Dprivacy policy
Thank you very much for your interest in our website and the information provided there. Since we take the protection of the privacy of both the users of our homepage and our customers very seriously and observe the legal provisions for the protection of personal data, such as those contained in the Federal Data Protection Act and the Telemedia Act, we will explain below how we deal with your Bypass data:
Data collection and data processing
If access to our website and retrieval of the files stored there take place, these are logged for statistical purposes and to improve our online offer. The access and retrieval data do not allow us to draw any conclusions about your person. We store the data in so-called server log files. The logged and stored data are: name of the retrieved file, date and time of retrieval, amount of data transferred, notification of the success of the access or retrieval, IP address of the requesting device.
We collect personal data ourselves only if the site user discloses such to us on a voluntary basis, for example in the form of inquiries (e.g. by electronic mail or by using a contact form on our homepage) or as part of legal agreements with us.
Responsible within the meaning of the General Data Protection Regulation
The person responsible within the meaning of the General Data Protection Regulation is the operator of the website you are currently accessing. Our contact details can be found in the provider identification (imprint) on the website you are visiting.
Data collection and data processing
1. Creation of log files when you visit our website
As far as access to our website and retrieval of the files stored there take place, data is automatically logged. We store this data in so-called server log files.
Specifically, the logged and stored data are:
- name of retrieved file,
- date and time of retrieval,
- amount of data transferred,
- Notification of the success of the access or retrieval,
- IP address of the requesting device,
- browser type,
- operating system used by the visitor.
A combination of this data with other personal data of the visitor to our homepage is always omitted, which is why the information provided does not allow us to draw any conclusions about your person.
processing purpose
It is necessary to store your IP address because without it, the content of our website cannot be transferred to your computer. Your IP address must be saved for the duration of the session - i.e. the connection between the Internet browser you use when you call up or access the website (so-called "client-side application") on the one hand and the server we use to operate the homepage on the other remain. The purpose of storing your data in server log files is, on the one hand, to ensure the functionality of our website and, on the other hand, to optimize the website you are visiting. Furthermore, this data helps us to maintain the security of the information technology systems used here.
Legal basis for processing the data
The relevant legal basis for storing the data and also the server log files is valid for the period up to and including May 24, 2018, Section 15 I TMG, taking into account the processing purpose described, starting from May 25, 2018 then Art. 6 I letter f DS-GVO (the processing is necessary to protect the legitimate interests of the person responsible or a third party).
retention period
We delete the automatically stored access and retrieval data at the point in time at which they are no longer necessary to achieve the purpose for which they were collected. As far as the provision of our homepage is concerned, this is the case if the respective session - i.e. the existing connection between the Internet browser you use when you call up or access the website (so-called "client-side application") on the one hand and the one we use for on the other hand, the server used for the operation of the homepage - has ended. The stored IP address and the server log file it contains are deleted no later than 7 days after the time of storage, so that no allocation of the other data (name of the retrieved file, date and time of retrieval, amount of data transferred, notification of the success of the access or retrieval, browser type, operating system used by the visitor) to the requesting device and its IP address.
opt-out option
The data recorded for the provision of our homepage and their storage in server log files are indispensable and absolutely necessary for the operation of our website. You are therefore not entitled to object in this regard.
2. Processing of personal data for inquiries about our range of services or products
We record personal data even if the site user discloses such to us on a voluntary basis in the form of inquiries about the range of services or products on this site (e.g. by electronic mail). The personal data of the questioner transmitted to us with the request will be saved. This data will under no circumstances be passed on to third parties and will only be used to process the correspondence with the questioner initiated by the request.
processing purpose
The processing of the data transmitted to us as part of the service or product-related inquiry serves to process the inquiry and to respond to it.
Legal basis for processing the data:
The relevant legal basis for storing the data that is transmitted to us in the context of inquiries about our range of services or products is, taking into account the processing purpose described above, for the period up to and including May 24th, 2018
§ 28 I 1 No. 2 BDSG,
starting from May 25th, 2018
Art. 6 I letter f GDPR
(the processing is necessary to safeguard the legitimate interests of the person responsible or a third party).If the request is already aimed at the conclusion of a contract with us, it is also for the period up to and including May 24th, 2018
§ 28 I 1 No. 1 BDSG,
starting from May 25th, 2018
Art. 6 I letter b, 2nd alternative DS-GVO legal basis for data processing.
retention period
We delete the data transmitted to us in the course of service or product-related inquiries or collected by us in this context at the point in time at which they are no longer necessary to achieve the purpose for which they were stored. As far as an inquiry about our range of services or products is concerned, this is the case if the inquiry was answered from here and the circumstances show that no further correspondence with the questioner regarding his request is necessary.
opt-out option
The questioner is entitled to object to the storage of his personal data. However, his request can then no longer be answered.
Should you wish to declare such an objection, we kindly ask you in advance to at least use the text form and to address the declaration of objection to one of the contact options given in the imprint of our homepage (postal address, e-mail, fax). After receipt of the objection, the personal data that was sent to us as part of the request and stored here will be deleted immediately.
3. Processing of personal data for inquiries about our range of services or products using the "dsa Secure" contact form
To receive and process your inquiries, we use a contact form provided by the company dsa Marketing AG (www.dsa-marketing.ag; Im Lipperfeld 22 a - 24, 46047 Oberhausen), which is integrated into our homepage using "iFrame". An "iFrame" is an "HTML" element that is positioned within a web page in the form of a frame or window. "HTML" is a text-based markup language for websites. The dsa Marketing AG contact form used here is encrypted using the “Secure Sockets Layer” (SSL) network protocol.
If you send an inquiry via the said contact form, it will first be forwarded to the server of dsa Marketing AG, temporarily stored there and then automatically transmitted to us without the aforementioned company using the personal data provided in the context of your inquiry for its own purposes or for the purposes of third parties - with the express exception of us - processed. After this last transfer, dsa Marketing AG completely deletes your personal data using an automated process. According to the information provided there, the employees of dsa Marketing AG who monitor this automated transmission and deletion process have each submitted internal declarations of commitment to comply with data protection requirements and are also committed to secrecy.
processing purpose
The processing of the data transmitted to us as part of the service or product-related inquiry serves to process the inquiry and to respond to it.
Legal basis for processing the data:
The legal basis for data processing when using the "dsa Secure" contact form, for which we obtain the voluntary consent of the site visitor,
is for the period up to and including May 24th, 2018
§ 4 I BDSG §§ 12, 13 TMG valid,
starting from May 25th, 2018
Art. 6 I letter a GDPR
(Consent by the data subject to the processing of their personal data for one or more specific purposes).
obtaining your consent
Before you send off the "dsa Secure" contact form you have filled out, you will be made aware of this data protection declaration, and we will ask you for your consent to the data processing in connection with this.
right of withdrawal
You have the right to withdraw your consent to the processing of your personal data.
If you wish to withdraw your consent, we kindly ask you in advance to use at least text form and to send the declaration of withdrawal to one of the contact options (postal address, e-mail, fax) given in the imprint of our homepage. After receipt of the revocation, the personal data will be deleted immediately, unless there is another legal basis for the processing of this data. The legality of the data processing that took place before your revocation on the basis of the consent is not affected by the declaration of revocation.
retention period
If you do not revoke your consent, we will delete the data transmitted to us in the course of service or product-related inquiries or collected on our part in this context in any case at the point in time from which you can no longer achieve the purpose of their storage are necessary. As far as an inquiry about our range of services or products is concerned, this is the case if the inquiry was answered from here and the circumstances show that no further correspondence with the questioner regarding his request is necessary.
Processing of personal data for contract initiation, contract fulfillment and contract amendment
We process the personal data that is required for the conclusion of a contract between you and us, for its fulfillment or for its modification. These data are:
- name and address of the contractual partner,
- Type and number of booked services or goods,
- the payment method used.
Depending on the subject of the affected (contractual) service, further data may be required.
If the payment method used is SEPA direct debit, the following will also be processed:
- the account details of the contractual partner.
If payment by credit card has been agreed with our contractual partner, the following will also be processed:
- the credit card details of the contractual partner. If the purchase of the services and/or goods ordered from us is subject to legal restrictions (e.g. age restrictions), the data that is required for the fulfillment of the contract due to the relevant legal restriction in addition to the data already specified above (e.g. in the case of legal age limit the age of the contractual partner).
processing purpose
The processing of the named data serves to execute the contracts concluded with us, including the provision of services as agreed. Passing on the data to third parties Data required for the fulfillment of the contract will be passed on to third parties in the following cases:
a.
Agreed payment method SEPA direct debit: Your account details will be forwarded to the bank processing the payment.
b.
Agreed mode of payment Credit card: Your credit card details will be forwarded to the bank or payment service provider processing the payment.
c.
Dispatch of goods or delivery: Your address and the data on the ordered goods will be forwarded to the shipping or transport company we use for delivery purposes.
i.e.
Fulfillment of tax obligations: If we have commissioned a tax consultant, the data will be passed on to him to the extent that is absolutely necessary to fulfill our tax obligations.
Legal basis for processing the data:
The relevant legal basis for the processing of the data is, taking into account the processing purpose described, Art. 6 I letter b, 1st alternative DS-GVO (the processing is necessary for the performance of a contract to which the data subject is a party), which also includes processing recorded on the occasion of pre-contractual measures.
retention period
We store the data required for the fulfillment and modification of an existing contractual relationship with us until the end of the statutory retention periods, in particular those relating to tax law. For example, the retention period for contracts and standing order documents, insofar as these do not form the basis for booking, and for shipping documents is currently 6 years (in the case of standing order documents, this period begins after the contract has expired), cf.
§ 147 III 1§
Fiscal Code (AO). bills are after
§ 147 II§
combined with
147 I no. 1, 4 and 4 a§
Fiscal Code (AO) to be retained for ten years.
After expiry of the legally prescribed retention periods, we delete or block the data if they are no longer required for the conclusion of a contract or for the fulfillment of a contract.
- If no contract has been concluded between you and us, we will delete the data collected or transmitted for pre-contractual measures if the circumstances indicate that further correspondence with you regarding the service or goods to which dialogues or offers from related to your or our site is no longer necessary. Objection option If the processing of your personal data was related to pre-contractual measures and these measures did not lead to the conclusion of a contract between you and us, you are entitled to object to the data storage.
- If you wish to declare such an objection, we ask that you first use text form and send the declaration of objection to one of the contact options (postal address, e-mail, fax) given in the imprint of our homepage. After receipt of the objection, the personal data that was collected by us or transmitted to us and stored here when taking pre-contractual measures will be deleted immediately.
With regard to the data that is required for the fulfillment of the contract or any changes to the contract, you have no possibility of objection due to its necessity for the stated purposes.
processing otherwise
If the collection and use of personal data is not possible due to actual circumstances and does not fall under any of the above-mentioned constellations, data processing takes place regularly only with the consent of the person concerned.
processing purpose
The collection and use of personal data generally only takes place in order to enable us to operate our website properly and to improve it. Legal basis for data processing: The legal basis for data processing for which the consent of the data subject is obtained is
Art. 6 I letter a GDPR
(Consent by the data subject to the processing of their personal data for one or more specific purposes).
right of withdrawal
You have the right to withdraw your consent to the processing of your personal data. If you wish to withdraw your consent, we kindly ask you in advance to use at least text form and to send the declaration of withdrawal to one of the contact options (postal address, e-mail, fax) given in the imprint of our homepage. After receipt of the revocation, the personal data will be deleted immediately, unless there is another legal basis for the processing of this data.
The legality of the data processing that took place before your revocation on the basis of the consent is not affected by the declaration of revocation.
Use of "cookies" to grant and improve the user-friendliness of our website
So-called "cookies" are used on our website.
"Cookies" are text files that are sent to the respective website user at the request of the operator of a website when their website is accessed and temporarily stored in or by the Internet browser of the accessing end device.
There are two types of "cookies", viz
temporary
and
permanent
.
The
temporary
"Cookies" are automatically removed from your end device as soon as you close your internet browser.
The
permanent
"Cookies", on the other hand, remain stored on your end device even after the Internet browser you are using is closed and can be recognized by the website operator the next time you visit their website, as such "cookies" usually contain a characteristic sequence of characters known as "cookie ID". " designated. Homepages and Internet servers assign this character string to the web browser on which the permanent “cookie” was stored. Accordingly, a clear identification of your browser is possible using the "cookie ID".
We mainly use temporary "cookies" that are automatically deleted after you have finished accessing our website.
However, permanent "cookies" are also used, which enable us to recognize your internet browser the next time you visit our website. Permanent "cookies" remain on the end device you use to access the website until you delete them.
We ourselves use "cookies" to make it easier for visitors or users of our website to navigate there and to allow them to use certain site functions that would not be available without setting the "cookies".
"Cookies" do not cause any damage on your computer. By changing the settings of your Internet browser, you can ensure that you are informed about the upcoming caching of "cookies" on your end device. It is also possible to configure the Internet browser in such a way that you do not accept individual or, in principle, all “cookies”.
Please bear in mind that if you do not accept the "cookies" we use, the full functionality of our website may be impaired.
processing purpose
The purpose pursued by us for the processing of personal data by means of the use of "cookies" is to provide a user-friendly and user-friendly homepage for the benefit of website visitors and to improve its functionality. Legal basis for the processing of the data: The relevant legal basis for the processing of the data is, taking into account the processing purpose described, for the period up to and including May 24th, 2018
§ 15 I TMG
starting from May 25th, 2018
Art. 6 I letter f GDPR
(the processing is necessary to safeguard the legitimate interests of the person responsible or a third party).
Duration of storage and deletion
You can delete permanent "cookies" stored on your end device yourself at any time; this using your Internet browser or by using other software. If you remove the permanent "cookies" we use from your end device, the full functionality of our website may be impaired.
opt-out option
By changing the settings of your Internet browser, it is possible to permanently prevent "cookie" transfers on the end device you use to visit or call up websites. If you make such changes to browser settings, you are effectively contradicting the setting of "cookies" for a period of your own choosing.
Your rights as a data subject
Insofar as we process data related to your person, you as the data subject have the following rights in relation to us within the meaning of the GDPR:
1. Right to information
You are permitted to request information from us as to whether personal data relating to you is being processed by us. If this is the case, you may request free information from us about:
- the processing purposes,
- the categories of data being processed,
- the recipients and/or the categories of recipients to whom we have disclosed or will disclose the data,
- the data storage period envisaged here or, if it is impossible to provide specific information in this regard, our criteria for determining the data storage period,
- the existence of a right to correction of personal data, the existence of a right to deletion of personal data,
- the existence of a right to restrict the processing of personal data by the person responsible within the meaning of the DS-GVO,
- the existence of a right to object to the processing of personal data,
- the existence of a right to lodge a complaint with a supervisory authority,
- all available information on the origin of the data, insofar as the data was not collected from you as the data subject,
- the existence of automated decision-making including profiling according to Art. 22 I, IV DS-GVO and, if such is to be affirmed, meaningful information about the logic involved, about the scope and the desired effects of such data processing for you as the data subject within the meaning of the DS -GMO,
- whether a transfer of personal data concerning you to a third country or to an international organization takes place through us or due to our instigation, whereby in the case of such a transfer you can also demand from us that we provide you with suitable guarantees within the meaning of Art.
- 46 GDPR.
After
Art. 12 I 2 GDPR
This information can also be given orally to the data subject, provided that their identity has been proven in some other way.
2. Right to data correction and data completion
You can request us at any time to correct the data we have stored about you if it is incorrect, cf.
Art. 16 S.1 GDPR
.
The same applies to the completion of incomplete personal data, cf.
Art. 16 S.2 GDPR
.
If you would like your personal data to be corrected or completed, we ask you to send a request in writing to one of the contact options specified in the imprint of our homepage.
3. Right to erasure of personal data
As a data subject within the meaning of the GDPR, you can request the immediate deletion of your personal data if one of the following applies:
Art. 17 I GDPR
require us to meet the following requirements:
- The personal data are no longer necessary for the purposes for which they were collected or otherwise processed;
- the data subject withdraws their consent on which the processing is based Art. 6 I letter a GDPR or Art. 9 II letter a GDPR based and there is no other legal basis for the processing;
- the data subject submits in accordance with Art. 21 I GDPR object to the processing and there are no overriding legitimate reasons for the processing, or the data subject objects to the processing in accordance with Art. 21 II;
- the personal data have been unlawfully processed;
- the deletion of the personal data is necessary to fulfill a legal obligation under European Union law or the law of the Member States to which the person responsible is subject;
- the personal data have been collected in relation to information society services offered Art. 8 I GDPR raised.
If we have made the personal data concerning you public and in accordance with
Art. 17 I GDPR
be obliged to delete them, we shall take appropriate measures, also of a technical nature, taking into account the available technology and the implementation costs, to inform those responsible for data processing who process the personal data that you, as the data subject within the meaning of the DS- GVO have requested that those controllers delete any links to your personal information or any copies or replications of your personal information.
Exceptions to the right to data erasure
After
Art. 17 III GDPR
the data subject rights exist
Art. 17 I and II GDPR
not as far as the data processing
- to exercise the right to freedom of expression and information
- or
- to fulfill a legal obligation which requires processing under European Union or Member State law to which the person responsible is subject,
- or
- to perform a task that is in the public interest or in the exercise of official authority that has been assigned to the person responsible
- or
- for reasons of public interest in the field of public health in accordance with Art. 9 II letters h and i DS-GVO and Art. 9 III DS-GVO
- or
- for archival purposes in the public interest, scientific
- or
- historical research purposes or for statistical purposes in accordance with Art. 89 I DS-GVO, insofar as the law referred to in paragraph 1 is likely to make it impossible or seriously impair the achievement of the objectives of this processing
- or
- to assert, exercise or defend legal claims
- is required.
4. Right to restriction of processing of personal data
As a data subject within the meaning of the GDPR, you can restrict the personal data relating to you if one of the following applies:
Art. 18 I GDPR
require us to meet the following requirements:
- The accuracy of the personal data is contested by the data subject for a period enabling the controller to verify the accuracy of the personal data;
- the processing is unlawful and the data subject refuses to delete the personal data and instead requests that the use of the personal data be restricted;
- the person responsible no longer needs the personal data for the purposes of processing, but they are required by the data subject to assert, exercise or defend legal claims;
- the data subject has objected to the processing pursuant to Art. 21 I GDPR filed and it is not yet clear whether the legitimate reasons of the person responsible outweigh those of the data subject.
If the processing of the personal data concerning you has been restricted, the same - apart from their storage - may only be used with your declared consent or to assert, exercise or defend legal claims or to protect the rights of another natural or legal person or for reasons of an important processed in the public interest of the Union or a Member State, cf.
Art. 18 II GDPR
.
After
Art. 18 III GDPR
we are obliged, insofar as you are affected within the meaning of the DS-GVO, from one under the conditions of
Art. 18 I GDPR
to inform you about the restriction of data processing; this at a time before the restriction was lifted.
5. Right to be informed of the obligation to notify in connection with the correction or deletion of personal data or the restriction of processing
If you have asserted a right to correction or deletion of personal data concerning you or to restrict the processing of this data against us, we are obliged to provide all recipients to whom the relevant data has been disclosed with the correction or deletion of those same data to communicate data or the data processing restrictions that have taken place, cf.
Art. 19 S.1 GDPR
.
At your request, you are to be informed about the recipients of the personal data concerning you, cf.
Art. 19 S.2 GDPR
.
Notification Exceptions
The notification obligation from § 19 S.1 DS-GVO does not exist if the notification proves impossible or involves a disproportionate effort.
6. Right to data portability
According to
Art. 20 I GDPR
you have the right to receive the personal data that you have provided to us in a structured, common and machine-readable format. Furthermore, you have the right to transmit this data to another person responsible without hindrance from us as the person responsible to whom the personal data was made available, provided
- the processing is based on consent in accordance with Article 6 I letter a DS-GVO or Article 9 II letter a or on a contract in accordance with Article 6 I letter b
- and
- the processing is carried out using automated procedures.
The right to data portability applies
Art. 20 III 1 GDPR
not for data processing that is necessary for the performance of a task that is in the public interest or in the exercise of official authority that has been transferred to the person responsible.
When exercising the right to data portability, you as the data subject have the right to have the personal data transmitted directly from one person responsible to another person responsible, insofar as this is technically feasible, whereby the rights and freedoms of other persons must not be impaired as a result.
7. Right to object to data processing
As a data subject within the meaning of the DS-GVO, you are entitled under Art. 21 I DS-GVO, for reasons that arise from your particular situation, at any time against the processing of personal data relating to you, which is based on Art. 6 I letter e or f takes place to file an objection; this also applies to profiling based on these provisions.
In the event of a permissible objection, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
If personal data is processed in order to operate direct advertising, you as the person concerned have the right under Art. 21 II DS-GVO to object at any time to the processing of personal data relating to you for the purpose of such advertising, which also applies to profiling, insofar as it is associated with such direct mail.
If you object to processing for direct marketing purposes, we will no longer process your personal data for those purposes. Notwithstanding Directive 2002/58/EC (Privacy Directive for Electronic Communications; also known as the "ePrivacy Directive"), you can and may, in connection with the use of information society services, exercise your right to object by means of automated procedures using technical specifications .
8. Right to withdraw your data protection consent
If you have given us your consent to the processing of your personal data, you are entitled to revoke this declaration at any time.
The legality of the data processing that took place before your revocation on the basis of the consent is not affected by the declaration of revocation.
9. Your right to automated decision-making in individual cases, including profiling
As a data subject within the meaning of the GDPR, you have
Art. 22 I GDPR
the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.
Exceptions to this right from Art. 22 I DS-GVO
After
Art. 22 II GDPR
said right does not apply if the automated decision
- is required for the conclusion or performance of a contract between the data subject and the person responsible (i.e. between you on the one hand and us on the other),
- is permissible on the basis of legal provisions of the European Union or the Member States to which the person responsible is subject and these legal provisions contain appropriate measures to safeguard the rights and freedoms and legitimate interests of the data subject or
- with the express consent of the data subject.
The according
Art. 22 II GDPR
However, the exceptions to the decisions described above must not be based on special categories of personal data pursuant to Art. 9 I GDPR, unless Art. 9 II letter a or g applies and appropriate measures are taken to protect the rights and freedoms and legitimate interests of the data subject were hit.
in the in
Art. 22 II GDPR
In the (exceptional) cases mentioned, we take appropriate measures to protect your rights and freedoms as well as your legitimate interests, including at least the right to do so
- to obtain the intervention of a person on the part of the person responsible,
- to present your own point of view
- and
- to challenge the decision.
10. Right to lodge a complaint with a supervisory authority
After
Art. 78 I GDPR
If you are a data subject within the meaning of the GDPR, you have the right, without prejudice to any other administrative or judicial remedy, to lodge a complaint with a supervisory authority, in particular in the member state of your place of residence, your place of work or the place of the alleged infringement , if you believe that the processing of your personal data violates the GDPR.
According to
Art. 22 II GDPR
the supervisory authority with which the complaint was lodged shall inform the complainant of the status and outcome of the complaint, including the possibility of a judicial remedy under Article 78.
Subject to change with regard to the data protection declaration
In order to be able to comply with the applicable legal provisions in your interest and in ours, we expressly reserve the right to make changes or updates to this data protection declaration. For this reason, we advise you, without obligation, to take a look at the data protection declaration available on our website and to read it carefully at regular intervals.
Other Notes
We endeavor to protect personal data from access by third parties as far as is technically and organizationally possible. We cannot guarantee complete data security when communicating via electronic mail (e-mails), which is why we recommend that you send us confidential information by post.