We hereby inform you about the processing of your personal data by us and the claims and rights to which you are entitled under the data protection regulations.
Responsible for data processing
Dr.-Ing. Hans Schwendner
Phone: +49 8031 2679-35
Sources and data for the processing of personal data
We process personal data that we receive from you in the course of your internet or social media use or that you have transmitted to us via the contact options.
Data is stored in server log files, which are collected and automatically stored by the provider and largely transmitted to us by your browser.
- Referrer URL
- Host name of the accessing computer
- Date and time of the server request
- Name of the requested file
- Page from which the file was requested
- Web browser and operating system used
- (Complete) IP address of the requesting computer
- Amount of data transferred
Furthermore, we may process other data comparable to the above categories.
We collect the listed data to ensure a smooth connection setup of the website and to enable a comfortable use of our website by the users. In addition, the log file serves the evaluation of system security and stability as well as administrative purposes. The legal basis for the temporary storage of the data or the log files is Art. 6 para. 1 lit. f) DSGVO.
Currently, we also offer the following social media channels:
In the context of social media use, we may retrieve statistical usage data from the respective social media company. This may include information on page views and activities; views of individual articles, videos, services (e.g. route planner), etc.; comments, shared content, responses, usage rates: Men and women, origin related to country and city, language. The legal basis for retrieving data during social media use is Art. 6 para. 1 lit. f) DSGVO.
Purpose of processing and legal basis
We process personal data in accordance with the provisions of the European Data Protection Regulation (DSGVO) and the German Federal Data Protection Act (BDSG):
Within the framework of the balancing of interests in the case of conflicting interests (Art. 6 para. 1 lit. f) DSGVO and Art. 49 para. 1 p. 2 DSGVO)
The legal basis for the temporary storage of the data is our legitimate interest (Art. 6 para. 1 lit. f DSGVO). We collect the data listed above to ensure a smooth connection setup of the website and to enable a comfortable use of our website by the users. In addition, the log file is used to evaluate system security and stability as well as for administrative purposes. In addition, we store your data for reasons of technical security, in particular to defend against attempted attacks on our web server.
Examples in this context:
- Testing and optimization of procedures for needs analysis and direct customer approach;
- Assertion of legal claims and defense in legal disputes;
- Ensuring IT security and IT operations;
- Measures for business management and further development of services and other offers
- Occasional evaluation of data for research purposes in anonymous form
In particular, so-called usage profiles are created by the social media companies by means of your usage behavior and used for the placement of advertisements. Cookies are usually stored on your computer for this purpose.
Within the framework of the balancing of interests in the case of similar interests (Art. 49 (1) (c) GDPR)
If the balance of interests shows that both the controller and the data subject have an interest in the transfer of data to a third country, the transfer of data is based on Article 49 (1) c) of the GDPR.
In the context of your consent (Art. 6 para. 1 lit. a) DSGVO and Art. 49 para. 1 lit. a) DSGVO)
Insofar as you have given us consent to process personal data for certain purposes (e.g. transfer of data to third parties, evaluation of data for marketing purposes), the lawfulness of this processing is based on your consent. Consent given can be revoked at any time.
Please note that the revocation is only effective for the future. Processing that took place before the revocation is not affected.
If you have given the social media companies your consent to a certain data processing, the processing is carried out on the legal basis of Art. 6 (1) a) DSGVO.
Due to legal requirements, Art. 6 lit. c) DSGVO, or in the public interest, Art. 6 para. 1 lit. e) DSGVO
In addition, we are subject to various legal obligations, i.e. legal requirements (e.g. commercial law, tax laws, etc.). Insofar as data is processed in this regard, this is done exclusively on the basis of these regulations.
In particular, the Infection Protection Act or similar national and international regulations to which we are bound due to the current Covid 19 pandemic may be considered as such legal basis.
Passing on the data
Within the company, those departments receive your data that need it to fulfill our contractual and legal obligations. Processors used by us (Art. 28 DSGVO) may also receive data for these purposes. These are companies in the categories of IT services, telecommunications, consulting and advisory, and sales and marketing.
With regard to the transfer of data to recipients outside the company, it should be noted that we only pass on your data if this is permitted or required by law, you have given your consent or we are authorized to provide information. Under these conditions, recipients of personal data may be, for example:
- Public bodies and institutions (e.g. public prosecutor’s office, police, supervisory authorities) in the event of a legal or official obligation.
- Other comparable bodies (e.g. lawyer, tax advisor, auditor).
Other data recipients may be those entities for which you have given us your consent to transfer data.
Duration of storage
To the extent permitted by law, we process and store your personal data, in particular as long as this is necessary to fulfill the respective purposes.
Data transfer to third countries
Data is only transferred to third countries (countries outside the European Economic Area – EEA) if this is necessary for the execution of our social media offers, is required by law or you have given us your consent. We will inform you separately about details, if required by law.
When visiting our social media offers, we point out that data of you as a user outside the EU may be processed.
Our website only uses technically necessary cookies, so-called functional cookies, which are stored by the browser on your device and contain certain settings for the use of the website (e.g. for the current session). Cookies serve to make our offer more user-friendly, effective and secure. Cookies are small text files that are stored on your computer and saved by your browser. Most of the cookies we use are so-called session cookies, which are automatically deleted after closing the browser. Other cookies remain stored on your terminal device until you delete them or the storage period expires. These cookies allow us to recognize your browser on your next visit.
The cookies are used to simplify website processes by storing settings (e.g. keeping already selected options).
You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when closing the browser. If cookies are deactivated, the functionality of this website may be limited.
You can also deactivate the storage of cookies in the settings of your browser. Please note that then not all functions of this online offer can be used.
Contact by e-mail
If you send us inquiries by e-mail, the information you provide in your e-mail, including the contact data you provide there, will be stored by us for the purpose of processing the inquiry and in case of follow-up questions. The indication of your name as well as your e-mail address are required. Under no circumstances will we pass on this data without your consent. The legal basis for processing the data is our legitimate interest in responding to your request in accordance with Art. 6 (1) f) DSGVO and, if applicable, Art. 6 (1) b) DSGVO, if your request is aimed at concluding a contract. Your data will be deleted after final processing of your request, provided that there are no legal obligations to retain data. You can object to the processing of your personal data at any time in the case of Art. 6 para. 1 lit. f) DSGVO.
In the following, you will find information on which data subject rights the applicable data protection law grants you vis-à-vis the controller with regard to the processing of your personal data:
- Right of access:
The right, in accordance with Art. 15 DSGVO, to request information about your personal data processed by us.
- Right to rectification:
The right, pursuant to Art. 16 DSGVO, to request without undue delay the correction of inaccurate or completion of your personal data stored by us.
- Right to erasure:
The right, pursuant to Article 17 DSGVO, to request the erasure of your personal data stored by us, unless the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise or defense of legal claims.
- Right to restriction of processing:
The right to request the restriction of the processing of your personal data in accordance with Art. 18 DSGVO, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you object to its erasure and we no longer need the data, but you need it for the assertion, exercise or defense of legal claims or you have objected to the processing in accordance with Art. 21 DSGVO.
- Right to data portability pursuant to Art. 20 DSGVO:
You have the right to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request that it be transferred to another controller, insofar as this is technically feasible
- Right of complaint:
You have the right to complain to a supervisory authority in accordance with Art. 77 DSGVO. As a rule, you can contact the supervisory authority of the federal state of our registered office or, if applicable, that of your usual place of residence or workplace.
- Right of withdrawal:
Right to revoke consent given in accordance with Art. 7 (3) DSGVO: You have the right to revoke consent to the processing of data once given at any time with effect for the future. In the event of revocation, we will immediately delete the data concerned, unless further processing can be based on a legal basis for processing without consent. The revocation of consent shall not affect the lawfulness of the processing carried out on the basis of the consent until the revocation;
We would like to point out that the easiest way for you to assert your data subject rights in connection with your social media use is against the social media company.
Right of objection
You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Article 6(1)(e) of the GDPR (data processing in the public interest) and Article 6(1)(f) of the GDPR (data processing based on a balance of interests); this also applies to profiling based on this provision within the meaning of Article 4 No. 4 of the GDPR.
If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the assertion, exercise or defense of legal claims.
The objection can be made form-free and should preferably be addressed to:
Dr.-Ing. Hans Schwendner
Phone: +49 8031 2679-35
We would like to point out that the easiest way to assert your data subject rights in connection with your social media use is against the social media company.
Obligation to provide data
In the context of Internet or social media use, you only have to provide the personal data that is required for use or that we are legally obligated to collect. Without this provided data, meaningful use may be limited or impossible.
Automated decision making in individual cases.
Where links are provided to other websites, we have neither influence nor control over the linked content and the data protection provisions there. When accessing linked websites, we recommend checking the data protection declarations of these websites in order to determine whether and to what extent personal data is collected, processed, used or made accessible to third parties.
Automated decision-making in individual cases
Fully automated decision-making pursuant to Art. 22 DSGVO does not take place. Should we use these procedures in individual cases, we will inform you about this separately if this is required by law.
Data use for profiling (scoring)
We do not process your data with the aim of evaluating certain personal aspects (profiling). In the context of data collection by tracking services, your data will be used to evaluate your usage behavior and possibly to create movement profiles.