Data Protection

1. An overview of data protection

General information

This information provides an easy-to-navigate overview of what will happen to your personal data when you visit this website. The term “personal data” refers to all data that can be used to personally identify you. For detailed information on data protection, please refer to our Data Protection Declaration, which is included below.

Data recording on this website

The responsible party for the recording of data on this website (i.e., the “controller”) is [Insert Controller Name/Company Name and Contact Information here].

The data on this website is processed by the website operator, whose contact information is available under the section “Information about the responsible party (referred to as the “controller” in the GDPR)” in this Privacy Policy.

How is your data recorded?

We collect your data as a result of your sharing your data with us. This may, for instance, be information you enter into our contact form.

Our IT systems will record other data automatically or after you consent to its recording during your website visit. This data primarily comprises technical information (e.g., web browser, operating system, or time the site was accessed). This information is recorded automatically when you access this website.

What are the purposes we use your data for?

A portion of the information is generated to guarantee the error-free provision of the website. Other data may be used to analyze your user patterns. If contracts can be concluded or initiated via the website, the transmitted data will also be processed for contract offers, orders, or other order inquiries.

What rights do you have regarding your information?

You have the right to receive information about the source, recipients, and purposes of your archived personal data at any time without having to pay a fee for such disclosures. You also have the right to demand that your data be rectified or erased. If you have consented to data processing, you have the option to revoke this consent at any time, which shall affect all future data processing. Moreover, you have the right to demand that the processing of your data be restricted under certain circumstances. Furthermore, you have the right to file a complaint with the competent supervisory authority.

Please do not hesitate to contact us at any time if you have questions about this or any other data protection related issues.

Analysis tools and third-party tools

There is a possibility that your browsing patterns will be statistically analyzed when you visit this website. Such analyses are performed primarily with what we refer to as analysis programs.

For detailed information about these analysis programs, please consult our Data Protection Declaration below.

2. Hosting

We are hosting our website's content with the following provider:

External Hosting

This website is hosted externally. Personal data collected on this website are stored on the host's servers. These may include, but are not limited to, IP addresses, contact requests, metadata and communications, contract information, contact information, names, web page access, and other data generated through a website.

The external hosting serves the purpose of fulfilling the contract with our potential and existing customers (Art. 6(1)(b) GDPR) and in the interest of secure, fast, and efficient provision of our online services by a professional provider (Art. 6(1)(f) GDPR). If appropriate consent has been obtained, the processing is carried out exclusively on the basis of Art. 6 (1)(a) GDPR and § 25 (1) TDDDG, insofar as the consent includes the storage of cookies or the access to information in the user's end device (e.g., device fingerprinting) within the meaning of the TDDDG. This consent can be revoked at any time.

Our host(s) will only process your data to the extent necessary to fulfill its performance obligations and to follow our instructions with respect to such data.

We are using the following host(s):

TichyPress André Brückner
Karlinekenweg 45
D-13156 Berlin

Data processing

We have entered into a Data Processing Agreement (DPA) for the use of the above-mentioned service. This is a contract required by data privacy laws, ensuring that they process the personal data of our website visitors solely according to our instructions and in compliance with the GDPR.

3. General information and mandatory information

Data protection

The operators of this website and its pages take the protection of your personal data very seriously. Therefore, we handle your personal data as confidential information and in compliance with the statutory data protection regulations and this Data Protection Declaration.

Whenever you use this website, a variety of personal information will be collected. Personal data comprises data that can be used to personally identify you. This Data Protection Declaration explains which data we collect as well as the purposes we use this data for. It also explains how, and for which purpose the information is collected.

We hereby inform you that the transmission of data via the Internet (i.e., through e-mail communications) may be prone to security vulnerabilities. It is not possible to completely protect data against access by third parties.

Information about the responsible party (referred to as the “controller” in the GDPR)

The data processing controller on this website is:

Annette Gabriele Bergmann
Nettestrasse 10
D-47929 Grefrath

Phone: +49 (0)1516 1616106
E-mail: info@annette-gabriele-bergmann.com

The controller is the natural person or legal entity that, solely or jointly with others, determines the purposes and means of the processing of personal data (e.g., names, email addresses, etc.).

Storage duration

Unless a more specific storage period has been specified in this privacy policy, your personal data will remain with us until the purpose for which it was collected no longer applies. If you assert a justified request for deletion or revoke your consent to data processing, your data will be deleted, unless we have other legally permissible reasons for storing your personal data (e.g., tax or commercial law retention periods); in the latter case, the deletion will take place after these reasons cease to apply.

General information on the legal basis for data processing on this website

If you have consented to data processing, we process your personal data based on Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR, if special categories of data are processed according to Art. 9(1) GDPR. In the case of explicit consent to the transfer of personal data to third countries, data processing is also based on Art. 49(1)(a) GDPR. If you have consented to the storage of cookies or to access information on your end device (e.g., via device fingerprinting), data processing is additionally based on § 25(1) TDDDG. Consent can be revoked at any time. If your data is required for the fulfillment of a contract or for the implementation of pre-contractual measures, we process your data based on Art. 6(1)(b) GDPR. Furthermore, if your data is required for the fulfillment of a legal obligation, we process it based on Art. 6(1)(c) GDPR. In addition, data processing may be carried out based on our legitimate interest according to Art. 6(1)(f) GDPR. Information on the relevant legal basis in each individual case is provided in the following paragraphs of this privacy policy.

Recipients of personal data

In the course of our business, we work with various external parties. Sometimes, this involves transferring personal data to these parties. We only disclose personal data to external parties when it's necessary for fulfilling a contract, when we're legally required to do so (e.g., disclosing data to tax authorities), if we have a legitimate interest in the disclosure under Article 6(1)(f) of the GDPR, or if another legal basis permits the disclosure of this data. When using processors, we only disclose our customers' personal data based on a valid data processing agreement. In cases of joint processing, a joint processing agreement is established.

Withdrawal of your consent to data processing

A wide range of data processing transactions are possible only subject to your express consent. You can also revoke at any time any consent you have already given us. This shall be without prejudice to the lawfulness of any data collection that occurred prior to your revocation.

Right to object to data processing in specific cases; right to object to direct marketing (Art. 21 GDPR)

If data is processed on the basis of Art. 6(1)(e) or (f) GDPR, you have the right, at any time, to object to the processing of your personal data based on grounds arising from your unique situation. This also applies to any profiling based on those provisions. To determine the legal basis on which any processing of data is based, please consult this data protection declaration. If you lodge an objection, we will no longer process your affected personal data unless we are able to present compelling legitimate grounds for the processing of your data that outweigh your interests, rights, and freedoms, or if the purpose of the processing is the assertion, exercise, or defense of legal claims (objection pursuant to Art. 21(1) GDPR).

If your personal data is being processed for direct marketing purposes, you have the right to object to the processing of your personal data for such marketing at any time. This also applies to profiling, to the extent that it is related to direct marketing. If you object, your personal data will no longer be processed for direct marketing purposes (objection pursuant to Art. 21(2) GDPR).

Right to file a complaint with the competent supervisory authority

In the event of GDPR violations, data subjects are entitled to file a complaint with a supervisory authority, particularly in the Member State where they usually reside, where they work, or where the alleged violation occurred. The right to file a complaint exists regardless of any other available administrative or judicial remedies.

Right to data portability

You have the right to have data that we process automatically based on your consent or in fulfillment of a contract handed over to you or to a third party in a common, machine-readable format. If you should request the direct transfer of data to another controller, this will only be done if it is technically feasible.

Information about, rectification, and erasure of data

Under the applicable statutory provisions, you have the right to request information about your archived personal data, their origin and recipients, as well as the purpose of processing your data at any time. You may also have the right to have your data rectified or erased. If you have questions about this or any other personal data matter, please do not hesitate to contact us at any time.

Right to request processing limitations

You have the right to request that we restrict the processing of your personal data at any time. The right to request restriction of processing applies in the following cases:

• If you dispute the accuracy of your data archived by us, we will generally require some time to verify this claim. While this investigation is ongoing, you have the right to request that we restrict the processing of your personal data.
• If your personal data has been processed unlawfully, you have the option to request that the processing of your data be restricted instead of requesting its deletion.
• If we no longer need your personal data and you need it to exercise, defend, or claim legal rights, you have the right to request that the processing of your personal data be restricted instead of erased.
• If you have raised an objection pursuant to Art. 21(1) GDPR, your rights and our rights will have to be weighed against each other. As long as it has not been determined whose interests prevail, you have the right to demand a restriction of the processing of your personal data.

If you have restricted the processing of your personal data, these data – with the exception of their archiving – may be processed only subject to your consent or to claim, exercise, or defend legal entitlements, or to protect the rights of other natural persons or legal entities, or for important public interest reasons cited by the European Union or a member state of the EU.

SSL and/or TLS encryption

For security reasons and to protect the transmission of confidential content, such as purchase orders or inquiries you submit to us as the website operator, this website uses either an SSL or a TLS encryption program. You can recognize an encrypted connection by checking whether the address line of the browser switches from “http://” to “https://” and also by the appearance of the lock icon in the browser line.

If SSL or TLS encryption is activated, data you transmit to us cannot be read by third parties.

Rejection of unsolicited emails

We hereby object to the use of contact information published in conjunction with the mandatory information to be provided in our Site Notice to send us promotional and informational material that we have not expressly requested. The operators of this website and its pages expressly reserve the right to take legal action in the event of the unsolicited sending of promotional information, for instance via SPAM messages.

4. Recording of data on this website

Cookies

Our websites and pages use what the industry refers to as “cookies.” Cookies are small data packages that do not cause any damage to your device. They are either stored temporarily for the duration of a session (session cookies) or they are permanently archived on your device (permanent cookies). Session cookies are automatically deleted once you terminate your visit. Permanent cookies remain archived on your device until you actively delete them, or they are automatically eradicated by your web browser.

Cookies can be issued by us (first-party cookies) or by third-party companies (so-called third-party cookies). Third-party cookies enable the integration of certain services of third-party companies into websites (e.g., cookies for handling payment services).

Cookies have a variety of functions. Many cookies are technically essential since certain website functions would not work in the absence of these cookies (e.g., the shopping cart function or the display of videos). Other cookies may be used to analyze user behavior or for promotional purposes.

Cookies that are necessary for the performance of electronic communication transactions, for the provision of certain functions you wish to use (e.g., the shopping cart function), or that are necessary for the optimization of the website (e.g., cookies that provide measurable insights into the web audience) shall be stored on the basis of Art. 6(1)(f) GDPR, unless a different legal basis is cited. The website operator has a legitimate interest in the storage of required cookies to ensure the technically flawless and optimized provision of the operator's services. If your consent to the storage of cookies and similar recognition technologies has been requested, processing occurs exclusively on the basis of the consent obtained (Art. 6(1)(a) GDPR and § 25 (1) TDDDG); this consent may be revoked at any time.

You can configure your browser to notify you whenever cookies are sent, and to only accept cookies in specific instances. You can also choose to reject cookies in certain cases or generally, or enable the automatic deletion of cookies when you close your browser. If cookies are disabled, the functionality of this website may be restricted.

If other cookies and services are used on this website, you can find this information in this privacy policy.

Consent with Borlabs Cookie

Our website uses Borlabs' consent technology to obtain your consent for the storage of certain cookies in your browser, or for the use of certain technologies, and for its documentation in compliance with data privacy regulations. The provider of this technology is Borlabs GmbH, Hamburger Str. 11, 22083 Hamburg, Germany (hereinafter referred to as Borlabs).

Whenever you visit our website, a Borlabs cookie will be stored in your browser, which archives any declarations or revocations of consent you have entered. These data are not shared with the provider of the Borlabs technology.

The recorded data will remain archived until you ask us to erase them, delete the Borlabs cookie on your own, or the purpose for storing the data no longer exists. This is without prejudice to any retention obligations mandated by law. To review the details of Borlabs’ data processing policies, please visit https://de.borlabs.io/kb/welche-daten-speichert-borlabs-cookie/

We use Borlabs cookie consent technology to obtain legally required declarations of consent for the use of cookies. The legal basis for using these cookies is Art. 6(1)(c) GDPR.

Server log files

The provider of this website and its pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. This information comprises:

• The type and version of the browser being used
• The used operating system
• Referrer URL
• The hostname of the accessing computer
• The time of the server inquiry
• The IP address

This data is not merged with other data sources.

This data is recorded on the basis of Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the technically flawless presentation and optimization of their website. To achieve this, server log files must be recorded.

Request by email, phone, or fax

If you contact us by email, telephone, or fax, your request, including all resulting personal data (name, request), will be stored and processed by us for the purpose of handling your request. We will not pass this data on without your consent.

These data are processed on the basis of Art. 6(1)(b) GDPR if your inquiry is related to the fulfillment of a contract or is required for pre-contractual measures. In all other cases, the data are processed on the basis of our legitimate interest in the effective handling of inquiries submitted to us (Art. 6(1)(f) GDPR) or on the basis of your consent (Art. 6(1)(a) GDPR) if it has been obtained; the consent can be revoked at any time.

The data you send us via contact requests will be stored by us until you request its deletion, revoke your consent to its storage, or the purpose for the data storage expires (e.g., after the completion of your request). Mandatory statutory provisions, particularly statutory retention periods, remain unaffected.

5. Analysis tools and advertising

Matomo

This website uses the open-source web analytics service Matomo.

Through Matomo, we can collect and analyze data on how visitors use our website. This helps us understand things like when specific pages were viewed and from what regions those views originated. Additionally, we collect various log files (like IP addresses, referring websites, browser, and operating system data) and can track whether website visitors complete certain actions (such as clicks, purchases, etc.).

The use of this analysis tool is based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in analyzing user behavior to optimize the operator’s web offerings and advertising. If appropriate consent has been obtained, the processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and § 25 (1) TDDDG, insofar as the consent includes the storage of cookies or access to information on the user's end device (e.g., device fingerprinting) within the meaning of the TDDDG. This consent can be revoked at any time.

IP anonymization

For analysis with Matomo, we use IP anonymization. Your IP address is shortened before analysis, so it can no longer be clearly assigned to you.

Analysis without cookies

We have configured Matomo so that it will not store cookies in your browser.

Hosting

We host Matomo exclusively on our own servers so that all analysis data remains with us and is not passed on.

6. Newsletter

Newsletter data

If you wish to subscribe to the newsletter offered on this website, we will require your email address and information to verify that you own the provided email address and consent to receiving the newsletter. No further data will be collected, or only voluntary data will be collected. We will use this data solely for sending the requested information and will not share it with any third parties.

The processing of the information entered into the newsletter subscription form will be carried out exclusively on the basis of your consent (Art. 6(1)(a) GDPR). You may revoke your consent to the archiving of data, your email address, and the use of this information for sending the newsletter at any time, for example, by clicking on the “Unsubscribe” link in the newsletter. This shall not affect the lawfulness of any data processing that has already taken place.

The data you provide to subscribe to our newsletter will be stored by us until you unsubscribe from the newsletter, or until the newsletter service provider does. Your data will be deleted from the newsletter distribution list once you unsubscribe or once the purpose for its storage ceases. We reserve the right to delete or block email addresses from our newsletter distribution list at our own discretion, within the scope of our legitimate interest in accordance with Art. 6(1)(f) GDPR.

Data stored with us for other purposes remains unaffected.

After you unsubscribe from the newsletter distribution list, your email address may be stored by us or the newsletter service provider in a blacklist, if such action is necessary to prevent future mailings. The data from the blacklist is used only for this purpose and not merged with other data. This serves both your interest and our interest in complying with the legal requirements when sending newsletters (legitimate interest within the meaning of Art. 6(1)(f) GDPR). The storage in the blacklist is indefinite. You may object to the storage if your interests outweigh our legitimate interest.

Newsletter mailing to existing customers

If you order goods or services from us and enter your email address, we may subsequently use this email address to send you newsletters, provided we inform you of this in advance. In such a case, the newsletter will only contain direct advertising for our own similar goods or services. You can unsubscribe from this newsletter at any time. There is a corresponding link in every newsletter for this purpose. In this case, the legal basis for sending the newsletter is Art. 6 (1)(f) GDPR in conjunction with Section 7 (3) of the German Unfair Competition Act (UWG).

After you unsubscribe from the newsletter distribution list, we may store your email address in a blacklist to prevent future mailings to you. The data from the blacklist will only be used for this purpose and will not be merged with other data. This serves both your interest and our interest in complying with the legal requirements when sending newsletters (legitimate interest within the meaning of Art. 6 (1)(f) GDPR). Storage in the blacklist is not limited in time. You can object to the storage if your interests outweigh our legitimate interest.

7. Plugins and Tools

Google Fonts (local embedding)

This website uses Google Fonts, a service provided by Google, to ensure consistent font display. These Google Fonts are installed locally, meaning no connection to Google's servers is established when using this application.

For more information on Google Fonts, please follow this link: https://developers.google.com/fonts/faq and consult Google’s Data Privacy Declaration at: https://policies.google.com/privacy?hl=en.

Ninja Firewall

We have integrated Ninja Firewall on this website. The provider is NinTechNet Limited, Unit 1603, 16th Floor, The L. Plaza 367 – 375 Queen‘s Road Central Sheung Wan, Hong Kong (hereinafter referred to as “Ninja Firewall”).

Ninja Firewall protects our website against undesirable access or malicious cyber-attacks. For this purpose, Ninja Firewall collects IP address, request, referrer, and the time of page access. Ninja Firewall is installed locally on our servers and does not transmit any personal data to the provider of the tool or other third parties.

We have enabled IP anonymization for Ninja Firewall, so the tool only collects IP addresses in a shortened form.

The use of Ninja Firewall is based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the most effective protection of his website against cyberattacks.