collection, processing and use of personal data

This data protection declaration explains to you the type, scope and purpose of the processing of personal data (hereinafter referred to as "data") within our online offer and the associated websites, functions and contents as well as external online presences, e.g. our social media profile. (hereinafter jointly referred to as "online offer"). With regard to the terms used, such as "processing" or "person responsible", we refer to the definitions in Art. 4 of the Basic Data Protection Ordinance (DSGVO).

 

person responsible

Kai Vöckler

Nordring. 56
63067 Offenbach
kai@voeckler.de

 

types of data processed:

- inventory data (e.g., names, addresses).

- Contact details (e.g., e-mail, telephone numbers).

- Content data (e.g., text input, photographs, videos).

- Usage data (e.g., visited websites, interest in content, access times).

- Meta/communication data (e.g., device information, IP addresses).

 

Categories of affected persons

Visitors and users of the online offer (hereinafter we refer to the affected persons in summary also as "users").

 

Purpose of the processing

- Provision of the online offer, its functions and contents.

- Response to contact requests and communication with users.

- Security measures.

- Reach measurement/Marketing

 

Terms used

"personal data" are all information relating to an identified or identifiable natural person (hereinafter referred to as "data subject");  a natural person is considered as identifiable, which can be identified directly or indirectly, in particular by means of assignment to an identifier such as a name, to an identification number, to location data, to an online identifier (eg cookie) or to one or more special features,  that express the physical, physiological, genetic, mental, economic, cultural or social identity of this natural person.  "Processing" means any process performed with or without the aid of automated procedures or any such process associated with personal data.  The term goes far and includes virtually every handling of data.  "Responsible person" means the natural or legal person, public authority, body or body that decides, alone or in concert with others, on the purposes and means of processing personal data. 

 

Relevant legal bases

In accordance with Art. 13 GDPR, we inform you about the legal basis of our data processing.  Unless the legal basis in the data protection declaration is mentioned, the following applies: The legal basis for obtaining consent is Article 6 (1) lit.  a and Art. 7 DSGVO, the legal basis for the processing for the performance of our services and the execution of contractual measures as well as the response to inquiries is Art. 6 (1) lit.  b DSGVO, the legal basis for processing in order to fulfill our legal obligations is Art. 6 (1) lit.  c DSGVO, and the legal basis for processing in order to safeguard our legitimate interests is Article 6 (1) lit.  f DSGVO.  In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 para. 1 lit.  d DSGVO as legal basis. 

 

Collaboration with processors and third parties

If, in the course of our processing, we disclose data to other persons and companies (contract processors or third parties), transmit them to them or otherwise grant access to the data, this is done only on the basis of a legal permit (eg if a transmission  the data to third parties, as to payment service providers, in accordance with Article 6 paragraph 1 letter b DSGVO is required to fulfill the contract), you have consented to a legal obligation or based on our legitimate interests (eg the use of agents, webhosters  , Etc.).  If we commission third parties to process data on the basis of a so-called "contract processing contract", this is done on the basis of Art. 28 GDPR.

 

Relevant legal bases

In accordance with Art. 13 DSGVO, we inform you of the legal bases of our data processing. If the legal basis is not mentioned in the data protection declaration, the following applies: The legal basis for obtaining consents is Art. 6 para. 1 lit. a and Art. 7 DSGVO, the legal basis for processing for the performance of our services and performance of contractual measures as well as for answering inquiries is Art. 6 para. 1 lit. b DSGVO, the legal basis for processing to fulfil our legal obligations is Art. 6 para. 1 lit. c DSGVO, and the legal basis for processing to protect our legitimate interests is Art. 6 para. 1 lit. f DSGVO. In the event that the vital interests of the data subject or another natural person require the processing of personal data, Article 6(1)(d) DSGVO serves as the legal basis.

 

Collaboration with processors and third parties

If, in the course of our processing, we disclose data to other persons and companies (contract processors or third parties), transmit them to them or otherwise grant access to the data, this is done only on the basis of a legal permit (eg if a transmission  the data to third parties, as to payment service providers, in accordance with Article 6 paragraph 1 letter b DSGVO is required to fulfill the contract), you have consented to a legal obligation or based on our legitimate interests (eg the use of agents, webhosters  , Etc.).  If we commission third parties to process data on the basis of a so-called "contract processing contract", this is done on the basis of Art. 28 GDPR.

 

Transmission to third countries

If we process data in a third country (i.e. outside the European Union (EU) or the European Economic Area (EEA)) or if this occurs in the context of the use of third-party services or disclosure or transfer of data to third parties, this shall only take place if it occurs in order to fulfil our (pre)contractual obligations, on the basis of your consent, on the basis of a legal obligation or on the basis of our legitimate interests. Subject to legal or contractual permissions, we process or leave the data in a third country only if the special requirements of Art. 44 ff. Process DSGVO. This means, for example, processing is carried out on the basis of special guarantees, such as the officially recognised determination of a data protection level corresponding to the EU (e.g. for the USA by the "Privacy Shield") or compliance with officially recognised special contractual obligations (so-called "standard contractual clauses").

 

Rights of data subjects

You have the right to request confirmation as to whether the data concerned are being processed and to request information about these data as well as further information and a copy of the data in accordance with Art. 15 DSGVO. Sie have correspondingly. In accordance with Article 16 of the DSBER, you have the right to request the completion of data concerning you or the correction of inaccurate data concerning you. Sie have the right, in accordance with Art. 17 DSGVO, to demand that relevant data be deleted immediately or, alternatively, to demand a restriction on the processing of the data in accordance with Art. 18 DSGVO. Sie have the right to request that the data concerning you that you have provided to us be received in accordance with Art. 20 DSGVO and to request its transmission to other persons responsible. Sie also have the right to file a complaint with the competent supervisory authority pursuant to Art. 77 DSGVO.