Source: https://www.tenbrinke.com/privacy.html
Timestamp: 2019-04-22 08:34:38+00:00

Document:
Art. 6 para. 1 lit. a, EU General Data Protection Regulation (GDPR) serves as the legal basis to the extent we obtain the consent for processing the personal data of the person concerned. Art. 6 para. 1, sentence 1 lit. b GDPR serves as the legal basis for the processing of personal data required for performance of the contract if the party to the contract is the person concerned. This also applies to processing operations required to carry out pre-contractual actions. Art. 6 para. 1 lit. c GDPR serves as the legal basis to the extent processing of personal data is required to fulfill a legal obligation to which our company is subject. Art. 6 para. 1 sentence 1 lit. f GDPR serves as the legal basis for processing if processing is necessary to protect the legitimate interests of our company or a third party and if the interests, fundamental rights and freedoms of the person whose data is being processed do not predominate.
The personal data of the person concerned will be deleted or blocked as soon as the purpose of storage no longer applies. However, data storage may extend beyond this period if such is stipulated under European, domestic, EU laws or other regulations to which the person in charge of processing the data is subject. Blocking or deletion of the data also takes place if a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or fulfillment of a contract.
The data will be deleted as soon as it is no longer required for the purpose it was collected. This is the case after each session is completed if data is collected for providing the website. The data is also deleted after a maximum of seven days if the data is stored in log files. A storage period beyond this is also possible. In this case, the IP addresses of users are deleted or distorted so that they no longer can be traced to the visiting client.
The legal basis for the processing of personal data using cookies is Art. 6, para. 1 f. GDPR.
The transmission of Flash cookies cannot be prevented by the settings of the browser, but by changing the setting of the Flash player.
E-Mail addresses are available on our website for users to request contact.
There is no transfer of data to third parties in this connection. The data is used exclusively for the processing of the conversation.
The data will be deleted as soon as it is no longer required for the purpose it was collected. This is the case for the personal data from the E-Mail after the respective conversation with the user has ended. The conversation is ended when it can be inferred from the circumstances that the relevant facts have finally been clarified.
The Google Marketing Services allow us to target the use advertisements for us and on our website so that ads are only displayed that potentially match the interests of the users.
Our web site uses so-called web fonts provided by Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA ("Google") for consistent font presentation. When you access a website, your browser loads the required web fonts into your browser cache to display texts and fonts correctly.
Google is certified under the Privacy Shield Agreement, which guarantees compliance with the European Data Protection Law.
For this purpose, the browser you use must establish a connection with the Google servers. As a result, Google recognizes that our website has been accessed via your IP address.
The use of Google Web Fonts is in the interest of the consistent and appealing presentation of our online services. For these purposes, our legitimate interest also comprises the processing of the data according to Art. 6 para. 1 lit. f GDPR.
For more information about Google Web Fonts, visit https://developers.google.com/fonts/faq and Google's data protection policy: https://www.google.com/policies/privacy/.
On our website we use the "+1" button on the Google Plus social network operated by Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, United States (Google). The button is indicated by the symbol "+1" on a white or colored background.
If the customer presses the "+1" button, the customer's browser establishes a direct connection to Google's servers. The content of the "+1" button is transmitted by Google directly to the customer's browser and incorporated by the latter into the website. We have no influence on the amount of data that Google collects with this button.
Google+ is used to facilitate communication with the visitor. For these purposes, our legitimate interest also comprises the processing of the data according to Art. 6 para. 1 lit. f GDPR.
According to their own information, the log data collected by Google is anonymized by deleting a part of the IP address and the cookie information after 9 and 18 months respectively.
If users do not agree to the transfer of their data to Google in connection with the use of Google+, it is possible to log out at Google+ before using our site.
On our website we use functions of the Twitter service. These functions are provided by Twitter Inc., Twitter, Inc. 1355 Market St, Suite 900, San Francisco, CA 94103, USA. Through the use of Twitter and the "Retweet" function the websites you visit are linked to your Twitter account and disclosed to other users. Data is also transmitted to Twitter at this time.
The data storage period is unknown to us.
If users do not agree to the transfer of their data to Google in connection with the use of Google+, it is possible to log out at Twitter before using our site.
On our website we use plugins of the social network LinkedIn of the LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, (hereinafter "LinkedIn"). The LinkedIn plugins are identified by the LinkedIn logo or the "Share Button" ("Recommend") on this website. When you visit this website, a direct connection between your browser and the LinkedIn server is established via the plugin. LinkedIn then receives the information that you have visited this website with your IP address. If you click the LinkedIn "Share" button while logged in to your LinkedIn account, you can link the contents of this website to your LinkedIn profile. This allows LinkedIn to associate the visit to this website with your user account.
The use of LinkedIn is to facilitate communication with the visitor and to improve our public image. For these purposes, our legitimate interest also comprises the processing of the data according to Art. 6 para. 1 lit. f GDPR.
If you are a LinkedIn member and do not want LinkedIn to link the data collected through our website to your LinkedIn membership information, you must log out of LinkedIn before visiting our website. Information on the collection and use of the data by the platform or plugins can be found in the data protection policy information: https://www.linkedin.com/legal/privacy-policy?_l=de_DE.
Users can request a confirmation from the person in charge of processing data, as to whether or not personal data concerning themselves is being processed by us.
Users have a right to rectification and/or completion visa-vie the person in charge of processing data, if the processed personal data concerning themselves is incorrect or incomplete. The person in charge must make the corrections immediately.
If users have objected to the processing of data according to Art. 21 para. 1 GDPR and it is not yet certain whether the legitimate reasons of the person in charge of processing data outweigh the rights of the user.
If restriction to process data has been inhibited under the above conditions, users will be notified by the person in charge of processing data before the restriction is lifted.
Personal data concerning users is no longer required for the purposes it was collected or otherwise processed.
Users revoke their consent to the processing of their data, which was based on Art. 6 para. 1 lit. a or Art. 9 para. 2 lit. GDPR, and there is no other legal basis for processing.
Users object to the processing of their data according Art. 21 para. 1 GDPR and there are no overriding legitimate grounds to continue processing, or they object according to Art. 21 para. 2 GDPR.
Personal data concerning users has been processed unlawfully.
The deletion of the users' personal data is necessary for compliance with a legal obligation under European Union law or the law of the Member States, to which the person in charge of processing data is subject.
Personal data concerning users was collected with respect to information society services offered according to Art. 8 para. 1 GDPR.
If the person in charge of processing data has publicized personal data concerning the users but is now obliged to delete this data in accordance with Art. 17 para. 1 of the GDPR, he shall take appropriate measures considering the available technology and the cost of implementation, to inform those who process your personal data, that your request to delete any links to such personal data or copies or replications of such personal data has been received.
If users have the right to rectify, delete or restrict the processing of data visa-vie the person in charge of processing such data, the latter is obliged to notify all recipients who have received personal data relating to users, which has been corrected or deleted or processing restricted, unless this proves to be impossible or involves a disproportionate level of cost.
Users have the right to be informed by the person in charge of processing data about these recipients of data.
In exercising this right, users also have the right to request that personal data relating to themselves be transmitted directly from one person in charge of processing data to another, if technically feasible. In doing so, freedoms and rights of other persons may not be impaired. The right to data portability does not apply to the processing of personal data required for the performance of a task in the public interest or in the exercise of official authority delegated to the person in charge of processing the data.
The person in charge of processing data will no longer process personal data concerning users unless he can demonstrate compelling legitimate grounds for processing that outweigh the interests, rights and freedoms of the users, or the processing is intended to assert, exercise or defend legal claims. If the personal data relating to the users is processed in order to operate direct mail, users have the right to object at any time to the processing of the personal data concerning themselves for the purpose of such advertising; this also applies to profiling to the extent it is associated with such direct mail. If users object to the processing of data for direct mail purposes, the personal data of the person concerned will no longer be processed for these purposes. Users have the option in connection with the use of information society services - regardless of Directive 2002/58/EC - to exercise their right by means of automated processes in which technical specifications are used.
With regard to the cases referred to in (1) and (3), the person in charge of processing data shall take appropriate measures to safeguard the rights and freedoms and legitimate interests of the users including at least the right to intervene, to express an opinion and to contest the decision made by the person in charge of processing data.

References: Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 21
 Art. 6
 Art. 9
 Art. 21
 Art. 21
 Art. 8
 Art. 17