§ 1 Preamble
The following provisions serve to provide information about the processing of personal data in accordance with the requirements of the General Data Protection Regulation (GDPR), in particular taking into account the information obligations under Articles 12 to 14 GDPR, as well as to provide information about the data subject rights existing under the GDPR in accordance with Articles 15 to 22 and Article 34 GDPR.
§ 2 Explanation of terms / definitions
With regard to the terms used in this declaration, we refer to Art. 4 DSGVO.
§ 3 Basic Data Protection Regulation
The full text of the General Data Protection Regulation is available on the Internet at https://eur-lex.europa.eu/legal-content/DE/TXT/PDF/?uri=CELEX:32016R0679&from=DE. If you have any further questions regarding the Basic Data Protection Regulation, please feel free to contact the Data Protection Officer in confidence at any time.
§ 4 Contact information on the responsible person
Managing Director: Olaf Hellmann
Bowl basket 19
Telephone: 0421 / 163 20 110
Fax: 0421 / 163 20 111
Local Court Bremen
HRA 27597 HB
§ 5 Supervisory Authority
State Commissioner for Data Protection and Freedom of Information of the Free Hanseatic City of Bremen:
Dr. Imke Sommer
Phone: +49 471 596 2010 or +49 421 361 2010
Fax: +49 421 496 18495
§ 6 Data protection officer in the company
Telephone: 0421 / 163 20 110
Fax: 0421 / 163 20 111
§ 7 Information on data collection, processing and use
We generally process your personal data only to provide and improve the services we offer you. These purposes include:
Provision of Services: We use the information you provide to us to provide the services you have requested; the legal basis is then Art. 6 (1) sentence 1 lit. b) DSGVO.
If you send us inquiries via the contact form, your information from the inquiry form, including the contact data you provided there, will be stored by us for the purpose of processing the inquiry and in case of follow-up questions; the legal basis is then Art. 6 para. 1 sentence 1 lit. b) DSGVO.
We will only process your personal data if we have a legal basis to do so. The legal basis is based on the purposes for which we have collected your personal data and need to use it, cf. Art. 6 DSGVO.
Similarly, we may process your personal data for one or more of the following reasons:
To comply with a legal obligation, Art. 6 (1) sentence 1 lit. c) DSGVO.
You have given us your consent to use your personal data (e.g. for mar-keting-related purposes), Art. 6 para. 1 sentence 1 lit. a) DSGVO.
It is in our legitimate interest (e.g. for administrative purposes), Art. 6 para. 1 sentence 1 lit. f) DSGVO.
We will not keep your data longer than is necessary for the purpose for which it is processed. To determine the appropriate retention period, we take into account the amount, nature and sensitivity of the personal data, the purpose for which we process your personal data and whether we can achieve that purpose by other means.
We must also consider the periods for which it may be necessary for us to retain your personal data in order to comply with our legal obligations or to process complaints and inquiries, as well as to protect our legal rights in the event of a claim being made.
When we no longer need your personal data, we will irretrievably delete or destroy it.
We will also consider whether and how we can minimize the personal information we use over time and whether we can anonymize your personal information so that it can no longer be associated with you or identify you as a result. In this case, we may use this information without prior notice to you.
§ 8 Data subject rights
As a data subject of a data processing operation, you have in particular the following rights under the General Data Protection Regulation (hereinafter also referred to as “data subject rights”): you have the right …
to demand accurate information, Art. 15 DSGVO
to demand the correction of your data, Art. 16 DSGVO
demand the deletion of your personal data, Art. 17 DSGVO
have the processing of your personal data restricted, Art. 18 DSGVO
request the return of your personal data in a standard electronic, machine-readable format, Art. 19 GDPR
object to the processing of your personal data with effect for the future, Art. 21 DSGVO
Not to be subject to processing based solely on automated processing, including profiling, Art. 22 DSGVO.
We have notified you without undue delay of any data protection breach that may result in a high risk to your personal rights and freedoms.
To exercise your data subject rights, please contact the offices listed under § 4 and § 5. Requests submitted electronically will generally be answered electronically, unless you have specified otherwise in your request.
If we have disclosed personal data to other bodies or recipients, we are obliged, as far as is technically possible and reasonable, to notify the recipients of the data of any correction, deletion and/or restriction of processing. Upon request, we will inform you of the respective recipients of the data.
§ 9 Use of the website
When you access our website, information of a general nature is automatically collected. This information (server log files) includes, for example, the type of web browser, the operating system used, the domain name of your Internet service provider and the like. This is exclusively information that does not allow any conclusions to be drawn about your person. This information is technically necessary in order to correctly deliver the content of web pages requested by you and is mandatory when using the Internet. Anonymous information of this kind is statistically evaluated by us in order to optimize our Internet presence and the technology behind it. The legal basis is Art. 6 para. 1 p. 1 lit. f DS-GVO.
If you contact us by e-mail or contact form, the information you provide will be stored for the purpose of processing the request and for possible follow-up questions. Personal data is collected by us if and to the extent that you voluntarily provide us with this data when contacting us, for example, via contact form or e-mail. The data you provide will only be used to process your requests and for possible follow-up questions and for possible contract fulfillment and contract execution. The legal basis for the processing is Art. 6 para. 1 p. 1 lit. b DS-GVO.
You can decide whether a unique web analysis cookie may be stored in your browser to enable the website operator to collect and analyze various statistical data.
Cookies cannot be used to run programs or deliver viruses to a computer. We use the information contained in cookies to facilitate your navigation and to enable the correct display of our web pages. Some of the cookies we use are deleted at the end of the browser session, i.e. after you close your browser (so-called session cookies). Other cookies remain on your terminal device and enable us to recognize your browser the next time you visit us (persistent cookies).
Under no circumstances will the data we collect be passed on to third parties or linked to personal data without your consent.
To protect the security of your data during transmission, we use state-of-the-art encryption methods (e.g. SSL) via HTTPS.
Our website uses Google (Universal) Analytics, a web analytics service provided by Google Ire-land Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google (Universal) Analytics uses methods that enable an analysis of your use of the website, such as so-called “cookies”, text files that are stored on your computer. The legal basis is Art. 6 (1) p. 1 lit. f DS-GVO, because the use of Google Analytics serves the selection of our legitimate interest in an optimized presentation of our offer, which prevails in the context of a balancing of interests.
What you can do if you do not want this:
You can prevent the collection of the data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout/eula.html?hl=de.
As an alternative to the browser plugin, you can click this link to prevent the collection by Google Analytics on this website in the future. This will place an opt-out cookie on your terminal device.
If you delete your cookies, you must click the link again.
We maintain online presences within social networks and platforms in order to communicate with the customers, interested parties and users active there and to be able to inform you about our services there. The legal basis for this is Art. 6 Para. 1 lit. f DS-GVO, as this serves to protect our legitimate interests in effective communication with customers and interested parties, which are outweighed in the context of a balancing of interests. When calling up the respective networks and platforms, the terms and conditions and data processing policies of their respective operators apply.
This site uses plugins of the social network Facebook, provider Facebook Inc, Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland integrated. You can recognize the Facebook plugins by the Facebook logo or the “Like” button (“Like”) on our page.
You can find an overview of the Facebook plugins here: https://developers.facebook.com/docs/plugins/
When you visit our pages, a direct connection is established between your browser and the Facebook server via the plugin. Facebook thereby receives the information that you have visited our site with your IP address. If you click the Facebook “Like” button while you are logged into your Facebook account, you can link the content of our pages on your Facebook profile.
This allows Facebook to associate the visit to our pages with your user account. We would like to point out that we, as the provider of the pages, have no knowledge of the content of the transmitted data or its use by Facebook.
If you do not want Facebook to be able to associate your visit to our pages with your Facebook user account, please log out of your Facebook user account.
Within our online offer, functions and contents of the service Instagram, offered by Instagram Inc, 1601 Willow Road, Menlo Park, CA, 94025, USA, are integrated.
This may include, for example, content such as images, videos or texts and buttons with which you can announce your liking of the content, the authors of the content or subscribe to our posts. If you are a member of the Instagram platform, Instagram can assign the call of the above content and functions to your profile.
If you do not want Instagram to be able to associate the visit to our pages with your Instagram user account, please log out of your Instagram user account.
We directly integrate videos stored at YouTube, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, into our site.
With this integration, content from the YouTube website is displayed in parts of a browser window. However, the YouTube videos are only called up by clicking on them separately.
If you call up our corresponding (sub-)page on which YouTube videos are integrated in this form, a connection to the YouTube servers is established and the content is displayed on the website by informing your browser.
When calling up the relevant pages, the IP address as well as the date and time of the request, time zone difference to Greenwich Mean Time (GMT), content of the request (specific Internet page), access status/HTTP status code, the amount of data transferred in each case in bytes, the website from which the request comes (link), the browser used, the operating system and its interface as well as the language and version of the browser software are transferred and thus communicated in particular. However, this information cannot be assigned to you unless you have logged in to YouTube or another Google service (e.g. Google+) before accessing the page or are permanently logged in. If you do not want this assignment, please log out of your user account.
As soon as you start the playback of an embedded video by clicking on it, Y-ouTube stores cookies on your device that do not contain any personally identifiable data unless you are currently logged in to a Google service. These cookies can be prevented by appropriate browser settings and extensions.
Link to opt-out: https://adssettings.google.com/authenticated
On our site, we use social plugins of the social network Pinterest, which is operated by Pinterest Inc, 635 High Street, Palo Alto, CA, 94301, USA (“Pinterest”).
When you call up a page that contains such a plugin, your browser establishes a direct connection to the Pinterest servers. The plugin transmits log data to the Pin-terest server in the USA. This log data may contain your IP address, the address of the visited websites that also contain Pinterest functions, type and settings of the browser, date and time of the request, your usage of Pinterest as well as cookies.
§ 10 Data transfer
The transfer of personal data to third parties is only permitted on the basis of legal permission or the consent of the person concerned, cf. Art. 6 DSGVO. We will only transfer your data to third parties if you have given us your express consent.
§ 11 Adaptation of the data protection declaration
We reserve the right to occasionally adapt this data protection declaration. For your renewed visit, the new data protection declaration will then apply accordingly.
§ 12 Legal protection
In the event of complaints, you can contact the competent supervisory authority of the Union or the member states at any time. For our company, the supervisory authority mentioned in § 5 (above) is responsible.
Last update / Status: July 2019