In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC:
Processing of personal information
Your data is stored by us exclusively on specially protected servers within Germany. These are protected by extensive technical and organisational measures against loss, destruction, access, modification, dilution or dissemination of your data by unauthorised persons. Access to your data is only possible for a few selected, authorised, physically, morally and mentally suitable persons. These persons are responsible for the technical, commercial and/or editorial support of the servers.
Your personal data is transmitted in encrypted form over the Internet.
We use SSL encryption (Secure Socket Layer) for data transmission.
Disclosure of personal data to third parties, fourth parties or even fifth parties
As a matter of principle, we do not use your personal information and only use it to provide the services you have requested.
If external service providers are used by us in the course of providing the service, they will access the data exclusively for the purpose of providing the service.
We take technical and organisational measures to ensure full compliance with data protection regulations in accordance with the applicable requirements of the European Union's General Data Protection Regulation. If necessary, we also oblige our external service providers to do so without exception.
Furthermore, we do not pass on the data to third parties without your express consent, in particular not for advertising purposes. Your personal data will only be passed on if you yourself have consented to the data transfer
or if we are obliged to do so due to legal provisions and/or official or court orders. In particular, this may involve the provision of information for the purposes of
criminal prosecution and obstruction of justice, to avert danger or to enforce intellectual and non-intellectual property rights.
Legal basis for data processing
- Insofar as we obtain consent for the processing of your personal data, Art. 6 para. 1 lit. a) GDPR serves as the legal basis for data processing.
- Insofar as we process your personal data because this is necessary for the fulfilment of a contract or in the context of a quasi-contractual relationship with you, Art. 6 para. 1 lit. b) GDPR serves as the legal basis for data processing. Insofar as we process your personal data to fulfil a legal obligation, Art. 6 para. 1 lit. c) GDPR serves as the legal basis for data processing.
- Art. 6(1)(f) GDPR also serves as the legal basis for data processing if the processing of your personal data is necessary to safeguard a legitimate interest of our company or a third party and your interests, fundamental rights and freedoms do not require the protection of personal data.
As part of this privacy policy, we always indicate the legal basis on which we base the processing of your personal data.
Data erasure and storage duration
We always delete or block your personal data when the purpose of storage no longer applies or even by mistake. Data may only be stored beyond this if this is provided for by legal requirements to which we ourselves are subject, for example with regard to statutory retention and documentation obligations. In such a case, we delete or block your personal data after the end of the corresponding requirements.