Source: https://haff-schneider.com/privacy-policy/
Timestamp: 2018-09-24 03:17:07
Document Index: 392322953

Matched Legal Cases: ['§ 1', '§ 3', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', '§1', '§ 7', '§ 3', 'Art. 6', 'Art. 6', '§ 8', '§ 4', 'Art. 6', '§ 9', '§1', 'Art. 22', 'Art. 4', 'Art 46', 'Art. 21', 'Art. 6', 'Art. 9', 'Art. 21', 'Art. 21', 'Art. 8', 'Art. 17', 'Art. 9', 'Art. 9', 'Art. 89', 'Art. 6', 'Art. 9', 'Art. 6', 'Art. 6', 'Art. 9', 'Art. 9', 'Art. 78']

Privacy Policy | Haff & Schneider
The personal data provided by the person will be deleted or blocked if the purpose of storage ceases to apply. In addition, data may be retained if this is intended by the European or national legislator via Union regulations, laws or other rules which we are subject to. Data will also be blocked or deleted if a period of retention expires which is stipulated by the afore-mentioned regulations, unless there is a requirement to further store the data to complete or fulfil a contract.
§ 1 Responsible Person
Responsible for the general protection of data and other national privacy policies of member states, as well as further data protection regulations is:
Represented by the Managing Director Richard Schneider
tel.: +49/8361/92180
$ 2 Definitions
This privacy policy is based on terminology which has been used by the European regulators when issuing the EU General Data Protection Regulation (referred to as “GDPR”). This privacy policy is intended to be easy to read and understand. To this effect, the most important terms will be defined hereafter:
Personal data is any information referring to a natural person which has been or is to be identified (hereafter referred to as “person concerned”). A person to be identified is a natural person who can be identified, directly or indirectly, especially by assigning an identifier such as a name, an identification code, location data, an online code, or one or more specific characteristics which are an expression of that natural person’s physical, physiological, genetic, psychic, economic, cultural or social identity.
Person concerned is every natural person identified or to be identified whose personal data is distributed by the person responsible for processing this data.
Processing refers to any process carried out with or without the use of automated procedures and any such chain of procedures connected to personal data such as collecting, recording, organizing, sorting, retaining, modifying or changing, retrieving, querying, using, disclosing by transfer, dissemination or any other form of provision, comparing or linking, restricting, deleting or destroying such data.
Profiling is any kind of automated processing of personal data which involves the use of personal data to evaluate certain personal aspects pertaining to a natural person; in particular to the effect of analysing or forecasting aspects regarding performance at work, economic situation, health, personal preferences, interests, reliability, conduct, domicile or change of location.
Pseudonymisation is the processing of personal data in such a way that this personal data cannot be assigned to a specific person concerned without collecting additional information, insofar as this additional information is retained separately and is subject to technical and organisational measures to ensure that this personal data cannot be allocated to a natural person identified or to be identified.
Responsible person or a person responsible for processing is a natural person or legal entity, authority, institution or any other body that makes a decision alone or jointly with others about the purpose and means of processing personal data. If the purpose and means of processing have been stipulated by Union law or the legislation of member states, the responsible person and/or certain criteria selected by him/her according to Union law or the legislation of member states can be determined.
Processor is a natural person or legal entity, authority, institution or any other body that processes personal data on behalf of the responsible person.
Recipient is a natural person or legal entity, authority, institution or any other body who personal data is submitted to, regardless of whether this is a third party or not. However, authorities that may obtain personal data while conducting a specific investigation according to Union law or the legislation of a member state are not considered to be recipients.
Third party refers to a natural person or legal entity, authority, institution or any other body except the person concerned, the responsible person, the processor or any person who is authorized by direct responsibility of the person responsible or the processor to process personal data.
Consent is any voluntary expression of intention of the person concerned given in a particular situation in an informed and unambiguous way in the form of a declaration or any other clear, confirmatory act where the person concerned implies that he/she agrees to the processing of his/her personal data.
§ 3 Delivery of Website and Creation of Log Files
enable interaction between the website and the user’s computer. For this purpose, it is necessary to retain the user’s IP address for the duration of this interaction.
To optimize the contents of and advertisement for our website
To guarantee the functionality of our IT systems and website technology
To provide law enforcement agencies with the information required to conduct proceedings in case of a cyber attack
It is our legitimate interest to process data for these purposes acc. to Art. 6 para. 1 p. 1lit. f) GDPR.
This data will be deleted once it is no longer needed for meeting this purpose-i.e. when the interaction is terminated.
In order to provide this website and retain the data in log files, the collection of data is compulsory for operating this internet page; it is therefore not possible to opt-out.
Our websites uses cookies. A cookie is a short text which, when visiting a website, will be sent from the webserver to your browser and is stored locally on your end user device (PC, notebook, tablet, smartphone etc.) and retained on your computer, providing the user (that is us) with certain information. Cookies are not harmful to your computer and do not contain viruses. Each cookie contains a typical sequence of characters (so-called cookie ID), which allows a distinct identification when re-calling the website.
We use cookies to make our website more user-friendly. Some elements of our internet pages require the calling browser to be identified even after moving to another page. We also use cookies on our website to enable the analysis of your surfing behaviour.
When calling our website, you will be informed about the use of cookies for the purposes of analysis and asked to consent to the processing of the personal data used in this context. In this context, a reference to this GDPR is made. The processing of personal data by using technically required cookies is legally based on Art. 6 para. 1 p. 1 lit. f) GDPR. The processing of personal data by using cookies for the purpose of analysis is granted upon submission of consent by the user and legally based on Art. 6 para. 1 p. 1 lit. a) GDPR.
The purpose of using technically required cookies is to facilitate the website use for you. Some functions of our website are not available without the use of cookies. In this context it is required for the browser to be recognised even after a page change. Cookies are in particular used to make the website more customer-friendly and secure, to collect information about the user such as frequency of use and number of pages, as well as behaviour of how these pages are used, and the selected language. User data collected by technically required cookies will not be used to create user profiles. The purpose of using cookies which are not technically required is to improve the quality of our website and its content. By using cookies for purposes of analysis we obtain information how our website is used, and can therefore continuously optimize our offer. This information is helpful to automatically recognize you and facilitate navigation in case you re-visit our website with the same end user device.
Permanent cookies continue to be retained when the browser session is ended and can be re-called when re-visiting our website. Cookies will be stored on your computer and sent to our website from there. You are therefore fully in control of how cookies are used. If you object to the collection of data via cookies you can change your browser settings by clicking “settings” in the menu. You will then be informed about the use of cookies or can completely deactivate the placing of cookies or be able to delete cookies individually. We wish to point out, however, that the functionality of this website will be restricted when deactivating cookies. If session cookies are used, they will be automatically deleted when leaving the website.
Our website provides a contact form which may be used to make contact electronically. If you choose to contact us in this way, the data entered in the input form will be transferred to us and retained. This data includes:
Upon sending your message, the following data will be stored:
To process the data, we will ask for your consent and refer to this privacy policy before sending the form. Alternatively, you can contact us via the email address provided. In this case, the personal data sent via this email will be retained. If this also includes information about communication channels (e.g. email address, telephone number), to answer your request you also agree to us contacting you via this communication channel if required. No data transmitted in this context will be forwarded to third parties. The data will only be used for processing this conversation.
The processing of data upon the user’s consent is legally based on Art. 6 para. 1 p. 1 lit. a) GDPR. The processing of personal data submitted by sending an email is legally based on Art. 6 para. 1 p. 1 lit. f) GDPR. If this email contact aims at concluding a contract, the processing is additionally based Art. 6 para. 1 p. 1 lit. b) GDPR.
Processing personal data provided via the contact form will be used only to process your contact request. Data provided via your email requests will, in this instance, only be used for the purpose granted by you to us when making contact. Any other processed personal data provided when sending the email are used to prevent the misuse of the contact form and to guarantee the security of our IT systems. This context is within our legitimate interest.
The data will be deleted once it is no longer needed for meeting this purpose. With regard to personal data provided via the contact form and that sent via email, this applies upon terminating the corresponding conversation with the user. This conversation is terminated when there is clear indication that the facts of the matter have been finally clarified. The personal data additionally collected during the sending process will be deleted within a period of seven days at the latest. If the email contact aims at concluding a contract, such data will be deleted upon expiration of the required legal storage deadlines (commercial or tax law).
You may, at any time, object to processing your email and its contents. In this case, the conversation will not be continued. Please refer to the responsible person acc. to §1. This withdrawal option is only available if the email contact is not required to prepare or conclude a contract.
$ 6 SSL Encryption
Our website uses SSL encryption in case confidential or personal data is transmitted. This encryption is used via this website for example with payment transaction, as well as inquiries submitted to us. To guarantee that this encryption is actually activated, it needs to be controlled from your part. You can recognize the encryption status in the browser line; in case of encryption, “http://” changes to https://. Encrypted data cannot be read by third parties. Should your encryption mode not be activated, please do not hesitate to contact us via another channel.
§ 7 Forwarding personal Data to third Parties
Rented server space
We bring to your attention that we use server space rented from the provider 1&1 Internet SE, Elgendorfer Str. 57, 56410 Montabaur, www.1und1.de. By visting our website the server space provider will receive the following data:
Originator address,
Time of server request, as well as
Host name of the accessing computer [adjust]
This will be automatically stored in so-called server logfiles (see § 3), which your browser transmits automatically.
On this website, we use the offer from Google Maps. In this way, we can show interactive maps directly on our website allowing you to comfortably use the map function. By visiting our website, Google will receive information that you have called the particular subpage.
Hereby, the following data will be transmitted:
Information about your specific device, e.g. the hardware used, the version of the operating system, the device identifier and information about the mobile phone network including your telephone number.
Protocol data in the form of server protocols. These contain, among others, details about how the services were used, e.g. search inquiries, IP addresses, hardware settings, browser type, browser language, date and time of your request, referral URL, cookies that may uniquely identify your browser or your Google account.
Location information. Information about your actual location may be collected via Google. This includes, for example, your IP address, your Wi-Fi access points or cell towers.
For more information about the data collected by Google INC, please refer to the following link: https://policies.google.com/privacy?hl=de&gl=de
This is done irrespective of whether Google provides a user account which you are logged onto, or whether no Google account exists. If you are logged onto Google, your data will be directly allocated to your account.
This is legally based on Art. 6 para. 1 lit. p. 1 f) GDPR. Google also processes your personal data in the USA and is subject to the EU-US Privacy Shield https://www.privacyshield.gov/EU-US-Framework.
Google retains your data as user profiles and uses them for promotional purposes, market research and/or to offer tailored content on its website. Such an analysis is in particular carried out to provide (even for users not logged-on) personally tailored advertising and to inform other users of the social network about your activities on our website. If you do not wish this to be allocated to your Google profile, you are required to log out before activating the button.
You have the right to object to the creation of these user profiles; to exercise this right, please contact Google.
The duration of storage depends on the storage period at Google.
For more information about the purpose and scope of the data collected and its processing by the plug-in provider, please read the provider’s privacy policies. You may also obtain more information about your rights and setting options applicable in this context to protect your privacy: http://www.google.de/intl/de/policies/privacy.
Our online offer contains embedded YouTube videos that are stored at http://www.YouTube.com and can be activated directly from our website. YouTube is a service provided by YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. You Tube LLC is a subsidiary of Google Inc. [Opt. These are all embedded in the “extended data protection mode”, i.e. no data about you as a user will be transferred if you do not play the videos. Only when you play videos will the below-mentioned data be transferred. We have no influence over this data transfer. By visiting the website, YouTube receives information that you have called the particular subpage of our website.
For more information about the data collected by Google INC, please refer to the following link: https://policies.google.com/privacy?hl=de&gl=de.
This is done irrespective of whether Google provides a user account which you are logged onto, or whether no Google account exists. If you are logged onto Google your data will be directly allocated to your account.
The processing of personal data is legally based on Art. 6 para. 1 p. 1 lit. f) GDPR. Google also processes your personal data in the USA and is subject to the EU-US Privacy Shield https://www.privacyshield.gov/EU-US-Framework.
The purpose of embedding videos is to make the website more visually attractive for the user and to optimize the Google search engine ranking of the website (in case own videos are embedded: and to more specifically refer to our videos produced by us). YouTube retains your data as user profiles and uses them for promotional purposes, market research and/or to offer tailored content on its website. Such an analysis is in particular carried out to provide (even for users not logged-on) personally tailored advertising and to inform other users of the social network about your activities on our website. This context is within our legitimate interest.
If you do not wish this to be allocated to your YouTube profile, you are required to log out before activating the button.
The duration of storage depends on the storage period of YouTube.
You have the right to object to building these user profiles; to exercise this right, please contact YouTube.
For more information about the purpose and scope of the data collected and its processing by YouTube, please read the YouTube Privacy Policy. You may also obtain more information about your rights and setting options to protect your privacy: https://www.google.de/intl/de/policies/privacy.
§ 8 Web Analysis by Google Analytics
On our website, we use the service of Google Inc. (Google Inc., 1600 Amphitheatre Parkway Mountain View, CA 94043, USA) to analyse the surf behaviour of our users. This software places a cookie on your computer (see Cookies § 4). When calling single pages of our website, the following data will be retained:
The time you spent on this website and the break-off rate
How often this website is looked up
Country of origin and regional origin, language, browser, operating system, screen resolution, the use of Flash or Java
Search engines and search terminology used
The information generated by the cookie about the user’s use of the website are usually transmitted to and stored on a Google server in the USA. This website uses Google Analytics with the „_anonymizeIp()“ extension. The software setting is such that the IP addresses are not fully stored but only in an abbreviated version. In this way, allocating the abbreviated IP address to the calling computer is no longer possible. Only in exceptional cases the complete IP address will be transmitted to a Google server in the USA and will be abbreviated there. However, the user’s IP address, transmitted by Google Analytics from your browser, will not be merged with other data collected by Google.
The processing of this personal data is legally based on Art. 6 para. 1 p. 1 lit. f) GDPR. In exceptional cases where personal data is transmitted to the USA, Google is subject to the EU-US Privacy Shield https://www.privacyshield.gov/EU-US-Framework.
On our behalf, Google will use this information to analyse the use of this website by you and to compile reports about our website activities. By evaluating the collected data we are in a position to compile information about the use of the individual components of our website. In this way, we can continuously improve our website and its user-friendliness. It is within our legitimate interest to process the data for these purposes. By anonymising the IP addresses, the users’ interest in protecting personal data will be sufficiently accounted for.
Data will be deleted as soon as it is no longer needed for recording purpose. In our case, this applies after 38 months.
Set cookies will be stored on your computer and sent to our website from there. If you do not agree to our collecting and analysing user data you may prevent this by activating certain settings in your browser software that deactivate or restrict the use of cookies. Cookies which have been stored can be deleted at any time. However, in this case it may be possible that you are no longer able to fully use all the functions of this website. In addition, you may prevent the collection of your data (incl. IP address) generated by cookies and the use of the website to be used and processed by Google by downloading and installing the following browser plug-in via the following link. This is the current link: “http://tools.google.com/dlpage/gaoptout?hl=de.“
Alternatively, you can object to the use of cookies on our page by clicking the box in the flashing pop-up window. In this case, a so-called opt-out cookie will be installed on your browser and, as a result, session data will no longer be collected. Please observe, however, that when cookies are deleted on your computer, this opt-out cookie will also be deleted and you may have to activate it again.
If you visit our website using a mobile end user device, you can object to the use by deactivating Google Analytics and by clicking the following link: <a href=”javascript:gaOptout()”>Google Analytics deaktivieren</a>. In this case a cookie will be set in your browser which communicates to Google to stop the tracking activity.
Third-party provider is Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. For further information about our terms of use, please see http://www.google.com/analytics/terms/de.html, the data protection overview at http://www.google.com/intl/de/analytics/learn/privacy.html as well as the GDPR at http://www.google.de/intl/de/policies/privacy.
§ 9 Rights of the Person concerned
If personal data about you is processed, you are a person concerned as set out in the GDPR and you have the following rights towards the responsible person acc. to §1:
Right of restricted processing,
Right of notification,
Right of data transmission,
Right to revoke the consent regarding data protection
Right to not apply an automated decision
Right to register a complaint with a regulatory authority
You may demand a confirmation issued by the responsible person about our processing personal data concerning you. If processing is carried in such a way you may demand information on any personal data stored free of charge, as well as about the following information:
The purpose for which this personal data has been processed;
The recipient and/or categories of recipients towards whom the personal data about you has been disclosed or is to be disclosed;
The intended storage duration of the personal data about you or, if no precise details can be given, the criteria for defining the storage duration;
The existence of a right to correct or delete the personal data about you, a right to the restricted processing by the responsible person, or a right to object to this processing;
The existence of a right to appeal with a regulatory authority;
All available information about the source of the data if the personal data is not collected from the person concerned;
The existence of an automated decision making process including profiling acc. to Art. 22 para. 1 and Art. 4 GDPR and – at least in these cases – significant information about the logic involved, as well as the scope and the desired results of such processing for the person concerned.
You are entitled to demand information about whether the personal data about you is transmitted to a third country or an international organisation. In that regard, you may demand to be informed about appropriate guarantees acc. to Art 46 GDPR concerning this transmission.
You have the right to immediate correction and/or completion by the responsible person if the processed personal data about you is incorrect or incomplete.
3. Right of restricted processing
Under the following conditions you may demand from the responsible person the immediate restriction of the processing of your personal data:
If you deny the correctness of your personal data within a period of time which allows the responsible person to verify if your personal data is correct;
Its processing is illegitimate and you decline the deletion of your personal data and instead demand the restricted use of your personal data;
If the responsible person no longer requires your personal data for the purpose of processing whereas you need them to enforce, exercise or defend legal claims, or
If you have objected to processing acc. to Art. 21 para. 1 GDPR and it is not yet clear if the legitimate interests of the responsible person prevail over your legitimate interests.
If the processing of your data has been restricted, this data may only be processed – except for storing – with your consent or for the enforcement, exercise or defence of legal claims or to protect the rights of another natural or juristic person, or for reasons of substantial public interest by the Union or another member state. If the restriction of processing was restricted in accordance with the conditions above, you will be informed by the responsible person before this restriction is lifted.
You may demand from the responsible person to delete the personal data about you without delay if one of the following reasons apply:
The personal data concerning you is no longer required for the purpose for which it was collected or processed in any other way.
You may revoke your consent which legitimated its processing acc. to Art. 6 para. 1 lit. a or Art. 9 para. 2 lit. a GDPR, and there are no other legal grounds for its processing in existence.
According to Art. 21 para. 1 GDPR you object to processing and there are no overriding justifiable reasons for processing, or you object to processing acc. to Art. 21 para. 2 GDPR.
To comply with a legal obligation according to Union law or the legislation of a member state which the responsible person is subject to, the deletion of your personal data is required.
The personal data concerning you were collected within the context of information society services acc. to Art. 8 para. 1 GDPR.
If the responsible person has publicly released your personal data and acc. to Art. 17, para. 1 GDPR is obliged to delete it, he will take all due measures accounting for the available technology and costs of implementation, including technical measures, to inform the persons responsible for processing this personal data that you as the person concerned have demanded them to delete all links to this personal data or copies or replications of this personal data.
The right to delete no longer exists if its processing is required
To meet a legal obligation which requires the processing according to Union law or the member states which the responsible person is subject to, or to perform a task which is carried out in the public interest or in the exercise of official authority that has been assigned to the responsible person.
For reasons of public interest within the public health sector acc. to Art. 9 para. 2 lit. h and i as well as Art. 9 para. 3 DSGVO;
For archiving purposes in the public interest, scientific or historic research purposes or for statistical purposes acc. to Art. 89 para. 1 GDPR, insofar as the right mentioned under paragraph a) is likely to prohibit or severely impair the realisation of the objectives of this processing, or
If you have asserted the right towards the responsible person to correct, delete or restrict the processing, he is obliged to communicate this correction/deletion/restriction of processing to all recipients to whom the personal data concerning you has been released; unless this proves to be impossible or causes disproportionate effort. You have the right towards the responsible person to be informed about these recipients.
6. Right of data transmission
You have the right to receive the personal data concerning you which you have submitted to the responsible person in a structured, common and machine-readable format. In addition you have the right to transmit this data to another responsible person without being obstructed by the responsible person who your personal data was submitted to, provided that
its processing has been consented to acc. to Art. 6 para. 1, lit a GDPR or Art. 9, para. 2, lit. a GDPR or a contract acc. to Art. 6, para. 1, lit. b GDPR, and
they were processed by applying an automated procedure.
In exercising this right you are furthermore entitled to ensure that the personal data concerning you is directly transmitted from one responsible person to another responsible person, provided that this is technically feasible. In doing so, the freedoms and rights of other persons may not be impaired.
The right of data transmission does not apply to the processing of personal data that is required to carry out a task which is in the public interest or in the exercise of official authority that has been assigned to the responsible person.
To claim the right to data transferability, the person concerned may contact the person responsible for its processing at any time.
For reasons relating to your particular situation you have the right to object to the processing of your personal data based on Art. 6 para. 1 lit. e or f GDPR; this is also valid for profiling based on these regulations.
The responsible person no longer processes the data concerning you, unless he can submit compelling proof and legitimate grounds for its processing which override your interests, rights and freedoms; or its processing is used to enforce, exercise or defend legal claims.
If personal data about you is processed for direct advertising purposes you have the right to object to the processing of any personal data concerning you for the purpose of this kind of advertising; this also includes profiling insofar as it is related to such direct advertising. If you object to the processing for direct advertising purposes, your personal data will no longer be used for this purpose.
You have the possibility in conjunction with the use of information society services – regardless of regulation 2002/58/EG – to exercise your right to object by way of automated procedures where technical specifications are used.
To exercise the right to object, the person concerned may contact the person responsible for its processing.
8. Right to revoke the consent regarding data protection
You have the right to revoke your consent regarding data protection at any time. By revoking this consent the lawfulness of processing from the time of consent to the time of objection is not affected. Please refer to the responsible person.
You have the right not to be subjected to a decision that is exclusively based on an automated processing – including profiling – which may have legal effects on you or may considerably impair you in a similar way. This is not applicable if this decision
Is required to conclude or fulfil a contract between you and the responsible person,
Is permissible on legal grounds of the Union or member states which the responsible person is subject to, and these regulations contain appropriate measures to ensure your rights and freedoms, as well as your legitimate interests, or
These decisions, however, may not be based on specific categories of personal data acc. to Art. 9 para. 1 GDPR, unless Art. 9 para. 2 lit. a or g GDPR is valid, and appropriate measures to protect the rights and freedoms, as well as your legitimate interests have been taken.
Regarding the cases mentioned under (1.) and (3.) the responsible person takes appropriate measures to ensure the rights and freedoms, as well as your legitimate interest, whereby this includes at least the right to procure the intervention of a person on the part of the responsible person; to express one’s own opinion; and to challenge the decision.
If the person concerned wishes to claim rights with regard to automated decisions, he can contact the person responsible for processing at any time.
10. Right to register a complaint with a regulatory authority
Irrespective of another administrative or judicial appeal you have the right to register a complaint with a regulatory authority, in particular in the member state of your place of stay, of your work place or of the place of the suspected infringement if you are of the opinion that the processing of your data infringes the GPDR. The regulatory authority where the complaint has been registered will inform the complainant about the current status and the results of the complaint including the possibility of a judicial appeal acc. to Art. 78 GDPR.
$ 10 Modifications to the Data Protection Directive
We reserve the right to modify our data protection practices and these processes to adjust them to changes in relevant law and/or regulations, if required, or to do better justice in meeting your needs. Possible modifications of our data protection practices will be released here accordingly. Please observe the current version date of this privacy policy.