Table of Contents
- Introduction and Overview
- Scope
- Legal Bases
- Contact Details of the Controller
- Storage Duration
- Rights under the General Data Protection Regulation
- Data Security
- Communication
- Cookies
- Registration
- Web Hosting Introduction
- Website Builder Systems Introduction
- Final Remarks
Introduction and Overview
We have written this Privacy Policy (version dated 15 February 2024) to explain to you, in accordance with the requirements of the General Data Protection Regulation (EU) 2016/679 and applicable national laws, which personal data we as the controller – and the processors commissioned by us (e.g. providers) – process, will process in the future, and what lawful options you have. The terms used are to be understood as gender-neutral.
In short: We provide you with comprehensive information about data that we process about you.
Privacy policies usually sound very technical and use legal terminology. However, this Privacy Policy is intended to describe the most important things as simply and transparently as possible. Where it helps transparency, technical terms are explained in a user-friendly way and links to further information are provided. In this way, we inform you in clear and simple language that we process personal data only when there is a corresponding legal basis for doing so in the course of our business activities.
Scope
This Privacy Policy applies to all personal data processed by us within the company and to all personal data processed by companies commissioned by us as processors. By personal data we mean information within the meaning of Article 4(1) GDPR, such as a person's name, email address and postal address.
- all online presences, websites and online shops we operate
- social media presences and email communication
- mobile apps for smartphones and other devices
Legal Bases
In the following Privacy Policy, we provide you with transparent information about the legal principles and regulations, i.e. the legal bases of the General Data Protection Regulation, which allow us to process personal data.
We process your data only if at least one of the following conditions applies:
- Consent: Article 6(1)(a) GDPR. You have given us your consent to process data for a specific purpose.
- Contract: Article 6(1)(b) GDPR. To fulfil a contract or pre-contractual obligations with you, we process your data.
- Legal obligation: Article 6(1)(c) GDPR. If we are subject to a legal obligation, we process your data.
- Legitimate interests: Article 6(1)(f) GDPR. In the case of legitimate interests that do not restrict your fundamental rights, we reserve the right to process personal data.
Contact Details of the Controller
If you have any questions about data protection or the processing of personal data, you will find the contact details of the responsible person or entity below:
Storage Duration
We generally store personal data only for as long as it is absolutely necessary to provide our services and products. This means that we delete personal data as soon as the reason for data processing no longer exists.
If you request the deletion of your data or withdraw your consent to data processing, the data will be deleted as quickly as possible, provided there is no legal obligation to retain it.
We will inform you further below about the specific storage periods for individual types of data processing, where applicable.
Rights under the General Data Protection Regulation
In accordance with Articles 13 and 14 of the GDPR, we inform you about the following rights you are entitled to, so that data is processed fairly and transparently:
- Under Article 15 GDPR, you have the right to obtain information about whether we process data concerning you.
- Under Article 16 GDPR, you have the right to rectification of your data.
- Under Article 17 GDPR, you have the right to erasure, also known as the right to be forgotten.
- Under Article 18 GDPR, you have the right to restriction of processing.
- Under Article 20 GDPR, you have the right to data portability.
- Under Article 21 GDPR, you have the right to object to processing.
- Under Article 22 GDPR, you may in certain circumstances have the right not to be subject to a decision based solely on automated processing, including profiling.
- Under Article 77 GDPR, you have the right to lodge a complaint with a supervisory authority.
In short: You have rights — do not hesitate to contact the responsible person listed above if you wish to exercise them.
Data Security
To protect personal data, we have implemented both technical and organizational measures. Where possible, we encrypt or pseudonymize personal data, making it as difficult as possible for third parties to draw conclusions about personal information from our data.
Article 25 of the GDPR refers to this as "data protection by design and by default" and means that security must always be considered when designing software, such as forms, as well as hardware, such as access to the server room. We will also explain specific measures below where necessary.
Communication
| Communication — Summary Data subjects: Anyone who communicates with us by telephone, email, or online form Processed data: e.g. phone number, name, email address, form data entered Purpose: Handling communication with customers, business partners, etc. Storage duration: Duration of the business case and statutory retention requirements Legal bases: Article 6(1)(a) GDPR, Article 6(1)(b) GDPR, Article 6(1)(f) GDPR |
If you contact us and communicate by telephone, email, or online form, personal data may be processed.
The data is processed for the handling and processing of your request and the associated business transaction. The data is stored for as long as necessary or as required by law.
Cookies
| Cookies — Summary Data subjects: Visitors to the website Purpose: Depends on the respective cookie Processed data: Depends on the respective cookie used Storage duration: Depends on the respective cookie and may range from hours to years Legal bases: Article 6(1)(a) GDPR, Article 6(1)(f) GDPR |
Our website uses HTTP cookies to store user-specific data. Below we explain what cookies are and why they are used, so that you can better understand this Privacy Policy.
Whenever you browse the internet, you use a browser. Common browsers include Chrome, Safari, Firefox, Internet Explorer, and Microsoft Edge. Most websites store small text files in your browser. These files are called cookies.
Cookies store certain user data such as language settings or personal site preferences. When you visit our site again, your browser transmits the user-related information back to our site.
Registration
| Registration — Summary Data subjects: All persons who register, create an account, log in, and use the account Processed data: Email address, name, password, and any other data collected during registration, login, and account use Purpose: Provision of our services; communication with customers in connection with the services Storage duration: As long as the associated account exists and is used, and generally for 3 years thereafter Legal bases: Article 6(1)(b) GDPR, Article 6(1)(a) GDPR, Article 6(1)(f) GDPR |
If you register with us, personal data may be processed if you enter data with personal reference or if data such as the IP address is recorded during processing.
Please only enter data that we need for registration and for which you have permission if you are registering on behalf of a third party. Where possible, use a secure password that you do not use anywhere else and an email address that you check regularly.
Below we inform you about the exact type of data processing, so that you can feel comfortable with us.
Web Hosting Introduction
| Web Hosting — Summary Data subjects: Visitors to the website Purpose: Professional hosting of the website and securing its operation Processed data: IP address, time of website visit, browser used, and other data Storage duration: Depending on the provider, usually 2 weeks Legal bases: Article 6(1)(f) GDPR |
When you visit websites today, certain information — including personal data — is automatically created and stored, and this also applies to our website.
By website, we mean the totality of all web pages on a domain, from the homepage to the very last subpage. By domain, we mean for example example.com or sample-site.com.
To display a website, your browser must connect to another computer where the website code is stored, the web server. Operating a web server is a complex and demanding task, which is why it is usually handled by professional providers, known as hosting providers.
Website Builder Systems Introduction
Further text about website builder systems goes here.
Final Remarks
Here follows the concluding text.
Whenever the browser on your computer, tablet or smartphone connects to and transfers data to and from the web server, personal data may be processed. On the one hand, your device stores data; on the other hand, the web server must process data so that the website can be delivered correctly.
Depending on the hosting provider, this may include IP addresses, browser type and version, operating system used, referrer URL, date and time of the server request, and similar technical information. We use this data only to ensure secure, reliable, and efficient website operation.
Final Remarks
Thank you for reading our Privacy Policy. If you have any questions about the processing of personal data, please contact us using the contact details provided above.