Data protection

1. General information

The security and confidentiality of your personal data is important to us. In the following
you will find information about the framework in which we process your data and the
measures taken to protect your privacy as a user of this site. All of the data collected here
is treated as strictly confidential in our area of responsibility in accordance with the
provisions of the European General Data Protection Regulation (GDPR) and in accordance
with the country‐specific data protection regulations that apply to us, such as the new
Federal Data Protection Act (BDSG new) or the Telemedia Act (TMG). The processing takes
place either in accordance with Art. 6 Paragraph 1 lit. a GDPR on the basis of your consent,
in accordance with Art. 6 Paragraph 1 lit b GDPR for fulfillment or initiation of a contract
with you, in accordance with Art. 6 1 lit. c GDPR to fulfill a legal obligation on our part or
on the basis of Art. 6 Para. 1 lit. f GDPR to protect our legitimate interests.

2. Contact person on the subject of data protection

For questions, suggestions or comments, please contact our data protection officer:

Marc von Mandel
External data protection
protection officer
Alte Koppel 9
24226 Heikendorf
Phone: +49 15782677803
Email: vonmandel.marc@t‐online.de

TÜV NORD CERT GmbH
Certificate: 44‐02‐DSB‐26.09.2019‐DE02‐1626376

3. Right to file a complaint with the competent supervisory authority

In the event of violations of data protection law, the person concerned has the right to
file a complaint with the competent supervisory authority. The competent supervisory
authority for data protection issues is the state data protection officer of the federal state
in which our company is based. A list of data protection officers and their contact details
can be found at the following link:
https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links‐node.html.

4. Collection and processing

Personal information
Personal data is all information that relates to an identified or identifiable natural person.
A natural person is seen as identifiable who can be identified directly or indirectly, in
particular by means of assignment to an identifier such as a name, an identification
number, location data, an online identifier or one or more special features, or the
expressions the physical, physiological, genetic, psychological, economic, cultural or social
identity of this natural person.

The processing of personal data can take place with or without the help of IT systems and
includes the following activities: collecting, recording, organizing, organizing, storing,
adapting or changing, reading out, querying, using, disclosing through transmission,
dissemination or any other form of provision, comparison or linking, the restriction,
deletion or destruction.

We process the personal information you provide to us via our website only for
correspondence with you and only for the purpose for which you have made the data
available to us.

Each time you access our website, we automatically and temporarily collect and save
information that your browser leaves behind in a so‐called log file while you are using our
website and each time a file is accessed. In detail, the following data is stored for each
access / retrieval:

  • IP address
  • Date and time of the retrieval
  • Called page / name of the called up file
  • Web browser and requesting domain
  • Amount of data transferred
  • Message as to whether the access was successful

The processing takes place in accordance with Art. 6 Paragraph 1 lit. GDPR based on our
legitimate interest in improving the stability and functionality of our website. The data
will not be passed on or used in any other way. However, we reserve the right to check
the server log files retrospectively if there are concrete indications of illegal use.

5. Use and Disclosure of Personal Information

Your personal data (e.g. surname, first name, telephone, address, e‐mail address) that
you provide to us via our website, e.g. via our contact form, will only be processed for
correspondence with you, for processing your request or for the purpose of to which you
have provided us with the data.

The data is not evaluated in any other way, except for statistical purposes and then
generally in anonymized form.

Insofar as we are service providers in order to carry out or fulfill tasks for us the
contractual relationships are regulated in writing in accordance with the provisions of the
European General Data Protection Regulation (EU GDPR) and the new Federal Data
Protection Act (BDSG new). This applies to the following categories of recipients:

• IT service providers to guarantee security and confidentiality

• Financial service providers to conduct business and comply with legal requirements

• Transport service provider

In addition, we can share anonymous data with partners in order to carry out statistical
analyzes. All of these parties are prohibited from using their personal information unless
it is used for our offer.

6. User registration and ordering in our online shop

We collect and process your personal data as part of an order process in our online shop
in order to provide you with the selection and ordering of the selected projects and
services, as well as their payment and delivery. This data includes, among other things,
information such as surname, first name, date of birth, delivery and billing address, e‐mail
address and information about the means of payment you have chosen. The data
collected here is always encrypted and transmitted to us and, if necessary for the process,
to service providers who are contractually bound by us, such as transport and / or
payment service providers.

On our website we offer you the opportunity to register by providing personal data. The
registration serves to better serve you as a user, to carry out pre‐contractual measures
and to fulfill and bill a contract. If the user account is terminated, your data will be deleted
with regard to the user account, unless commercial, tax or administrative retention
periods are to be observed.

We use session cookies in our online shop to enable the selection and ordering of the
selected projects and services, as well as their payment and delivery. This data includes,
among other things, information such as surname, first name, date of birth, delivery and
billing address, e‐mail address and information about the means of payment you have
chosen. The data collected here is always encrypted and transmitted to us and, if
necessary for the process, to service providers who are contractually bound by us, such
as transport and / or payment service providers.

On our website we offer you the opportunity to register by providing personal data. The
registration serves to better serve you as a user, to carry out pre‐contractual measures
and to fulfill and bill a contract. If the user account is terminated, your data will be deleted
with regard to the user account, unless commercial, tax or administrative retention
periods are to be observed.

7. Newsletter

Consent procedure:
In order to include you in our newsletter mailing list, we need a confirmation that you are
the owner of the given email address and that you agree to receive the newsletter.

Use of the data:
The data collected is only used for sending the newsletter and for the documentation of
your consent. No other processing or transfer to third parties takes place.

Right of withdrawal: You can revoke the newsletter and the consent to the storage of the
data at any time. We use session cookies in our online shop

Right of revocation: You can revoke the newsletter and your consent to the storage of the
data at any time.

8. Duration of storage of your data

Your personal data that has been communicated to us via our website will only be stored
until the purpose for which it was entrusted to us has been fulfilled and storage is
necessary. As far as commercial, tax or administrative retention periods are to be
observed, the storage period for certain data can be up to 6 or 10 years.

9. Your privacy rights

As a data subject whose data we process, you have extensive rights in accordance with
the EU General Data Protection Regulation. You have the right to information about your
personal data processed by us, in particular about the processing purposes, the categories
of personal data processed, the recipients or categories of recipients to whom their data
has been or will be disclosed, the planned storage period or the criteria for determining
the storage period. If you no longer agree to the processing or storage of your personal
data or if your data is incorrect, you have the right to correct, delete or restrict processing.
Upon your request or revocation, we will make the necessary corrections or arrange for
the deletion or restriction of the processing of your data or make the necessary
corrections insofar as this is possible under applicable law. Furthermore, if you have given
your consent, you have the right to object to processing at any time for the future, the
right to data portability and the right to file a complaint with a supervisory authority.

10. Data encryption

To protect the confidentiality of your data, we use the current status of the data transfer
when transmitting your data:
Encryption methods corresponding to the technology (e.g. SSL) via HTTPS.

11. Use of cookies

In order to make visiting our website user‐friendly and also to enable the use of certain
functions, we use so‐called cookies on various pages. Cookies are small text files. These
are downloaded from the websites you visit to your computer or mobile device. This
enables the website to recognize your device when you use the website and also when
you return at a later point in time. This helps you to make the use of the pages easier and
to make it more individual for you. When using cookies, we collect and process certain
user information from you in the respective individual scope of the text files, such as
browser and location data and IP address. Cookies are automatically deleted after a
specified period, which can differ depending on the cookie. If you do not disable cookies
or use the opt‐out option, we assume that you accept the use of cookies.

12. Use of script libraries ‐ Google Web Fonts

In order to display the content of our website correctly and graphically appealing across
browsers, we use script and font libraries such as e.g. Google Webfonts
(https://www.google.com/webfonts/)

Google web fonts are transferred to your browser's cache to avoid multiple loading. If your browser does not support Google Web Fonts or prevents access, the content will be displayed in a standard font.

When the script or font libraries are called up, a connection to the library operator is
automatically established. It is theoretically possible, but currently unclear whether and,
if so, for what purposes, that the operator of the corresponding libraries also collects data.

You can find the privacy policy of the library operator Google here: https://www.google.com/policies/privacy/

13. Use of Google Analytics

Our website uses Google Analytics, a web analysis service from Google Inc. (“Google”).
Google Analytics uses "cookies", text files that are stored on your computer and that
enable you to analyze your use of the website. The information generated by the cookie
about your use of the website is usually transferred to a Google server in the USA and
stored there. The IP address transmitted by your browser as part of Google Analytics will
not be merged with other Google data. We have also added the code “anonymizeIP” to
Google Analytics on this website, which guarantees the masking of your IP address so that
all data is collected anonymously. The full IP address will only be transmitted to a Google
server in the USA and shortened there in exceptional cases.

On behalf of the operator of our website, Google will use this information to evaluate
your use of the website, to compile reports on website activity and to provide the website
operator with other services relating to website activity and internet usage. You can
prevent the storage of cookies by setting your browser software accordingly; we would
like to point out, however, that in this case you may not be able to use all of these
functions of the website to its full extent.

You can prevent Google from collecting the data generated by the cookie and relating to
your use of the website (including your IP address) and from processing this data by
downloading and installing the browser plug‐in available under the following link :
http://tools.google.com/dlpage/gaoptout?hl=de. As an alternative to the browser addon,
especially for browsers on mobile devices, you can also prevent Google Analytics from
collecting data by clicking on this link. An opt‐out cookie will be set which prevents the
future collection of your data when you visit our website. The opt‐out cookie is only valid
in this browser and only for our website and is stored on your device. If you delete the
cookies in this browser, you will have to set the opt‐out cookie again.

We continue to use Google Analytics to evaluate data from double‐click cookies and
AdWords for statistical purposes. Should you not want this, you can deactivate this via the
ad preferences manager (http://www.google.com/settings/ads/onweb/?hl=de).

14. Plugins and Tools

YouTube

Our website uses plugins from YouTube, operated by Google. The operator of the website
is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. If you visit one of our pages
equipped with a YouTube plug‐in, a connection to the YouTube servers will be established.
The YouTube server is informed which of our pages you have visited. If you are logged
into your YouTube account, you enable YouTube to assign your surfing behavior directly
to your personal profile. You can prevent this by logging out of your YouTube account.

YouTube is used in the interest of an appealing presentation of our online offers. This
represents a legitimate interest within the meaning of Article 6 (1) (f) GDPR.

You can find handling of user data in YouTube's data protection declaration at:
https://www.google.de/intl/de/policies/privacy.

LinkedIn

This Privacy Policy applies to LinkedIn.com, LinkedIn‐branded apps, LinkedIn Learning, and
other LinkedIn‐related websites, apps, information and services (“Services”), including
off‐site services such as our ad services and the “With LinkedIn” plug‐ins apply ”and“ share
on LinkedIn ”, but excluding services that state that a different privacy policy applies to
them. Data guideline: https://www.linkedin.com/legal/privacy‐policy?trk=homepagebasic_ footer‐privacy‐policy.

15. Facebook, Instagram data policy

This policy describes the information that we use to support Facebook, Instagram,
Messenger and others from Facebook offered products and functions (Facebook products
or products). Additional tools and information can be found in the Facebook settings and
Instagram settings. Data guideline: https://de‐de.facebook.com/policy.php

16. Data protection information in accordance with the EU General Data Protection Regulation

In addition to this website‐specific data protection information, the data protection
information in accordance with the EU General Data Protection Regulation also applies.

17. Disclaimer of Liability

We occasionally refer to the websites of third parties. Although we carefully select these
third parties, we cannot accept any liability for the accuracy or completeness of the
content or the data security of third party websites. This data protection agreement is
also not valid for third‐party linked websites. All information contained on this website
has been checked with great care. However, we do not guarantee that the the content of
our own website is correct, complete and up‐to‐date at all times. Substantial changes to
this data protection declaration will be updated online here as soon as possible.

18. Legal validity of this data protection declaration

This data protection declaration is to be regarded as part of the offer on our website. If
parts or individual formulations of this text do not, no longer or not completely
correspond to the current legal situation, the remaining parts of the text remain
unaffected in their content and validity.