Source: https://www.khw-geschwenda.de/en/data-protection-declaration/
Timestamp: 2019-04-20 08:18:03+00:00

Document:
The following data protection declaration applies to the use of our Internet presence and informs you, as a relevant person as defined by data protection law and a user of this Internet presence, about the processing of personal data. Personal data are individual items of information concerning the personal or factual circumstances of a particular or identifiable natural person.
You can directly contact our data protection officers with any questions or suggestions concerning data protection.
The legal basis for data processing is Art. 6, Par. 1, No. 1 lit. f GDPR. The justified interest of the provider arises from the purposes for the gathering of data listed above. The data are anonymous and are stored separately from any potentially provided personal data. Inferences to a particular person are not possible.
this is permitted by law and in accordance with Art. 6, Pr. 1, No. 1 lit. b GDPR for the processing of contractual relationships with the user.
The data are automatically deleted following the expiration of a predefined period when further storage for documentation purposes is not required.
Some of the cookies are deleted as soon as you close your browser (transient cookies). Other cookies (persistent cookies) remain on your end device and make it possible for us to recognise your browser. These cookies are automatically deleted upon expiration of a predefined period.
You also have the right to register a complaint with a data protection regulatory authority concerning the processing of your personal data by us.
In the context of the visit to this website, the SSL (Secure Socket Layer) procedure is used in connection with the respective highest encoding level supported by the browser used by the user. This is generally a 256 bit encoding. If the browser used by a user does not support 256 bit encoding, 128 bit v3 technology is resorted to. The encoded transmission of a page of this Internet presence can be recognised by the key or lock symbol in the status bar of the browser.
In addition to the SSL encoding, technical and organisational security measures are used to protect the data against random or intentional manipulation, loss, destruction or unauthorised access by third parties. These security measures are continually improved in keeping with technological developments.
We use web fonts provided by Google LLC., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). The service serves the purpose of the uniform and correct representation of fonts on our page. To this purpose, your browser connects with the servers of Google and loads the required web fonts into your browser cache as soon as you call up a page of our Internet presence. In the process, Google determines that our website was called up via your IP address.
The legal basis for the usage of Google Web Fonts is Art. 6, Par. 1 lit. f GDPR (justified interest). Our justified interest is the uniform and correct representation of the fonts on our Internet presence.
You have the possibility to contact us through various communications channels, such as e-mail, telephone, mail or using a contact form. When you contact us, we save your data for the purpose of processing the enquiry. The data is not forwarded to third parties. The processing of personal data takes place in accordance with Art. 6, Par. 1, No. 1 lit. f GDPR. Justified interest here is to be found in the processing of your enquiry. If your contact has the aim of concluding a contract, the legal basis is also Art. 6, Par. 1, No. 1 lit. b GDPR. We delete this data as soon as your enquiry has been conclusively clarified and to the extent that no legal obligations of retention contradict this.
You have the possibility to submit orders through the online shop of our website. We gather the following data for an order: First name, last name, street address, postal code and city, e-mail address.
The entered data is processed in order to implement the contract (Art. 6, Par. 1 lit. b GDPR). The data are deleted as soon as you cancel an order. When an order has been completed, we delete the data following expiration of the retention periods according to tax law.
We use web tracking and web analysis services. These involve services that enable analysis of the usage of our website. We use this data for the improvement of the website and to design our offering to be of more interest to you. The legal basis for the use of web analysis tools is Art. 6, Par. 1 No. 1 lit. f GDPR. We have a justified interest in the analysis of the user behaviour of our website in order to optimise both our offering and our advertising.
This Internet presence uses Piwik. Piwik is an open source software for the statistical evaluation of user access to websites (http://piwik.org). Piwik uses so-called “cookies” for the evaluation of user access. This information is stored exclusively on our servers in Germany.
Among other services, we offer payment via PayPal. Provider of this payment service is PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (“PayPal” in the following).
When you select payment via PayPal, the payment data you enter is transmitted to PayPal.
The legal basis for the transmission of your data to PayPal is Art. 6, Par. 1 lit. a GDPR (Declaration of consent) and Art. 6, Par. 1 lit. b GDPR (Processing for the fulfilment of a contract). You have the possibility to withdraw your consent to data processing at any time. Withdrawal does not impact the effectiveness of data processing procedures in the past.

References: Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6