Introduction

With the fol­low­ing data pro­tec­tion dec­la­ra­tion, we would like to explain to you which types of your per­son­al data (here­inafter also referred to as “data”) we process, for which pur­pos­es and to what extent. The data pro­tec­tion dec­la­ra­tion applies to all pro­cess­ing of per­son­al data car­ried out by us, both in the con­text of the pro­vi­sion of our ser­vices and in par­tic­u­lar on our web­sites, in mobile appli­ca­tions and with­in exter­nal online pres­ences, such as our social media pro­files (here­inafter col­lec­tive­ly referred to as “online offer”).

The terms used are not gen­der specific.

As of Sep­tem­ber 2, 2021

Contents overview

Responsible person

Asso­ci­a­tion of Friends of German-Polish
Euro­pean-Nation­al Park Unteres Oder­tal e.V.
Park 3
D‑16303 Schwedt

Autho­rized rep­re­sen­ta­tives: Asso­ci­a­tion chair­man Thomas Berg (ViS­dPG).

Email address: .

Imprint: https://nationalpark-unteres-odertal.de/imprint.

Overview of the processing

The fol­low­ing overview sum­ma­rizes the types of data processed and the pur­pos­es of their pro­cess­ing and refers to the data subjects.

Types of data processed

  • Inven­to­ry data (e.g. names, addresses).
  • Con­tent data (e.g. entries in online forms).
  • Con­tact details (e.g. e‑mail, tele­phone numbers).
  • Meta / com­mu­ni­ca­tion data (e.g. device infor­ma­tion, IP addresses).
  • Usage data (e.g. web­sites vis­it­ed, inter­est in con­tent, access times).

Categories of data subjects

  • Busi­ness and con­trac­tu­al partners.
  • Com­mu­ni­ca­tion partner.
  • Mem­bers.
  • Users (e.g. web­site vis­i­tors, users of online services).

Purposes of processing

  • Pro­vi­sion of our online offer and user-friendliness.
  • Con­tact requests and communication.
  • Man­age­ment and answer­ing of inquiries.

Relevant legal bases

Below you will find an overview of the legal bases of the GDPR, on the basis of which we process per­son­al data. Please note that in addi­tion to the pro­vi­sions of the GDPR, nation­al data pro­tec­tion require­ments may apply in your or our coun­try of res­i­dence or domi­cile. Fur­ther­more, if more spe­cif­ic legal bases are rel­e­vant in indi­vid­ual cas­es, we will inform you of this in the data pro­tec­tion declaration.

  • Con­sent (Art. 6 Para. 1 S. 1 lit. a. GDPR) — The data sub­ject has giv­en their con­sent to the pro­cess­ing of their per­son­al data for a spe­cif­ic pur­pose or for sev­er­al spe­cif­ic purposes.
  • Ful­fill­ment of the con­tract and pre-con­trac­tu­al inquiries (Art. 6 Para. 1 S. 1 lit. b.GDPR) — The pro­cess­ing is nec­es­sary for the per­for­mance of a con­tract to which the data sub­ject is a par­ty or for the imple­men­ta­tion of pre-con­trac­tu­al mea­sures that are car­ried out at the request of the data subject.
  • Legit­i­mate inter­ests (Art. 6 Para. 1 S. 1 lit.f. GDPR) — The pro­cess­ing is nec­es­sary to safe­guard the legit­i­mate inter­ests of the per­son respon­si­ble or a third par­ty, unless the inter­ests or fun­da­men­tal rights and free­doms of the data sub­ject, which require the pro­tec­tion of per­son­al data, out­weigh this.

Nation­al data pro­tec­tion reg­u­la­tions in Ger­many : In addi­tion to the data pro­tec­tion reg­u­la­tions of the Gen­er­al Data Pro­tec­tion Reg­u­la­tion, nation­al data pro­tec­tion reg­u­la­tions apply in Ger­many. This includes in par­tic­u­lar the law on the pro­tec­tion against mis­use of per­son­al data dur­ing data pro­cess­ing (Fed­er­al Data Pro­tec­tion Act — BDSG). In par­tic­u­lar, the BDSG con­tains spe­cial reg­u­la­tions on the right to infor­ma­tion, the right to era­sure, the right to object, the pro­cess­ing of spe­cial cat­e­gories of per­son­al data, pro­cess­ing for oth­er pur­pos­es and trans­mis­sion as well as auto­mat­ed deci­sion-mak­ing in indi­vid­ual cas­es, includ­ing pro­fil­ing. Fur­ther­more, it reg­u­lates data pro­cess­ing for the pur­pos­es of the employ­ment rela­tion­ship (Sec­tion 26 BDSG), in par­tic­u­lar with regard to the estab­lish­ment, imple­men­ta­tion or ter­mi­na­tion of employ­ment rela­tion­ships and the con­sent of employ­ees. Fur­ther­more, state data pro­tec­tion laws of the indi­vid­ual fed­er­al states can be applied.

Safety measures

We take appro­pri­ate tech­ni­cal and orga­ni­za­tion­al mea­sures in accor­dance with the legal require­ments, tak­ing into account the state of the art, the imple­men­ta­tion costs and the type, scope, cir­cum­stances and pur­pos­es of pro­cess­ing as well as the dif­fer­ent prob­a­bil­i­ties of occur­rence and the extent of the threat to the rights and free­doms of nat­ur­al per­sons to ensure a lev­el of pro­tec­tion appro­pri­ate to the risk.

The mea­sures include, in par­tic­u­lar, secur­ing the con­fi­den­tial­i­ty, integri­ty and avail­abil­i­ty of data by con­trol­ling phys­i­cal and elec­tron­ic access to the data as well as the access, input, trans­fer, ensur­ing avail­abil­i­ty and their sep­a­ra­tion. Fur­ther­more, we have set up pro­ce­dures that ensure the exer­cise of data sub­ject rights, the dele­tion of data and reac­tions to the threat to the data. Fur­ther­more, we con­sid­er the pro­tec­tion of per­son­al data already in the devel­op­ment or selec­tion of hard­ware, soft­ware and pro­ce­dures in accor­dance with the prin­ci­ple of data pro­tec­tion, through tech­nol­o­gy design and data pro­tec­tion-friend­ly default settings.

Short­en­ing the IP address : If IP address­es are processed by us or by the ser­vice providers and tech­nolo­gies used and the pro­cess­ing of a full IP address is not required, the IP address will be short­ened (also referred to as “IP mask­ing”). The last two dig­its or the last part of the IP address after a point are removed or replaced by place­hold­ers. With the short­en­ing of the IP address, the iden­ti­fi­ca­tion of a per­son based on their IP address is to be pre­vent­ed or made sig­nif­i­cant­ly more difficult.

SSL encryp­tion (https) : In order to pro­tect your data trans­mit­ted via our online offer, we use SSL encryp­tion. You can rec­og­nize such encrypt­ed con­nec­tions by the pre­fix https: // in the address line of your browser.

Transmission of personal data

As part of our pro­cess­ing of per­son­al data, it may hap­pen that the data is trans­mit­ted to oth­er bod­ies, com­pa­nies, legal­ly inde­pen­dent orga­ni­za­tion­al units or per­sons, or they are dis­closed to them. The recip­i­ents of this data can include, for exam­ple, ser­vice providers com­mis­sioned with IT tasks or providers of ser­vices and con­tent that are inte­grat­ed into a web­site. In such a case, we observe the legal require­ments and, in par­tic­u­lar, con­clude cor­re­spond­ing con­tracts or agree­ments that serve to pro­tect your data with the recip­i­ents of your data.

Data processing in third countries

Inso­far as we process data in a third coun­try (i.e. out­side the Euro­pean Union (EU), the Euro­pean Eco­nom­ic Area (EEA)) or the pro­cess­ing in the con­text of the use of third-par­ty ser­vices or the dis­clo­sure or trans­fer of data to oth­er per­sons, offices or com­pa­nies takes place, this is only done in accor­dance with the legal requirements.

Sub­ject to express con­sent or con­trac­tu­al­ly or legal­ly required trans­fer, we only process or have the data processed in third coun­tries with a rec­og­nized lev­el of data pro­tec­tion, con­trac­tu­al oblig­a­tion through so-called stan­dard pro­tec­tion claus­es of the EU Com­mis­sion, in the pres­ence of cer­ti­fi­ca­tions or bind­ing inter­nal data pro­tec­tion reg­u­la­tions (Art. 44 to 49 GDPR, infor­ma­tion page of the EU Com­mis­sion: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection_de ).

Deletion of data

The data processed by us will be delet­ed in accor­dance with the legal require­ments as soon as the con­sent per­mit­ted for pro­cess­ing is revoked or oth­er per­mis­sions are no longer applic­a­ble (e.g. if the pur­pose of pro­cess­ing this data is no longer applic­a­ble or is not required for the purpose).

If the data are not delet­ed because they are required for oth­er legal­ly per­mis­si­ble pur­pos­es, their pro­cess­ing will be lim­it­ed to these pur­pos­es. In oth­er words, the data is blocked and not processed for oth­er pur­pos­es. This applies, for exam­ple, to data that must be kept for com­mer­cial or tax law rea­sons or whose stor­age is nec­es­sary to assert, exer­cise or defend legal claims or to pro­tect the rights of anoth­er nat­ur­al or legal person.

Our data pro­tec­tion infor­ma­tion may also con­tain fur­ther infor­ma­tion on the stor­age and dele­tion of data, which have pri­or­i­ty for the respec­tive processing.

Use of cookies

Cook­ies are text files that con­tain data from web­sites or domains vis­it­ed and are stored on the user’s com­put­er by a brows­er. A cook­ie is pri­mar­i­ly used to store infor­ma­tion about a user dur­ing or after their vis­it to an online offer. The stored infor­ma­tion can include, for exam­ple, the lan­guage set­tings on a web­site, the login sta­tus, a shop­ping cart or the loca­tion where a video was viewed. The term cook­ies also includes oth­er tech­nolo­gies that ful­fill the same func­tions as cook­ies (e.g. when user infor­ma­tion is stored using pseu­do­ny­mous online iden­ti­fiers, also known as “user IDs”)

A dis­tinc­tion is made between the fol­low­ing types of cook­ies and functions:

  • Tem­po­rary cook­ies (also: ses­sion cook­ies): Tem­po­rary cook­ies are delet­ed at the lat­est after a user has left an online offer and closed his browser.
  • Per­ma­nent cook­ies: Per­ma­nent cook­ies are saved even after the brows­er is closed. For exam­ple, the login sta­tus can be saved or pre­ferred con­tent can be dis­played direct­ly when the user vis­its a web­site again. The inter­ests of users who are used to mea­sure reach or for mar­ket­ing pur­pos­es can also be stored in such a cookie.
  • First par­ty cook­ies: First-par­ty cook­ies are set by ourselves.
  • Third-par­ty cook­ies (also: third-par­ty cook­ies) : Third-par­ty cook­ies are main­ly used by adver­tis­ers (so-called third par­ties) to process user information.
  • Nec­es­sary (also: essen­tial or absolute­ly nec­es­sary) cook­ies: On the one hand, cook­ies may be absolute­ly nec­es­sary for the oper­a­tion of a web­site (e.g. to save logins or oth­er user input or for secu­ri­ty reasons).
  • Sta­tis­tics, mar­ket­ing and per­son­al­iza­tion cook­ies : Fur­ther­more, cook­ies are usu­al­ly also used in the con­text of range mea­sure­ment and when the inter­ests of a user or his behav­ior (e.g. view­ing cer­tain con­tent, using func­tions, etc.) are stored in a user pro­file on indi­vid­ual web­sites. Such pro­files are used to show users, for exam­ple, con­tent that cor­re­sponds to their poten­tial inter­ests. This process is also referred to as “track­ing”, ie fol­low­ing up the poten­tial inter­ests of users. Inso­far as we use cook­ies or “track­ing” tech­nolo­gies, we will inform you sep­a­rate­ly in our data pro­tec­tion dec­la­ra­tion or in the con­text of obtain­ing consent.

Notes on legal bases: The legal basis on which we process your per­son­al data with the help of cook­ies depends on whether we ask for your con­sent. If this is the case and you con­sent to the use of cook­ies, the legal basis for pro­cess­ing your data is the declared con­sent. Oth­er­wise, the data processed with the help of cook­ies will be processed on the basis of our legit­i­mate inter­ests (e.g. in the com­mer­cial oper­a­tion of our online offer and its improve­ment) or, if the use of cook­ies is nec­es­sary, to ful­fill our con­trac­tu­al obligations.

Stor­age peri­od: If we do not pro­vide you with any explic­it infor­ma­tion on the stor­age dura­tion of per­ma­nent cook­ies (e.g. in the con­text of a so-called cook­ie opt-in), please assume that the stor­age dura­tion can be up to two years.

Gen­er­al infor­ma­tion on revo­ca­tion and objec­tion (opt-out): Depend­ing on whether the pro­cess­ing is based on con­sent or legal per­mis­sion, you have the option at any time to revoke your con­sent or to object to the pro­cess­ing of your data using cook­ie tech­nolo­gies (col­lec­tive­ly referred to as “opt-out”). You can first explain your objec­tion using the set­tings of your brows­er, e.g. by deac­ti­vat­ing the use of cook­ies (which can also restrict the func­tion­al­i­ty of our online offer). An objec­tion to the use of cook­ies for online mar­ket­ing pur­pos­es can also be made using a vari­ety of ser­vices, espe­cial­ly in the case of track­ing, via the web­sites https://optout.aboutads.info and https://www.youronlinechoices.com/ be explained. In addi­tion, you can receive fur­ther objec­tion notices in the con­text of the infor­ma­tion on the ser­vice providers and cook­ies used.

Pro­cess­ing of cook­ie data on the basis of con­sent : We use a pro­ce­dure for cook­ie con­sent man­age­ment, with­in the frame­work of which the con­sent of the user to the use of cook­ies or the pro­cess­ing and providers men­tioned in the con­text of the cook­ie con­sent man­age­ment pro­ce­dure can be obtained and revoked. The dec­la­ra­tion of con­sent is saved in order not to have to repeat the query again and to be able to prove the con­sent in accor­dance with the legal oblig­a­tion. The stor­age can take place on the serv­er side and / or in a cook­ie (so-called opt-in cook­ie, or with the help of com­pa­ra­ble tech­nolo­gies) in order to be able to assign the con­sent to a user or his device. Sub­ject to indi­vid­ual infor­ma­tion about the providers of cook­ie man­age­ment ser­vices, the fol­low­ing infor­ma­tion applies: The dura­tion of the stor­age of the con­sent can be up to two years. A pseu­do­ny­mous user iden­ti­fi­er is cre­at­ed and stored with the time of con­sent, infor­ma­tion on the scope of the con­sent (e.g. which cat­e­gories of cook­ies and / or ser­vice providers) as well as the brows­er, sys­tem and end device used.

  • Processed data types: Usage data (e.g. web­sites vis­it­ed, inter­est in con­tent, access times), meta / com­mu­ni­ca­tion data (e.g. device infor­ma­tion, IP addresses).
  • Affect­ed peo­ple: Users (e.g. web­site vis­i­tors, users of online services).
  • Legal basis: Con­sent (Art. 6 Para. 1 S. 1 lit. a. GDPR), Legit­i­mate Inter­ests (Art. 6 Para. 1 S. 1 lit. f. GDPR).

Plugins and embedded functions as well as content

We include func­tion­al and con­tent ele­ments in our online offer­ing that are obtained from the servers of their respec­tive providers (here­inafter referred to as “third-par­ty providers”). This can be, for exam­ple, graph­ics, videos or city maps (here­inafter uni­form­ly referred to as “con­tent”).

The inte­gra­tion always pre­sup­pos­es that the third-par­ty providers of this con­tent process the IP address of the user, since with­out the IP address they would not be able to send the con­tent to their brows­er. The IP address is there­fore required for the dis­play of this con­tent or func­tions. We strive to only use con­tent whose respec­tive providers only use the IP address to deliv­er the con­tent. Third-par­ty providers can also use so-called pix­el tags (invis­i­ble graph­ics, also known as “web bea­cons”) for sta­tis­ti­cal or mar­ket­ing pur­pos­es. The “pix­el tags” can be used to eval­u­ate infor­ma­tion such as vis­i­tor traf­fic on the pages of this web­site. The pseu­do­ny­mous infor­ma­tion can also be stored in cook­ies on the user’s device and con­tain, among oth­er things, tech­ni­cal infor­ma­tion about the brows­er and oper­at­ing sys­tem, the web­sites to be referred to, the time of vis­it and oth­er infor­ma­tion about the use of our online offer, as well as being linked to such infor­ma­tion from oth­er sources.

Notes on legal bases: If we ask users for their con­sent to the use of third-par­ty providers, the legal basis for pro­cess­ing data is con­sent. Oth­er­wise, user data will be processed on the basis of our legit­i­mate inter­ests (ie inter­est in effi­cient, eco­nom­i­cal and recip­i­ent-friend­ly ser­vices). In this con­text, we would like to draw your atten­tion to the infor­ma­tion on the use of cook­ies in this data pro­tec­tion declaration.

Inte­gra­tion of third-par­ty soft­ware, scripts or frame­works (e.g. jQuery): We inte­grate soft­ware into our online offer that we access from servers of oth­er providers (e.g. func­tion libraries that we use for the pur­pose of dis­play­ing or user-friend­li­ness of our online offer). The respec­tive providers col­lect the user’s IP address and can process it for the pur­pos­es of trans­mit­ting the soft­ware to the user’s brows­er and for secu­ri­ty pur­pos­es as well as for the eval­u­a­tion and opti­miza­tion of their offer.

Used ser­vices and ser­vice providers:

  • Font Awe­some: dis­play of fonts and sym­bols; Ser­vice provider: Fonti­cons, Inc. , 6 Porter Road Apart­ment 3R, Cam­bridge, MA 02140, USA; Web­site: https://fontawesome.com/ ; Data pro­tec­tion: https://fontawesome.com/privacy .
  • Open­StreetMap: We inte­grate the maps of the “Open­StreetMap” ser­vice, which are offered by the Open­StreetMap Foun­da­tion (OSMF) on the basis of the Open Data Com­mons Open Data­base License (ODbL). The user data is used by Open­StreetMap exclu­sive­ly for the pur­pose of dis­play­ing the map func­tions and for tem­porar­i­ly stor­ing the select­ed set­tings. This data may include, in par­tic­u­lar, the users’ IP address­es and loca­tion data, which, how­ev­er, are not col­lect­ed with­out their con­sent (usu­al­ly as part of the set­tings of their mobile devices). Ser­vice provider: Open­StreetMap Foun­da­tion (OSMF); Web­site: https://www.openstreetmap.de ; Data pro­tec­tion: https://wiki.openstreetmap.org/wiki/Privacy_Policy .
  • reCAPTCHA: We use “Google reCAPTCHA” (here­inafter “reCAPTCHA”) on our web­sites. The provider is Google Inc., 1600 Amphithe­ater Park­way, Moun­tain View, CA 94043, USA (“Google”).
    The pur­pose of reCAPTCHA is to check whether data is entered on our web­site (e.g. in a con­tact form) by a per­son or by an auto­mat­ed pro­gram. To do this, reCAPTCHA ana­lyzes the behav­ior of the web­site vis­i­tor based on var­i­ous char­ac­ter­is­tics. This analy­sis begins auto­mat­i­cal­ly as soon as the web­site vis­i­tor enters the web­site. For the analy­sis, reCAPTCHA eval­u­ates var­i­ous infor­ma­tion (e.g. IP address, length of stay of the web­site vis­i­tor on the web­site or mouse move­ments made by the user). The data col­lect­ed dur­ing the analy­sis are for­ward­ed to Google.
    The reCAPTCHA ana­lyzes run com­plete­ly in the back­ground. Web­site vis­i­tors are not informed that an analy­sis is tak­ing place.
    For more infor­ma­tion on Google reCAPTCHA and Google’s data pro­tec­tion dec­la­ra­tion, see the fol­low­ing links: https://policies.google.com/privacy?hl=de and https://www.google.com/recaptcha/intro/android.html.
    • Processed data types: usage data (e.g. web­sites vis­it­ed, inter­est in con­tent, access times), meta / com­mu­ni­ca­tion data (e.g. device infor­ma­tion, IP addresses).
    • Affect­ed per­sons: users (e.g. web­site vis­i­tors, users of online services).
    • Pur­pos­es of pro­cess­ing: Pro­vi­sion of our online offer and user-friend­li­ness, pro­vi­sion of con­trac­tu­al ser­vices and cus­tomer service.
    • Legal basis: Legit­i­mate inter­ests (Art. 6 Para. 1 S. 1 lit. f. GDPR).

Performing tasks according to the statutes or rules of procedure

We process the data of our mem­bers, sup­port­ers, inter­est­ed par­ties, busi­ness part­ners or oth­er per­sons (col­lec­tive­ly “Affect­ed”) when we are in a mem­ber­ship or oth­er busi­ness rela­tion­ship with them and per­form our tasks and are recip­i­ents of ser­vices and ben­e­fits. In addi­tion, we process the data of data sub­jects on the basis of our legit­i­mate inter­ests, e.g. when it comes to admin­is­tra­tive tasks or pub­lic relations.

The data processed here, the type, scope and pur­pose and the neces­si­ty of their pro­cess­ing are deter­mined by the under­ly­ing mem­ber­ship or con­trac­tu­al rela­tion­ship, from which the neces­si­ty of any data infor­ma­tion results (oth­er­wise we refer to the nec­es­sary data).

We delete data that is no longer required for our statu­to­ry and busi­ness pur­pos­es. This is deter­mined accord­ing to the respec­tive tasks and con­trac­tu­al rela­tion­ships. We keep the data for as long as they can be rel­e­vant for busi­ness trans­ac­tions as well as with regard to any war­ran­ty or lia­bil­i­ty oblig­a­tions on the basis of our legit­i­mate inter­est in their reg­u­la­tion. The need to store the data is checked reg­u­lar­ly; Oth­er­wise, the statu­to­ry reten­tion require­ments apply.

  • Processed data types: Inven­to­ry data (e.g. names, address­es), pay­ment data (e.g. bank details, invoic­es, pay­ment his­to­ry), con­tact details (e.g. e‑mail, tele­phone num­bers), con­tract data (e.g. sub­ject mat­ter of the con­tract, dura­tion, cus­tomer category).
  • Affect­ed peo­ple: Users (e.g. web­site vis­i­tors, users of online ser­vices), mem­bers, busi­ness and con­trac­tu­al partners.
  • Pur­pos­es of pro­cess­ing: Pro­vi­sion of con­trac­tu­al ser­vices and cus­tomer ser­vice, con­tact inquiries and com­mu­ni­ca­tion, admin­is­tra­tion and answer­ing of inquiries.
  • Legal basis: Ful­fill­ment of the con­tract and pre-con­trac­tu­al inquiries (Art. 6 Para. 1 S. 1 lit. b GDPR), legit­i­mate inter­ests (Art. 6 Para. 1 S. 1 lit. f. GDPR).

Provision of the online offer and web hosting

In order to be able to pro­vide our online offer safe­ly and effi­cient­ly, we use the ser­vices of one or more web host­ing providers from whose servers (or servers man­aged by them) the online offer can be accessed. For these pur­pos­es, we can use infra­struc­ture and plat­form ser­vices, com­put­ing capac­i­ty, stor­age space and data­base ser­vices as well as secu­ri­ty ser­vices and tech­ni­cal main­te­nance services.

The data processed in the con­text of the pro­vi­sion of the host­ing offer can include all infor­ma­tion relat­ing to the users of our online offer that arise in the con­text of use and com­mu­ni­ca­tion. This reg­u­lar­ly includes the IP address, which is nec­es­sary in order to be able to deliv­er the con­tent of online offers to browsers, and all entries made with­in our online offer or from websites.

Email send­ing and host­ing : The web host­ing ser­vices we use also include send­ing, receiv­ing and stor­ing emails. For these pur­pos­es, the address­es of the recip­i­ents and senders as well as oth­er infor­ma­tion relat­ing to the send­ing of e‑mails (e.g. the providers involved) and the con­tent of the respec­tive e‑mails are processed. The afore­men­tioned data can also be processed for the pur­pose of rec­og­niz­ing SPAM. We ask you to note that e‑mails on the Inter­net are gen­er­al­ly not sent in encrypt­ed form. As a rule, e‑mails are encrypt­ed while they are being trans­port­ed, but (if no so-called end-to-end encryp­tion method is used) not on the servers from which they are sent and received. We can there­fore not assume any respon­si­bil­i­ty for the trans­mis­sion path of the e‑mails between the sender and the receipt on our server.

  • Processed data types: Con­tent data (e.g. entries in online forms), usage data (e.g. web­sites vis­it­ed, inter­est in con­tent, access times), meta / com­mu­ni­ca­tion data (e.g. device infor­ma­tion, IP addresses).
  • Affect­ed peo­ple: Users (e.g. web­site vis­i­tors, users of online services).
  • Pur­pos­es of pro­cess­ing: Pro­vi­sion of our online offer and user-friendliness.
  • Legal basis: Legit­i­mate inter­ests (Art. 6 Para. 1 S. 1 lit. f. GDPR).

Contact and request management

When con­tact­ing us (e.g. via the con­tact form, email, tele­phone or via social media) as well as in the con­text of exist­ing user and busi­ness rela­tion­ships, the details of the inquir­ing per­sons are processed inso­far as this is nec­es­sary to answer the con­tact inquiries and any request­ed measures.

The answer­ing of the con­tact inquiries as well as the admin­is­tra­tion of con­tact and inquiry data in the con­text of con­trac­tu­al or pre-con­trac­tu­al rela­tion­ships is car­ried out to ful­fill our con­trac­tu­al oblig­a­tions or to answer (pre) con­trac­tu­al inquiries and oth­er­wise on the basis of the legit­i­mate inter­ests in answer­ing the inquiries and main­tain­ing User and busi­ness relationships.

  • Processed data types: Inven­to­ry data (e.g. names, address­es), con­tact data (e.g. e‑mail, tele­phone num­bers), con­tent data (e.g. entries in online forms).
  • Affect­ed peo­ple: Com­mu­ni­ca­tion partner.
  • Pur­pos­es of pro­cess­ing: Con­tact requests and communication.
  • Legal basis: Ful­fill­ment of the con­tract and pre-con­trac­tu­al inquiries (Art. 6 Para. 1 S. 1 lit. b GDPR), legit­i­mate inter­ests (Art. 6 Para. 1 S. 1 lit. f. GDPR).

Change and update of the data protection declaration

We ask you to inform your­self reg­u­lar­ly about the con­tent of our data pro­tec­tion dec­la­ra­tion. We will adapt the data pro­tec­tion dec­la­ra­tion as soon as the changes to the data pro­cess­ing car­ried out by us make this nec­es­sary. We will inform you as soon as the changes require your coöper­a­tion (e.g. con­sent) or oth­er indi­vid­ual notification.

If we pro­vide address­es and con­tact infor­ma­tion of com­pa­nies and orga­ni­za­tions in this data pro­tec­tion dec­la­ra­tion, please note that the address­es may change over time and ask you to check the infor­ma­tion before con­tact­ing us.

Rights of data subjects

As a data sub­ject, you have var­i­ous rights under the GDPR, which arise in par­tic­u­lar from Art. 15 to 21 GDPR:

  • Right of objec­tion: You have the right, for rea­sons that arise from your par­tic­u­lar sit­u­a­tion, to object at any time to the pro­cess­ing of your per­son­al data, which is based on Art. 6 Para. 1 lit. e or f GDPR takes place to object; this also applies to pro­fil­ing based on these pro­vi­sions. If the per­son­al data relat­ing to you are processed in order to oper­ate direct mail, you have the right to object at any time to the pro­cess­ing of the per­son­al data relat­ing to you for the pur­pose of such adver­tis­ing; this also applies to pro­fil­ing inso­far as it is asso­ci­at­ed with such direct advertising.
  • Right to with­draw con­sent: You have the right to with­draw your con­sent at any time.
  • Right of pro­vid­ing infor­ma­tion: You have the right to request con­fir­ma­tion as to whether the data in ques­tion is being processed and to request infor­ma­tion about this data as well as fur­ther infor­ma­tion and a copy of the data in accor­dance with the legal requirements.
  • Right to rec­ti­fi­ca­tion: In accor­dance with the legal require­ments, you have the right to request the com­ple­tion of the data relat­ing to you or the cor­rec­tion of incor­rect data relat­ing to you.
  • Right to dele­tion and restric­tion of pro­cess­ing: In accor­dance with the legal require­ments, you have the right to request that the data relat­ing to you be delet­ed imme­di­ate­ly or, alter­na­tive­ly, to request a restric­tion on the pro­cess­ing of the data in accor­dance with the legal requirements.
  • Right to data porta­bil­i­ty: You have the right to receive data con­cern­ing you that you have pro­vid­ed to us in accor­dance with the legal require­ments in a struc­tured, com­mon and machine-read­able for­mat or to request that it be trans­mit­ted to anoth­er per­son responsible.
  • Com­plaint to the super­vi­so­ry author­i­ty: With­out prej­u­dice to any oth­er admin­is­tra­tive or judi­cial rem­e­dy, you have the right to lodge a com­plaint with a super­vi­so­ry author­i­ty, in par­tic­u­lar in the mem­ber state of your habit­u­al res­i­dence, your place of work or the place of the alleged infringe­ment, if you are of the opin­ion that the pro­cess­ing of the per­son­al data con­cern­ing you is against the Vio­lates the require­ments of the GDPR.

Definitions of terms

This sec­tion gives you an overview of the terms used in this data pro­tec­tion dec­la­ra­tion. Many of the terms are tak­en from the law and pri­mar­i­ly defined in Art. 4 GDPR. The legal def­i­n­i­tions are bind­ing. The fol­low­ing expla­na­tions, on the oth­er hand, are pri­mar­i­ly intend­ed to aid under­stand­ing. The terms are sort­ed alphabetically.

  • Per­son­al data: “Per­son­al data” is all infor­ma­tion that relates to an iden­ti­fied or iden­ti­fi­able nat­ur­al per­son (here­inafter “data sub­ject”); A nat­ur­al per­son is regard­ed as iden­ti­fi­able who can be iden­ti­fied direct­ly or indi­rect­ly, in par­tic­u­lar by means of assign­ment to an iden­ti­fi­er such as a name, an iden­ti­fi­ca­tion num­ber, loca­tion data, an online iden­ti­fi­er (e.g. cook­ie) or one or more spe­cial fea­tures, which express the phys­i­cal, phys­i­o­log­i­cal, genet­ic, psy­cho­log­i­cal, eco­nom­ic, cul­tur­al or social iden­ti­ty of this nat­ur­al person.
  • Respon­si­ble: “Respon­si­ble” is the nat­ur­al or legal per­son, author­i­ty, insti­tu­tion or oth­er body that alone or joint­ly with oth­ers decides on the pur­pos­es and means of pro­cess­ing per­son­al data.
  • Pro­cess­ing: “Pro­cess­ing” is any process car­ried out with or with­out the help of auto­mat­ed process­es or any such series of process­es in con­nec­tion with per­son­al data. The term goes far and includes prac­ti­cal­ly every han­dling of data, be it the col­lec­tion, the eval­u­a­tion, the stor­age, the trans­mis­sion or the deletion.