Source: https://www.deutschlandklassiker.de/en/privacy-policy/
Timestamp: 2019-04-19 20:53:13+00:00

Document:
In accordance with Art. 13 GDPR, we inform you about the legal basis of our data processing. Unless the legal basis in the data protection declaration is mentioned, the following applies: The legal basis for obtaining consent is Art. 6 (1) lit. a and Art. 7 GDPR, the legal basis for the processing in order to perform our services and the execution of contractual measures as well as for answering inquiries is Art. 6 (1) lit. b GDPR, the legal basis for the processing in order to fulfill our legal obligations is Art. 6 (1) lit. c GDPR, and the legal basis for processing in order to safeguard our legitimate interests is Art. 6 (1) lit. f GDPR. In case that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 (1) lit. d GDPR is the legal basis.
We take appropriate technical measures in accordance with Art. 32 GDPR, taking into account the state of the art, the implementation costs and the nature, scope, circumstances and purposes of the processing as well as the different likelihood and severity of the risk to the rights and freedoms of natural persons and organizational measures to ensure a level of protection commensurate with the risk; Measures include, in particular, ensuring the confidentiality, integrity and availability of data by controlling physical access to the data, as well as their access, input, disclosure, availability and disconnection. In addition, we have established procedures to ensure the enjoyment of data subject rights, data deletion and data vulnerability. Furthermore, we consider the protection of personal data already in the development, or selection of hardware, software and procedures, according to the principle of data protection by technology design and by privacy-friendly default settings considered (Art. 25 GDPR).
If, in the context of our processing, we disclose data to other persons and companies (processors or third parties), transmit them to them or otherwise grant access to the data, this is done only on the basis of a legal permission (e.g. if a transmission of the data to third parties, as required by payment service providers, pursuant to Art. 6 (1) lit b GDPR), you have consented to a legal obligation or on the basis of our legitimate interests (e.g the use of agents, webhosters, etc.).
You also have the right under Art. 77 GDPR to file a complaint with the competent supervisory authority.
You have the right to revoke granted consent according to. Art. 7 (3) GDPR with effect for the future.
The data processed by us are deleted or limited in their processing in accordance with Art. 17 and 18 GDPR. Unless explicitly stated in this privacy statement, the data stored by us will be deleted as soon as they are no longer necessary for their intended purpose and the deletion does not conflict with any statutory storage requirements. Unless the data is deleted because it is required for other and legally permitted purposes, its processing will be restricted. That the data is blocked and not processed for other purposes. This applies, for example for data that must be kept for commercial or tax reasons.
According to legal requirements, the storage takes place in particular for 6 years in accordance with § 257 (1) HGB (trading books, inventories, opening balance sheets, annual accounts, trade letters, accounting documents, etc.) and for 10 years in accordance with § 147 (1) AO (books, records, management reports , Accounting documents, commercial and business letters, documents relevant for taxation, etc.).
We process personal data (e.g., names, addresses, contact details of users), contract data (e.g., services used, names of contacts, payment information) to fulfill our contractual obligations and services in accordance with Art. 6 (1) lit b. DSGVO. The entries marked as obligatory in online forms are required for the conclusion of the contract.
We process usage data (e.g. the visited web pages of our online offering, interest in our products) and content data (e.g., entries in the contact form or user profile) for advertising purposes in a user profile to inform the user e.g. to display product information based on their previously used services.
The deletion takes place after expiration of legal warranty and comparable obligations, the necessity of the storage of the data is checked every three years; in the case of legal archiving obligations, the deletion takes place after their expiration (end of commercial law (6 years) and tax law (10 years) retention obligation); information in the customer account remains until it is deleted.
When contacting us (via contact form or e-mail), the information provided by the user to process the contact request and its processing according to Art. 6 (1) lit. b) GDPR are being processed.
Google will use this information on our behalf to evaluate the use of our online offering by users, to compile reports on the activities within this online offering and to provide us with further services related to the use of this online offer and the internet usage. In this case, pseudonymous user profiles of the processed data can be created.

References: Art. 13
 Art. 6
 Art. 7
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 32
 Art. 6
 Art. 77
 Art. 7
 Art. 17
 § 257
 § 147
 Art. 6
 Art. 6