Data Protection

Thank you for visiting our website. In the following, we would like to inform you about how we handle your data pursuant to Art. 13 of the General Data Protection Regulation (GDPR).

Controller:

The entity mentioned in the legal notice is the controller of the data processing described below.

Usage data for statistical purposes

When visiting our website, so-called usage data will be stored as a log on our web server for statistical purposes, helping us improve the quality of our website. This dataset consists of

• The page from which the file was requested,
• the file name,
• the date and time of the retrieval,
• the transmitted data volume,
• the request status (file transmitted or file not found),
• the description of the web browser used as well as the operating system,
• the referral link indicating what site lead you to ours,
• The IP address of the requesting computer, which will be shortened in such a way that it cannot be attributed to a specific person.

Anonymous visitor measurement

We carry out anonymous visitor measurement on our websites. For this purpose, the protocol data of the web server and the shortened IP address are evaluated. It is not possible to draw any conclusions about your person.

Moreover, we will store the full IP address transmitted by your PC for a period of seven days; such storage is done strictly with the intended purpose of recognising, limiting and defending against attacks on our website. Upon expiration of said period, we will delete or anonymise your IP address. The legal basis is point (f) of sentence 1 of Article 6(1) GDPR.

Data security

To protect your data from unauthorised access to the greatest possible extent, we have taken technical and organisational measures. We have implemented an encryption process on our website. Data transmitted via the internet from your PC to our server and vice versa will be encrypted using TLS technology.  You can typically see this by looking at the status line of your browser, where you will find a ‘closed’ lock icon while the address bar starts with “https://”.

Required cookies

Our website uses cookies, products and services for analysis and marketing purposes, which are provided by Visable GmbH (www.visable.com) in cooperation with them. To that end, pixel-code technology is used to collect, process and store data in order to create at least pseudonymised, but where possible and sensible, completely anonymous user profiles. Data collected, which may initially still include personal data, is transmitted to Visable or is collected directly by Visable and is used to create the aforementioned user profiles there. Visitors to this website are not personally identified and no other personal data is merged with the user profiles. If IP addresses are identified as personal, they are immediately deleted.

Exclude visitor recording (Note: Link sets a 1st-party cookie for an opt-out)

Cookies are small text files which are saved and stored on your device and can be retrieved. A distinction is made between session cookies, which are deleted as soon as you close your browser and permanent cookies, which will be retained even after the session has ended.

In some instances, cookies merely contain information relating to specific settings and cannot be used to identify persons. They can also be required to enable the site’s user guidance, security and implementation.

We use these cookies on the basis of point (f) of sentence 1 of Art. 6(1) GDPR.

You can set your browser to inform you about the placement of cookies. This ensures that the use of cookies is transparent for you.  Additionally, cookies may be deleted at any time in your browser settings, where you can also prevent the saving of new cookies. Please note that some of our webpages may not be displayed any longer and some functions may become technically unavailable.

Cookie	Purpose	Duration of storage	Adequate level of data protection
PHPSESSID	This cookie stores small cookie code elements on a user’s device, which, for instance, provides support during the navigation process and to support animations and smaller functions performed on the website.	At the end of your session, this cookie will be deleted (session cookie).	yes

Contact via phone and e-mail

You may contact us by phoneand e-mail. When contacting us by phone, we will process your telephone number, your name and the contents of the conversation for the call, respectively. Should you contact us via e-mail, we will process your e-mail address.

We use this information on the basis of point (f) of sentence 1 of Art. 6(1) GDPR to respond to your query.

Moreover, you may decide yourself whether you would like to provide us with further information. The provision of this information is voluntary and not absolutely necessary to get in contact with us. We will process the information you provide voluntarily on the basis of your consent in terms of point (a) of sentence 1 of Art. 6(1) GDPR.

Your data will only be processed to reply to your enquiry. We will erase your data if they are no longer required and no statutory retention obligations apply.

If the data you transferred to us by phone, fax or e-mail is processed on the basis of point (f) of sentence 1 of Art. 6(1) GDPR, you may object to the processing at any time. You may also withdraw your consent regarding the processing of information provided voluntarily at any time. Please contact the e-mail address stated in the legal notice for this.

Embedded videos

We embed videos on our websites. These are stored on our servers.

Map services

We have integrated a link to a map service on our web pages. The maps are not stored on our servers. We have only integrated a link to a map service so that accessing our website does not automatically lead to the content of the map service of the third-party provider being reloaded. This does not provide the third-party provider with any information.

Only after clicking on the link "Show location on OpenStreetMap" is the content of the third-party provider reloaded. This provides the third-party provider with the information that you have accessed our site as well as the usage data technically required in this context. We have no influence on the further data processing by the third-party provider. By clicking on the link, a new tab opens and you give us your consent to reload content from the third-party provider.

The linking takes place on the basis of your consent pursuant to Art. 6 para. 1 p. 1 lit. a DSGVO or § 15 para. 3 p. 1 TMG, provided that you have previously given your consent by clicking on the link.

Provider	Maximum storage period	Adequate level of data protection	Revocation of consent
OpenStreetMap		Processing only within EU/EEA	If you click on the link, the content of the third-party provider will be reloaded immediately. If you do not wish such reloading on other pages, please do not click on the link any more.

Duration of storage

Should we not already have informed you in detail about the duration of storage, we will erase personal data once they are no longer required for the aforementioned processing purposes if an erasure is not prevented by applicable retention obligations.

Further processors

In the context of a data processing agreement pursuant to Art. 28 GDPR, we will share your data with processors supporting us in operating our websites and associated processes. These could be hosting service providers, for instance. Our processors are strictly bound by our instructions, and are subject to corresponding contractual obligations.

In the following you will find the processors we collaborate with, should we not already have mentioned them in the above Privacy policy. Should, in this context, data be transmitted to countries outside the EU or, if applicable, the EEA, we will give details relating to the adequate level of data protection.

Processors	Purpose	Adequate level of data protection
Intekos (Germany)	Web hosting and support	Processing only within the EU/EEA

Your rights as a data subject

Concerning the processing of your personal data, the GDPR grants you, as a data subject, certain rights:

Right of access (Art. 15 GDPR)

You have the right to obtain confirmation whether personal data concerning your person is processed; if this is the case, you have the right to access such personal data as well as the information which is set out in detail in Art. 15 GDPR.

Right to rectification (Art. 16 GDPR)

You have the right to request the immediate rectification of inaccurate personal data regarding your person and, where applicable, to have incomplete personal data completed without undue delay .

Right to erasure (Art. 17 GDPR)

You have the right to obtain the erasure of personal data regarding your person without undue delay, should one of the grounds mentioned in detail in Art. 17 GDPR be applicable.

Right to restriction of processing (Art. 18 GDPR)

You have the right to request the restriction of processing if one of the requirements set out in Art. 18 GDPR is met, for example, if you have submitted an objection to the processing, for the duration of the verification by the controller.

Right to data portability (Art. 20 GDPR)

In certain cases mentioned in detail in Art. 20 GDPR, you have the right to receive the personal data concerning your person in a structured, commonly used and machine-readable format or, where applicable, request that these data be transmitted to a third party.

Right of withdrawal (Art. 7 DSGVO)

If the processing of data is based on your consent, you are entitled to revoke your consent to the use of your personal data at any time in accordance with Art. 7(3) DSGVO. Please note that the revocation only takes effect for the future. Processing that took place before the revocation is not affected by this.

Right to object (Art. 21 GDPR)

Should data be collected on the basis of point f of sentence 1 Art. 6(1) GDPR (data processing to protect legitimate interests) or on the basis of point e of sentence 1 of Article 6(1) GDPR (data processing in the public interest or in the exercise of official authority), you have the right to object to the processing at any time for reasons resulting from your particular situation. We will then no longer process your personal data for these reasons unless we can demonstrate compelling and legitimate grounds for the processing which outweigh your interests, rights and freedoms, or where the processing is necessary for the establishment, exercise or defence of legal claims .

Assertion of your rights

Unless otherwise described above, please contact the office named in the imprint to assert your data protection rights.

Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)

Pursuant to Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority if you are of the opinion that the processing of data concerning your person violates any data protection provisions. The right to lodge a complaint can be exercised, in particular, at a supervisory authority in the Member State of your habitual residence, workplace or at the place of the alleged violation.

Contact information of the data protection officer

Please contact our external data protection officer for further information on data protection at the following contact details:

datenschutz nord GmbH
Konsul-Smidt-Straße 88
28217 Bremen
Web: www.datenschutz-nord-gruppe.de
E-mail: office@datenschutz-nord.de

When contacting our data protection officer, please also state the controller mentioned in the legal notice.

Last update: January 2024