Data protection declaration
We run our websites according to the following principles:
We undertake to comply with the legal provisions on data protection and strive to always observe the principles of data avoidance and data minimization.
1. Name and address of the person responsible and the data protection officer
- The person responsible within the meaning of the General Data Protection Regulation and other national data protection laws of the member states of the European Union as well as other data protection regulations is::
Represented by Managing Directors Markus und Christopher Kassulke
I_Park Klingholz 13
Tel.: 09334/ 9757 – 0
Fax: 09334/ 9757 – 19
- The data protection officer of the person responsible is:
SiDIT GmbH, Langgasse 20, 97261 Güntersleben, firstname.lastname@example.org
2. Explanation of terms
We have designed our data protection declaration according to the principles of clarity and transparency. However, should there be any ambiguity regarding the use of different terms, the corresponding definitions can be viewed here [https://dsgvo-gesetz.de/art-4-dsgvo/].
3. Legal basis for processing personal data
We only process your personal data such as your surname and first name, your e-mail address and IP address, etc. if there is a legal basis for this. According to the General Data Protection Regulation, the following regulations in particular come into consideration here:
- Article 6 (1) sentence 1 lit. a GDPR: The data subject has given their consent to the processing of their personal data for one or more specific purposes.
- Article 6 (1) sentence 1 lit. b GDPR: Processing is necessary for the performance of a contract to which the data subject is party or for the implementation of pre-contractual measures that are carried out at the request of the data subject.
- Article 6 paragraph 1 sentence 1 lit. c GDPR: The processing is necessary to fulfill a legal obligation to which the person responsible is subject
- Article 6 paragraph 1 sentence 1 lit. d GDPR: Processing is necessary to protect the vital interests of the data subject or another natural person
- Art. 6 (1) sentence 1 lit. e GDPR: the processing is necessary for the performance of a task that is in the public interest or in the exercise of official authority that has been transferred to the person responsible
- Art. 6 (1) sentence 1 lit. f GDPR: processing is necessary to protect the legitimate interests of the person responsible or a third party, unless the interests or fundamental rights and freedoms of the data subject, which require the protection of personal data, prevail, especially when the data subject is a child
However, at the relevant points in this data protection declaration, we will always point out the legal basis on which the processing of your personal data takes place.
4. Disclosure of personal data
The transfer of personal data is also processing within the meaning of the previous paragraph 3. However, at this point we would like to inform you separately about the topic of transfer to third parties. The protection of your personal data is very important to us. For this reason, we are particularly careful when it comes to passing on your data to third parties.
It will therefore only be passed on to third parties if there is a legal basis for processing. For example, we pass on personal data to persons or companies who work for us as processors in accordance with Art. 28 GDPR. Processor is anyone who processes personal data on our behalf – i.e. in particular in an instruction and control relationship with us
In accordance with the requirements of the GDPR, we conclude a contract with each of our processors in order to oblige them to comply with data protection regulations and thus to provide your data with comprehensive protection.
5. Duration of Storage and Deletion
Your personal data will be deleted by us if they are no longer necessary for the purposes for which they were collected or otherwise processed, the processing is not necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation reasons of public interest or to assert, exercise or defend legal claims.
6. SSL Encryption
For security reasons and to protect the transmission of confidential content, such as the inquiries you send to us as the site operator, this site uses SSL encryption. You can recognize an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line.
If SSL encryption is activated, the data that you transmit to us cannot be read by third parties.
7. Collection and storage of personal data and their type and purpose of use
Content of the newsletter and registration data
We will only send you a newsletter if you order it from us and have given your consent in accordance with Article 6 Paragraph 1 Sentence 1 lit. The contents of the newsletter are specifically described when registering for the newsletter. To register for the newsletter, it is sufficient to provide your e-mail address. If you provide further voluntary information such as your name and/or your gender, this will only be used to personalize the newsletter addressed to you.
Double opt-in and logging
For security reasons, we use the so-called double opt-in procedure to register for our newsletter so that nobody can register with someone else’s e-mail address. Therefore, after registering for our newsletter, you will first receive an e-mail asking you to confirm your registration. This only becomes effective once the registration has been confirmed.
Furthermore, your registration for the newsletter will be logged. The logging includes the storage of the registration and confirmation time, your specified data and your IP address. If you make changes to your data, these changes will also be logged.
If you no longer wish to receive our newsletter, you can revoke your consent at any time for the future. To do this, you can click on the unsubscribe link at the end of each newsletter or send us an email to the following email address: email@example.comBy withdrawing your consent, the legality of the consent processing that took place up until the revocation is not affected
- Contact form / email contact
We provide you with a form on our website so that you can contact us at any time. In order to use the contact form, it is necessary to provide a name for a personal address and a valid e-mail address for contacting us, so that we know who sent the request and can also process it. If you send us requests via the contact form, Your details from the request form, including the contact data you provided there and your IP address in accordance with Article 6 Paragraph 1 Sentence 1 lit. b and f GDPR, will be used to carry out pre-contractual measures that are based on your request or for perception processed in our legitimate interest, namely to carry out our business activities. You are also welcome to send us an e-mail instead using the e-mail address given on our website. In this case, we store and process your e-mail address and the information you provide in the e-mail in accordance with Article 6 Paragraph 1 Sentence 1 lit. b and f GDPR in order to process your message The associated data will be deleted no later than 3 months after receipt, unless they are required for a further contractual relationship.
- Google Fonts
We use Google Fonts on our website. This enables the display of fonts. Google Fonts is a service provided by Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). These web fonts are integrated by calling a server, usually a Google server in the USA. As a result, the following may be transmitted to the server and stored by Google:
- Name and version of the browser used
- Website from which the request was triggered (referrer URL)
- operating system of your computer
- screen resolution of your computer
- IP address of the requesting computer
- Language settings of the browser or the operating system that the user uses
The use of Google Fonts serves to make it easier for you to read our website and to make it graphically more pleasant and is therefore based on our legitimate interests in accordance with Article 6 (1) sentence 1 lit. f GDPR.
The data processed by cookies are required for the stated purposes to protect our legitimate interests and those of third parties in accordance with Article 6 Paragraph 1 Sentence 1 lit. f GDPR.
Most browsers automatically accept cookies based on the browser settings. However, you can configure your browser in such a way that either no cookies are stored on your device at all or at least a message is displayed before a new cookie is stored. If you completely deactivate the cookie function in your browser, you may not be able to use all the functions of our website.
Below we explain the different types of cookies that we use.
- Session cookies
In order to make the use of our offer more pleasant for you, we use so-called session cookies to recognize that you have already visited individual pages on our website. These session cookies are automatically deleted after you leave our site.
- Temporary cookies
- Cookies for marketing and optimization purposes
9. Analysis and Tracking Tools
We use the analysis and tracking tools listed below on our website. These serve to ensure the continuous optimization of our website and to design it in line with requirements.
These interests are to be regarded as justified within the meaning of Art. 6 (1) sentence 1 lit. f GDPR. The respective data processing purposes and data categories can be found in the corresponding tools.
- Google Analytics
We use Google Analytics on our website, a web analytics service provided by Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter “Google”).
- Name and version of the browser used
- operating system of your computer
- Website from which access is made (referrer URL)
- IP address of the requesting computer
- Time of server request
are usually transferred to a Google server in the USA and stored there.
However, since we have activated IP anonymization on our website, your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the USA and shortened there.
On our behalf, Google will use this information to evaluate your use of our website, to compile reports on website activity and to provide us with other services related to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
You can prevent the storage of cookies by setting your browser software accordingly. However, we would like to point out that in this case you may not be able to use all the functions of our website to their full extent.
You can also prevent Google from collecting the data generated by the cookie and related to your use of the website (including your IP address) and from processing this data by Google by downloading the browser plug-in available under the following link and install http://tools.google.com/dlpage/gaoptout?hl=de
You can prevent Google Analytics from collecting your data by clicking on the following link. An opt-out cookie will be set to prevent your data from being collected on future visits to our website: Disable Google Analytics
- Use of Google reCaptcha
We use the reCAPTCHA service from Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) on our website for our contact form to distinguish between input by a human and automated, abusive, machine processing to be able to We have a legitimate interest in protecting our web offerings from abusive automated spying and from SPAM. When querying through the reCAPTCHA service, both your IP address and any other data required by Google for the reCAPTCHA service will be forwarded to Google and processed there.
There are three variants of the query:
- No CAPTCHA reCAPTCHA: All you have to do is click on a checkbox with the content “I’m not a robot”.
- Image reCAPTCHA: You are shown 9 image sections and then have to select similar elements (e.g. all images with street signs)
- Text reCAPTCHA: You have to enter a text that is usually difficult to read and is displayed as an image(s).
You must accept the Google Terms of Service when using reCAPTCHA. There is a separate field for this. By activating, you agree that the recognition you have provided will be included in the digitization of old works. We have activated IP anonymization on this website, so that your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the USA and shortened there.
Google will use this information on our behalf to evaluate your use of this service. The IP address transmitted by your browser as part of reCaptcha will not be merged with other Google data. The deviating data protection regulations of the company Google apply to this data.
Further information on Google’s data protection guidelines can be found at: https://www.google.com/intl/de/policies/privacy/.
10. Video Embedding
Our website uses the YouTube plugin, which is operated by YouTube, LLC (901 Cherry Ave., San Bruno, CA 94066, USA).
If you activate the YouTube plugin during your visit, a connection to the YouTube servers will be established and the YouTube server will be informed which of our pages you have visited. This allows YouTube to associate your surfing behavior directly with your personal profile. You can prevent this by logging out of your member account before visiting our website.
Further information on the handling of user data can be found in YouTube’s data protection declaration at: https://policies.google.com/privacy?hl=en
The legal basis results from Art. 6 Para. 1 S. 1 lit. f GDPR. The underlying advertising purpose is to be regarded as a legitimate interest within the meaning of the GDPR.
11. Rights of the data subject
You have the following rights:
According to Art. 15 GDPR, you have the right to request information about your personal data processed by us. This right to information includes information about
- the processing purposes
- the categories of personal data
- the recipients or categories of recipients to whom your data has been or will be disclosed
- the planned storage period or at least the criteria for determining the storage period
the existence of a right to rectification, erasure, restriction of processing or objection
- the existence of a right of appeal to a supervisory authority
- the existence of a right of appeal to a supervisory authority
- the origin of your personal data, if they were not collected from us
- the existence of automated decision-making including profiling and, where appropriate, meaningful information about its details
According to Art. 16 GDPR, you have the right to immediate correction of incorrect or incomplete personal data stored by us.
According to Art. 17 GDPR, you have the right to demand the immediate deletion of your personal data from us, provided that further processing is not necessary for one of the following reasons:
- the personal data are still necessary for the purposes for which they were collected or otherwise processed
- to exercise the right to freedom of expression and information
- to fulfill a legal obligation that requires processing under European Union or Member State law to which the controller is subject, or to perform a task that is in the public interest or in the exercise of official authority that has been delegated to the controller
- for reasons of public interest in the field of public health in accordance with Art. 9 (2) lit. h and i and Art. 9 (3) GDPR
- for archiving purposes in the public interest, scientific or historical research purposes or for statistical purposes pursuant to Art. 89 (1) GDPR, insofar as the law mentioned under section a) is likely to make it impossible or seriously impair the achievement of the objectives of this processing
- to assert, exercise or defend legal claims
- Restriction of processing
According to Art. 18 GDPR, you can request the restriction of the processing of your personal data for one of the following reasons:
- You contest the accuracy of your personal data.
- The processing is unlawful and you oppose the erasure of the personal data.
- We no longer need the personal data for the purposes of processing, but you need them to assert, exercise or defend legal claims.
- You object to the processing in accordance with Art. 21 (1) GDPR.
If you have requested the correction or deletion of your personal data or a restriction of processing in accordance with Art. 16, Art. 17 Para. 1 and Art. 18 DSGVO, we will inform all recipients to whom your personal data has been disclosed, it unless this proves impossible or involves a disproportionate effort. You can ask us to inform you of these recipients.
You have the right to receive your personal data that you have provided to us in a structured, common and machine-readable format.
You also have the right to request the transmission of this data to a third party, provided that the processing was carried out using automated procedures and is based on consent in accordance with Article 6 Paragraph 1 Clause 1 Letter a or Article 9 Paragraph 2 Letter a or based on a contract in accordance with Article 6 Paragraph 1 Sentence 1 lit. b GDPR.
According to Art. 7 Para. 3 GDPR, you have the right to withdraw your consent to us at any time. The revocation of the consent does not affect the legality of the processing carried out on the basis of the consent up to the point of revocation. In the future, we may no longer continue the data processing that was based on your revoked consent.
According to Art. 77 GDPR, you have the right to complain to a supervisory authority if you believe that the processing of your personal data violates the GDPR.
If your personal data is processed on the basis of legitimate interests in accordance with Article 6 Paragraph 1 Clause 1 Letter f GDPR, you have the right to object to the processing of your personal data in accordance with Article 21 GDPR, provided there are reasons for this that arise from your particular situation or the objection is directed against direct advertising. In the latter case, you have a general right of objection, which we will implement without specifying the particular situation. If you would like to make use of your right of revocation or objection, an e-mail to firstname.lastname@example.org is sufficient
- Automated decision-making in individual cases, including profiling
You have the right not to be subject to a decision based solely on automated processing – including profiling – which has legal effect on you or significantly affects you in a similar way. This does not apply if the decision
i. is necessary for entering into, or the performance of, a contract between you and us
ii. is permitted on the basis of legislation of the European Union or the member states to which we are subject and this legislation contains appropriate measures to protect your rights and freedoms and your legitimate interests
iii. with your express consent
iv. However, these decisions must not be based on special categories of personal data according to Article 9 Paragraph 1 GDPR, unless Article 9 Paragraph 2 lit. a or g GDPR applies and appropriate measures have been taken to protect your rights and freedoms and your legitimate interests.
With regard to the cases referred to in i) and iii), we take appropriate measures to protect your rights and freedoms and legitimate interests, including at least the right to obtain human intervention on our part, to express your point of view and to contest the decision heard
Should we change the data protection declaration, this will be indicated on the website.