If you have questions concerning data protection in our company, you can contact our data protection officer (Volker Möller) in confidence via e-mail: email@example.com
Your personal data you provide us by e-mail, contact form etc., will be processed to answer your inquiries. You are not obliged to provide us with your personal data but we would not be able to answer your inquiries sent by e-mail without your e-mail address.
a) If your explicit consent is given for the processing of your data, the legal ground for this processing is set out in Art. 6 (1) (a) of the GDPR.
b) If your personal data is processed for the purpose of contract performance, the legal ground for this processing is set out in Art. 6 (1) (b) of the GDPR.
c) The legal ground for all other cases (especially when using a contact form) is set out in Art. 6 (1) (f) of the GDPR.
You have the right to object at any time to the processing of data which was performed according to Article 6 (1)(f) of GDPR and which does not serve direct marketing for reasons arising from your particular situation.
In the case of direct marketing, however, you may object to the processing at any time without stating any reasons.
Our legitimate interest in data processing is to communicate with you in a timely manner and to answer your queries cost-effectively. If you provide us with your address, we reserve the right to use it for direct postal marketing. You can protect your interest in data protection by transferring of data efficiently (e.g. using a pseudonym).
Provider of hosting, service provider for direct marketing
Your data will be deleted if it can be inferred from the circumstances that your queries or questions have been completely clarified.
However, if a contract is concluded, the data required by commercial and tax law will be retained by us for the periods as required by law, i.g. generally for ten years (cf. § 257 HGB, § 147 AO).
You have the right to revoke your consent for processing at any time in compliance with your consent.
During the visit and triggered by the access to one of the domains or subdomains data will be collected as described below.
The browser used on your terminal device automatically sends information to the server of our website. This information is temporarily stored in a so-called web server log file and can be made available to the hoster for order data processing.
The following information is automatically collected and stored until automated deletion, wherein, for example, the deletion of so-called "session cookies" usually takes place after the end of the session:
It should be mentioned explicitly that only the login data allow explicit conclusions about your person, wherein the login data are necessary to give you access to data that is exclusively intended for you. The other data collected does not allow any direct conclusions about your person. The data mentioned are processed by us for the following purposes:
The legal basis for data processing is Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interest follows from the data collection purposes listed above, the examples given here serve to illustrate the stated purposes.
A transmission of your personal data (cf. "session cookies" and IP address) to third parties for purposes other than those listed below does not take place.
We only share your personal data with third parties if:
On the basis of Art. 6 para. 1 sentence 1 lit. f GDPR, we use for the groups  a privacy-compliant web analysis service of the company 1 & 1 Internet AG, 1 & 1 WebAnalytics, to ensure a needs-based design of our website and the continuous optimization thereof. On the other hand, we use the tracking measure to evaluate the use of our website statistically and anonymously for our technical means for the purpose of optimizing our offering for you. These interests are to be regarded as justified within the meaning of the aforementioned provision.
1 & 1 WebAnalytics use, as mentioned briefly above, temporary cookies that are created by our website on your computer and are automatically deleted after a pre-defined period of time. The personal information collected by the cookie relates solely to the use of our website. Our technical means do not allow us to use this data to draw conclusions about you. The collected data in the cookie (including your IP address) will be transmitted to a server of the 1 & 1 Internet AG in Germany, stored there and evaluated with statistical analysis tools. In particular, the 1 & 1 Internet AG provides reports on the website activities ("Clicks", "Click Times", etc.) and other services associated with the website use.
The aforementioned legal reasons for the transfer of your personal data apply accordingly also to the 1 & 1 Internet AG. Furthermore, 1 & 1 is entitled to disclose your data to third parties if they evaluate this data on behalf of the 1 & 1 AG purely purposefully for our website.
The storage of personal data takes place exclusively in Germany and in compliance with the Federal Data Protection Act.
Most browsers accept cookies automatically, but you can configure your browser so that no cookies are stored on your computer or always a notice appears before a new cookie is created. However, disabling cookies completely may mean that you cannot use all the features of our website, or you may not be able to connect to our website. If you do not wish your personal data to be evaluated neither by us nor by the 1 & 1 Internet AG, you should deactivate the creation of cookies on your computer.
However, we specifically refer to the fact that the functionality of our website may be severely limited or may not be accessed in case of a complete deactivation of cookies.
By using these websites of the group , you declare your consent to the processing of the personal data collected about you by 1 & 1 in the manner described above and for the purpose stated above. Further information on the processing of data by 1 & 1 can be found here.
The evaluation of the data collected for the groups [2, 3] is carried out exclusively by ourselves. The data will not be made available to any third party.
If a provision or transfer of the data to third parties becomes necessary, for example to remedy a defect, this will be done in compliance with the GDPR and only after the conclusion of a contract for order processing according to Art. 28 GDPR.
By using these websites of the groups [2, 3], you declare your consent to the processing of the personal data collected about you by us.
This website uses technically necessary cookies. These are small text files that are stored in or by your Internet browser on your computer system.
The legal basis for such processing is set out in Article 6 (1) (f) of the GDPR.
Our legitimate interest is the functionality of our website. The user data collected by technically necessary cookies are not used to create user profiles. This preserves your interest in data protection.
The technically necessary cookies are usually deleted when the browser is closed. Persistent cookies have different validity period from a few minutes to several years.
If your personal data is being processed, you are the ‘data subject’ in terms of GDPR and you have the following rights towards the controller:
You may ask the controller to confirm whether your personal data is processed.
In the case of such processing, you may request the following information from the controller:
(1) the purposes of the processing of the personal data;
(2) the categories of personal data concerned;
(3) the recipients or categories of recipient to whom the personal data have been or will be disclosed;
(4) the estimated period of time for which the personal data will be stored, or, if not possible, the criteria used to determine that period;
(5) the right to request from the controller to rectify or erase the personal data or the right to restrict the processing of personal data concerning the data subject or to object to such processing;
(6) the right to lodge a complaint with a supervisory authority;
(7) the right to all available information on the source of the data if the personal data are not collected from the data subject;
(8) the existence of automated decision-making, including profiling in accordance with Article 22 (1) and (4) of the GDPR and - at least in these cases - meaningful information for your about the logic involved, as well as the consequences and intended effects of such processing.
As a data subject, you have the right to be informed whether the personal data concerning you are transferred to a third country or to an international organisation. In this regard, you may request to be informed of the appropriate safeguards pursuant to Article 46 GDPR relating to the transfer.
You have the right to have corrected and/or completed your personal data from the controller if your personal data processed is incorrect or incomplete. The controller has to make the correction without delay.
You have the right to obtain from the controller restriction of processing where one of the following applies:
(1) if you contest the accuracy of the personal data relating to you for a period of time that enables the controller to verify the accuracy of the personal data;
(2) the processing is unlawful and you refuse to erase the personal data and request the restriction of the use of the personal data instead;
(3) the controller no longer needs the personal data for the purposes of processing, but you need them to establish, exercise or defend legal claims; or
(4) if you have lodged an objection against the processing in accordance with Art. 21 (1) GDPR and it has not yet been determined whether the legitimate reasons of the controller outweigh your grounds.
Where processing of personal data relating to you has been restricted, such data may, with the exception of storage, only be processed with your consent or for the purpose of establishing, exercising or defending legal claims or for the protecting of the rights of another natural or legal person or for reasons of an important public interest of the Union or of a Member State.
If the restriction of processing has been restricted in accordance with the conditions mentioned above, you will be informed by the controller before the restriction of processing is lifted.
a) Obligation regarding erasure
You have the right to obtain from the controller the erasure of your personal data immediately and the controller is obliged to erase this data without delay where one of the following reasons applies:
(1) the personal data are no longer necessary for the purposes for which they were collected or otherwise processed;
(2) you withdraw your consent on which the processing is based accordance to point (a) of Article 6 (1), or point (a) of Article 9 (2) GDPR and where there is no other legal ground for the processing;
(3) you submit an objection to the processing accordance to Article 21 (1) of the GDPR, and there are no legitimate reasons for the processing, or you lodge an objection against the processing accordance to Article 21 (2) of the GDPR;
(4) your personal data have been unlawfully processed;
(5) your personal data need to be erased for compliance with a legal obligation in Union or Member State law to which the controller is subject;
(6) your personal data have been collected in relation to the offer information society services referred to Article 8 (1);
b) Obligation to inform other controllers (third parties)
If the controller has made your personal data public and is obliged to erase them accordance to Article 17 (1) of the GDPR, he has to take reasonable steps, taking into account the available technology and the cost of implementation, including technical measures, to inform the controllers who process the personal data that you, as the person concerned, have requested the erasure of any links to, or copy or replication of those personal data.
The right to erasure does not apply to the extent that processing is necessary:
(1) for exercising the right of freedom of expression and information;
(2) for fulfilment of a legal obligation which requires processing by the law of the Union or of the Member States to which the controller is subject, or for the performance of a task carried out in the public interest or the exercise of official authority transferred to the controller;
(3) for reasons of public interest in the area of public health in accordance with points (h) and (i) of Article 9 (2) as well as Article 9 (3) of the GDPR;
(4) for archiving purposes in the public interest, scientific or historical research or for statistical purposes in accordance with Article 89 (1), insofar as the right referred to in paragraph 1 is likely to make it impossible or seriously impair the achievement of the objectives of such processing; or
(5) for the establishing, exercising or defending legal claims.
If you have made use of your right to correct, erase or restrict the processing of your personal data, the controller is obliged to inform all recipients to whom the personal data have been disclosed of this correction or erasure of the data or limitation of the processing, unless this proves to be impossible or involves a disproportionate effort.
You have the right to be informed of these recipients by the controller.
You have the right to receive the personal data relating to you which you have provided to the data controller, in a structured, commonly used and machine-readable format. In addition, you have the right to transmit this data to another controller without hindrance by the controller, who has been provided with the personal data, where:
(1) the processing is based on a consent in accordance with the point (a) of Article 6 (1) or point (a) of Article 9 (2) or on a contract in accordance with the point (b) of Article 6 (1); and
(2) the processing is carried out using automated means.
In exercising this right, you also have the right to have your personal data are transmitted directly from one controller to another, as far as this is technically feasible. Freedoms and rights of other persons may not be affected thereby.
The right to data portability is not applicable to the processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority given to the data controller.
For reasons arising from your particular situation, you have the right to object at any time to processing of personal data concerning you, which is carried out based on point (e) or (f) of Article 6 (1); this also applies to profiling based on these provisions.
The controller will no longer process the personal data concerning you, unless the controller can prove that there are compelling legitimate grounds for the processing that outweigh your interests, rights and freedoms or the processing serves to establish, exercise or defend legal claims.
Where the personal data concerning you are processed for direct marketing purposes, you have the right to object at any time to processing of personal data concerning you for such marketing; this also applies to profiling, insofar as it is related to such direct marketing.
Where you object to the processing for the purposes of direct marketing, the personal data concerning you will no longer be processed for these purposes.
In the context of the use of information society services, and notwithstanding Directive 2002/58/EC, you have the possibility of exercising your right to object by automated means using technical specifications.
You have the right to withdraw your declaration of consent under Data Protection Act at any time. The withdrawal of the consent does not affect the legality of the processing carried out on the basis of the consent until the withdrawal.
You have the right not to be subject to a decision based solely on automated processing, including profiling, which has legal effect on you or which significantly impairs you in a similar manner.
This does not apply if the decision:
(1) is necessary for entering into, or performance of, a contract between you and a data controller;
(2) is authorised by Union or Member State law to which the controller is subject and which also lays down suitable measures to safeguard your rights and freedoms and legitimate interests; or
(3) is based on your explicit consent.
However, these decisions may not be based on special categories of personal data in accordance with Article 9 (1), unless point (a) or (g) of Article 9 (2) applies and appropriate measures to safeguard the rights and freedoms and your legitimate interests are in place.
Regarding the cases referred to in (1) and (3), the data controller has to take appropriate measures to safeguard the rights and freedoms and your legitimate interests, at least the right to obtain human intervention on the part of the data controller, to state his or her own position and to contest the decision.
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of your personal data infringes this Regulation.
The supervisory authority with which the complaint has been lodged is to inform the complainant on the progress and the outcome of the complaint including the possibility of judicial remedy accordance to Article 78.
Responsible for data processing:
Patentanwälte Ruff, Wilhelm, Beier, Dauster & Partner mbB
authorized with the power of sole representation:
Dr. Thomas Mütschele, Peter Wilhelm, Dr. Erich Weller, Dr. Thomas Muschik, Martin Wilhelm, Florian Renger, Jörg Baumann, Dr. Katja Dauster, Dr. Christoph Gerspacher, Dr. Ulrich Stützel, Dr. Steffen Ritter
Document produced and updated by janolaw AG.