Privacy policy

Privacy policy

The protection of the personal data you entrust to us is very important to us. This privacy policy informs you about the nature, scope and purposes of the collection and processing of your personal data.

We are the body responsible for data protection and our data can be found in our imprint. If you have any questions about the collection, storage or use of your data, we are always available to provide you with information.

In the following, we will inform you about our handling of the data you have provided.

1. data collection

In principle, you can visit our website without us collecting any personal data from you. Personal data is only collected by us if you provide it to us. The communication of your personal data is always on a voluntary basis. In the context of an enquiry via the contact form, we collect the following data from you: First name, last name, e-mail address.

After entering your personal data in our contact form and clicking the "Send" field, this data is transmitted to us and stored by us.

2. data processing

The personal data we collect is processed in accordance with the provisions of the General Data Protection Regulation (GDPR).

The legal basis for the processing of your personal data, which you submit to us in the context of an enquiry via our contact form, with the exception of your telephone number, is Art. 6 (1) letter b DSGVO. According to Art. 6(1)(b) DSGVO, data processing is lawful if the processing is necessary for the performance of a contract to which the data subject is party or for the implementation of pre-contractual measures taken at the data subject's request.

The legal basis for the processing of your access data and the use of cookies, web services as well as script libraries and other tools is Art. 6 para. 1 lit. f DSGVO. According to Art. 6 (1) (f) of the GDPR, processing is lawful if it is necessary for the protection of our legitimate interests or those of a third party and if your interests or fundamental rights and freedoms, which require the protection of personal data, are not overridden.

3. data use

All data that you transmit to us will be treated confidentially.

We use the personal data you provide exclusively to contact you and process your enquiry.

We do not use the data for advertising or market and opinion research without your consent.

We would like to point out that we are, however, authorised to provide information about your data in individual cases if the competent authorities (e.g. public prosecutor's office) request this from us for the purpose of fulfilling their legal powers (e.g. criminal prosecution). The legal basis for this provision of information is Art. 6 para. 1 p. 1 letter e DSGVO.

4. storage period, deletion and blocking of data

As soon as your personal data is no longer necessary for the purpose for which it was collected, we will delete it immediately.

Your personal data, which you have transmitted to us in the context of an enquiry by e-mail or via our contact form, will be deleted after the contact has been terminated. Your personal data will not be deleted if a contractual relationship is established.

However, due to commercial and tax regulations, we are obliged to store the contract data as well as your address and payment data for ten years. In this respect, we will restrict the processing and further storage of the data will only take place in order to fulfil the retention obligations.

5. Access data / server log files

In addition, our web space provider collects data about every access to our website (so-called server log files). This data record contains the following data:

Name of the website accessed, file, date and time of access, amount of data transferred, notification of successful access, browser type and version, the user's operating system, referrer URL (the previously visited page), IP address and the requesting provider.

We only use this data for internal statistical evaluations for the purpose of the operation, security and optimisation of our website. This data is also stored for the prevention or clarification of misuse of our website and, if necessary, this data enables us to solve criminal offences. In this respect, the storage of this data is necessary for our protection. This constitutes our legitimate interest within the meaning of Art. 6 para. 1 p. 1 lit. f DSGVO. This data is stored separately from the personal data and is not merged with them at any time. However, we reserve the right to check this data retrospectively if necessary, insofar as there is a justified suspicion of unlawful use on the basis of concrete indications. As a matter of principle, this data is not passed on to third parties unless there is a legal obligation to pass it on or the passing on serves the purpose of criminal prosecution.

This access data is deleted within seven days after access to our website.

6. data security

To protect your data from unauthorised access by third parties, we use TSL encryption on our website. TSL (Transport Layer Secrurity) is an encryption protocol for secure data transmission on the internet. All data is therefore transmitted to us in encrypted form. You can recognise an encrypted connection by the designation "https" at the beginning of the address line of your browser.

In addition, your data is protected by technical precautions against loss, destruction, modification or access and distribution by unauthorised third parties. However, we would like to point out that data transmission on the Internet (e.g. communication by e-mail) can have security gaps. Complete protection of your data is not possible.

7. cookies

We use cookies on our website for the optimised and technically error-free provision of our website. On the other hand, they are used to collect statistical data on website use in order to be able to analyse this for the purpose of improving the offer. These aspects represent our legitimate interest within the meaning of Art. 6 para. 1 p. 1 lit. f DSGVO. Cookies are small text files that are stored on your terminal device and serve to recognise your device. Through cookies, data entered by you in our forms or the contents of the shopping basket, for example, remain available.

Most of the cookies we use are deleted again after the browser session ends, i.e. after you close your browser (so-called session cookies). Other cookies remain on your end device for a certain period of time and enable your browser to be recognised the next time you visit (so-called persistent cookies). After the preset period of time has elapsed, the cookies we use are automatically deleted from your terminal device.

You can set your browser so that you are informed in advance about the setting of cookies and decide whether to save them or to exclude the saving of cookies for certain cases or in general. However, please note that without cookies, the use and in particular the functionality of our website may be restricted.

For the security of your privacy, we recommend that you regularly delete the cookies stored on your terminal device.

8. your rights as a data subject

You have the following rights with regard to the processing of your personal data:

- Right to information pursuant to Art. 15 DSGVO

You have the right to obtain information about your personal data processed by us.

- Right to rectification pursuant to Art. 16 DSGVO

You have the right to request without undue delay the rectification of inaccurate personal data concerning you and/or, having regard to the purposes of the processing, the completion of incomplete personal data, including by means of a supplementary declaration.

- Right to erasure pursuant to Art. 17 DSGVO

You have the right to demand that we delete your personal data without undue delay, provided that one of the grounds of Art. 17 (1) DSGVO applies. This right does not apply, inter alia, where the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation which requires processing, in the public interest or for the establishment, exercise or defence of legal claims.

- Right to restriction of processing pursuant to Art. 18 DSGVO

You have the right to demand that we restrict processing, provided that one of the conditions of Art. 18 (1) DSGVO is met.

- Right to information pursuant to Art. 19 of the GDPR

You have the right to obtain from us any rectification or erasure of personal data or restriction of processing to all recipients to whom your personal data has been disclosed in accordance with Article 16, Article 17 Para. 1 and Article 18 DSGVO unless this proves impossible or involves a disproportionate effort. You also have the right to be informed about these recipients.

- Right to data transfer pursuant to Art. 20 DSGVO

You have the right to receive your personal data stored by us in a structured, common and machine-readable format and to transfer it to another controller, provided that the requirements of Art. 19 (1) DSGVO are met. You also have the right to obtain that we transfer your personal data directly to another controller, insofar as this is technically feasible.

- Right to revoke consent granted pursuant to Art. 7 (3) DSGVO

You have the right to revoke your consent to the processing of your data at any time with effect for the future. The lawfulness of the processing carried out on the basis of the consent until the revocation is not affected by the revocation. If you exercise your right of revocation, we will immediately delete the data concerned, unless future processing can be based on a legal basis that does not require your consent.

- Right to complain to a supervisory authority pursuant to Art. 77 DSGVO

You also have the right to lodge a complaint with a data protection supervisory authority in your or the place of the alleged breach if you believe that our processing of your personal data is unlawful. The data protection supervisory authorities are the respective state data protection commissioners (LfD). In Bavaria, the data protection supervisory authority is the State Office for Data Protection Supervision. A list of the data protection officers and their contact details can be found at the following link:

https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.

Right of objection (Art. 21 DSGVO)

You have the right to object at any time with effect for the future to the processing of your personal data that is based on the legal basis of Art. 6(1)(f) DSGVO, i.e. that is necessary to protect our legitimate interests, for reasons arising from your particular situation.

If you exercise this right of objection, we will no longer process your personal data on the basis of our legitimate interest. This does not apply if we can demonstrate compelling legitimate grounds for such processing which override your interests, rights and freedoms, or if the processing serves the purpose of asserting, exercising or defending legal claims.

If we process your personal data for the purpose of direct marketing, you also have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing; this also applies to profiling, insofar as it is associated with such direct marketing.

If you object to the processing for direct marketing purposes, we will no longer process the personal data for these purposes.

9. web services

Google Maps

This website uses Google Maps, a web service provided by Google LLC. (Google). This enables us to show you an interactive map with our location on our website. This represents our legitimate interest within the meaning of Art. 6 para. 1 lit. f DSGVO.

For this reason, the browser you use establishes a connection to Google's servers. In this way, Google learns that our website has been accessed via your IP address.

You can set your browser so that the script code is not loaded by Google's servers and thus prevent the collection and processing of your data by Google Maps (for example, by installing add-ons such as NoScript or Ghostery for Firefox.)

Google LLC is based in the USA and is certified for the U.S.-European Privacy Shield, which ensures compliance with the level of data protection applicable in the EU. Further information on the EU-U.S. Privacy Shield can be found here:

https://www.lda.bayern.de/de/international.html

General information on data protection is available in the Google Privacy Center at: http://www.google.com/intl/de-DE/privacy/

10. script libraries

Google Web Fonts

This website uses Google Web Fonts (http://www.google.com/webfonts/). When a page of our website is called up, the corresponding web fonts are transferred to the cache of your browser in order to display the fonts we have selected.

For this reason, the browser you use establishes a connection to Google's servers. In this way, Google learns that our website has been accessed via your IP address. Google Web Fonts are used in the interest of a uniform and appealing presentation of our website. This represents our legitimate interest within the meaning of Art. 6 Para. 1 lit. f DSGVO.

If your browser does not support Google Web Fonts or access is prevented, a standard font of your computer will be used for the text to be displayed.

Your data transmitted in connection with the page view is only transferred to resource-specific domains such as fonts.googleapis.com or fonts.gstatic.com. This data is not associated with data collected or used by other Google services such as Gmail.

You can set your browser so that the fonts are not loaded from the Google servers (e.g. by installing add-ons such as NoScript or Ghostery for Firefox.)

Google LLC is based in the USA and is certified for the U.S.-European Privacy Shield, which ensures compliance with the level of data protection applicable in the EU. Further information on the EU-U.S. Privacy Shield can be found here:

https://www.lda.bayern.de/de/international.html

For information on Google Web Fonts' privacy policy, please visit: https://developers.google.com/fonts/faq#Privacy

General information on data protection is available in the Google Privacy Center at: http://www.google.com/intl/de-DE/privacy/

11. integration of tools

Vimeo / YouTube

For the integration of videos, this website uses the online offer of Vimeo Inc. (Vimeo) and Google Ireland Limited (Youtube). The videos are stored on www.vimeo.com and www.youtube.com and can be played directly on our website.

The integration of Vimeo and YouTube videos is in the interest of an appealing presentation of our website. This represents our legitimate interest within the meaning of Art. 6 para. 1 lit. f DSGVO.

If you play the video, the browser you use establishes a connection to the Vimeo or YouTube servers. In this way, Vimeo / YouTube learns that the Vimeo / YouTube video has been viewed via your IP address.

If you are logged in to Vimeo/YouTube, this information will also be assigned to your user account. You can prevent this by logging out of Vimeo/YouTube before playing the video and deleting your browser cookies.

For more information on data protection, please see Vimeo's privacy policy at:

https://vimeo.com/privacy

https://policies.google.com/privacy?hl=de&gl=de