Data Protection

This data protection declaration informs you about the type, scope and purpose of the processing of personal data (hereinafter referred to as “data”) within our online offer and the websites, functions and content associated with it, as well as external online presences, such as our social media profiles. (hereinafter collectively referred to as “online offer”). With regard to the terms used, such as “processing” or “controller”, we refer to the definitions in Article 4 of the General Data Protection Regulation (GDPR).

Contact

If you have any questions regarding this Privacy Policy or the processing of your personal data, you may contact us at any time by email. The relevant email address is shown in the “Controller” section at the beginning of this English Privacy Policy. To reduce the risk of automated spam messages, the email address is not repeated in the text of this Privacy Policy.

General Information and Mandatory Information

Protecting your personal data is very important to us. We treat your personal data confidentially and in accordance with the applicable data protection legislation (GDPR) and this Privacy Policy.

SSL or TLS Encryption

For security reasons, this website uses SSL or TLS encryption. You can recognise an encrypted connection when the address line of your browser changes from ‘http://’ to ‘https://’ and a lock symbol appears in your browser.

Collection of Data on Our Website

a) Hosting and Server Log Files

Our website is hosted by netcup GmbH, Daimlerstraße 25, 76185 Karlsruhe, Germany. When you access our website, the provider automatically collects information and stores it in server log files:

  • IP address
  • Date and time of access
  • Name and URL of the retrieved file
  • Referrer URL (the page previously visited)
  • Browser and operating system used. Processing is based on Art. 6(1)(f) GDPR for the purpose of ensuring a smooth connection and IT security. The log files are deleted after no more than 8 weeks. We have concluded a data processing agreement with netcup GmbH pursuant to Art. 28 GDPR.

b) Contact Form

If you send us enquiries via the contact form, the information you provide in the form, including the contact details entered there (name, email address and, where applicable, telephone number), will be stored for the purpose of processing your enquiry and in case of follow-up questions. We will not disclose this data without your consent. The legal basis is Art. 6(1)(b) GDPR where your enquiry relates to the performance of a contract or is necessary in order to take steps prior to entering into a contract.

c) Contact by Email or Telephone

If you contact us by email or telephone, the data you provide (name, telephone number, email address and the content of the message) will be processed in order to handle your enquiry and deleted once the matter has been fully resolved, unless statutory retention obligations apply. Legal basis: Art. 6(1)(b) GDPR.

d) Strictly Necessary Cookies

This website uses only strictly necessary cookies that are required for the proper operation of the website (e.g. session cookies and security cookies). These cookies do not require consent. Legal basis: Art. 6(1)(f) GDPR.

Disclosure of Data to Third Parties

Your personal data will be disclosed to third parties only:

  • where required by law (Art. 6(1)(c) GDPR)
  • for the performance of a contract (Art. 6(1)(b) GDPR)
  • on the basis of your express consent (Art. 6(1)(a) GDPR)
  • under data processing agreements (Art. 28 GDPR) to netcup GmbH as our hosting provider

Retention Period

We store your personal data only for as long as necessary to achieve the purposes stated here or for as long as required by statutory retention periods (e.g. 6 to 10 years under Section 257 of the German Commercial Code (HGB) or Section 147 of the German Fiscal Code (AO) for tax-relevant documents). Server log files are deleted after no more than 8 weeks. Once the relevant purpose ceases to apply or these periods expire, the data concerned is routinely blocked or deleted.

Your Rights as a Data Subject

Under the applicable statutory provisions, you have the following rights at any time:

  • Access (Art. 15 GDPR):
    Information about the personal data concerning you that we store.
  • Rectification (Art. 16 GDPR):
    Correction of inaccurate or incomplete data.
  • Erasure (Art. 17 GDPR):
    Erasure of your data, provided that no statutory retention obligations prevent this.
  • Restriction of processing (Art. 18 GDPR):
    Restriction of the processing of your data.
  • Data portability (Art. 20 GDPR):
    Transfer of your data to you or a third party in a machine-readable format.
  • Right to object (Art. 21 GDPR):
    Objection to the processing of your data where it is based on a legitimate interest.
  • Withdrawal of consent (Art. 7(3) GDPR):
    Withdrawal with effect for the future, without affecting the lawfulness of processing carried out before withdrawal.

To exercise your rights, you may contact us by email. The email address is shown in the “Controller” section at the beginning of this English Privacy Policy.

Right to Lodge a Complaint with a Supervisory Authority

You have the right to lodge a complaint with the competent data protection supervisory authority:

State Commissioner for Data Protection and Freedom of Information
Unabhängiges Datenschutzzentrum Saarland
Fritz-Dobisch-Straße 12
66111 Saarbrücken

Telefon: 0681 / 94781-0
E-Mail: poststelle@datenschutz.saarland.de
Website: www.datenschutz.saarland.de

Data Security

We use technical and organisational security measures to protect your data against accidental or intentional manipulation, loss, destruction or unauthorised access. Our security measures are continuously improved in line with technological developments.