Source: https://www.kedapro.com/en/declaration-of-data-protection/
Timestamp: 2019-04-26 02:11:03+00:00

Document:
We use this data to operate our website, in particular to track website utilization, website malfunction and to make adjustments or improvements. The client IP address is used for the purpose of transmitting the requested data; it will be anonymised after deletion of the technical requirement by deleting the last number pad (Ipv4) or the last octet (Ipv6).
The data is stored with each access of a user on one side of our offer and with each call of our Internet presence and is deleted, as soon as it is no longer necessary for the purpose of the survey, which is the case when the visitor leaves our website.
In order to make it technically possible to visit our website, we transfer so-called cookies to the end device of the data subject. Cookies are small text files that can be used to identify the person's device, usually by collecting the name of the domain from which the cookie data was sent, information about the age of the cookie and an alphanumeric identifier can be recorded. By storing the cookie on the device used without any intervention in the operating system, it is recognized again and allows us to make any preadjustment immediately available. We use this information to tailor our website and services to your needs and to speed up the visit to our website.
The storage duration of the various cookies varies, but is at most two years. They are stored on your local device, not on our server, so the actual erase time depends on how your browser software is configured. Please refer to the operating instructions of your browser software for information on how to delete cookies that have been set by us or whether they can be deleted automatically.
On the website we provide a contact form. The data subject can contact us electronically and we can process the request. The following data will be collected and stored: name, address, IP address, e-mail address, telephone number, date and time of the request and the description of the request, possibly contract data, if the request is made in the context of contracting or processing [please complete any data collected here].
A user can contact us via email or phone. We store the data transmitted to us and provided by the data subject for processing the request. This data is the name, e-mail address, telephone number, date and time of the request and the description of the request, if applicable, contract data if the request is made in the context of contracting or processing. The data will not be passed on to third parties. They are used to process the contact request of the data subject.
Once the data is no longer necessary to achieve its purpose, it will be deleted, which is the case when the conversation is finalized and the facts clarified and there are no contractual or tax retention periods. This period is five years for personal data subject to § 147 Tax Code (AO) and ten years for personal data subject to § 257 Commercial Code (HGB). The deadlines start at the end of the calendar year in which the data was collected.
The storage of the aforementioned data is based on the legal basis Art. 6 para. 1 lit. b GDPR in the context of contract initiation or fulfillment or according to Art. 6 para. 1 lit. f GDPR. The legitimate interest of the responsible person is to be able to process the contact request and to be able to prevent abuse of the contact request.
The data subject has the possibility to object to the storage at any time. Then the data stored for the process will be deleted. If a contract has been concluded, the above statements regarding the keyword "conclusion of contract" apply.
The client IP address is collected to use the Google Analytics service. This website uses Google Analytics, a web analytics service provided by Google Inc. ("Google"). Google Analytics uses so-called "cookies", text files that are stored on the user's device and that allow an analysis of the use of the website. The information generated by the cookie about the use of this website is usually transmitted to a Google server in the USA and stored there. However, due to the activation of IP anonymisation on this website, Google's IP address will be truncated within member states of the European Union or other parties to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the US and shortened there. On behalf of the operator of this website, Google will use this information to evaluate the use of the website, to compile reports on website activity and to provide other services related to website activity and internet usage to the website operator. The IP address provided by Google Analytics as part of Google Analytics will not be merged with other Google data.
Once the data are no longer necessary to achieve the purpose, it will be deleted, which is the case when the anonymization that occurs within the European Union is completed. This takes less than a second.
The data sent by us and linked with cookies, user IDs (eg user ID) or advertising IDs will be automatically deleted after 12 months. The deletion of data whose retention period has been reached is automatically performed once a month. For more information, visit https://www.google.com/analytics/terms/en.html and https://policies.google.com/?hl=en.
The storage of the aforementioned data is based on the legal basis Art. 6 para. 1 lit. f GDPR.
The legitimate interest lies in the fact that we are able to analyze the use of the website by all users in their entirety without any reference to the behavior of identifiable persons; this allows us to optimize our website and our offers.
The data subject can save the cookies by setting the browser settings accordingly.
Prevent software; However, we would like to point out to the data subject that in this case not all features of this website may be fully exploited. Furthermore, the data subject can prevent the collection by Google of the data generated by the cookie and the use of the website (including the IP address) as well as the processing of this data by Google, in that the data subject has access to the browser browser available under the following link. Plugin downloads and installs [http://tools.google.com/dlpage/gaoptout?hl=en].
If "personal data" are processed by the user on our website, then the data subject has the following rights towards the person responsible in accordance with the GDPR.
We provide the data subject with a copy of the personal data that is the subject of the processing. For all other copies requested by the data subject, the responsible person may request an appropriate fee based on the administrative costs.
The data subject has the right to demand from the responsible person without delay the correction of incorrect personal data concerning him. In consideration of the purposes of the processing, the data subject has the right to request the completion of incomplete personal data, including by means of a supplementary statement.
d) the data subject has lodged an objection to the processing pursuant to Art. 21 (1) GDPR, as long as it is not certain that the responsible reasons of the responsible person prevail over those of the data subject.
If the data subject has asserted a correction pursuant to Art. 16 DSGVO, a deletion of Art. 17 (1) GDPR or a restriction of processing pursuant to Art. 18 GDPR with respect to the responsible person, and the person in charge has all the recipients against whom the personal data of the data subject, about the request of the data subject informed (as far as this was not impossible or associated with disproportionate effort), the data subject has the right to be informed by the responsible person about the recipient.
The exercise of the right to data portability is without prejudice to the right of cancellation under Art. 17 GDPR. The right to data portability does not apply to any processing necessary for the performance of a task in the public interest or in the exercise of official authority delegated to the controller.
The data subject has the right, at any time for reasons arising from his particular situation, against the processing of personal data pertaining to him which, on the basis of Article 6 (1) lit. e or f GDPR takes an objection; this also applies to profiling based on these provisions.
If personal data are processed in order to operate direct mail, the data subject has the right at any time to object to the processing of personal data concerning him for the purpose of such advertising; this also applies to profiling insofar as it is associated with such direct mail. If the data subject objects to processing for direct marketing purposes, the personal data will no longer be processed for these purposes. A consent given by the data subject can be revoked at any time. However, the collection and processing up to that date remains legal.
The data subject has the right not to be subjected to a decision based solely on automated processing, including profiling, which has a legal effect on him or similarly significantly adversely affects him.
These decisions may not be based on special categories of personal data pursuant to Art. 9 (1) GDPR, unless Article 9 (2) lit. a or g GDPR applies and appropriate measures have been taken to protect the rights and freedoms as well as the legitimate interests of the data subject.
In the cases referred to in paragraphs (a) and (c), we shall take reasonable steps to safeguard the rights and freedoms and legitimate interests of the data subject, including at least the right to obtain the intervention of a person on our side, the statement of one's own position and on contestation of the decision.
Appeal the right to complain to a supervisory authority, in particular in the Member State of its residence, place of work or place of alleged infringement, if the person concerned considers that the processing of personal data concerning him / her violates this Regulation.
Without prejudice to any available administrative or extrajudicial remedy, including the right to complain to a supervisory authority under Article 77 GDPR, any data subject shall have the right to an effective judicial remedy, if he considers that the rights conferred on him by that regulation are not in conformity infringement of the processing of his personal data.
Claims against us against a processor are brought before the courts of the Member State in which we or the processor have a place of business. Alternatively, such actions may be brought before the courts of the Member State in which the data subject is resident unless we or the processor is an authority of a Member State acting in the exercise of its sovereign powers.

References: § 147
 § 257
 Art. 6
 Art. 6
 Art. 6
 Art. 21
 Art. 16
 Art. 17
 Art. 18
 Art. 17
 Art. 9