GDPR
Commitment
As a user of our website, you will receive all necessary information in this Privacy Statement about how, to what extent and for what purpose we or third-party providers collect data from you and use it.
The collection and use of your data is carried out strictly in accordance with the requirements of the EU General Data Protection Regulation (GDPR), the German data protection law in accordance with the Act to Adapt Data Protection Law to Regulation (EU) (DSAnpUG-EU) and the Telemedia Act (TMG) as far as applicable.
We are committed to the confidentiality of your personal data and therefore work strictly within the limits set by law.
The collection of this personal data takes place on a voluntary basis, as far as possible for us. We will also only pass this data on to third parties with your express consent.
We ensure a high level of security by using SSL encryption for particularly confidential data such as payment transactions or with regard to your enquiries to us.
At this point, we would like to draw your attention to the general dangers of Internet use, over which we have no influence. Particularly in e-mail traffic, your data is not secure without further precautions and may be collected by third parties under certain circumstances.
Terms used
“Personal data” means any information relating to an identified or identifiable natural person (hereinafter “data subject”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
“Processing” means any operation or set of operations which is carried out with or without the aid of automated processes and which involves personal data. The term reaches far and covers practically every handling of data.
“Controller” means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data.
Collaboration with processors and third parties
If, in the context of our processing, we disclose data to other persons and companies (processors or third parties), transmit them to them or otherwise grant them access to the data, this will only be on a basis of
a legal permission (for example, data to payment service provider required in accordance with Art. 6 para. 1 lit. b GDPR for performance of the contract)
you have consented
a legal obligation to do so or
on the basis of our legitimate interests (for example, the use of agents, web hosts, IT maintenance orders, etc.)
If we commission third parties to process data on the basis of a so-called "contract processing contract", this is done on the basis of Art. 28 GDPR.
Transfers to third countries
If we process data in a third country (i.e. outside the European Union (EU) or the European Economic Area (EEA) or if this is done in the context of the use of third party services or disclosure or transfer of data to third parties, this only occurs if it is:
for the fulfilment of our (pre)contractual obligations
on the basis of your consent
by virtue of a legal obligation, or
on the basis of our legitimate interests.
Subject to legal or contractual permissions, we process or allow the data to be processed in a third country only if the special requirements of Art. 44 ff. GDPR are met. This means that the processing takes place, for example, on the basis of special guarantees, such as the officially recognised determination of a data protection level corresponding to the EU (e.g. for the USA through the “Privacy Shield”) or the observance of officially recognised special contractual obligations (so-called “standard contractual clauses”).
Personal data
Every time a user accesses our website and every time a file is retrieved, data about this process is temporarily stored and processed in a log file. This data is only evaluated for statistical purposes and to improve the offer and then deleted. Any other use or disclosure to third parties will not take place. If we collect personal data, we do this in the scope of data avoidance and data economy only to the extent and for as long as necessary to use our website or as required by law. If we collect personal data – such as your name, address or e-mail address – this data collection is voluntary. This data will not be disclosed to third parties without your express consent. We take the protection of your personal data seriously and adhere strictly to the relevant legal regulations and this Privacy Statement when collecting and processing personal data.
Hosting
The hosting services we use serve to provide the following services:
Infrastructure and Platform Services
computing capacity
Disk space and database services
Security and technical maintenance
which we use for the purpose of operating this website.
Here, we or our hosting provider process inventory data, contact data, content data, contract data, usage data, meta and communication data of customers, interested parties and visitors to this website based on our legitimate interests in an efficient and secure provision of this online offer pursuant to Art. 6 para. 1 lit. f GDPR in connection with Art. 28 GDPR (conclusion of contract processing contract).
Cookies
When individual pages are called up, so-called temporary cookies are used to facilitate navigation. These session cookies contain no personal data and expire at the end of the session. We use cookies on our website to track unique visitors. We do not associate this information with personal data and do not pass it on to third parties. Under no circumstances are cookies used by us to bring malware or spyware to your computer.
Applicable legal basis
According to Art. 13 GDPR we inform you about the legal basis of our data processing. If the legal basis is not mentioned in the Privacy Statement, the following applies:
The legal basis for obtaining consent is Art. 6 para. 1 lit. a and Art. 7 GDPR.
The legal basis for the processing for the fulfilment of our services and the execution of contractual measures as well as the answering of inquiries is Art. 6 para. 1 lit. b GDPR.
The legal basis for the processing to fulfil our legal obligations is Art. 6 para. 1 lit. c GDPR.
The legal basis for the processing to safeguard our legitimate interests is Art. 6 Para. 1 lit. f GDPR.
Art. 6 para. 1 lit. d GDPR serves as a legal basis in the event that vital interests of the data subject or another natural person necessitate the processing of personal data.
Rights of data subjects
You have the right to request confirmation as to whether the data in question are being processed and to obtain information about this data and further information and a copy of the data in accordance with Art. 15 GDPR.
Pursuant to Art. 16 GDPR, you have the right to request the completion of data concerning you or the rectification of incorrect data concerning you.
Pursuant to Art. 17 EU GDPR, you have the right to demand that the relevant data be erased immediately or, alternatively, to demand a restriction on the processing of the data pursuant to Art. 18 GDPR.
You have the right to receive the data concerning you, which you have provided to us, in compliance with Art. 20 GDPR and to demand its transfer to other controllers.
Furthermore, you have the right pursuant to Art. 77 GDPR to lodge a complaint with the competent supervisory authority.
You have the right to withdraw consents granted pursuant to Art. 7 para. 3 GDPR with effect for the future.
You can object at any time to the future processing of the data concerning you in accordance with Art. 21 GDPR. The objection may in particular be lodged against processing for the purposes of direct marketing.
Google Maps
We use a plugin of the Internet service Google Maps on our website. Its operator is Google Inc. It is located in the USA, CA 94043, 1600 Amphitheatre Parkway, Mountain View. When you use Google Maps on our website, information about the use of this website and your IP address is transmitted to a Google server in the USA and also stored on this server. We have no knowledge of the exact content of the data transmitted, nor of its use by Google. In this context, the company denies the association of the data with information from other Google services and the collection of personal data. However, Google may transfer the information to third parties.
Responsible Person
Dr. Victoria Vu, LL.M. (London)
Rechtsanwältin (German qualified lawyer)
Hermine-von-Parish-Str. 46
81245 Munich
+ 49 (151) 524 150 85
info@corporate-law.legal
Imprint
Dr. Vu, LL.M. (London)
Rechtsanwältin
(German qualified lawyer)
Hermine-von-Parish-Str. 46
81245 Munich