Source: https://www.diekuechenplaner.de/en/contact/pivacy-statement.html
Timestamp: 2019-04-20 10:32:45+00:00

Document:
We collect and use personal data from our users only if this is needed for our content and services and to provide a functional website. Your personal data will be collected and processed under observance of applicable data protection laws, especially the General Data Protection Regulation (GDPR).
If the data subject permits us to process personal data, Art. 6(1)(a) GDPR serves as the legal basis.
If personal data must be processed to fulfil a contract whose contracting party is the data subject, the legal basis is Art. 6(1)(b) GDPR. This also applies to processing operations that are necessary to implement pre-contractual measures.
If personal data must be processed to fulfil a legal obligation to which our company is subject, the legal basis is Art. 6(1)(c) GDPR.
If the processing is necessary to safeguard a legitimate interest of our company or a third party, and that legitimate interest is not outweighed by the interests, basic rights and freedoms of the data subject, the legal basis will be Art. 6(1)(f) GDPR.
The data subject’s personal data will be erased or blocked as soon as the purpose of storage no longer applies. We may also store those data if such storage is provided for through the European or national legislature in the form of directives under European Union law, statutes or other provisions to which the controller is subject. The data will also be deleted or blocked if a storage period prescribed by the standards mentioned expires, unless the data must be stored for longer to conclude or fulfil a contract.
The data and log files are stored to optimise the website and ensure its functionality, and to ensure the security of our IT systems. Those data will not be combined with other data sources. The legal basis for storing the data and the log files temporarily is Art. 6(1)(f) GDPR.
Cookies help make our services more user-friendly, effective and secure. A few cookies are “session cookies”. Those cookies will be erased after the end of your browser session. On the other hand, other cookies remain on your end device until you delete them. Such cookies help us to recognise you whenever you return to our website.
With a modern web browser, you can monitor, restrict or prevent the placement of cookies. Many browsers can be configured so that cookies will delete themselves when the program is closed. Deactivating cookies can limit our website’s functionality.
The legal basis for using cookies to process personal data is Art. 6(1)(f) GDPR. As this website’s operator, we have a legitimate interest in the storing of cookies so that our services can be provided smoothly and free from technical errors. If other cookies are placed (for analysis functions, for example), those will be treated separately in this data privacy statement.
The data you provide in the contact form or send through email will not be forwarded to third parties without your consent.
If the user’s consent has been obtained, the legal basis for processing the data is Art. 6(1)(a) GDPR. The legal basis for processing data transmitted when an email is sent is Art. 6(1)(f) GDPR. If contact is established through the contact form or email to conclude a contract, an additional legal basis for the processing is Art. 6(1)(b) GDPR.
Processing the personal data from the input mask serves the exclusive purpose of helping us process the contact that is made. Making contact through email also constitutes the required legitimate interest in processing those data.
The user may at any time revoke their consent to have their personal data processed.
Data transmitted via the contact form or email will remain with us until you ask us to erase them, withdraw your consent to their storage, or it is no longer necessary to store them. Compulsory statutory provisions, especially retention periods, remain unaffected.
By subscribing to our newsletter, you are declaring your agreement to receive it and to the procedure described below. We send the newsletter, emails and other electronic notifications with advertising information (hereinafter referred to as “newsletter”) only with your consent in accordance with Article 6 Paragraph 1 Letter a) GDPR or if we are so permitted by law in accordance with Article 6 Paragraph 1 Letter b) GDPR. In order to register for the newsletter, it suffices for you to provide us with your name and email address. The registration for our newsletter takes place by means of a so-called double opt-in procedure: Following the registration, you receive an email from us in which you are requested to confirm your registration. This confirmation is necessary so that nobody can register using another person’s email address. The newsletter registrations are recorded in order to prove the registration process in accordance with the legal requirements. This includes saving the time of registration and confirmation, as well as the IP address. Changes to you data saved by the delivery company are also recorded.
The sending of the newsletter takes place with the consent of the recipient in accordance with Article 6 Paragraph 1 Letter a) and Article 7 GDPR. Our interest is represented by the use of a user-friendly and secure newsletter system, which serves both our commercial interests and corresponds to the expectations of our users and also allows us to prove the consent which has been issued.
You can terminate your newsletter subscription at any time, i.e. you can revoke your consent. You can find a link which allows you to terminate your newsletter subscription at the end of each newsletter. We can save the email addresses which have been provided for up to three years in accordance with our legitimate interests before we delete them. This allows us to provide proof that consent was issued in the past. The processing of this data is limited to the purpose of defending against possible claims. It is possible to request an individual deletion request at any time, provided that the previous existence of consent is confirmed at the same time.
The data you provide in the contact form will not be forwarded to third parties without your consent.
If the user’s consent has been obtained, the legal bases for processing the data are Art. 6(1)(a and b) GDPR.
Processing the personal data from the input mask serves the exclusive purpose of helping us process the reservation.
Data transmitted via the contact form will remain with us until you ask us to erase them, withdraw your consent to their storage, or it is no longer necessary to store them. Compulsory statutory provisions, especially retention periods, remain unaffected.
The legal basis for placing Google Analytics cookies is Art. 6(1)(f) GDPR. As this website’s operator, we have a legitimate interest in analysing user behaviour to optimise our web services and possibly advertisement.
We use Google Analytics with activated IP anonymisation. This ensures that Google will truncate your IP address within the member states of the European Union, or in other contracting party states to the EEA Agreement, before the address is sent to the USA. There are exceptional cases in which Google transmits the full IP address to a server in the USA, where it is then truncated. On our behalf, Google will use this information to evaluate your use of the website, create reports about website activities and render additional services for us which are related to website use and internet use. The IP address transmitted by Google Analytics will not be combined with other Google data.
To completely fulfil the statutory data protection requirements, we’ve concluded a contract for commissioned data processing with Google.
Our website uses the “Demographics” function of Google Analytics. This function allows you to create reports which contain statements on the age, gender and interests of site visitors. These data come from Google’s interest-related advertising and from visitor data from third-party providers. Those data cannot be allocated to any particular person. You can deactivate this function at any time. This can be done in the ad settings of your Google account, or by prohibiting Google Analytics from collecting your data as explained in the item “Objection to the collection of data”.
Our website uses Google Maps. When Google Maps are used, Google (Google Inc., 1600 Amphitheatre Parkway, Mountain View, California, 94043) will also collect, process and use data about how website visitors use the map function. You can find more information in Google’s privacy statement, which is accessible under www.google.com/privacypolicy.html.
We also have a company page on Facebook and Instagram in order to communicate with active customers, potential customers and users on these sites and in order to be able to provide information concerning our services. We wish to point out that during this process, data is processed outside of the territory of the European Union. This may lead to risks for the users, as it may be made more difficult for the users to claim their rights. Both of these American providers are certified under the privacy shield. This means that they have undertaken to comply with the data protection standards of the EU.
In addition, the data of the users is generally processed in the above social media for market research and advertising purposes. For example, use profiles can be compiled from the user behaviour and the resulting interests. The use profiles can be used in turn, for example to place adverts inside and outside of the platform, which are presumed to correspond to the interests of the users. For this purpose, cookies are generally saved on the computers of the users in which the use behaviour and interests of the users are saved. In addition, data outside of the devices deployed by the users can also be saved in the use profiles (in particular if the users are members of the respective platforms and are logged in to these).
The processing of the personal data of the users takes place in accordance with our legitimate interests in ensuring the effective provision of information and communication with the users (Article 6 Paragraph 1 Letter f) GDPR). Should you be requested by the respective providers to issue your consent to the data processing (for example declaring your agreement by clicking a check box or confirmation of a button), the legal basis for the processing is Article 6 Paragraph 1 Letter a) and Article 7 GDPR.
Also in case that information is requested and user rights claimed, we wish to point out that it is most effective to contact the providers in this respect. Only the providers have access to the data of the users and can take relevant measures directly and provide information. However, should you require assistance, you can get in touch with us.
Instagram is a product of Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.
You can apply to us electronically, in particular by email. We only use your information in order to process the application and do not pass this on to third parties. Please bear in mind that emails sent without encryption cannot be protected against unauthorised access.
Following completion of the application process, your personal data is deleted after a maximum of 6 months, unless you have expressly issued us with your consent to your data being saved for longer or unless a contract has been concluded. The legal basis is § 26 of the German Federal Data Protection Act (BDSG).
You have the right at any time under the applicable statutory provisions (Art. 15 GDPR) to free information about the personal data concerning you which has been stored, the origin of those data, their recipient, the purpose of the data processing and the planned duration of the storage, or if no specific information is available to this end, the criteria for determining the storage period. To that end, and regarding further issues about the topic of personal data, you can contact us at any time using the contact options indicated in the legal notice.
Under Art. 16 GDPR, if the processed personal data concerning you are incorrect or incomplete, you have the right against the controller to have them corrected, deleted, or both. The controller must undertake such correction without undue delay.
Under Art. 17 GDPR, you may demand the erasure of personal data about you we have stored, unless those data must be processed to exercise the right to free information and expression of opinion, to fulfil a legal obligation, for reasons in the public interest, or to assert, exercise or defend against legal claims.
Under Art. 18 GDPR, you may demand the restriction of the processing of your personal data if you dispute its correctness, or the processing is illegal but you waive your right to have those data erased or we no longer need the data but you need them to assert, exercise or defend against legal claims, or you have lodged an objection against their processing under Art. 21 GDPR.
Under Art. 20 GDPR, you have the right to receive the personal data concerning you, which you have provided to the controller, in a structured, commonly used and machine-readable format. You also have the right to transmit those data to another controller without hindrance from the controller to which the personal data were provided.
You have the right to object at any time, for reasons arising from your particular situation, if personal data concerning you are processed based on Art. 6(1)(e or f) GDPR. This also applies to profiling based on these provisions.
If you object to processing for direct marketing purposes, the personal data concerning you will no longer be processed for those purposes.
If you would like to take advantage of your right to object, sending an email to datenschutz@diekuechenplaner.de will be sufficient.
You have the right to withdraw your declaration of consent under data protection laws at any time. Withdrawing your consent will not affect the legality of processing that has already occurred based on your consent.
If you would like to take advantage of your right of revocation, sending an email to datenschutz@diekuechenplaner.de will be sufficient.
The supervisory authority to which the complaint is submitted will inform the complainant about the status and results of that complaint, including the possibility for judicial remedy under Art. 78 GDPR.

References: Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 § 26
 Art. 16
 Art. 17
 Art. 18
 Art. 21
 Art. 20
 Art. 6
 Art. 78