Source: http://www.hartung-ludwig.de/en/disclaimer.html
Timestamp: 2019-04-22 16:26:09+00:00

Document:
We are very pleased about your interest in our company. Data privacy has particularly high importance for the Management board of Hartung & Ludwig Architektur- und Planungsgesellschaft mbH. As a general rule, it is possible to use the Hartung & Ludwig Architektur- und Planungsgesellschaft mbH website without disclosing any personal data. If a data subject would like to use specific services of our company through our website, however, processing of personal data may become necessary. If the processing of personal data is necessary and if no legal foundation exists for such processing, we will generally obtain consent from the data subject.
Hartung & Ludwig Architektur- und Planungsgesellschaft mbH has implemented numerous technical and organisational measures for processing, in order to ensure the most gap-free protection possible for the personal data processed via this website. Nevertheless, in principle, Internet-based data transfers may have security vulnerabilities, so that absolute protection cannot be guaranteed. For this reason, every data subject is free to also send personal data to us using alternative methods, such as by telephone.
Profiling means any type of automated processing of personal data, which is comprised of this personal data being used in order to evaluate specific personal aspects, which relate to the natural person, particularly, in order to analyse or forecast aspects regarding work performance, financial situation, health, personal preferences, interests, reliability, conduct, place of residence or change of location by this natural person.
A data subject may contact our Data Protection Representative at any time with all questions and suggestions relating to data privacy.
Cookies allow Hartung & Ludwig Architektur- und Planungsgesellschaft mbH to provide the user of this website with more user-friendly services, which would not be possible without setting cookies.
Each time the website is accessed by a data subject or an automated system, the Hartung & Ludwig Architektur- und Planungsgesellschaft mbH website collects a series of general data and information. These general data and information are stored in the log files of the server. The (1) browser types and versions, (2) the operating system used by the accessing system, (3) the website from which an accessing system reaches our website (so-called referrer), (4) the sub-websites, which are accessed via an accessing system on our website, (5) the date and time of access to the website, (6) an Internet protocol address (IP address), (7) the Internet Service Provider of the accessing system and (8) other similar data and information can be collected, which have the purpose of averting hazards in the case of attacks on our information technology systems.
When using these general data and information, Hartung & Ludwig Architektur- und Planungsgesellschaft mbH does not draw any conclusions about the data subject. In fact, this information is required in order to (1) correctly deliver the contents of our website, (2) optimise the contents of our website and the advertising for these, (3) guarantee the permanent functionality of our information technology systems and the technology of our website and (4) provide criminal prosecution authorities with necessary information in the event of a cyber attack. These anonymously collected data and information are therefore evaluated by Hartung & Ludwig Architektur- und Planungsgesellschaft mbH for statistical purposes, on the one hand, and on the other hand, to increase data privacy and data security, in order to ultimately guarantee an optimum protection level for the personal data, which we process. The anonymous data of the server log files are stored separately from all of the personal data provided by a data subject.
The deletion of your personal data is required to fulfil a legal obligation under Union law or the law of the Member States, by which the controller is governed.
If one of the aforementioned reasons applies and a data subject would like to arrange for the deletion of personal data, which are stored with Hartung & Ludwig Architektur- und Planungsgesellschaft mbH, he or she can contact one of the data controller’s employees at any time for this purpose. The employee of Hartung & Ludwig Architektur- und Planungsgesellschaft mbH will arrange for the request for deletion to be fulfilled at once.
If the personal data have been disclosed by Hartung & Ludwig Architektur- und Planungsgesellschaft mbH and our company is obligated to delete the personal data, as the controller in accordance with Art. 17 Para. 1 GDPR, in consideration of the available technology and the implementation costs, Hartung & Ludwig Architektur- und Planungsgesellschaft mbH shall take appropriate measures, also of a technical nature, in order to notify other data controllers, which process the disclosed personal data, that the data subject has been asked by these other data controllers to delete all of the links to these personal data or copies or replications of these personal data, if the processing is not necessary. The employee of Hartung & Ludwig Architektur- und Planungsgesellschaft mbH will make the necessary arrangements on a case-by-case basis.
The processing is unlawful and the data subject rejects the deletion of the personal data and instead, requests the restriction of use of the personal data.
If one of the aforementioned reasons applies and a data subject would like to request the restriction of personal data, which are stored with Hartung & Ludwig Architektur- und Planungsgesellschaft mbH, he or she can contact one of the data controller’s employees at any time for this purpose. The employee of Hartung & Ludwig Architektur- und Planungsgesellschaft mbH will arrange for the necessary restriction of processing.
To assert the right to data transferability, the data subject can contact an employee of Hartung & Ludwig Architektur- und Planungsgesellschaft mbH at any time.
Any person affected by the processing of personal data has the right, granted by the European issuer of directives and regulations, which arises from his or her specific situation, to file an objection to the processing of his or her personal data, which occurs on the basis of Art. 6 Para.1 Letters e or f GDPR, at any time. This also applies to profiling based on these provisions.
Hartung & Ludwig Architektur- und Planungsgesellschaft mbH will no longer process the personal data, in the case of an objection, unless we can provide evidence of mandatory protectable reasons for the processing, which outweigh data subject’s interests, rights and freedoms, or are for the purpose of processing the assertion, exercising or defence of legal claims.
If Hartung & Ludwig Architektur- und Planungsgesellschaft mbH processes personal data in order to perform direct marketing, the data subject has the right to file an objection to the processing of the personal data for the purpose of such marketing at any time. This also applies to profiling, if it is related to such direct marketing. If the data subject objects to Hartung & Ludwig Architektur- und Planungsgesellschaft mbH about the processing for the purpose of direct marketing, Hartung & Ludwig Architektur- und Planungsgesellschaft mbH will no longer use the personal data for these purposes.
Furthermore, the data subject has the right to file an objection to the relevant processing of personal data, which arise from the specific situation, which takes place at Hartung & Ludwig Architektur- und Planungsgesellschaft mbH for scientific or historical purposes or for statistical purposes in accordance with Art. 89 Para. 1 GDPR, unless such processing is necessary for the fulfilment of a duty in the public interest.
To exercise the right to objection, the data subject may contact any employee of Hartung & Ludwig Architektur- und Planungsgesellschaft mbH or another employee at any time. The data subject is also entitled to exercise the right to object using an automated procedure, for which technical specifications are used, in relation to the use of information society services - without prejudice to Regulation 2002/58/EC.
If the decision (1) is necessary for the conclusion or performance of a contract between the data subject and the controller, or (2) is explicitly authorised by the data subject, Hartung & Ludwig Architektur- und Planungsgesellschaft mbH shall take the appropriate measures, in order to preserve the rights and freedoms, as well as the legitimate interests of the data subject, which includes the right to attain the intervention of a person by the controller, to prevent the own point of view and to challenge the decision.
The data controller has integrated components of LinkedIn Corporation into this website. LinkedIn is an Internet-based social network, which enables the connection of users with existing business contacts, as well as the establishment of new business contacts. More than 400 million registered persons use LinkedIn in more than 200 countries. Therefore, LinkedIn is currently the largest platform for business contacts and one of the most visited websites in the world.
Each time our website is accessed, which contains a LinkedIn component (LinkedIn plugin), this component arranges for the browser being used by the person concerned to download a corresponding display of the LinkedIn component. Additional information about the LinkedIn plugins can be accessed at https://developer.linkedin.com/plugins. Within the scope of this technical procedure, LinkedIn receives information about which concrete sub-site of our website is visited by the data subject.
If the data subject is logged into LinkedIn at the same time, LinkedIn will recognise which concrete sub-site of our website the data subject visits, each time our website is accessed by the data subject and during the entire presence on our website. This information is collected by the LinkedIn component and allocated by LinkedIn to the data subject’s respective LinkedIn account. If the data subject clicks on one of the LinkedIn buttons integrated into our website and thereby gives a LinkedIn recommendation, LinkedIn allocates this information to the personal LinkedIn user account of the data subject and stores this personal data.
LinkedIn always receives information that the data subject visits our website via the LinkedIn component, if the data subject is logged into LinkedIn at the time of accessing our website; this occurs, irrespective of whether the data subject clicks on the LinkedIn components or not. If such sending of this information to LinkedIn is not wanted by the data subject, he or she can prevent the sending by logging out of his or her LinkedIn account prior to accessing our website.
The data controller has integrated Xing components into this website. Xing is an Internet-based social network, which enables the connection of users with existing business contacts, as well as the establishment of new business contacts. The individual users can set up a personal profile with Xing. Companies can create company profiles, for example, or publish job vacancies on Xing.
The operating company of Xing is XING SE, Dammtorstraße 2930, 20354 Hamburg, Germany.
Each time one of the individual pages of this website is accessed, which are operated by the data controller and on which a Xing component (Xing plug-in) has been integrated, the Internet browser on the data subject’s information technology system is automatically instigated by the respective Xing component to download the appropriate Xing component from Xing. Additional information about the Xing plug-ins can be accessed at https://dev.xing.com/plugins. Within the scope of this technical procedure, Xing receives information about which concrete sub-site of our website is visited by the data subject.
If the data subject is logged into Xing at the same time, Xing will recognise which concrete sub-site of our website the data subject visits, each time our website is accessed by the data subject and during the entire presence on our website. This information is collected by the Xing component and allocated by Xing to the data subject’s respective Xing account. If the data subject clicks on one of the Xing buttons integrated into our website and thereby gives a Xing recommendation, Xing allocates this information to the personal Xing user account of the data subject and stores this personal data.
Xing always receives information that the data subject visits our website via the Xing component, if the data subject is logged into Xing at the time of accessing our website; this occurs, irrespective of whether the data subject clicks on the Xing component or not. If such sending of this information to Xing is not wanted by the data subject, he or she can prevent the sending by logging out of his or her Xing account prior to accessing our website.
We use Google Maps (API) from Google LLC., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”) for displaying interactive maps and our location.
Irrespective of whether you have a Google account or not or whether you are logged into an account, when accessing a sub-site of our website, in which a Google Maps map is integrated, information will be transfered about your use of our website (e.g. your IP address) to Google servers in the USA and stored there. If you are logged into Google when accessing a sub-site of our website, in which a Google Maps map is integrated, your data will be allocated directly to your account. You can prevent the allocation of your data to your profile by Google by logging out of the Google account before accessing the website. Google stores and evaluates your data as user profiles. This occurs, irrespective of whether you are logged in or not. The legal basis for the processing of the data is Art. 6 Para. 1 Letter f GDPR. A legitimate interest exists by Google in displaying personalised advertising, market research and/or needs-based designing of its website. You have a right to object to the formation of these user profiles. You must exercise the right to object vis-à-vis Google.
Google LLC, with its registered office in the USA, is certified for the US-European “Privacy Shield” data protection convention, which guarantees compliance with the data protection level that is applicable in the EU.
Art. 6 I Letter a GDPR serves as a legal basis for our company for processing activities, in which we obtain consent for a specific processing purpose. If the processing of personal data is necessary for the fulfilment of a contract, whose contracting party is the data subject, as is the case, for example, with processing activities, which are necessary for the delivery of goods or the provision of other services or consideration, the processing is based on Art. 6 I Letter b GDPR. The same applies to such processing activities, which are necessary for the implementation of pre-contractual measures, such as in the cases of inquiries about our products or services. If our company is subject to a legal obligation, due to which processing of personal data becomes necessary, for example, for the fulfilment of tax obligations, the processing is based on Art. 6 I Letter c GDPR. In rare cases, the processing of personal data may be necessary, in order to protect vital interests of the data subject or another natural person. This would be the case, for example, if a visitor was injured in our premises and his/her name, age, health insurance fund details or other vital information need to be disclosed to a doctor, a hospital or other third parties. Then, the processing would be based on Art. 6 I Letter d GDPR. Finally, processing activities may be based on Art. 6 I Letter f GDPR. Processing activities are based on this legal foundation, which are not covered by any of the aforementioned legal bases, if the processing is required to preserve our company’s legitimate interest or that of a third party, provided that the interests, constitutional rights and basic freedoms of the data subject do not outweigh this. We are specifically permitted to perform such processing activities, because they have been specifically mentioned by the European legislator. In this respect, it held the opinion that a legitimate interest could be assumed, if the data subject is a customer of the controller (recital 47 sentence 2 GDPR).
If the processing of personal data is based on Article 6 I Letter f GDPR, our legitimate interest is the implementation of our business activity in favour of the well-being of all of our employees and shareholders.
We inform you that the provision of personal data is partly prescribed by law (e.g. tax regulations) or may arise from contractual regulations (e.g. details about the contracting party). Sometimes, in order to conclude a contract, it may be necessary for a data subject to provide us with personal data, which must be subsequently processed by us. The data subject is, for example, obligated to provide us with personal data, if our company concludes a contract with it. Non-provision of personal data would have the consequence that the contract could not be concluded with the data subject. Prior to the provision of personal data by the data subject, the data subject must contact one of our employees. Our employee will inform the data subject on a case-by-case basis about whether the provision of the personal data is legally or contractually prescribed or necessary for conclusion of the contract, whether an obligation exists to provide the personal data and which consequences the non-provision of the personal data has.

References: Art. 17
 Art. 6
 Art. 89
 Art. 6

Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6