Welcome to our websites. Below, you will find some information on how we handle your data pursuant to Article 13 of the EU General Data Protection Regulation (GDPR).

Data controller
Responsibility for the collection and processing of data described below lies with the individual(s) named under ‘Company details’.

Usage data
When you visit our websites, so-called usage data is temporarily stored on our web server for statistical purposes as a log in order to improve the quality of our websites. This data record consists of

• name and address of the content requested,
• date and time of the request,
• the data volume transmitted,
• the access status (content transmitted, content not found),
• a description of the web browser and operating system used,
• the referral link indicating from which page the user reached our page,
• the IP address of the requesting computer, which is shortened in such a way that a personal reference can no longer be established.

These log data is evaluated strictly anonymously.

Data security
We take technical and organisational measures to protect your data as comprehensively as possible from unauthorised access. We use an encryption process on our websites. Your data is transmitted from your computer to our server and vice versa via the Internet by means of TLS encryption. You can be assured of this by the fact that the lock symbol in the status bar of your browser is closed and the address line starts with https://

Required cookies
We use cookies on our websites, which are necessary for the use of our web pages.

Cookies are small text files which can be stored and read on your end device. A distinction is made between session cookies, which are deleted again as soon as you close your browser, and permanent cookies, which are stored beyond the individual session.

We do not use these necessary cookies for analysis, tracking or advertising purposes.

Some of these cookies contain only information about certain settings and are not personally identifiable. They may also be necessary to enable user guidance, security and operation of the site.

We use these cookies on the basis of Article 6 Section 1 para 1(f) of the EU General Data Protection Regulation (DSGVO).

You can set your browser so that it informs you about the placement of cookies. This makes the use of cookies transparent for you. By means of the corresponding browser setting, you can also delete cookies at any time and prevent the setting of new cookies. Please note that, in this case, our web pages may not be displayed optimally and that some functions may no longer be technically available.

Google Analytics
We use the Google Analytics web tool to design our websites so that they best meet your needs. Google Analytics creates pseudonymous usage profiles. For this purpose, permanent cookies are stored on your terminal device and read by us. This allows us to recognise and count returning visitors.

In our use of Google Analytics, we are supported by Google Ireland Limited and Google LLC. (USA) as processors consistent with Article 28 GDPR. Data processing may therefore also take place outside the EU or the EEA. With regard to Google LLC, an adequate level of data protection cannot be assumed because processing takes place in the USA. There is a risk that authorities may access the data for security and monitoring purposes without you being informed or having legal recourse. Please bear this in mind if you decide to give your consent to our use of Google Analytics.

Data processing will be based on your consent if you have given your consent via our banner. The transfer to a third country takes place on the basis of Article 49 para 1(a) DSGVO.

You can revoke your consent at any time. To do so, please click on the “Revoke Consents” link in the footer of the website or click on the “Change Privacy Settings” link.

Contact form
You have the option of contacting us via our contact form. To use our contact form, we first need you to complete the mandatory fields.

We use this data on the basis of Article 6 Section 1 para 1f DSGVO to answer your request.

In addition, you can decide for yourself whether you would like to provide us with further information. This information is provided voluntarily and is not mandatory for contacting you. We process your voluntary information on the basis of your consent.

Your data will only be processed in order to answer your enquiry. We will delete your data if it is no longer required and there are no legal storage obligations to the contrary.

Insofar as your data transmitted via the contact form is processed on the basis of Article 6 Section 1 para 1f GDPR, you can object to the processing at any time. In addition, you can revoke your consent to the processing of voluntary data at any time. To do so, please contact the e-mail address given in the ‘Legal’ section (Impressum).

Your rights as a data subject
Whenever your personal data is processed, the GDPR grants you certain rights as a data subject:

Right of access by the data subject (Article 15 GDPR):

You have the right to obtain from the controller confirmation as to whether or not personal data concerning you are being processed, and, where that is the case, access to the personal data and the information listed in detail in Article 15 GDPR.

Right to rectification (Article 16 GDPR)

You have the right to obtain from the controller without undue delay the rectification and, if applicable, completion of inaccurate data concerning yourself.

Right to erasure (Article 17 GDPR)

You have the right to obtain from the controller the erasure of personal data concerning yourself without undue delay where one of the grounds listed in detail in Article 17 GDPR applies.

Right to restriction of processing (Article 18 GDPR):

You have the right to obtain from the controller restriction of processing where one of the preconditions listed in Article 18 GDPR applies, e.g. if you objected to the processing, for a period enabling the controller to carry out a respective verification.

Right to data portability (Article 20 GDPR):

In certain cases listed in detail in Article 20 GDPR, you have the right to receive the personal data concerning yourself in a structured, commonly used and machine-readable format and have the right to demand transmission of this data to a third party.

Right of withdrawal (Article 7 GDPR)

If the processing of data is based on your consent, you are entitled under Article 7 Section 3 GDPR to revoke your consent to the use of your personal data at any time. Please note that the revocation only takes effect for the future. Any type of data processing that took place before the revocation is not affected.

Right to object (Article 21 GDPR)

If data are processed on the basis of Article 6 Section 1 para 1(f) GDPR (Data processing to safeguard legitimate interests) or on the basis of Article 6 Section 1 para 1(e) GDPR (Data processing in the public interest or in the exercise of official authority), you are entitled to object to the processing at any time for reasons arising from your particular situation. In this case, we will no longer process the personal data unless there are demonstrably compelling reasons for the processing which outweigh the interests, rights and freedoms of the data subject, or unless the processing serves to assert, exercise or defend legal claims.

Right to lodge a complaint with a supervisory authority (Article 77 GDPR)

Pursuant to Article 77 GDPR, you have the right to lodge a complaint with a supervisory authority if you consider that the processing of data concerning you is in breach of data protection legislation. The right to lodge a complaint may be exercised in particular before a regulatory authority in the member state of your residence or workplace, or in the place where the alleged breach occurred.

Assertion of your rights

Unless otherwise described above, please contact the office named in the ‘Legal’ section (Impressum) to assert your data protection rights.

Contact details of the Data Security Officer
Our external data protection officer will be happy to provide you with information on the subject of data protection under the following contact details:

datenschutz nord GmbH
Konsul-Smidt-Straße 88
28217 Bremen
Web: www.datenschutz-nord-gruppe.de
E-Mail: office@datenschutz-nord.de

If you contact our data protection officer, please also state the responsible office named in the ‘Legal’ section (Impressum).