Privacy Policy
In case of doubt, the German version shall prevail.
1. Privacy at a Glance
General Information
The following information provides a brief overview of what happens to your personal data when you visit this website. Personal data means any information that can be used to identify you personally. Detailed information about data protection is provided in the privacy policy below.
Data Collection on This Website
Who is responsible for collecting data on this website?
Data processing on this website is carried out by the website operator. You can find their contact details in the section “Information on the Controller” of this privacy policy.
How do we collect your data?
Some data is collected when you provide it to us, for example information entered in a contact form.
Other data is collected automatically, or with your consent, by our IT systems when you visit the website. This primarily includes technical data such as your web browser, operating system or the time you accessed a page. This data is collected automatically when you visit the website.
What do we use your data for?
Some data is collected to ensure the website functions correctly. Other data may be used to analyze user behavior. If contracts can be concluded or initiated through the website, submitted data will also be processed for quotations, orders and other business inquiries.
What rights do you have regarding your data?
You have the right to obtain information free of charge, at any time, about the origin, recipients and purpose of your stored personal data. You also have the right to request correction or deletion of this data. If you have consented to data processing, you may withdraw that consent at any time with effect for the future. You may also request restriction of the processing of your personal data in certain circumstances. Furthermore, you have the right to lodge a complaint with the competent supervisory authority.
You can contact us at any time about these or other data protection questions.
2. Hosting
We host our website content with the following provider:
Strato
The provider is Strato AG, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany (hereinafter “Strato”). When you visit our website, Strato collects various server log files, including your IP addresses.
For further information, see the Strato privacy policy:
https://www.strato.de/datenschutz/.
We use Strato on the basis of Art. 6(1)(f) GDPR. We have a legitimate interest in ensuring the reliable presentation of our website. Where consent has been requested, processing takes place exclusively on the basis of Art. 6(1)(a) GDPR and Section 25(1) TDDDG, insofar as such consent covers storing cookies or accessing information on the user’s device (e.g., device fingerprinting) within the meaning of the TDDDG. Consent may be withdrawn at any time.
3. General Information and Mandatory Disclosures
Data Protection
The operators of this website take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data protection regulations and this privacy policy.
Various personal data is collected when you use this website. Personal data means information that can identify you personally. This privacy policy explains which data we collect, how we use it and for what purpose.
Please note that transmitting data over the internet (e.g., by email) may involve security vulnerabilities. Complete protection against third-party access cannot be guaranteed.
Information on the Controller
The controller responsible for data processing on this website is:
Philipp Herenz
Parkstr. 23c
59556 Lippstadt, Germany
Phone: +49 (0) 170 147 03 80
E-Mail: philipp@herenz.net
The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data (such as names and email addresses).
Data Retention
Unless a more specific retention period is stated in this privacy policy, we retain your personal data until the purpose of processing no longer applies. If you make a justified deletion request or withdraw your consent, we will delete your data unless other legally permissible reasons require us to retain it (for example, retention periods under tax or commercial law). In that case, the data will be deleted once those reasons no longer apply.
General Information on the Legal Bases for Data Processing on This Website
If you have consented to data processing, we process your personal data on the basis of Art. 6(1)(a) GDPR or, where special categories of personal data under Art. 9(1) GDPR are processed, Art. 9(2)(a) GDPR. Where you have expressly consented to the transfer of personal data to third countries, processing also takes place under Art. 49(1)(a) GDPR. If you have consented to storing cookies or accessing information on your device (e.g., through device fingerprinting), processing additionally takes place under Section 25(1) TDDDG. Consent may be withdrawn at any time. If your data is required to perform a contract or take pre-contractual steps, we process it under Art. 6(1)(b) GDPR. We also process personal data where necessary to comply with a legal obligation under Art. 6(1)(c) GDPR. Processing may further be based on our legitimate interests under Art. 6(1)(f) GDPR. The applicable legal bases are explained in the following sections of this privacy policy.
Recipients of Personal Data
In the course of our business activities, we work with various external parties. This may require personal data to be transferred to them. We only disclose personal data where necessary for contractual performance, where required by law (such as disclosure to tax authorities), where we have a legitimate interest under Art. 6(1)(f) GDPR or where another legal basis permits disclosure. When engaging processors, we disclose customer personal data only on the basis of a valid data processing agreement. Joint processing is governed by a joint controller agreement.
Withdrawal of Consent to Data Processing
Many processing activities are only possible with your express consent. You may withdraw consent you have already given at any time. The lawfulness of processing carried out before withdrawal remains unaffected.
Right to Object to Data Collection in Special Cases and to Direct Marketing (Art. 21 GDPR)
IF DATA PROCESSING IS BASED ON ART. 6(1)(E) OR (F) GDPR, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA AT ANY TIME ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION. THIS ALSO APPLIES TO PROFILING BASED ON THOSE PROVISIONS. THE APPLICABLE LEGAL BASIS IS SET OUT IN THIS PRIVACY POLICY. IF YOU OBJECT, WE WILL NO LONGER PROCESS THE PERSONAL DATA CONCERNED UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS THAT OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS, OR THE PROCESSING IS NECESSARY FOR THE ESTABLISHMENT, EXERCISE OR DEFENSE OF LEGAL CLAIMS (OBJECTION UNDER ART. 21(1) GDPR).
IF YOUR PERSONAL DATA IS PROCESSED FOR DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR SUCH MARKETING. THIS ALSO APPLIES TO PROFILING INSOFAR AS IT RELATES TO DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA WILL NO LONGER BE USED FOR DIRECT MARKETING (OBJECTION UNDER ART. 21(2) GDPR).
Right to Lodge a Complaint with a Supervisory Authority
In the event of GDPR violations, data subjects have the right to lodge a complaint with a supervisory authority, particularly in the EU Member State of their habitual residence, workplace or the location of the alleged infringement. This right is without prejudice to other administrative or judicial remedies.
Right to Data Portability
You have the right to receive data that we process automatically on the basis of your consent or in performance of a contract in a commonly used, machine-readable format, or to have it transferred to a third party. Direct transfer to another controller will only take place where technically feasible.
Access, Rectification and Erasure
Within the framework of applicable legal provisions, you have the right at any time to obtain free information about your stored personal data, its origin and recipients and the purpose of processing, and, where applicable, to request correction or deletion. Please contact us at any time with questions about personal data.
Right to Restriction of Processing
You have the right to request restriction of the processing of your personal data. You may contact us at any time. This right applies in the following cases:
- If you dispute the accuracy of your personal data stored by us, we generally need time to verify it. You may request restriction of processing during this verification.
- If your personal data has been or is being processed unlawfully, you may request restriction of processing instead of deletion.
- If we no longer need your personal data but you need it to establish, exercise or defend legal claims, you may request restriction of processing instead of deletion.
- If you have objected under Art. 21(1) GDPR, your interests must be weighed against ours. Until it has been determined whose interests prevail, you may request restriction of processing.
Where processing has been restricted, your personal data may, apart from storage, only be processed with your consent, for the establishment, exercise or defense of legal claims, to protect the rights of another natural or legal person, or for reasons of important public interest of the European Union or an EU Member State.
Source: eRecht24