We are very delighted that you have shown interest in our enterprise. Data protection is of a particularly high priority for the management of the Firmenname. The use of the Internet pages of the Firmenname is possible without any indication of personal data; however, if a data subject wants to use special enterprise services via our website, processing of personal data could become necessary. If the processing of personal data is necessary and there is no statutory basis for such processing, we generally obtain consent from the data subject.
The processing of personal data, such as the name, address, e-mail address, or telephone number of a data subject shall always be in line with the General Data Protection Regulation (GDPR), and in accordance with the country-specific data protection regulations applicable to the Firmenname. By means of this data protection declaration, our enterprise would like to inform the general public of the nature, scope, and purpose of the personal data we collect, use and process. Furthermore, data subjects are informed, by means of this data protection declaration, of the rights to which they are entitled.
As the controller, the Firmenname has implemented numerous technical and organizational measures to ensure the most complete protection of personal data processed through this website. However, Internet-based data transmissions may in principle have security gaps, so absolute protection may not be guaranteed. For this reason, every data subject is free to transfer personal data to us via alternative means, e.g. by telephone.
1. Definitions
The data protection declaration of the Firmenname is based on the terms used by the European legislator for the adoption of the General Data Protection Regulation (GDPR). Our data protection declaration should be legible and understandable for the general public, as well as our customers and business partners. To ensure this, we would like to first explain the terminology used.
In this data protection declaration, we use, inter alia, the following terms:
- a) Personal data
Personal data means any information relating to an identified or identifiable natural person (“data subject”). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person. - b) Data subject
Data subject is any identified or identifiable natural person, whose personal data is processed by the controller responsible for the processing. - c) Processing
Processing is any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction. - d) Restriction of processing
Restriction of processing is the marking of stored personal data with the aim of limiting their processing in the future. - e) Profiling
Profiling means any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects concerning that natural person's performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements. - f) Pseudonymisation
Pseudonymisation is the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures to ensure that the personal data are not attributed to an identified or identifiable natural person. - g) Controller or controller responsible for the processing
Controller or controller responsible for the processing is the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law. - h) Processor
Processor is a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller. - i) Recipient
Recipient is a natural or legal person, public authority, agency or another body, to which the personal data are disclosed, whether a third party or not. However, public authorities which may receive personal data in the framework of a particular inquiry in accordance with Union or Member State law shall not be regarded as recipients; the processing of those data by those public authorities shall be in compliance with the applicable data protection rules according to the purposes of the processing. - j) Third party
Third party is a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorised to process personal data. - k) Consent
Consent of the data subject is any freely given, specific, informed and unambiguous indication of the data subject's wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.
2. Name and Address of the controller
Controller for the purposes of the General Data Protection Regulation (GDPR), other data protection laws applicable in Member states of the European Union and other provisions related to data protection is:
Firmenname
Straße 99
10785 Berlin
Germany
Phone: 12345678
Email: [email protected]
Website: https://website.de
3. Cookies
The Internet pages of the Firmenname use cookies. Cookies are text files that are stored in a computer system via an Internet browser.
Many Internet sites and servers use cookies. Many cookies contain a so-called cookie ID. A cookie ID is a unique identifier of the cookie. It consists of a character string through which Internet pages and servers can be assigned to the specific Internet browser in which the cookie was stored. This allows visited Internet sites and servers to differentiate the individual browser of the data subject from other Internet browsers that contain other cookies. A specific Internet browser can be recognized and identified using the unique cookie ID.
Through the use of cookies, the Firmenname can provide the users of this website with more user-friendly services that would not be possible without the cookie setting.
By means of a cookie, the information and offers on our website can be optimized with the user in mind. Cookies allow us, as previously mentioned, to recognize our website users. The purpose of this recognition is to make it easier for users to utilize our website. For example, the website user does not have to enter access data each time the website is accessed because the website takes care of this via the stored cookie. Another example is the cookie of a shopping cart in an online shop, which remembers the articles a customer has placed in the virtual shopping cart.
The data subject may, at any time, prevent the setting of cookies through our website by means of a corresponding setting of the Internet browser used, and may thus permanently deny the setting of cookies. Furthermore, already set cookies may be deleted at any time via an Internet browser or other software programs. This is possible in all popular Internet browsers. If the data subject deactivates the setting of cookies in the Internet browser used, not all functions of our website may be entirely usable.
4. Collection of general data and information
The website of the Firmenname collects a series of general data and information when a data subject or automated system calls up the website. This general data and information are stored in the server log files. Collected may be:
- The browser types and versions used
- The operating system used by the accessing system
- The website from which an accessing system reaches our website (so-called referrers)
- The sub-websites
- The date and time of access to the Internet site
- An Internet protocol address (IP address)
- The Internet service provider of the accessing system
- Any other similar data and information that may be used in the event of attacks on our information technology systems.
When using these general data and information, the Firmenname does not draw any conclusions about the data subject. Rather, this information is needed to:
- Deliver the content of our website correctly.
- Optimize the content of our website as well as its advertisement.
- Ensure the long-term viability of our information technology systems and website technology.
- Provide law enforcement authorities with the information necessary for criminal prosecution in case of a cyber-attack.
Therefore, the Firmenname analyzes anonymously collected data and information statistically, with the aim of increasing the data protection and data security of our enterprise and ensuring an optimal level of protection for the personal data we process. The anonymous data of the server log files are stored separately from all personal data provided by a data subject.
5. Contact possibility via the website
The website of Firmenname contains information that enables quick electronic contact with our enterprise, as well as direct communication with us, including a general address for electronic mail (e-mail address). If a data subject contacts the controller by e-mail or via a contact form, the personal data transmitted by the data subject are automatically stored. Such personal data transmitted voluntarily by a data subject to the data controller are stored for the purpose of processing or contacting the data subject. There is no transfer of this personal data to third parties.
6. Routine erasure and blocking of personal data
The data controller shall process and store the personal data of the data subject only for the period necessary to achieve the purpose of storage or as far as this is granted by the European legislator or other legislators in laws or regulations to which the controller is subject.
If the storage purpose is not applicable, or if a storage period prescribed by the European legislator or another competent legislator expires, the personal data are routinely blocked or erased in accordance with legal requirements.
7. Rights of the data subject
a) Right of confirmation
Each data subject has the right granted by the European legislator to obtain confirmation from the controller as to whether or not personal data concerning them is being processed. To exercise this right, the data subject may contact any employee of the controller at any time.
b) Right of access
Each data subject has the right to obtain free information from the controller about their personal data stored at any time and a copy of this information. Furthermore, the data subject has the right to access the following details:
- The purposes of the processing.
- The categories of personal data concerned.
- The recipients or categories of recipients to whom the personal data have been or will be disclosed, including recipients in third countries or international organizations.
- Where possible, the envisaged storage period or the criteria used to determine that period.
- The existence of the right to request rectification, erasure, or restriction of processing of personal data or to object to such processing.
- The right to lodge a complaint with a supervisory authority.
- Any available information about the source of data not collected directly from the data subject.
- The existence of automated decision-making, including profiling, and meaningful information about the logic involved and the significance and consequences of such processing.
If the data subject wishes to exercise this right of access, they may contact any employee of the controller at any time.
c) Right to rectification
Data subjects have the right to request the rectification of inaccurate personal data concerning them without undue delay. Incomplete personal data may also be completed.
To exercise this right, the data subject can contact any employee of the controller.
d) Right to erasure (Right to be forgotten)
Data subjects have the right to request the erasure of their personal data without undue delay, under the following conditions:
- The data are no longer necessary for the purpose for which they were collected.
- The data subject withdraws consent, and there is no other legal basis for processing.
- The data subject objects to the processing under GDPR Article 21(1) or (2).
- The data were processed unlawfully.
- The data must be erased to comply with a legal obligation.
- The data were collected in relation to the offer of information society services under GDPR Article 8(1).
To request erasure, data subjects may contact any employee of the controller.
If the controller has made the personal data public, they shall take reasonable steps, including technical measures, to inform other controllers of the request for erasure of any links, copies, or replications of the personal data.
e) Right of restriction of processing
Data subjects may request restriction of processing under certain conditions, such as contesting the accuracy of the data, unlawful processing, or if the data is no longer needed by the controller but required by the data subject for legal claims.
Requests for restriction can be addressed to any employee of the controller.
f) Right to data portability
Data subjects have the right to receive their personal data in a structured, commonly used, and machine-readable format and to transmit it to another controller. This applies when processing is based on consent or a contract and is carried out by automated means.
Requests for data portability may be addressed to any employee of the controller.
g) Right to object
Data subjects may object to the processing of their personal data at any time, particularly for direct marketing purposes or processing based on GDPR Article 6(1)(e) or (f).
Objections may be addressed to any employee of the controller.
h) Automated individual decision-making, including profiling
Data subjects have the right not to be subject to decisions based solely on automated processing, including profiling, unless it is necessary for contract performance, authorized by law, or based on explicit consent.
Requests concerning automated decision-making may be addressed to any employee of the controller.
i) Right to withdraw consent
Data subjects have the right to withdraw their consent to processing personal data at any time.
To exercise this right, they may contact any employee of the controller.
8. Data protection provisions about the application and use of Matomo
This website integrates Matomo, an open-source web analysis tool that collects data on visitor behavior for website optimization. Data is processed exclusively on the controller’s servers. Personal data, including IP addresses, may be collected for analysis purposes.
Users can prevent Matomo’s data collection by adjusting their browser settings or enabling the "Do Not Track" option.
More information about Matomo’s data protection provisions is available at Matomo Privacy.
9. Legal basis for the processing
Processing operations are based on GDPR Article 6(1) depending on the specific purpose, such as consent (lit. a), contract performance (lit. b), compliance with legal obligations (lit. c), vital interests (lit. d), or legitimate interests (lit. f).
10. The legitimate interests pursued by the controller
Legitimate interests under GDPR Article 6(1)(f) include conducting business in favor of employees and shareholders.
11. Period for which the personal data will be stored
Storage periods are based on statutory retention requirements. After expiration, personal data is routinely deleted unless required for contract performance or initiation.
12. Provision of personal data as a statutory or contractual requirement
Providing personal data may be required by law or contract. Failure to provide the data may result in the inability to conclude a contract. Employees are available to clarify obligations and consequences related to providing personal data.