Privacy policy

Who is responsible for processing your data

The controller responsible for processing personal data is:

Processing your data in our core business activities

We process personal data you provide in the context of our contractual and pre-contractual relationship. The scope, nature, purpose and necessity of processing depend on the underlying contractual relationship. We store and process your data in the computer systems we use. The data processed include all data you provide to use contractual or pre-contractual services and which are needed to handle your enquiry or perform our contract with you.

These may include, in particular:

• Name and address
• Email address and telephone number
• Contract data
• Payment data.

Processing is limited to data necessary and appropriate to respond to enquiries and/or perform a contract between you and us. Personal data are disclosed to third parties only where necessary to provide the service or, as part of our business organisation, to handle financial accounting and comply with legal obligations. In this case, only data necessary and appropriate for those purposes are transferred to external service providers. We process data in accordance with your instructions or applicable statutory provisions.

Legal basis: processing your personal data and transferring them to third parties are based on Article 6(1)(b) GDPR and serve to perform the contract between you and us. Otherwise, we disclose data to third parties only where there is a legal obligation under Article 6(1)(c) GDPR or a legitimate interest under Article 6(1)(f) GDPR, for example where necessary to pursue our claims.

Erasure: your data are deleted as soon as they are no longer needed to fulfil contractual or statutory duties of care or to address warranty or similar obligations. Statutory retention obligations remain unaffected.

Data processing when you visit our website for information only

If you use our website solely for information, we collect only the personal data transmitted by your browser to our server. These are:

• IP address
• Date and time of access to our website
• Time zone difference from Greenwich Mean Time (GMT)
• Access status (HTTP status)
• Volume of data transferred
• Internet service provider of the accessing system
• Browser type and version
• Operating system used
• Website from which you may have reached our website
• Pages or subpages visited on our website.

These data are stored as log files on our servers. This is necessary to display the website on your device and to ensure stability and security.

Legal basis: processing is based on our legitimate interest in providing our website efficiently and securely, under Article 6(1)(f) GDPR.

Duration: the above data used to provide our website are deleted when the respective session ends.

Cookies

Our website uses cookies. Cookies are small text files consisting of numbers and letters stored on your device. Cookies neither transmit viruses nor run programs. They primarily exchange information between your device and our website to make our website more user-friendly and effective. A distinction is made between temporary (transient) and persistent cookies. Transient cookies include session cookies. These store a session ID that allows different requests from your browser to be assigned to the same session, enabling our website to recognise your computer when you return. Session cookies are deleted when you log out or close your browser. Persistent cookies are deleted automatically after a specified period, which may vary by cookie. You can delete them at any time in your browser’s security settings.

Cookies make our website more user-friendly. Some elements require the requesting browser to be identified even after moving to another page. These cookies may store language settings or login information, in particular.

These purposes constitute our legitimate interest in processing the data. The legal basis is Article 6(1), first sentence, point (f) GDPR.

As cookies are stored on your computer, you have full control over their use. Your browser’s security settings allow you to decide whether cookies are stored at all. For example, you can reject cookies, allow them only after being asked, or have them deleted whenever you close the browser. If cookies are disabled for our website, some functions may no longer be fully available.

Retention period / erasure

We erase or restrict your personal data as soon as the purpose of storage has been achieved or no longer applies. We retain them longer only where required by national or European provisions. In that case, data are restricted or erased when the statutory retention period expires, unless we need them to perform a contract between us or to establish, exercise or defend legal claims.

Information about contacting us

If you contact us by email, social media, telephone, fax, post, our contact form or other means and provide personal data such as your name, telephone number or email address, or other information about yourself or your enquiry, we store and process these data internally to handle your enquiry.

Legal basis: if you submit your enquiry using our contact form, the legal basis is Article 6(1)(a) GDPR. If your enquiry relates to a contractual or pre-contractual relationship with us, the legal basis is Article 6(1)(b) GDPR. If neither applies, our legitimate interest is to respond properly and in your interests, under Article 6(1)(f) GDPR.

Erasure: personal data we collect are deleted when no longer required. We review necessity every two years. You can also withdraw your consent to data processing at any time.

Your rights under the GDPR

Under the GDPR, you have the following rights, which you may exercise at any time by contacting the controller named in section 1 of this privacy policy:

Right of access:

Under Article 15 GDPR, you may request confirmation of whether we process personal data about you and which data we process. You may also obtain, free of charge, information about the purposes of processing, categories of personal data, categories of recipients to whom your data have been or will be disclosed, planned retention period, rights to rectification, erasure, restriction or objection, right to lodge a complaint, and the source of your data where they were not collected from you. You also have the right to learn whether your personal data have been transferred to a third country or an international organisation and, if so, to receive information about the appropriate safeguards relating to the transfer.

Right to rectification:

Under Article 16 GDPR, you may request the correction of inaccurate personal data or completion of incomplete personal data concerning you that we store.

Right to erasure:

Under Article 17 GDPR, you have the right to request deletion of your personal data stored by us, unless we need to process them for the following purposes:

• To comply with a legal obligation,
• To establish, exercise or defend legal claims,
• To exercise the right to freedom of expression and information, or
• For reasons of public interest in the cases specified in Article 17(3)(c) and (d) GDPR.

Right to restriction:

Under Article 18 GDPR, you may request restriction of the processing of your personal data where:

• You contest the accuracy of the data, for a period enabling us to verify their accuracy,
• Processing is unlawful, but you oppose erasure and request restriction of use instead,
• We no longer need the personal data for processing purposes, but you require them to establish, exercise or defend legal claims,
• You have objected to processing under Article 21 GDPR, pending verification of whether our legitimate grounds for continued processing override your rights.

Right to be informed:

If you exercise your right to rectification, erasure or restriction of processing, we must notify all recipients to whom your personal data were disclosed of the requested rectification, erasure or restriction, unless this proves impossible or involves disproportionate effort. You have the right to be informed about these recipients.

Right to data portability:

Under Article 20 GDPR, you may request to receive the personal data concerning you that you provided to us in a structured, commonly used and machine-readable format, or request their transfer to another controller.

Right to lodge a complaint:

Under Article 77 GDPR, you have the right to lodge a complaint with a supervisory authority. You may contact the authority responsible for your usual residence, your workplace or our registered office.

Right to withdraw consent

Under Article 7(3) GDPR, you may withdraw your consent to the processing of your data at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

Right to object

You may object at any time, on grounds relating to your particular situation, to the processing of your personal data based on a balancing of interests under Article 6(1)(f) GDPR. This applies in particular where processing is not necessary to perform a contract. If you exercise this right, please explain your reasons. We will then stop processing your personal data unless we can demonstrate compelling legitimate grounds that override your interests and rights. Independently of the above, you may object at any time to the processing of your personal data for advertising and data analysis. Please send your objection to the controller’s contact address given above.

Security measures

We also take technical and organisational security measures reflecting the state of the art to comply with data protection laws and protect your data against accidental or intentional manipulation, partial or complete loss, destruction and unauthorised third-party access.

Currency and changes to this privacy policy

This privacy policy states that it is valid as of August 2018. Changes to statutory or regulatory requirements may make amendments necessary. This privacy policy was prepared with the assistance of SOS Recht . You can find the privacy policy generator here. SOS Recht is a service provided by MMR Müller Müller Rößner Rechtsanwälte a partnership based in Berlin.