Source: https://www.beisele.com/data-privacy/
Timestamp: 2019-04-26 14:02:19+00:00

Document:
The following data protection principles pursuant to Art. 13 GDPR serve to inform you in what form and to what extent we collect personal data from you, process it further and, if necessary, pass it on. We name the specific interest in data collection and processing and show how you can effectively counter that.
We collect information that is generated when you visit our website, exclusively anonymized, unless you voluntarily enter your personal data in our forms or authenticate yourself with a personal account on our website (see Chapter 4).
Legal basis according to Art. 6 para. 1 lit. f) GDPR: Your anonymized usage data are collected exclusively for statistical purposes. The legitimate interest in collecting user data results from being able to optimize your own website to meet the needs of our customers.
We always track: the URLs and the names of the pages that were opened, the files that were requested, the date and time of the query, the IP address (truncated by the last octal, i.e. 255.255.255.x), the URL viewed before a page was viewed, the links pointing to an external domain, the time from the creation of a page by the web server to the transmission to the browser, the position of the visitors (incl. region, location as well as approximate longitude and latitude coordinates), the name and version of the browser, operating system and terminal (based on the detected “user agent”, an identifier that browsers send to our servers), the installed plugins and the default language of the browser, the screen resolution, the search engine search terms that have taken visitors to our website and the actions of visitors to our website.
The cookies also include: a randomly generated visitor ID, the time of the first website visit, the time of the last visit, and the total number of website visits made by a visitor.
We have commissioned the company “BG – Web, Print & Foto” (hereinafter “Provider”) to record this data in accordance with Art. 28 GDPR. For this purpose, the provider uses the software “Matomo” (formerly known as Piwik). This software is operated by the provider exclusively on servers in Germany.
Matomo is an open source software for the statistical evaluation of visitor access. Matomo uses persistent “cookies”, textual information that is stored in your browser and allows the analysis of website usage. Depending on the setting of your browser, the cookies allow us to recognize your browser when you visit our website again, despite the anonymous collection of your usage data. However, the usage data collected by Matomo cannot be used to personally identify you or associate your anonymized usage profile with personally identifiable personal information.
Processor/recipient of this data: Your data will be processed exclusively by us. For support purposes, the provider of Matomo and its subcontractors may access this data. In this case, contracts are concluded in accordance with Art. 28 GDPR throughout the access chain.
In order for you to choose whether your anonymized user data from Chapter 2 will be sent to the Matomo software or not, we will display a so-called “Cookie Notice” when you visit our website. Only when you confirm this note, Matomo will be integrated into the website. If you reject the note, this does not happen. Your choice will be stored for fourteen days as a technically necessary cookie named “acceptCookies”. Thereafter, or as soon as you delete this cookie, you will be asked again.
In the event that you already have cookies from Matomo in your browser: Without the inclusion of Matomo (if you refuse the cookie notice) these cookies are useless and cannot be used to analyze user behavior.
Personal data that you provide us voluntarily when sending the contact form or when sending an e-mail will be processed by us exclusively for specific purposes and treated confidentially. In the contact form, data is only flagged as mandatory if it is essential for further processing (for example, your e-mail address for contacting us). This is done on the basis of the legal basis according to Art. 6 para. 1 lit. f) GDPR with the legitimate interest to assist you on the basis of your request and to be able to maintain customer loyalty. Which data you send us directly by e-mail, you decide yourself.
Processor/recipient of your data: We process your data ourselves and generally do not pass it on to third parties, unless it does so with your consent. In individual cases it is possible that we have to pass on the data of inquiries addressed to us to our contractual partners for answering. In doing so, we ensure that our contractual partners always process your data in accordance with the currently valid data protection regulations. For this purpose, we have concluded contracts with these partners in accordance with Art. 28 GDPR.
Retention period of your data: Since we process your data exclusively appropriated, we delete it after completion of contact with you at the latest after 14 days, in order to be able to refer to your old request with another request. If your inquiry results in a fixed customer relationship, on the basis of which we will prepare and send you offers followed by an order, invoices or other tax-relevant documents, these documents will be subject to a separate retention period (pursuant to § 147 para. 3 in conjunction with Para. 1 no. 1, 4 and 4a AO as well as § 14b para. 1 UstG).
To protect your data, the exchange of data between our servers and your browser always takes place encrypted without any exception. The encryption takes place via the HTTPS protocol (“Hypertext Transfer Protocol Secure”) in conjunction with the “Transport Layer Security” (TLS, also known as SSL, “Secure Sockets Layer”).
Legal basis in accordance with Art. 6 para. 1 lit. f) GDPR: We use the “reCAPTCHA” service of Google LLC (hereafter “Google”) in order to be able to determine whether a form submission was made by a natural person or by automated services. Our legitimate interest is to protect ourselves from misuse of our forms. This Google review includes submitting your IP address and any other data needed for the review, such as cookies, length of stay or mouse movement on the page as soon as you enter one of our pages that includes the service.
Legal basis according to Art. 6 para. 1 lit. f) GDPR: We use Google Maps from Google LLC (hereafter “Google”) to display interactive maps. When using Google Maps, your interactions with the map (zooming, moving, searching, etc.) will be transmitted to Google in addition to your IP address. Our legitimate interest is to be able to present you our address data on interactive maps in order to facilitate orientation.
At any time, you can request full information according to Art. 15 para. 1 GDPR about your data stored free of charge. Insofar as no contractual or statutory information obligations preclude this, you also have the right that your data stored with us are restricted with regard to their processing (Art. 18 GDPR), corrected (Art. 16 GDPR), anonymized or deleted (Art. 17 GDPR).
According to Art. 20 GDPR, you are entitled to commission us with the data transfer of the data relating to you, which you have provided to us.
You are also entitled to file a complaint with a data protection supervisory authority.

References: Art. 13
 Art. 6
 Art. 28
 Art. 28
 Art. 6
 Art. 28
 § 147
 § 14
 Art. 6
 Art. 6
 Art. 15
 Art. 20