This Privacy Notice is to inform you about the functioning and processing of personal data on this website. Personal data is any information relating to an identified or identifiable natural person (e.g. name, IP address, telephone number, date of birth or email address).
1. Data controller and contact
The controller for the processing of your personal data when you visit this website within the meaning of the General Data Protection Regulation (GDPR) is
You can reach our data privacy team via firstname.lastname@example.org
2. Collection, processing and use of personal data
2.1 Log files
Each time you visit this website, your browser automatically transfers certain information to us in so-called log files, which we store.
We store the log files for seven to ten days, using them only to identify errors and for security reasons (e.g. to investigate attempted attacks), and then erase them. Any log files whose further storage is required for evidence purposes are excluded from erasure until the respective incident has been finally clarified and may be passed on to investigating authorities in individual cases. This data processing is performed in order to safeguard our legitimate interests on the basis of Art. 6(1) (f) GDPR.
In particular, the following information is stored in the log files:
- the abbreviated IP address (internet protocol address) of the device from which the website is accessed;
- internet address of the website from which the website was accessed (so-called origin or referrer URL);
- name of the service provider through which the website is accessed;
- name of the files or information retrieved;
- date and time as well as the duration of the retrieval;
- operating system and information about the browser used, including installed add-ons (e.g. for Flash Player);
- HTTP status code (e.g. for “successful response” or “requested file not found”).
2.2 Contacting us
When you contact us through either our email address or our contact form, we process the information you have provided us with to answer your inquiry. The legal basis for this processing activity 6(1) (b), (f) GDPR, based on our legitimate interest in processing (potential) customer inquiries and improving customer satisfaction.
3. Use of our own cookies
Some of our services require so-called cookies. Cookies are small text files saved on your device by your browser. Cookies are not used to execute programs or load viruses onto your computer. The primary purpose of our cookies is to provide an offer tailored to you and to make using our services as time-efficient as possible.
Please note that you can change your cookie preferences at any time in our cookie settings.
The legal basis for the data processing described in the following section is Art. 6 (1) (a) GDPR. Please note that you can change your cookie preferences at any time in our cookie settings.
4.1 Google Analytics
Our website uses Google Analytics, a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, US (“Google”). According to Google, its point of contact for all data protection matters is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. We use Google Analytics with the additional function offered by Google to anonymise IP addresses: this means that Google generally shortens the IP address within the EU; only in exceptional cases does it first do so in the US, and in each case, the IP address is stored only in shortened form.
5. Disclosure to third parties and categories of recipients
In principle, we will only pass on the data we collect if:
- you have given your explicit consent pursuant to Art. 6(1) (a) GDPR;
- disclosure is necessary pursuant to Art. 6(1) (f) GDPR in order to establish, exercise or defend legal claims and there is no reason to assume that you have an overriding legitimate interest in your data not being disclosed;
- we are legally obliged to do so under Art. 6(1) (c) GDPR; or
- this is required under Art. 6(1) (b) GDPR for the processing of contractual relationships with you or for taking steps at your request prior to entering into a contract (e.g. forwarding inquiries and orders to regional cooperation partners).
In addition, data may be disclosed in connection with official requests, court orders, and legal proceedings if this is necessary to pursue or enforce rights.e
If these service providers process your data outside the European Union, this may result in your data being transferred to a country with a lower data protection standard than that of the European Union. In such cases, we ensure that the service providers concerned guarantee an equivalent level of data protection, either by contract or otherwise (e.g. by concluding Standard Contractual Clauses with the service provider or by ensuring that the service provider is certified according to the EU-US Privacy Shield).
6. Duration of storage
We will store your data for as long as is necessary to provide our website and the associated services or as long as we have a legitimate interest in further storage. In all other cases, we will erase your personal data with the exception of data that we are required to maintain in order to comply with contractual or legal (e.g. under tax or commercial law) retention periods (e.g. invoices).
7. Your rights
- At any time, you have the right
- to request access to or a copy of any personal data which we hold about you;
- to rectification of your personal data, if you consider that the information we are holding is inaccurate;
- to ask us to delete your personal data, if you consider that we do not have the right to hold it;
- to withdraw consent to our processing of your personal data (to the extent such processing is based on previously obtained consent);
- to restrict processing of your personal data;
- to data portability in certain circumstances;
- to object to your personal data being processed in certain circumstances and to object to the processing of your data for direct marketing purposes;
- the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.
You also have the right to file a complaint to the competent data protection supervisory (Data Protection Authority North Rhine Westphalia / Die Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, Postfach 20 04 44, 40102 Düsseldorf, Germany). If you are a resident of a member state in the European Economic Area, you are also free to contact your local data protection authority.
8. Privacy Notice Validity