This data protection declaration informs users about the type, scope and for what purpose data within our online offer and the associated websites, functions and contents as well as external online presences, such as our Social Media Profile (hereinafter jointly referred to as "online offer"), are collected and used. The collection and use of your data is carried out strictly in accordance with the requirements of the EU Basic Data Protection Regulation (Regulation (EU) 2016/679 of the European Parliament and Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data, on the free movement of data and on the repeal of Directive 95/46/EC - GDPR), the Federal Data Protection Act (BDSG) and the Telemedia Act (TMG).
Represented by the managing directors:
Jørn Alraun, Klaus J. Buß, Prof. Franka Futterlieb, Prof. Dr. Gesche Joost, Maxim Loick, Stephan Noller
Register court: Amtsgericht Berlin-Charlottenburg
Register-Nr.: HRB 181793
WEEE-Reg-Nr.: DE 31872208
Scope of processing of personal data
You can use our website without giving any personal data. If the processing of personal data is necessary and there is no legal basis for such processing, we always obtain the consent of the data subject.
Legal basis for the processing of personal data
The legal basis for Consent of the data subject is Art. 6 para. 1 lit. a EU Data Protection Regulation
(GDPR) processing of personal data used for the performance of a contract, its terms and conditions, its terms and conditions, etc.
- The party to the contract is the person concerned, is Art. 6 para. 1 lit. b GDPR. This also applies to processing operations that are necessary to carry out pre-contractual measures.
- Processing of personal data for the fulfilment of a legal obligation is Art. 6 para. 1 lit. c GDPR
- Processing of personal data required to protect the vital interests of the data subject or another natural person serves as the legal basis under Article 6(1)(d) of the DSBER.
If processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the first-mentioned interest, Art. 6 para. 1 lit. f GDPR serves as the legal basis for processing.
Data erasure and storage time
Provision of the website
Our website can be used without disclosing the identity of the visitor. When you visit our website, the browser automatically sends information to the website server. This information is temporarily stored in a so-called log file. The following information is recorded without your intervention and stored until it is automatically deleted:
- IP address of the requesting computer,
- Date and time of access,
- Name and URL of the retrieved file,
- Website from which access is made (referrer URL),
- Browser and, if applicable, the operating system of your computer as well as the name of your access provider.
- The mentioned data will be processed by us for the following purposes:
- Ensuring a smooth connection of the website,
- Ensuring comfortable use of our website,
- evaluation of system security and stability as well as
- for other administrative purposes.
The legal basis for data processing is Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interest follows from the purposes listed above for data collection. Under no circumstances do we use the data collected for the purpose of drawing conclusions about you personally.
Duration of storage
The data will be deleted as soon as they are no longer necessary to achieve the purpose for which they were collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended.
Possibility of opposition and elimination
The collection of data for the provision of the website and the storage of data in log files is absolutely necessary for the operation of the website. Consequently, there is no possibility of objection on the part of the user.
The hosting services we use serve to provide the following services: Infrastructure and platform services, computing capacity, storage space and database services, security services and technical maintenance services that we use for the purpose of operating this online offering.
We or our hosting provider process inventory data, contact data, content data, contract data, usage data, meta- and communication data of customers, interested parties and visitors of this online offer on the basis of our legitimate interests in an efficient and secure provision of this online offer according to Art. 6 Para. 1 lit. f GDPR in conjunction with. Art. 28 GDPR (conclusion of order processing contract).
The following data is stored and transmitted in the cookies:
(1) Language settings
(2) Log-in information
(3) Filter functions
Purpose of data processing
The user data collected by technically necessary cookies are not used to create user profiles.
For these purposes, our legitimate interest also lies in the processing of personal data in accordance with Art. 6 para. 1 lit. f GDPR.
Duration of storage, right of objection and right of disposal
Contact form/contact us
We may offer you the opportunity to contact us using a form provided on our website. In addition to the message, it is necessary to enter a valid e-mail address so that we know who sent the request and can respond to it. It is your free decision whether you want to enter this data within the contact form. At the time of sending, the date and time would still be stored.
The data will be processed for the purpose of contacting us in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR on the basis of your voluntary consent.
The data will be deleted as soon as they are no longer necessary to achieve the purpose for which they were collected. For the personal data from the input mask of the contact form and those that were sent by e-mail, this is the case when the respective conversation with the user is finished. The conversation is terminated when it can be inferred from the circumstances that the facts in question have been finally clarified. We review this requirement every two years; the statutory archiving obligations also apply.
Possibility of opposition and elimination
The user has the possibility to revoke his consent to the processing of personal data at any time. If the user contacts us by e-mail, he can object to the storage of his personal data at any time. In such a case, the conversation cannot be continued.
A revocation of the consent and the contradiction of the storage takes place likewise by E-Mail email@example.com.
All personal data stored in the course of contacting us will be deleted in this case.
You can subscribe to a free newsletter on our website. When registering for the newsletter, the data from the input mask is transmitted to us. The transmitted data are:
In addition, the following data is collected upon registration:
(1) Date and time of registration
(2) IP address
In the course of the registration process, your consent is obtained for the processing of the data and reference is made to this data protection declaration.
In connection with data processing for the dispatch of newsletters, no data is passed on to third parties. The data will be used exclusively for sending the newsletter. The legal basis for the processing of the data after registration for the newsletter by the user is Art. 6 para. 1 lit. a GDPR.
The collection of the user's e-mail address serves to send the newsletter. The collection of other personal data as part of the registration process serves to prevent misuse of the services or the e-mail address used.
Duration of storage
The data will be deleted as soon as they are no longer necessary to achieve the purpose for which they were collected. The user's e-mail address will therefore be stored for as long as the subscription to the newsletter is active.
Possibility of opposition and elimination
The subscription to the newsletter can be cancelled by the user concerned at any time. For this purpose there is a corresponding link in every newsletter.
This also makes it possible to revoke the consent to the storage of personal data collected during the registration process.
Newsletter - Mailing service provider
The newsletter is sent by the mail service provider "MailChimp", a newsletter delivery platform of the US provider Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA. The data protection regulations of the shipping service provider can be viewed here: https://mailchimp.com/legal/privacy/. The Rocket Science Group LLC d/b/a MailChimp is certified under the Privacy Shield Agreement and thus offers a guarantee to comply with the European data protection level (https://www.privacyshield.gov/participant?id=a2zt0000000TO6hAAG&status=Active).
The dispatch service provider is used on the basis of our legitimate interests according to Art. 6 Para. 1 letter f GDPR and an order processing contract according to Art. 28 Para. 3 S. 1 GDPR.
The shipping service provider can use the recipient's data in pseudonymous form, i.e. without assignment to a user, to optimize or improve its own services, e.g. to technically optimize the dispatch and presentation of the newsletter or for statistical purposes. However, the shipping service does not use the data of our newsletter recipients to write them down itself or to pass the data on to third parties.
Newsletter - Performance Measurement
The newsletters contain a so-called "web-beacon", i.e. a pixel-sized file that is downloaded from our server when the newsletter is opened or if we use a shipping service provider from whose server. Within the scope of this retrieval, technical information, such as information about the browser and your system, as well as your IP address and time of retrieval are initially collected.
This information is used to technically improve the services based on the technical data or the target groups and their reading behaviour based on their retrieval locations (which can be determined using the IP address) or access times. The statistical surveys also include determining whether the newsletters are opened, when they are opened and which links are clicked. For technical reasons, this information can be assigned to the individual newsletter recipients. However, it is neither our endeavour, nor, if used, that of the shipping service provider, to observe individual users. The evaluations serve us much more to recognize the reading habits of our users and to adapt our contents to them or to send different contents according to the interests of our users.
Online presence in social media
We maintain online presences within social networks and platforms in order to communicate with active customers, interested parties and users and to inform them about our services. When accessing the respective networks and platforms, the terms and conditions and the data processing guidelines of their respective operators apply.
Integration of third-party services and content
Within our online offer, we make no representations or warranties of any kind based on our legitimate interests (i.e. interest in the analysis, optimisation and economic operation of our online offer within the meaning of Art. 6 para. 1 lit. f. GDPR) content or service offerings of third parties to incorporate their content and services, such as videos or fonts (hereinafter uniformly referred to as "content").
This always presupposes that the third party providers of this content perceive the IP address of the users, since without the IP address they could not send the content to their browser. The IP address is therefore required to display this content. We endeavour to use only those contents whose respective providers use the IP address only for the delivery of the contents. Third-party providers may also use so-called pixel tags (invisible graphics, also known as "web beacons") for statistical or marketing purposes. Pixel tags" can be used to evaluate information such as visitor traffic on the pages of this website. The pseudonymous information may also be stored in cookies on the user's device and may include technical information about the browser and operating system, referring websites, visiting time and other information about the use of our online offer, as well as be linked to such information from other sources.
We integrate the maps of the service "Google Maps" of the provider Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. the corresponding data protection declaration can be found at: https://www.google.com/policies/privacy/. An overview of the data and an opt-out can be found at: https://adssettings.google.com/authenticated.
Rights of the data subject
You have the right:
- according to art. 15 GDPR information about your personal data processed by us
to demand. In particular, you may request information about the purposes of processing, the category of personal data, the categories of recipients to whom your data have been or will be disclosed, the planned storage period, the existence of a right to rectification, deletion, restriction of processing or objection, the existence of a right of appeal, the origin of your data, if these have not been collected from you, and the existence of automated decision-making including profiling and, if applicable, meaningful information on their details;
- to immediately request the correction of incorrect or complete personal data stored by us in accordance with Art. 16 GDPR;
- to request the deletion of your personal data stored by us in accordance with Art. 17 GDPR, unless the processing is necessary to exercise the right to freedom of expression and information, to fulfil a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims;
- pursuant to Art. 18 GDPR, to restrict the processing of your personal data if you dispute the accuracy of the data, if the processing is unlawful but you refuse to delete the data and we no longer need the data, but if you need it to assert, exercise or defend legal claims or if you have filed an objection to the processing pursuant to Art. 21 GDPR;
- pursuant to Art. 20 GDPR, to receive your personal data that you have provided to us in a structured, current and machine-readable format or to request its transfer to another person responsible;
- in accordance with Art. 7 para. 3 GDPR, to revoke your consent to us at any time. As a result, we are no longer allowed to continue processing data based on this consent in the future and
- to complain to a supervisory authority pursuant to Art. 77 GDPR. As a rule, you can contact the supervisory authority at your usual place of residence or workplace or at our company headquarters.
You have the right to object at any time, for reasons arising from your particular situation, to the processing of personal data concerning you under Article 6(1)(e) or (f) of the DSBER; this also applies to profiling based on these provisions.
You have the possibility to exercise your right of objection in connection with the use of Information Society services by means of automated procedures using technical specifications, notwithstanding Directive 2002/58/EC.