1. GENERAL NOTES AND MANDATORY INFORMATION
The operators of these sites take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this data protection declaration.
We would like to point out that data transmission over the Internet (e.g. when communicating via e-mail) may have security gaps. Complete protection of data against access by third parties is not possible. We have taken extensive technical and operational safeguards to protect your data from accidental or intentional manipulation, loss, destruction or access by unauthorized persons. Our security procedures are regularly reviewed and adapted to technological progress.
Note to the responsible body
The responsible body for data processing on this website is:
Phone Number: +49 15752206484
E-Mail adress: firstname.lastname@example.org
Withdrawal of your consent to data processing
Many data processing operations are only possible with your express consent. You can revoke your consent at any time. An informal communication by e-mail to us is sufficient. The legality of the data processing carried out until the revocation remains unaffected by the revocation.
Right of appeal to the competent supervisory authority
In the event of data protection violations, the person concerned is entitled to a right of complaint to the competent supervisory authority. The competent supervisory authority in data protection matters is the state data protection officer of the federal state in which our company is based. A list of data protection officers and their contact details can be found at the following link: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.
Right to data portability
You have the right to have data that we process automatically on the basis of your consent or in the performance of a contract, either to itself or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another controller, this is only done as far as it is technically feasible.
Information, rectification, cancellation, restriction and opposition
Within the scope of the applicable legal provisions, you have the right to free information about your stored personal data, its origin and recipient and the purpose of the data processing and, if applicable, a right to rectification, erasure, Restriction of processing and opposition to the processing of such data. You can contact us at any time at the address given in the imprint for further questions on the subject of personal data.2. DATA COLLECTION ON OUR WEBSITE
Some of the websites use so-called cookies. Cookies do not cause any damage to your computer and do not contain viruses. Cookies are used to make our offer more user-friendly, effective and secure. Cookies are small text files that are stored on your computer and stored by your browser.
Most of the cookies we use are so-called "session cookies". They will be deleted automatically at the end of your visit. These store a so-called session ID, with which various requests of your browser can be assigned to the common session. This allows your computer to be recognized when you return to our website. The session cookies are deleted when you log out or close the browser. Other cookies remain stored on your device until you delete them. These cookies allow us to recognize your browser the next time you visit.
You can set your browser to inform you about the setting of cookies and to allow cookies only on a case-by-case basis, to exclude the acceptance of cookies for certain cases or in general, and to automatically delete the cookies when you close the browser. to activate. When disabling cookies, the functionality of this website may be limited.
The legal bases for possible processing of personal data and their storage time vary and are presented in the following sections. Cookies, which are necessary for the electronic communication process or for the provision of certain functions that you want (e.g. shopping cart function), are stored on the basis of Art. 6 sec. 1 lit. f GDPR. The website operator has a legitimate interest in the storage of cookies for the technically error-free and optimized provision of its services. Insofar as other cookies (e.g. cookies for the analysis of your browsing behaviour) are stored, these are treated separately in this data protection declaration.
Server log files
When using the website in an informative way, i.e. if you do not register or otherwise provide us with information, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure stability and security. The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:
- Browser type and browser version
- operating system used
- Referrer URL
- Host name of the accessing machine
- Time of server request
- IP address
- Time zone difference to Greenwich Mean Time (GMT)
- Content of the request (concrete page)
- Access Status/HTTP Status Code
- amount of data transferred in each case
This data is not merged with other data sources. The collection of this data is based on Art. The website operator has a legitimate interest in the technically error-free presentation and optimization of its website – for this purpose, the server log files must be recorded.
If you send us enquiries by e-mail or contact form, your details will be provided from the request form (your e-mail address, if applicable. Your name and telephone number) including the contact details you provide there for the purpose of processing the request and in case of follow-up questions. We do not share this data without your consent. Insofar as we use our contact form to request entries that are not required for contacting us, we have always marked them as optional. This information is used by us to specify your request and to improve the handling of your request.
Insofar as this is information about communication channels (e.g. e-mail address, telephone number), you also agree that we may also contact you via this communication channel to answer your request. You can of course revoke this consent at any time for the future. The data entered in the contact form is therefore processed exclusively on the basis of your consent (Art. 6 sec. 1 lit. a GDPR). You can revoke this consent at any time. An informal communication by e-mail to us is sufficient. The legality of the data processing operations carried out until the revocation remains unaffected by the revocation.
We delete the data in this context after storage is no longer necessary or you have revoked your consent, or restrict the processing if there are legal retention obligations.
When you place an online order on our website, we collect various data required for the conclusion of the contract. The legal basis is the conclusion and implementation of a contract in accordance with Article 6(1) b GDPR. The data will be stored for the duration of the contract and in accordance with legal obligations. For payment processing, we use various payment service providers, which are always identified and receive your entries directly and are thus recipients of your personal data collected in connection with the payment process. The legal basis for the involvement of payment service providers is the contract processing in accordance with Article 6 (1) b GDPR. The storage for the purpose of payment takes place for the duration of the payment processing.
You can find yourself electronically, in s. via e-mail or web forms, apply to our company. We will of course only use your information for the processing of your application and will not pass it on to third parties. Please note that unencrypted e-mails are not transmitted in an access-protected manner. If you have applied for a specific position and it has already been filled, or if we consider you to be also or even better suited for another position, we would be happy to forward your application within the company. Please let us know if you do not agree to a forwarding. Your personal data will be deleted immediately after the completion of the application process, or after a maximum of 6 months, unless you have expressly given us your consent for a longer storage of your data or a contract has been concluded. The legal basis is Article 6(1) a, b and f GDPR and Section 26 of the German German Fine O'S.
3. PLUGINS AND TOOLS
Our website uses plugins from the Google-operated site YouTube. The site is operated by YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. When you visit one of our sites equipped with a YouTube plugin, a connection is established to the YouTube servers. The YouTube server will be informed which of our pages you have visited. The integration takes place in the extended data protection mode or theNocookie solution, i.e. only when the video is played, you can set cookies and pixel tags to personalize advertisements and search results. When the YouTube video is played, the following data is transmitted to Google as a YouTube operator:
- the IP address,
- the specific address of the page we have accessed,
- the transmitted identifier of the browser as well as
- System date and time of the call,
- existing cookies that can be used to uniquely identify your browser.
This page uses the online appointment booking system "Timify" to coordinate your appointment. The operator is TerminApp GmbH, Balanstraße 73, Building No. 24, 3rd floor, 81541 Munich, represented by the Managing Director Mr. Andreas Knürr.
4. DATA TRANSFER
In principle, your data will not be transferred to third parties, unless we are legally obliged to do so, or the transfer of data is necessary for the execution of the contractual relationship or you have previously expressly entered into the transfer of your data Agreed.
Data is transmitted to external service providers and partner companies such as online payment providers, insofar as this is necessary for the processing of your order. In such cases, however, the amount of data transmitted is limited to the minimum required. Insofar as our service providers come into contact with your personal data, we ensure that they comply with the provisions of the data protection laws in the same way within the scope of order processing in accordance with Article 28 GDPR. Please also note the respective data protection notices of the providers. The respective service provider is responsible for the content of third-party services, whereby we check the services for compliance with the legal requirements within the scope of reasonableness.
We attach great importance to processing your data within the EU/EEA. However, we may use service providers that process data outside the EU/EEA. In such cases, we will ensure that an appropriate level of data protection is established with the recipient prior to the transfer of your personal data. This means that a level of data protection comparable to the standards within the EU is achieved through EU standard contracts or an adequacy decision, such as the EU Privacy Shield.
Users should use the following contact option in order to obtain information about the data collection and processing from the provider at any time and/or to receive correction, blocking or deletion of their personal data.
Processing of personal data when downloading the app
If the App is downloaded from the Play Store offered by Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) or from the App Store operated by Apple Inc (1 Infinite Loop, Cupertino, CA 95014, USA), the app store required for downloading information to the respective store operator. These include in particular the username, the device identification number, the stored e-mail address, an existing customer number, the time of the download and the payment information provided by the user. The provider has no influence on this data collection and is not responsible for it.
The provider processes the data only to the extent that it is necessary for downloading the app to the user's smartphone.
Insofar as the user is habitually resident in the European Economic Area or Switzerland, Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) is the person responsible for the data. Google Ireland Limited is therefore the company associated with Google, which is responsible for the processing of the data and compliance with the applicable data protection laws.
Processing of personal data when using the app
As part of the registration required for the use of the app, the provider
the e-mail address and the name of the user. However, the user is free to use his bourgeois name or a pseudonym. The processing is carried out on the basis of Article 6(1) lit. b GDPR and is required for the performance of a contract
Collection, processing and disclosure of personal data for appointment bookings
When booking an appointment, the provider collects and processes the personal data of the user only insofar as this is necessary for the fulfilment and processing of his booking as well as for processing the user's enquiries. The provision of the data is necessary for the conclusion of the contract. Failure to provide means that no contract can be concluded. The processing is carried out on the basis of Article 6(1) lit. b GDPR and is required for the performance of a contract.
The user data is passed on, for example, to the payment service providers chosen by the user, service providers for order processing and IT service providers. In all cases, the provider strictly observes the legal requirements. The scope of the data transmission is limited to a minimum.
The user can permanently stop using the app by removing it from his or her device. In the case of deletion of the app, the local information and data will be permanently deleted.
Duration of storage
After complete contract processing, the data will first be stored in accordance with statutory retention periods, in particular tax and commercial law, and then deleted after expiry of the deadline, provided that you have completed further processing and have not consented to use.
Rights of the data subject
If the legal requirements are met, the user is entitled to the following rights under Articles 15 to 20 GDPR: right to information, to rectification, to deletion, to restriction of processing, to data portability.
In addition, under Article 21(1) of the GDPR, the user is entitled to object to the processing operations based on Article 6(1) f GDPR and to processing for the purpose of direct marketing.
Right of appeal to the supervisory authority
Pursuant to Article 77 GDPR, the user has the right to complain to the supervisory authority if he considers that the processing of his personal data is not lawful.
Right to object
The personal data processing listed here is based on the legitimate interest of the provider in accordance with Art. f GDPR, the user has the right to object to these processing operations at any time with effect for the future for reasons arising from his particular situation.
After an objection has been made, the processing of the data concerned shall be terminated, unless the provider can demonstrate compelling legitimate grounds for the processing, which outweigh the interests, rights and freedoms of the user, or if the processing of the data is assertion, exercise or defence of legal claims.
6. DATA SECURITY
We have taken extensive technical and operational safeguards to protect your data from accidental or intentional manipulation, loss, destruction or access by unauthorized persons. Our security procedures are regularly reviewed and adapted to technological progress.
As of June 2019