Privacy statement

We thank you for your interest in our online offer and look forward to your visit. Within the following declaration, we would like to inform you about the nature, scope and purpose regarding the collection, use and processing of personal data in connection with the use of our website and at the same time inform you about the rights to which you are entitled.

In principle, it is possible to visit and use our website without providing personal data. Personal data is all data that can be related to you personally, e.g. name, address, e-mail address, user behavior.

However, should certain services (for example, registration or other information transfer) of our website be used, the collection and processing of personal data will occur exclusively within the framework of the applicable General Data Protection Regulation (DSGVO).

To protect your data, our website always uses an up-to-date encryption method (SSL or TLS)

1. person responsible for data processing

1.1 The person responsible for data processing via this website in the sense of all data protection regulations (in particular in the sense of the DSGVO according to Art. 4 Para. 7) is:

Ariane Poschner
Habsburgerplatz 2
80801 Munich

Tel.:+49 (0) 89 961 6084 11

Our full provider identification can be found at the following link:http://www.swordfish-pr.de/impressum

The controller is a natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.

1.2 When contacting us by e-mail or via a contact form, the personal data you provide (your e-mail address, your name, if applicable, and your telephone number) will be processed in accordance with Art. 6 para. 1 p. 1 lit. f and, if applicable, b DSGVO on the basis of our legitimate interest in order to be able to answer your questions. We delete the data accruing in this context after storage is no longer necessary (final clarification of the inquiry) or restrict processing if there are statutory retention obligations.

1.3 If we use contracted service providers for individual functions of our offer or would like to use your data for advertising purposes, we will inform you in detail about the respective processes in the course of this privacy policy. In doing so, we also state the specified criteria for the storage period.

2. collection of personal data when visiting our website, cookies

2.1 In the case of purely informational use of our website, i.e. if you do not register or otherwise transmit information to us, we only collect the personal data that the browser you use transmits to our server. If you wish to view our website, we collect data in accordance with Art. 6 para. 1 p. 1 lit. f DSGVO on the basis of our legitimate interest the following data, which are technically necessary for us to display our website to you and to ensure stability, functionality and security: (1) IP address, (2) date and time of the request, (3) time zone difference to Greenwich Mean Time (GMT), (4) content of the request (specific page), (5) access status/http status code, (6) amount of data transferred in each case, (7) website from which the request came, (8) browser, (9) operating system and its interface, (10) language and version of the browser software.

2.2 In addition to the previously mentioned data, cookies are stored on your computer when you use our website. Cookies are small text files that the browser you are using stores on your hard drive and through which we receive certain information. Cookies cannot execute programs or transfer viruses to your computer. These serve to make the Internet offer as a whole more user-friendly and effective or to simplify the visit to our website (e.g. display of the contents of the shopping cart the next time you visit our website).

Our website uses transient and persistent cookies in particular.

Transient cookies are automatically deleted if you close the browser. These include in particular the session cookies. These store a so-called session ID, with which various requests from your browser can be assigned to the joint session. This allows your computer to be recognized if you visit our website again. Session cookies are deleted when you log out or close your browser.

Persistent cookies are automatically deleted after a specified period of time, which may differ depending on the cookie. You can delete these cookies at any time in the security settings.

2.3 You can configure the security settings of your browser according to your preferences regarding the storage of cookies and, for example, refuse to accept third-party cookies or all cookies. Please use the help menu of the respective browser you are using. If you reject cookies in whole or in part, you may not be able to use all the functions of our website.

3. further functions and offers of our website

3.1 In addition to the purely informational use of our website, we offer various services that you can use if you are interested. For this purpose, you will usually have to provide additional personal data that we use to provide the respective service and to which the aforementioned data processing principles apply.

3.2 In some cases, we use external service providers to process your data. They have been carefully selected and commissioned by us, are bound by our instructions and are regularly inspected.

3.3 Furthermore, we may pass on your personal data to third parties if promotional participations, competitions, contract conclusions or similar services are offered by us together with partners. You will receive more information about this in the course of this privacy policy, as well as when you provide your personal data or below in the description of the offer.

3.4 If our service providers or partners are located in a country outside the European Economic Area (EEA), we will inform you about the consequences of this circumstance in the description of the offer.

4. duration of the storage of personal data

Personal data will be stored for the duration of the respective statutory retention period (in particular measured according to commercial and tax law). If, after the expiry of this statutory retention period, this data is no longer required for the performance of the contract or for the initiation of the contract, or if there is no legitimate interest on our part in the continued storage of the data, it will be deleted.

5. legal basis for the data processing carried out by the company

Unless we refer separately to the legal basis within this data protection declaration, data processing is generally carried out on the basis of the legal bases named below.

5.1 If you have given your consent to the processing of your personal data for one or more purposes, the processing of the data by us is based on Art. 6 I lit. a GDPR.

5.2 If the processing is necessary due to the fulfillment of a contractual relationship to which you are a party, for example, for the delivery of products after an order or for the implementation of pre-contractual measures, in particular to respond to an inquiry you have made, the processing of the data is based on Art. 6 I lit. b GDPR.

5.3 If the processing of the data is necessary due to the fulfillment of a legal (e.g. tax) obligation to which we are subject, the processing of the data by us is based on Art. 6 I lit. c GDPR.

5.4 If the processing of the data is carried out in order to protect your vital interests or the vital interests of another natural person, this is based on Art. 6 I lit. d GDPR.

5.5 If the processing of personal data is not covered by any of the aforementioned legal bases, the data shall be processed on the basis of Art. 6 I lit. f GDPR. Thereafter, the processing is carried out to protect our legitimate interest or the interest of a third party, provided that your interests, fundamental rights and freedoms do not override.

6. your rights

You have the following rights vis-à-vis our company with regard to the personal data concerning you.

6.1 Right of access, Art. 15 DSGVO

You have the right to request free information and a copy from us about personal data processed that concerns you. In addition, you are entitled to information on (1) the purposes of processing, (2) the categories of personal data processed, (3) the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular in the case of recipients in third countries or international organizations, (4) – if possible – the planned duration, for which the personal data will be stored or, if this is not possible, the criteria for determining this duration, (5) the existence of a right to rectify or erase the personal data concerning you or to have the processing restricted by the controller or a right to object to such processing (6) the right to lodge a complaint with a supervisory authority, (7) any available information about the origin of the data if the personal data are not collected by us, (8) the existence of automated decision-making, including profiling, pursuant to Article 22(1) and (4) of the GDPR and, at least in these cases, meaningful information about the logic involved and the scope and intended effects of such processing for you as a data subject, (9) the appropriate safeguards pursuant to Article 46 of the GDPR in connection with the transfer, where personal data are transferred to a third country or to an international organization.

6.2 Right of rectification, Art. 16 DSGVO

You have the right to request that inaccurate personal data concerning you be corrected without delay. In addition, you have the right to request the completion of incomplete personal data – also by means of a supplementary declaration.

6.3 Right to erasure, Art. 17 DSGVO (“right to be forgotten”)

You have the right to the immediate erasure of personal data if one of the following reasons applies: (1) the personal data are no longer necessary for the purposes for which they were collected or otherwise processed, (2) you withdraw your consent on which the processing is based pursuant to Article 6 (1) lit. a DSGVO or Article 9 (2) lit. a GDPR and there is no other legal basis for the processing, (3) you object to the processing pursuant to Article 21(1) GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Article 21(2) GDPR, (4) the personal data have been processed unlawfully, (5) erasure of the personal data is necessary for compliance with a legal obligation under Union or Member State law to which we are subject, (6) the personal data have been collected in relation to information society services offered pursuant to Article 8(1) DSGVO.

6.4 Right to restriction of processing, Art. 18 DSGVO

You have the right to request us to restrict processing if one of the following conditions is met: (1) the accuracy of the personal data is contested by you for a period enabling us to verify the accuracy of the personal data, (2) the processing is unlawful and you object to the erasure of the personal data and request instead the restriction of the use of the personal data, (3) we no longer need the personal data for the purposes of the processing, but you need it for the assertion, exercise or defense of legal claims, or (4) you have objected to the processing pursuant to Article 21(1) DSGVO as long as it is not yet clear whether our legitimate grounds prevail.

6.5 Right to notification, Art. 19 DSGVO

We have a duty to notify all recipients whose personal data have been disclosed of any rectification or erasure of personal data or restriction of processing pursuant to Articles 16, 17(1) and 18 of the GDPR, unless this proves impossible or involves a disproportionate effort. You have the right to be informed about these recipients if you so request.

6.6 Right to data portability, Art. 20 DSGVO

You have the right to receive the personal data concerning you that you have provided to us in a structured, common and machine-readable format and to transfer this data to another controller without hindrance from us to whom the personal data has been provided, provided that the processing is based on consent pursuant to Article 6(1) lit. a or Article 9(2) lit. a DSGVO or on a contract pursuant to Article 6 (1) lit. b DSGVO and the processing is carried out with the aid of automated procedures. You also have the right to request that the personal data be transferred directly from us to another controller, insofar as this is technically feasible.

6.7 You also have the right to complain to a data protection supervisory authority about the processing of your personal data by us in accordance with Art. 77 (3) DSGVO.

7. objection or revocation against the processing of your data, Art. 7 para. 3 GDPR

7.1 If you have given your consent to the processing of your data, you can revoke this consent at any time. Such revocation will affect the permissibility of processing your personal data after you have expressed it to us.

7.2 Insofar as we base the processing of your personal data on the balance of interests, you may object to the processing. This is the case if the processing is not necessary, in particular, for the performance of a contract with you, which is shown by us in each case in the following description of the functions. When exercising such an objection, we ask you to explain the reasons why we should not process your personal data as we have done. In the event of your justified objection, we will review the merits of the case and either discontinue or adjust the data processing or show you our compelling legitimate grounds on the basis of which we will continue the processing.

7.3 Of course, you can object to the processing of your personal data for purposes of advertising and data analysis at any time. You can inform us of your advertising objection using the following contact details:

Mrs. Ariane Poschner
Habsburgerplatz 2
80801 Munich

Tel.:+49 (0) 89 961 608 410
E-mail: ariane@swordfish-pr.de

8. use of our portal, registration

8.1 If you wish to use our portal, you must register by providing your e-mail address, a password of your choice and a user name of your choice. There is no obligation to use a clear name, pseudonymous use is possible. We use the so-called double-opt-in procedure for registration, i.e. your registration is only completed when you have previously confirmed your registration via a confirmation e-mail sent to you for this purpose by clicking on the link contained therein. If your confirmation is not received within 24 hours, your registration will be automatically deleted from our database. The provision of the aforementioned data is mandatory, all other information you can provide voluntarily by using our portal.

8.2 If you use our portal, we store your data required for the fulfillment of the contract until you finally delete your access. Furthermore, we store the voluntary data you provide for the time of your use of the portal, unless you delete it beforehand. You can manage and change all details in the protected customer area. The legal basis is Art. 6 para. 1 p. 1 lit. f GDPR.

8.3 To prevent unauthorized access by third parties to your personal data, in particular financial data, the connection is encrypted using TLS technology.

9. integration of Google Maps

9.1 On this website we use the offer of Google Maps. This allows us to show you interactive maps directly in the website and enables you to use the map function comfortably.

9.2 By visiting the website, Google receives the information that you have accessed the corresponding sub-page of our website. In addition, the data mentioned under point 3 of this declaration will be transmitted. This occurs regardless of whether Google provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data is directly assigned to your account. If you do not want the assignment with your profile at Google, you must log out before activating the button. Google stores your data as usage profiles and uses them for purposes of advertising, market research and/or the needs-based design of its website, which constitutes a legitimate interest, cf. Art. 6 para. 1 lit. f GDPR. Such an evaluation is carried out in particular (even for users who are not logged in) for the provision of tailored advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, and you must contact Google to exercise this right.

9.3 For more information on the purpose and scope of data collection and its processing by the plug-in provider, please refer to the provider’s privacy policy. There you can also obtain further information on your rights in this regard and settings options for protecting your privacy: http://www.google.de/intl/de/policies/privacy. Google also processes your personal data in the USA and has submitted to the EU-US Privacy Shield, https://www.pri-vacyshield.gov/EU-US-Framework.

© Wrase Law Firm, Hamburg https://www.lawst.de/