the user’s end device. etracker cookies do not contain any information that would allow a user to be identified. The data generated using etracker are processed and stored by etracker on behalf of the provider of this website in Germany exclusively and are thus subject to strict German and European data privacy laws and standards. etracker was independently tested and certified in this regard and was awarded the data privacy quality seal ePrivacyseal.

Art. 6 (1) (f) EU General Data Protection Regulation (EU GDPR) (legitimate interest) constitutes the legal basis for the data processing. Our legitimate interest consists in optimising our online presence and our website. Because we deeply care about the privacy of our visitors, etracker anonymises the IP address as early as possible and the logon or device ID is converted to a unique key in etracker, yet it cannot be allocated to a specific person. etracker is not used for any other purposes such as combining data with other data or sharing data with third parties.
You may object to the aforementioned data processing at any time, provided it relates to personal data. You objection will not no adverse consequences for you.

If your personal data is processed, you are deemed the data subject as defined under GDPR and you have the following rights vis-a-vis the controller:

You have the right to obtain from the controller confirmation as to whether or not personal data concerning you are being processed by us. Where we are processing data in this manner, you may request the following information from the controller:

• 0 the purposes for which the personal data are being processed;
• the categories of personal data concerned;
• the recipients or categories of recipients to whom the personal data have been or will be disclosed;
• the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period;
• the existence of the right to request from the controller rectification or erasure of personal data or restriction of processing of personal data that concerns you or to object to such processing;
• the right to lodge a complaint with a supervisory authority;
• where the personal data are not collected from the data subject, any available information as to their source;

You have the right to obtain information as to whether the personal data concerning you is being transferred to a third country or to an international organisation. In connection with this, you have the right to be informed of the appropriate safeguards pursuant to Article 46 GDPR relating to the transfer.

You have a right to obtain from the controller rectification of your personal data or have incomplete personal data completed, if the processed personal data that concerns you are incorrect or incomplete. The controller must rectify said data without undue delay.

Right to restriction of processing

You have the right to obtain restriction of processing of data that concerns you where one of the following applies:

• if you contest the accuracy of the personal data for a period enabling the controller to verify the accuracy of the personal data concerning you;
• the processing is unlawful and you oppose the erasure of the personal data and request the restriction of the use of personal data instead;
• the controller no longer needs the personal data for the purposes of processing, but you require said data for the establishment, exercise or defence of legal claims,
  or
• you have objected to processing pursuant to Article 21(1) GDPR pending the verification whether the legitimate grounds of the controller override your own.

Where processing of the personal data that concerns you as the data subject has been restricted, such personal data shall, with the exception of storage, only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.
Where restriction of processing has been obtained according to the aforementioned requirements, you shall be informed by the controller before the restriction of processing is lifted.

Obligation to erase

You may obtain from the controller the erasure of personal data concerning you without undue delay and the controller shall have the obligation to erase personal data without undue delay where one of the following grounds applies:

• The personal data that concerns you are no longer necessary in relation to the purposes for which they were collected or otherwise processed.
• You withdraw you consent on which the processing is based according to point (a) of Article 6(1), or point (a) of Article 9(2), and where there is no other legal ground for the processing.
• You object to the processing pursuant to Article 21(1) GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Article 21(2) GDPR.
• The personal data that concerns you have been unlawfully processed.
• The personal data relating to you have to be erased for compliance with a legal obligation under Union or Member State law to which the controller is subject.
• The personal data that concerns you have been collected in relation to the offer of information society services referred to in Article 8(1) GDPR.

Information to third parties

Exceptions

• for exercising the right of freedom of expression and information;
• for compliance with a legal obligation which requires processing by Union or Member State law to which the controller is subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
• for reasons of public interest in the area of public health in accordance with points (h) and (i) of Article 9(2) as well as Article 9(3) GDPR;
• for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Article 89(1) GDPR provided that the right referred to in section a) is likely to render impossible or seriously impair the achievement of the objectives of that processing;
  or
• for the establishment, exercise or defence of legal claims.

Where you have asserted your right from controller to rectification or erasure of personal data or restriction of processing, the controller shall communicate to each recipient to whom the personal data concerning you have been disclosed to have such data rectified or erased or to restrict the processing thereof, unless this proves impossible or involves disproportionate effort.
In relationship to the controller, you have the right to be informed about those recipients.

You have right to receive the personal data concerning you pursuant to Art. 20 GDPR in a structured, commonly used and machine-readable format.

You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (e) or (f) of Article 6(1) GDPR, including profiling based on those provisions.
The controller shall no longer process the personal data unless the controller demonstrates compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims.
If you object to processing for direct marketing purposes, the personal data relating to you shall no longer be processed for such purposes In the context of the use of information society services, and notwithstanding Directive 2002/58/EC, you may exercise your right to object by automated means using technical specifications.

You have the right to withdraw your declaration of consent under data privacy law at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of his or her habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to him or her infringes the GDPR. The supervisory authority with which the complaint has been lodged shall inform the complainant on the progress and the outcome of the complaint including the possibility of a judicial remedy pursuant to Article 78 GDPR.