← Back to home page

Legal Notice

This is a courtesy translation. Only the German version is legally binding.

Information in accordance with the duty to provide information under § 5 of the German Telemedia Act (TMG).

CHPD
Am Lüdenbach 1,
51766 Engelskirchen,
Germany

VAT ID: DE329965241

Email: c.hollstein@gmx.de

Professional title: Web designer, graphic designer

Contact details of the data protection officer
If you have any questions about data protection, you will find the contact details of the responsible person or body below:
see above
Email address: c.hollstein@gmx.de

EU dispute resolution

In accordance with the Regulation on Online Dispute Resolution in Consumer Affairs (ODR Regulation), we would like to inform you about the Online Dispute Resolution platform (ODR platform).
Consumers have the option of submitting complaints to the European Commission's Online Dispute Resolution platform at https://ec.europa.eu/consumers/odr/main/index.cfm?event=main.home2.show&lng=EN. You will find the necessary contact details above in our legal notice.

However, we would like to point out that we are neither willing nor obliged to take part in dispute resolution proceedings before a consumer arbitration board.

Liability for the content of this website

We are constantly developing the content of this website and strive to provide correct and up-to-date information. Unfortunately, we cannot accept any liability for the correctness of all content on this website, especially for content provided by third parties. As a service provider, we are not obliged to monitor the information you transmit or store, or to investigate circumstances that indicate unlawful activity.

Our obligations to remove information or to block its use under the general laws, on the basis of court or official orders, remain unaffected even where we are not responsible.

If you notice any problematic or unlawful content, please contact us immediately so that we can remove it. You will find our contact details in the legal notice.

Liability for links on this website

Our website contains links to other websites whose content we are not responsible for. We are not liable for linked websites, as we had and have no knowledge of unlawful activities, have not noticed any such unlawfulness so far, and would remove links immediately if we became aware of any unlawfulness.

If you notice any unlawful links on our website, please contact us. You will find our contact details in the legal notice.

Copyright notice

All content of this website (images, photos, texts, videos) is subject to copyright. Please ask us before you distribute, reproduce or exploit the content of this website, for example by republishing it on other websites. If necessary, we will take legal action against unauthorised use of parts of the content of our site.

If you find content on this website that infringes copyright, please contact us.

Image credits

The images, photos and graphics on this website are protected by copyright.

All texts are protected by copyright.

Source: Created with the Legal Notice Generator by AdSimple

Privacy Policy

Introduction and overview

We have written this privacy policy (version 28.04.2022-322012418) to explain to you, in accordance with the requirements of the General Data Protection Regulation (EU) 2016/679 and applicable national laws, which personal data (data for short) we as the controller – and the processors commissioned by us (e.g. providers) – process, will process in the future, and what lawful options you have. The terms used are to be understood as gender-neutral.
In short: We inform you comprehensively about the data we process about you.

Privacy policies usually sound very technical and use legal terminology. This privacy policy, on the other hand, aims to describe the most important things as simply and transparently as possible. Where it helps transparency, technical terms are explained in a reader-friendly way, links to further information are provided and graphics are used. We thereby inform you in clear and simple language that, in the course of our business activities, we only process personal data if there is a corresponding legal basis. This would certainly not be possible with brief, unclear and legalistic explanations, as are often standard on the internet when it comes to data protection. I hope you find the following explanations interesting and informative, and perhaps there is some information you did not yet know.
If questions remain, we ask you to contact the responsible body named below or in the legal notice, to follow the links provided and to look at further information on third-party sites. Our contact details can of course also be found in the legal notice.

Scope

This privacy policy applies to all personal data processed by us in the company and to all personal data processed by companies commissioned by us (processors). By personal data we mean information within the meaning of Art. 4 No. 1 GDPR, such as the name, email address and postal address of a person. The processing of personal data enables us to offer and invoice our services and products, whether online or offline. The scope of this privacy policy includes:

• all online presences (websites, online shops) that we operate
• social media presences and email communication
• mobile apps for smartphones and other devices

In short: The privacy policy applies to all areas in which personal data is processed in a structured way in the company via the channels mentioned. If we enter into legal relationships with you outside these channels, we will inform you separately where necessary.

Legal bases

In the following privacy policy we give you transparent information on the legal principles and regulations, i.e. the legal bases of the General Data Protection Regulation, which allow us to process personal data.
As far as EU law is concerned, we refer to REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016. You can of course read this EU General Data Protection Regulation online on EUR-Lex, the access point to EU law, at https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=celex%3A32016R0679.

We only process your data if at least one of the following conditions applies:

1. Consent (Article 6(1)(a) GDPR): You have given us your consent to process data for a specific purpose. An example would be storing the data you enter in a contact form.
2. Contract (Article 6(1)(b) GDPR): To fulfil a contract or pre-contractual obligations with you, we process your data. If we conclude a purchase contract with you, for example, we need personal information in advance.
3. Legal obligation (Article 6(1)(c) GDPR): If we are subject to a legal obligation, we process your data. For example, we are legally required to keep invoices for accounting purposes. These usually contain personal data.
4. Legitimate interests (Article 6(1)(f) GDPR): In the case of legitimate interests that do not restrict your fundamental rights, we reserve the right to process personal data. For example, we need to process certain data in order to operate our website securely and cost-effectively. This processing is therefore a legitimate interest.

Other conditions, such as the performance of tasks in the public interest and the exercise of official authority, as well as the protection of vital interests, do not usually arise for us. Should such a legal basis nevertheless be relevant, it will be indicated at the appropriate place.

In addition to the EU regulation, national laws also apply:

• In Austria this is the Federal Act on the Protection of Natural Persons with regard to the Processing of Personal Data (Datenschutzgesetz), DSG for short.
• In Germany the Federal Data Protection Act (Bundesdatenschutzgesetz), BDSG for short, applies.

If other regional or national laws apply, we will inform you about them in the following sections.

Contact details of the controller

If you have any questions about data protection or the processing of personal data, you will find the contact details of the responsible person or body below:
see above

Email: c.hollstein@gmx.de

Storage period

It is a general criterion for us to store personal data only for as long as is absolutely necessary for the provision of our services and products. This means that we delete personal data as soon as the reason for the data processing no longer exists. In some cases, we are legally obliged to store certain data even after the original purpose has ceased to exist, for example for accounting purposes.

If you wish your data to be deleted or if you withdraw your consent to data processing, the data will be deleted as quickly as possible, unless there is an obligation to retain it.

We will inform you below about the specific duration of the respective data processing, where we have further information on this.

Rights under the General Data Protection Regulation

In accordance with Articles 13 and 14 GDPR, we inform you about the following rights to which you are entitled so that data is processed fairly and transparently:

• Under Article 15 GDPR you have the right to obtain information as to whether we process data about you. If so, you have the right to receive a copy of the data and to be informed of the following:
  • the purpose for which we carry out the processing;
  • the categories, i.e. the types of data, that are processed;
  • who receives this data and, if the data is transferred to third countries, how security can be guaranteed;
  • how long the data will be stored;
  • the existence of the right to rectification, erasure or restriction of processing and the right to object to processing;
  • that you can lodge a complaint with a supervisory authority (links to these authorities can be found below);
  • the origin of the data, if we have not collected it from you;
  • whether profiling is carried out, i.e. whether data is automatically evaluated in order to arrive at a personal profile of you.
• Under Article 16 GDPR you have the right to rectification of data, which means that we must correct data if you find errors.
• Under Article 17 GDPR you have the right to erasure (“right to be forgotten”), which specifically means that you may demand the deletion of your data.
• Under Article 18 GDPR you have the right to restriction of processing, which means that we may only store the data but not use it further.
• Under Article 19 GDPR you have the right to data portability, which means that we will provide you with your data in a common format on request.
• Under Article 21 GDPR you have the right to object, which, once enforced, results in a change to the processing.
  • If the processing of your data is based on Article 6(1)(e) (public interest, exercise of official authority) or Article 6(1)(f) (legitimate interest), you can object to the processing. We will then check as quickly as possible whether we can legally comply with this objection.
  • If data is used for direct marketing, you can object to this type of data processing at any time. We may then no longer use your data for direct marketing.
  • If data is used for profiling, you can object to this type of data processing at any time. We may then no longer use your data for profiling.
• Under Article 22 GDPR you may have the right not to be subject to a decision based solely on automated processing (for example profiling).
• Under Article 77 GDPR you have the right to lodge a complaint. This means that you can complain to the data protection authority at any time if you believe that the processing of personal data violates the GDPR.

In short: You have rights – do not hesitate to contact the responsible body listed above!

If you believe that the processing of your data violates data protection law or that your data protection rights have been infringed in some other way, you can complain to the supervisory authority. For Austria this is the data protection authority, whose website you can find at https://www.dsb.gv.at/. In Germany there is a data protection commissioner for each federal state. For more information you can contact the Federal Commissioner for Data Protection and Freedom of Information (BfDI). The following local data protection authority is responsible for our company:

North Rhine-Westphalia data protection authority

State Commissioner for Data Protection: Bettina Gayk
Address: Kavalleriestraße 2-4, 40213 Düsseldorf
Telephone: 02 11/384 24-0
Email address: poststelle@ldi.nrw.de
Website: https://www.ldi.nrw.de/

Security of data processing

To protect personal data, we have implemented both technical and organisational measures. Where possible, we encrypt or pseudonymise personal data. In this way, within the scope of our possibilities, we make it as difficult as possible for third parties to draw conclusions about personal information from our data.

Art. 25 GDPR refers here to “data protection by design and by default”, meaning that security is always kept in mind for software (e.g. forms) as well as hardware (e.g. access to the server room) and that appropriate measures are taken. Below we go into specific measures where necessary.

TLS encryption with https

TLS, encryption and https sound very technical, and they are. We use HTTPS (Hypertext Transfer Protocol Secure) to transmit data securely on the internet, protected against eavesdropping.
This means that the entire transmission of all data from your browser to our web server is secured – nobody can “listen in”.

With this we have introduced an additional layer of security and fulfil data protection by design (Article 25(1) GDPR). By using TLS (Transport Layer Security), an encryption protocol for secure data transmission on the internet, we can ensure the protection of confidential data.
You can recognise the use of this protection of data transmission by the small padlock symbol at the top left of your browser, to the left of the internet address (e.g. examplepage.com), and by the use of the https scheme (instead of http) as part of our internet address.
If you would like to know more about encryption, we recommend searching the web for “Hypertext Transfer Protocol Secure wiki” to find good links to further information.

Communication

If you contact us and communicate by telephone, email or online form, personal data may be processed.

The data is processed for the handling and processing of your enquiry and the related business transaction. The data is stored for as long as this takes or for as long as the law requires.

Data subjects

Everyone who seeks contact with us via the communication channels we provide is affected by the processes mentioned.

Telephone

If you call us, the call data is stored in pseudonymised form on the respective end device and with the telecommunications provider used. In addition, data such as name and telephone number may subsequently be sent by email and stored to answer the enquiry. The data is deleted as soon as the business case has been completed and the law permits.

Email

If you communicate with us by email, data may be stored on the respective end device (computer, laptop, smartphone, …) and data is stored on the email server. The data is deleted as soon as the business case has been completed and the law permits.

Online forms

If you communicate with us using an online form, data is stored on our web server and, where applicable, forwarded to one of our email addresses. The data is deleted as soon as the business case has been completed and the law permits.

Legal bases

The processing of the data is based on the following legal bases:

• Art. 6(1)(a) GDPR (consent): You give us your consent to store your data and to use it further for purposes relating to the business case;
• Art. 6(1)(b) GDPR (contract): It is necessary for the performance of a contract with you or a processor such as the telephone provider, or we need to process the data for pre-contractual activities, such as preparing an offer;
• Art. 6(1)(f) GDPR (legitimate interests): We want to handle customer enquiries and business communication in a professional manner. This requires certain technical facilities, such as email programs, Exchange servers and mobile network operators, in order to be able to communicate efficiently.

Web hosting introduction

What is web hosting?

When you visit websites today, certain information – including personal data – is automatically created and stored, including on this website. This data should be processed as sparingly as possible and only with justification. By website we mean, by the way, the entirety of all web pages on a domain, i.e. everything from the home page to the very last subpage (like this one). By domain we mean, for example, example.com or sampleexample.com.

When you want to view a website on a computer, tablet or smartphone, you use a program called a web browser. You probably know some web browsers by name: Google Chrome, Microsoft Edge, Mozilla Firefox and Apple Safari. We call them browser or web browser for short.

To display the website, the browser must connect to another computer where the code of the website is stored: the web server. Operating a web server is a complicated and time-consuming task, which is why it is usually handled by professional providers. These offer web hosting and thus ensure reliable and error-free storage of the website data. Quite a lot of technical terms, but please bear with us, it gets better!

When the browser on your computer (desktop, laptop, tablet or smartphone) connects, and during data transmission to and from the web server, personal data may be processed. On the one hand, your computer stores data; on the other hand, the web server must also store data for a period of time to ensure proper operation.

Why do we process personal data?

The purposes of the data processing are:

1. Professional hosting of the website and securing its operation
2. Maintaining operational and IT security
3. Anonymous evaluation of access behaviour to improve our offer and, where applicable, for criminal prosecution or the pursuit of claims

Which data is processed?

Even while you are visiting our website right now, our web server, i.e. the computer on which this website is stored, usually stores data such as

• the complete internet address (URL) of the web page accessed
• browser and browser version (e.g. Chrome 87)
• the operating system used (e.g. Windows 10)
• the address (URL) of the page previously visited (referrer URL) (e.g. https://www.examplesourcesite.com/howicamehere.html/)
• the host name and IP address of the device from which access is made (e.g. COMPUTERNAME and 194.23.43.121)
• date and time
• in files, the so-called web server log files

How long is data stored?

As a rule, the data mentioned above is stored for two weeks and then deleted automatically. We do not pass this data on, but we cannot rule out that authorities may inspect it in the event of unlawful conduct.

In short: Your visit is logged by our provider (the company that runs our website on special computers (servers)), but we do not pass on your data without consent!

Legal basis

The lawfulness of the processing of personal data in the context of web hosting results from Art. 6(1)(f) GDPR (protection of legitimate interests), because the use of professional hosting with a provider is necessary in order to present the company on the internet securely and in a user-friendly way and, where necessary, to pursue attacks and claims arising from them.

As a rule, there is a data processing agreement between us and the hosting provider pursuant to Art. 28 et seq. GDPR, which ensures compliance with data protection and guarantees data security.

All texts are protected by copyright.

Source: Created with the Privacy Policy Generator by AdSimple