Introduction
With the following data protection declaration, we would like to inform you about the types of your personal data (hereinafter also referred to as "data"), for what purposes and to what extent. purposes and to what extent. The data protection declaration applies to all processing carried out by us of personal data carried out by us, both in the context of the provision of our services and in particular on our websites, in mobile applications and within external online presences, such as our Social Media profiles (hereinafter collectively referred to as "Online Offerings").
The terms used are not gender-specific.
State: 15. September 2021
Table of contents
- Introduction
- Person in charge
- Processing overview
- Relevant legal bases
- Safety measures
- Transmission of personal data
- Data processing in third countries
- Data deletion
- Provision of the online offer and web hosting
- Blogs and publication media
- Presence in social networks (Social Media)
- Plugins and embedded functions and content
- Modification and update of the privacy policy
- Rights of the data subjects
- Definition of terms
Person in charge
Ramona Schwering
Hochstraße 67
42105 Wuppertal
Deutschland
E-Mail-address: hello@schweringramona.codes
Processing overview
The following overview summarizes the types of data processed and the purposes of their processing and refers to the data subjects
Types of data processed
- Contact details (e.g. e-mail, telephone numbers)
- Meta/communication data (e.g. device information, IP addresses).
- Usage data (e.g. web pages visited, interest in content, access times).
Categories of affected persons
- Communication partner
- User (z.B. Website visitors, users of online services)
Processing purposes
- Provision of our online offer and user friendliness
- Marketing
- Contact requests and communication
- Security measures
- Provision of contractual services and customer service
- Management and response to requests
Relevant legal bases
The following is an overview of the legal basis of the GDPR on the basis of which we process personal data. Please note that in addition to the provisions of the GDPR, national data protection regulations may apply in your or our country of residence or domicile. If, in addition, more specific legal bases are relevant in individual cases, we will inform you of these in the data protection declaration.
- Consent (Art. 6 para. 1 p. 1 lit. a. DSGVO) - The data subject has given his/her Consent to the processing of personal data concerning him or her for a specific purpose or several specific purposes given.
- Contract performance and pre-contractual requests (Art. 6 para. 1 p. 1 lit. b. DSGVO) - The processing is necessary for the performance of a contract to which the data subject is a party or for the performance of pre-contractual measures, which are carried out at the request of the data subject. The following is an overview of the legal basis of the GDPR on which we process personal data. process personal data. Please note that, in addition to the provisions of the GDPR, national data protection data protection regulations in your or our country of residence or domicile may apply. If, furthermore, in individual cases more specific legal bases are relevant, we will inform you of these in the data protection declaration.
- Legitimate interests (Art. 6 para. 1 p. 1 lit. f. DSGVO) - The processing is necessary for the Safeguarding the legitimate interests of the controller or of a third party, unless the interests or fundamental rights and freedoms of the data subject, which require the protection of personal Data prevail.
National data protection regulations in Germany: In addition to the data protection regulations of the General Data Protection Regulation, national regulations on data protection apply in Germany. These include in particular the Act on Protection against Misuse of Personal Data in Data Processing (Federal Data Protection Act - BDSG). In particular, the BDSG contains special regulations on the right to information, the right to erasure, the right to object, the processing of special categories of personal data, processing for other processing for other purposes and for transmission and automated decision-making in individual cases, including profiling. including profiling. Furthermore, it regulates data processing for purposes of the employment relationship (Section 26 of the BDSG), in particular with regard to the establishment, performance or termination of employment relationships as well as the consent of employees. Furthermore State data protection laws of the individual federal states may also apply.
Safety measures
We make decisions in accordance with the legal requirements, taking into account the state of the art, the implementation costs and the nature, scope, circumstances and purposes of the processing, as well as the different the different probabilities of occurrence and the extent of the threat to the rights and freedoms of natural of natural persons, appropriate technical and organizational measures shall be taken to ensure a level of level of protection.
The measures include, in particular, safeguarding the confidentiality, integrity and availability of data by controlling physical and electronic access to the data as well as the access, input, transfer, availability and separation of the data. access, entry, disclosure, availability assurance, and segregation. Furthermore, we have procedures in place to ensure the exercise of data subjects' rights, the deletion of data, and the response to the compromise of data. Furthermore, we take the protection of personal data into account already taken into account in the development and selection of hardware, software and processes in accordance with the principle of data protection, through technology design and through data protection-friendly default settings.
Transmission of personal data
In the course of our processing of personal data, it happens that the data is transmitted to other entities, companies, legally independent organizational units or persons or disclosed to them. disclosed to them. The recipients of this data may include, for example, IT task service providers or providers of services and content that are integrated into a website. In In such cases, we comply with the legal requirements and, in particular, conclude appropriate contracts or agreements that serve the protection of your data with the recipients of your data.
Data processing in third countries
If we process data in a third country (i.e., outside of the European Union (EU), the European Economic Area (EEA)) or the processing takes place in the context of the use of third-party services or the disclosure or the disclosure or transfer of data to other persons, entities or companies takes place, this shall only take place in accordance with the statutory requirements.
Subject to express consent or contractually or legally required transfer we process the data or have it processed only in third countries with a recognized level of data protection, contractual obligation through so-called standard protection clauses of the EU Commission, in the presence of certifications or binding internal data protection regulations (Art. 44 to 49 DSGVO, Information page of the EU Commission: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection_de).
Data deletion
The data processed by us will be deleted in accordance with the legal requirements as soon as their permitted for processing are revoked or other permissions cease to apply (e.g. if the purpose of processing this purpose of processing this data has ceased to apply or it is not required for the purpose).
The data processed by us will be deleted in accordance with the legal requirements as soon as their permitted for processing are revoked or other permissions cease to apply (e.g. if the purpose of processing this purpose of processing this data has ceased to apply or it is not required for the purpose). Data processing in third countries
Our data protection notices may also contain further information on the retention and deletion of data. which have priority for the respective processing operations.
Use of cookies
Cookies are text files that contain data from visited websites or domains and are stored by a browser on the user's computer. A cookie is primarily used to store information about a user during or after their visit within an online site. Stored information may include, for example, language settings on a website, login status, a shopping cart, or where a video was watched. We further include in the term cookies other technologies that perform the same functions as cookies (e.g. when user details are stored using pseudonymous online identifiers, also referred to as "user IDs"
The following cookie types and functions are distinguished :
- Temporary cookies (also: session cookies):Temporary cookies are deleted at the latest after a user has left an online offer and closed his browser.
- Permanent cookies remain even after the browser is closed stored. For example, the login status can be saved or preferred content can be displayed directly. when the user visits a website again. Likewise, the interests of users who go to the reach measurement or used for marketing purposes, are stored in such a cookie.First-Party-Cookies:
- First-Party-Cookies:First-Party-Cookies are set by ourselves.
- Third-Party-Cookies
- : Third-party cookies are Used mainly by advertisers (so-called third parties) to process user information.Necessary (also: essential or absolutely necessary) cookies:
- Necessary (also: essential or absolutely necessary) cookies:Cookies can be used to be absolutely necessary for the operation of a website (e.g. to enable logins or other user input). store or for reasons of security).
Notes on the Legal basis On what legal basis we collect your personal data process with the help of cookies depends on whether we ask you for consent. If this applies and you consent to the use of cookies, the legal basis for the processing of your data is the declared consent. Otherwise, the data processed with the help of cookies will be processed on the basis of our legitimate interests (e.g. in the business management of our online offering and its improvement) processed or, if the use of cookies is necessary to fulfill our contractual To fulfill obligations.
Storage duration:Unless we provide you with explicit information about the storage period of permanent cookies (e.g. within the scope of a so-called cookie opt-in), please assume that the Storage period can be up to two years.
General information on revocation and objection (Opt-Out): Depending on whether the processing is carried out on the basis of consent or legal authorization, you have at any time the Possibility to revoke a given consent or to object to the processing of your data by Cookie Technologies (collectively, the "Opt-Out"). You can make your objection first declare by means of the settings of your browser, e.g. by not allowing the use of cookies deactivate (whereby this may also restrict the functionality of our online offer). An objection to the use of cookies for online marketing purposes can also be made by means of a variety of of services, especially in the case of tracking, via the websites https://optout.aboutads.info und https://www.youronlinechoices.com/ be declared. In addition, you can enter further objection notices within the scope of the information on the used Service providers and cookies received.
- Types of data processed We implement a procedure for Save the language used - German or English. Subject to individual specifications of the Providers of cookie management services, the following notices apply: The duration of the storage of the Consent can last up to two years. Here, a pseudonymous user identifier is formed and with the date of consent, information about the scope of consent (e.g., which categories of cookies and/or service providers) as well as the browser, system and end device used.. Meta/communication data (e.g. device information, IP addresses)..
- privacyHosting26: User (z.B. Website visitors, users of online services).
- Legal basis Consent (Art. 6 Abs. 1 S. 1 lit. a. DSGVO), Legitimate interests (Art. 6 Abs. 1 S. 1 lit. f. DSGVO).
Provision of the online offer and web hosting
In order to be able to provide our online offer securely and efficiently, we make use of the services of one or more providers from whose servers (or servers managed by them) the online offer can be accessed. Online Offer can be accessed. For these purposes, we may use infrastructure and platform services, computing capacity, storage space and database services as well as security and technical technical maintenance services. The collection of data for the provision and use of the website and the processing of the data via an external hosting service provider is absolutely necessary for the operation of the website. The legal basis for processing is Art. 6 para. 1 p. 1 lit. f DSGVO.
The data processed in the course of providing the hosting service may include all data relating to the users of our online service. online offer, which accrue in the course of use and communication. This IP address, which is necessary to deliver the contents of online offers to browsers, and all information browser, and all entries made within our online offer or from websites. For hosting our website, we currently use the services of www.netlify.com (Netlify, Inc., 2325 3rd Street, Suite 215, San Francisco, 94107 CA). Netlify's servers are located in the USA. Therefore your data required for calling up the website (access data) is transmitted to the USA. The legal basis for the transmission is Art. 6 para. 1 p. 1 lit. f DSGVO. In order to ensure the protection of your personal rights also in the context of these data transfers, we make use of contractual relationships with Netlify, we make use of the standard contractual clauses of the EU Commission in accordance with Art. 46 para. 2 lit. c) DSGVO. These are available at https://www.netlify.com/legal/netlify-dpa.pdf, alternatively you can also request these documents from us by using the contact details below. You can object to the processing at any time. Please note the above information on your your right to object to this data protection declaration. You can send your objection to us as well as directly to Netlify.
Collection of access data and log files: We ourselves (or rather our web hosting provider) collect data on each access to the server (so-called server log files). The server log files may include the address and name of the requested web pages and files, date and time of the request, amount of data transferred, message about successful retrieval, browser type and version, the operating system of the user, referrer URL (the previously visited visited page) and usually IP addresses and the requesting provider belong.
The server log files may be used on the one hand for security purposes, e.g., to avoid overloading servers (especially in the case of abusive attacks, so-called DDoS attacks) and, on the on the other hand, to ensure the utilization of the servers and their stability.
- Types of data processed Content data (e.g. entries in online forms), Usage data (e.g. web pages visited, interest in content, access times)., Meta/communication data (e.g. device information, IP addresses).
- Affected persons User (z.B. Website visitors, users of online services).
- Purposes of processing Provision of our online offer and user friendliness.
- Legal basis Legitimate interests (Art. 6 para. 1 p. 1 lit. f. DSGVO)
Blogs and publication media
We use blogs or comparable means of online communication and publication (hereinafter referred to as the "publication medium"). The data of the readers are processed for the purposes of the publication medium only insofar only insofar as it is necessary for its presentation and the communication between authors and readers or for reasons of necessary for security reasons. For the rest, we refer to the information on the processing of visitors to of our publication medium within the framework of this data protection notice.
Comments and Contributions: : When users leave comments or other contributions, we may have their IP addresses stored based on our legitimate interests. This is done for our security, in case someone leaves illegal content in comments and posts (insults, forbidden political propaganda, etc.). In this case, we can be prosecuted ourselves for the comment or post and are therefore and are therefore interested in the identity of the author.Furthermore, we reserve the right, on the basis of our legitimate interests, to process the information of users for the purpose of spam detection.
On the same legal basis, we reserve the right, in the case of surveys, to store the IP addresses of users for the duration of the survey and to use cookies. duration and to use cookies in order to avoid multiple votes.
The personal information provided in the context of comments and contributions, any contact and Website information as well as the content information will be stored by us until the objection of the user. permanently stored.
- Types of data processed Inventory data (e.g. names, addresses), Content data (e.g. entries in online forms), Contact details (e.g. e-mail, telephone numbers), Usage data (e.g. web pages visited, interest in content, access times)., Meta/communication data (e.g. device information, IP addresses)..
- Affected persons User (z.B. Website visitors, users of online services).
- Purposes of processing Provision of contractual services and customer service, Feedback (e.g. collecting feedback via online form), Security measures, Management and response to requests
- Legal basis Contract performance and pre-contractual requests (Art. 6 para. 1 p. 1 lit. b. DSGVO) , Legitimate interests (Art. 6 para. 1 p. 1 lit. f. DSGVO)
Presence in social networks (Social Media)
We maintain online presences within social networks and in this context process data of the users in order to communicate with the users active there or to offer information about us.
We would like to point out that user data may be processed outside the European Union. can be processed. This may result in risks for the users, because, for example, the enforcement of the rights of the users could be made more difficult.
Furthermore, the data of users within social networks are usually processed for market research and Advertising purposes processed. Thus, for example, on the basis of the usage behavior and resulting interests of the users can be used to create usage profiles. The usage profiles can in turn be used, for example, to advertisements within and outside the networks that are presumed to correspond to the interests of the users. correspond to the interests of the users. For these purposes, cookies are usually stored on the users' computers, in which the usage behavior and interests of the users are stored. Furthermore, the usage profiles may also contain data may also be stored in the usage profiles irrespective of the devices used by the users (in particular, if the users are are members of the respective platforms and are logged in to them).
For a detailed presentation of the respective forms of processing and the possibilities of objection (opt-out), we refer to the privacy statements and information provided by the operators of the respective networks.
Also in the case of requests for information and the assertion of data subject rights, we would like to point out that these can be asserted most effectively with the providers. Only the providers have access to the to the users' data and can take appropriate measures and provide information directly. Should you still need help, then you can contact us.
- Types of data processed Contact details (e.g. e-mail, telephone numbers), Content data (e.g. entries in online forms), Usage data (e.g. web pages visited, interest in content, access times)., Meta/communication data (e.g. device information, IP addresses)..
- Affected persons User (z.B. Website visitors, users of online services).
- Purposes of processing Contact requests and communication, Feedback (e.g. collecting feedback via online form), Marketing.
- Legal basis Legitimate interests (Art. 6 para. 1 p. 1 lit. f. DSGVO)
Services used and service providers:
- LinkedIn: Social Network; Service provider: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Irland; Website https://www.linkedin.com; Privacy notice https://www.linkedin.com/legal/privacy-policy; Possibility of objection (Opt-Out) https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.
- Twitter: Social Network; Service provider Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2 D02 AX07, Irland, Mutterunternehmen: Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA; Privacy notice: https://twitter.com/de/privacy, Settings https://twitter.com/personalization.
- Xing: Social Network; Service provider: XING AG, Dammtorstraße 29-32, 20354 Hamburg, Deutschland; Website: https://www.xing.de; Privacy notice: https://privacy.xing.com/de/datenschutzerklaerung.
Plugins and embedded functions and content
We include in our online offer functional and content elements that are obtained from the servers of their respective providers (hereinafter referred to as "third-party providers"). These can be, for example. Graphics, videos or city maps act (hereinafter uniformly referred to as "content").
The integration always requires that the third party providers of this content process the IP address of the users process, since without the IP address they could not send the content to their browser. The IP address is thus necessary for the presentation of these contents or functions. We endeavor to use only such content whose respective providers only use the IP address to deliver the content. Third-party providers may also use so-called pixel tags (invisible graphics, also known as "web beacons") for statistical or marketing purposes. The "pixel tags" can be used to collect information such as the visitor traffic on the pages of this website, can be evaluated. The pseudonymous information can also be stored in cookies on the user's device and contain, among other things, technical information about the browser and operating system, referring websites, time of visit and other information about the use of our online of our online offer as well as be linked to such information from other sources.
Notes on legal basis Insofar as we ask users for their consent to use the Third Party Providers, the legal basis for the processing of data is consent. Otherwise the users' data on the basis of our legitimate interests (i.e. interest in efficient, economic and recipient-friendly services) are processed. In this context, we would like to also refer to the information on the use of cookies in this privacy policy.
- Types of data processed Usage data (e.g. web pages visited, interest in content, access times)., Meta/communication data (e.g. device information, IP addresses)., Inventory data (e.g. names, addresses), Contact details (e.g. e-mail, telephone numbers), Content data (e.g. entries in online forms).
- Affected persons User (z.B. Website visitors, users of online services).
- Purposes of processing Provision of our online offer and user friendliness, Provision of contractual services and customer service.
- Legal basis Legitimate interests (Art. 6 para. 1 p. 1 lit. f. DSGVO), Einwilligung (Art. 6 Abs. 1 S. 1 lit. a. DSGVO), Vertragserfüllung und vorvertragliche Anfragen (Art. 6 Abs. 1 S. 1 lit. b. DSGVO).
Services used and service providers:
- Google Fonts: We integrate the fonts ("Google Fonts") of the provider Google, whereby the data of the user solely for the purpose of displaying the fonts in the user's browser are used. The integration is based on our legitimate interests in a technically safe, maintenance-free and efficient use of fonts, their uniform display and the possible taking into account possible restrictions under licensing law for their integration. Service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; Website: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland, Mutterunternehmen: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; Website: https://fonts.google.com/; Privacy notice: https://policies.google.com/privacy.
- YouTube-Videos: Video content; Service provider: : Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland, Mutterunternehmen: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; Website: https://www.youtube.com; Datenschutzerklärung: https://policies.google.com/privacy; Widerspruchsmöglichkeit (Opt-Out): Opt-Out-Plugin: https://tools.google.com/dlpage/gaoptout?hl=de, Einstellungen für die Darstellung von Werbeeinblendungen: https://adssettings.google.com/authenticated.
Modification and update of the privacy policy
We ask you to regularly check the content of our privacy policy. We adapt the Privacy Policy as soon as the changes in the data processing carried out by us make this necessary. make this necessary. We will inform you as soon as the changes require an act of cooperation on your part (e.g. consent) or other individual notification is required.
Where we provide addresses and contact information of companies and organizations, we ask you to note that addresses may change over time and ask you to review the to verify the information before contacting us.
Rights of the data subjects
As a data subject, you are entitled to various rights under the GDPR, which arise in particular from Art. 15 to 21 GDPR:
- Right to object: You have the right to object, on grounds relating to your particular situation object at any time to the processing of personal data relating to you which is carried out on the basis of Article 6 (1) lit. e or f DSGVO; this also applies to profiling based on these provisions. Provisions based profiling. If the personal data concerning you is processed for the purpose of direct marketing, you have the right to object at any time to the processing of your personal data concerning you for the purpose of such advertising; this also applies to profiling, insofar as it is related to such profiling, insofar as it is related to such direct marketing.
- Right of revocation for consents: You have the right to revoke consents granted at any time.
- Right of access: You have the right to ask for confirmation as to whether relevant data are processed and to information about these data as well as further information and copy of the data in accordance with the legal requirements.
- Right to rectification: You have the right, in accordance with the law, to request the completion of the data concerning you or the correction of incorrect data concerning you. demand.
- Right to erasure and restriction of processing: You have in accordance with the legal requirements, the right to demand that data relating to you be deleted without delay or, alternatively alternatively, in accordance with the legal requirements, to restrict the processing of the data. demand. Right to object: You have the right to object, on grounds relating to your particular situation object at any time to the processing of personal data relating to you which is carried out on the basis of Article 6 (1) lit. e or f DSGVO; this also applies to profiling based on these provisions. Provisions based profiling. If the personal data concerning you is processed for the purpose of direct marketing, you have the right to object at any time to the processing of your personal data concerning you for the purpose of such advertising; this also applies to profiling, insofar as it is related to such
- Right to data portability: You have the right to request data concerning you that you have provided to us provided to us in accordance with the legal requirements in a structured, common and machine-readable format or to request its transfer to another responsible party.
- Complaint to supervisory authority: You have, without prejudice to any other administrative or judicial remedy, the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, your place of work or the place of the alleged alleged infringement, if you consider that the processing of personal data relating to you infringes the personal data is in breach of the requirements of the GDPR.
Definition of terms
This section provides you with an overview of the terms used in this privacy statement. Terminology. Many of the terms are taken from the law and defined primarily in Art. 4 of the GDPR. The legal definitions are binding. The following explanations, on the other hand, are intended primarily for understanding serve. The terms are sorted alphabetically.
- Personal Data: "Personal Data" means any information relating to. an identified or identifiable natural person (hereinafter referred to as "data subject"); an identifiable is a natural person who can be identified, directly or indirectly, in particular by means of an association with an identifier such as a name, an identification number, location data, an online identifier (e.g. cookie) or to one or more special characteristics that are an expression of the physical, physiological, genetic or mental characteristics of the person. physical, physiological, genetic, mental, economic, cultural or social identity of that natural of this natural person.
- Responsible: As "responsible person" is the natural or legal person, authority, agency or other body which alone or jointly with others determines the purposes and means of the processing of personal data.
- Processing: "Processing" shall mean any operation or set of operations which is performed with or performed with or without the aid of automated procedures or any such series of procedures in connection with personal data. The term ranges widely and includes virtually any handling of data, be it collection, evaluation, storage, transmission or deletion.
Erstellt mit kostenlosem Datenschutz-Generator.de von Dr. Thomas Schwenke