Data Protection and Privacy Policy

Dear visitors to our Internet portal,
In the following informational section, we would like to explain how your data is handled, so that you feel safe and comfortable when visiting our website.

General handling of your personal data
Protecting your privacy is very important to us. For this reason, we have designed our website so that it can be used anonymously. We use the information that we receive and store during your visit to our websites exclusively for internal business purposes and to improve the design of the websites. An exception is made if this is necessary to defend against attacks that constitute criminal offences or that impair the functionality of our website. For this purpose, we also store the IP address of your computer, for example, which is however evaluated anonymously. Data is not collected about individuals or their individual behaviour.

Responsible entity
The entity named in the imprint is responsible for the data collection and processing described below.

Storing the IP address
We store the IP address transmitted by your web browser for a period of seven days in the exclusive interest of being able to detect, limit and eliminate attacks on our websites. After this period of time has expired, we delete or anonymise the IP address. The legal basis for this is Article 6(1)(f) GDPR (EU General Data Protection Regulation).

Usage data
For statistical purposes, we store data on the individual accesses of our webpages to improve the quality of our websites. This data set consists of
•        the page from which the file was requested,
•        the name of the file,
•        the date and time of the request,
•        the amount of data transmitted,
•        the access status (file transmitted; file not found),
•        the description of the type of web browser used and
•        the IP address of the computer making the request shortened to the last three digits.
This data is only saved in anonymised form. This eliminates the creation of personalised user profiles.

Cookies
Our web service does not require the deployment of cookies. Cookies are small text files, which are stored on the user’s computer. They store information over a particular period of time and allow websites to identify the user’s computer. We refrain from using these types of cookies.

Personal information
We use the information that you provide when contacting us exclusively to process your request on the basis of Article 6(1) f. GDPR. The information will only be stored until the issue that initiated the contact attempt has been settled. Your data will not be forwarded to third parties.

Google Maps

This website uses Google Maps to provide maps and to create access routes. These Google services are provided and maintained by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. By using Google services information on your use there of (most notably the IP address of your computer) may be transferred to and stored on a Google Inc. server in the USA. We have no influence on how and to what extent Google Inc. processes and uses this information. You will find the terms of use for Google Maps at: http://www.google.com/intl/de_de/help/terms_maps.html. You will also find detailed information on Google Inc.’s privacy policy at: http://www.google.de/intl/de/policies/privacy/.
If you do not want Google Inc. to process and store your information, please deactivate the Java Script feature in your browser to access a limited view. The legal basis for the aforementioned data processing is Section. 6, Paragraph 1, Pg.1, lit. f of the German General Data Protection Regulation (due consideration of the balance of interests, based on our interest in providing you quick and efficient access routes).

Your rights as a user
The GDPR gives you certain rights as a website user in the processing of your personal data:

1. Right of access (Article 15 GDPR):
You have the right to obtain confirmation as to whether personal data concerning you is being processed. If this is the case, you have the right of access to this personal data and to the information listed in detail in Article 15 GDPR.
 
2. Right of rectification and erasure (Articles 16 and 17 GDPR):
You have the right to demand immediate correction of incorrect personal data concerning you and the completion of incomplete personal data, if necessary. You also have the right to demand that personal data concerning you is deleted immediately, insofar as one of the reasons described in detail in Article 17 GDPR applies, e.g. if the data is no longer needed for the purposes pursued.

3. Right to restriction of processing (Article 18 GDPR):
You have the right to obtain restriction of processing if one of the requirements listed in Article 18 GDPR applies, e.g. if you have objected to processing for the duration of any inspection.

4. Right of data portability (Article 20 GDPR):
In certain cases listed in detail in Article 20 GDPR, you have the right to obtain the personal data concerning you in a structured, commonly used and machine-readable format or to demand the transmission of this data to third party.  

5. Right to object (Article 21 GDPR):
If data is collected on the basis of Article 6(1)(f) (data processing to protect legitimate interests), you have the right to object to processing for reasons resulting from your particular situation. We will then no longer process personal data, unless there are provably urgent, justifiable reasons for this processing that override the interests, rights and freedoms of the person concerned or if processing serves the establishment, exercise or defence of legal claims.

6. Right to lodge a complaint with a supervisory authority

According to Article 77 GDPR, you have the right to lodge a complaint with a supervisory authority if you consider the processing of personal data concerning you as an infringement of data protection provisions. In particular, the right of complaint can be asserted to a supervisory authority in the Member State of your residence, of your work or of the location of the alleged violation.

Data protection officer
Our company data protection officer is available to provide information or suggestions on the topic of data protection:

Dr. Uwe Schläger
datenschutz nord GmbH
Website: www.datenschutz-nord.de
Email: office(at)datenschutz-nord.de
Telephone: 0421 69 66 32 0

Updated: may 2018