Data Protection Policy
1. Data protection at a glance
The following policy provides a simple overview of what happens to your personal data when you visit our website. Personal data is all information with which you can be identified personally. Detailed information on the subject of data protection can be found in the data protection policy set out in the text below.
Data collection on our website
Who is responsible for data collection on this website?
The website operator carries out the data processing on this website. The website operator’s contact details can be found in the legal notice on this website.
How do we collect your data?
One way in which your data is collected is by you communicating it to us. This may include, for example, data that you enter into contact forms.
Other data is automatically collected by our IT systems when you visit our website. This is primarily technical data (e.g. internet browser, operating system or the time at which pages are visited). This data is collected automatically, as soon as you access our site.
What do we use your data for?
Some of the data is collected to ensure that the website is delivered free of faults. Other data may be used to analyse your user behaviour.
What rights do you have in relation to your data?
You have the right – at any time and free of charge – to obtain information about the origin, recipient and purpose of your stored personal data. You also have the right to demand that this data is corrected, blocked or deleted. For these purposes, and for any further questions in relation to the subject of data protection, please contact us at any time under the address provided in the legal notice. In addition, you have the right to make a complaint to the competent supervisory authority.
In certain circumstances, you also have the right to demand that the processing of your personal data is restricted. Details regarding this can be found in the data protection policy under “Right to restriction of data processing”.
Analytical tools and third party tools
When you visit our website, your surfing behaviour may be analysed statistically. This is mainly done using cookies and so-called analysis programmes. The analysis of your surfing behaviour usually takes place anonymously; surfing behaviour cannot be traced back to you. You can object to this analysis or prevent it by not using particular tools.
Detailed information on this can be found in the following data protection policy.
You can object to this analysis. We will inform you of the opportunities to make an objection in this data protection policy.
2. General information and obligatory information
The operator of this website takes the protection of your personal data very seriously. We deal with your personal data confidentially and in accordance with the statutory data protection provisions, as well as this data protection policy.
When you use this website, a variety of personal data is collected. Personal data is information with which you can be identified personally. This data protection policy explains what data we collect and what we use it for. It also explains how and for what purpose this is done.
Please note that data transmission via the internet (e.g. by email communication) may not be completely secure. It is not possible to completely protect data from access by third parties.
Information about the data controller
The data controller for this website is:
Susanne Merseburger Meckelfelder Weg 2a D-21079 Hamburg
Telephone: +49 40 I 23 80 58 78
The data controller is the natural or legal person who determines – either alone or together with others – the purposes and means of processing personal data (e.g. names, email addresses and similar).
Withdrawal of your consent to data processing
Many data processing operations are only permitted with your express consent. You can revoke given consent at any time. For this, an informal email communication to us will suffice. Revocation does not affect the legality of any data processing that took place prior to the revocation.
Right to object to data collection in special cases and to object to direct advertising (Article 21 of the General Data Protection Regulation (GDPR))
If data is processed on the basis of Article 6 (1) (e) or (f) GDPR, you have the right to object to the processing of your personal data on grounds relating to your particular situation; this also applies to any profiling carried out on the basis of these provisions. This relevant legal basis for data processing is contained in this data protection policy. If you object, we will no longer process your personal data unless we can show compelling legitimate reasons for doing so that outweigh your interests, rights and freedoms or if the processing serves to assert, exercise or defend legal rights (objection pursuant to Art. 21 (1) GDPR ).
If your personal data is processed for direct advertising purposes, you have the right to object to your personal data being processed for such advertising at any time; this also applies to profiling if it is associated with direct advertising. If you object, your personal data will subsequently no longer be used for the purpose of direct advertising (objection pursuant to Art. 21 (2) GDPR).
Right to make a complaint to the competent supervisory authority
In the event of an infringement of the GDPR, the data subject has the right to make a complaint to a supervisory authority, in particular in the member state of their ordinary residence, place of work or place of suspected infringement. The right to object exists without prejudice to any other administrative law or judicial legal remedies.
Right to the transfer of data
You have the right to demand that data, automatically processed by us on the basis of your consent or in the course of fulfilling a contract, is handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another data controller, this will only be done if it is technically feasible.
This site uses SSL/TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or requests that you send to us as the site operator. You can recognise an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and the lock symbol in your browser line.
When SSL/TLS encryption is activated, the data that you transmit to us cannot be read by third parties.
Access, blocking, erasure and correction
Applicable statutory provisions give you the right – at any time and free of charge – to obtain information about your stored personal data, its origin and recipient and the purpose of the data processing and, if applicable, the right to have this data corrected, blocked or erased. You can contact us at any time at the address given in our legal notice for this and other questions on the subject of personal data.
Right to restrict processing
You have the right to demand that the processing of your personal data is restricted. You can contact us in relation to this at any time at the address given in our legal notice. The right to have data processing restricted exists in the following cases:
- If you dispute the accuracy of the personal data we have saved about you, we usually need time to check this. During this period you have the right to demand that the processing of your data is restricted.
- If your personal data was/is processed unlawfully, you can demand that processing is restricted instead of the data being deleted.
- If we no longer require your personal data, but you need it in order to assert, defend or exercise legal rights, you have the right to demand that the processing of your personal data is restricted instead of your personal data being deleted.
- If you have made an objection pursuant to Art. 21 (1) GDPR, your interests must be weighed against ours. Until it is determined whose interests prevail, you have the right to restrict the processing of your personal data.
If you have restricted the processing of your personal data then, apart from the data being saved, it may only be processed with your consent, in order to assert, exercise or defend legal rights, to protect the rights of another natural or legal person or on the grounds of important public interest to the EU or a member state.
Objection to advertising emails
We hereby object to the use of the contact data that we are obliged to publish in our legal notice for the purpose of sending unsolicited advertising and informational material (e.g. by sending spam emails).
3. Data collection on our website
Our internet pages use so-called cookies. Cookies do not cause any damage to your computer or contain viruses. Cookies serve to make our website more user friendly, effective and secure. Cookies are small text files that are placed on your computer and saved by your browser.
Most of the cookies used by us are so-called “session cookies”. They are automatically deleted at the end of your visit to our website. Other cookies remain on your terminal until you delete them. These cookies enable us to recognise your browser when it next visits our website.
You can set your browser to inform you about cookies being placed and only permit cookies in individual cases, to accept cookies in particular cases or to generally exclude cookies, as well as to automatically delete cookies when the browser is closed. If cookies are deactivated it may restrict the functionality of this website.
Cookies that are necessary to carry out electronic communication processes or provide particular functions requested by you (e.g. the shopping basket function) are saved on the basis of Art. 6 (1) GDPR. The website operator has a legitimate interest in saving the cookies so that it can provide its services optimally and without error. If other cookies (e.g. cookies analysing surfing behaviour) are saved, this is covered in this data protection policy separately.
Server log files
The website provider automatically collects and saves information in so-called server log files that are transmitted to us automatically by your browser. This is:
- Browser type and version
- Operating system
- Referrer URL
- Host name of the computer accessing the website
- Time of server request
- IP address
This data is not collated with data from other sources.
This data is collected on the basis of Art. 6 (1) (f) GDPR. The website operator has a legitimate interest in the error free technical presentation and optimisation of its website and server log files must be collected for this purpose.
4. Analytical tools and advertisement
This website uses the WordPress tool, Stats, for the statistical analysis of visitor hits. The provider is Automattic Inc., 60 29th Street #343, San Francisco, CA 94110-4929, USA.
“WordPress Stats” cookies remain on your terminal until you delete them.
“Word Press Stats” cookies are saved and the analytical tool used on the basis of Art. 6 (1) (f) GDPR. The website operator has a legitimate interest in the anonymised analysis of user behaviour to optimise its website and advertising.
You can adjust your browser to inform you about cookies being placed and only permit them in individual cases, to accept cookies in particular cases or to generally exclude cookies, as well as to activate the automatic deletion of cookies when your browser is closed. Deactivating cookies may restrict the functionality of our website.
If you delete the cookies on your computer, you need to set the opt-out cookie again.
Cookie consent with Borlabs Cookie
Our website uses the cookie consent technology from Borlabs Cookie to obtain your consent to the storage of certain cookies in your browser and to document them in compliance with data protection regulations. The provider of this technology is Borlabs – Benjamin A. Bornschein, Georg-Wilhelm-Str. 17, 21107 Hamburg (hereinafter Borlabs).
When you enter our website, a Borlabs cookie is saved in your browser, in which the consent you have given or the revocation of this consent is saved. This data is not passed on to the Borlabs Cookie provider.
The recorded data is stored until you ask us to delete it or delete the Borlabs cookie yourself, or the purpose for data storage no longer applies. Mandatory statutory retention periods remain unaffected. Details on data processing by Borlabs Cookie can be found at https://borlabs.io/kb/what-information-does-borlabs-cookie-store/