We appreciate your visit to our website. Privacy is crucial to us, and we want you to feel secure while visiting our site.
You can visit our website without providing your personal information. However, as soon as you use individual functions, services or offers on our site, personal data may be processed. We collect, process and use only personal data, as far as you have consented to the collection, processing, and use or a similar legal basis exists.
Below we will inform you in detail about the nature, extent, and purpose of the personal data collected, used and processed by us and explain the rights you have as the data subject.
Name and Address of the Person Responsible
The person responsible within the meaning of the General Data Protection Regulation (GDPR) and other national data protection laws of the member states as well as other data protection regulations is:
Im Mediapark 5, c/o STARTPLATZ
Phone: +49 (0) 171 6500 980
Access Data in Server Log Files
Every time a visit on our website occurs, we automatically store access data in so-called server log files.
This includes the date and time of retrieval, amount of data transferred and, if necessary, the name of the requested file, browser and version used, the operating system used, IP address, requested URL including subpage, referrer URL (URL that you visited immediately before) and the requesting provider.
The temporary storage of the IP address by the system is necessary to allow delivery of the website to your browser. For this, your IP address must remain stored for the duration of the session.
The legal basis for the temporary storage of your data and log files is Art. 6 para. 1 lit. f GDPR.
This information is used solely to ensure the continued and correct operation of the website and to improve the content of our site, as well as for submission to law enforcement authorities in the event of a cyber attack and to ensure the security of our information technology systems. An evaluation of your data for marketing purposes does not take place in this context.
For these purposes, our legitimate interest in the processing of data according to Art. 6 para. 1 lit. f GDPR.
The data of the server log files are stored separately from all other personal data provided by you.
The collection of the data for the provision of the website and the storage of the data in log files is essential for the operation of our website. There is consequently no possibility of contradiction.
To make the visit to our website attractive and to enable the use of specific functions, we use "cookies" on our website. These are small text files that are stored and saved on your device via a browser.
Many cookies contain a so-called cookie ID. It consists of a string through which websites and servers can be assigned to a specific browser in which the particular cookie was stored. After the end of the browser session, most of the cookies we use will be deleted again ("session cookies"). The persistent cookies ("persistent cookies") remain on your device.
The following data is stored and transmitted in the cookies: language settings, CSRF security tokens.
Your data collected on our website will be pseudonymized by technical means. Therefore, it is no longer possible to assign the data to you. The data will not be stored together with other personal data.
The legal basis for the processing of personal data using cookies is Article 6 (1) lit. f GDPR.
The use of analysis cookies is for the purpose of improving the quality of our website and its contents. Through the analysis cookies we learn how, and so we can continuously optimize our offer.
For these purposes, our legitimate interest in the processing of personal data according to Art. 6 para. 1 lit. f GDPR.
Data Collection and Use at Registration
You have the possibility to register on our website. In this case, we collect the personal data that you voluntarily provide to us as part of your registration. The data collected is shown in the respective input forms.
The legal basis for processing your data is accordingly Art. 6 para. 1 lit. b GDPR.
We only use the data provided by you to process the contract and offering our services to be provided under the contract. We may also share your information with one or more processors (such as payment service providers) who also use or use your information solely for internal use on our behalf.
We also store your IP address and the date and time of registration to prevent the misuse of our website and the services offered and, if necessary, to investigate past offenses committed. The storage of this data is therefore required for our protection. The legal basis for the processing of personal data is Art. 6 (1) lit. f GDPR. In the purposes mentioned above, our legitimate interest in the processing of data according to Art. 6 para. 1 lit. f GDPR.
Disclosure of this data to third parties is not, as long as there is no legal obligation to disclose or the disclosure of law enforcement serves.
After complete completion of the contract or deletion of your account, your data will be blocked for further use and deleted after expiration of the statutory retention periods, unless you have expressly consented to a further use of your data, or we reserve the right to use the data, which is permitted by law and about which we will inform you below.
Use of our Surveys
Insofar as you use our surveys within the scope of offers from our customers and provide personal data in the course of using the chatbot, the personal data you provide will be automatically saved.
We process this data exclusively on behalf of our customers for processing your specific request to the chatbot. The data will be deleted as soon as it is no longer necessary to achieve the purpose of its collection.
Integration of Third-Party Content
On our website, we partly integrate third-party content, such as maps from Google Maps and Apple Maps, RSS feeds or graphics from other websites/providers. To display this content, it is necessary to transfer your IP address to the third party. Therefore, when you visit our website, your browser will establish a direct connection with the servers of the respective third-party provider. Your browser will automatically be prompted by the content embedded on our site to download a representation of the relevant third-party component. As part of this technical process, the third party will be aware of the specific bottom of our site you are visiting.
By clicking on the content, you consent to the data transfer to the respective third party.
The legal basis for the processing of your data after your consent is Art. 6 para. 1 lit. a GDPR.
On our website, we provide information by law that allows us to contact us electronically as well as communicate with us directly. This includes above all our email address. As far as you contact us by email, the personal data you provide will be automatically saved.
The legal basis for the processing of the data transmitted in the course of sending an e-mail is Article 6 (1) lit. f GDPR. If the establishment of contact aims at the conclusion of a contract, then additional legal basis for the processing is Art. 6 para. 1 lit. b GDPR.
However, we use the personal data you provide only for the processing of your specific request. The given data will always be treated confidentially.
The data will be deleted as soon as it is no longer necessary to achieve the purpose of its collection. For the personal data sent by e-mail, this will be the case when the conversation with you has ended. The conversation ends when it can be inferred from the circumstances that the facts are finally clarified.
You have the opportunity to revoke your consent to the processing of your personal data at any time. If you contact us, you can object to the storage of your personal data at any time. In such a case, the conversation cannot continue.
Payment Service Stripe
We have engaged Stripe Payments Europe Ltd, Block 4, Harcourt Center, Harcourt Road, Dublin 2, Ireland ("Stripe") to process our payment process.
If you choose "credit card" as a payment option during the order process, your data will automatically be transmitted to Stripe. By choosing one of these payment options, you consent to the transfer of your personal data described below.
We provide Stripe with the following information: first name, last name, address and other data required for payment. For the settlement of the payment also necessary personal data are necessary, which stand in connection with your respective order. In particular, there may be a reciprocal exchange of payment information, such as card number, expiration date, and CVC code, order data, prices and taxation or information on previous order behavior.
The purpose of the data transmission is solely payment processing. The legal basis for processing your data is accordingly Art. 6 para. 1 lit. b GDPR.
Stripe may also disclose personal information to affiliates and service providers or subcontractors, to the extent necessary to fulfill the contractual obligations or to process the data on behalf of.
We secure our website and other systems through numerous technical and organizational measures against loss, destruction, access, modification or dissemination of your data by unauthorized persons. However, despite regular checks, full protection against all dangers is not possible and can not be granted by us. For this reason, you are always free to submit your personal data in other ways, such as by phone or by post to us.
Legal Basis for the Processing of Personal Data
As far as we obtain your consent for the processing of personal data, Art. 6 para. 1 lit. a GDPR as the legal basis for the processing of personal data.
In the processing of personal data required to fulfill a contract of which you are a party, Art. 6 para. 1 lit. b GDPR as a legal basis. This also applies to process operations required to carry out pre-contractual measures.
Insofar as the processing of personal data is required to fulfill a legal obligation that our company is subject to, Art. 6 para. 1 lit. c GDPR as a legal basis.
In the event that your vital interests or the vital interests of another natural person require the processing of personal data, Art. 6 para. 1 lit. d GDPR as a legal basis.
If processing is necessary to safeguard the legitimate interests of our company or a third party, and if your interests, fundamental rights and fundamental freedoms do not outweigh the former interest, Art. 6 para. 1 lit. f GDPR as a legal basis for processing.
Legitimate Interests in Processing
Is the processing of your personal data based on Article 6 I lit. f DS-GMO, is our legitimate interest unless otherwise stated to carry out our business. Incidentally, we have specified our purposes and interests in the context of the above list of processing.
Data Deletion and Storage Duration
Your personal data will be deleted or blocked as soon as the purpose of the storage is removed or you revoke your consent. Storage may also take place if provided for by the European or national legislator in EU regulations, laws or other regulations to which the controller is subject. If the purpose of the storage is omitted, if you revoke your consent, or if a storage period prescribed by the European Directives or any other relevant legislature expires, the personal data will be routinely and in accordance with the statutory provisions blocked or deleted, unless there is a need for further storage the data for a contract or a contract.
Right to Information
You also have the right to receive free information from us at any time about the personal data stored about you and a copy of this information. You also have the right to information regarding the following information:
- the processing purposes,
- the categories of personal data being processed,
- the recipients or categories of recipients to whom the personal data have been or are being disclosed, in particular in the case of beneficiaries in third countries or international organizations,
- if possible, the planned duration for which the personal data are stored or, if this is not possible, the criteria for determining that duration,
- the existence of a right to rectification or erasure of personal data concerning them or of processing by the person responsible or a right to object to such processing,
- the existence of a right of appeal to supervisory authority,
- if the personal data are not collected from the data subject: all available information on the source of the data and,
- the existence of automated decision-making including profiling in accordance with Article 22 (1) and (4) of the GDPR and - at least in these cases - meaningful information about the logic involved and the scope and intended impact of such processing on the data subject.
You also have the right to know whether personal data has been transmitted to a third country or to an international organization. If this is the case, then you have the right to obtain information about the appropriate guarantees in connection with the transfer.
Right to Correction
You have the right to demand immediate correction and/or completion of any incorrect or incomplete personal data concerning you. We have to correct this immediately.
Right to a Restriction of Processing
You have the right to ask us to restrict processing if one of the following conditions is met:
- The accuracy of the personal data is contested by the data subject for a period that allows the data controller to verify the accuracy of the personal data.
- The processing is unlawful, the data subject refuses to delete the personal data and instead requests the restriction of the use of the personal data.
- The data controller no longer needs the personal data for processing purposes, but the data subject requires them to assert, exercise or defend their rights.
- The person concerned has objected to the processing acc. Art. 21 para. 1 DS-GVO and it is not yet clear whether the legitimate reasons of the person responsible outweigh those of the person concerned.
If the processing of personal data concerning you has been restricted, this data may only be used with your consent or for the purpose of asserting, exercising or defending legal claims or protecting the rights of another natural or legal person or for reasons of important public interest Union or a Member State.
If the limitation of the processing according to the o.g. If conditions are restricted, you will be informed by us before the restriction is lifted.
Right to Cancellation
You have the right to request that the personal data concerning you be deleted without delay, provided that one of the following reasons is satisfied and the processing is not required:
- The personal data has been collected for such purposes or otherwise processed for which they are no longer necessary.
- The data subject withdraws the consent on which the processing was based on Article 6 (1) (a) of the GDPR or Article 9 (2) (a) of the GDPR and lacks any other legal basis for the processing.
- The data subject submits an objection to the processing pursuant to Article 21 (1) DS-GVO, and there are no legitimate reasons for the processing or the person concerned objects to the proceedings pursuant to Art. 21 (2) GDPR Processing.
- The personal data was processed unlawfully.
- The deletion of personal data is required to fulfill a legal obligation under Union law or the law of the Member States to which the person responsible is subject.
- The personal data were collected in relation to information society services offered pursuant to Art. 8 para. 1 DS-BER.
If the personal data have been made public by us and if we as the person in charge are obliged to delete personal data pursuant to Art. 17 para. 1 DS-GVO, we shall take appropriate measures, including technical ones, for others, taking into account the available technology and the implementation costs (a) inform data controllers processing the published personal data that the data subject has requested the other data controllers to delete all links to such personal data or to make copies or replicas of such personal data; Processing is not required.
The right to delete does not exist if the processing is required:
- to exercise the right to freedom of expression and information;
- to fulfill a legal obligation required by the law of the Union or of the Member States to which the controller is subject, or to carry out a task which is in the public interest or in the exercise of the official authority conferred on the controller;
- for reasons of public interest in the field of public health pursuant to Art. 9 (2) lit. h and i and Art. 9 (3) GDPR;
- for archival purposes of public interest, for scientific or historical research purposes or for statistical purposes acc. Article 89 (1) GDPR, to the extent that the law referred to in subparagraph (a) is likely to render impossible or seriously affect the achievement of the objectives of that processing, or
- to assert, exercise or defend legal claims.
Right to Briefing
If you have used the right to rectify, delete or restrict the processing to us, we are obliged to notify all recipients to whom your personal data have been disclosed of this correction or deletion of the data or restriction of processing, unless this proves to be impossible or involves a disproportionate effort.
You have the right of us to be informed about these recipients.
Right to Data Portability
You have the right to receive personally identifiable information you provide us in a structured, common and machine-readable format. You also have the right to transfer this data to another person responsible without hindrance by us, if the processing is based on the consent pursuant to Art. 6 (1) (a) GDPR or Art. 9 (2) (a) GDPR or Article 6 (1) (b) of the GDPR and processing by automated means, unless the processing is necessary for the performance of a task of public interest or in the exercise of official authority which delegates it to us has been.
Furthermore, in exercising your right to data transferability under Article 20 (1) of the GDPR, you have the right to obtain that your personal data are transmitted directly by us to another person responsible, provided that this is technically feasible and if this is not the case Rights and freedoms of others.
The right to data portability does not apply to the processing of personal data necessary for the performance of a task in the public interest or in the exercise of official authority delegated to the controller.
Right to an Objection
You have the right to object to the processing of personal data concerning you on the basis of your particular situation at any time in accordance with Article 6 (1) (e) or (f) of the GDPR. This also applies to profiling based on these provisions.
In the event of an objection, we will no longer process personal data unless we can prove compelling legitimate reasons for processing that outweigh your interests, rights, and freedoms, or the processing is intended to assert, exercise or defend legal claims.
If we process your personal data in order to operate direct mail, you have the right to object at any time to the processing of your personal data for the purpose of such advertising. This also applies to profiling, as far as it is associated with such direct mail. If you object to our processing for direct marketing purposes, we will no longer process your personal data for these purposes.
You also have the right, for reasons arising from your particular situation, against the processing of your personal data relating to you, which takes place with us for scientific or historical research purposes or for statistical purposes pursuant to Art. 89 (1) DS-BER, Objection, unless such processing is necessary to fulfill a public interest task.
You can contact us at any time to exercise the right of opposition. In addition, in the context of the use of information society services, regardless of Directive 2002/58 / EC, they are free to exercise their right of opposition through automated procedures using technical specifications.
Right to Revoke a Data Protection Consent
You have the right to revoke your consent to the processing of personal data at any time. The revocation of consent does not affect the legality of the processing carried out on the basis of the consent until the revocation.
Right to Automated Decisions in Individual Cases, including Profiling
You have the right not to be subjected to a decision based solely on automated processing - including profiling - that will have legal effect or similarly affect you in a similar manner, if the decision
- is not required for the conclusion or fulfillment of a contract between you and us or
- is permitted by Union or Member State legislation to which we are subject, and where such legislation contains appropriate measures to safeguard your rights and freedoms and your legitimate interests, or
- with your express consent.
Is the decision
- required for the conclusion or fulfillment of a contract between you and us or
- it takes place with your express consent,
We take reasonable steps to safeguard your rights and freedoms, as well as your legitimate interests, including at least the right to obtain the intervention of a person on our part and to challenge the decision.
Existence of Automated Decision Making
We do not do automatic decision making or profiling.
Right to Complain to a Supervisory Authority
Without prejudice to any other administrative or judicial remedy, you shall have the right to complain to a supervisory authority, in particular in the Member State of its place of residence, employment or the place of the alleged infringement, if you believe that the processing of the personal data concerning you is against the GDPR violates.
The supervisory authority to which the complaint has been submitted shall inform the complainant of the status and results of the complaint, including the possibility of a judicial remedy pursuant to Article 78 of the GDPR.
Last updated: August 2020