We take data protection serious
The protection of your privacy when processing personal data is one of our top priorities. When you visit our website, our servers will store the IP address of your Internet service provider, the referrer website from where you came to our website, the web pages visited by you, and the date and time of your visit. This information is strictly necessary for the technical delivery of our website and to warrant the security of our server operations. The collected data will not be analysed in any way that would allow for the derivation of conclusions about an individual person.
Any data you send to us using the contact form will be saved on our servers at the time the data is backed up. We will only use your data to process your inquiry and treat them strictly confidential at all times. We will never disclose your data to third parties.
Controller in charge of the data processing
Personal data means data that relates to you personally. This includes your name, your address, and your email address. Visiting our website does not require you to disclose any personal data to us. In some cases, we can only offer our service to you if you provide us with your name, address and other details.
The same applies if you have requested us to provide you with information materials and if we respond to your inquiries. We will always inform you ahead of any collection of personal data. Only data you have made available to us voluntarily or by automated means will be stored.
When you use one of our services, we will usually only collect the data we require to offer our service to you. We may ask for additional information, which you may disclose to us on a voluntary basis. Any processing of personal data always serves the purpose of offering our services to you and the pursuit of our commercial objectives.Server log files
The provider of this website automatically collects and stores information in so-called server log files, which are transmitted automatically to us by your Internet browser. This data includes:
- the date and time of the request
- the name of the requested file
- the referrer web page
- the access status
- your web browser and operating system
- the full IP address of your computer
- transmitted data volume
The data collected by us is not merged with any data from other sources. We will process the data in accordance with Article 6 (1) lit. f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website.
We will store this data for a brief period of time for reasons related to the technical security of our systems in general, and in particular to defend our web server against attempted attacks. This data cannot be used to derive conclusions on individual persons. The data is anonymised after a maximum of seven days by truncating the IP address on domain level. This makes it impossible to connect the data to an individual user. The anonymised data is also processed for statistical purposes; the data or excerpts thereof are however not verified against any other databases or disclosed to third parties. The number of page visits is only analysed for our server statistics, which we publish in our activity report on a biannual basis.
For the purpose of an optimised marketing of our website, we have activated the data sharing settings for “Google products and services”. This allows Google to access the data collected and processed by Google Analytics and then use the data to improve the Google services. The transmission of data to Google as a consequence of these data sharing settings takes place on the basis of an additional contractual agreement between the involved controllers. We have no influence over the subsequent data processing by Google.
We also use Google Optimize, an extension for Google Analytics, to prepare and conduct tests.
The additional Google Analytics extension Google Signals allows for “cross-device tracking” and is used for web analysis purposes. Provided that your internet devices are connected with your Google accounts and you have activated the setting “personalised ads” in your Google account, Google may compile reports on your website usage (especially the cross-device user figures), including when you switch device. The personal data is not processed by us, we only receive statistical information compiled on the basis of Google Signals.
The additional Google Analytics extension DoubleClick Cookie makes it possible to recognize your Internet browser when you visit other websites. This serves web analysis and advertising purposes. Google uses this information to compile reports on website activities and provide other services associated or related with the use of our website.
We have implemented technical and administrative security measures to protect your personal data against loss, destruction, manipulation and unauthorised access. All our personnel and external service providers must comply with the applicable data protection regulations.
Any personal data collected and processed by us is encrypted before being transmitted. This means that your data is protected against inappropriate use by third parties. Our security precautions are subject to a continuous improvement process and we continuously update our data protection statement. Please make sure that you have accessed the most recent version of our Data Protection Statement.
RIGHTS OF DATA SUBJECTS
As a data subject, you may at any time exercise your right to freedom of information about your data, to the correction of your data, the right to be forgotten, the right to object against the processing of your data, the right to data portability, and the right to lodge a complaint in accordance with the requirements under data protection law.
RIGHT TO FREEDOM OF INFORMATION
You may request us to provide you with information about whether and what specific personal data is processed by us.
RIGHT TO THE CORRECTION OF DATA
If your data processed by us is incorrect or incomplete, you may at any time request us to correct and/or complete the data.
RIGHT TO BE FORGOTTEN
You may request us to delete your data in cases where we are processing the data unlawfully or the processing unreasonably interferes with your legitimate interests. Please note that there may be reasons that oppose the immediate deletion of data, e.g. in cases where statutory retention periods apply.
We will promptly delete your data, irrespective of whether you exercise your right to be forgotten and subject to the deletion not being opposed by contractual or statutory retention periods.
RIGHT TO RESTRICT THE DATA PROCESSING
You may request us to restrict the processing of your data if
- you dispute the accuracy of the data for a period of time that permits us to review their accuracy,
- the data processing is unlawful, but you decline the deletion of the data and instead request the data processing to be restricted.
- we no longer require the data for the purpose they were collected for, but you require them to claim or defend legal interests, or
- you have objected against the processing of your data.
RIGHT TO DATA PORTABILITY
You may request us to provide you with the data you have made available to us in a structured, common and machine-readable format, and to transfer your data to another controller without interference from us, but subject to the condition that
- we are processing the data on the basis of a revocable declaration of consent granted by you or for the purpose of performing a contract between us, and
- the data is processed with the help of automated methods.
Subject to technical feasibility, you may request us to directly transfer your data to another controller.
RIGHT TO OBJECT AGAINST DATA PROCESSING
If we are processing your data on the basis of a legitimate interest, you may at any time object against the processing of your data for this purpose; your objection would also extend to a profiling based on the same provisions. We will then cease processing your data, unless we can demonstrate compelling legitimate interests in favour of continuing the data processing that prevail over your interests, rights and freedoms, or unless the data processing serves the purpose of claiming, exercising or defending legal interests. You may at any time object against the processing of your data for direct advertising purposes.
RIGHT TO LODGE A COMPLAINT
If you believe that we are processing your data in violation of German or European data protection laws, please contact us to investigate the matter further. You also have the right to contact the competent supervisory authority, which is the respective state supervisory authority for data protection.
Please contact our Data Protection Officer if you wish to exercise any of the above rights. We may request additional information from you if necessary to establish your identity.
AMENDMENTS TO THIS DATA PROTECTION STATEMENT
We reserve the right to amend our data protection statements as necessary in light of new technologies. Please make sure that you have accessed the most recent version of our Data Protection Statement. Any amendments to this Data Protection Statement will be published on our website.
QUESTIONS ABOUT YOUR PERSONAL DATA? CONTACT US!
Matthias Hassler LL.M.
Projekt 29 GmbH & Co. KG
In the rare case that our Data Protection Officer is unable to resolve your concern to your full satisfaction, you may exercise your right to lodge a complaint with the data protection supervisory authority in your federal state.