1. General Information

When using this website, various personal data is collected. The protection of this data is of high importance to us. Therefore, your data is handled discreetly and in accordance with legal data protection regulations as well as this privacy policy. The following information provides an overview of the processing (i.e., collection and use) of personal data during a visit to our website, contact initiation, and the options available to you.

2. Definitions

For this privacy policy, the following definitions apply as per the General Data Protection Regulation (GDPR) or Regulation (EU) 2016/679:

a) Personal Data
Any information that can identify you personally.

b) Processing
Any operation or set of operations performed on personal data, such as collection, recording, organization, structuring, storage, adaptation, alteration, retrieval, consultation, use, disclosure, dissemination, alignment, restriction, erasure, or destruction.

c) Controller
The natural or legal person, public authority, agency, or other body that determines the purposes and means of processing personal data.

d) Data Subject
Any identified or identifiable natural person whose personal data is processed.

e) Third Party
Any natural or legal person, public authority, agency, or body other than the data subject, controller, processor, and persons under the direct authority of the controller or processor.

f) Processor
A natural or legal person, public authority, agency, or other body that processes personal data on behalf of the controller.

g) Consent
A freely given, specific, informed, and unambiguous indication of the data subject's wishes, by which they signify agreement to the processing of personal data.

h) Third Country
A country outside the European Union (EU).

3. Controller for Data Processing

The contact details of the controller responsible for data processing in connection with this website can be found in the imprint.

4. Legal Basis for Processing

We process personal data in accordance with European and German data protection regulations, which means processing is carried out only if:

a) The data subject has given consent to the processing for one or more specific purposes (Art. 6(1)(a) GDPR).
b) Processing is necessary for the performance of a contract to which the data subject is a party (Art. 6(1)(b) GDPR).
c) Processing is necessary for compliance with a legal obligation (Art. 6(1)(c) GDPR).
d) Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party (Art. 6(1)(f) GDPR).

5. Rights of the Data Subject

The European legislator grants each data subject the following rights:

a) Right of Access
You have the right to obtain from the controller confirmation as to whether or not personal data concerning you is being processed, and, where that is the case, access to the personal data and information about its categories, source, recipients, processing purposes, and storage duration (Art. 15 GDPR).

b) Right to Rectification
You have the right to obtain the rectification of inaccurate personal data or the completion of incomplete personal data (Art. 16 GDPR).

c) Right to Erasure ("Right to be Forgotten")
You have the right to obtain the erasure of personal data under certain conditions (Art. 17 GDPR). This right may be restricted, for example, if the data is subject to statutory retention periods or necessary for the establishment, exercise, or defense of legal claims.

d) Right to Restriction of Processing
You have the right to obtain the restriction of processing under certain conditions (Art. 18 GDPR).

e) Notification Obligation
The controller must communicate any rectification or erasure of personal data or restriction of processing to each recipient to whom the personal data has been disclosed, unless this proves impossible or involves disproportionate effort (Art. 19 GDPR).

f) Right to Object
You have the right to object, on grounds relating to your particular situation, to the processing of personal data based on legitimate interests (Art. 21 GDPR).

g) Right to Data Portability
You have the right to receive the personal data concerning you in a structured, commonly used, and machine-readable format and to transmit those data to another controller where technically feasible (Art. 20 GDPR).

h) Right to Withdraw Consent
You can withdraw your consent at any time (Art. 7(3) GDPR). The withdrawal does not affect the lawfulness of processing based on consent before its withdrawal.

i) Right to Lodge a Complaint
If you believe that the processing of your personal data violates data protection regulations, you have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR).

6. Data Collection on Our Website

When visiting our website, personal data is collected as follows:

a) Informational Use
When you visit the website without contacting us, the following data is collected:

aa) Log File Data

• IP address
• Browser type and version
• Time of access
• Hostname of the accessing computer
• Website from which the user accessed our site
• Operating system used

This data is stored temporarily in server log files and deleted after 7 days. No personal evaluation is carried out.

bb) Order Processing
External service providers (e.g., web hosts) may process data on our behalf. They are contractually obliged to handle data securely and in compliance with data protection regulations.

cc) Processing Purpose and Legal Basis
Cookies are used to optimize and secure the website. Data processing through cookies is based on legitimate interests (Art. 6(1)(f) GDPR).

dd) Cookie Management
You can control cookie settings through your browser. Deactivating cookies may limit the functionality of the website.

7. Links to External Websites

Our website contains links to external websites. We have no influence over the processing of personal data on these external websites.

8. Disclosure of Personal Data to Third Parties

Personal data is only disclosed to third parties under the following conditions:

a) The data subject has given consent (Art. 6(1)(a) GDPR).
b) Disclosure is necessary for the performance of a contract (Art. 6(1)(b) GDPR).
c) There is a legal obligation for disclosure (Art. 6(1)(c) GDPR).
d) Disclosure is necessary for legitimate interests (Art. 6(1)(f) GDPR).

9. Data Transfer to Third Countries

Data is transferred to third countries only under the following conditions:

a) It is necessary for the performance of a contract or pre-contractual measures.
b) The data subject has given consent.
c) It is necessary for compliance with a legal obligation.
d) It is necessary for legitimate interests.
The transfer must comply with Art. 44-49 GDPR, ensuring an adequate level of data protection.

10. Data Security

The controller takes technical and organizational measures to protect personal data (Art. 32 GDPR). This includes SSL encryption on our website.

11. Updates and Changes to the Privacy Policy

This privacy policy is currently valid. The controller reserves the right to make changes to this privacy policy as necessary due to website updates, legal changes, or relevant jurisprudence.