1. General information

We are delighted that you have visited our website. Below, we would like to inform you about how we handle your data in accordance with Article 13 of the General Data Protection Regulation (GDPR).

The following information provides a simple overview of what happens to your personal data when you visit this website.

Personal data is any data that can be used to identify you personally.

 

2. Responsible party

The party responsible for the data processing described below is the entity named in the legal notice.

 

3. Usage data

When you visit our website, our web server temporarily evaluates so-called usage data for statistical purposes in order to improve the quality of our website. This data set consists of:

• the name and address of the requested content,
• the date and time of the query,
• the amount of data transferred,
• the access status (content transferred, content not found),
• the description of the web browser and operating system used,
• the referral link indicating which page you came to ours from,
• the IP address of the requesting computer, which is shortened so that it can no longer be traced back to a specific person.

The aforementioned log data is only evaluated anonymously.

The legal basis for the processing of usage data is Art. 6 (1) (f) GDPR. Processing is carried out in the legitimate interest of providing the content of the website and ensuring a device- and browser-optimised display.

 

4. Data security (SSL or TLS encryption)

We take technical and organisational measures to protect your data from unauthorised access as comprehensively as possible. We use an encryption method on our websites. Your information is transmitted from your computer to our server and vice versa via the Internet using TLS encryption. You can usually recognise this by the closed padlock symbol in your browser's status bar and the address bar beginning with https://.

When SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

 

5. Necessary cookies

Our websites use so-called ‘cookies’. Cookies are small data packets and do not cause any damage to your device. They are either stored temporarily for the duration of a session (session cookies) or permanently (permanent cookies) on your device. Session cookies are automatically deleted at the end of your visit. Permanent cookies remain stored on your device until you delete them yourself or your web browser automatically deletes them.

Cookies can originate from us (first-party cookies) or from third-party companies (so-called third-party cookies). Third-party cookies enable the integration of certain services from third-party companies within websites (e.g. cookies for processing payment services).

Cookies have various functions. Numerous cookies are technically necessary, as certain website functions would not work without them (e.g. the shopping basket function or the display of videos). Other cookies can be used to evaluate user behaviour or for advertising purposes.

Cookies that are necessary for the electronic communication process, for the provision of certain functions requested by you (e.g. for the shopping basket function) or for the optimisation of the website (e.g. cookies for measuring the web audience) (necessary cookies) are stored on the basis of Art. 6 para. 1 lit. f GDPR, unless another legal basis is specified. The website operator has a legitimate interest in storing necessary cookies for the technically error-free and optimised provision of its services. If consent to the storage of cookies and similar recognition technologies has been requested, processing is carried out exclusively on the basis of this consent (Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG); consent can be revoked at any time.

You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general, and activate the automatic deletion of cookies when closing the browser. If cookies are deactivated, the functionality of this website may be restricted.

If further cookies and services are used on this website, you can find this information in this privacy policy.

 

6. Consent banner (Usercentrics)

This website uses consent technology from Usercentrics to obtain your consent to store certain cookies on your device or to use certain technologies and to document this in accordance with data protection regulations. This technology is provided by Usercentrics GmbH, Sendlinger Straße 7, 80331 Munich, website: usercentrics.com/de/ (hereinafter referred to as ‘Usercentrics’).

When you visit our website, the following personal data is transferred to Usercentrics:

• Your consent(s) or the revocation of your consent(s)
• Your IP address
• Information about your browser
• Information about your device
• The time of your visit to the website
• Geolocation

Furthermore, Usercentrics stores a cookie in your browser in order to be able to assign the consents you have given or their revocation. The data collected in this way is stored until you request us to delete it, delete the Usercentrics cookie yourself or the purpose for data storage no longer applies. Mandatory legal retention obligations remain unaffected.

The Usercentrics banner on this website was configured with the help of eRecht24. You can recognise this by the eRecht24 logo appearing in the banner. In order to display the eRecht24 logo in the banner, a connection to the eRecht24 image server is established. The IP address is also transmitted, but is only stored in anonymised form in the server logs. The eRecht24 image server is located in Germany and is operated by a German provider. The banner itself is provided exclusively by Usercentrics.

Usercentrics is used to obtain the legally required consent for the use of certain technologies. The legal basis for this is Art. 6 (1) (c) GDPR.

 

7. Matomo

This website uses the open source web analytics service Matomo.

With the help of Matomo, we are able to collect and analyse data about the use of our website by website visitors. This enables us to find out, among other things, when which page views were made and from which region they come. We also collect various log files (e.g. IP address, referrer, browsers and operating systems used) and can measure whether our website visitors perform certain actions (e.g. clicks).

Data processing is based on your consent, provided you have given your consent via our banner.

The use of this analysis tool is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in analysing user behaviour in order to optimise its web offering. If consent has been requested, processing is carried out exclusively on the basis of Art. 6 (1) lit. a GDPR and § 25 (1) TDDDG, insofar as the consent includes the storage of cookies or access to information on the user's terminal device (e.g. device fingerprinting) within the meaning of the TDDDG.

Consent can be revoked at any time.

The cookies set will generally be deleted or no longer processed after 13 months at the latest or after you revoke your consent.

 

8. Newsletter registration and dispatch

If you would like to receive the newsletter offered on the website, we require your email address and information that allows us to verify that you are the owner of the email address provided and that you agree to receive the newsletter. Further data is not collected or is only collected on a voluntary basis. We use newsletter service providers to process the newsletters, which are described below.

8.1 Brevo

This website uses Brevo to send newsletters. The provider is Sendinblue GmbH, Köpenicker Straße 126, 10179 Berlin, Germany.

Brevo is a service that can be used to organise and analyse the sending of newsletters, among other things. The data you enter for the purpose of receiving the newsletter is stored on the servers of Sendinblue GmbH in Germany.

8.2. Data analysis by Brevo

With the help of Brevo, we are able to analyse our newsletter campaigns. For example, we can see whether a newsletter message has been opened and which links have been clicked on. This allows us to determine, among other things, which links were clicked on particularly often.

If you do not want Brevo to analyse your data, you must unsubscribe from the newsletter. We provide a link for this purpose in every newsletter message.

For detailed information on the functions of Brevo, please refer to the following link: www.brevo.com/de/newsletter-software/.

8.3 Legal basis

Data processing is based on your consent (Art. 6(1)(a) GDPR). You can revoke this consent at any time. The legality of the data processing operations already carried out remains unaffected by the revocation.

8.4 Storage period

The data you provide us with for the purpose of receiving the newsletter will be stored by us or the newsletter service provider until you unsubscribe from the newsletter and will be deleted from the newsletter distribution list after you unsubscribe. Data stored by us for other purposes remains unaffected.

For more details, please refer to Brevo's privacy policy at: www.brevo.com/de/datenschutz-uebersicht/ and www.brevo.com/de/legal/privacypolicy/.

 

9. Storage period

Unless a more specific storage period is specified in this privacy policy, your personal data will remain with us until the purpose for data processing no longer applies. If you assert a legitimate request for deletion or revoke your consent to data processing, your data will be deleted unless we have other legally permissible reasons for storing your personal data (e.g. tax or commercial law retention periods); in the latter case, deletion will take place once these reasons no longer apply.

 

10. Recipients of personal data (processors)

We pass on your data within the scope of order processing in accordance with Art. 28 GDPR to service providers who support us in operating our websites and the associated processes. These include, for example, hosting service providers. Our service providers are strictly bound by our instructions and are contractually obliged to do so.

Below, we list the processors with whom we work, unless we have already done so in the above text of the privacy policy. If data may be processed outside the EU or the EEA in this context, we will inform you of this in the table below.

Processor :Sendinblue GmbH, operating under the brand name ‘Brevo’

Purpose: Email dispatch 

Adequate level of data protection: Processing only within the EU/EEA

 

11. Your rights as a data subject

When processing your personal data, the GDPR grants you certain rights as a data subject:

Right of access (Art. 15 GDPR)

You have the right to request confirmation as to whether personal data concerning you is being processed; if this is the case, you have the right to access this personal data and to the information specified in Art. 15 GDPR.

Right to rectification (Art. 16 GDPR)

You have the right to request the immediate rectification of inaccurate personal data concerning you and, where applicable, the completion of incomplete data.

Right to erasure (Art. 17 GDPR)

You have the right to request that personal data concerning you be erased without delay if one of the reasons listed in detail in Art. 17 GDPR applies.

Right to restriction of processing (Art. 18 GDPR)

You have the right to request the restriction of processing if one of the conditions listed in Art. 18 GDPR applies, e.g. if you have objected to the processing, for the duration of the review by the controller.

Right to data portability (Art. 20 GDPR)

In certain cases, which are listed in detail in Art. 20 GDPR, you have the right to receive the personal data concerning you in a structured, commonly used and machine-readable format or to request the transfer of this data to a third party.

Right of withdrawal (Art. 7 GDPR)

If data is processed on the basis of your consent, you are entitled under Art. 7(3) GDPR to withdraw your consent to the use of your personal data at any time. Please note that the withdrawal only applies to the future. Processing that took place before the withdrawal is not affected.

Right to object (Art. 21 GDPR)

If data is collected on the basis of Art. 6(1)(f) GDPR (data processing to safeguard legitimate interests) or on the basis of Art. 6(1)(e) GDPR (data processing to safeguard public interests or in the exercise of official authority), you have the right to object to the processing at any time on grounds relating to your particular situation. We will then no longer process the personal data unless there are demonstrably compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)

Pursuant to Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority if you believe that the processing of your data violates data protection regulations. The right to lodge a complaint can be exercised in particular with a supervisory authority in the Member State of your habitual residence, your place of work or the place of the alleged infringement.

Asserting your rights

Unless otherwise described above, please contact the office named in the imprint to assert your rights as a data subject.

 

12. Data protection officer

Our external data protection officer is available to provide you with information on data protection at the following contact details:

datenschutz nord GmbH

Konsul-Smidt-Straße 88

28217 Bremen

Web: www.dsn-group.de

Email: office@datenschutz-nord.de

When contacting our data protection officer, please also indicate the responsible body named in the legal notice.