Source: https://www.vintage-maps.com/en/privacy-statement:20
Timestamp: 2019-04-18 12:53:02+00:00

Document:
We only process personal data of our users to the extent necessary to provide a functional website as well as our content and services. The processing of our users' personal data is only carried out regularly with the user's consent. An exception applies in those cases in which prior consent cannot be obtained for real reasons and the processing of data is permitted by law.
Insofar as we obtain the consent of the data subject for processing personal data, Article 6(1)(a) of the General Data Protection Regulation (GDPR) serves as the legal basis. For the processing of personal data required to fulfil a contract to which the data subject is a party, Article 6(1)(b) GDPR serves as the legal basis. This also applies to processing procedures which are necessary for the implementation of pre-contractual measures. To the extent that processing of personal data is necessary to fulfil a legal obligation to which our company is subject, Article 6(1)(c) GDPR serves as the legal basis. In the event that the vital interests of the data subject or another natural person require the processing of personal data, Article 6(1)(d) GDPR serves as the legal basis. If processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the first-mentioned interest, Article 6(1)(1)(b) of the GDPR serves as the legal basis for processing.
The personal data of the data subject will be disclosed or blocked as soon as the purpose of the storage ceases to apply. This data may also be stored if the European or national legislator has provided for this in EU regulations, laws or other provisions to which the person responsible is subject. The data will also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or performance of a contract.
Our website The data is also stored in the log files of our system. This data is not stored together with other personal data of the user.
The legal basis for the temporary storage of data and log files is Art. 6 Para.1 lit. f GDPR.
The temporary storage of the IP address by the system is necessary to enable the website to be delivered to the user's computer. For this purpose, the IP address of the user must remain stored for the duration of the session. It is stored in log files to ensure the functionality of our website. In addition, the data serves us to optimize the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context.
In these purposes is also our legitimate interest in data processing according to Art. 6 para.1 lit. f GDPR.
The data will be collected as soon as it is no longer necessary to achieve the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended.
If the data is stored in log files, this is the case after seven days at the latest. Additional storage is possible. In this case, the IP addresses of the users are changed or alienated so that an assignment of the calling client is no longer possible.
The collection of data for the provision of the website and the storage of data in log files is mandatory for the operation of the website. Consequently, there is no contradiction on the part of the user.
In the course of the registration process, your consent will be obtained and reference will be made to this data protection declaration.
If you purchase goods or services on our website and provide us with your e-mail address, we may subsequently use it to send you a newsletter. In such a case, the newsletter will only send direct advertising for your own goods or services.
No data will be passed on to third parties in connection with data processing for the dispatch of newsletters. The data will only be used for sending the newsletter.
The legal basis for the processing of data after registration for the newsletter by the user is Art. 6 Para.1 lit. a GDPR.
The legal basis for sending the newsletter as a result of the sale of goods or services is § 7 para 3 UWG.
The data will be collected as soon as it is no longer necessary to achieve the purpose for which it was collected. The user's e-mail address will therefore be stored for as long as the subscription to the newsletter is active.
Other personal data collected in the registration process is usually collected after a seven-day period.
The subscription to the newsletter can be cancelled by the user concerned at any time. For this purpose there is a corresponding link in every newsletter. This also allows you to revoke your consent to the storage of personal data collected during the registration process.
As part of the registration process, the user is asked to consent to the processing of this data.
The legal basis for the processing of the data is Art. 6 Para.1 lit. a GDPR.
If the purpose of registration is to fulfil a contract to which the user is a party or to carry out pre-contractual measures, the additional legal basis for processing the data is Article 6(1)(b) GDPR.
The user must register in order to fulfil a contract with the user or to carry out pre-contractual measures. The collected data is required for invoicing and for the dispatch of the purchased goods.
The data will be collected as soon as it is no longer necessary to achieve the purpose for which it was collected. This is the case for the execution of a contract during the registration process or for the execution of pre-contractual measures if the data is no longer required for the execution of the contract. Even after conclusion of the contract, it may still be necessary to store personal data of the contractual partner in order to fulfil contractual or legal obligations.
As a user you have the possibility to cancel the registration at any time. You can change or delete the data stored about you at any time. For this purpose, it is sufficient to inform us by e-mail, by telephone or via the contact form. If the data are required to fulfil a contract or to carry out pre-contractual measures, premature deletion of the data is only possible insofar as contractual or statutory obligations do not conflict with a solution.
We will ask for your consent to the processing of your data and refer you to this privacy statement as part of the sending process.
Alternatively, you may contact us via the email address provided. In this case, the user's personal data transmitted by e-mail will be stored.
The legal basis for the processing of data transmitted in the course of an e-mail transmission is Article 6(1)(f) GDPR. If the e-mail contact is aimed at the conclusion of a contract, the additional legal basis for the processing is Art. 6 Para.1 lit. b GDPR.
The data will be collected as soon as it is no longer necessary to achieve the purpose for which it was collected. For the personal data from the input mask of the contact form and those that were sent by e-mail, this is the case when the respective conversation with the user has ended. Conversation ends when it is clear from the circumstances that the matter in question has been finally resolved.
Additional personal data collected during the sending process will be collected after seven days at the latest.
The user may at any time revoke his/her consent to the processing of personal data. If the user contacts us by e-mail, he can object to the storage of his personal data at any time. In such a case the conversation cannot be continued. For this purpose, it is sufficient to inform us by e-mail, by telephone or via the contact form. In this case, all personal data stored in the course of contacting us will be deleted.
We use the Google Analytics Add-on "anonymizeIP" to shorten or make your IP address anonymous. This prevents personal data from being collected via IP addresses. Thus, Google only stores an anonymized IP address.
The legal basis for processing users' personal data is Article 6(1)(f) of the GDPR.
The processing of users' personal data allows us to analyse the surfing behaviour of our users. We are able to compile information about the use of the individual components of our website by evaluating the data obtained. This helps us to continuously improve our website and its user-friendliness. For these purposes, our legitimate interest also lies in the processing of data in accordance with Art. 6 para. 1 lit. f GDPR. By anonymizing the IP address, users' interest in protecting their personal data is sufficiently taken into account.
The data will be deleted when it is no longer needed for our recording purposes. In our case, this is the case after 26 months.
You can stop the use of Google Analytics by clicking on the following link. A cookie is placed in your browser to prevent this website from sending your information to Google: click here to enable Google Analytics opt-out. This will disable Google Analytics on this website. If you want to deactivate Google Analytics on all websites you visit in the future, please follow this link and install the corresponding add-on in your browser: Browser-Add-on to Opt-out Google Analytics.
This website uses Google Fonts, a service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Privacy Statement: https://www.google.com/policies/privacy/, Opt-Out: https://adssettings.google.com/authenticated.
(8) the existence of automated decision making including profiling in accordance with Art.At least in these cases, there is meaningful information about the logic involved and the scope and intended effects of such processing for the data subject.
You have the right to have your personal data corrected and/or completed by the data controller if the personal data processed concerning you are incorrect or incomplete. The person responsible shall make the correction without delay.
(4) if you object to the processing in accordance with Art.It has not yet been established whether the legitimate reasons of the person responsible outweigh your reasons.
If the processing of personal data concerning you has been restricted, such data may only be processed – apart from being stored with your consent or in order to assert, exercise or defend rights or to protect the rights of another natural or legal person or on grounds of an important public interest of the Union or a Member State.
If the processing restriction is restricted according to the above conditions, you will be informed by the person responsible before the restriction is lifted.
(2) You revoke your consent, on which the processing was based in accordance with Art. 6 para. 1 lit. a or Art. 9 para. 2 lit. a GDPR, and there is no other legal basis for the processing.
(3) You file an objection against the processing pursuant to Art. 21 para. 1 GDPR and there are no overriding legitimate reasons for the processing or you file an objection against the processing pursuant to Art. 21 para. 2 GDPR.
(5) The processing of personal data concerning you is necessary to fulfil a legal obligation under Union law or the law of the Member States to which the data controller is subject.
(6) The personal data concerning you were collected in relation to information society services offered in accordance with Art. 8 para. 1 GDPR.
The right to redress does not exist to the extent that processing is necessary for the assertion, exercise or defence of legal claims.
If you have exercised your right to rectification, cancellation or limitation of the processing against the controller, the controller is obliged to inform all recipients to whom the personal data concerning you have been disclosed of such rectification or limitation;This is not possible unless this proves to be unreasonable or involves disproportionate effort.
By exercising this right, you also have the right to request that the personal data concerning you be transferred directly by a responsible person to another responsible person, insofar as this is technically feasible. The freedoms and rights of other persons may not be affected by this.
You have the right to object at any time for reasons arising from your particular situation to the processing of personal data concerning you, which is carried out on the basis of Art. 6 para. 1 lit. or GDPR; this also applies to profiling based on these provisions.
The controller no longer processes the personal data concerning you, unless he can prove compelling reasons for protection which outweigh your interests, rights and freedoms, or the processing serves to assert, enforce or defend legal claims.
You have the possibility to exercise your right of opposition by means of automated procedures using technical specifications in connection with the use of Information Society services, notwithstanding Directive 2002/58/EC.
Without prejudice to any other administrative or judicial remedy, you have the right of appeal to a supervisory authority, in particular in the Member State where you are staying, working or suspected of having infringed the GDPR, if you believe that the processing of personal data concerning you is contrary to it.
The supervisory authority to which the complaint has been lodged shall inform the complainant of the status and outcome of the complaint, including the possibility of a judicial remedy under Article 78 GDPR.

References: Art. 6
 Art. 6
 Art. 6
 § 7
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 9
 Art. 21
 Art. 21
 Art. 8
 Art. 6