Source: https://www.c-lecta.com/privacy-policy/
Timestamp: 2019-04-26 16:31:03+00:00

Document:
In principle, we only collect and use our users’ personal data to the extent this is necessary to provide a functional website and our content and services. Our users’ personal data is usually only collected and used once we have obtained the user’s consent.
As far as we obtain the consent of a data subject for processing operations involving that data subject’s personal data, Art. 6(1)(a) of the EU General Data Protection Regulation (GDPR) serves as the legal basis.
As regards the processing of personal data necessary for the performance of a contract to which the data subject is a party, Art. 6(1)(b) GDPR serves as the legal basis. This also applies to processing operations necessary to take steps prior to entering into a contract.
As far as processing of personal data is necessary for compliance with a legal obligation to which our company is subject, Art. 6(1)(c) GDPR serves as the legal basis.
In the event that vital interests of the data subject or another natural person require the processing of personal data, Article 6(1)(d) GDPR serves as the legal basis.
If the processing is necessary for the purposes of a legitimate interest pursued by our company or by a third party, and if that interest is not overridden by the interests or fundamental rights and freedoms of the data subject, Art. 6(1)(f) GDPR serves as the legal basis of the processing.
We erase or block the personal data of the data subject as soon as the purpose of storage ceases to apply. Furthermore, data may be stored if this has been provided for by the European or national legislator in EU regulations, laws or other provisions to which the controller is subject. The data will also be blocked or erased if a storage period prescribed by the aforementioned standards expires, unless further storage of the data is necessary for the conclusion or performance of a contract.
The data is also stored in our system’s log files. This does not apply to IP addresses of the user or other data that would enable an assignment of data to a specific user. This data is not stored together with other personal data of the user.
The legal basis for the temporary storage of the data is Art. 6(1)(f) GDPR.
Temporary storage of the IP address by the system is necessary to make it technically possible to deliver the website to the user’s computer. This requires storing the user’s IP address for the duration of the session.
Our legitimate interest in data processing pursuant to Art. 6(1)(f) GDPR also lies in these purposes.
The data will be erased as soon as it is no longer required for achieving the purpose of its collection. In the case of recording the data to provide the website, this is the case when the respective session has ended.
The recording of data for the provision of the website and the storage of data in log files is an absolute necessity for the operation of the website. Consequently, there is no possibility of objection on the part of the user.
Default TYPO3 session cookie. In the case of a user login, it stores the session ID that is used to recognise the logged-in user in order to grant them access to protected areas.
Stores information about whether the website intro has already been viewed or not.
Stores information about whether the user has already been prompted by a pop-up form to subscribe to the newsletter.
The legal basis for the processing of personal data when using cookies is Art. 6(1)(f) GDPR.
The purpose of using technically necessary cookies is to simplify the use of websites for users. Some functions of our website cannot be offered without using cookies. For these it is necessary that the browser be recognised even after a page change. Analysis cookies are used for the purpose of improving the quality of our website and its content. Analysis cookies tell us how the website is used, thus allowing us to regularly optimise our service.
Our legitimate interest in processing personal data pursuant to Art. 6(1)(f) GDPR also lies in these purposes.
There is a contact form on our website which can be used to make contact with us electronically. If a user takes advantage of this possibility, the data entered in the input screen will be transmitted to and stored by us.
At the time the message is sent, the date and time of registration will also be stored.
Alternatively, you can contact us using the email address provided. In this case, we will store the user’s personal data transmitted by email.
The data will not be transmitted to third parties in this context. The data is only used in order to process the conversation.
The legal basis for processing the data transmitted in connection with your contacting us is Art. 6(1)(f) GDPR. If contact is made with the intention of concluding a contract, an additional legal basis for the processing is Art. 6(1)(b) GDPR.
The other personal data processed during the submission process serves to prevent any misuse of the contact form and to ensure the security of our information technology systems.
The data will be erased as soon as it is no longer required for achieving the purpose of its collection. For personal data from the contact form input screen and personal data submitted by email, this is the case once the respective conversation with the user has ended. The conversation has ended when it can be inferred from the circumstances that the matter in question has been finally clarified.
The user has the possibility to withdraw their consent to the processing of the personal data at any time. If the user contacts us by email, they can object to the storage of their personal data at any time. In such a case, it will not be possible to continue the conversation.
We will then erase all personal data stored in connection with the user contacting us.
You can subscribe to a free newsletter on our website. When registering for the newsletter, the data from the input screen is transmitted to us. Users are only required to provide their last name, email address and country of origin.
If the user has provided consent, the legal basis for processing the data after the user has registered for the newsletter is Art. 6(1)(a) GDPR.
The user’s email address is collected for the purpose of delivering the newsletter.
The data will be erased as soon as it is no longer required for achieving the purpose of its collection. Accordingly, the user’s email address will be stored for as long as their newsletter subscription remains active.
Each user can cancel their newsletter subscription at any time. To this end, every newsletter contains a corresponding link.
To embed videos on our website, we use plug-ins provided by Vimeo, a service of Vimeo, Inc., 555 West 18th Street, New York, New York 10011, USA. These plug-ins allow us to embed videos on this website which we have published on www.vimeo.com. If you visit one of our web pages with a Vimeo plug-in, this establishes a connection to Vimeo’s servers. In this way, the Vimeo server is notified of which web page you have visited. If you are simultaneously logged in as a member of Vimeo, Vimeo will associate this information with your personal user account. When using the plug-in, e.g. playing a video by pressing the play button, this information is also assigned to your user account. Vimeo stores your data as usage profiles and processes it for purposes of advertising, market research and/or the demand-oriented design of its website. Such analysis takes place in particular (even for users who are not logged in) to provide demand-oriented advertising and to inform other users of the social network about your activities on our website.
The legal basis for the processing is Art. 6(1)(f) GDPR.
The processing serves to make our website more attractive and to offer you additional services.
We have no knowledge of how long Vimeo stores data and have no way of influencing this.
Data protection information provided by Vimeo can be viewed at vimeo.com/privacy. According to its own information, Vimeo offers an appropriate level of data protection because Vimeo complies with the requirements of the Privacy Shield. For more information, please go here.
You also have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data contravenes the GDPR.
The provision of personal data is neither legally nor contractually required, but is in part – as explained above – technically necessary. Contact details (at least a first name, last name and address) are necessary to conclude a contract and an email address is necessary to receive the newsletter. You are not obliged to provide us with this personal data. However, if you do not provide personal data, it will not be possible to access the website, contact us by email or conclude a contract.
No such algorithms are used.

References: Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6