1. Responsible Person according to GDPR
Dr. Anja Brunner, Hildegundisallee 11, 40667 Meerbusch
2. Data Processing when Accessing the website
Legal basis for the processing of visitor data is Article 6(1) lit. f) of GDPR (General Data Protection Regulation). This is the so-called data processing on the basis of a balance of interests. Our interest here is the secure and functional operation of this website.
2.1. IP addresses
To make this site accessible for you, your IP address is processed by the web server.
The application with which this site is operated saves some types of data about the access to this website for a limited period of time. Access fails, access attempts to non-existent contents (‘404 detection’) and locking of IP addresses of failed access attempts are logged. That is important for the proper function of the website.
Legal basis for the processing of these data is Article 6(1) lit.f) of GDPR. Our interest here is to warrant the integrity, privacy and availability of the data, which are processed via these webpages.
2.2. Google Analytics
We want to make the contents on our websites interesting for you. Therefore, we collect anonymized usage data that show which sites you visited and for how long.
Google Analytics is used for the purpose of economic optimization and tailored designing of our website. This is a legitimate interest in accordance with Article 6(1) lit. f of GDPR. Moreover, we have an order processing agreement with Google and implement the strict guidelines of the German data protection authorities for the use of Google Analytics completely. The data transfer to the USA is done according to the Implementing Decision (EU) 2016/1250 of the EU Commission (EU-US privacy shield).
We collect your IP address in order to enable the transfer to Google. The use of our website is also possible without this provision. You may prevent the provision of these personal data by installing the AddOn on tools.google.com/dlpage/gaoptout or by not agreeing to the data transfer when prompted by our website. Please find detailed information about Google Analytics on www.google.com/intl/de_ALL/analytics. You can find Google’s privacy statement on www.google.com/policies/privacy/.
3. Data Processing when Editing e-mail Requests
Our website does not contain a contact form. If you send us an e-mail, we save the data you make available to us. We use these data exclusively for the response of your request. According to Article 32(1) of GDPR, we apply technical and organizational measures to protect your data.
4. Data Processing during Commission Processing
If you commission us with a project, we process your personal data in order to be able to process your order, to exchange information with you and to write invoices for you. We use these data to meet our contractual obligations towards you as well as to fulfil our legal duties.
Specifically, these are the following personal data we may process and store: salutation, first name, family name, address, e-mail address, telephone number, fax number where applicable, bank details and VAT ID. The personal data are stored until the expiry of the legal obligation to retain the data. Exceptionally, this does not apply if we are committed to store them for a longer period due to tax-law or commercial-law retention obligations (in accordance with HGB (German Commercial Code), StGB (German Penal Code) or AO (German Tax Code)) or if you agreed to an exceeding storage.
5. General Information
5.1. Recipient / Distribution of Data
Basically, we do not share your data with third parties. In particular, your data are not shared with third parties for their advertising purposes. However, if applicable, we employ service providers for the operation of these websites or, for example, for e-mail services. Accordingly, it may happen that a service provider obtains knowledge of personal data. We choose our service providers carefully, in particular regarding data protection and data security and take all measures required by data protection laws for proper data processing.
5.2. Deletion of data
We delete your personal data when there is no more need for the retention. A requirement may particularly exist if the data are still needed in order to fulfil contractual services or to examine, grant or repel warranty claims and guarantee claims, if applicable. In case of legal retention obligations, the deletion only comes into question after the expiry of the respective retention obligation.
5.3. Your rights as data subject
You have the right to be informed about personal data concerning you. You may contact us for information at any time.
Moreover, you have the right of correction or deletion or processing limitation as far as it is due to you by law.
Finally, you have the right of objection against processing within the scope of legal regulations, in particular in consideration of Article 21(1) of GDPR.
You also have the right of data portability within the scope of legal regulations. You may require us to submit to you personal data that you provided to us in a structured, common and machine-readable format.
5.4. Right of appeal before a supervisory authority
You have the right to complain about our processing of personal data to a data protection supervisory authority. The competent authority responsible for us is:
Landesbeauftragte für Datenschutz und Informationsfreiheit
PO box 20 04 44
Status as of January 19, 2019