Personal data means any information relating to an identified or identifiable natural person. In particular, this includes information that enables us to identify you, such as your name, telephone number, address or e-mail address. Statistical data that we collect when you visit our website that cannot be associated with your person, does not fall under the term of personal data.
1. Contact Person and Controller
Contact person and the controller of the processing of your personal data when you visit this website in accordance with the basic EU data protection regulation (GDPR) is
Inhaber Toralf Stertze
If you have any questions regarding data protection in connection with the use of our website, you can also contact our data protection officer at any time. They can be reached at the above mentioned postal address and at the e-mail address above.
2. Data Processing on our Website
2.1 Visit our Website and Access Data
Every time you use our website, we collect access data that your browser automatically transmits to enable you to visit the website. The access data includes, for example, the IP address of the requesting device, the date and time of the request and the address of the website accessed and the requesting website. The processing of this access data is necessary to enable you to visit the website and to ensure the long-term functionality and security of our systems. The access data is temporarily stored in internal log files in order to produce statistical data on the use of our website, to further develop our website with regard to the usage habits of our visitors (e.g. if the proportion of mobile devices with which the pages are called up increases) and to generally maintain our website administratively. The legal basis is Art. 6 (1) lit. b GDPR. The information stored in the log files does not allow any direct conclusion to your person, in particular we only store the IP addresses in abridged, anonymous form.
You have several possibilities to contact us. This includes, for example, contact forms, by telephone, e-mail or mail. In this context, we process the contact and other data you provide us exclusively for the purpose of communicating with you. The legal basis is Art. 6 (1) lit. b GDPR.
2.4. Cookies and Comparable Technologies for Analysis Purposes
The legal basis for the data processing described in this section is Art. 6 (1) lit. f GDPR, based on our legitimate interest in the demand-oriented design and continuous optimization of our website.
In the following list of technologies used by us, you will also find information on the possibilities of objecting to our analysis measures by means of a so-called opt-out cookie. Please note that after deleting all cookies in your browser or the later use of another browser and/or profile, an opt-out cookie must be set again.
2.4.1. Google Analytics
The data arising in this context can be transferred by Google to a server in the USA for evaluation and stored there. In the event that personal data is transferred to the USA, Google has submitted to the EU-US Privacy Shield: https://www.privacyshield.gov/welcome
However, your IP address will be shortened before the usage statistics are evaluated, so that no conclusions can be drawn about your identity. For this purpose, Google Analytics on our website has been extended by the code "anonymizeIP" to ensure anonymous collection of IP addresses.
Google will process the information obtained by the cookies in order to evaluate your use of the website, to compile reports on the website activities for the website operators and to provide further services associated with the use of the website and the Internet.
You can configure your browser to reject cookies, or you can prevent the collection of data generated by cookies and relating to your use of this website (including your IP address) and the processing of this data by Google by downloading and installing the provided by Google:
As an alternative to the browser add-on or if you access our website from a mobile device, please use this opt-out link. This will prevent Google Analytics from collecting data on this website in the future (the opt-out only works in the browser you are using and only for this domain). If you delete your cookies in this browser, you must click this link again.
2.4.2 Links to Social Media Channels
(a) Twitter Plugin
This website uses social plugins as offered by Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA (“Twitter”).
When you visit websites that offer such plugins, data may automatically be transferred to Twitter’s server. We have no influence on the nature and the scope on the data collected and transferred to Twitter. In case you are logged in on our Twitter account, Twitter may connect your visit with your Twitter account.
(b) Facebook Plugins
This website uses social plugins as offered by der Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook“).
When you visit websites that offer such plugins, data may automatically be transferred to Facebook’s server. We have no influence on the nature and the scope on the data collected and transferred to Facebook. In case you are logged in on our Facebook account, Facebook may connect your visit with your Facebook account.
(c) Instagram Plugins
This website uses social plugins as offered by der Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA (“Instagram”).
When you visit websites that offer such plugins, data may automatically be transferred to Instagram’s server. We have no influence on the nature and the scope on the data collected and transferred to Instagram. In case you are logged in on our Instagram account, Instagram may connect your visit with your Instagram account.
(d) YouTube Plugins
This website uses social plugins as offered by YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA (“YouTube“).
When you visit websites that offer such plugins, data may automatically be transferred to Facebook’s server. We have no influence on the nature and the scope on the data collected and transferred to YouTube. In case you are logged in on our YouTube account, YouTube may connect your visit with your YouTube account.
We use the so-called double opt-in procedure for sending our newsletter.
For the mailing of our newsletters, we use the list provider MailChimp. MailChimp is a service of The Rocket Science Group, LLC, 512 Means Street, Ste 404 Atlanta, GA 30318, USA.
MailChimp offers services to analyze how our newsletters are opened and used. These analyses are never used by us for any individual analysis.
For further information on MailChimp und Mail-Chimp’s data policy, please visit https://mailchimp.com/legal/privacy/
If you do not wish to receive any newsletters from us in the future, you can object to this at any time with effect for the future without incurring any costs other than the transmission fees according to the basic rates by using the unsubscribe link at the end of each newsletter mailing. A notification in written or text form is sufficient for this too.
4. Transfer of Data
The data collected by us will only be transferred to third parties if (i) you have given your explicit consent according to Art. 6 (1) lit. a GDPR; (ii) the disclosure according to Art. 6 (1) lit. f GDPR is necessary to assert, exercise or defend legal claims and there is no reason to assume that you have an predominating interest worthy of protection in not disclosing your data; (iii) we are legally obliged according to Art. 6 (1) lit. c GDPR; or (iv) this is legally permissible and is required under Art. 6 (1) lit. b GDPR for the processing of contractual relationships with you or for the implementation of pre-contractual measures that are taken at your request.
5. Time of Storage
In principle, we only store personal data as long as it is necessary to fulfil contractual or legal obligations for which we have collected the data. Afterwards we delete the data immediately unless we need the data until the end of the limitation period to prove legal claims or due to retention obligations.
For evidence purposes, we must store contract data for three years from the end of the year in which the business relationship with you ends. This is the earliest a legal claim can become barred.
Even after that, we still have to store some of your data due to accounting requirements. We are obliged to do so on the basis of retention obligations that may arise from the German national laws, namely Code of Commercial Law, General Tax Code, Banking Law, Prevention of Money Laundering Act, and Securities Trade Act. The periods specified there for the storage of documents are two to ten years.
6. Your Data Protection Rights
You have the right to request information about the processing of your personal data by us at any time. We will explain the processing to you and provide you with an overview of the data stored about you as part of the provision of information. If data about you is incorrect or not up-to-date anymore, you can demand a correction of your data. You may also request that your data will be deleted. If, in exceptional cases, deletion is not possible due to other legal requirements the data will be blocked so that it is only available for this legal purpose. You may also have the processing of your data restricted if you believe that the data we have stored is incorrect. You also have the right to data portability. We will send you a digital copy of your personal data on request.
To exercise your rights as described here, you may contact the contact addresses mentioned above at any time. You can also do so if you want to receive copies of guarantees to prove an adequate level of data protection.
You have the right to object to data processing based on Art. 6 (1) lit. e or f GDPR. You have the right to complain to our data protection supervisory authority. You may exercise this right before a supervisory authority in the member State in which you are staying, working or where your rights might be infringed. As our registered office is in Leipzig, the responsible supervisory authority is:
Sächsischen Datenschutzbeauftragten, Bernhardvon- Lindenau-Platz 1, 01067 Dresden, www.datenschutz-sachsen.de
7. Objection and Withdrawal of Consent
According to Article 7 (3) GDPR, you have the right to withdraw your given consent at any time. As a result, we will no longer process data based on this consent. The withdrawal of consent shall not affect the lawfulness of processing based on given consent before itswithdrawal.
If we process your data on the basis of legitimate interests according to Art. 6 (1) lit. f GDPR, you have the right to object to the processing of your data according to Article 21 GDPR and to give us reasons which arise from your particular situation and which in your opinion indicate that your interests worthy of protection predominate.
If you object to data processing for direct advertising purposes, you have a general right of objection, which we will implement without you giving reasons.
If you would like to make use of your right of withdrawal or objection, an informal message to one of the contact addresses mentioned above is sufficient.
8. Data Security
We maintain current technical measures to guarantee data security, in particular to protect your personal data from unauthorized access by third parties and from risks during transmission. These measures are implemented to the current state of the art in each case. To secure personal information you provide on our website, we use Transport Layer Security (TLS) to encrypt the information you enter.