Source: https://ottmar-hoerl.de/en/data%20protection.php
Timestamp: 2019-04-24 06:03:40+00:00

Document:
We attach great importance to the protection of your personal data. In all instances of data processing (e.g. collecting, processing, and disclosing your data), we therefore adhere to the European and German regulatory provisions on data protection.
The explanations that follow describe which of your personal data are requested when using our web pages, how these data will be used and disclosed, how you may lodge any claims based on the information provided to us, and which measures we have in place to protect your data.
1. Who is your point of contact (party responsible) for any data protection issues?
We have not appointed a data protection officer, as we are not legally required to do so.
If you have any queries relating to data protection or the enforcement of your personal data protection rights (see below), please contact us at the address given above.
2. Which of your personal data do we require for you to use our web pages? Which data do we collect and store while you are using our sites?
"Personal data" means any information concerning the personal or material circumstances of an identified or identifiable natural person, such as your name, location data, your phone number, your date of birth, bank details, or your IP address.
As a matter of principle, we collect and use personal data of our users solely as far as these are required for the provision of a functioning website and featuring our contents and services. We collect and use any personal data of our users only after the users have given their consent, the only exception being such cases where actual reasons preclude obtaining consent in advance, or where data processing is permitted by law.
The data will also be saved to our system log files. These data are not saved in conjunction with any other personal data provided by the user.
Art. 6 para. 1 lit. f of the General Data Protection Regulation (GDPR) forms the legal basis for temporary data and log file storage.
Temporary storage of the IP address by the system is required in order to guarantee that the website information can be submitted to the user's computer system. For this purpose, the user's IP address must be saved as long as the session lasts.
Data are saved to the log files in order to ensure that the website works properly. Moreover, we use these data to optimise our website, and to protect the safety of our data processing systems. We do not use or analyse these data for marketing purposes.
These purposes also constitute our legitimate interests in data processing according to art. 6 para. 1 lit. f of the GDPR.
The personal data will be deleted as soon as they are no longer necessary in relation to the purposes for which they were collected or otherwise processed. In the case of website provision, data will be deleted as soon as the session ends.
In the case of saving personal data to log files, data are no longer necessary when seven days have elapsed. We may save the data for a longer period. In the latter case, we will delete or anonymise the user's IP address so as to render its assignment to a requesting client impossible.
Collecting and processing data for providing the website and saving personal data to log files are absolutely necessary for operating the website. For this reason, the user shall have no right to object in this case.
Art. 6 para. 1 lit. a of the GDPR forms the legal basis for data processing as long as the user has given his or her consent.
If registration is necessary for the performance of a contract to which the user is party, or in order to take steps at the request of the user prior to entering into a contract, art. 6 para. 1 lit. b of the GDPR forms an additional legal basis for data processing.
The user is required to register so that a contract can be performed to which the user is party, or in order to take steps at the request of the user prior to entering into a contract.
The data will be deleted as soon as they are no longer necessary in relation to the purposes for which they were collected.
During the process of registration, this is the case for the performance of a contract to which the user is party, or in order to take steps at the request of the user prior to entering into a contract, as soon as the data are no longer required for performing the contract. After the conclusion of a contract, we may be obligated to store personal data of the contractual partner so as to meet contractual or legal requirements.
Users may cancel their registration at any time. You shall have the right to have your personal data saved in our system amended. Cancellation and amendment of data shall be effected by contacting us at the address given above.
If the data are necessary for the performance of a contract to which the user is party, or in order to take steps at the request of the user prior to entering into a contract, their premature deletion is only possible as long as this is permissible in view of any contractual or legal requirements.
Alternatively, you may contact us using the e-mail address given. In this case, the user's personal data transmitted together with the e-mail message will be stored.
We will use your data solely for processing your request, and may contact you for this purpose using the contact details provided by you. We will not use these data for marketing purposes. Nor will we share them with third parties.
Art. 6 para. 1 lit. f of the GDPR forms the legal basis for processing data that are disclosed while sending an e-mail message. In cases where e-mail contact is targeted at concluding a contract, art. 6 para. 1 lit. b of the GDPR forms an additional legal basis for data processing.
We will process data collected from the online form solely for answering your request. In the case of contacts made via e-mail, these constitute the required legitimate interests in data processing pursued by us.
Any other processing of personal data during the sending process is targeted at preventing fraudulent use of the contact form, and at protecting the safety of our data processing systems.
The personal data will be deleted as soon as they are no longer necessary in relation to the purposes for which they were collected or otherwise processed. In the case of data collected from the online contact form, as well as data disclosed by sending an e-mail message, data will be deleted as soon as the conversation with the user ends. The conversation ends when the circumstances indicate that the matter at hand has been brought to a conclusion.
In the case of additional personal data collected during the sending process, data will be deleted, at the latest, when seven days have elapsed.
The user may revoke his or her consent to the processing of personal data. If the user has contacted us by e-mail, he or she shall have the right to object to the personal data being processed. The user is entitled to assert his or her right at any time using the contact details given above. In this case, the conversation can no longer be continued.
Any personal data stored while maintaining contact, will be deleted in this case.
3. How will your data be used? Will they be shared with third parties? And for what purpose?
We will use any personal data provided by you to answer your requests, process your order from our online shop as well as for the purpose of technical administration of our web pages.
We will not share, sell or otherwise disclose your personal data to third parties unless such disclosure is necessary to perform a contract; for invoicing purposes; to debit your account with the amount of your payment, or unless you have explicitly consented to such use. Furthermore, we are entitled to disclose personal data for debt collection purposes, and we reserve the right to exchange data with general credit protection agencies (e.g. Schufa). The aforesaid applies only as far as legally permissible.
In our online shop, we use PayPal, an external online payment service, as a payment method (PayPal [Europe] S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg [hereinafter referred to as "PAYPAL"]). If you decide to use PayPal as an online payment service, you will automatically be connected with the PAYPAL online payment service via a technical gateway. The payment details entered by you will be transmitted to PAYPAL, stored and processed there, solely for processing payment. Moreover, data processing is performed only for the purpose of processing payment for your order; PAYPAL may be required to disclose your payment details to the credit institution entered by you in order to affect and authorise the payment transaction. When choosing PayPal as your payment method, PAYPAL will redirect you via a gateway directly to PayPal, where you will log in to your PayPal account to authorise the payment transaction.
Please note that, in particular cases, we may be entitled to disclose your data by order of the competent authority insofar as this is required for the prosecution of criminal offences; for purposes of danger defence performed by the police authorities at federal state level; for the performance of statutory duties of the protection of the constitution at national and federal state levels by the competent authorities, the German intelligence service (BND), or military counterintelligence service; or for the enforcement of intellectual property rights.
Our web pages use wild cards for social media buttons such as Facebook, Google+ and Twitter. The buttons are not loaded until you click the wild card for the character concerned. Only in this instant will a connection with the servers of the social networking service providers be established and information on your visit to our website be transmitted. Your data will only be transmitted to the social networking service provider if you are logged in to your relevant social network account.
Facebook tags on our web pages are indicated by the Facebook logo; we do not use Facebook plug-ins at this stage, which means that your data are not transmitted to Facebook.
When clicking on any of the Facebook tags, in particular the Share button will be loaded and a connection with the Facebook servers be established. In this instant, the fact that you are visiting our website will be transmitted to Facebook. If you visit our website whilst logged in to your Facebook user account, additional information, e.g. the user-related data mentioned in section 2, will be transmitted to Facebook. These data will be transmitted to Facebook, related to your user account, stored there, and might be shared with third parties, especially Facebook's advertising partners. However, this will only happen if you are logged in to your Facebook user account. If you wish to avoid being tracked, we suggest that you log out of your Facebook user account before clicking the Facebook tags on our web pages. We wish to point out that the features associated with the Facebook tags, particularly the transmission of user-related information to Facebook, are not active while you visit our web pages unless you click the Facebook tags.
For more information regarding the purpose and scope of Facebook's data collecting, processing and use, and your rights in that regard as well as possible settings to protect your privacy, we suggest that you refer to Facebook's policy on data protection, which can be accessed at http://de-de.facebook.com/privacy/explanation.php.
Art. 6 para. 1 lit. a of the GDPR forms the legal basis for data processing.
Our web pages also employ plug-ins from the external social networking service provider Google+. The sole responsibility for Google+ and its web pages lies with Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Google+ tags on our web pages are indicated by "+1"; we do not use Google+ plug-ins at this stage, which means that your data are not transmitted to Google.
When clicking on the Google+ tag, in particular the +1 button will be loaded and a connection with the Google servers be established. If you visit our website whilst logged in to your Google+ user account, specific information and the user-related data mentioned in section 2 as well as the fact that you have visited our website, will be transmitted to Google. These data will be transmitted to Google, stored there, and might be shared with third parties. However, this will only happen if you are logged in to your Google+ user account. If you wish to prevent data from being transmitted to Google, we suggest that log out of your Google+ user account before clicking the Google tags on our web pages. We wish to point out that the features associated with the Google+ tags, particularly the transmission of user-related information to Google, are not active while you visit our web pages unless you click the Google+ tags.
For more information regarding the purpose and scope of Google's data collecting, processing and use concerning the +1 button, and your rights in that regard as well as possible settings to protect your privacy, we suggest that you refer to Google's policy on data protection, which can be accessed at https://policies.google.com/privacy?hl=en.
Our web pages also employ plug-ins from the external social networking service provider Twitter, we also link to Twitter. The sole responsibility for Twitter and its web pages lies with Twitter Inc., 1355 Market St, Suite 900, San Francisco, CA 94103, USA.
Twitter tags on our web pages are indicated by the Twitter logo or "Tweet"; we do not use Twitter plug-ins at this stage, which means that your data are not transmitted to Twitter.
When clicking on the Twitter tag, in particular the Tweet button will be loaded and a connection with the Twitter servers be established. If you visit our website whilst logged in to your Twitter user account, specific information and the user-related data mentioned in section 2 as well as the fact that you have visited our website, will be transmitted to Twitter. These data will be transmitted to Twitter, stored there, and might be shared with third parties. However, this will only happen if you are logged in to your Twitter user account. If you wish to prevent data from being transmitted to Google, we suggest that you log out of your Twitter user account before clicking the Twitter tags on our web pages. We wish to point out that the features associated with the Twitter tags, particularly the transmission of user-related information to Twitter, are not active while you visit our web pages unless you click the Twitter tags.
For more information regarding the purpose and scope of Twitter's data collecting, processing and use, and your rights in that regard as well as possible settings to protect your privacy, we suggest that you refer to Twitter's policy on data protection, which can be accessed at https://twitter.com/en/privacy.
Twitter Inc. will either delete log data or remove any common account identifiers, such as user name, full IP address, e-mail address, or phone number, after a maximum of 18 months, if not sooner.
Our web pages also link to the social media platforms Facebook, Twitter, YouTube, and Instagram. Icons on our web pages labelled with the corresponding logos of these social media platforms indicate the relevant links which redirect you to our corresponding social media pages. We do not use social plug-ins in this context.
None of your data is transmitted to the social media services via the tags on our web pages as these are regular hyperlinks that do not transmit any data. Once you click the tag, you will instantly be directed to our corresponding social media site. Data will only be transmitted when you are logged in to your user account with the respective social media service. This puts you in a position to link, or share, information featured on our web pages with the social media service, or, in the case of YouTube, watch the videos on our YouTube channel. The social media service might be informed of the content featured on the pages you have visited while browsing our website.
We have a number of adequate security measures in place to protect your personal data to a reasonable extent.
When collecting and transmitting data from our web pages, we use standardised SSL technology. Personal data collected during the ordering process are transmitted using SSL encryption, which can be recognised by the padlock icon in your web browser and "https://" appearing in the address bar.
You should not in any case disclose to third parties the password you use to access our web pages, and should take care to alter your password at regular intervals. Moreover, we suggest that you use different passwords for different websites that are password-protected (e.g. e-mail account, online banking, etc.). When exiting our website, be sure to log off and close your web browser so as to prevent unauthorised users from accessing your user account.
We cannot guarantee seamless data protection when communicating by e-mail.
We have implemented an online form on our website for you to subscribe to our newsletter. Once you register for the newsletter, data entered in the online form (your e-mail address) are transmitted to us.
Data collected and processed in connection with mailing our newsletters will not be shared with third parties. The data will solely be used for newsletter mailing.
Art. 6 para. 1 lit. a of the GDPR forms the legal basis for data processing after the user has registered for the newsletter as long as the user has given his or her consent.
The collection of the user's e-mail address serves the purpose of sending the newsletter to subscribers.
The personal data will be deleted as soon as they are no longer necessary in relation to the purposes for which they were collected or otherwise processed. In the case of newsletter subscription, the user's e-mail address will be stored as long as subscription to the newsletter is active.
Users may cancel their newsletter subscription at any time. Each copy of the newsletter contains a link to unsubscribe.
This also permits users to revoke their consent to the processing of personal data, which was given during the process of registering for subscription.
7. Upon using our website, a cookie will be placed on your computer. What does this mean?
Technical measures are in place to pseudonymise the user data thus collected, rendering it impossible to associate the data with the original user. These data are stored separately from any other personal user data.
You can decide whether to accept cookies. You may customise the settings for your web browser (usually by selecting the "Tools" -> "Options" or "Settings" menu item of your browser) so as to accept all cookies, to alert you each time a cookie is presented to your computer, or disable all cookies.
Data collected by technically necessary cookies are not used to generate user profiles.
a) We use Google Analytics, Webalizer and AWstats. What does this mean for your data?
Our website uses Google Analytics, a web analysis service from Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter referred to as "Google"). Google Analytics employs so-called "cookies", text files that are stored to your computer in order to facilitate an analysis of your use of the site (cf. section 10). The information generated by these cookies, such as time, place and frequency of your visits to our site, including your IP address, is transmitted to Google's location in the United States and stored there. If the IP anonymisation feature is activated, Google abbreviates and thus anonymises your IP address before transferring it from Member States of the European Union or signatory states to the Agreement on the European Economic Area. Only rarely will a complete IP address be transmitted to a Google server located in the United States and abbreviated there. On behalf of the operator of this website, Google will use this information to evaluate your usage of our site, to compile reports on website activity for us, and to provide other services related to website and internet usage. Google states that it will never associate your IP address with other data held by Google. You can prevent cookies from being installed by adjusting the settings on your browser software accordingly. You should be aware, however, that this may prevent you from taking full advantage of the features of our website. Google also offers a disabling option in a plug-in available for the most common browser types, thus providing you with greater control over the data collected and processed by Google (including your IP address). If you enable this option, no information regarding your website visit is transmitted to Google. For download visit https://tools.google.com/dlpage/gaoptout?hl=en.
Alternatively, you may disable the future analysis of your website visit by Google Analytics, especially for web browsers for use on mobile devices, by clicking the link below.
By clicking the link, a so-called "opt-out cookie" is configured, which means that the analysis of your visit to our site will be prevented in the future.
Please note that, should you disable cookies in your web browser settings, Google Analytics will also delete the opt-out cookie, which means that you may be required to activate it again.
We should like to point out that we use Google Analytics with an IP anonymisation feature (anonymizeIP) on our website, which means that Google abbreviates and thus anonymises your IP address before processing it so as to prevent tracking of personal data.
Webalizer is a web log analysis software that generates web pages of analysis, based on server log file data. To this end, Webalizer stores details on the browser version and domain, file name, date and time of the request, the amount of data downloaded, and stores and analyses the data anonymously solely for statistic and in-house purposes.
Statistics commonly reported by Webalizer include hits, visits, referrers, the visitors' countries, and the amount of data downloaded.
You may prevent Webalizer from analysing user behaviour by disabling cookies from this website being stored, e.g. by adding an exception in your web browser settings.
AWstats is another web analysis tool. The tool is used for analysing log files generated by web servers based on visitor requests. Statistical analysis is performed using log files which also include IP addresses. These data are anonymised and cannot be attributed to specific persons. They are not associated with other data from other sources; after statistical analysis the data are deleted. The server statistics automatically stores the following data that the user's web browser transmits to us: type and version of web browser, operating system used, referrer URL (i.e. the last web page the user visited), host name of requesting computer (IP address), time of server request, the keywords the user used, e.g. in Google, to find the page. No data will be transmitted to external servers.
You shall have the unreserved right to, at any time, obtain information – free of charge – on the personal data we have stored about you, where we have collected these data and with whom we have shared them as well as on the purpose for which we have processed your data on our website. Moreover, you shall have the right to effect the rectification, erasure, or blocking of such data provided that the legal requirements for such action are met.
You shall have the right to have your personal data, which you have provided to us as the party responsible (controller), made available in a structured, commonly used and machine-readable format. We will be able to meet such request by providing a csv export of your customer data we have processed.
Once you have asserted your right to have your personal data rectified, erased or their processing restricted by notifying the controller, the controller shall be obligated to communicate any rectification or erasure of personal data, or restriction of processing regarding these data, to each recipient with whom these personal data held about you have been shared, unless this proves impossible or involves disproportionate effort.
On grounds relating to your particular situation, you shall have the right, at any time, to object to the processing of the personal data held about you, where such processing is based on art. 6 para. 1 lit. e or lit. f of the GDPR.
The controller shall no longer process the personal data held about you unless the controller demonstrates compelling legitimate grounds for such processing which override your interests, rights and freedoms, or for the establishment, exercise or defence of legal claims.
Where the personal data held about you are used for direct marketing purposes, you shall have the right to object to such use at any time.
Once you have objected to the processing of your personal data for direct marketing purposes, the personal data held about you shall no longer be processed for such purposes.
Furthermore, you shall be entitled to revoke any declarations of consent that you may have given us, by contacting us at the address provided below. Your revocation shall be permissible at any time, but not retroactively.
Without prejudice to any other administrative or judicial remedy, you shall have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or place of the alleged infringement, if you consider the processing of the personal data held about you to infringe upon the General Data Protection Regulation (GDPR).

References: Art. 6
 art. 6

Art. 6
 art. 6

Art. 6
 art. 6

Art. 6

Art. 6
 art. 6