Information on the processing of personal data
Purposes of Processing The processing of personal data is justified and necessary on the basis of our legitimate interests pursuant to Art. 6(1) sentence 1 lit. f GDPR in order to provide visitors of our online offering with this offering, including its functions and content (e.g., to ensure fast page loading, enable user-friendly use of the online offering, detect and ensure the security and stability of systems, and facilitate and improve website administration). The processing is expressly not carried out for the purpose of gaining insights about the person of the website visitor. Only when the visitor voluntarily provides personal data does further processing enable us to respond to contact inquiries and otherwise communicate with users (the legal basis in this case being Art. 6(1) sentence 1 lit. a GDPR). For statistical purposes, we use a combination of all data available to us (generally non-personal data) within the legally permitted framework. Source of Personal Data We process only such data as transmitted by the internet browser of your device. If you contact us by e-mail, telephone, or online form, we process the data that you provide to us. Categories of Data We Process - IP address of the visitor’s device, - Date and time of access by the visitor, - File name of the page accessed by the visitor, - Website from which the visitor reached our online offering (so-called referrer URL), - Browser and operating system of the visitor’s device as well as the name of the internet access provider used by the visitor, - Other data provided by you. Categories of Data Subjects All users of our online offering. Storage Period and Deletion We process and store personal data relating to you as a data subject only for as long as this is necessary to achieve the purpose of processing. If the purpose ceases to apply, your data will be blocked or deleted, provided that no statutory retention obligations prevent this. Transfer of Personal Data to Third Parties (General Information) If personal data is transferred to third parties, the processing is generally purpose-bound or instruction-based, for example for the provision of a service. However, due to the lack of control options, we cannot completely exclude the possibility that carefully selected third-party providers may also process user data transmitted by the browser (see data categories above) for their own purposes. Information processed through our online offering (regarding browser and operating system, IP address, referring online offerings, visit times, etc.) may also be combined with information from other sources. To uniquely identify users, cookies or browser fingerprints are generally used. If you wish to avoid this in principle, you must configure appropriate browser settings (e.g., through free privacy extensions). Server Log Files and User Information The web host/provider commissioned by us automatically collects and stores information/metadata in so-called server log files with every access. The information contained therein includes your IP address, the time of the server request, and the accessed file. In addition, browser-specific information such as browser type and version, the operating system used, where applicable the referrer URL, and possibly other information useful to our provider for optimizing our website are recorded and stored. An IP address is considered personal data if the operator has the legal means to infer a person from the data. Accordingly, the duration of processing of the IP address as personal data depends on the storage duration of the IP address at your service provider (internet access provider). As a rule, this is 30 days or less. The legal basis pursuant to Art. 6(1) lit. f GDPR is the provider’s legitimate interest in ensuring the functionality and security of the server and in optimizing the website, particularly with regard to usability. These data are not merged with other data sources. The provider acts as a processor bound by instructions. Therefore, direct identification of a person via the metadata is not possible. Content Delivery Networks For up-to-date functionality and presentation, short loading times, and an optimal user experience, we integrate scripts provided by so-called "Content Delivery Networks" into our online offering. In doing so, your IP address and the above-mentioned metadata are transmitted to the servers of the respective providers and processed there. The providers used may vary. The legal basis pursuant to Art. 6(1) lit. f GDPR is our legitimate interest or, in the case of necessary data transfers to third countries, your consent pursuant to Art. 6(1) lit. a GDPR.