DATA PROTECTION
In the following, we will inform you in accordance with the legal requirements of data protection law (in particular in accordance with BDSG nF and the European General Data Protection Regulation 'GDPR') about the type, scope and purpose of the processing of personal data by our company. This data protection declaration also applies to our websites and social media profiles. With regard to the definition of terms such as "personal data" or "processing", we refer to Art. 4 GDPR.
Name and contact details of the person responsible
Our responsible person (hereinafter “responsible person”) within the meaning of Art. 4 no. 7 GDPR is:
Moritz Kloppe
Karl-Marx-Str. 223
12055, Berlin, Germany
Managing director: Moritz Kloppe
Email address: moritz.kloppe@gmx.net
Data protection officer:
Moritz Kloppe
Karl-Marx-Str. 223
12055, Berlin, Germany
moritz.kloppe@gmx.net
Types of data, purposes of processing and categories of data subjects In the following, we will inform you about the type, scope and purpose of the collection, processing and use
personal data.
1. Types of data we process
Inventory data (name, address, etc.), contact details (telephone number, email, fax, etc.), content data
(Text input, videos, photos, etc.),
2. Purposes of processing according to Art. 13 Para. 1 c) GDPR
Processing of contracts, enabling easy access to the website, customer service and customer care, processing contact requests, providing websites with functions and content, security measures,
3. Categories of data subjects according to Art. 13 Para. 1 e) GDPR customers,
The data subjects are collectively referred to as "users".
Legal basis for processing personal data
In the following we will inform you about the legal basis of the processing of personal data:
1. If we have obtained your consent for the processing of personal data, Art. 6
Para. 1 S. 1 lit. a) GDPR legal basis.
2. Is the processing to fulfill a contract or to carry out pre-contractual measures
required, which take place at your request, Art. 6 Para. 1 S. 1 lit. b) GDPR is the legal basis.
3. Is the processing necessary to fulfill a legal obligation to which we are subject (e.g.
statutory retention requirements), Art. 6 Para. 1 S. 1 lit. c) GDPR is the legal basis.
4. Is the processing necessary for the vital interests of the data subject or a
To protect other natural persons, Art. 6 Para. 1 S. 1 lit. d) GDPR is the legal basis.
5. Is the processing necessary to safeguard our interests or the legitimate interests of a third party
and if your interests or fundamental rights and freedoms do not outweigh your interests, Art.
6 Para. 1 S. 1 lit.f) GDPR legal basis.
Transfer of personal data to third parties and processors
As a matter of principle, we will not pass on any data to third parties without your consent. If this is the case, then the transfer takes place on the basis of the aforementioned legal bases, e.g. when transferring data to online payment providers to fulfill a contract or due to a court order or due to a legal obligation to surrender the data for the purpose of criminal prosecution, to avert danger or to enforce intellectual property rights.
We also use contract processors (external service providers, e.g. for web hosting our websites and databases) to process your data. If data is passed on to the processors as part of an agreement for order processing, this is always done in accordance with Art.
28 GDPR. We carefully select our processors, check them regularly and have given us the right to issue instructions with regard to the data. In addition, the processors must have taken suitable technical and organizational measures and comply with the data protection regulations according to BDSG nF and DS-GVO.
Data transfer to third countries
With the adoption of the European General Data Protection Regulation (GDPR), a
uniform basis for data protection in Europe created. Your data will therefore mainly be processed by companies for which the GDPR applies. Should the processing by third party services take place outside the European Union or the European Economic Area, these must meet the special requirements of Art. 44 ff. GDPR. This means that processing takes place on the basis of special guarantees, such as the establishment of a data protection level that is officially recognized by the EU Commission or compliance with officially recognized special contractual obligations, the so-called “standard contractual clauses”. Insofar as we obtain your express consent to data transmission to the USA due to the ineffectiveness of the so-called "Privacy Shield", according to Art. 49 Paragraph 1 Sentence 1 lit. by US authorities and the use of the data too
Monitoring purposes, possibly without legal remedies for EU citizens.
Deletion of data and storage duration
Unless expressly stated in this data protection declaration, your personal data will be deleted or blocked as soon as you revoke your consent to processing or the purpose for storage no longer applies or the data is no longer required for the purpose, unless it is further Storage is required for evidence purposes or there are statutory retention requirements. This includes, for example, commercial law retention obligations for business letters in accordance with Section 257 (1) HGB (6 years) and tax retention obligations in accordance with Section 147 (1) AO of documents (10 years). When the prescribed retention period expires, your data will be blocked or deleted, unless the storage is still required for the conclusion or fulfillment of a contract.
Existence of automated decision-making
We do not use automatic decision-making or profiling.
Provision of our website and creation of log files
1. If you only use our website for information purposes (i.e. no registration and no other transmission of information), we only collect the personal data that your browser transmits to our server. If you want to view our website, we collect the following data:
- IP address;
- the user's internet service provider;
- the date and time of access;
- browser type;
- language and browser version;
- content of the call;
- time zone;
- access status / HTTP status code;
- amount of data;
- websites from which the request comes;
- Operating system.
This data is stored together with other personal data about you
not held.
2. These data serve the purpose of user-friendly, functional and secure delivery
our website to you with functions and content as well as their optimization and statistical
Evaluation.
3. The legal basis for this is our legitimate interest in
the data processing according to Art. 6 Para. 1 S.1 lit.f) GDPR.
4. For security reasons, we store this data in server log files for the storage period of
Days. After this period these are automatically deleted, unless we need them
Retention for evidence purposes in the event of attacks on the server infrastructure or others
Infringements.
Processing of contracts
1. We process inventory data (e.g. company, title / academic degree, names and addresses
as well as contact details of users, e-mail), contract data (e.g. services used,
Names of contact persons) and payment details (e.g. bank details, payment history) for the purpose of
Fulfillment of our contractual obligations (knowledge of who is the contractual partner; justification,
content design and execution of the contract; Check for plausibility of the data) and services (e.g. contacting customer service) in accordance with Article 6 Paragraph 1 Sentence 1 lit b) GDPR.
The entries marked as mandatory in online forms are required for the conclusion of the contract.
2. A transfer of this data to third parties does not take place, unless it is for tracking
our claims (e.g. transfer to a lawyer for collection) or to fulfill the contract
(e.g. transfer of data to payment providers) is required or there is a
Legal obligation according to Art. 6 Para. 1 S. 1 lit. c) GDPR.
3. We can also process the data you provide in order to inform you of other interesting
To inform you of products from our portfolio or to send you e-mails with technical information
send.
4. The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. This is the case for the inventory and contract data when the data is no longer required for the execution of the contract and claims can no longer be asserted from the contract because these are statute-barred (warranty: two years / standard limitation: three years ). Due to commercial and tax law requirements, we are obliged to save your address, payment and order data for a period of ten years. However, if the contract is terminated after three years, we will restrict processing, ie your data will only be used to comply with legal obligations. Information in the user account remains until it is deleted.
Contact via contact form / email / fax / post
1. When you contact us via the contact form, fax, post or email, your details will be processed for the purpose of handling the contact request.
2. If you have given your consent, the legal basis for processing the data is Article 6 Paragraph 1 Sentence 1 Letter a) GDPR. The legal basis for the processing of the data transmitted in the course of a contact request or e-mail, letter or fax is Art. 6 Para. 1 S. 1 lit.f) GDPR. The person responsible has a legitimate interest in the processing and storage of the data in order to be able to answer user inquiries, to preserve evidence for reasons of liability and, if necessary, to be able to meet his statutory retention requirements for business letters. If the contact is aimed at concluding a contract, the additional legal basis for processing is Art. 6 Para. 1 S. 1 lit. b) GDPR.
3. We can enter your details and contact requests in our customer relationship management
System ("CRM System") or a comparable system.
4. The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. For the personal data from the input mask of the contact form and those that were sent by e-mail, this is the case when the respective conversation with you has ended. The conversation is ended when it can be inferred from the circumstances that the matter in question has been finally clarified. We store inquiries from users who have an account or contract with us for up to two years after the end of the contract. In the case of statutory archiving obligations, the deletion takes place after their expiry: End of commercial law (6 years) and tax law (10 years) retention obligation.
5. You have the option at any time to give your consent in accordance with Article 6, Paragraph 1, Sentence 1, Letter a) of the GDPR
To revoke the processing of personal data. If you contact us by email, you can object to the storage of your personal data at any time.
Presence on social media
1. We maintain profiles or fan pages in social media. When using and calling our
Profile in the respective network by you, the respective data protection notices and apply
Terms of use of the respective network.
2. Data categories and description of data processing: usage data, contact details,
Content data, inventory data. Furthermore, the data of the users within social networks are saved in
Usually processed for market research and advertising purposes. For example, using the
Usage behavior and the resulting interests of the user created user profiles
become. The usage profiles can in turn be used, for example, to place advertisements inside and outside the networks that presumably correspond to the interests of the users. For these purposes, cookies are usually stored on the users' computers, in which the usage behavior and the interests of the users are stored. Furthermore, data can be stored in the usage profiles regardless of the devices used by the users (especially if the users are members of the respective platforms and are logged in to them). For a detailed description of the respective forms of processing and the options for objection (opt-out), we refer to the data protection declarations and information provided by the operators of the respective networks. In the case of requests for information and the assertion of data subject rights, we point out that these can be most effectively asserted with the providers. Only the providers have access to the data of the users and can take appropriate measures and provide information directly. If you still need help, you can contact us.
3. Purpose of processing: communication with those connected to the social networks
and registered users; Information and advertising for our products, offers and
Services; External representation and image cultivation; Evaluation and analysis of the users and content of our presence in social media.
4. Legal basis: The legal basis for the processing of personal data is
our legitimate interest in the above purposes in accordance with Art. 6 Para. 1 S. 1 lit.
GDPR. Insofar as you have given us or the person responsible for the social network your consent to the processing of your personal data, the legal basis is Art. 6 Para. 1 S. 1 lit.
a) in conjunction with Art. 7 GDPR.
5. Data transmission / recipient category: social network.
6. The data protection notices, information options and objection options (opt-out) of the respective networks / service providers can be found here:
Facebook service provider: Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland); Website: www.facebook.com; Data protection:
https://www.facebook.com/about/privacy/, Opt-Out: https://www.facebook.com/settings?tab=ads and http://www.youronlinechoices.com;
Contradiction:
https://www.facebook.com/help/contact/2061665240770586; Agreement on common
Processing of personal data on Facebook pages (Art. 26 GDPR):
https://www.facebook.com/legal/terms/page_controller_addendum, data protection information for
Facebook pages: https://www.facebook.com/legal/terms/information_about_page_insights_data.
Instagram - Service provider: Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland) -
Data protection declaration / opt-out: https://help.instagram.com/519522125107875,
Objection: https://help.instagram.com/contact/186020218683230;
Agreement on joint processing of personal data on Instagram pages (Art. 26 GDPR):
https://www.facebook.com/legal/terms/page_controller_addendum.
Pinterest - Service provider: Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street,
Dublin 2, Ireland) -
Data protection declaration: https://policy.pinterest.com/de/privacy-policy, opt-out:
https://help.pinterest.com/de/articles/personalized-ads-pinterest
Social media plug-ins
1. We use social media plug-ins from social networks on our website. We use the so-called "two-click solution" Shariff from c't or heise.de:
https://www.heise.de/ct/artikel/Shariff-Social-Media-Buttons-mit-Datenschutz-2467514.html;
Service provider: Heise Medien GmbH & Co. KG, Karl-Wiechert-Allee 10, 30625 Hanover,
Germany;
Data protection:
https://www.heise.de/Datenschutzerklaerung-der-Heise-Medien-GmbH-Co-KG-4860.html.
2. Data category and description of data processing: usage data, content data,
Inventory data. When you visit our website, “Shariff” does not transfer any personal information
Data transmitted to the third party providers of the social plug-ins. In addition to the logo or brand of the
social network you will find a regulator with which you can activate the plug-in with a click.
This activation represents your consent in the form that the respective provider of the social
Network receives the information that you have accessed our website and your
personal data are transmitted to the provider of the plug-in and stored there.
These are so-called third-party cookies. With some providers such as Facebook and XING
According to their information, your IP will be anonymized immediately after the survey. The one about the user
The plug-in provider saves the collected data as usage profiles. You can give your consent
can be canceled at any time by deactivating the controller.
3. Purpose of data processing: improvement and optimization of our website; Increasing our awareness through social networks; Ability to interact with you and the users among themselves via social networks; Advertising, analysis and / or needs-based design of the website.
4. Legal basis: The legal basis for the processing of personal data is
our legitimate interest in the above purposes in accordance with Art. 6 Para. 1 S. 1 lit.
GDPR. Insofar as you have given us or the person responsible for the social network your consent to the processing of your personal data, the legal basis is Art. 6 Para. 1 S. 1 lit.
a) in conjunction with Art. 7 GDPR. For pre-contractual inquiries or when using your
personal data for the fulfillment of the contract is Art. 6 Para. 1 S. 1 lit. b) GDPR
Legal basis.
5. Data transmission / recipient category: social network.
6. Social networks used and objection: We refer to the purpose and
Extent of data collection and processing on the respective data protection declarations of
social networks. You will also find information about your rights and
Setting options to protect your personal data. You stand by
Right to object to the creation of these user profiles, whereby you can exercise this
You can contact the respective plug-in provider directly.
Facebook
1. We have plug-ins from the social network Facebook.com on our website (company headquarters in the EU:
Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland) as part of the so-called "two-click solution" from Shariff. You can recognize this by the Facebook logo "f" or the addition " Like "," Like "or" Share ".
2. As soon as you willingly activate the Facebook plug-in, your
Browser made to the servers of Facebook. Facebook receives the information
including your IP, that you have accessed our website and transmits this information to Facebook servers in the USA, where this information is stored. If you are logged into your Facebook account, Facebook can assign this information to your account. When you use the functions of the plug-in, e.g. pressing the “Like” button, this information is also transferred from your browser to the Facebook server in the USA and stored there and displayed in your Facebook profile and, if applicable, with your friends .
3. The purpose and scope of the data collection as well as its further processing and use of the data by Facebook as well as your related rights and setting options to protect your privacy can be found in Facebook's data protection information:
https://www.facebook.com/about/privacy/. Data collection with the "Like" button:
https://www.facebook.com/help/186325668085084. You can manage and object to your settings regarding the use of your profile data for advertising purposes on Facebook here:
https://www.facebook.com/ads/preferences/.
4. If you log out of Facebook before visiting our website and delete your cookies, no data about your visit to our website will be assigned to your profile on Facebook when the plug-in is activated.
5. Agreement on joint processing of personal data on Facebook pages (Art. 26 GDPR): https://www.facebook.com/legal/terms/page_controller_addendum,
Data protection information for Facebook pages:
https://www.facebook.com/legal/terms/information_about_page_insights_data.
1. We have plug-ins from the social network Instagram (service provider:
Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland) as part of the so-called "two-click solution" from Shariff. You can recognize this by the Instagram logo in the shape of a square camera.
2. If you willingly activate the plug-in, a connection will be established from your browser to the Instagram servers. Instagram receives the information, including yours
IP address that you have visited our site and transmits the information to the server of
Instagram in the USA, where this information is stored. If you are on Instagram in your
If you are logged in, Instagram can assign this information to your account and you can click the Instagram button and share and save the content of our pages on your Instagram account and, if necessary, display it to your friends there. We have no knowledge of the exact content of the transmitted data, their use and storage duration by Instagram.
3. If you log out of Instagram before visiting our website and delete your cookies, no data about your visit to our website will be assigned to your profile on Instagram when the plug-in is activated.
4. You can find further information in the data protection declaration / opt-out of Instagram at /
Opt-Out: https://help.instagram.com/519522125107875, objection:
https://help.instagram.com/contact/186020218683230; Agreement on joint processing of personal data on Instagram pages (Art. 26 GDPR):
https://www.facebook.com/legal/terms/page_controller_addendum.
1. We have plug-ins from the social network Pinterest (Pinterest Europe Ltd.,
Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland) as part of the so-called.
Integrated “two-click solution” from Shariff. You can recognize this by the buttons with the white symbol
"P" on a red background.
2. If you willingly activate the plug-in, a connection will be established from your browser to the Pinterest servers. Pinterest receives the information, including yours
IP address that you have visited our site and transmits the information to the server of
Pinterest in the USA, where this information is stored. If you are logged into your Pinterest account, Pinterest can assign this information to your account and you can click the Pinterest button and thus share and save the content of our pages on your Pinterest account and, if necessary, display it to your friends there.
3. If you log out of Pinterest before visiting our website and delete your cookies, no data about your visit to our website will be assigned to your profile on Pinterest when the plug-in is activated.
4. You can find more information in the privacy policy of Pinterest
https://policy.pinterest.com/de/privacy-policy, opt-out:
https://help.pinterest.com/de/articles/personalized-ads-pinterest.
Rights of the data subject
1. Objection or revocation against the processing of your data
Insofar as the processing is based on your consent in accordance with Art. 6 Para. 1 S. 1 lit. a), Art. 7 GDPR
you have the right to withdraw your consent at any time. The legality of the
Processing carried out on the basis of the consent up to the point of revocation is not affected.
As far as we process your personal data on the balance of interests
in accordance with Art. 6 Para. 1 S. 1 lit.f) GDPR, you can object to the
Insert processing. This is the case, in particular, if the processing is not for
It is necessary to fulfill a contract with you, which we do in each case with the following
Description of the functions is shown. When exercising such an objection
we ask you to explain the reasons why we do not use your personal data as from
should process us carried out. In the event of your justified objection, we will check the
Situation and will either stop or adjust the data processing or you
show our compelling reasons worthy of protection on the basis of which we are processing
continue.
You can choose to have your personal data processed for advertising and marketing purposes
Object to data analysis at any time. You can exercise your right of objection free of charge.
You can inform us about your objection to advertising under the following contact details:
Moritz Kloppe
Karl-Marx-Str. 223
12055, Berlin, Germany
Managing Director Moritz Kloppe
Email address: moritz.kloppe@gmx.net
2. Right to information
You have the right to request confirmation from us as to whether you are concerned
personal data are processed. If so, you have a right to
Information about your personal data stored by us in accordance with Art. 15 GDPR. this includes
in particular information about the purposes of processing, the category of personal data
Data, the categories of recipients to whom your data has been disclosed or
, the planned storage period, the origin of your data, if not directly with you
were collected.
3. Right to rectification
You have the right to correct incorrect data or to complete correct data in accordance with Art. 16 GDPR.
4. Right to cancellation
You have the right to have your data stored by us deleted in accordance with Art. 17 GDPR, if so
because legal or contractual retention periods or other legal obligations or
Rights to further storage oppose this.
5. Right to Restriction
You have the right to restrict the processing of your personal data
request if one of the requirements in Art. 18 Para. 1 lit. a) to d) GDPR is met:
- If you dispute the accuracy of the personal data concerning you for a period of time that enables the person responsible to check the accuracy of the personal data;
- the processing is unlawful and you refuse to delete the personal data and instead request that the use of the personal data be restricted;
- the controller no longer uses the personal data for the purposes of processing
required, but you need them to assert, exercise or defend legal claims, or
- if you have objected to the processing in accordance with Art. 21 Paragraph 1 GDPR and it has not yet been determined whether the legitimate reasons of the person responsible outweigh your reasons.
6. Right to data portability
You have the right to data portability in accordance with Art. 20 GDPR, which means that you can transfer the personal data we have stored about you in a structured, common and
can receive machine-readable format or can request transmission to another person responsible.
7. Right to Complain
You have the right to lodge a complaint with a supervisory authority. As a rule, you can contact the supervisory authority for this, in particular in the member state of your place of residence, your place of work or the place of the alleged violation.
Data security
In order to protect all personal data that is transmitted to us and to ensure that we and our external service providers comply with data protection regulations, we have taken suitable technical and organizational security measures. Therefore, among other things, all data between your browser and our server is encrypted via a secure SSL connection.